last executing test programs: 16.190472056s ago: executing program 0 (id=5136): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt(r0, 0xff, 0x7f, &(0x7f0000000000)='|>\fV', 0x4) r1 = socket$netlink(0x10, 0x3, 0x15) preadv2(r1, &(0x7f0000000180)=[{&(0x7f0000000040)=""/37, 0x25}, {&(0x7f0000000080)=""/46, 0x2e}, {&(0x7f00000000c0)=""/131, 0x83}], 0x3, 0x1, 0x6, 0xe) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x30) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000200), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f0000000100)={0x7, {0xbe, 0x82c, 0xfc8}}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r5 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r5, 0x1000006) fcntl$addseals(r5, 0x409, 0x7) ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={r5, 0x0, 0x0, 0x1000000}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') read$FUSE(r6, &(0x7f0000000680)={0x2020}, 0x2020) sendmsg$nl_route(r2, 0x0, 0x44004) 13.77641851s ago: executing program 0 (id=5142): r0 = syz_open_procfs(0x0, &(0x7f00000006c0)='fdinfo/3\x00') pread64(r0, &(0x7f0000000140)=""/106, 0x6a, 0x1000007) ioctl$KVM_CHECK_EXTENSION_VM(r0, 0xae03, 0x6) r1 = socket$inet6(0xa, 0x3, 0x7) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000240)={0x1f, 0x2}, 0x6) getsockname(r2, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000140)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000180)={0x700, 0x1, &(0x7f00000000c0)=[r4], &(0x7f0000000180), &(0x7f0000000280)=[0x0], &(0x7f00000001c0), 0x0, 0x1}) write$bt_hci(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="000000281164b88beb00"], 0xa) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) setsockopt$inet6_int(r1, 0x29, 0x46, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r5) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000cc0)={0x2, {{0x2, 0x4e21, @multicast2}}, 0x1, 0xa00}, 0x8c) getsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f00000002c0), &(0x7f0000000300)=0x8) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r5, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a40)={0x68, r6, 0x1, 0x0, 0xffffffff, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond_slave_1\x00'}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x68}, 0x2, 0x34005}, 0x0) 9.32058411s ago: executing program 0 (id=5147): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xc}, {0x0, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x40}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240048e4}, 0x20040010) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 9.256819242s ago: executing program 1 (id=5148): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(r2, 0x0) setreuid(0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c000000260005"], 0x2c}}, 0x800) recvmmsg(r4, &(0x7f0000007700), 0x318, 0xfc0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x136) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000400000000000000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0xb6df4c32c1d5c814}, 0x94) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e23, @multicast2}}, [0x9e8, 0x7, 0x0, 0x7, 0x0, 0x5a305173, 0x10ff, 0xfffffffffffffff9, 0x8, 0x0, 0x4, 0x100, 0x6, 0x7, 0x7]}, &(0x7f0000000600)=0xfc) sendfile(r5, r5, 0x0, 0x23) 9.204567853s ago: executing program 3 (id=5150): setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x2, 0x0, &(0x7f0000000040)="5aee", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0xffff, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x80000007, 0xffffffffffffffff], 0x0, 0x6202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0x6, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000004, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8.254979394s ago: executing program 1 (id=5151): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0xfc) 7.965360791s ago: executing program 0 (id=5152): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0x0}, 0x50) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) r2 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$get_keyring_id(0x0, r2, 0x1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) 7.897072082s ago: executing program 2 (id=5153): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4004891) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000210001000000000000000000fe8000000000000000000000000000aa00"/60, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000b500000008001f000000000050001100fe80000800000000000000000000000000000000000000000000002000000000ff200000000000000000000000007b8d41fa9e1c4e20880a3f69285b000164010100020000000000000000000000000000000000000000000a00bc056e557a0ac0ac"], 0xa8}}, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x80000, 0x28c) socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x0, 0x100008b}, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x5, 0x3, 'P'}, @NFTA_MATCH_NAME={0xb, 0x1, 'socket\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$TCSETS(r3, 0x40384708, &(0x7f0000000080)={0x5, 0x1, 0x609152b0, 0x2, 0x2e, "53ccd200"}) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf01b}, {0x0}], 0x2) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8000, &(0x7f0000000080)=0x1d6f4194, 0xb, 0x3) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000008900)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000600)=""/233, 0xe9}], 0x1, &(0x7f0000000740)=""/236, 0xec}, 0xe5}, {{&(0x7f0000000880)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0, 0x0, &(0x7f0000000a40)=""/162, 0xa2}, 0xf8}, {{&(0x7f0000000b00)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, 0x0}, 0x6}, {{&(0x7f0000002000)=@phonet, 0x80, &(0x7f0000002300)=[{&(0x7f0000002080)}, {&(0x7f00000020c0)=""/38, 0x26}, {&(0x7f0000002100)=""/241, 0xf1}, {&(0x7f0000002200)=""/3, 0x3}, {&(0x7f0000002240)=""/163, 0xa3}], 0x5, &(0x7f00000047c0)=""/4096, 0x1000}, 0x3}, {{&(0x7f00000057c0)=@l2tp, 0x80, &(0x7f0000005b40)=[{&(0x7f0000005840)=""/54, 0x36}, {&(0x7f0000005900)=""/190, 0xbe}, {&(0x7f0000005a00)=""/190, 0xbe}, {&(0x7f0000005ac0)=""/73, 0x49}], 0x4, &(0x7f0000005b80)}, 0x1}, {{&(0x7f0000005bc0)=@tipc, 0x80, &(0x7f0000005d40)=[{&(0x7f0000005c40)=""/108, 0x6c}], 0x1, &(0x7f0000005d80)=""/182, 0xb6}, 0x10}, {{&(0x7f0000007300)=@x25={0x9, @remote}, 0x80, &(0x7f0000007640)=[{0x0}, {0x0}], 0x2, &(0x7f0000007680)=""/114, 0x72}, 0x7}], 0x7, 0x1, &(0x7f0000008a80)) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', 0x0, 0x8002, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="04050400c8001443a9f6a39a4102c90569311618276faaa1a57d767370291b40957c5557a4f47f70e62771dd3c08e804ce90f7bc5bed779a8071c344031c4993b1dc6551479467d1a70d1517d47646d468bee49c58e5b6221806ba75d37c21da2bcdf3de01ecbc7d272ccb7574600ac17d"], 0x7) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="44cbd04f93aac475e6636e8e71cd79a686c093a9a88c92e85c38f5337969", 0x1e}, {&(0x7f00000003c0)="4bf186804a8f016bb7517086d7d7d8127b8e81927ff67e3a5109ce9099d69ebaff307cb93dd068e7c9373f73faea9a299bd6746679b13eb7ef8cc846c41efdfb441b377bc9f7e1a55c080000004682e8c3eb8d59de80733c103f88972488f8c2d53fbd63a8c87acb62b5367eb797f858b7bcd3d32dedd9909e9d08710b4038bca9c087cb800ab5a3834bc729dcd8871d0b4dce4fee97cc5e6d62b4d731f19763c9d253af101f8b81c5673164de9f7971b8dbc731ccd4d5be9015acef77724a4e021505819d28142568d010236b35a4927b54376469ebe3b663272485c9cb44329204be97bbd34a5be42229c3c6", 0xed}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000080)=0x3, 0x12) 7.841694574s ago: executing program 3 (id=5154): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x2000000b, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x55, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x54000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20040085}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) ftruncate(0xffffffffffffffff, 0x8800000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, 0x0}, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x1) 7.031162822s ago: executing program 2 (id=5155): mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x6, &(0x7f0000000000)=0x9, 0x8, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') io_uring_enter(0xffffffffffffffff, 0x101, 0x11, 0x5, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x5400, 0x3f00) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="040e032fc800"], 0x6) 6.948024204s ago: executing program 0 (id=5156): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x810) close(r1) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r3, 0x18}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000001c0)="27030200", 0x4}], 0x1}, 0x4005) 6.762539718s ago: executing program 2 (id=5157): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x1b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r0, 0x18000000000002a0, 0xe80, 0x17a0, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e00806200000000002000aac141417e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 6.597882772s ago: executing program 2 (id=5158): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'dummy0\x00', &(0x7f0000000200)=@ethtool_pauseparam={0x13, 0xfffeffff, 0x7fff, 0x8436}}) 6.143840572s ago: executing program 3 (id=5159): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() setrlimit(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000340)={0x24, @short={0x2, 0x1}}, 0x14) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x3f, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f0000000340)}) mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000200)='ext2\x00', 0x21000d, 0x0) syz_80211_join_ibss(&(0x7f0000000280)='wlan0\x00', &(0x7f0000000300)=@default_ibss_ssid, 0x6, 0x1) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x100, 0x0, 0x25dfdbfb, {{@in6=@mcast1, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x4, 0x0, 0xf9, 0xa, 0x60, 0x20, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x2000000000000, 0x40, 0xffffffffffffeffd, 0x50}, {0x5}, 0x5, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x850) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc00000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 6.054281844s ago: executing program 1 (id=5160): set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8, 0x1a, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) r1 = syz_open_dev$dri(0x0, 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000440)={0x0, &(0x7f0000000380), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_DIRTYFB(r1, 0xc01864b1, &(0x7f0000000300)={0x0, 0x0, 0x6, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) connect$inet(r3, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r4, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) syz_open_pts(r4, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$UBLK_U_CMD_START_DEV(0xffffffffffffffff, 0xc0207506, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000080}, 0x8000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xfffc}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000090601020000000000000000150000000900020073797a31000000000500010007000000280007800a00110010030000000000001800018014000240"], 0x50}, 0x1, 0x0, 0x0, 0x3004c047}, 0x4000050) 1.325478531s ago: executing program 1 (id=5161): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(r2, 0x0) setreuid(0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) bind$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r3, 0x40045612, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x2c}}, 0x800) recvmmsg(r4, &(0x7f0000007700), 0x318, 0xfc0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800000, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x136) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180800000000000400000000000000008510000003000000180000000000000000000000000000009500000000000000bfa000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0xb6df4c32c1d5c814}, 0x94) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e23, @multicast2}}, [0x9e8, 0x7, 0x0, 0x7, 0x0, 0x5a305173, 0x10ff, 0xfffffffffffffff9, 0x8, 0x0, 0x4, 0x100, 0x6, 0x7, 0x7]}, &(0x7f0000000600)=0xfc) sendfile(r5, r5, 0x0, 0x23) 1.197716913s ago: executing program 2 (id=5162): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xc}, {0x0, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x40}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240048e4}, 0x20040010) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 1.180428104s ago: executing program 3 (id=5163): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4004891) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="a8000000210001000000000000000000fe8000000000000000000000000000aa00"/60, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000b500000008001f000000000050001100fe80000800000000000000000000000000000000000000000000002000000000ff200000000000000000000000007b8d41fa9e1c4e20880a3f69285b000164010100020000000000000000000000000000000000000000000a00bc056e557a0ac0ac"], 0xa8}}, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x80000, 0x28c) socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x0, 0x100008b}, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x5, 0x3, 'P'}, @NFTA_MATCH_NAME={0xb, 0x1, 'socket\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$TCSETS(r3, 0x40384708, &(0x7f0000000080)={0x5, 0x1, 0x609152b0, 0x2, 0x2e, "53ccd200"}) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf01b}, {0x0}], 0x2) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8000, &(0x7f0000000080)=0x1d6f4194, 0xb, 0x3) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000008900)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000600)=""/233, 0xe9}], 0x1, &(0x7f0000000740)=""/236, 0xec}, 0xe5}, {{&(0x7f0000000880)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, 0x0, 0x0, &(0x7f0000000a40)=""/162, 0xa2}, 0xf8}, {{&(0x7f0000000b00)=@pptp={0x18, 0x2, {0x0, @dev}}, 0x80, 0x0}, 0x6}, {{&(0x7f0000002000)=@phonet, 0x80, &(0x7f0000002300)=[{&(0x7f0000002080)}, {&(0x7f00000020c0)=""/38, 0x26}, {&(0x7f0000002100)=""/241, 0xf1}, {&(0x7f0000002200)=""/3, 0x3}, {&(0x7f0000002240)=""/163, 0xa3}], 0x5, &(0x7f00000047c0)=""/4096, 0x1000}, 0x3}, {{&(0x7f00000057c0)=@l2tp, 0x80, &(0x7f0000005b40)=[{&(0x7f0000005840)=""/54, 0x36}, {&(0x7f0000005900)=""/190, 0xbe}, {&(0x7f0000005a00)=""/190, 0xbe}, {&(0x7f0000005ac0)=""/73, 0x49}], 0x4, &(0x7f0000005b80)}, 0x1}, {{&(0x7f0000005bc0)=@tipc, 0x80, &(0x7f0000005d40)=[{&(0x7f0000005c40)=""/108, 0x6c}], 0x1, &(0x7f0000005d80)=""/182, 0xb6}, 0x10}, {{&(0x7f0000007300)=@x25={0x9, @remote}, 0x80, &(0x7f0000007640)=[{0x0}, {0x0}], 0x2, &(0x7f0000007680)=""/114, 0x72}, 0x7}], 0x7, 0x1, &(0x7f0000008a80)) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', 0x0, 0x8002, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="04050400c8001443a9f6a39a4102c90569311618276faaa1a57d767370291b40957c5557a4f47f70e62771dd3c08e804ce90f7bc5bed779a8071c344031c4993b1dc6551479467d1a70d1517d47646d468bee49c58e5b6221806ba75d37c21da2bcdf3de01ecbc7d272ccb7574600ac17d"], 0x7) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="44cbd04f93aac475e6636e8e71cd79a686c093a9a88c92e85c38f5337969", 0x1e}, {&(0x7f00000003c0)="4bf186804a8f016bb7517086d7d7d8127b8e81927ff67e3a5109ce9099d69ebaff307cb93dd068e7c9373f73faea9a299bd6746679b13eb7ef8cc846c41efdfb441b377bc9f7e1a55c080000004682e8c3eb8d59de80733c103f88972488f8c2d53fbd63a8c87acb62b5367eb797f858b7bcd3d32dedd9909e9d08710b4038bca9c087cb800ab5a3834bc729dcd8871d0b4dce4fee97cc5e6d62b4d731f19763c9d253af101f8b81c5673164de9f7971b8dbc731ccd4d5be9015acef77724a4e021505819d28142568d010236b35a4927b54376469ebe3b663272485c9cb44329204be97bbd34a5be42229c3c6", 0xed}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000080)=0x3, 0x12) 1.102485635s ago: executing program 0 (id=5164): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000040000"], 0x48) r2 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x13) tkill(r2, 0x12) waitid(0x0, 0x0, 0x0, 0x100000e, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@generic={&(0x7f00000004c0)='./file1\x00', 0x0, 0x10}, 0x14) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c40)={0x6, 0x23, &(0x7f0000000840)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x7, 0x3a, &(0x7f00000009c0)=""/58, 0x40f00, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000a40)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000a80)={0x5, 0xc, 0x3, 0xfc000000}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[r1, 0xffffffffffffffff, 0xffffffffffffffff, r3], 0x0, 0x10, 0x1}, 0x94) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4038587a, &(0x7f0000000740)={{r1, &(0x7f0000000500)='),.