last executing test programs: 8m44.036166534s ago: executing program 1 (id=2237): sendto$l2tp(0xffffffffffffffff, &(0x7f00000002c0)="c4cc1feddb195b477b2f918ad52be0375bbef6b85d3b5d0ce5b1f8b1e10e142909f56b4f5f0aecf48093bd1b7052f675a3f88585076004d5136e8028026c084329bb1bd38c9c980d9e10c895226effe312c59551d3ff48656f0e787a85d6655eee090519de2346eaee5d69ba2044d27a67f8bfd3eb4cd3e68fd5a71680", 0x7d, 0x4040000, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r0 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000004c0)={0xffff, 0x5, 0xfcf99bce6d94fdd6, {0x4, @meta={0x4d435655, 0x5af2a810, 0xfb, 0xc500, 0x75b58bbb}}, 0x62}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) r4 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000440)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r5 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x3}, 0x0, 0x0, r4) add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, &(0x7f00000001c0)="a6", 0x1, r5) capget(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000140)={0xdb, 0x8, 0x7, 0x1, 0x30, 0x3}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)) keyctl$search(0xa, r5, &(0x7f0000000200)='user\x00', &(0x7f0000000280)={'syz', 0x0}, r5) close(0x3) 8m42.547813879s ago: executing program 1 (id=2238): syz_clone(0x400011, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x80, 0x0}, 0x20000000) sendmsg$kcm(r0, &(0x7f0000002ec0)={&(0x7f0000001b00)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x1002}, 0x18, 0x0, 0x0, 0x0, 0x0, 0x86a9}, 0x20000000) 8m41.908527823s ago: executing program 1 (id=2245): r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000980)={'syz0\x00', {}, 0x1, [0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffb, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x100, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x87], [0x0, 0x0, 0x8000, 0x0, 0x0, 0x1, 0x0, 0x40, 0x0, 0xf, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0xffffffff, 0x0, 0x3fffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0xfffffffc, 0x800, 0x0, 0x19c, 0x8, 0x200, 0x0, 0x0, 0x5, 0x0, 0xffffffff, 0x55f8, 0x4ce6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x400000, 0x2, 0xde, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x100000, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80007, 0x400008, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x10, 0x4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x2, 0xfffffffd, 0x0, 0x0, 0x1]}, 0x45c) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) timer_create(0xfffffffffffffffc, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000280)) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000040), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x10040) 8m40.537972894s ago: executing program 1 (id=2246): syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000000c0)={&(0x7f00000005c0)=[{0x6, 0x2000, 0x0, 0x0}], 0x1}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058d"], 0x0) 8m37.022359349s ago: executing program 1 (id=2260): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 8m33.021002122s ago: executing program 1 (id=2277): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000080)=0x40000) 8m16.7420056s ago: executing program 32 (id=2277): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000080)=0x40000) 3m5.764167516s ago: executing program 2 (id=3503): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) r1 = syz_pidfd_open(r0, 0x0) wait4(r0, 0x0, 0x40000000, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$FS_IOC_GETVERSION(r1, 0xc040ff0b, &(0x7f0000000180)) 3m5.151908556s ago: executing program 2 (id=3507): socket$xdp(0x2c, 0x3, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r1, &(0x7f0000000580)='1\x00', 0x2) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0xbe, &(0x7f00000000c0)=ANY=[@ANYRES32=r3], 0x0) quotactl_fd$Q_QUOTAON(0xffffffffffffffff, 0xffffffff80000201, 0x0, &(0x7f0000000040)='./file0\x00') ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'pcl711\x00', [0xf27, 0x80000000, 0x2, 0xa, 0xe, 0x3, 0x8, 0x3, 0x8, 0xfd, 0x2, 0x1, 0x1, 0x1, 0x7, 0x101, 0xfffffffe, 0x7f, 0x4, 0x40000003, 0x89, 0xca9f, 0x3, 0x20001e58, 0xffffffff, 0x7, 0x3, 0x4000008, 0x4085, 0x0, 0xfffffff8]}) write$sysctl(r1, &(0x7f00000000c0)='2\x00', 0x2) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000800)=[{0x0, 0x0, &(0x7f0000001e80)=[{0x0}, {&(0x7f00000002c0)="5fec9dec1e9d48e2b3a02e29dcaadb6d242c08b8b6e2a34dd08e48e3d32aa2bf0bd42348d6bf39fd7dac80fedaaab8ff4258ecbc4e025305fab94303f773d083bb47da24c3341e27416f38e3251fe082c8f8602308cd2f7dc846c93e62a8d53d22fcabce47b5531463290c970dccfaa7da3e4ee56136f44b991100e3db7c750c3ccb3e01d6598d53d05ca7503d7430f3ff2b79ab629faa1dfb2d0899dd807d28174305bd600e50112aa4d0ec230a89b3078bb60a198e5a7169d91005cda3fc9870956d72773bd700", 0xc8}, {&(0x7f0000002dc0)="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", 0x279}, {0x0}], 0x4, 0x0, 0x0, 0x4001}], 0x1, 0x48800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 3m3.887368565s ago: executing program 2 (id=3509): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000006506010100000000000000000100000005000100070000000900020073797a31000000000c0007680800130000000000050005"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r0 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) r1 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890c, &(0x7f0000000000)) 3m3.719940423s ago: executing program 2 (id=3511): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m3.436172996s ago: executing program 2 (id=3512): add_key$user(0x0, 0x0, &(0x7f0000000380)="00e14c3d343914ecc2be8078f6f782b492f5d3123a624cc010373b8f372eedd7292a93a66534fc109c26bd2632ca486c425976b0b0833e31a449b1f86a58a837ccf244140d6932c32518c90246713c39b6f81997adc709f05ed115467c8435e064f4245107d660f3793bfc5ed2093edd3c9c75651ae4a66a66ff611f073187415f82e0ce23cc9ce5bced1810f0d406a57c59b52983e2d7", 0x97, 0xffffffffffffffff) socket$can_raw(0x1d, 0x3, 0x1) eventfd(0x2) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000003c0)=ANY=[@ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0], 0x0) 2m59.912039872s ago: executing program 2 (id=3526): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) quotactl_fd$Q_SYNC(0xffffffffffffffff, 0xffffffff80000101, 0x0, 0x0) r2 = syz_io_uring_setup(0x370a, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x2, 0x3, 0x2cf}, &(0x7f00000004c0), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r2, 0x12, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2m43.012983302s ago: executing program 33 (id=3526): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) quotactl_fd$Q_SYNC(0xffffffffffffffff, 0xffffffff80000101, 0x0, 0x0) r2 = syz_io_uring_setup(0x370a, &(0x7f00000001c0)={0x0, 0xfffffffc, 0x2, 0x3, 0x2cf}, &(0x7f00000004c0), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r2, 0x12, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 21.45133143s ago: executing program 7 (id=4118): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x206) openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/key-users\x00', 0x0, 0x0) r5 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r5, 0x40026f34, &(0x7f0000000040)=0x1) r6 = socket$rds(0x15, 0x5, 0x0) socket(0x400000000010, 0x3, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r6, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) 19.037075393s ago: executing program 7 (id=4122): socket$nl_generic(0x10, 0x3, 0x10) r0 = msgget$private(0x0, 0x0) msgsnd(r0, 0x0, 0x8, 0x800) msgrcv(r0, 0x0, 0x0, 0x2, 0x3800) syz_pidfd_open(0x0, 0x0) pipe2(&(0x7f00000000c0), 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r1, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) 14.386168491s ago: executing program 7 (id=4134): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r0, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20802, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) r3 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) setsockopt(0xffffffffffffffff, 0xc, 0x7f, 0x0, 0x0) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f00000007c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) connect$rose(r5, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) connect$rose(r5, &(0x7f00000000c0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x3, [@bcast, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x40) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wrr\x00', 0x15, 0xff, 0xf}, 0x2c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYRES8, @ANYBLOB="0315000000000000480012800b0001006772657461700000380002800400120008001500d570020005", @ANYRES32, @ANYBLOB, @ANYRES32], 0x78}, 0x1, 0x0, 0x0, 0x24000891}, 0x0) 12.528202352s ago: executing program 7 (id=4143): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r2, 0x0, 0x0, 0x20008000) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x21, 0x0, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000000c0)='source', 0x0, r1) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x40, 0x2, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0xa) 12.127080539s ago: executing program 7 (id=4147): dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, 0x0, 0x0) 10.541688742s ago: executing program 0 (id=4154): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x3, 0xfffffffc, {0x60, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x1e}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000081}, 0x8840) 9.548871928s ago: executing program 5 (id=4157): socket(0xa, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='tmpfs\x00', 0x16, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r0, &(0x7f0000000200)='./file1\x00', 0x800, 0x1) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000000)='./bus\x00') linkat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x1000) unlink(&(0x7f0000000340)='./file0\x00') 9.20402374s ago: executing program 4 (id=4160): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={r2, @in={{0x2, 0x4e22, @empty}}, 0x8001, 0x7fff, 0xfffff000, 0x0, 0x94, 0x1, 0x10}, 0x9c) 9.203016597s ago: executing program 5 (id=4161): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b80)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x1100, 0x0, 0x585d}, [@IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x840}, 0x0) 9.202389733s ago: executing program 0 (id=4162): openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 8.922463213s ago: executing program 6 (id=4163): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r1 = syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) syz_open_procfs(r1, &(0x7f00000000c0)='fd/3\x00') 8.848020355s ago: executing program 5 (id=4164): socketpair$tipc(0x1e, 0x2, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a45322, &(0x7f00000003c0)) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x4) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000019080)=0x30) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000100)=0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0xd4) sched_setscheduler(0x0, 0x1, 0x0) 8.00988107s ago: executing program 3 (id=4165): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d0008000c0000000005000000", 0x29}], 0x1) socket(0x2, 0x2, 0x1) 7.803564068s ago: executing program 4 (id=4166): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b922, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0x5}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000280)=@xdp={0x2c, 0x8, r6, 0x8000017}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000680)="8f4cd2c8fd09865e53d25ad3bfd9", 0xe}, {&(0x7f0000000080)="7117192ba4860d6d1cfa46e444f3e4868bb2876c", 0x14}, {0x0}], 0x3}, 0x4) 6.860254673s ago: executing program 0 (id=4167): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) read$FUSE(r6, &(0x7f00000063c0)={0x2020}, 0x2020) r7 = socket(0x23, 0x803, 0xece) sendmsg$nl_route(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="280000006d0001002dbd700000000001000000001317d5a2b390f4a1401d08e2b08a9ec2796c3f47bf3333dd9a509a89ab40dcfee8510d16513d59863f3ce2d727cf038dd2141009b180b9a10ee5db22d4051221b6c7685c2a75e066107bb32c6381a8b0e5433568e707b30764fdabc17f2b8f9b1a59c17367347d40f283b9d079df48f2d3dd3ead707b714af7a1d23e992c72119d6e64cf45717b4ad6950198f66f029457a335252176aa771f5b271fd0dcda1e4b9cf1df03ff526c2bb16b430d56114e129b6098e78f", @ANYRES32=0x0, @ANYBLOB="00000300724000000800290007000000"], 0x28}, 0x1, 0x0, 0x0, 0x52273e86b92fbb73}, 0x20000000) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0585609, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) close(r2) 5.475701936s ago: executing program 3 (id=4168): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r2, @ANYBLOB="0800260094094e000800b7"], 0x2c}}, 0x0) 5.302841371s ago: executing program 6 (id=4169): bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e00000000eb15000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/11], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc) 5.232782054s ago: executing program 5 (id=4170): socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ptrace$PTRACE_SETSIGMASK(0x420b, r1, 0x8, &(0x7f0000000180)={[0xa5f]}) socketpair(0x21, 0x800, 0x8, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r4, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x18, 0x1406, 0x300, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x4004080) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x14, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='affs\x00', 0x200000, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x400082, 0x6, &(0x7f0000000000)="531582f33de1282b", 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0x2}], 0x1c) sendto$inet6(r5, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000000)=ANY=[], 0xffc9) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 4.287830876s ago: executing program 6 (id=4171): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000d00), r0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000200081dc00000000030000000200000000001dd8a82500000500160004000000080017004e22ac"], 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x44004) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = io_uring_setup(0x667, &(0x7f00000002c0)={0x0, 0xa14a, 0x1000, 0x2, 0x235}) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) 4.132598427s ago: executing program 0 (id=4172): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000017c0)={r2, 0x3, 0x2, 0x80c}, 0x10) 4.092363333s ago: executing program 3 (id=4173): ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={r0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe74, 0x0}) 3.640269835s ago: executing program 4 (id=4174): socket(0xa, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='tmpfs\x00', 0x16, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r0, &(0x7f0000000200)='./file1\x00', 0x800, 0x1) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000000)='./bus\x00') linkat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x1000) unlink(&(0x7f0000000340)='./file0\x00') 3.230889511s ago: executing program 4 (id=4175): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket(0x2000000000000021, 0x2, 0x2) shutdown(r1, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20802, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) r5 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) setsockopt(0xffffffffffffffff, 0xc, 0x7f, 0x0, 0x0) ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000)) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r7, 0x890b, &(0x7f00000007c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) connect$rose(r7, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) connect$rose(r7, &(0x7f00000000c0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x3, [@bcast, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x40) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wrr\x00', 0x15, 0xff, 0xf}, 0x2c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYRES8=r2, @ANYBLOB="0315000000000000480012800b0001006772657461700000380002800400120008001500d570020005", @ANYRES32, @ANYBLOB, @ANYRES32], 0x78}, 0x1, 0x0, 0x0, 0x24000891}, 0x0) 3.14116822s ago: executing program 5 (id=4176): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000640)='\f', 0x34000}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000240)={0x0, 0xffff874a}, &(0x7f00000002c0)=0x8) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(r0, 0x1) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r5, 0x1}) 3.10065936s ago: executing program 6 (id=4177): socket(0x2, 0x2, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00'}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) r4 = openat2$dir(0xffffff9c, &(0x7f0000000100)='./file2\x00', 0x0, 0x0) r5 = openat(r4, &(0x7f0000000500)='./file1\x00', 0x8c0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r2, 0x4a50e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) ioctl$GIO_SCRNMAP(0xffffffffffffffff, 0x4b40, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$bt_hci_HCI_FILTER(r5, 0x0, 0x2, &(0x7f0000000040)={0x2, [0x3, 0x1], 0x7}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x4569c2, 0x80) mount(&(0x7f0000000240), &(0x7f0000000200)='./file0\x00', &(0x7f0000000140)='ufs\x00', 0x0, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 2.876059203s ago: executing program 3 (id=4178): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) read$alg(0xffffffffffffffff, 0x0, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@mask_fadd={0x58, 0x118, 0x8, {{0x0, 0x3}, 0x0, 0x0, 0x5c, 0x8}}], 0x58}, 0x0) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r4, 0x8004562e, &(0x7f0000000340)) pselect6(0x40, &(0x7f0000000200)={0x9, 0x93, 0x5, 0x0, 0x6200000000000000, 0x4, 0x8, 0x7fff}, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) 899.375771ms ago: executing program 6 (id=4179): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1c3341, 0x0) r1 = creat(&(0x7f0000000200)='./file0\x00', 0x109) ppoll(&(0x7f00000000c0)=[{r1, 0x2005}, {r0, 0x8021}], 0x2, 0x0, 0x0, 0x0) 899.186902ms ago: executing program 3 (id=4180): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ac00000000010505000000faff0000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff02000000000000009d0000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffac1e0001080007400000000118000680140004000000000000"], 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="c00000000001050500000000000000000a0000003c0002802c00018014000300ff02000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffffffffff08000740010000012c00068014000400000010000000"], 0xc0}}, 0x0) 720.147668ms ago: executing program 7 (id=4181): r0 = socket(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) sched_rr_get_interval(r1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r2, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000084000000", @ANYRES32], 0x58, 0x4855}, 0x24000052) accept4$ax25(0xffffffffffffffff, &(0x7f0000000300)={{0x3, @null}, [@netrom, @bcast, @remote, @bcast, @netrom, @remote, @remote, @rose]}, 0x0, 0x80000) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000"], 0x48}}, 0x4084) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 539.985508ms ago: executing program 0 (id=4182): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_getaddr={0x20, 0x16, 0x3c2be10bca706f15, 0x0, 0x0, {}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) 523.703668ms ago: executing program 4 (id=4183): bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e00000000eb15000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/11], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc) 501.150774ms ago: executing program 6 (id=4184): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) read$FUSE(r6, &(0x7f00000063c0)={0x2020}, 0x2020) r7 = socket(0x23, 0x803, 0xece) sendmsg$nl_route(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="280000006d0001002dbd700000000001000000001317d5a2b390f4a1401d08e2b08a9ec2796c3f47bf3333dd9a509a89ab40dcfee8510d16513d59863f3ce2d727cf038dd2141009b180b9a10ee5db22d4051221b6c7685c2a75e066107bb32c6381a8b0e5433568e707b30764fdabc17f2b8f9b1a59c17367347d40f283b9d079df48f2d3dd3ead707b714af7a1d23e992c72119d6e64cf45717b4ad6950198f66f029457a335252176aa771f5b271fd0dcda1e4b9cf1df03ff526c2bb16b430d56114e129b6098e78f", @ANYRES32=0x0, @ANYBLOB="00000300724000000800290007000000"], 0x28}, 0x1, 0x0, 0x0, 0x52273e86b92fbb73}, 0x20000000) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0585609, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) close(r2) 427.275246ms ago: executing program 5 (id=4185): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r0, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r2, @ANYBLOB="0800260094094e000800b7"], 0x2c}}, 0x0) 181.464665ms ago: executing program 0 (id=4186): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b922, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0x5}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x35b}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000280)=@xdp={0x2c, 0x8, r6, 0x8000017}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000680)="8f4cd2c8fd09865e53d25ad3bfd9", 0xe}, {&(0x7f0000000080)="7117192ba4860d6d1cfa46e444f3e4868bb2876c", 0x14}, {0x0}], 0x3}, 0x4) 179.013922ms ago: executing program 3 (id=4187): socket(0xa, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='tmpfs\x00', 0x16, 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r0, &(0x7f0000000200)='./file1\x00', 0x800, 0x1) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r1 = open(&(0x7f0000000480)='./bus\x00', 0x0, 0x718bb647156ec3b7) chdir(&(0x7f0000000000)='./bus\x00') linkat(r1, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000180)='./file0\x00', 0x1000) unlink(&(0x7f0000000340)='./file0\x00') 0s ago: executing program 4 (id=4188): setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000280)=ANY=[@ANYBLOB="0004040000000000fc020000000006000000000000000020fe80"], 0x28) kernel console output (not intermixed with test programs): 5543:0047.0004: probe with driver uclogic failed with error -71 [ 761.717438][ T9627] usb 6-1: USB disconnect, device number 31 [ 761.724241][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 761.746080][ T89] usb 4-1: device descriptor read/64, error -71 [ 761.756541][ T24] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 761.791606][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.828865][ T24] usb 1-1: config 0 descriptor?? [ 761.860897][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 762.024936][ T89] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 762.050254][ T5845] Bluetooth: hci6: unexpected event for opcode 0x2019 [ 762.160216][T13173] veth0_vlan: entered promiscuous mode [ 762.237709][T13173] veth1_vlan: entered promiscuous mode [ 762.395538][T13173] veth0_macvtap: entered promiscuous mode [ 762.434977][T13173] veth1_macvtap: entered promiscuous mode [ 762.500533][T13173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 762.521132][ T24] pwc: recv_control_msg error -71 req 02 val 2700 [ 762.549137][ T24] pwc: recv_control_msg error -71 req 02 val 2c00 [ 762.564651][ T24] pwc: recv_control_msg error -71 req 04 val 1000 [ 762.620409][T13173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 762.635101][ T24] pwc: recv_control_msg error -71 req 04 val 1300 [ 762.649861][ T24] pwc: recv_control_msg error -71 req 04 val 1400 [ 762.667991][ T24] pwc: recv_control_msg error -71 req 02 val 2000 [ 762.697641][ T24] pwc: recv_control_msg error -71 req 02 val 2100 [ 762.709968][ T9468] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.725251][ T24] pwc: recv_control_msg error -71 req 04 val 1500 [ 762.737251][ T9468] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.754414][ T9468] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.765781][ T9468] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.772187][ T24] pwc: recv_control_msg error -71 req 02 val 2500 [ 762.805220][ T24] pwc: recv_control_msg error -71 req 02 val 2400 [ 762.841620][ T24] pwc: recv_control_msg error -71 req 02 val 2600 [ 762.877430][ T24] pwc: recv_control_msg error -71 req 02 val 2900 [ 762.944229][ T24] pwc: recv_control_msg error -71 req 02 val 2800 [ 762.975368][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 763.005748][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 763.052253][ T24] pwc: Registered as video103. [ 763.101926][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input39 [ 763.154308][ T177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 763.207929][ T177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 763.226231][ T24] usb 1-1: USB disconnect, device number 24 [ 763.520408][ T6046] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 763.571352][ T6046] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 764.895179][T13499] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2432'. [ 765.699731][ T24] usb 6-1: new full-speed USB device number 32 using dummy_hcd [ 765.724967][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 765.736057][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 767.291379][ T24] usb 6-1: config index 0 descriptor too short (expected 28277, got 36) [ 767.300218][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 767.310462][ T24] usb 6-1: config 0 has no interfaces? [ 767.524720][ T24] usb 6-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 767.605826][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.907431][T13542] Bluetooth: MGMT ver 1.23 [ 767.920008][ T24] usb 6-1: config 0 descriptor?? [ 767.920322][T13537] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input40 [ 768.009527][T13545] ufs: You didn't specify the type of your ufs filesystem [ 768.009527][T13545] [ 768.009527][T13545] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 768.009527][T13545] [ 768.009527][T13545] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 768.040864][T13545] ufs: ufstype=old is supported read-only [ 768.801421][T13547] netlink: 'syz.3.2444': attribute type 8 has an invalid length. [ 768.948247][ T24] usb 6-1: can't set config #0, error -71 [ 768.976277][ T24] usb 6-1: USB disconnect, device number 32 [ 769.194055][T13556] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2448'. [ 771.011524][ T5840] Bluetooth: hci2: command 0x0406 tx timeout [ 771.051785][ T5845] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 771.286008][T13583] netlink: 'syz.0.2460': attribute type 8 has an invalid length. [ 771.436350][T13587] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 772.551164][T13597] ufs: You didn't specify the type of your ufs filesystem [ 772.551164][T13597] [ 772.551164][T13597] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 772.551164][T13597] [ 772.551164][T13597] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 772.885740][T13597] ufs: ufstype=old is supported read-only [ 772.940310][T13606] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2465'. [ 776.398528][T13638] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 778.529574][T13656] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2482'. [ 778.534629][T13658] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 778.610023][T13659] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 779.291716][T13671] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2487'. [ 779.373367][T13671] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2487'. [ 780.855678][ T5845] Bluetooth: hci4: unexpected event for opcode 0x203d [ 784.270922][ T9961] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 784.475065][ T9961] usb 7-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 784.520891][ T9961] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.562134][ T9961] usb 7-1: config 0 descriptor?? [ 784.615426][ T9961] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 784.645020][T13710] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2497'. [ 785.316796][ T9961] usb 7-1: USB disconnect, device number 2 [ 785.353686][ T6077] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 785.532392][ T5932] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 785.564403][ T6077] usb 4-1: Using ep0 maxpacket: 16 [ 785.578500][ T6077] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 785.601465][ T6077] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 785.629171][ T6077] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 785.638402][ T6077] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.670584][ T6077] usb 4-1: config 0 descriptor?? [ 785.683244][ T89] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 785.705142][ T5932] usb 5-1: config index 0 descriptor too short (expected 28277, got 36) [ 785.730402][ T5932] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 785.763137][ T5932] usb 5-1: config 0 has no interfaces? [ 785.839139][ T5932] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 785.848439][ T5932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.944034][T13737] netlink: 124 bytes leftover after parsing attributes in process `syz.2.2502'. [ 786.672962][ T6077] hid_parser_main: 52 callbacks suppressed [ 786.672995][ T6077] corsair 0003:1B1C:1B02.0005: unknown main item tag 0x0 [ 786.691018][ T5932] usb 5-1: config 0 descriptor?? [ 786.696931][ T89] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 786.708108][ T89] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 786.717235][ T89] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.725319][ T6077] corsair 0003:1B1C:1B02.0005: unknown main item tag 0x0 [ 786.732463][ T6077] corsair 0003:1B1C:1B02.0005: unknown main item tag 0x0 [ 786.758833][ T89] usb 6-1: config 0 descriptor?? [ 786.775479][ T6077] corsair 0003:1B1C:1B02.0005: unknown main item tag 0x0 [ 786.799758][ T6077] corsair 0003:1B1C:1B02.0005: unknown main item tag 0x0 [ 786.872549][ T6077] corsair 0003:1B1C:1B02.0005: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.3-1/input0 [ 787.001425][ T6077] corsair 0003:1B1C:1B02.0005: Failed to get K90 initial state (error -32). [ 787.068464][ T89] usbhid 6-1:0.0: can't add hid device: -71 [ 787.095754][ T89] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 787.393070][ T89] usb 6-1: USB disconnect, device number 33 [ 787.765576][ T89] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 787.971751][ T89] usb 6-1: Using ep0 maxpacket: 32 [ 787.988041][ T89] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 788.029569][ T89] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 788.052189][ T89] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.083994][ T89] usb 6-1: config 0 descriptor?? [ 788.115180][ T89] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 788.155660][ T89] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 788.400087][ T24] usb 4-1: USB disconnect, device number 40 [ 788.629917][ T1205] usb 5-1: USB disconnect, device number 30 [ 788.856910][ T6077] usb 6-1: USB disconnect, device number 34 [ 788.895299][ T6077] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 790.682271][T13792] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2512'. [ 791.888989][T13809] netlink: 124 bytes leftover after parsing attributes in process `syz.0.2516'. [ 793.854266][T13835] netem: change failed [ 794.070169][T13843] ALSA: mixer_oss: invalid OSS volume 'o' [ 795.402395][T13859] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2530'. [ 799.026540][T13893] fuse: Bad value for 'fd' [ 799.042020][T13893] netem: change failed [ 799.070617][T13893] IPv6: NLM_F_REPLACE set, but no existing node found! [ 800.783212][ T30] audit: type=1326 audit(2000000294.298:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13912 comm="syz.2.2550" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efeee99c819 code=0x0 [ 801.868581][T13924] ALSA: mixer_oss: invalid OSS volume '' [ 802.914776][T13934] fuse: Bad value for 'fd' [ 802.958577][T13934] netem: change failed [ 804.142415][T13953] netlink: 'syz.5.2562': attribute type 8 has an invalid length. [ 806.796430][T13979] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 808.605352][T13986] infiniband syz2: set down [ 808.610129][T13986] infiniband syz2: added bridge_slave_1 [ 808.621069][T13986] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 808.625380][T13986] infiniband syz2: Couldn't open port 1 [ 808.668853][T13986] RDS/IB: syz2: added [ 808.673468][T13986] smc: adding ib device syz2 with port count 1 [ 808.680484][T13986] smc: ib device syz2 port 1 has no pnetid [ 810.323067][T14006] netlink: 'syz.2.2579': attribute type 8 has an invalid length. [ 813.519154][T14040] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 814.523972][ T6077] IPVS: starting estimator thread 0... [ 814.532692][T14054] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 814.649597][T14058] IPVS: using max 24 ests per chain, 57600 per kthread [ 816.105178][T14081] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2605'. [ 816.156221][ T89] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 816.194236][T14084] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2605'. [ 816.414907][ T89] usb 5-1: Using ep0 maxpacket: 16 [ 816.786617][ T89] usb 5-1: unable to get BOS descriptor or descriptor too short [ 816.814384][T14092] 9p: Invalid uid '0x00000000ffffffff' [ 816.833491][ T89] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 816.864489][ T89] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.904605][ T89] usb 5-1: Product: syz [ 816.929518][ T89] usb 5-1: Manufacturer: syz [ 816.962384][ T89] usb 5-1: SerialNumber: syz [ 817.642958][ T89] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 818.400325][ T89] usb 5-1: USB disconnect, device number 31 [ 818.410869][ T6077] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 818.711034][ T6077] usb 3-1: Using ep0 maxpacket: 32 [ 818.734308][ T6077] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 818.774560][ T6077] usb 3-1: config 0 has no interface number 0 [ 818.803385][ T6077] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 48, changing to 9 [ 818.892060][ T6077] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid maxpacket 8240, setting to 1024 [ 818.939768][ T6077] usb 3-1: config 0 interface 85 has no altsetting 0 [ 818.989393][ T6077] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 819.039510][ T6077] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.083844][ T6077] usb 3-1: Product: syz [ 820.088077][ T6077] usb 3-1: Manufacturer: syz [ 820.093127][ T6077] usb 3-1: SerialNumber: syz [ 820.101130][ T6077] usb 3-1: config 0 descriptor?? [ 820.513808][T14138] ufs: You didn't specify the type of your ufs filesystem [ 820.513808][T14138] [ 820.513808][T14138] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 820.513808][T14138] [ 820.513808][T14138] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 820.691282][T14138] ufs: ufstype=old is supported read-only [ 820.857088][ T6077] appletouch 3-1:0.85: Geyser mode initialized. [ 820.886093][ T6077] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input43 [ 821.069026][ T1205] usb 3-1: USB disconnect, device number 35 [ 821.139110][ T1205] appletouch 3-1:0.85: input: appletouch disconnected [ 826.253970][T14213] netlink: 'syz.5.2649': attribute type 8 has an invalid length. [ 828.472521][T14241] binder: 14236:14241 ioctl c0306201 200000000700 returned -14 [ 831.374288][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 831.380649][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 833.120616][T14286] netlink: 'syz.2.2665': attribute type 8 has an invalid length. [ 837.057005][ T5845] Bluetooth: hci4: unexpected event for opcode 0x0c03 [ 839.729459][T14358] ALSA: mixer_oss: invalid OSS volume '' [ 843.607717][T14388] process 'syz.0.2709' launched './file0' with NULL argv: empty string added [ 846.214619][ T6077] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 846.449264][ T6077] usb 1-1: Using ep0 maxpacket: 32 [ 846.468492][ T6077] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 846.490097][ T6077] usb 1-1: config 0 has no interface number 0 [ 846.545496][ T6077] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 846.597512][ T6077] usb 1-1: config 0 interface 85 has no altsetting 0 [ 846.617103][T14415] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2717'. [ 846.624994][ T6077] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 846.675097][T14418] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2717'. [ 846.684389][ T6077] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.727340][ T6077] usb 1-1: Product: syz [ 846.750875][ T6077] usb 1-1: Manufacturer: syz [ 846.778758][ T6077] usb 1-1: SerialNumber: syz [ 846.808061][ T6077] usb 1-1: config 0 descriptor?? [ 847.125478][T14425] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2720'. [ 847.848220][ T6077] appletouch 1-1:0.85: Geyser mode initialized. [ 847.867124][ T6077] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input44 [ 848.233734][ T6077] usb 1-1: USB disconnect, device number 25 [ 850.540205][ T6077] appletouch 1-1:0.85: input: appletouch disconnected [ 850.613180][T14442] ALSA: mixer_oss: invalid OSS volume '' [ 852.307219][T14461] ptrace attach of "./syz-executor exec"[5823] was attempted by "./syz-executor exec"[14461] [ 852.910070][T14463] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2733'. [ 852.937608][T14463] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2733'. [ 855.156503][T14484] syz.6.2739 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 855.200572][T14484] ubi31: attaching mtd0 [ 855.230190][T14484] ubi31: scanning is finished [ 855.235004][T14484] ubi31: empty MTD device detected [ 855.379726][ T5845] Bluetooth: Frame is too long (len 12, expected len 4) [ 855.902393][T14484] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 857.518037][T14504] netlink: 'syz.6.2743': attribute type 8 has an invalid length. [ 858.465713][T14513] ptrace attach of "./syz-executor exec"[8126] was attempted by "./syz-executor exec"[14513] [ 861.558457][ T9961] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 861.678220][T14548] ALSA: mixer_oss: invalid OSS volume '' [ 861.772136][ T9961] usb 7-1: Using ep0 maxpacket: 16 [ 861.772154][ T9627] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 861.787540][ T9961] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 861.853534][ T9961] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 861.885916][ T9961] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.909747][ T9961] usb 7-1: Product: syz [ 861.919174][ T9961] usb 7-1: Manufacturer: syz [ 861.926659][ T9961] usb 7-1: SerialNumber: syz [ 861.935908][ T9961] usb 7-1: config 0 descriptor?? [ 861.974144][ T9961] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 861.975227][ T9627] usb 3-1: Using ep0 maxpacket: 8 [ 861.988001][ T9961] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 862.244714][ T9627] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 863.562297][ T9961] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 864.140728][ T9961] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 864.201794][ T9961] em28xx 7-1:0.0: board has no eeprom [ 864.334416][ T9627] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 864.337005][ T9961] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 864.353320][ T9627] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.362075][ T9627] usb 3-1: Product: syz [ 864.366362][ T9627] usb 3-1: Manufacturer: syz [ 864.371745][ T9627] usb 3-1: SerialNumber: syz [ 864.443886][ T9961] em28xx 7-1:0.0: dvb set to bulk mode. [ 864.494019][ T6077] em28xx 7-1:0.0: Binding DVB extension [ 864.515941][ T9961] usb 7-1: USB disconnect, device number 3 [ 864.569244][ T9961] em28xx 7-1:0.0: Disconnecting em28xx [ 864.792707][ T9627] usb 3-1: config 0 descriptor?? [ 864.840756][ T89] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 864.865992][ T9627] usb 3-1: can't set config #0, error -71 [ 864.916413][ T9627] usb 3-1: USB disconnect, device number 36 [ 864.933615][ T6077] em28xx 7-1:0.0: Registering input extension [ 865.120791][ T89] usb 5-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 865.134128][ T9961] em28xx 7-1:0.0: Closing input extension [ 865.466016][ T89] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 865.503946][ T9961] em28xx 7-1:0.0: Freeing device [ 865.515403][ T89] usb 5-1: too many endpoints for config 1 interface 1 altsetting 1: 248, using maximum allowed: 30 [ 865.614034][ T89] usb 5-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0x73, changing to 0x3 [ 865.705404][ T89] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 12335, setting to 1024 [ 865.720495][T14579] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2774'. [ 865.781951][T14582] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2774'. [ 865.795334][ T89] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 865.843130][ T89] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 248 [ 866.760020][ T89] usb 5-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 866.783560][ T89] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.803407][ T89] usb 5-1: Product: syz [ 866.812445][ T89] usb 5-1: Manufacturer: syz [ 866.818020][ T89] usb 5-1: SerialNumber: syz [ 867.108130][ T89] usb 5-1: incorrect wMaxPacketSize 0x400 for BADD profile [ 867.281134][ T89] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 867.330582][ T89] usb 5-1: USB disconnect, device number 32 [ 867.390678][T14571] udevd[14571]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 