\']:::\x00', 0x0, &(0x7f0000000540)={@_ha_fsid={[0xa, 0x3]}, {0x6, 0x2, 0x1, 0x2}}, 0x4, &(0x7f0000000580), 0x0}, {[0x9, 0x10000, 0x2, 0x12]}, 0x5, 0xdf, &(0x7f0000000640)=""/223}) ioctl$EVIOCGEFFECTS(r7, 0x80044584, 0x0) r8 = syz_open_procfs(0x0, 0x0) writev(r8, &(0x7f0000000100)=[{0x0}], 0x1) io_setup(0x482, &(0x7f0000000600)=0x0) io_submit(r9, 0x1, &(0x7f0000001300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x7, r6, 0x0}]) write$tun(r5, &(0x7f0000003480)=ANY=[], 0x1116) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x18, 0x30, 0x871a15abc695fb3d, 0x200, 0x25dfdbff, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000005c0)=ANY=[@ANYRES8, @ANYRES8=r4, @ANYRESDEC], 0x18}, 0x1, 0x0, 0x0, 0x4000844}, 0x805) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r10 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r10, &(0x7f0000000c40), 0x0, 0x8014) 825.822862ms ago: executing program 1 (id=5165): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) syz_open_dev$sg(0x0, 0x0, 0x2) socket$netlink(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r2, @ANYBLOB="08002600901500000800570080"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0xc044) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[], 0x2c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r5, &(0x7f0000000200)={0x0, 0x600, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010029bd7000ffdbdf250800000008000300", @ANYRES32=r7], 0x28}, 0x1, 0x0, 0x0, 0x4cca9349ed9d3bc}, 0x848) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) 635.404986ms ago: executing program 3 (id=5166): sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, 0x0, 0x44) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000)=0xb6, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@multicast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x4e21, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2600fcffffbc43efa8698d0a881c51852e4451b57d037ad3c0459428242588eb17b53ae414015acd00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"1e28e0e1f39cb3239b472eb9cdb042d2", "743fcbb2c5e304000000000000dafe09"}}}}}}}, 0x0) 482.426069ms ago: executing program 2 (id=5167): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x2000000b, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x55, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x54000}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20040085}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) ftruncate(0xffffffffffffffff, 0x8800000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, 0x0}, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f00000000c0)={0x1d, r4}, 0x10) sendmsg$can_bcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x1) 226.065835ms ago: executing program 3 (id=5168): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0xfc) 0s ago: executing program 1 (id=5169): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x402) fsmount(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0x6, 0x0, 0x1fd, 0x7d, 0xfffffffffffffffd, 0x7f, 0x104, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xae07, 0x9, 0x4, 0x15, 0x80000006, 0x8}, 0x0, 0x0) kernel console output (not intermixed with test programs): 602.935785][T18034] usb 2-1: New USB device found, idVendor=15c2, idProduct=0046, bcdDevice=34.dc [ 1602.945235][T18034] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1602.953852][T18034] usb 2-1: Product: syz [ 1602.958299][T18034] usb 2-1: Manufacturer: syz [ 1602.963021][T18034] usb 2-1: SerialNumber: syz [ 1602.971223][T18034] usb 2-1: config 0 descriptor?? [ 1604.864871][T18034] imon 2-1:0.84: unable to register, err -19 [ 1604.878056][T20718] netlink: 'syz.0.4314': attribute type 1 has an invalid length. [ 1604.882211][T18034] usb 2-1: USB disconnect, device number 33 [ 1604.956359][T20726] overlayfs: failed to clone lowerpath [ 1604.968171][T20718] netlink: 232 bytes leftover after parsing attributes in process `syz.0.4314'. [ 1604.999068][T20726] overlayfs: failed to clone lowerpath [ 1606.060770][T20733] fuse: Bad value for 'fd' [ 1606.228547][T20740] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4320'. [ 1606.561639][ T11] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1607.414713][T20750] tipc: Started in network mode [ 1607.443267][T20750] tipc: Node identity 86ebed7c2d3e, cluster identity 4711 [ 1607.491383][T20750] tipc: Enabled bearer , priority 0 [ 1607.626977][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.637213][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.655391][T20748] tipc: Disabling bearer [ 1607.787866][T18048] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1607.979850][T18048] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1607.996716][T18048] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1608.007165][T18048] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1608.025635][T18048] usb 1-1: config 0 descriptor?? [ 1608.238273][T16886] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 1608.261031][T20753] ubi: mtd0 is already attached to ubi0 [ 1608.278956][T18048] usb 1-1: USB disconnect, device number 36 [ 1608.440493][T20778] overlayfs: failed to clone lowerpath [ 1608.460607][T16886] usb 4-1: config 0 has an invalid interface number: 84 but max is 0 [ 1608.483230][T20778] overlayfs: failed to clone lowerpath [ 1608.488405][T16886] usb 4-1: config 0 has no interface number 0 [ 1608.503249][T16886] usb 4-1: config 0 interface 84 has no altsetting 0 [ 1608.520502][T16886] usb 4-1: New USB device found, idVendor=15c2, idProduct=0046, bcdDevice=34.dc [ 1608.548860][T16886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1608.565103][T16886] usb 4-1: Product: syz [ 1608.577806][T16886] usb 4-1: Manufacturer: syz [ 1608.582497][T16886] usb 4-1: SerialNumber: syz [ 1608.596235][T16886] usb 4-1: config 0 descriptor?? [ 1608.617098][T20781] fuse: Bad value for 'fd' [ 1609.633231][T16886] imon 4-1:0.84: unable to register, err -19 [ 1609.678904][T16886] usb 4-1: USB disconnect, device number 38 [ 1609.711219][T20790] xt_socket: unknown flags 0x50 [ 1609.881471][T20793] tipc: Started in network mode [ 1609.886423][T20793] tipc: Node identity 92e3facdd17c, cluster identity 4711 [ 1609.895101][T20793] tipc: Enabled bearer , priority 0 [ 1610.654026][T20792] tipc: Disabling bearer [ 1610.994831][T20803] netlink: 100 bytes leftover after parsing attributes in process `syz.3.4336'. [ 1611.070825][T20806] random: crng reseeded on system resumption [ 1611.715191][T20811] fuse: Bad value for 'fd' [ 1612.667977][T16886] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 1613.335827][T16886] usb 4-1: config 0 has an invalid interface number: 84 but max is 0 [ 1613.376935][T16886] usb 4-1: config 0 has no interface number 0 [ 1613.463184][T16886] usb 4-1: config 0 interface 84 has no altsetting 0 [ 1613.478034][T16886] usb 4-1: New USB device found, idVendor=15c2, idProduct=0046, bcdDevice=34.dc [ 1613.487169][T16886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1613.495638][T16886] usb 4-1: Product: syz [ 1613.500197][T16886] usb 4-1: Manufacturer: syz [ 1613.504847][T16886] usb 4-1: SerialNumber: syz [ 1613.518556][T16886] usb 4-1: config 0 descriptor?? [ 1613.520544][T20831] xt_socket: unknown flags 0x50 [ 1613.760891][T16886] imon 4-1:0.84: unable to register, err -19 [ 1613.839044][T16886] usb 4-1: USB disconnect, device number 39 [ 1614.092997][T20846] random: crng reseeded on system resumption [ 1615.372872][T20858] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 1616.363929][T20867] xt_socket: unknown flags 0x50 [ 1617.766131][T20880] tipc: Enabling of bearer rejected, failed to enable media [ 1618.102582][T16886] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 1618.360752][T16886] usb 2-1: config 0 has an invalid interface number: 84 but max is 0 [ 1618.388715][T16886] usb 2-1: config 0 has no interface number 0 [ 1618.390051][T20892] nbd3: detected capacity change from 0 to 63 [ 1618.399840][T16886] usb 2-1: config 0 interface 84 has no altsetting 0 [ 1618.416192][T16886] usb 2-1: New USB device found, idVendor=15c2, idProduct=0046, bcdDevice=34.dc [ 1618.432764][T16886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1618.442582][T16886] usb 2-1: Product: syz [ 1618.447412][T14470] block nbd3: Receive control failed (result -104) [ 1618.448198][T13755] block nbd3: Send control failed (result -32) [ 1618.462418][T13755] block nbd3: Request send failed, requeueing [ 1618.464841][T16886] usb 2-1: Manufacturer: syz [ 1618.474815][T16886] usb 2-1: SerialNumber: syz [ 1618.479471][ T8499] block nbd3: Dead connection, failed to find a fallback [ 1618.492544][ T8499] block nbd3: shutting down sockets [ 1618.498871][ T8499] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1618.498961][T19741] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2 [ 1618.511854][ T8499] Buffer I/O error on dev nbd3, logical block 1, async page read [ 1618.527784][T19741] Buffer I/O error on dev nbd3, logical block 2, async page read [ 1618.539513][T19741] Buffer I/O error on dev nbd3, logical block 3, async page read [ 1618.551457][T16886] usb 2-1: config 0 descriptor?? [ 1618.591710][T20895] fuse: Bad value for 'fd' [ 1618.870329][T16886] imon 2-1:0.84: unable to register, err -19 [ 1618.946367][T16886] usb 2-1: USB disconnect, device number 34 [ 1619.327516][T20906] xt_socket: unknown flags 0x50 [ 1620.992814][T20904] netlink: 'syz.2.4368': attribute type 1 has an invalid length. [ 1621.169415][T20904] netlink: 232 bytes leftover after parsing attributes in process `syz.2.4368'. [ 1622.720501][T20935] fuse: Bad value for 'fd' [ 1622.939627][T20938] xt_socket: unknown flags 0x50 [ 1623.367864][ T5849] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 1623.582867][ T5849] usb 1-1: config 0 has an invalid interface number: 84 but max is 0 [ 1623.612388][ T5849] usb 1-1: config 0 has no interface number 0 [ 1623.634773][ T5849] usb 1-1: config 0 interface 84 has no altsetting 0 [ 1623.662245][ T5849] usb 1-1: New USB device found, idVendor=15c2, idProduct=0046, bcdDevice=34.dc [ 1623.686787][ T5849] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1623.753777][ T5849] usb 1-1: Product: syz [ 1623.777737][ T5849] usb 1-1: Manufacturer: syz [ 1623.819342][ T5849] usb 1-1: SerialNumber: syz [ 1623.852755][ T5849] usb 1-1: config 0 descriptor?? [ 1624.149612][ T5849] imon 1-1:0.84: unable to register, err -19 [ 1624.241808][T20955] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1624.256155][ T5849] usb 1-1: USB disconnect, device number 37 [ 1624.266134][T20955] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1624.277404][T20955] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1624.297291][T20955] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1624.305530][T20955] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1624.313680][T20955] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1624.543307][T20952] lo speed is unknown, defaulting to 1000 [ 1626.539824][T20955] Bluetooth: hci2: command tx timeout [ 1627.474996][T20986] Bluetooth: hci0: unsupported parameter 255 [ 1627.485205][T20986] Bluetooth: hci0: unsupported parameter 255 [ 1627.833303][T20952] chnl_net:caif_netlink_parms(): no params data found [ 1627.903919][T18049] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 1628.229200][T18049] usb 4-1: config 0 has an invalid interface number: 84 but max is 0 [ 1628.579264][T20955] Bluetooth: hci2: command tx timeout [ 1629.100658][T20952] bridge0: port 1(bridge_slave_0) entered blocking state [ 1629.125381][T20952] bridge0: port 1(bridge_slave_0) entered disabled state [ 1629.168026][T20952] bridge_slave_0: entered allmulticast mode [ 1629.196728][T20952] bridge_slave_0: entered promiscuous mode [ 1629.233410][T20952] bridge0: port 2(bridge_slave_1) entered blocking state [ 1629.261735][T20952] bridge0: port 2(bridge_slave_1) entered disabled state [ 1629.283684][T20952] bridge_slave_1: entered allmulticast mode [ 1629.312627][T20952] bridge_slave_1: entered promiscuous mode [ 1629.741167][T20952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1629.843234][T20952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1630.161581][T20952] team0: Port device team_slave_0 added [ 1630.187395][T18049] usb 4-1: config 0 has no interface number 0 [ 1630.235540][T20952] team0: Port device team_slave_1 added [ 1630.251126][T18049] usb 4-1: config 0 interface 84 has no altsetting 0 [ 1630.263243][T18049] usb 4-1: New USB device found, idVendor=15c2, idProduct=0046, bcdDevice=34.dc [ 1630.272856][T18049] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1630.281231][T18049] usb 4-1: Product: syz [ 1630.285707][T18049] usb 4-1: Manufacturer: syz [ 1630.290789][T18049] usb 4-1: SerialNumber: syz [ 1630.298274][T18049] usb 4-1: config 0 descriptor?? [ 1630.510332][T20952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1630.534224][T20952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1630.541681][T18049] imon 4-1:0.84: unable to register, err -19 [ 1630.585557][T20952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1630.619801][T18049] usb 4-1: USB disconnect, device number 40 [ 1630.651577][T20952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1630.659238][T20955] Bluetooth: hci2: command tx timeout [ 1630.691176][T20952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1630.730951][T20952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1631.208276][T20952] hsr_slave_0: entered promiscuous mode [ 1631.220607][T20952] hsr_slave_1: entered promiscuous mode [ 1631.333393][T21034] Bluetooth: hci0: unsupported parameter 255 [ 1631.357341][T21034] Bluetooth: hci0: unsupported parameter 255 [ 1631.579289][T21036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4401'. [ 1631.892614][ T1080] hsr_slave_0: left promiscuous mode [ 1631.908065][ T1080] hsr_slave_1: left promiscuous mode [ 1631.927707][ T1080] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1631.939312][ T1080] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1632.739540][T20955] Bluetooth: hci2: command tx timeout [ 1632.907822][ T5849] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 1633.126505][ T5849] usb 4-1: config 0 has an invalid interface number: 84 but max is 0 [ 1633.145282][ T5849] usb 4-1: config 0 has no interface number 0 [ 1633.175830][ T5849] usb 4-1: config 0 interface 84 has no altsetting 0 [ 1633.195597][ T5849] usb 4-1: New USB device found, idVendor=15c2, idProduct=0046, bcdDevice=34.dc [ 1633.215473][ T5849] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1633.246928][ T5849] usb 4-1: Product: syz [ 1633.257784][ T5849] usb 4-1: Manufacturer: syz [ 1633.262466][ T5849] usb 4-1: SerialNumber: syz [ 1633.293647][ T5849] usb 4-1: config 0 descriptor?? [ 1633.525371][ T5849] imon 4-1:0.84: unable to register, err -19 [ 1633.544226][ T5849] usb 4-1: USB disconnect, device number 41 [ 1634.068441][ T1080] team0 (unregistering): Port device team_slave_1 removed [ 1634.221346][ T1080] team0 (unregistering): Port device team_slave_0 removed [ 1634.277325][T21094] Bluetooth: hci0: invalid length 0, exp 2 for type 17 [ 1634.360472][ T1080] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1635.246548][ T1080] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1636.040237][ T1080] bond0 (unregistering): Released all slaves [ 1636.181825][T21100] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1636.193112][T21100] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1636.202992][T21100] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1636.577732][T18049] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 1636.821323][T18049] usb 2-1: config 0 has an invalid interface number: 84 but max is 0 [ 1636.840388][T18049] usb 2-1: config 0 has no interface number 0 [ 1636.846596][T18049] usb 2-1: config 0 interface 84 has no altsetting 0 [ 1636.869500][T18049] usb 2-1: New USB device found, idVendor=15c2, idProduct=0046, bcdDevice=34.dc [ 1636.888756][T18049] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1636.905818][T18049] usb 2-1: Product: syz [ 1637.186946][ T1080] IPVS: stop unused estimator thread 0... [ 1637.205334][T18049] usb 2-1: Manufacturer: syz [ 1637.210555][T18049] usb 2-1: SerialNumber: syz [ 1637.224829][T18049] usb 2-1: config 0 descriptor?? [ 1637.476292][T18049] imon 2-1:0.84: unable to register, err -19 [ 1637.503736][T18049] usb 2-1: USB disconnect, device number 35 [ 1637.675923][T20952] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1637.691285][T20952] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1637.708112][T20952] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1637.719925][T20952] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1637.825348][T20952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1637.874019][T20952] 8021q: adding VLAN 0 to HW filter on device team0 [ 1637.902842][ T6206] bridge0: port 1(bridge_slave_0) entered blocking state [ 1637.910017][ T6206] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1637.937893][ T6206] bridge0: port 2(bridge_slave_1) entered blocking state [ 1637.945125][ T6206] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1638.350299][T15133] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1638.430894][T21155] syzkaller0: entered promiscuous mode [ 1638.437269][T21155] syzkaller0: entered allmulticast mode [ 1638.466071][T20952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1639.425385][T20952] veth0_vlan: entered promiscuous mode [ 1639.487054][T20952] veth1_vlan: entered promiscuous mode [ 1639.615194][T21167] syzkaller0: entered promiscuous mode [ 1639.654657][T21167] syzkaller0: entered allmulticast mode [ 1640.024605][T20952] veth0_macvtap: entered promiscuous mode [ 1640.073640][T20952] veth1_macvtap: entered promiscuous mode [ 1640.223338][T20952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1640.285737][T20952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1640.342657][T20952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1640.394769][T20952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1640.421757][T20952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1640.468322][T20952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1640.498036][T20952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1640.527969][T20952] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1640.550512][T20952] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1640.588874][T20952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1640.608246][T18049] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 1640.628099][T20952] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1640.643164][T20952] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1640.652772][T20952] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1640.661698][T20952] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1640.817086][T18049] usb 2-1: config 0 has an