867.558522][T14609] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2786'. [ 867.589200][T14609] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2786'. [ 868.696499][ T24] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 869.722315][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 869.919484][ T24] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 870.129308][ T24] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 870.138444][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.168443][ T24] usb 3-1: Product: syz [ 870.177360][ T24] usb 3-1: Manufacturer: syz [ 870.187200][ T24] usb 3-1: SerialNumber: syz [ 870.225012][ T24] usb 3-1: config 0 descriptor?? [ 870.406708][ T1205] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 870.593352][ T1205] usb 7-1: Using ep0 maxpacket: 32 [ 870.606729][ T1205] usb 7-1: config 2 has an invalid interface number: 88 but max is 0 [ 870.618449][ T1205] usb 7-1: config 2 has no interface number 0 [ 870.625296][ T1205] usb 7-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 870.636422][ T1205] usb 7-1: config 2 interface 88 has no altsetting 0 [ 870.687782][ T1205] usb 7-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 870.724408][ T1205] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.751634][ T1205] usb 7-1: Product: syz [ 870.779059][ T1205] usb 7-1: Manufacturer: syz [ 870.810540][ T1205] usb 7-1: SerialNumber: syz [ 870.881807][T14628] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 871.248755][T14628] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 871.721214][ T1205] asix 7-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 871.740058][ T9961] usb 3-1: USB disconnect, device number 37 [ 871.757039][ T1205] asix 7-1:2.88: probe with driver asix failed with error -71 [ 871.897601][ T1205] usb 7-1: USB disconnect, device number 4 [ 873.927795][ T30] audit: type=1326 audit(2000000362.747:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14681 comm="syz.0.2810" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f958ab9c819 code=0x0 [ 875.154671][T14694] netlink: 1276 bytes leftover after parsing attributes in process `syz.2.2813'. [ 877.642979][T14731] fuse: Bad value for 'fd' [ 877.657400][T14731] netem: change failed [ 878.642956][T14731] IPv6: NLM_F_REPLACE set, but no existing node found! [ 879.284999][T14748] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2833'. [ 880.607999][T14757] netlink: 'syz.2.2836': attribute type 1 has an invalid length. [ 880.641415][T14761] ufs: You didn't specify the type of your ufs filesystem [ 880.641415][T14761] [ 880.641415][T14761] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 880.641415][T14761] [ 880.641415][T14761] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 880.829890][T14761] ufs: ufstype=old is supported read-only [ 880.841024][T14757] 8021q: adding VLAN 0 to HW filter on device bond2 [ 880.895459][T14764] vlan3: entered allmulticast mode [ 880.920475][T14764] bond2: entered allmulticast mode [ 880.984076][T14770] bond2: (slave geneve2): making interface the new active one [ 881.037995][T14770] geneve2: entered allmulticast mode [ 881.058763][T14770] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 881.647604][T14781] ptrace attach of "./syz-executor exec"[13173] was attempted by ""[14781] [ 885.174581][ T5840] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 885.184516][ T5840] Bluetooth: hci1: Injecting HCI hardware error event [ 885.196306][ T5840] Bluetooth: hci1: hardware error 0x00 [ 886.821855][ T6077] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 887.112336][ T6077] usb 3-1: unable to get BOS descriptor or descriptor too short [ 887.141198][ T6077] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 887.801552][ T6077] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 887.816136][ T6077] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=e1.40 [ 887.833881][ T6077] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.855018][ T6077] usb 3-1: Product: syz [ 887.876731][ T6077] usb 3-1: Manufacturer: syz [ 887.908720][ T6077] usb 3-1: SerialNumber: syz [ 887.946359][ T6077] usb 3-1: selecting invalid altsetting 1 [ 887.962839][ T6077] usb 3-1: unit 6 not found! [ 887.972726][ T6077] usb 3-1: unit 2 not found! [ 888.007011][T14874] ufs: You didn't specify the type of your ufs filesystem [ 888.007011][T14874] [ 888.007011][T14874] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 888.007011][T14874] [ 888.007011][T14874] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 888.101106][ T5840] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 888.143767][T14874] ufs: ufstype=old is supported read-only [ 888.742272][T14883] fuse: Bad value for 'fd' [ 888.967983][T14882] netem: change failed [ 889.112577][T14887] IPv6: NLM_F_REPLACE set, but no existing node found! [ 889.281229][ T6077] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 889.310961][ T6077] usb 3-1: USB disconnect, device number 38 [ 889.419114][T14571] udevd[14571]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 892.518302][T14933] fuse: Bad value for 'fd' [ 892.534477][T14933] netem: change failed [ 896.357033][T14992] fuse: Bad value for 'fd' [ 896.365303][T14992] netem: change failed [ 897.677335][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 897.763422][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 898.541634][ T9961] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 898.795265][T15024] overlayfs: missing 'lowerdir' [ 899.389142][ T6077] IPVS: starting estimator thread 0... [ 899.429569][ T9961] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 899.446924][ T9961] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 899.458787][ T9961] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 899.472718][ T9961] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 899.483050][ T9961] usb 5-1: SerialNumber: syz [ 899.502346][T15029] IPVS: using max 25 ests per chain, 60000 per kthread [ 900.156219][ T9961] usb 5-1: 0:2 : does not exist [ 900.179703][ T9961] usb 5-1: unit 5 not found! [ 900.459472][ T9961] usb 5-1: USB disconnect, device number 33 [ 901.307954][T15048] fuse: Bad value for 'fd' [ 901.429412][T15048] netem: change failed [ 901.515152][T15048] IPv6: NLM_F_REPLACE set, but no existing node found! [ 901.668202][T14571] udevd[14571]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 901.916207][T15060] netlink: 'syz.6.2944': attribute type 1 has an invalid length. [ 902.228324][T15060] 8021q: adding VLAN 0 to HW filter on device bond1 [ 902.342976][T15064] bond1: (slave geneve2): making interface the new active one [ 902.397464][T15064] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 902.883045][ T89] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 903.421813][ T89] usb 6-1: too many endpoints for config 0 interface 0 altsetting 2: 254, using maximum allowed: 30 [ 903.441064][ T89] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 903.504964][ T89] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 903.541212][ T89] usb 6-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 903.583310][ T89] usb 6-1: config 0 interface 0 has no altsetting 0 [ 903.592761][ T89] usb 6-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 903.804231][ T89] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.830257][ T24] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 904.040556][ T24] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 904.238263][ T24] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 904.402125][ T24] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 904.501901][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 904.513777][ T24] usb 7-1: SerialNumber: syz [ 904.635629][ T89] usb 6-1: config 0 descriptor?? [ 904.807139][T15101] fuse: Bad value for 'fd' [ 904.823843][ T24] usb 7-1: 0:2 : does not exist [ 904.829238][ T24] usb 7-1: unit 5 not found! [ 904.849030][T15101] netem: change failed [ 904.905565][T15101] IPv6: NLM_F_REPLACE set, but no existing node found! [ 905.142605][ T89] ryos 0003:1E7D:3138.0006: unknown main item tag 0x1 [ 905.177830][ T24] usb 7-1: USB disconnect, device number 5 [ 905.195021][ T89] ryos 0003:1E7D:3138.0006: item fetching failed at offset 2/5 [ 905.217884][T14571] udevd[14571]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 905.935673][ T89] ryos 0003:1E7D:3138.0006: parse failed [ 905.941439][ T89] ryos 0003:1E7D:3138.0006: probe with driver ryos failed with error -22 [ 905.974528][ T89] usb 6-1: USB disconnect, device number 35 [ 909.393031][T15144] fuse: Bad value for 'fd' [ 909.415318][T15144] netem: change failed [ 909.482154][T15147] Invalid ELF header len 7 [ 914.314822][T15196] netlink: 'syz.5.2990': attribute type 8 has an invalid length. [ 915.079377][T15203] fuse: Bad value for 'fd' [ 915.120229][T15203] netem: change failed [ 915.247961][T15203] IPv6: NLM_F_REPLACE set, but no existing node found! [ 916.359396][T15220] netlink: 'syz.2.2997': attribute type 6 has an invalid length. [ 916.369349][T15218] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3000'. [ 916.763483][T15232] netlink: 'syz.2.3003': attribute type 1 has an invalid length. [ 916.834754][T15232] 8021q: adding VLAN 0 to HW filter on device bond3 [ 917.400996][ T5159] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 917.832738][ T5159] usb 6-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 917.862979][ T5159] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.894053][ T5159] usb 6-1: Product: syz [ 917.912403][ T5159] usb 6-1: Manufacturer: syz [ 917.942006][ T5159] usb 6-1: SerialNumber: syz [ 918.916279][ T5159] usb 6-1: config 0 descriptor?? [ 919.080988][T15261] fuse: Bad value for 'fd' [ 919.105036][T15261] netem: change failed [ 919.582659][T15261] IPv6: NLM_F_REPLACE set, but no existing node found! [ 919.606521][T15271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3015'. [ 919.615735][T15271] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3015'. [ 920.648079][ T5159] usb 6-1: f81604_write: reg: 105 data: 28 failed: -EPROTO [ 920.680992][ T5159] f81604 6-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 920.688528][ T5159] f81604 6-1:0.0: probe with driver f81604 failed with error -71 [ 920.728510][ T5159] usb 6-1: USB disconnect, device number 36 [ 920.780375][T15280] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3019'. [ 920.790775][T15280] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 920.798004][T15280] IPv6: NLM_F_CREATE should be set when creating new route [ 923.255058][T15315] fuse: Bad value for 'fd' [ 923.275174][T15315] netem: change failed [ 923.296802][ T89] IPVS: starting estimator thread 0... [ 923.334784][ T5159] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 923.358626][T15315] IPv6: NLM_F_REPLACE set, but no existing node found! [ 923.365800][T15320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3030'. [ 923.374779][T15320] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3030'. [ 923.430162][T15319] IPVS: using max 25 ests per chain, 60000 per kthread [ 923.532510][ T5159] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 923.574033][ T5159] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 923.611160][ T5159] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 923.654626][ T5159] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 923.699630][ T5159] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 923.730079][ T5159] usb 7-1: Product: syz [ 923.735089][ T5159] usb 7-1: Manufacturer: syz [ 923.740474][ T5159] usb 7-1: SerialNumber: syz [ 923.777570][ T5159] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found [ 923.807204][ T5159] cdc_ncm 7-1:1.0: bind() failure [ 923.833178][T15329] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3036'. [ 924.079318][ T5159] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 924.089453][ T5159] cdc_ncm 7-1:1.1: bind() failure [ 924.144545][ T5159] usb 7-1: USB disconnect, device number 6 [ 924.201209][T15337] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3040'. [ 925.880516][ T89] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 926.089866][ T89] usb 5-1: Using ep0 maxpacket: 8 [ 926.119837][ T89] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 926.163738][ T89] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.201861][ T89] usb 5-1: Product: syz [ 926.220145][ T89] usb 5-1: Manufacturer: syz [ 926.224809][ T89] usb 5-1: SerialNumber: syz [ 926.518381][ T89] usb 5-1: config 0 descriptor?? [ 926.667335][T15379] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3052'. [ 926.676769][T15379] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3052'. [ 926.701259][ T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 926.732958][ T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 926.779867][ T89] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 926.794451][ T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 926.824199][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 926.991815][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 927.010078][ T89] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 927.058448][ T89] usb 5-1: USB disconnect, device number 34 [ 928.165168][T15393] netlink: 'syz.4.3058': attribute type 8 has an invalid length. [ 935.272433][ T89] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 935.469465][ T89] usb 6-1: device descriptor read/64, error -71 [ 935.747289][ T89] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 936.122409][ T89] usb 6-1: device descriptor read/64, error -71 [ 936.608221][ T89] usb usb6-port1: attempt power cycle [ 937.031182][ T89] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 937.046832][T15493] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3097'. [ 937.057221][T15493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 937.064553][T15493] IPv6: NLM_F_CREATE should be set when creating new route [ 937.073501][ T89] usb 6-1: device descriptor read/8, error -71 [ 937.287909][T15500] netlink: 'syz.4.3100': attribute type 1 has an invalid length. [ 937.326122][T15500] 8021q: adding VLAN 0 to HW filter on device bond5 [ 937.359170][ T89] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 937.383000][ T89] usb 6-1: device descriptor read/8, error -71 [ 937.477729][T15502] bond5: (slave geneve2): making interface the new active one [ 937.505586][ T89] usb usb6-port1: unable to enumerate USB device [ 937.526433][T15502] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 942.898367][ T89] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 943.056117][ T89] usb 1-1: device descriptor read/64, error -71 [ 943.285056][T15579] ufs: You didn't specify the type of your ufs filesystem [ 943.285056][T15579] [ 943.285056][T15579] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 943.285056][T15579] [ 943.285056][T15579] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 943.316119][T15579] ufs: ufstype=old is supported read-only [ 944.060446][ T89] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 944.212471][T15584] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3124'. [ 944.232657][T15584] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3124'. [ 944.391700][ T89] usb 1-1: device descriptor read/64, error -71 [ 944.520024][ T89] usb usb1-port1: attempt power cycle [ 944.766277][T15596] netlink: 'syz.2.3136': attribute type 1 has an invalid length. [ 944.839484][T15596] 8021q: adding VLAN 0 to HW filter on device bond4 [ 944.925975][ T89] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 944.958638][ T89] usb 1-1: device descriptor read/8, error -71 [ 945.278635][ T89] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 945.338985][T15609] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3139'. [ 945.343061][ T89] usb 1-1: device descriptor read/8, error -71 [ 945.400200][T15609] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3139'. [ 945.514010][ T89] usb usb1-port1: unable to enumerate USB device [ 945.823396][T15616] netlink: 'syz.3.3142': attribute type 8 has an invalid length. [ 945.894411][T15618] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 947.928662][ T89] usb 7-1: new low-speed USB device number 7 using dummy_hcd [ 948.163775][ T89] usb 7-1: unable to get BOS descriptor or descriptor too short [ 948.217966][ T89] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 948.247396][ T89] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 948.285238][ T89] usb 7-1: string descriptor 0 read error: -22 [ 948.309212][ T89] usb 7-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice= 0.40 [ 948.349095][ T89] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.390354][ T89] usb 7-1: unit 5 not found! [ 948.626323][ T89] usb 7-1: can't set first interface for hiFace device. [ 948.651219][ T89] snd-usb-hiface 7-1:1.1: probe with driver snd-usb-hiface failed with error -5 [ 949.491190][ T89] usb 7-1: USB disconnect, device number 7 [ 949.595122][T14571] udevd[14571]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 950.790032][T15654] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3156'. [ 950.843674][T15654] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3156'. [ 951.080772][ T5159] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 951.262621][ T5159] usb 6-1: device descriptor read/64, error -71 [ 951.957057][ T5159] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 952.096087][ T5159] usb 6-1: device descriptor read/64, error -71 [ 952.235099][ T5159] usb usb6-port1: attempt power cycle [ 952.630886][ T5159] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 953.142448][ T5159] usb 6-1: device descriptor read/8, error -71 [ 953.775944][T15698] netlink: 'syz.6.3171': attribute type 8 has an invalid length. [ 953.880341][ T5159] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 953.902420][ T5159] usb 6-1: device descriptor read/8, error -71 [ 954.021723][ T5159] usb usb6-port1: unable to enumerate USB device [ 954.096030][T15700] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3173'. [ 954.152199][T15700] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3173'. [ 955.552504][T15719] ufs: You didn't specify the type of your ufs filesystem [ 955.552504][T15719] [ 955.552504][T15719] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 955.552504][T15719] [ 955.552504][T15719] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 955.583749][T15719] ufs: ufstype=old is supported read-only [ 956.602391][ T9627] IPVS: starting estimator thread 0... [ 956.616526][T15729] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 956.724811][T15731] IPVS: using max 29 ests per chain, 69600 per kthread [ 957.887781][ T89] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 957.974939][T15744] netlink: 'syz.4.3188': attribute type 1 has an invalid length. [ 958.064903][T15749] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3190'. [ 958.067982][T15744] 8021q: adding VLAN 0 to HW filter on device bond6 [ 958.092886][ T89] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 958.115773][ T89] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 958.122097][T15749] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3190'. [ 958.138194][ T89] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 958.158276][ T89] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 958.177313][ T89] usb 3-1: SerialNumber: syz [ 958.420813][ T89] usb 3-1: 0:2 : does not exist [ 958.592872][ T89] usb 3-1: USB disconnect, device number 39 [ 958.708278][T14571] udevd[14571]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 960.846185][T15791] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3205'. [ 960.906522][T15791] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3205'. [ 960.963465][T15793] netlink: 'syz.6.3206': attribute type 1 has an invalid length. [ 961.192450][T15793] 8021q: adding VLAN 0 to HW filter on device bond2 [ 962.668795][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 962.824553][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 963.754310][ T9961] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 963.936010][ T9961] usb 7-1: Using ep0 maxpacket: 32 [ 963.988035][ T9961] usb 7-1: config index 0 descriptor too short (expected 12336, got 27) [ 964.020913][ T9961] usb 7-1: config 48 has too many interfaces: 48, using maximum allowed: 32 [ 964.058458][ T9961] usb 7-1: config 48 has an invalid descriptor of length 48, skipping remainder of the config [ 964.114398][ T9961] usb 7-1: config 48 has 0 interfaces, different from the descriptor's value: 48 [ 964.205281][ T9961] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 964.244380][ T9961] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.268342][ T9961] usb 7-1: Product: syz [ 964.299744][ T9961] usb 7-1: Manufacturer: syz [ 964.304685][ T9961] usb 7-1: SerialNumber: syz [ 964.523063][ T89] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 964.639597][ T9961] usb 7-1: USB disconnect, device number 8 [ 964.731512][ T89] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 964.758075][ T89] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 964.788300][ T89] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 964.818275][ T89] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 964.838281][ T89] usb 6-1: SerialNumber: syz [ 965.017682][T15821] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3215'. [ 965.061372][T15825] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3216'. [ 965.122624][ T89] usb 6-1: 0:2 : does not exist [ 965.234119][ T89] usb 6-1: USB disconnect, device number 45 [ 965.319538][T14571] udevd[14571]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 965.456928][T15832] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3220'. [ 965.568510][T15832] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3220'. [ 966.417220][T15846] netlink: 'syz.6.3222': attribute type 8 has an invalid length. [ 967.032584][T15859] bond0: option all_slaves_active: invalid value (48) [ 967.866499][T15865] fuse: Unknown parameter '0xffffffffffffffff' [ 967.961275][T15865] netem: change failed [ 968.065656][T15865] IPv6: NLM_F_REPLACE set, but no existing node found! [ 968.858866][T15872] netlink: 'syz.4.3234': attribute type 1 has an invalid length. [ 968.973679][T15875] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3235'. [ 969.044362][T15875] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3235'. [ 969.088558][T15872] 8021q: adding VLAN 0 to HW filter on device bond7 [ 970.314839][ T9627] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 970.519951][ T9627] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 970.549249][ T9627] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 970.581881][ T9627] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 970.608828][ T9627] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 970.648750][ T9627] usb 4-1: SerialNumber: syz [ 971.031154][ T9627] usb 4-1: 0:2 : does not exist [ 971.226538][ T9627] usb 4-1: USB disconnect, device number 41 [ 971.344325][T14571] udevd[14571]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 971.496437][T15908] fuse: Unknown parameter '0xffffffffffffffff' [ 971.629237][T15911] netem: change failed [ 971.644617][T15912] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3249'. [ 971.672724][T15912] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3249'. [ 972.239208][T15926] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 973.988551][T15952] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3266'. [ 974.000583][T15952] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3266'. [ 974.087326][ T5159] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 974.095894][T15956] fuse: Unknown parameter '0xffffffffffffffff' [ 974.135809][T15956] netem: change failed [ 974.215597][ T9627] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 974.278817][ T5159] usb 6-1: Using ep0 maxpacket: 32 [ 974.302582][ T5159] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 974.336194][ T5159] usb 6-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 974.380000][ T5159] usb 6-1: config 0 has no interface number 0 [ 974.402460][ T9627] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 974.420881][ T5159] usb 6-1: too many endpoints for config 0 interface 85 altsetting 48: 48, using maximum allowed: 30 [ 974.442841][ T9627] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 974.466531][ T5159] usb 6-1: config 0 interface 85 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 974.490554][ T9627] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 974.501797][ T5159] usb 6-1: config 0 interface 85 has no altsetting 0 [ 974.518351][ T9627] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 974.535467][ T9627] usb 5-1: SerialNumber: syz [ 974.542936][ T5159] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 974.564985][ T5159] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.586610][ T5159] usb 6-1: Product: syz [ 974.597421][ T5159] usb 6-1: Manufacturer: syz [ 974.609424][ T5159] usb 6-1: SerialNumber: syz [ 974.641645][ T5159] usb 6-1: config 0 descriptor?? [ 974.814296][ T9627] usb 5-1: 0:2 : does not exist [ 974.948680][ T5159] usb 6-1: USB disconnect, device number 46 [ 975.029735][ T9627] usb 5-1: USB disconnect, device number 35 [ 975.423973][T14571] udevd[14571]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 977.165357][ T9627] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 977.339962][ T9627] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 977.362680][ T9627] usb 6-1: config 0 interface 0 has no altsetting 0 [ 977.398171][ T9627] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 977.441736][ T9627] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 977.505036][ T9627] usb 6-1: Product: syz [ 977.510176][ T9627] usb 6-1: Manufacturer: syz [ 977.514821][ T9627] usb 6-1: SerialNumber: syz [ 977.548076][ T9627] usb 6-1: config 0 descriptor?? [ 977.579412][ T5159] IPVS: starting estimator thread 0... [ 977.584012][T15999] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 977.612734][ T9627] usb 6-1: selecting invalid altsetting 0 [ 977.646179][T16006] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 977.698187][T16004] IPVS: using max 28 ests per chain, 67200 per kthread [ 977.706754][T16006] netem: change failed [ 977.902380][ T9627] usb 6-1: USB disconnect, device number 47 [ 978.004783][T14439] udevd[14439]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 979.170945][T16022] ufs: You didn't specify the type of your ufs filesystem [ 979.170945][T16022] [ 979.170945][T16022] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 979.170945][T16022] [ 979.170945][T16022] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 979.202014][T16022] ufs: ufstype=old is supported read-only [ 980.653225][ T89] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 981.440171][ T89] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 981.462311][ T89] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 981.642985][T16037] syzkaller0: entered promiscuous mode [ 981.672127][T16037] syzkaller0: entered allmulticast mode [ 981.686157][ T89] usb 1-1: string descriptor 0 read error: -71 [ 981.692396][ T89] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 981.746375][ T89] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 981.797093][ T89] usb 1-1: can't set config #1, error -71 [ 981.803253][T16051] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3299'. [ 981.819596][ T89] usb 1-1: USB disconnect, device number 30 [ 