invalid interface number: 84 but max is 0 [ 1640.835639][T15133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1640.836534][T18049] usb 2-1: config 0 has no interface number 0 [ 1640.866185][T15133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1640.877005][T18049] usb 2-1: config 0 interface 84 has no altsetting 0 [ 1640.891934][T18049] usb 2-1: New USB device found, idVendor=15c2, idProduct=0046, bcdDevice=34.dc [ 1641.078102][T21193] netlink: 'syz.0.4430': attribute type 10 has an invalid length. [ 1641.091902][T21193] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4430'. [ 1641.144439][T18049] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1641.167805][T18049] usb 2-1: Product: syz [ 1641.172052][T18049] usb 2-1: Manufacturer: syz [ 1641.176680][T18049] usb 2-1: SerialNumber: syz [ 1641.469688][T18049] usb 2-1: config 0 descriptor?? [ 1641.487074][ T2946] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1641.526532][ T2946] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1641.708247][T18049] imon 2-1:0.84: unable to register, err -19 [ 1641.745206][T18049] usb 2-1: USB disconnect, device number 36 [ 1643.488803][T21236] syzkaller0: entered promiscuous mode [ 1643.494529][T21236] syzkaller0: entered allmulticast mode [ 1643.521178][T21240] binder: 21239:21240 ioctl c0306201 2000000003c0 returned -14 [ 1643.659466][T21248] syz1: rxe_newlink: already configured on lo [ 1644.832970][T21262] syzkaller0: entered promiscuous mode [ 1644.843009][T21262] syzkaller0: entered allmulticast mode [ 1645.057983][T18048] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 1645.274204][T18048] usb 1-1: config 0 has an invalid interface number: 84 but max is 0 [ 1645.445933][T18048] usb 1-1: config 0 has no interface number 0 [ 1645.456496][T18048] usb 1-1: config 0 interface 84 has no altsetting 0 [ 1645.473167][T18048] usb 1-1: New USB device found, idVendor=15c2, idProduct=0046, bcdDevice=34.dc [ 1645.485343][T18048] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1645.494593][T18048] usb 1-1: Product: syz [ 1645.499999][T18048] usb 1-1: Manufacturer: syz [ 1645.504967][T18048] usb 1-1: SerialNumber: syz [ 1645.530548][T18048] usb 1-1: config 0 descriptor?? [ 1645.781727][T18048] imon 1-1:0.84: unable to register, err -19 [ 1645.792639][T18048] usb 1-1: USB disconnect, device number 38 [ 1645.850507][T21290] binder: 21289:21290 ioctl c0306201 2000000003c0 returned -14 [ 1646.081800][T21298] (null): rxe_set_mtu: Set mtu to 4096 [ 1646.087523][T21298] rdma_rxe: rxe_newlink: failed to add lo [ 1648.533485][T21319] syzkaller0: entered promiscuous mode [ 1648.543894][T21319] syzkaller0: entered allmulticast mode [ 1648.647636][ T8499] block nbd3: Possible stuck request ffff888022520000: control (read@0,1024B). Runtime 30 seconds [ 1649.547254][T21345] binder: 21344:21345 ioctl c0306201 2000000003c0 returned -14 [ 1650.086660][T21359] (null): rxe_set_mtu: Set mtu to 4096 [ 1650.097302][T21359] rdma_rxe: rxe_newlink: failed to add lo [ 1650.938451][T21362] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 1651.604234][T21379] binder: 21378:21379 ioctl c0306201 2000000003c0 returned -14 [ 1652.866449][T21393] syzkaller0: entered promiscuous mode [ 1652.887783][T21393] syzkaller0: entered allmulticast mode [ 1652.896612][T21394] xt_socket: unknown flags 0x50 [ 1653.641520][T21403] ERROR: device name not specified. [ 1653.665374][T21403] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4476'. [ 1653.780586][T21406] (null): rxe_set_mtu: Set mtu to 4096 [ 1653.825539][T21406] rdma_rxe: rxe_newlink: failed to add lo [ 1654.016661][ T23] IPVS: starting estimator thread 0... [ 1654.148463][T21414] IPVS: using max 25 ests per chain, 60000 per kthread [ 1656.653747][T21424] binder: 21423:21424 ioctl c0306201 2000000003c0 returned -14 [ 1657.574870][T21434] xt_socket: unknown flags 0x50 [ 1658.382540][T21445] xt_socket: unknown flags 0x50 [ 1658.693854][T21451] syz1: rxe_newlink: already configured on lo [ 1659.266897][T21456] syzkaller0: entered promiscuous mode [ 1659.284751][T21460] fuse: Bad value for 'fd' [ 1659.301186][T21456] syzkaller0: entered allmulticast mode [ 1660.204595][T21472] xt_socket: unknown flags 0x50 [ 1661.140361][T21482] (null): rxe_set_mtu: Set mtu to 4096 [ 1661.146153][T21482] rdma_rxe: rxe_newlink: failed to add lo [ 1661.937918][ T23] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1662.239616][T21502] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 1662.416072][T21502] syz1: rxe_set_mtu: Set mtu to 1024 [ 1662.429741][ T23] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1662.439111][ T23] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1662.450870][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1662.476578][ T23] usb 4-1: config 0 descriptor?? [ 1662.807236][T18048] usb 4-1: USB disconnect, device number 42 [ 1662.871235][T21507] random: crng reseeded on system resumption [ 1665.701279][T21525] fuse: Bad value for 'fd' [ 1666.466270][T21537] (null): rxe_set_mtu: Set mtu to 4096 [ 1666.472605][T21537] rdma_rxe: rxe_newlink: failed to add lo [ 1666.717692][T18049] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1666.921595][T18049] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1666.931495][T18049] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1666.941465][T18049] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1666.970077][T18049] usb 3-1: config 0 descriptor?? [ 1667.306391][T21548] ubi: mtd0 is already attached to ubi0 [ 1667.343525][T16886] usb 3-1: USB disconnect, device number 16 [ 1668.089017][T21550] random: crng reseeded on system resumption [ 1669.073154][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.216797][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.815340][T21569] bond_slave_0: mtu less than device minimum [ 1669.883267][T21570] (null): rxe_set_mtu: Set mtu to 4096 [ 1669.883565][T21570] rdma_rxe: rxe_newlink: failed to add lo [ 1670.005440][T21565] tty tty25: ldisc open failed (-12), clearing slot 24 [ 1670.343939][ T1080] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1671.540140][T21589] syzkaller0: entered promiscuous mode [ 1671.546644][T21589] syzkaller0: entered allmulticast mode [ 1671.557871][T16889] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1671.760566][T16889] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1671.788081][T16889] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1671.798092][T16889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1671.824717][T16889] usb 1-1: config 0 descriptor?? [ 1672.048279][T21584] ubi: mtd0 is already attached to ubi0 [ 1672.059746][T18047] usb 1-1: USB disconnect, device number 39 [ 1672.357909][T21605] (null): rxe_set_mtu: Set mtu to 4096 [ 1672.380709][T21605] rdma_rxe: rxe_newlink: failed to add lo [ 1674.305298][T21622] xt_socket: unknown flags 0x50 [ 1675.292817][T21629] (null): rxe_set_mtu: Set mtu to 4096 [ 1675.319055][T21629] rdma_rxe: rxe_newlink: failed to add lo [ 1675.489083][T21632] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 1675.788333][T16889] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1675.884792][T21641] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4550'. [ 1676.409080][T16889] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1676.422563][T16889] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1676.452135][T16889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1676.475934][T16889] usb 1-1: config 0 descriptor?? [ 1676.707864][T21633] ubi: mtd0 is already attached to ubi0 [ 1676.715512][T16889] usb 1-1: USB disconnect, device number 40 [ 1676.903929][T21643] hub 8-0:1.0: USB hub found [ 1676.914092][T21643] hub 8-0:1.0: 1 port detected [ 1676.972923][T21643] erofs: (device nbd1): erofs_read_superblock: cannot find valid erofs superblock [ 1677.089673][T21646] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1677.127442][T21646] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1677.176144][T21646] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1677.214918][T21646] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 1678.417533][T21657] xt_socket: unknown flags 0x50 [ 1679.788441][T13755] block nbd3: Possible stuck request ffff888022520000: control (read@0,1024B). Runtime 60 seconds [ 1679.816566][T21665] (null): rxe_set_mtu: Set mtu to 1024 [ 1679.850863][T21665] rdma_rxe: rxe_newlink: failed to add lo [ 1680.252939][T21677] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4560'. [ 1680.367959][T16889] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1680.569646][T16889] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1680.588398][T16889] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1680.608319][T16889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1680.639072][T16889] usb 3-1: config 0 descriptor?? [ 1680.849749][T21681] xt_socket: unknown flags 0x50 [ 1680.871960][T21674] ubi: mtd0 is already attached to ubi0 [ 1680.907034][T16889] usb 3-1: USB disconnect, device number 17 [ 1681.234225][T21687] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 1681.291019][T21690] fuse: Bad value for 'fd' [ 1681.308055][T21689] xt_socket: unknown flags 0x50 [ 1682.934298][T20955] Bluetooth: hci1: Malformed LE Event: 0x02 [ 1683.162171][T21706] (null): rxe_set_mtu: Set mtu to 4096 [ 1683.190293][T21706] rdma_rxe: rxe_newlink: failed to add lo [ 1683.595776][T21714] fuse: Bad value for 'fd' [ 1683.749788][T21718] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4574'. [ 1683.751521][T21717] xt_socket: unknown flags 0x50 [ 1684.909129][T21730] syzkaller0: entered promiscuous mode [ 1684.926066][T21730] syzkaller0: entered allmulticast mode [ 1684.987822][T16889] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1685.096546][T21739] (null): rxe_set_mtu: Set mtu to 1024 [ 1685.103074][T21739] rdma_rxe: rxe_newlink: failed to add lo [ 1685.210867][T16889] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1685.232903][T16889] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1685.253072][T16889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1685.286532][T16889] usb 1-1: config 0 descriptor?? [ 1685.523587][T21726] ubi: mtd0 is already attached to ubi0 [ 1685.534538][T16889] usb 1-1: USB disconnect, device number 41 [ 1685.747635][T21747] xt_socket: unknown flags 0x50 [ 1686.332334][T21758] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 1686.466442][T21760] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 1687.247158][T21765] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4589'. [ 1687.361947][T21771] (null): rxe_set_mtu: Set mtu to 4096 [ 1687.368268][T21771] rdma_rxe: rxe_newlink: failed to add lo [ 1687.645430][T21780] syz_tun: entered allmulticast mode [ 1687.857775][T16889] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1688.027902][ T23] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1688.071627][T16889] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1688.088172][T16889] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1688.098395][T16889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1688.119120][T16889] usb 4-1: config 0 descriptor?? [ 1688.235795][ T23] usb 2-1: config 0 has an invalid interface number: 199 but max is 1 [ 1688.253465][ T23] usb 2-1: config 0 has no interface number 1 [ 1688.277855][ T23] usb 2-1: config 0 interface 199 altsetting 2 endpoint 0xA has invalid wMaxPacketSize 0 [ 1688.318221][ T23] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1688.342045][T21778] ubi: mtd0 is already attached to ubi0 [ 1688.363475][T16889] usb 4-1: USB disconnect, device number 43 [ 1688.372361][ T23] usb 2-1: config 0 interface 199 has no altsetting 0 [ 1688.596022][ T23] usb 2-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 1688.606224][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1688.627813][ T23] usb 2-1: SerialNumber: syz [ 1688.643360][ T23] usb 2-1: config 0 descriptor?? [ 1688.668777][ T23] usb 2-1: Found UVC 0.00 device (0002:0000) [ 1688.676892][ T23] usb 2-1: No valid video chain found. [ 1688.850856][T21799] syz1: rxe_newlink: already configured on lo [ 1688.892797][T16889] usb 2-1: USB disconnect, device number 37 [ 1688.979054][T21779] syz_tun: left allmulticast mode [ 1689.164410][T21805] binder: 21804:21805 ioctl c0306201 0 returned -14 [ 1689.462201][T21808] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4604'. [ 1690.434511][T18049] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1690.691344][T18049] usb 2-1: Using ep0 maxpacket: 8 [ 1691.055140][T18049] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 1691.152358][T18049] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1691.179024][T21826] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 1691.225656][T18049] usb 2-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 1691.245708][T18049] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1691.263439][T18049] usb 2-1: Product: syz [ 1691.272292][T18049] usb 2-1: Manufacturer: syz [ 1691.278432][T18049] usb 2-1: SerialNumber: syz [ 1691.293355][T18049] usb 2-1: config 0 descriptor?? [ 1691.303801][T21819] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1691.313511][T18049] powermate: probe of 2-1:0.0 failed with error -22 [ 1691.323880][T21829] (null): rxe_set_mtu: Set mtu to 4096 [ 1691.340141][T21829] rdma_rxe: rxe_newlink: failed to add lo [ 1691.498855][T18034] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1691.649710][T21836] binder: 21835:21836 ioctl c0306201 0 returned -14 [ 1691.693935][T18034] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1691.714031][T18034] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1691.744031][T18034] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1691.761261][T18034] usb 1-1: config 0 descriptor?? [ 1691.984365][T21827] ubi: mtd0 is already attached to ubi0 [ 1691.994815][T18034] usb 1-1: USB disconnect, device number 42 [ 1692.497927][T21848] xt_socket: unknown flags 0x50 [ 1692.975133][T18049] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1693.157603][T21856] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4619'. [ 1693.422053][T18049] usb 1-1: Using ep0 maxpacket: 32 [ 1693.473975][T18049] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1693.493422][T18049] usb 1-1: string descriptor 0 read error: -22 [ 1693.502363][T18049] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 1693.511905][T18049] usb 1-1: New USB device strings: Mfr=1, Product=252, SerialNumber=3 [ 1693.528075][T16886] usb 2-1: USB disconnect, device number 38 [ 1693.537231][T18049] dw2102: su3000_identify_state [ 1693.552742][T18049] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 1693.561585][T18049] dw2102: su3000_power_ctrl: 1, initialized 0 [ 1693.569429][T18049] dvb-usb: bulk message failed: -22 (2/0) [ 1693.587004][T18049] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1693.620161][T18049] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 1693.649358][T18049] usb 1-1: media controller created [ 1693.653076][T21860] (null): rxe_set_mtu: Set mtu to 4096 [ 1693.655467][T18049] dvb-usb: bulk message failed: -22 (6/0) [ 1693.662697][T21860] rdma_rxe: rxe_newlink: failed to add lo [ 1693.667248][T18049] dw2102: i2c transfer failed. [ 1693.681250][T18049] dvb-usb: bulk message failed: -22 (6/0) [ 1693.687039][T18049] dw2102: i2c transfer failed. [ 1693.692832][T18049] dvb-usb: bulk message failed: -22 (6/0) [ 1693.701178][T18049] dw2102: i2c transfer failed. [ 1693.706151][T18049] dvb-usb: bulk message failed: -22 (6/0) [ 1693.712391][T18049] dw2102: i2c transfer failed. [ 1693.717496][T18049] dvb-usb: bulk message failed: -22 (6/0) [ 1693.728036][T18049] dw2102: i2c transfer failed. [ 1693.732900][T18049] dvb-usb: bulk message failed: -22 (6/0) [ 1693.751669][T18049] dw2102: i2c transfer failed. [ 1693.756625][T18049] dvb-usb: MAC address: 02:02:02:02:02:02 [ 1693.783837][T18049] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1693.818026][T21863] binder: 21862:21863 ioctl c0306201 0 returned -14 [ 1693.824546][T18049] dvb-usb: bulk message failed: -22 (3/0) [ 1693.833225][T18049] dw2102: command 0x0e transfer failed. [ 1693.841340][T18049] dvb-usb: bulk message failed: -22 (3/0) [ 1693.847386][T18049] dw2102: command 0x0e transfer failed. [ 1693.907707][T16889] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1694.105363][ T1080] wlan0: Trigger new scan to find an IBSS to join [ 1694.114280][T16889] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 1694.125153][T16889] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1694.135317][T16889] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1694.156681][ C1] vkms_vblank_simulate: vblank timer overrun [ 1694.170431][T16889] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1694.178625][T18049] dvb-usb: bulk message failed: -22 (3/0) [ 1694.187971][T16889] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1694.191999][T18049] dw2102: command 0x0e transfer failed. [ 1694.203910][T16889] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1694.218117][T18049] dvb-usb: bulk message failed: -22 (3/0) [ 1694.238085][T16889] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1694.259015][T16889] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1694.268733][T16889] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1694.272863][T18049] dw2102: command 0x0e transfer failed. [ 1694.299588][T18049] dvb-usb: bulk message failed: -22 (1/0) [ 1694.311509][T18049] dw2102: command 0x51 transfer failed. [ 1694.317733][T16886] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1694.326753][T16889] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1694.360365][T16889] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1694.377271][T16889] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1694.395672][T18049] DVB: Unable to find symbol ds3000_attach() [ 1694.398477][T16889] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1694.411546][T16889] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1694.414021][T18049] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 1694.423485][T16889] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1694.447083][T21876] syzkaller0: entered promiscuous mode [ 1694.447897][T16889] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1694.453133][T21876] syzkaller0: entered allmulticast mode [ 1694.461720][T16889] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1694.509292][T16889] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1694.523871][T16886] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1694.536614][T16886] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1694.551948][T16889] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1694.559125][T16886] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1694.568616][T16889] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1694.590091][T16889] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1694.602386][T16886] usb 2-1: config 0 descriptor?? [ 1694.616860][T16889] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1694.633808][T16889] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1694.637638][T18049] rc_core: IR keymap rc-su3000 not found [ 1694.643431][T16889] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1694.667007][T18049] Registered IR keymap rc-empty [ 1694.674548][T16889] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1694.687127][T18049] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 1694.692778][T16889] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1694.711346][T16889] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1694.737758][T16889] usb 3-1: Product: syz [ 1694.741444][T18049] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input12 [ 1694.752480][T16889] usb 3-1: Manufacturer: syz [ 1694.763460][T16889] usb 3-1: SerialNumber: syz [ 1694.794792][T16889] usb 3-1: config 0 descriptor?? [ 1694.799594][T18049] dvb-usb: schedule remote query interval to 150 msecs. [ 1694.825268][T18049] dw2102: su3000_power_ctrl: 0, initialized 1 [ 1694.834379][T16889] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 1694.843207][T21871] ubi: mtd0 is already attached to ubi0 [ 1694.845452][T18049] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 1694.893611][ T23] usb 2-1: USB disconnect, device number 39 [ 1694.965363][T18049] usb 1-1: USB disconnect, device number 43 [ 1695.097972][T21888] (null): rxe_set_mtu: Set mtu to 4096 [ 1695.114464][T21888] rdma_rxe: rxe_newlink: failed to add lo [ 1695.140043][T18049] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 1695.166665][ C1] usb 3-1: yurex_control_callback - control failed: -71 [ 1695.177277][ T23] usb 3-1: USB disconnect, device number 18 [ 1695.184442][T21889] yurex 3-1:0.0: yurex_write - failed to send bulk msg, error -19 [ 1695.201449][ T23] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 1695.473030][T21898] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4634'. [ 1696.109855][T21905] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4637'. [ 1696.139962][T21905] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4637'. [ 1696.179667][T21905] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4637'. [ 1696.202739][T21905] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4637'. [ 1696.207971][T21908] 9pnet_virtio: no channels available for device syz [ 1696.396496][T21912] (null): rxe_set_mtu: Set mtu to 1024 [ 1696.416256][T21912] rdma_rxe: rxe_newlink: failed to add lo [ 1696.947722][T21924] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 1697.177755][T16889] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1697.410637][T16889] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1697.420302][T16889] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1697.430482][T16889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1697.453770][T16889] usb 3-1: config 0 descriptor?? [ 1697.673610][T21923] ubi: mtd0 is already attached to ubi0 [ 1697.680854][T16889] usb 3-1: USB disconnect, device number 19 [ 1698.041767][T21933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4648'. [ 1698.052185][T21933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4648'. [ 1698.062548][T21933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4648'. [ 1698.072404][T21933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4648'. [ 1698.084805][T21933] 9pnet_virtio: no channels available for device syz [ 1698.337828][T21936] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4649'. [ 1698.842994][T21938] (null): rxe_set_mtu: Set mtu to 1024 [ 1698.849557][T21938] rdma_rxe: rxe_newlink: failed to add lo [ 1699.067649][T15133] wlan0: Trigger new scan to find an IBSS to join [ 1699.080988][ T6206] wlan0: Trigger new scan to find an IBSS to join [ 1700.463516][ T1135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1700.554911][T21958] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4657'. [ 1700.577867][T21958] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4657'. [ 1700.593116][T21958] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4657'. [ 1700.613738][T21958] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4657'. [ 1700.634226][T21958] 9pnet_virtio: no channels available for device syz [ 1700.806642][T21960] xt_socket: unknown flags 0x50 [ 1701.137888][T16886] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 1701.536794][T16886] usb 2-1: config 0 has an invalid interface number: 84 but max is 0 [ 1701.545566][T16886] usb 2-1: config 0 has no interface number 0 [ 1701.557767][T16886] usb 2-1: config 0 interface 84 has no altsetting 0 [ 1701.610856][T16886] usb 2-1: New USB device found, idVendor=15c2, idProduct=0046, bcdDevice=34.dc [ 1701.631983][T21969] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 1701.649631][T16886] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1701.667842][T16886] usb 2-1: Product: syz [ 1701.673798][T16886] usb 2-1: Manufacturer: syz [ 1701.721318][T16886] usb 2-1: SerialNumber: syz [ 1701.870102][T16886] usb 2-1: config 0 descriptor?? [ 1703.068415][ T2946] wlan0: Trigger new scan to find an IBSS to join [ 1703.756245][T21983] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4663'. [ 1704.422527][T15133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1704.920717][T16886] imon 2-1:0.84: unable to register, err -19 [ 1704.969820][T16886] usb 2-1: USB disconnect, device number 40 [ 1707.194758][T22005] xt_socket: unknown flags 0x50 [ 1708.037772][T18034] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 1708.241469][T18034] usb 2-1: config 0 has an invalid interface number: 84 but max is 0 [ 1708.250230][T18034] usb 2-1: config 0 has no interface number 0 [ 1708.256367][T18034] usb 2-1: config 0 interface 84 has no altsetting 0 [ 1708.266768][T18034] usb 2-1: New USB device found, idVendor=15c2, idProduct=0046, bcdDevice=34.dc [ 1708.278843][T18034] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1708.286981][T18034] usb 2-1: Product: syz [ 1708.291192][T21902] Set syz1 is full, maxelem 65536 reached [ 1708.311096][T18034] usb 2-1: Manufacturer: syz [ 1708.327860][T18034] usb 2-1: SerialNumber: syz [ 1708.347485][T18034] usb 2-1: config 0 descriptor?? [ 1709.481375][T18034] imon 2-1:0.84: unable to register, err -19 [ 1709.520768][T18034] usb 2-1: USB disconnect, device number 41 [ 1709.730335][T22032] bridge0: port 2(bridge_slave_1) entered disabled state [ 1709.738177][T22032] bridge0: port 1(bridge_slave_0) entered disabled state [ 1710.029464][ T8499] block nbd3: Possible stuck request ffff888022520000: control (read@0,1024B). Runtime 90 seconds [ 1710.328980][T22032] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1710.389585][T22032] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1711.389015][T22032] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1711.399481][T22032] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1711.409740][T22032] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1711.419021][T22032] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1711.931912][T22079] af_packet: tpacket_rcv: packet too big, clamped from 2916 to 4294967286. macoff=82 [ 1712.287893][T18048] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 1712.341808][T22088] syz_tun: entered allmulticast mode [ 1712.492222][T18048] usb 4-1: config 0 has an invalid interface number: 84 but max is 0 [ 1712.510075][T18048] usb 4-1: config 0 has no interface number 0 [ 1712.529993][T18048] usb 4-1: config 0 interface 84 has no altsetting 0 [ 1712.550554][T18048] usb 4-1: New USB device found, idVendor=15c2, idProduct=0046, bcdDevice=34.dc [ 1712.577729][T18048] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1712.597122][T18048] usb 4-1: Product: syz [ 1712.611387][T18048] usb 4-1: Manufacturer: syz [ 1712.625045][T18048] usb 4-1: SerialNumber: syz [ 1712.645518][T18048] usb 4-1: config 0 descriptor?? [ 1712.787763][T16889] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1713.009137][T16889] usb 1-1: config 0 has an invalid interface number: 199 but max is 1 [ 1713.028428][T16889] usb 1-1: config 0 has no interface number 1 [ 1713.054307][T16889] usb 1-1: config 0 interface 199 altsetting 2 endpoint 0xA has invalid wMaxPacketSize 0 [ 1713.118800][T16889] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1713.165003][T16889] usb 1-1: config 0 interface 199 has no altsetting 0 [ 1713.216208][T16889] usb 1-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 1713.245515][T16889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1713.282733][T16889] usb 1-1: SerialNumber: syz [ 1713.306315][T16889] usb 1-1: config 0 descriptor?? [ 1713.461718][T22098] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4695'. [ 1713.560784][T16889] usb 1-1: Found UVC 0.00 device (0002:0000) [ 1713.578853][T16889] usb 1-1: No valid video chain found. [ 1713.932511][T18049] usb 1-1: USB disconnect, device number 44 [ 1714.032206][T22087] syz_tun: left allmulticast mode [ 1714.396886][T18048] imon 4-1:0.84: unable to register, err -19 [ 1714.405532][T18048] usb 4-1: USB disconnect, device number 44 [ 1714.667050][T22102] random: crng reseeded on system resumption [ 1716.511466][T22049] Set syz1 is full, maxelem 65536 reached [ 1717.635050][T22136] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4704'. [ 1718.300324][T22145] random: crng reseeded on system resumption [ 1718.487693][T22151] xt_socket: unknown flags 0x50 [ 1718.588177][T18046] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 1718.829428][T18046] usb 2-1: config 0 has an invalid interface number: 84 but max is 0 [ 1718.848131][T18046] usb 2-1: config 0 has no interface number 0 [ 1718.869382][T18046] usb 2-1: config 0 interface 84 has no altsetting 0 [ 1718.907178][T18046] usb 2-1: New USB device found, idVendor=15c2, idProduct=0046, bcdDevice=34.dc [ 1718.929426][T18046] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1718.957899][T18046] usb 2-1: Product: syz [ 1718.967807][T18046] usb 2-1: Manufacturer: syz [ 1718.972584][T18046] usb 2-1: SerialNumber: syz [ 1719.000934][T18046] usb 2-1: config 0 descriptor?? [ 1720.566850][T18046] imon 2-1:0.84: unable to register, err -19 [ 1720.587182][T18046] usb 2-1: USB disconnect, device number 42 [ 1720.615255][T22182] xt_socket: unknown flags 0x50 [ 1720.904636][T22187] random: crng reseeded on system resumption [ 1722.422510][T22205] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 1723.077787][T16889] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 1723.273083][T16889] usb 1-1: config 0 has an invalid interface number: 84 but max is 0 [ 1723.286526][T16889] usb 1-1: config 0 has no interface number 0 [ 1723.293707][T16889] usb 1-1: config 0 interface 84 has no altsetting 0 [ 1723.306188][T16889] usb 1-1: New USB device found, idVendor=15c2, idProduct=0046, bcdDevice=34.dc [ 1723.316007][T16889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1723.324832][T16889] usb 1-1: Product: syz [ 1723.329621][T16889] usb 1-1: Manufacturer: syz [ 1723.334376][T16889] usb 1-1: SerialNumber: syz [ 1723.344411][T16889] usb 1-1: config 0 descriptor?? [ 1724.371435][T22222] random: crng reseeded on system resumption [ 1724.884434][T16889] imon 1-1:0.84: unable to register, err -19 [ 1724.914005][T16889] usb 1-1: USB disconnect, device number 45 [ 1726.239402][T22244] syzkaller0: entered promiscuous mode [ 1726.262641][T22244] syzkaller0: entered allmulticast mode [ 1726.660278][T22249] TCP: TCP_TX_DELAY enabled [ 1726.807379][T22252] binder: 22250:22252 ioctl c0306201 2000000003c0 returned -14 [ 1726.822559][T22252] binder: 22250:22252 ioctl c0306201 0 returned -14 [ 1726.872084][T22165] Set syz1 is full, maxelem 65536 reached [ 1727.178442][T16889] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 1727.233739][T22259] random: crng reseeded on system resumption [ 1727.493879][T16889] usb 4-1: config 0 has an invalid interface number: 84 but max is 0 [ 1727.507963][T16889] usb 4-1: config 0 has no interface number 0 [ 1727.515562][T16889] usb 4-1: config 0 interface 84 has no altsetting 0 [ 1727.565542][T16889] usb 4-1: New USB device found, idVendor=15c2, idProduct=0046, bcdDevice=34.dc [ 1727.574933][T16889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1727.583300][T16889] usb 4-1: Product: syz [ 1727.592479][T16889] usb 4-1: Manufacturer: syz [ 1727.597823][T16889] usb 4-1: SerialNumber: syz [ 1727.643272][T16889] usb 4-1: config 0 descriptor?? [ 1729.760242][T22280] binder: 22279:22280 ioctl c0306201 2000000003c0 returned -14 [ 1729.795887][T22280] binder: 22279:22280 ioctl c0306201 0 returned -14 [ 1730.121293][T16889] imon 4-1:0.84: unable to register, err -19 [ 1730.158024][T16889] usb 4-1: USB disconnect, device number 45 [ 1731.856696][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1731.863207][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1732.261018][T22301] random: crng reseeded on system resumption [ 1732.576029][T22311] binder: 22310:22311 ioctl c0306201 2000000003c0 returned -14 [ 1732.593383][T22311] binder: 22310:22311 ioctl c0306201 0 returned -14 [ 1733.202445][T18046] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 1733.413093][T18046] usb 3-1: config 0 has an invalid interface number: 84 but max is 0 [ 1733.422362][T18046] usb 3-1: config 0 has no interface number 0 [ 1733.428910][T18046] usb 3-1: config 0 interface 84 has no altsetting 0 [ 1733.440642][T18046] usb 3-1: New USB device found, idVendor=15c2, idProduct=0046, bcdDevice=34.dc [ 1733.450571][T18046] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1733.460723][T18046] usb 3-1: Product: syz [ 1733.464931][T18046] usb 3-1: Manufacturer: syz [ 1733.489165][T18046] usb 3-1: SerialNumber: syz [ 1733.521635][T18046] usb 3-1: config 0 descriptor?? [ 1733.587084][T22321] hub 8-0:1.0: USB hub found [ 1733.596116][T22321] hub 8-0:1.0: 1 port detected [ 1734.985290][T22344] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 1735.028751][T18046] imon 3-1:0.84: unable to register, err -19 [ 1735.049989][T18046] usb 3-1: USB disconnect, device number 20 [ 1735.322402][T22348] binder: 22347:22348 ioctl c0306201 2000000003c0 returned -14 [ 1735.984175][T22352] random: crng reseeded on system resumption [ 1736.819539][T22371] UBIFS error (pid: 22371): cannot open "/dev/sequencer", error -22 [ 1737.382682][ T2946] wlan0: Trigger new scan to find an IBSS to join [ 1737.681705][T22377] syzkaller0: entered promiscuous mode [ 1737.716165][T22377] syzkaller0: entered allmulticast mode [ 1738.746494][T22389] 9pnet_virtio: no channels available for device syz [ 1739.544738][T22388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4781'. [ 1739.912201][T22408] random: crng reseeded on system resumption [ 1740.138881][ T8499] block nbd3: Possible stuck request ffff888022520000: control (read@0,1024B). Runtime 120 seconds [ 1740.189086][T22411] syzkaller0: entered promiscuous mode [ 1740.207854][T22411] syzkaller0: entered allmulticast mode [ 1741.269044][ T1135] wlan0: Trigger new scan to find an IBSS to join [ 1742.804361][T22417] UBIFS error (pid: 22417): cannot open "/dev/sequencer", error -22 [ 1743.015574][T22433] syzkaller0: entered promiscuous mode [ 1743.149991][T22438] 9pnet_virtio: no channels available for device syz [ 1743.888599][T22433] syzkaller0: entered allmulticast mode [ 1743.924657][T22437] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4792'. [ 1744.074847][T15133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1747.512444][T22465] fuse: Bad value for 'group_id' [ 1747.661264][T22469] random: crng reseeded on system resumption [ 1748.296609][T22481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4802'. [ 1748.307727][T22481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4802'. [ 1748.317772][T22481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4802'. [ 1748.327690][T22481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4802'. [ 1748.342660][T22481] 9pnet_virtio: no channels available for device syz [ 1750.189882][T22494] syzkaller0: entered promiscuous mode [ 1750.195415][T22494] syzkaller0: entered allmulticast mode [ 1750.249131][T22500] fuse: Bad value for 'group_id' [ 1750.483998][T22505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4810'. [ 1750.509874][T22505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4810'. [ 1750.522660][T22505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4810'. [ 1750.573401][T22505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4810'. [ 1750.583361][T22505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4810'. [ 1750.637726][T22507] random: crng reseeded on system resumption [ 1750.832444][T22516] 9pnet_virtio: no channels available for device syz [ 1751.169631][T22522] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4813'. [ 1751.185145][T22522] 9pnet_virtio: no channels available for device syz [ 1752.339755][T22529] fuse: Bad value for 'group_id' [ 1752.593157][T22537] (null): rxe_set_mtu: Set mtu to 4096 [ 1752.613818][T22537] rdma_rxe: rxe_newlink: failed to add lo [ 1753.170336][T18048] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1753.326207][T22546] 9pnet_virtio: no channels available for device syz [ 1753.367929][T22545] __nla_validate_parse: 4 callbacks suppressed [ 1753.367947][T22545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4821'. [ 1753.406496][T18048] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1753.420931][T18048] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1753.460612][T18048] usb 1-1: Product: syz [ 1753.464801][T18048] usb 1-1: Manufacturer: syz [ 1753.515428][T18048] usb 1-1: SerialNumber: syz [ 1753.999338][T22550] random: crng reseeded on system resumption [ 1754.186003][T18048] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1754.205499][T18048] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -71 [ 1754.219320][T18048] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 1754.231104][T18048] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1754.257369][T18048] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1754.299447][T18048] lan78xx: probe of 1-1:1.0 failed with error -71 [ 1754.365749][T18048] usb 1-1: USB disconnect, device number 46 [ 1755.309244][T22570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4826'. [ 1755.321084][T22570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4826'. [ 1755.331259][T22570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4826'. [ 1755.342047][T22570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4826'. [ 1755.355644][T22570] 9pnet_virtio: no channels available for device syz [ 1755.419773][T22569] (null): rxe_set_mtu: Set mtu to 1024 [ 1755.464512][T22569] rdma_rxe: rxe_newlink: failed to add lo [ 1756.436379][T22577] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 1756.961991][T22585] random: crng reseeded on system resumption [ 1758.924800][T22600] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4838'. [ 1758.935691][T22600] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4838'. [ 1758.945854][T22600] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4838'. [ 1758.955661][T22600] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4838'. [ 1758.969494][T22600] 9pnet_virtio: no channels available for device syz [ 1759.855778][T22604] (null): rxe_set_mtu: Set mtu to 4096 [ 1759.872342][T22604] rdma_rxe: rxe_newlink: failed to add lo [ 1759.961620][T22605] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4839'. [ 1761.256348][T22613] 9pnet_fd: Insufficient options for proto=fd [ 1761.865990][T20955] Bluetooth: Unexpected start frame (len 10) [ 1762.723424][T22630] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 1763.017837][T22635] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4849'. [ 1763.028623][T22635] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4849'. [ 1763.041403][T22635] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4849'. [ 1763.051421][T22635] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4849'. [ 1763.065694][T22635] 9pnet_virtio: no channels available for device syz [ 1764.167726][T16889] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1764.253473][T22639] (null): rxe_set_mtu: Set mtu to 4096 [ 1764.261032][T22639] rdma_rxe: rxe_newlink: failed to add lo [ 1764.350135][T16889] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 1764.372298][T16889] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1764.387697][T16889] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1764.419073][T16889] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1764.438066][T16889] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1764.467442][T16889] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1764.497711][T16889] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1764.528520][T16889] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1764.537511][T16889] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1764.612923][T16889] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1764.635087][T16889] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1764.676327][T16889] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1764.735260][T16889] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1764.743997][T16889] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1764.753444][T16889] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1764.789906][T16889] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1764.809136][T16889] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1764.837735][T16889] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1764.865170][T16889] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1764.898556][T16889] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1764.932933][T16889] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1764.973764][T16889] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1765.015700][T16889] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1765.044708][T16889] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1765.096038][T16889] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1765.131937][T16889] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1765.154539][ T6206] wlan0: Trigger new scan to find an IBSS to join [ 1765.157656][T16889] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1765.185860][T22651] binder: 22648:22651 ioctl c0306201 2000000003c0 returned -14 [ 1765.197635][T16889] usb 1-1: Product: syz [ 1765.202076][T16889] usb 1-1: Manufacturer: syz [ 1765.207055][T16889] usb 1-1: SerialNumber: syz [ 1765.260200][T16889] usb 1-1: config 0 descriptor?? [ 1765.298214][T16889] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 1765.408706][T22655] fuse: Unknown parameter 'grou00000000000000000000' [ 1765.490595][T22658] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4859'. [ 1765.502775][T22658] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4859'. [ 1765.513449][T22658] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4859'. [ 1765.523728][T22658] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4859'. [ 1765.540096][T22658] 9pnet_virtio: no channels available for device syz [ 1766.232433][T16889] usb 1-1: USB disconnect, device number 47 [ 1766.310907][T16889] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 1766.527902][T22665] (null): rxe_set_mtu: Set mtu to 4096 [ 1766.534013][T22665] rdma_rxe: rxe_newlink: failed to add lo [ 1767.623994][T22675] binder: 22673:22675 ioctl c0306201 2000000003c0 returned -14 [ 1767.846199][T22683] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4868'. [ 1767.858214][T22683] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4868'. [ 1767.868637][T22683] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4868'. [ 1767.879426][T22683] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4868'. [ 1767.894012][T22683] 9pnet_virtio: no channels available for device syz [ 1768.037711][T18048] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1768.778531][T22685] (null): rxe_set_mtu: Set mtu to 4096 [ 1768.800257][T22685] rdma_rxe: rxe_newlink: failed to add lo [ 1768.812123][T18048] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1768.823524][T18048] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1768.838804][T18048] usb 3-1: Product: syz [ 1768.843045][T18048] usb 3-1: Manufacturer: syz [ 1770.143153][T15133] wlan0: Trigger new scan to find an IBSS to join [ 1770.177828][ T8499] block nbd3: Possible stuck request ffff888022520000: control (read@0,1024B). Runtime 150 seconds [ 1770.724420][T18048] usb 3-1: SerialNumber: syz [ 1770.990649][T18048] usb 3-1: can't set config #1, error -71 [ 1771.010666][T18048] usb 3-1: USB disconnect, device number 21 [ 1771.393980][T15133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1771.787683][T16886] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1771.891398][T22712] 9pnet_virtio: no channels available for device syz [ 1772.020963][T16886] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 1772.078884][T16886] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1772.617854][T16886] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1772.670798][T16886] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1772.687783][T22715] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 1772.698639][T16886] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1772.721124][T16886] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1772.772701][T16886] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1772.849468][T16886] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1772.907254][T16886] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1773.045026][T16886] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1773.174471][T16886] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1773.280653][T16886] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1773.411255][T16886] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1773.506944][T16886] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1773.604498][T16886] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1773.662531][T16886] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1773.698506][T16886] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1773.707467][T16886] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1773.712586][T22725] (null): rxe_set_mtu: Set mtu to 1024 [ 1773.724409][T22725] rdma_rxe: rxe_newlink: failed to add lo [ 1773.773862][T16886] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1773.829369][T16886] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1773.844379][T16886] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1773.856712][T16886] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1773.871932][T16886] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1773.891311][T16886] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1773.962950][T16886] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1774.062302][T16886] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1774.160613][T16886] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1774.261811][T16886] usb 1-1: Product: syz [ 1774.320153][T16886] usb 1-1: Manufacturer: syz [ 1774.392821][T16886] usb 1-1: SerialNumber: syz [ 1774.509420][T16886] usb 1-1: config 0 descriptor?? [ 1774.949078][T16886] usb 1-1: can't set config #0, error -71 [ 1774.962701][T16886] usb 1-1: USB disconnect, device number 48 [ 1775.124611][T22745] 9pnet_virtio: no channels available for device syz [ 1776.528038][T22758] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 1776.577879][ T6206] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1776.618571][T22760] (null): rxe_set_mtu: Set mtu to 1024 [ 1776.737326][T22760] rdma_rxe: rxe_newlink: failed to add lo [ 1777.293762][T16889] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1777.489388][T16889] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 1777.501238][T16889] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1777.517695][T16889] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1777.529010][T16889] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1777.537044][T16889] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1777.554772][T16889] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1777.571590][T16889] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1777.580447][T16889] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1777.591166][T16889] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1777.604972][T16889] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1777.613673][T16889] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1777.623118][T16889] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1777.637780][T16889] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1777.649058][T16889] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1777.659539][T16889] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1777.671476][T16889] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1777.686226][T16889] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1777.700547][T16889] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1777.714227][T16889] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1777.730212][T16889] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1777.740855][T16889] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1777.752436][T16889] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1777.760691][T16889] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1777.770800][T16889] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1777.797371][T16889] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1777.824231][T16889] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1777.843100][T16889] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1777.867824][T16889] usb 4-1: Product: syz [ 1777.873494][T16889] usb 4-1: Manufacturer: syz [ 1777.878711][T16889] usb 4-1: SerialNumber: syz [ 1777.899510][T16889] usb 4-1: config 0 descriptor?? [ 1777.923463][T16889] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 1778.175593][ C1] usb 4-1: yurex_control_callback - control failed: -71 [ 1778.313179][T16889] usb 4-1: USB disconnect, device number 46 [ 1778.338366][T16889] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 1778.816902][T22807] syz_tun: entered allmulticast mode [ 1778.860446][T22806] syz_tun: left allmulticast mode [ 1779.849921][T22838] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 1780.056194][T22842] syzkaller0: entered promiscuous mode [ 1780.065375][T22842] syzkaller0: entered allmulticast mode [ 1780.287743][T18048] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1780.562266][T18048] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 1780.597652][T18048] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1780.606590][T18048] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1780.650538][T18048] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1780.707864][T18048] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1780.716837][T18048] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1780.816893][T18048] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1780.845883][T18048] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1780.891402][T18048] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1781.048755][T18048] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1781.056845][T18048] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1781.080958][T18048] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1781.099736][T18048] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1781.112821][T18048] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1781.186234][T18048] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1781.224850][T18048] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1781.251234][T18048] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1781.288673][T18048] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1781.407237][T18048] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1781.447329][T18048] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1781.477652][T18048] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1781.516577][T18048] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1781.544952][T18048] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1781.678658][T18048] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1781.710852][T18048] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1781.828544][T18048] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1781.904341][T18048] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1781.931874][T18048] usb 1-1: Product: syz [ 1781.936112][T18048] usb 1-1: Manufacturer: syz [ 1781.964276][T18048] usb 1-1: SerialNumber: syz [ 1781.987354][T18048] usb 1-1: config 0 descriptor?? [ 1782.013106][T18048] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 1782.234748][T18048] usb 1-1: USB disconnect, device number 49 [ 1782.242137][T18048] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 1782.585097][T14470] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1782.598116][T14470] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1782.607474][T14470] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1782.619445][T14470] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1782.627302][T14470] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1782.634922][T14470] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1782.861534][T22883] lo speed is unknown, defaulting to 1000 [ 1783.597939][T22911] (null): rxe_set_mtu: Set mtu to 4096 [ 1783.620431][T22911] rdma_rxe: rxe_newlink: failed to add lo [ 1784.153372][T22883] chnl_net:caif_netlink_parms(): no params data found [ 1784.657861][T14470] Bluetooth: hci3: command tx timeout [ 1784.851295][T22942] 9pnet_virtio: no channels available for device syz [ 1785.181900][T22938] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4947'. [ 1785.205597][T12263] tipc: Left network mode [ 1785.583039][T22883] bridge0: port 1(bridge_slave_0) entered blocking state [ 1785.623821][T22883] bridge0: port 1(bridge_slave_0) entered disabled state [ 1785.659518][T22883] bridge_slave_0: entered allmulticast mode [ 1785.696837][T22883] bridge_slave_0: entered promiscuous mode [ 1785.798498][T22883] bridge0: port 2(bridge_slave_1) entered blocking state [ 1785.839002][T22883] bridge0: port 2(bridge_slave_1) entered disabled state [ 1785.867984][T22883] bridge_slave_1: entered allmulticast mode [ 1785.875410][T22883] bridge_slave_1: entered promiscuous mode [ 1786.000508][T22883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1786.035954][T22883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1786.110178][T22977] (null): rxe_set_mtu: Set mtu to 4096 [ 1786.122785][T22977] rdma_rxe: rxe_newlink: failed to add lo [ 1786.458534][T22883] team0: Port device team_slave_0 added [ 1786.500711][ T27] audit: type=1326 audit(8226782496.590:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22983 comm="syz.2.4954" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb7e219de99 code=0x0 [ 1786.524201][ C1] vkms_vblank_simulate: vblank timer overrun [ 1786.737680][T14470] Bluetooth: hci3: command tx timeout [ 1786.758079][T22883] team0: Port device team_slave_1 added [ 1787.020389][T22990] lo speed is unknown, defaulting to 1000 [ 1787.021220][T22883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1787.052607][T22883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1787.115045][T22883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1787.236940][T22883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1787.254527][T22883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1787.317735][T22883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1787.367779][T13078] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1787.435326][T22883] hsr_slave_0: entered promiscuous mode [ 1787.460610][T22883] hsr_slave_1: entered promiscuous mode [ 1787.467202][T22883] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1787.494759][T22883] Cannot create hsr debugfs directory [ 1787.564945][T13078] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1787.577685][T13078] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1787.607164][T13078] usb 2-1: Product: syz [ 1787.627744][T13078] usb 2-1: Manufacturer: syz [ 1787.644800][T13078] usb 2-1: SerialNumber: syz [ 1787.873723][T13078] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1787.922509][T13078] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1788.010150][T23015] 9pnet_virtio: no channels available for device syz [ 1788.033454][T13078] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 1788.045364][T13078] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1788.055393][T13078] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1788.134580][T13078] lan78xx: probe of 2-1:1.0 failed with error -71 [ 1788.156676][T23014] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4957'. [ 1788.156870][T13078] usb 2-1: USB disconnect, device number 43 [ 1788.483972][T23021] 9pnet_virtio: no channels available for device syz [ 1788.819503][T14470] Bluetooth: hci3: command tx timeout [ 1789.443373][T12263] hsr_slave_0: left promiscuous mode [ 1789.454250][T12263] hsr_slave_1: left promiscuous mode [ 1789.472733][T12263] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1789.493611][T12263] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1789.561916][T12263] bridge_slave_1: left allmulticast mode [ 1789.604934][T12263] bridge_slave_1: left promiscuous mode [ 1789.630764][T12263] bridge0: port 2(bridge_slave_1) entered disabled state [ 1789.719515][T12263] bridge_slave_0: left allmulticast mode [ 1789.740513][T12263] bridge_slave_0: left promiscuous mode [ 1789.750108][T12263] bridge0: port 1(bridge_slave_0) entered disabled state [ 1789.903012][T12263] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1789.937378][T12263] bond1 (unregistering): Released all slaves [ 1790.915768][T14470] Bluetooth: hci3: command tx timeout [ 1791.108865][T12263] team0 (unregistering): Port device team_slave_1 removed [ 1791.192092][T12263] team0 (unregistering): Port device team_slave_0 removed [ 1791.259858][T12263] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1791.293862][ T5139] udevd[5139]: worker [20429] /devices/virtual/block/nbd3 is taking a long time [ 1791.335586][T12263] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1791.860619][T12263] bond0 (unregistering): Released all slaves [ 1791.950571][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.956990][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.127145][T23066] (null): rxe_set_mtu: Set mtu to 1024 [ 1792.133150][T23066] rdma_rxe: rxe_newlink: failed to add lo [ 1793.157640][T13078] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1793.232539][T23079] 9pnet_virtio: no channels available for device syz [ 1793.256255][T23078] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4965'. [ 1793.275856][T12263] IPVS: stop unused estimator thread 0... [ 1793.397683][T13078] usb 3-1: Using ep0 maxpacket: 8 [ 1793.440598][T13078] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1793.518205][T13078] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1793.558690][T13078] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1793.591510][T13078] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1793.617336][T13078] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1793.662089][T13078] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1793.697804][T13078] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1793.892146][T22883] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1793.920113][T22883] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1793.943933][T22883] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1793.956526][T13078] usb 3-1: usb_control_msg returned -32 [ 1793.967068][T22883] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1793.974115][T13078] usbtmc 3-1:16.0: can't read capabilities [ 1794.027780][ T23] usb 1-1: new full-speed USB device number 50 using dummy_hcd [ 1794.120912][T22883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1794.153081][T22883] 8021q: adding VLAN 0 to HW filter on device team0 [ 1794.165740][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state [ 1794.172980][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1794.182328][T18048] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1794.197564][T12263] bridge0: port 2(bridge_slave_1) entered blocking state [ 1794.204920][T12263] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1794.220272][ T23] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1794.246796][ T23] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1794.283684][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1794.298259][ T23] usb 1-1: Product: syz [ 1794.302693][ T23] usb 1-1: Manufacturer: syz [ 1794.314498][ T23] usb 1-1: SerialNumber: syz [ 1794.323973][ T23] usb 1-1: config 0 descriptor?? [ 1794.332305][T23091] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1794.345435][ T23] streamzap 1-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 1794.374856][T18048] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1794.403307][T18048] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1794.412962][T18048] usb 2-1: Product: syz [ 1794.424922][T18048] usb 2-1: Manufacturer: syz [ 1794.431165][T18048] usb 2-1: SerialNumber: syz [ 1794.574250][T18047] usb 1-1: USB disconnect, device number 50 [ 1794.624761][T22883] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1794.656690][T18048] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1794.680722][T18048] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1794.700799][T18048] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 1794.725821][T23112] usbtmc 3-1:16.0: CHECK_CLEAR_STATUS returned 6 [ 1794.727882][T18048] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1794.750850][T18048] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1794.758340][T22883] veth0_vlan: entered promiscuous mode [ 1794.782929][T18048] lan78xx: probe of 2-1:1.0 failed with error -71 [ 1794.784862][T22883] veth1_vlan: entered promiscuous mode [ 1794.803543][T18048] usb 2-1: USB disconnect, device number 44 [ 1794.870068][T22883] veth0_macvtap: entered promiscuous mode [ 1794.881498][T22883] veth1_macvtap: entered promiscuous mode [ 1794.904875][T22883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1794.915986][T22883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1794.930986][T18045] usb 3-1: USB disconnect, device number 22 [ 1794.947698][T22883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1794.967639][T22883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1794.989281][T22883] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1795.006906][T22883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1795.017738][T22883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1795.031404][T22883] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1795.042283][T22883] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1795.053779][T22883] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1795.073606][T22883] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1795.082762][T22883] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1795.094716][T22883] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1795.108908][T22883] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1795.271860][T20257] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1795.290076][T20257] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1795.358226][T15133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1795.377055][T15133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1795.698130][T23126] lo speed is unknown, defaulting to 1000 [ 1796.791934][T23140] fuse: Unknown parameter 'group_i00000000000000000000' [ 1796.968921][T23145] (null): rxe_set_mtu: Set mtu to 4096 [ 1796.974752][T23145] rdma_rxe: rxe_newlink: failed to add lo [ 1797.052298][T18047] IPVS: starting estimator thread 0... [ 1797.257728][T23150] IPVS: using max 22 ests per chain, 52800 per kthread [ 1797.635894][T23158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4973'. [ 1797.678405][T23158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4973'. [ 1797.794385][T23163] 9pnet_virtio: no channels available for device syz [ 1797.931420][T23158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4973'. [ 1797.976415][T23158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4973'. [ 1798.231403][T20955] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1798.253990][T20955] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1798.258702][T23172] macvtap1: entered allmulticast mode [ 1798.266594][T20955] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1798.280486][T20955] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1798.300405][T20955] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1798.308110][T20955] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1798.434157][T23172] macvtap2: entered allmulticast mode [ 1798.451734][T23171] lo speed is unknown, defaulting to 1000 [ 1798.641425][T23192] fuse: Unknown parameter 'group_id00000000000000000000' [ 1798.839596][T16886] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1798.847572][T13078] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1799.035668][T23206] (null): rxe_set_mtu: Set mtu to 1024 [ 1799.042627][T23206] rdma_rxe: rxe_newlink: failed to add lo [ 1799.043280][T16886] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1799.089616][T23171] chnl_net:caif_netlink_parms(): no params data found [ 1799.100272][T13078] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1799.115451][T13078] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1799.132719][T16886] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1799.157656][T13078] usb 1-1: Product: syz [ 1799.161891][T13078] usb 1-1: Manufacturer: syz [ 1799.167420][T13078] usb 1-1: SerialNumber: syz [ 1799.187674][T16886] usb 4-1: Product: syz [ 1799.191946][T16886] usb 4-1: Manufacturer: syz [ 1799.196573][T16886] usb 4-1: SerialNumber: syz [ 1799.458795][T13078] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1799.480947][T23217] 9pnet_virtio: no channels available for device syz [ 1799.486673][T16886] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1799.533303][T23214] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4983'. [ 1799.535359][T13078] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1799.594038][T16886] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1799.633496][T13078] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 1799.646725][T16886] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 1799.682882][T13078] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1799.694446][T16886] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1799.721806][T16886] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1799.731772][T13078] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1799.750936][T23171] bridge0: port 1(bridge_slave_0) entered blocking state [ 1799.769799][T13078] lan78xx: probe of 1-1:1.0 failed with error -71 [ 1799.780036][T23171] bridge0: port 1(bridge_slave_0) entered disabled state [ 1799.791378][T16886] lan78xx: probe of 4-1:1.0 failed with error -71 [ 1799.815345][T23171] bridge_slave_0: entered allmulticast mode [ 1799.835235][T13078] usb 1-1: USB disconnect, device number 51 [ 1799.855782][T23171] bridge_slave_0: entered promiscuous mode [ 1799.862833][T16886] usb 4-1: USB disconnect, device number 47 [ 1799.883396][T23171] bridge0: port 2(bridge_slave_1) entered blocking state [ 1799.907842][T23171] bridge0: port 2(bridge_slave_1) entered disabled state [ 1799.931249][T23171] bridge_slave_1: entered allmulticast mode [ 1799.960598][T23171] bridge_slave_1: entered promiscuous mode [ 1800.027772][T23171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1800.051098][T23171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1800.250499][T23242] 9pnet_virtio: no channels available for device syz [ 1800.258028][T13755] block nbd3: Possible stuck request ffff888022520000: control (read@0,1024B). Runtime 180 seconds [ 1800.312687][T23171] team0: Port device team_slave_0 added [ 1800.338950][T20955] Bluetooth: hci1: command tx timeout [ 1800.592225][T23171] team0: Port device team_slave_1 added [ 1801.055765][T23171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1801.097743][T23171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1801.207773][T23171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1801.245197][T23253] syz1: rxe_newlink: already configured on lo [ 1801.250206][T23171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1801.277908][T23171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1801.279298][T23258] fuse: Unknown parameter 'group_id00000000000000000000' [ 1801.356429][T23171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1801.709555][T23275] 9pnet_virtio: no channels available for device syz [ 1801.754082][T23171] hsr_slave_0: entered promiscuous mode [ 1801.769625][T23171] hsr_slave_1: entered promiscuous mode [ 1801.800299][T23171] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1801.818475][T23171] Cannot create hsr debugfs directory [ 1801.905642][T23273] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4991'. [ 1802.304418][T23290] 9pnet_virtio: no channels available for device syz [ 1802.417767][T20955] Bluetooth: hci1: command tx timeout [ 1802.657684][T18049] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1802.979190][T18049] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1803.103541][T18049] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1803.138268][T18049] usb 3-1: Product: syz [ 1803.154325][T18049] usb 3-1: Manufacturer: syz [ 1803.180707][T18049] usb 3-1: SerialNumber: syz [ 1803.198198][T23171] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1803.278873][T23302] fuse: Unknown parameter 'group_id00000000000000000000' [ 1803.421301][T23171] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1803.457954][T18049] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1803.497902][T18049] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1803.519646][T18049] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 1803.536717][T18049] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1803.580720][T18049] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1803.619515][T18049] lan78xx: probe of 3-1:1.0 failed with error -71 [ 1803.688397][T18049] usb 3-1: USB disconnect, device number 23 [ 1803.950080][T23171] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1804.099405][ T1135] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1804.338992][T23308] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 1804.487394][T23171] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1804.500045][T20955] Bluetooth: hci1: command tx timeout [ 1804.556273][T23313] (null): rxe_set_mtu: Set mtu to 1024 [ 1804.562441][T23313] rdma_rxe: rxe_newlink: failed to add lo [ 1804.983613][T23324] 9pnet_virtio: no channels available for device syz [ 1805.044435][T23321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5002'. [ 1805.126008][T23171] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1805.143397][T23171] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1805.162611][T23171] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1805.225469][T23171] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1805.287256][T23331] macvtap3: entered allmulticast mode [ 1805.313861][T23331] macvtap4: entered allmulticast mode [ 1805.387906][ T27] audit: type=1326 audit(8226782515.470:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23326 comm="syz.2.5005" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7e219de99 code=0x7ffc0000 [ 1805.483542][ T27] audit: type=1326 audit(8226782515.470:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23326 comm="syz.2.5005" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fb7e219de99 code=0x7ffc0000 [ 1805.508796][T23171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1805.543214][ T27] audit: type=1326 audit(8226782515.470:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23326 comm="syz.2.5005" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7e219de99 code=0x7ffc0000 [ 1805.578067][ T27] audit: type=1326 audit(8226782515.470:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23326 comm="syz.2.5005" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb7e219de99 code=0x7ffc0000 [ 1805.586015][T23171] 8021q: adding VLAN 0 to HW filter on device team0 [ 1805.612480][ T27] audit: type=1326 audit(8226782515.470:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23326 comm="syz.2.5005" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7e219de99 code=0x7ffc0000 [ 1805.642867][ T27] audit: type=1326 audit(8226782515.470:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23326 comm="syz.2.5005" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fb7e219de99 code=0x7ffc0000 [ 1805.694517][ T1135] bridge0: port 1(bridge_slave_0) entered blocking state [ 1805.701710][ T1135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1805.716662][ T27] audit: type=1326 audit(8226782515.490:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23326 comm="syz.2.5005" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7e219de99 code=0x7ffc0000 [ 1805.746228][ T27] audit: type=1326 audit(8226782515.500:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23326 comm="syz.2.5005" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb7e219de99 code=0x7ffc0000 [ 1805.774853][ T27] audit: type=1326 audit(8226782515.500:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23326 comm="syz.2.5005" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb7e219de99 code=0x7ffc0000 [ 1805.804709][ T27] audit: type=1326 audit(8226782515.500:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23326 comm="syz.2.5005" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb7e219de99 code=0x7ffc0000 [ 1805.843771][ T1135] bridge0: port 2(bridge_slave_1) entered blocking state [ 1805.850933][ T1135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1806.124673][T23343] syz1: rxe_newlink: already configured on lo [ 1806.153597][T23346] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 1806.578012][T20955] Bluetooth: hci1: command tx timeout [ 1807.274380][T23171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1807.607891][T23360] 9pnet_virtio: no channels available for device syz [ 1807.652409][T23171] veth0_vlan: entered promiscuous mode [ 1807.684517][T23359] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5012'. [ 1807.888168][T23171] veth1_vlan: entered promiscuous mode [ 1808.015496][T23171] veth0_macvtap: entered promiscuous mode [ 1808.047225][T23171] veth1_macvtap: entered promiscuous mode [ 1808.383376][T23171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1808.416777][T23171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1808.453005][T23171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1808.483763][T23171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1808.518185][T23171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1808.530278][T23171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1808.542449][T23171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1808.553795][T23171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1808.579652][ T11] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1808.587648][T23171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1808.610467][T23382] fuse: Bad value for 'user_id' [ 1808.634097][T23171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1808.657884][T23171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1808.674522][T23171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1808.719615][T23389] (null): rxe_set_mtu: Set mtu to 1024 [ 1808.725446][T23389] rdma_rxe: rxe_newlink: failed to add lo [ 1808.731421][T23171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1808.743167][T23171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1808.799478][T23171] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1808.817935][T23171] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1808.837001][T23171] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1808.857283][T23171] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1808.939839][T23393] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 1809.739303][T23398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5022'. [ 1809.780407][T23398] 9pnet_virtio: no channels available for device syz [ 1810.036262][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1810.059484][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1810.126451][T15133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1810.143128][T15133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1810.288064][T18045] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1810.541931][T18045] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 1810.820992][T18045] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1810.889612][T18045] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1810.962907][T18045] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1810.988960][T18045] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1811.020073][T18045] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1811.045306][T18045] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1811.054222][T23426] IPVS: Scheduler module ip_vs_ not found [ 1811.078951][T18045] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1811.097714][T18045] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1811.117858][T18045] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1811.126128][T18045] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1811.177724][T18045] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1811.210705][T18045] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1811.240972][T18045] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1811.251893][T18045] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1811.298412][T18045] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1811.306611][T18045] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1811.327836][T18045] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1811.348088][T18045] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1811.368356][T23442] fuse: Bad value for 'user_id' [ 1811.369316][T18045] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1811.407761][T18045] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1811.443982][T18045] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1811.499404][T18045] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1811.566806][T18045] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1811.689990][T18045] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1811.715344][T18045] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1811.739444][T23447] UBIFS error (pid: 23447): cannot open "/dev/sequencer", error -22 [ 1811.997355][T18045] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1812.231249][T18045] usb 4-1: Product: syz [ 1812.316798][T18045] usb 4-1: Manufacturer: syz [ 1812.409698][T18045] usb 4-1: SerialNumber: syz [ 1812.499850][T18045] usb 4-1: config 0 descriptor?? [ 1812.619198][T18045] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 1812.685971][T23454] (null): rxe_set_mtu: Set mtu to 4096 [ 1812.704626][T23454] rdma_rxe: rxe_newlink: failed to add lo [ 1812.724248][T18048] IPVS: starting estimator thread 0... [ 1812.828954][T14470] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1812.846785][T14470] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1812.858906][T23455] IPVS: using max 19 ests per chain, 45600 per kthread [ 1812.868701][T14470] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1812.880880][T14470] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1812.890127][T14470] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1812.898210][T14470] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1812.947281][T23456] lo speed is unknown, defaulting to 1000 [ 1813.228546][T23462] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5032'. [ 1813.273799][T23462] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5032'. [ 1813.294559][T23462] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5032'. [ 1813.308215][T23462] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5032'. [ 1813.360881][T23462] 9pnet_virtio: no channels available for device syz [ 1813.373355][T23471] random: crng reseeded on system resumption [ 1814.652425][ C0] usb 4-1: yurex_control_callback - control failed: -2 [ 1815.177999][T14470] Bluetooth: hci0: command tx timeout [ 1815.268169][T16886] usb 4-1: USB disconnect, device number 48 [ 1815.309348][T16886] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 1815.565577][T23480] fuse: Bad value for 'fd' [ 1815.733200][T23488] 9pnet_virtio: no channels available for device syz [ 1816.606925][T23494] (null): rxe_set_mtu: Set mtu to 4096 [ 1816.613911][T23494] rdma_rxe: rxe_newlink: failed to add lo [ 1816.795339][T23498] UBIFS error (pid: 23498): cannot open "/dev/sequencer", error -22 [ 1816.930067][T23456] chnl_net:caif_netlink_parms(): no params data found [ 1817.099889][T23456] bridge0: port 1(bridge_slave_0) entered blocking state [ 1817.109612][T23456] bridge0: port 1(bridge_slave_0) entered disabled state [ 1817.117354][T23456] bridge_slave_0: entered allmulticast mode [ 1817.124822][T23456] bridge_slave_0: entered promiscuous mode [ 1817.134007][T23456] bridge0: port 2(bridge_slave_1) entered blocking state [ 1817.143723][T23456] bridge0: port 2(bridge_slave_1) entered disabled state [ 1817.163742][T23456] bridge_slave_1: entered allmulticast mode [ 1817.172203][T23456] bridge_slave_1: entered promiscuous mode [ 1817.216771][T23456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1817.217795][T14470] Bluetooth: hci0: command tx timeout [ 1817.230347][T23456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1817.286245][T23506] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5041'. [ 1817.410029][T23506] 9pnet_virtio: no channels available for device syz [ 1817.481319][T23456] team0: Port device team_slave_0 added [ 1817.501096][T23508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5041'. [ 1817.518964][T23508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5041'. [ 1817.529827][T23508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5041'. [ 1817.559250][T23456] team0: Port device team_slave_1 added [ 1817.634088][T23515] random: crng reseeded on system resumption [ 1819.297639][T14470] Bluetooth: hci0: command tx timeout [ 1819.431291][T23456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1819.438613][T23456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1819.466135][T23456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1819.485254][T23456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1819.493558][T23456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1819.552212][T23456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1819.614210][T23526] fuse: Bad value for 'fd' [ 1819.750353][T23456] hsr_slave_0: entered promiscuous mode [ 1819.786839][T23456] hsr_slave_1: entered promiscuous mode [ 1819.809892][T23456] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1819.828419][T23456] Cannot create hsr debugfs directory [ 1819.856279][T23533] (null): rxe_set_mtu: Set mtu to 1024 [ 1819.862887][T23533] rdma_rxe: rxe_newlink: failed to add lo [ 1819.969704][T23535] 9pnet_virtio: no channels available for device syz [ 1820.823294][T23538] syzkaller0: entered promiscuous mode [ 1820.829729][T23538] syzkaller0: entered allmulticast mode [ 1821.378281][T14470] Bluetooth: hci0: command tx timeout [ 1822.522283][T18045] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1822.765984][T18045] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1822.775839][T18045] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1822.789803][T18045] usb 4-1: Product: syz [ 1822.794019][T18045] usb 4-1: Manufacturer: syz [ 1822.799018][T18045] usb 4-1: SerialNumber: syz [ 1824.695851][T23551] macvtap5: entered allmulticast mode [ 1824.708632][T23552] macvtap6: entered allmulticast mode [ 1824.841060][T18045] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1824.862196][T18045] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -71 [ 1824.879737][T18045] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 1824.891892][T18045] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1824.903372][T18045] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1824.919056][T18045] lan78xx: probe of 4-1:1.0 failed with error -71 [ 1824.934501][T18045] usb 4-1: USB disconnect, device number 49 [ 1825.139398][T23572] 9pnet_virtio: no channels available for device syz [ 1825.409371][T18048] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1825.738680][T18048] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1825.836857][T18048] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1825.918203][T18048] usb 3-1: Product: syz [ 1825.922452][T18048] usb 3-1: Manufacturer: syz [ 1825.927049][T18048] usb 3-1: SerialNumber: syz [ 1826.115177][T23576] (null): rxe_set_mtu: Set mtu to 4096 [ 1826.122414][T23576] rdma_rxe: rxe_newlink: failed to add lo [ 1826.162922][T23456] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1826.173906][T23456] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1826.195401][T23578] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 1826.204811][T23456] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1826.217769][T23456] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1826.454352][T18048] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1826.474813][T23456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1826.519162][T18048] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -71 [ 1826.565933][T18048] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 1826.642707][T18048] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1826.742712][T23585] UBIFS error (pid: 23585): cannot open "/dev/sequencer", error -22 [ 1826.986576][T18048] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1827.719308][T18048] lan78xx: probe of 3-1:1.0 failed with error -71 [ 1828.549542][T18048] usb 3-1: USB disconnect, device number 24 [ 1828.575015][T23456] 8021q: adding VLAN 0 to HW filter on device team0 [ 1828.614269][T15133] bridge0: port 1(bridge_slave_0) entered blocking state [ 1828.621493][T15133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1828.667038][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 1828.674288][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1828.772132][T23456] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1828.982195][T23597] 9pnet_virtio: no channels available for device syz [ 1829.067738][T18048] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1829.937772][T18048] usb 3-1: Using ep0 maxpacket: 8 [ 1829.958899][T18048] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 1829.971326][T23608] (null): rxe_set_mtu: Set mtu to 4096 [ 1829.976218][T18048] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1829.983976][T23456] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1830.008099][T23608] rdma_rxe: rxe_newlink: failed to add lo [ 1830.010120][T18048] usb 3-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 1830.030755][T18048] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1830.046953][T18048] usb 3-1: Product: syz [ 1830.057247][T18048] usb 3-1: Manufacturer: syz [ 1830.065670][T18048] usb 3-1: SerialNumber: syz [ 1830.083664][T18048] usb 3-1: config 0 descriptor?? [ 1830.093861][T23591] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1830.104600][T18048] powermate: probe of 3-1:0.0 failed with error -22 [ 1830.162514][T23456] veth0_vlan: entered promiscuous mode [ 1830.211780][T23456] veth1_vlan: entered promiscuous mode [ 1830.283796][T23456] veth0_macvtap: entered promiscuous mode [ 1830.307443][T23456] veth1_macvtap: entered promiscuous mode [ 1830.346747][T23456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1830.397565][T13755] block nbd3: Possible stuck request ffff888022520000: control (read@0,1024B). Runtime 210 seconds [ 1830.428817][T23456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1830.459734][T23456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1830.504671][T23456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1830.572407][T23456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1830.583664][T23456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1830.615198][T23456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1830.626378][T23615] UBIFS error (pid: 23615): cannot open "/dev/sequencer", error -22 [ 1830.627327][T23456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1830.674732][T23456] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1830.883131][T23456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1830.919069][T23456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1830.942602][T23456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1830.963041][T23456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1830.973607][T23456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1830.984571][T23456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1830.994889][T23456] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1831.005812][T23456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1831.019555][T23456] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1831.031480][T23456] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1831.041979][T23456] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1831.055338][T23456] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1831.082805][T23456] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1831.341257][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1831.359734][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1831.398906][T12263] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1831.406819][T12263] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1831.585091][T23631] xt_socket: unknown flags 0x50 [ 1831.733275][T18048] usb 3-1: USB disconnect, device number 25 [ 1832.195521][T23640] 9pnet_virtio: no channels available for device syz [ 1833.977928][T23648] (null): rxe_set_mtu: Set mtu to 4096 [ 1834.014685][T23648] rdma_rxe: rxe_newlink: failed to add lo [ 1834.067200][ T23] IPVS: starting estimator thread 0... [ 1834.178358][T23653] IPVS: using max 36 ests per chain, 86400 per kthread [ 1834.439396][T23656] UBIFS error (pid: 23656): cannot open "/dev/sequencer", error -22 [ 1834.548621][T18034] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1834.677900][ T23] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1834.761408][T18034] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1834.779978][T23672] xt_socket: unknown flags 0x50 [ 1834.784966][T18034] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1834.808049][T18034] usb 4-1: Product: syz [ 1834.812272][T18034] usb 4-1: Manufacturer: syz [ 1834.824693][T18034] usb 4-1: SerialNumber: syz [ 1834.869730][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 1834.891859][ T23] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1834.941089][ T23] usb 2-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 1834.998328][ T23] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1835.061141][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1835.223385][T23678] 9pnet_virtio: no channels available for device syz [ 1835.461189][ T1089] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1835.924092][T18034] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 1835.924316][ T23] usb 2-1: can't set config #16, error -71 [ 1835.943868][T18034] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000098. ret = -71 [ 1835.957089][ T23] usb 2-1: USB disconnect, device number 45 [ 1835.963626][T18034] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 1835.976262][T18034] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1835.986140][T18034] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1836.022263][T18034] lan78xx: probe of 4-1:1.0 failed with error -71 [ 1836.071686][T18034] usb 4-1: USB disconnect, device number 50 [ 1836.574664][T23697] netlink: 'syz.2.5093': attribute type 16 has an invalid length. [ 1836.582656][T23697] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5093'. [ 1837.593228][T23707] xt_socket: unknown flags 0x50 [ 1837.878614][T23712] 9pnet_virtio: no channels available for device syz [ 1838.854195][T23716] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5099'. [ 1838.927346][T23716] netlink: 200 bytes leftover after parsing attributes in process `syz.0.5099'. [ 1839.255423][ T60] Bluetooth: Error in BCSP hdr checksum [ 1839.367731][ T23] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1841.152611][T12263] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1841.297802][T20955] Bluetooth: hci4: command 0x1003 tx timeout [ 1841.298456][T14470] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1841.371339][ T23] usb 3-1: config 0 interface 0 altsetting 255 has an invalid endpoint with address 0xFF, skipping [ 1841.429912][ T23] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1841.448550][ T23] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1841.463433][ T23] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1841.476975][ T23] usb 3-1: Product: syz [ 1841.503075][ T23] usb 3-1: Manufacturer: syz [ 1841.520159][ T23] usb 3-1: SerialNumber: syz [ 1841.674571][ T23] usb 3-1: config 0 descriptor?? [ 1841.705213][ T23] snd-usb-audio: probe of 3-1:0.0 failed with error -22 [ 1841.803694][T23742] 9pnet_virtio: no channels available for device syz [ 1842.500647][T18034] usb 3-1: USB disconnect, device number 26 [ 1842.565678][T20641] udevd[20641]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1844.280746][T23765] 9pnet_virtio: no channels available for device syz [ 1845.115514][T23767] 9pnet_virtio: no channels available for device syz [ 1845.393236][T23771] xt_socket: unknown flags 0x50 [ 1846.185519][T23796] 9pnet_virtio: no channels available for device syz [ 1847.053530][T23795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5125'. [ 1847.310470][T23801] 9pnet_virtio: no channels available for device syz [ 1848.403683][T23810] xt_socket: unknown flags 0x50 [ 1849.787257][T23834] syzkaller0: entered promiscuous mode [ 1849.792994][T23834] syzkaller0: entered allmulticast mode [ 1851.018729][T23838] 9pnet_virtio: no channels available for device syz [ 1851.465706][T23847] xt_socket: unknown flags 0x50 [ 1853.381540][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.390975][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1854.882106][ T5139] udevd[5139]: worker [20429] /devices/virtual/block/nbd3 timeout; kill it [ 1854.893202][ T5139] udevd[5139]: seq 21872 '/devices/virtual/block/nbd3' killed [ 1855.839539][T23869] syzkaller0: entered promiscuous mode [ 1855.865339][T23869] syzkaller0: entered allmulticast mode [ 1856.001351][T23876] 9pnet_virtio: no channels available for device syz [ 1856.748149][T23875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5148'. [ 1856.820892][T23881] 9pnet_virtio: no channels available for device syz [ 1857.268767][T23890] xt_socket: unknown flags 0x50 [ 1858.120547][T20955] Bluetooth: hci2: Unexpected cc 0x00c8 with no status [ 1858.313685][T23903] syzkaller0: entered promiscuous mode [ 1858.339796][T23903] syzkaller0: entered allmulticast mode [ 1858.910778][T14470] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1858.917320][T20955] Bluetooth: hci4: command 0x1003 tx timeout [ 1859.948097][T23915] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 1861.088677][ T8499] block nbd3: Possible stuck request ffff888022520000: control (read@0,1024B). Runtime 240 seconds [ 1863.657930][T23914] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 1863.891631][T23923] 9pnet_virtio: no channels available for device syz [ 1864.031054][T23925] syzkaller0: entered promiscuous mode [ 1864.036625][T23925] syzkaller0: entered allmulticast mode [ 1864.142164][T23930] xt_socket: unknown flags 0x50 [ 1864.469681][T23944] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5165'. [ 1866.568955][T23978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5170'. [ 1866.583501][T23978] 9pnet_virtio: no channels available for device syz [ 1867.721453][T23987] xt_socket: unknown flags 0x50 [ 1867.741125][T23991] 9pnet_virtio: no channels available for device syz [ 1867.752987][T23993] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 1868.577936][T14470] Bluetooth: hci4: command 0x1003 tx timeout [ 1868.578577][T20955] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1891.138890][ T8499] block nbd3: Possible stuck request ffff888022520000: control (read@0,1024B). Runtime 270 seconds [ 1914.823661][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.831323][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1921.218230][ T8499] block nbd3: Possible stuck request ffff888022520000: control (read@0,1024B). Runtime 300 seconds [ 1951.298656][ T8499] block nbd3: Possible stuck request ffff888022520000: control (read@0,1024B). Runtime 330 seconds [ 1976.261029][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.267738][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1981.387582][ T8499] block nbd3: Possible stuck request ffff888022520000: control (read@0,1024B). Runtime 360 seconds [ 1999.939459][ T28] INFO: task udevd:20429 blocked for more than 143 seconds. [ 1999.946815][ T28] Not tainted syzkaller #0 [ 1999.951943][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1999.960965][ T28] task:udevd state:D stack:25752 pid:20429 ppid:5139 flags:0x00004006 [ 1999.970310][ T28] Call Trace: [ 1999.973621][ T28] [ 1999.976567][ T28] __schedule+0x15ae/0x4660 [ 1999.981561][ T28] ? asan.module_dtor+0x20/0x20 [ 1999.986444][ T28] ? mark_lock+0x94/0x320 [ 1999.990868][ T28] ? __lock_acquire+0x7d80/0x7d80 [ 1999.995917][ T28] ? lock_chain_count+0x20/0x20 [ 2000.000959][ T28] ? _raw_spin_lock_irq+0xbb/0xf0 [ 2000.006014][ T28] ? _raw_spin_lock_irqsave+0x100/0x100 [ 2000.011649][ T28] schedule+0xbd/0x170 [ 2000.015738][ T28] io_schedule+0x80/0xd0 [ 2000.020384][ T28] folio_wait_bit_common+0x881/0xfa0 [ 2000.025761][ T28] ? folio_wait_bit+0x30/0x30 [ 2000.030771][ T28] ? _compound_head+0x120/0x120 [ 2000.035699][ T28] ? filemap_add_folio+0x190/0x3d0 [ 2000.041134][ T28] ? __filemap_get_folio+0x71e/0xbe0 [ 2000.046466][ T28] ? blkdev_writepage+0x30/0x30 [ 2000.051624][ T28] do_read_cache_folio+0x1c0/0x7f0 [ 2000.056808][ T28] ? blkdev_writepage+0x30/0x30 [ 2000.062016][ T28] read_part_sector+0xd2/0x350 [ 2000.066818][ T28] adfspart_check_POWERTEC+0x93/0xed0 [ 2000.072345][ T28] ? adfspart_check_ADFS+0x620/0x620 [ 2000.077835][ T28] ? put_partition+0x360/0x360 [ 2000.082638][ T28] ? alloc_pages+0x4e1/0x740 [ 2000.087321][ T28] bdev_disk_changed+0x755/0x1450 [ 2000.092555][ T28] ? bdev_resize_partition+0xf0/0xf0 [ 2000.098263][ T28] ? _atomic_dec_and_lock+0x93/0x120 [ 2000.103647][ T28] ? iput+0x33f/0x900 [ 2000.107747][ T28] blkdev_get_whole+0x30d/0x390 [ 2000.112818][ T28] blkdev_get_by_dev+0x3a9/0x610 [ 2000.117988][ T28] blkdev_open+0x14e/0x360 [ 2000.122446][ T28] do_dentry_open+0x880/0x14b0 [ 2000.127252][ T28] ? blkdev_mmap+0x1b0/0x1b0 [ 2000.131924][ T28] path_openat+0x284f/0x3270 [ 2000.136550][ T28] ? do_sys_openat2+0xda/0x1d0 [ 2000.141637][ T28] ? __x64_sys_openat+0x139/0x160 [ 2000.146718][ T28] ? verify_lock_unused+0x140/0x140 [ 2000.152141][ T28] ? do_filp_open+0x430/0x430 [ 2000.156893][ T28] do_filp_open+0x1f2/0x430 [ 2000.161675][ T28] ? vfs_tmpfile+0x480/0x480 [ 2000.166463][ T28] ? _raw_spin_unlock+0x28/0x40 [ 2000.171435][ T28] ? alloc_fd+0x590/0x640 [ 2000.175798][ T28] do_sys_openat2+0x134/0x1d0 [ 2000.180985][ T28] ? do_sys_open+0xe0/0xe0 [ 2000.185465][ T28] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 2000.191567][ T28] ? lock_chain_count+0x20/0x20 [ 2000.196455][ T28] __x64_sys_openat+0x139/0x160 [ 2000.201794][ T28] do_syscall_64+0x55/0xb0 [ 2000.206413][ T28] ? clear_bhb_loop+0x40/0x90 [ 2000.211278][ T28] ? clear_bhb_loop+0x40/0x90 [ 2000.215996][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2000.222627][ T28] RIP: 0033:0x7f13168a7407 [ 2000.227150][ T28] RSP: 002b:00007ffc5ec63960 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 2000.235660][ T28] RAX: ffffffffffffffda RBX: 00007f1316f58880 RCX: 00007f13168a7407 [ 2000.243853][ T28] RDX: 00000000000a0800 RSI: 000055846474f520 RDI: ffffffffffffff9c [ 2000.251917][ T28] RBP: 000055846474e910 R08: 0000000000000000 R09: 0000000000000000 [ 2000.260615][ T28] R10: 0000000000000000 R11: 0000000000000202 R12: 00005584647854c0 [ 2000.270303][ T28] R13: 0000558464766410 R14: 0000000000000000 R15: 00005584647854c0 [ 2000.278524][ T28] [ 2000.281616][ T28] [ 2000.281616][ T28] Showing all locks held in the system: [ 2000.289475][ T28] 1 lock held by khungtaskd/28: [ 2000.294375][ T28] #0: ffffffff8d131da0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 2000.304707][ T28] 2 locks held by kworker/u5:1/5085: [ 2000.310144][ T28] #0: ffff888021bfc538 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 2000.321761][ T28] #1: ffffc9001063fd00 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 2000.333644][ T28] 2 locks held by getty/5534: [ 2000.338944][ T28] #0: ffff88823bdae8a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2000.348873][ T28] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370 [ 2000.359341][ T28] 2 locks held by kworker/u5:2/14251: [ 2000.364741][ T28] #0: ffff888021bfc538 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 2000.376098][ T28] #1: ffffc900039c7d00 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 2000.388322][ T28] 3 locks held by kworker/u4:3/15133: [ 2000.393750][ T28] 1 lock held by udevd/20429: [ 2000.398548][ T28] #0: ffff8881413bf4c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x11b/0x610 [ 2000.408897][ T28] [ 2000.411292][ T28] ============================================= [ 2000.411292][ T28] [ 2000.419896][ T28] NMI backtrace for cpu 0 [ 2000.424256][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 2000.431502][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 2000.441600][ T28] Call Trace: [ 2000.444880][ T28] [ 2000.447814][ T28] dump_stack_lvl+0x18c/0x250 [ 2000.452524][ T28] ? __wake_up_klogd+0xd9/0x100 [ 2000.457415][ T28] ? show_regs_print_info+0x20/0x20 [ 2000.462632][ T28] ? load_image+0x420/0x420 [ 2000.467167][ T28] nmi_cpu_backtrace+0x3a6/0x3e0 [ 2000.472114][ T28] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 2000.478295][ T28] ? load_image+0x420/0x420 [ 2000.482812][ T28] ? wq_watchdog_touch+0xef/0x170 [ 2000.487850][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 2000.493955][ T28] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 2000.502501][ T28] watchdog+0xf59/0xfa0 [ 2000.508891][ T28] ? watchdog+0x1e1/0xfa0 [ 2000.513255][ T28] kthread+0x2fa/0x390 [ 2000.517598][ T28] ? hungtask_pm_notify+0x50/0x50 [ 2000.527965][ T28] ? kthread_blkcg+0xd0/0xd0 [ 2000.532756][ T28] ret_from_fork+0x48/0x80 [ 2000.537366][ T28] ? kthread_blkcg+0xd0/0xd0 [ 2000.547303][ T28] ret_from_fork_asm+0x11/0x20 [ 2000.553131][ T28] [ 2000.557120][ T28] Sending NMI from CPU 0 to CPUs 1: [ 2000.565849][ C1] NMI backtrace for cpu 1 [ 2000.565861][ C1] CPU: 1 PID: 12263 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 2000.565878][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 2000.565887][ C1] Workqueue: bat_events batadv_nc_worker [ 2000.566017][ C1] RIP: 0010:lock_acquire+0x151/0x420 [ 2000.566039][ C1] Code: 3e 00 0f 85 17 01 00 00 43 c6 44 3c 08 00 48 c7 84 24 a0 00 00 00 00 00 00 00 9c 8f 84 24 a0 00 00 00 4c 8b b4 24 a0 00 00 00 <43> c6 44 3c 08 f8 fa 48 c7 c7 40 d8 ca 8a e8 4c da 23 09 65 ff 05 [ 2000.566051][ C1] RSP: 0018:ffffc90004b0f9c0 EFLAGS: 00000246 [ 2000.566064][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: bb5b2fda90924600 [ 2000.566074][ C1] RDX: 0000000000000000 RSI: ffffffff8b1cfa00 RDI: ffffffff8b1cf9c0 [ 2000.566085][ C1] RBP: ffffc90004b0fae0 R08: ffffffff8e8c6b2f R09: 1ffffffff1d18d65 [ 2000.566096][ C1] R10: dffffc0000000000 R11: fffffbfff1d18d66 R12: 1ffff92000961f44 [ 2000.566108][ C1] R13: ffffffff8d131da0 R14: 0000000000000246 R15: dffffc0000000000 [ 2000.566119][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 2000.566132][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2000.566142][ C1] CR2: 000055cee9aec660 CR3: 000000000cf32000 CR4: 00000000003506e0 [ 2000.566157][ C1] Call Trace: [ 2000.566164][ C1] [ 2000.566177][ C1] ? read_lock_is_recursive+0x20/0x20 [ 2000.566194][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 2000.566211][ C1] ? do_raw_spin_unlock+0x121/0x230 [ 2000.566231][ C1] ? batadv_nc_purge_paths+0x300/0x3a0 [ 2000.566246][ C1] ? batadv_nc_process_nc_paths+0x380/0x380 [ 2000.566261][ C1] ? batadv_nc_process_nc_paths+0x380/0x380 [ 2000.566278][ C1] batadv_nc_process_nc_paths+0xdb/0x380 [ 2000.566294][ C1] ? batadv_nc_process_nc_paths+0xba/0x380 [ 2000.566310][ C1] ? batadv_nc_process_nc_paths+0xba/0x380 [ 2000.566327][ C1] batadv_nc_worker+0x423/0x600 [ 2000.566344][ C1] ? process_scheduled_works+0x975/0x1600 [ 2000.566365][ C1] process_scheduled_works+0xa60/0x1600 [ 2000.566396][ C1] ? worker_attach_to_pool+0x370/0x370 [ 2000.566417][ C1] ? assign_work+0x3cc/0x5d0 [ 2000.566437][ C1] worker_thread+0xa5e/0xfe0 [ 2000.566457][ C1] ? _raw_spin_unlock_irqrestore+0xc0/0x120 [ 2000.566479][ C1] ? _raw_spin_unlock+0x40/0x40 [ 2000.566496][ C1] ? __kthread_parkme+0x71/0x1c0 [ 2000.566516][ C1] kthread+0x2fa/0x390 [ 2000.566529][ C1] ? pr_cont_work+0x550/0x550 [ 2000.566547][ C1] ? kthread_blkcg+0xd0/0xd0 [ 2000.566562][ C1] ret_from_fork+0x48/0x80 [ 2000.566580][ C1] ? kthread_blkcg+0xd0/0xd0 [ 2000.566594][ C1] ret_from_fork_asm+0x11/0x20 [ 2000.566620][ C1] [ 2000.598011][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 2000.598027][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 2000.598048][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 2000.598059][ T28] Call Trace: [ 2000.598070][ T28] [ 2000.598079][ T28] dump_stack_lvl+0x18c/0x250 [ 2000.598119][ T28] ? show_regs_print_info+0x20/0x20 [ 2000.598143][ T28] ? load_image+0x420/0x420 [ 2000.598175][ T28] panic+0x2ca/0x720 [ 2000.598199][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 2000.598219][ T28] ? __irq_work_queue_local+0x13a/0x3b0 [ 2000.598270][ T28] ? preempt_schedule_thunk+0x1a/0x30 [ 2000.598296][ T28] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 2000.598320][ T28] watchdog+0xf98/0xfa0 [ 2000.598343][ T28] ? watchdog+0x1e1/0xfa0 [ 2000.598369][ T28] kthread+0x2fa/0x390 [ 2000.598386][ T28] ? hungtask_pm_notify+0x50/0x50 [ 2000.598408][ T28] ? kthread_blkcg+0xd0/0xd0 [ 2000.598425][ T28] ret_from_fork+0x48/0x80 [ 2000.598444][ T28] ? kthread_blkcg+0xd0/0xd0 [ 2000.598461][ T28] ret_from_fork_asm+0x11/0x20 [ 2000.598494][ T28] [ 2000.601167][ T28] Kernel Offset: disabled [ 2000.948569][ T28] Rebooting in 86400 seconds..