981.933574][T16055] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 982.045661][T16055] netem: change failed [ 982.084373][T16055] IPv6: NLM_F_REPLACE set, but no existing node found! [ 983.358164][T16078] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3308'. [ 983.626006][T16084] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 984.686507][ T9961] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 984.786603][T16100] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 984.808733][T16100] netem: change failed [ 984.924291][ T9961] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 984.967554][ T9961] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 985.009216][ T9961] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 985.039969][ T9961] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 985.071023][ T9961] usb 3-1: SerialNumber: syz [ 985.484245][ T9961] usb 3-1: 0:2 : does not exist [ 986.563135][ T9961] usb 3-1: USB disconnect, device number 40 [ 986.716126][T14571] udevd[14571]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 986.951069][T14839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 986.969820][T14839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 986.979724][T14839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 987.006485][T14839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 987.092796][T14839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 987.394033][T16140] ufs: You didn't specify the type of your ufs filesystem [ 987.394033][T16140] [ 987.394033][T16140] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 987.394033][T16140] [ 987.394033][T16140] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 987.425486][T16140] ufs: ufstype=old is supported read-only [ 988.194784][T16144] fuse: Bad value for 'fd' [ 988.386216][T16144] netem: change failed [ 989.270466][ T9961] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 989.345301][ T5840] Bluetooth: hci0: command tx timeout [ 989.732641][ T9961] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 990.758303][ T9961] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 990.771138][ T9961] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 990.780279][ T9961] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 990.788542][ T9961] usb 5-1: SerialNumber: syz [ 991.168465][T16126] chnl_net:caif_netlink_parms(): no params data found [ 991.299792][T16126] bridge0: port 1(bridge_slave_0) entered blocking state [ 991.307508][T16126] bridge0: port 1(bridge_slave_0) entered disabled state [ 991.315490][T16126] bridge_slave_0: entered allmulticast mode [ 991.324522][T16126] bridge_slave_0: entered promiscuous mode [ 991.334474][T16126] bridge0: port 2(bridge_slave_1) entered blocking state [ 991.343586][T16126] bridge0: port 2(bridge_slave_1) entered disabled state [ 991.350854][T16126] bridge_slave_1: entered allmulticast mode [ 991.359853][T16126] bridge_slave_1: entered promiscuous mode [ 991.420793][T16126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 991.434572][T16126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 991.480334][T16126] team0: Port device team_slave_0 added [ 991.490529][T16126] team0: Port device team_slave_1 added [ 991.541022][T16126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 991.548272][T16126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 991.575099][ T5840] Bluetooth: hci0: command tx timeout [ 991.581668][T16126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 991.595307][T16126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 991.603018][T16126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 991.638449][T16126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 991.713263][T16126] hsr_slave_0: entered promiscuous mode [ 991.720957][T16126] hsr_slave_1: entered promiscuous mode [ 991.728646][T16126] debugfs: 'hsr0' already exists in 'hsr' [ 991.736179][T16126] Cannot create hsr debugfs directory [ 991.873519][ T9961] usb 5-1: 0:2 : does not exist [ 992.540480][ T9961] usb 5-1: USB disconnect, device number 36 [ 992.702519][T16126] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 992.962944][T16126] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 992.976980][T14571] udevd[14571]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 993.076485][T16194] ufs: You didn't specify the type of your ufs filesystem [ 993.076485][T16194] [ 993.076485][T16194] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 993.076485][T16194] [ 993.076485][T16194] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 993.107556][T16194] ufs: ufstype=old is supported read-only [ 993.779970][ T5840] Bluetooth: hci0: command tx timeout [ 993.930346][T16196] fuse: Bad value for 'fd' [ 993.953270][T16196] netem: change failed [ 994.034324][T16126] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 994.066604][T16126] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.311669][T16126] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 994.358224][T16126] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 996.055099][ T5840] Bluetooth: hci0: command tx timeout [ 996.313857][T16126] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 996.354693][T16126] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 997.531730][ T6077] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 998.024068][T16227] ufs: You didn't specify the type of your ufs filesystem [ 998.024068][T16227] [ 998.024068][T16227] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 998.024068][T16227] [ 998.024068][T16227] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 998.055302][T16227] ufs: ufstype=old is supported read-only [ 999.130099][ T6077] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 999.172944][ T6077] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 999.226340][ T6077] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 999.250667][ T6077] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 999.269459][ T6077] usb 6-1: SerialNumber: syz [ 999.767829][T16235] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 999.985743][ T6077] usb 6-1: 0:2 : does not exist [ 1000.123859][T16126] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1000.203791][T16126] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1000.237723][T16126] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1000.248932][ T6077] usb 6-1: USB disconnect, device number 48 [ 1000.304708][T16126] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1000.654237][T14571] udevd[14571]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1003.243746][T16126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1003.731709][T16276] ufs: You didn't specify the type of your ufs filesystem [ 1003.731709][T16276] [ 1003.731709][T16276] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1003.731709][T16276] [ 1003.731709][T16276] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1003.763464][T16276] ufs: ufstype=old is supported read-only [ 1004.513474][T16126] 8021q: adding VLAN 0 to HW filter on device team0 [ 1004.577619][ T6048] bridge0: port 1(bridge_slave_0) entered blocking state [ 1004.584816][ T6048] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1004.663848][ T6048] bridge0: port 2(bridge_slave_1) entered blocking state [ 1004.671204][ T6048] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1004.881787][ T9961] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1005.330756][ T9961] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1005.341099][ T9961] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1005.408006][ T9961] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1005.539819][ T9961] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1005.719258][ T9961] usb 1-1: SerialNumber: syz [ 1006.461917][T16305] netlink: 'syz.2.3386': attribute type 3 has an invalid length. [ 1007.553864][ T9961] usb 1-1: 0:2 : does not exist [ 1008.341903][ T9961] usb 1-1: USB disconnect, device number 31 [ 1008.430036][T16126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1008.441086][T14571] udevd[14571]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1008.727230][T16126] veth0_vlan: entered promiscuous mode [ 1008.791438][T16126] veth1_vlan: entered promiscuous mode [ 1008.888882][ T89] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1008.934119][T16126] veth0_macvtap: entered promiscuous mode [ 1008.946241][T16327] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3394'. [ 1009.059844][ T89] usb 3-1: Using ep0 maxpacket: 32 [ 1009.068076][ T89] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 1009.078862][ T89] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 1009.096989][T16126] veth1_macvtap: entered promiscuous mode [ 1009.141254][ T89] usb 3-1: config 0 has no interface number 0 [ 1009.180378][ T89] usb 3-1: config 0 interface 85 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1009.214169][ T89] usb 3-1: config 0 interface 85 has no altsetting 0 [ 1009.238707][T16126] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1009.269276][ T89] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1009.305494][ T89] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.523237][T16126] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1009.542026][ T89] usb 3-1: Product: syz [ 1009.557979][ T89] usb 3-1: Manufacturer: syz [ 1009.572009][ T89] usb 3-1: SerialNumber: syz [ 1009.577464][T12300] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1009.602073][ T89] usb 3-1: config 0 descriptor?? [ 1009.641055][T12300] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1009.675027][T12300] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1009.721749][T12300] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1009.856040][ T89] appletouch 3-1:0.85: Could not find int-in endpoint [ 1009.894111][ T89] appletouch 3-1:0.85: probe with driver appletouch failed with error -5 [ 1009.955503][ T89] usbhid 3-1:0.85: couldn't find an input interrupt endpoint [ 1010.004053][ T89] usb 3-1: USB disconnect, device number 41 [ 1010.304912][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1010.355032][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1011.108363][ T177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1011.150549][ T177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1011.828019][ T9627] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1011.955741][T16358] netlink: 'syz.2.3405': attribute type 8 has an invalid length. [ 1012.471321][ T9627] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1012.510138][ T9627] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1012.553687][ T9627] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1012.595250][ T9627] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1012.616667][ T9627] usb 5-1: SerialNumber: syz [ 1013.293064][ T9627] usb 5-1: 0:2 : does not exist [ 1013.303511][T16369] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3409'. [ 1013.514370][T16376] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1014.242366][ T9961] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1014.586976][ T9961] usb 7-1: Using ep0 maxpacket: 32 [ 1014.920540][ T9961] usb 7-1: config 0 has an invalid interface number: 85 but max is 0 [ 1014.932725][ T9961] usb 7-1: config 0 has no interface number 0 [ 1014.951823][ T9961] usb 7-1: config 0 interface 85 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 1014.963097][ T9627] usb 5-1: USB disconnect, device number 37 [ 1014.993779][ T9961] usb 7-1: config 0 interface 85 has no altsetting 0 [ 1015.063691][ T9961] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1015.077775][ T9961] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.096991][ T9961] usb 7-1: Product: syz [ 1015.101241][ T9961] usb 7-1: Manufacturer: syz [ 1015.105850][ T9961] usb 7-1: SerialNumber: syz [ 1015.172911][ T9961] usb 7-1: config 0 descriptor?? [ 1015.214755][ T9961] appletouch 7-1:0.85: Could not find int-in endpoint [ 1015.239250][ T9961] appletouch 7-1:0.85: probe with driver appletouch failed with error -5 [ 1015.270914][ T9961] usbhid 7-1:0.85: couldn't find an input interrupt endpoint [ 1016.021673][T16399] netlink: 'syz.3.3421': attribute type 8 has an invalid length. [ 1017.040333][T16401] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3422'. [ 1017.196599][ T9961] usb 7-1: USB disconnect, device number 9 [ 1017.326378][T14839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1017.336772][T14839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1017.351783][T14839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1017.381887][T14839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1017.392989][T14839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1017.638428][T16411] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3424'. [ 1018.460516][T16417] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1018.997450][ T9961] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1019.597217][T14839] Bluetooth: hci3: command tx timeout [ 1020.176263][ T1155] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1020.190982][ T9961] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1020.221214][ T9961] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1020.237088][ T1155] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1020.258227][ T9961] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1020.299039][ T9961] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1020.311896][ T9961] usb 7-1: SerialNumber: syz [ 1020.692056][ T9961] usb 7-1: 0:2 : does not exist [ 1020.798228][ T9961] usb 7-1: USB disconnect, device number 10 [ 1020.965165][T14571] udevd[14571]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1021.068476][ T1155] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1021.105949][ T1155] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1021.328764][ T1155] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1021.359135][ T1155] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1021.428150][T16444] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3437'. [ 1021.583216][ T9961] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1021.600653][ T1155] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1021.640477][ T1155] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1021.674066][T16447] Invalid ELF header len 7 [ 1021.803967][ T9961] usb 6-1: Using ep0 maxpacket: 32 [ 1021.819399][T14839] Bluetooth: hci3: command tx timeout [ 1021.853068][ T9961] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 1021.875744][ T9961] usb 6-1: config 0 has no interface number 0 [ 1021.885758][ T9961] usb 6-1: config 0 interface 85 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 1021.904294][ T9961] usb 6-1: config 0 interface 85 has no altsetting 0 [ 1021.952207][ T9961] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1021.964814][ T9961] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1021.977658][ T9961] usb 6-1: Product: syz [ 1021.990713][ T9961] usb 6-1: Manufacturer: syz [ 1021.995551][ T9961] usb 6-1: SerialNumber: syz [ 1022.179386][ T9961] usb 6-1: config 0 descriptor?? [ 1022.211043][ T9961] appletouch 6-1:0.85: Could not find int-in endpoint [ 1022.244215][ T9961] appletouch 6-1:0.85: probe with driver appletouch failed with error -5 [ 1022.286062][ T9961] usbhid 6-1:0.85: couldn't find an input interrupt endpoint [ 1024.339783][T14839] Bluetooth: hci3: command tx timeout [ 1024.624765][T16462] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3442'. [ 1024.657521][T16407] chnl_net:caif_netlink_parms(): no params data found [ 1025.176815][ T1155] bridge_slave_1: left allmulticast mode [ 1025.187557][ T1155] bridge_slave_1: left promiscuous mode [ 1025.196481][ T1155] bridge0: port 2(bridge_slave_1) entered disabled state [ 1025.222684][ T1155] bridge_slave_0: left allmulticast mode [ 1025.230649][ T1155] bridge_slave_0: left promiscuous mode [ 1025.236696][ T1155] bridge0: port 1(bridge_slave_0) entered disabled state [ 1025.647752][ T10] usb 6-1: USB disconnect, device number 49 [ 1026.117963][ T1155] bond5 (unregistering): (slave geneve2): Releasing active interface [ 1026.445790][ T1155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1026.506523][ T1155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1026.519728][T14839] Bluetooth: hci3: command tx timeout [ 1026.575966][ T1155] bond0 (unregistering): Released all slaves [ 1026.634552][ T1155] bond1 (unregistering): Released all slaves [ 1026.708237][ T1155] bond2 (unregistering): Released all slaves [ 1026.790873][ T1155] bond3 (unregistering): Released all slaves [ 1026.865009][ T1155] bond4 (unregistering): Released all slaves [ 1026.962274][ T1155] bond5 (unregistering): Released all slaves [ 1027.020175][ T1155] bond6 (unregistering): Released all slaves [ 1027.042499][ T1155] bond7 (unregistering): Released all slaves [ 1027.305189][ T24] IPVS: starting estimator thread 0... [ 1027.326149][T16492] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1027.406674][T16498] IPVS: using max 24 ests per chain, 57600 per kthread [ 1028.113171][T16407] bridge0: port 1(bridge_slave_0) entered blocking state [ 1028.142311][T16407] bridge0: port 1(bridge_slave_0) entered disabled state [ 1028.166062][T16407] bridge_slave_0: entered allmulticast mode [ 1028.210255][T16407] bridge_slave_0: entered promiscuous mode [ 1028.257536][T16407] bridge0: port 2(bridge_slave_1) entered blocking state [ 1028.337758][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1028.368143][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1029.083619][T16407] bridge0: port 2(bridge_slave_1) entered disabled state [ 1029.091800][T16407] bridge_slave_1: entered allmulticast mode [ 1029.100048][T16407] bridge_slave_1: entered promiscuous mode [ 1029.145763][T16511] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3450'. [ 1031.100840][T16407] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1031.145433][T16407] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1031.303803][T16534] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3459'. [ 1032.603896][T16407] team0: Port device team_slave_0 added [ 1032.746362][ T1155] hsr_slave_0: left promiscuous mode [ 1032.795125][ T1155] hsr_slave_1: left promiscuous mode [ 1032.814990][ T1155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1032.865774][ T1155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1033.066061][ T5159] IPVS: starting estimator thread 0... [ 1033.075551][T16558] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1033.166858][ T1155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1033.174756][ T1155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1033.198958][T16561] IPVS: using max 24 ests per chain, 57600 per kthread [ 1033.220228][ T1155] veth1_macvtap: left promiscuous mode [ 1033.225768][ T1155] veth0_macvtap: left promiscuous mode [ 1033.238631][ T1155] veth1_vlan: left promiscuous mode [ 1033.245569][ T1155] veth0_vlan: left promiscuous mode [ 1034.155681][ T1155] team0 (unregistering): Port device team_slave_1 removed [ 1034.230062][ T1155] team0 (unregistering): Port device team_slave_0 removed [ 1034.870044][T16407] team0: Port device team_slave_1 added [ 1035.028564][T16407] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1035.072348][T16407] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1035.172869][T16407] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1035.460503][T16407] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1035.476786][T16407] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1035.504744][T16407] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1036.261489][T16587] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3469'. [ 1036.842548][T16407] hsr_slave_0: entered promiscuous mode [ 1036.850345][T16407] hsr_slave_1: entered promiscuous mode [ 1036.874946][T16407] debugfs: 'hsr0' already exists in 'hsr' [ 1036.881303][T16407] Cannot create hsr debugfs directory [ 1037.542647][ T5159] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1037.647607][ T1155] IPVS: stop unused estimator thread 0... [ 1037.707896][ T5159] usb 7-1: Using ep0 maxpacket: 8 [ 1037.726914][ T5159] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1037.750350][ T5159] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1037.787726][ T5159] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1037.825008][ T5159] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1037.867637][ T5159] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1037.899975][ T5159] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1037.949665][ T5159] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1037.985336][ T5159] usb 7-1: config 168 interface 0 has no altsetting 0 [ 1038.011833][ T5159] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1038.038723][ T5159] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1038.083712][ T5159] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1038.124318][ T5159] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1038.158979][T16628] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1038.166870][ T5159] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1038.213512][ T5159] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1038.252610][ T5159] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1038.334954][ T5159] usb 7-1: config 168 interface 0 has no altsetting 0 [ 1038.415342][ T5159] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1038.434607][ T5159] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1038.495175][ T5159] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1038.542734][ T5159] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1038.613118][ T5159] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1038.653385][ T5159] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1038.695786][ T5159] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1038.725206][ T5159] usb 7-1: config 168 interface 0 has no altsetting 0 [ 1038.768189][ T5159] usb 7-1: string descriptor 0 read error: -22 [ 1038.787447][ T5159] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1038.862027][ T5159] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.950532][ T5159] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1039.391444][T16407] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1039.635540][T16407] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1039.707441][ T10] usb 7-1: USB disconnect, device number 11 [ 1039.721233][T16644] usb 7-1: Couldn't submit interrupt_out_urb -19 [ 1039.730705][T16407] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1039.820749][T16407] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1040.281595][T16407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1040.395865][T16407] 8021q: adding VLAN 0 to HW filter on device team0 [ 1040.414699][T16660] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3484'. [ 1040.460758][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state [ 1040.467965][ T1155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1040.515371][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 1040.522664][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1041.645909][T16687] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3490'. [ 1041.808573][T16407] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1042.239808][T16694] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3492'. [ 1043.565885][ T6077] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1043.926228][ T6077] usb 4-1: Using ep0 maxpacket: 32 [ 1043.960983][ T6077] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 1044.001045][ T6077] usb 4-1: config 0 has no interface number 0 [ 1044.007268][ T6077] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid maxpacket 12336, setting to 64 [ 1044.063754][ T6077] usb 4-1: config 0 interface 85 has no altsetting 0 [ 1044.089498][T16407] veth0_vlan: entered promiscuous mode [ 1044.110770][ T6077] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1044.151605][ T6077] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.159701][ T6077] usb 4-1: Product: syz [ 1044.167255][T16407] veth1_vlan: entered promiscuous mode [ 1044.215725][ T6077] usb 4-1: Manufacturer: syz [ 1044.220418][ T6077] usb 4-1: SerialNumber: syz [ 1044.293340][ T6077] usb 4-1: config 0 descriptor?? [ 1044.335401][T16407] veth0_macvtap: entered promiscuous mode [ 1044.349090][ T6077] appletouch 4-1:0.85: Could not find int-in endpoint [ 1044.396461][ T6077] appletouch 4-1:0.85: probe with driver appletouch failed with error -5 [ 1044.406008][ T6077] usbhid 4-1:0.85: couldn't find an input interrupt endpoint [ 1044.418738][T16407] veth1_macvtap: entered promiscuous mode [ 1044.529429][T16407] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1044.596659][T16407] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1044.767621][ T1155] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1044.794822][ T1155] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1044.837227][ T1155] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1044.889698][ T1155] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.983970][ T9468] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1046.031062][ T9468] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1046.285625][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1046.323843][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1046.590143][ T9961] usb 4-1: USB disconnect, device number 42 [ 1046.864754][ T5159] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1047.025144][ T5159] usb 3-1: device descriptor read/64, error -71 [ 1047.452500][ T5159] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1047.612719][ T5159] usb 3-1: device descriptor read/64, error -71 [ 1047.742103][ T5159] usb usb3-port1: attempt power cycle [ 1047.762178][T16789] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3517'. [ 1048.702697][ T5159] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1048.768267][ T5159] usb 3-1: device descriptor read/8, error -71 [ 1049.586772][T16815] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1053.937582][T16881] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3537'. [ 1053.946810][T16881] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3537'. [ 1053.969212][ T996] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1053.983855][ T996] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1054.017721][ T996] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1054.066760][ T996] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1055.178211][ T9627] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1055.499521][ T9627] usb 1-1: device descriptor read/64, error -71 [ 1055.768326][ T9627] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1055.840273][T16907] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1055.979493][ T9627] usb 1-1: device descriptor read/64, error -71 [ 1056.098470][ T9627] usb usb1-port1: attempt power cycle [ 1056.476033][ T9627] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1056.527861][ T9627] usb 1-1: device descriptor read/8, error -71 [ 1057.769390][ T9627] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1057.904544][ T9627] usb 1-1: device descriptor read/8, error -71 [ 1058.042398][ T9627] usb usb1-port1: unable to enumerate USB device [ 1058.220077][T16940] netlink: 'syz.0.3551': attribute type 8 has an invalid length. [ 1059.717249][T16953] program syz.4.3555 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1060.767124][T16969] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1061.742645][ T24] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1062.733460][ T24] usb 5-1: device descriptor read/64, error -71 [ 1064.006416][ T24] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1064.185802][ T24] usb 5-1: device descriptor read/64, error -71 [ 1064.303761][ T24] usb usb5-port1: attempt power cycle [ 1064.676465][T17000] fuse: Bad value for 'fd' [ 1064.681392][ T24] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1065.037481][ T24] usb 5-1: device not accepting address 40, error -71 [ 1066.701327][T17027] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1067.616330][T17037] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3583'. [ 1067.944018][T17045] fuse: Bad value for 'fd' [ 1068.198918][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1068.210710][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1068.221170][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1068.229866][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1068.238387][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1068.342525][ T9627] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1068.392988][T17056] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1068.526504][ T9627] usb 4-1: device descriptor read/64, error -71 [ 1068.814755][ T9627] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1069.069443][ T9627] usb 4-1: device descriptor read/64, error -71 [ 1069.245583][ T9627] usb usb4-port1: attempt power cycle [ 1069.514390][T17069] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3593'. [ 1069.743777][ T9627] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1069.796379][ T9627] usb 4-1: device descriptor read/8, error -71 [ 1070.052210][ T9627] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1070.074782][ T9627] usb 4-1: device descriptor read/8, error -71 [ 1070.212497][ T9627] usb usb4-port1: unable to enumerate USB device [ 1070.240067][ T5159] IPVS: starting estimator thread 0... [ 1070.255583][T17081] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1070.353111][T17084] IPVS: using max 26 ests per chain, 62400 per kthread [ 1070.461329][ T5840] Bluetooth: hci4: command tx timeout [ 1071.187199][T17052] chnl_net:caif_netlink_parms(): no params data found [ 1073.057411][ T5840] Bluetooth: hci4: command tx timeout [ 1074.030650][T17052] bridge0: port 1(bridge_slave_0) entered blocking state [ 1074.063932][T17052] bridge0: port 1(bridge_slave_0) entered disabled state [ 1074.076141][T17052] bridge_slave_0: entered allmulticast mode [ 1074.084749][T17052] bridge_slave_0: entered promiscuous mode [ 1074.116255][T17052] bridge0: port 2(bridge_slave_1) entered blocking state [ 1074.151388][T17052] bridge0: port 2(bridge_slave_1) entered disabled state [ 1074.181761][T17052] bridge_slave_1: entered allmulticast mode [ 1074.213131][T17052] bridge_slave_1: entered promiscuous mode [ 1074.258180][T17121] netlink: 'syz.3.3609': attribute type 1 has an invalid length. [ 1074.481269][T17129] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3610'. [ 1075.256787][ T5840] Bluetooth: hci4: command tx timeout [ 1075.440219][T17052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1075.475810][T17052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1075.528973][T17146] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1075.536402][ T24] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1075.602449][T17052] team0: Port device team_slave_0 added [ 1075.627581][T17052] team0: Port device team_slave_1 added [ 1075.659664][T17148] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3616'. [ 1075.729136][ T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1075.756107][ T24] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1075.769196][T17052] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1075.784383][T17052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1075.813375][T17052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1075.824643][ T24] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1075.835645][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1075.845667][ T24] usb 6-1: SerialNumber: syz [ 1075.864319][T17052] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1075.881115][T17052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1075.922389][T17052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1076.374053][ T24] usb 6-1: invalid UAC_HEADER (v1) [ 1076.898065][T17162] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1077.344801][ T24] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1077.390769][ T24] usb 6-1: USB disconnect, device number 50 [ 1077.467908][ T5840] Bluetooth: hci4: command tx timeout [ 1077.495717][T17052] hsr_slave_0: entered promiscuous mode [ 1077.514711][T17137] udevd[17137]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1077.523215][T17052] hsr_slave_1: entered promiscuous mode [ 1077.552575][T17052] debugfs: 'hsr0' already exists in 'hsr' [ 1077.560412][T17052] Cannot create hsr debugfs directory [ 1080.298548][T17195] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1081.054456][T17052] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1081.571510][T17052] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1081.678697][T17052] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1081.744157][T17052] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1081.848186][T17225] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3642'. [ 1082.092701][T17229] sch_tbf: peakrate 3 is lower than or equals to rate 183 ! [ 1082.191162][ T9627] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1082.397501][ T9627] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1082.459768][ T9627] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1082.609082][ T9627] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1082.682752][ T9627] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1082.690831][ T9627] usb 5-1: SerialNumber: syz [ 1083.354301][ T9627] usb 5-1: invalid UAC_HEADER (v1) [ 1083.551410][T17052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1083.612701][ T9627] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1083.665683][ T9627] usb 5-1: USB disconnect, device number 42 [ 1083.681833][T17052] 8021q: adding VLAN 0 to HW filter on device team0 [ 1083.737947][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1083.745344][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1083.768121][T17137] udevd[17137]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1083.841614][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1083.849021][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1084.210430][T17262] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1084.424341][T17268] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3654'. [ 1084.790808][ T5840] Bluetooth: hci5: unexpected event for opcode 0x1004 [ 1085.882807][T17052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1086.990417][T17308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3668'. [ 1087.593151][T17319] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1087.744251][T17322] syzkaller0: entered promiscuous mode [ 1087.764316][T17322] syzkaller0: entered allmulticast mode [ 1089.136280][ T5840] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1089.145093][ T5840] Bluetooth: hci5: Injecting HCI hardware error event [ 1089.156590][ T5840] Bluetooth: hci5: hardware error 0x00 [ 1089.184954][T17052] veth0_vlan: entered promiscuous mode [ 1089.338194][T17052] veth1_vlan: entered promiscuous mode [ 1090.043148][T17052] veth0_macvtap: entered promiscuous mode [ 1090.101960][T17052] veth1_macvtap: entered promiscuous mode [ 1091.165898][T17052] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1091.212400][T17052] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1091.257559][T17356] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3683'. [ 1091.382321][T12292] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1091.416666][T12292] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1091.465951][T12292] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1091.491543][ T5840] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1091.849039][T17373] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1092.849113][T12292] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1094.041698][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1094.048414][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1094.280618][ T996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1094.304628][ T996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1094.705666][T17404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3690'. [ 1094.714764][T17404] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3690'. [ 1096.562331][T12298] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1096.603554][T12298] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1096.892401][T17412] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3697'. [ 1099.287483][T17434] syzkaller0: entered promiscuous mode [ 1099.421382][T17434] syzkaller0: entered allmulticast mode [ 1101.542363][T17451] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1104.908306][ T6077] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1105.171267][ T6077] usb 5-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 1105.300097][ T6077] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1105.496677][ T6077] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1105.606719][ T6077] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1105.665633][ T6077] usb 5-1: Product: syz [ 1105.701804][ T6077] usb 5-1: Manufacturer: syz [ 1105.738516][ T6077] usb 5-1: SerialNumber: syz [ 1105.776774][ T6077] usb 5-1: config 0 descriptor?? [ 1105.810208][T17485] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1105.862122][ T6077] usb 5-1: selecting invalid altsetting 0 [ 1106.790259][T17485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1106.891652][T17485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1107.017742][ T5840] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 1107.061804][T17485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1107.131728][T17485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1107.376776][ T9627] usb 5-1: USB disconnect, device number 43 [ 1107.459206][T17510] syzkaller0: entered promiscuous mode [ 1107.493466][T17510] syzkaller0: entered allmulticast mode [ 1110.255929][T17544] netlink: 'syz.7.3735': attribute type 1 has an invalid length. [ 1112.185817][T17571] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3745'. [ 1112.194752][T17571] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1112.259768][T17571] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 1114.781188][ T9961] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1115.005729][ T24] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1115.144613][ T9961] usb 6-1: Using ep0 maxpacket: 32 [ 1115.153629][ T9961] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 1115.175307][ T9961] usb 6-1: config 0 has no interface number 0 [ 1115.189135][ T9961] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 48, changing to 9 [ 1115.294659][ T9961] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid maxpacket 8240, setting to 1024 [ 1115.422162][ T9961] usb 6-1: config 0 interface 85 has no altsetting 0 [ 1115.610112][ T9961] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1115.706608][ T9961] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1115.817705][ T9961] usb 6-1: Product: syz [ 1115.821924][ T9961] usb 6-1: Manufacturer: syz [ 1115.839763][ T9961] usb 6-1: SerialNumber: syz [ 1115.858737][ T9961] usb 6-1: config 0 descriptor?? [ 1115.988640][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1115.998872][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1116.068332][ T24] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1116.122349][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1116.137778][ T9961] appletouch 6-1:0.85: Failed to read mode from device. [ 1116.172784][ T24] usb 1-1: SerialNumber: syz [ 1116.175978][ T9961] appletouch 6-1:0.85: probe with driver appletouch failed with error -5 [ 1116.459221][ T24] usb 1-1: 0:2 : does not exist [ 1116.603456][ T9961] usb 6-1: USB disconnect, device number 51 [ 1116.730035][ T24] usb 1-1: USB disconnect, device number 36 [ 1116.942668][T17499] udevd[17499]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1118.075589][ T5840] Bluetooth: hci0: command 0x0406 tx timeout [ 1121.534943][T17668] fuse: Bad value for 'fd' [ 1121.645988][T17668] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1121.654528][T17666] batman_adv: batadv0: Adding interface: dummy0 [ 1121.684009][T17666] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1121.738723][T17666] batman_adv: batadv0: Interface activated: dummy0 [ 1121.779156][T17669] batadv0: mtu less than device minimum [ 1121.793514][T17669] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1121.805750][T17669] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1121.817484][T17669] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1121.829449][T17669] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1121.841215][T17669] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1121.852867][T17669] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1121.864644][T17669] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1121.876447][T17669] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1121.888344][T17669] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1122.019524][ T24] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1122.966184][ T24] usb 8-1: Using ep0 maxpacket: 32 [ 1122.988602][ T24] usb 8-1: config 0 has an invalid interface number: 85 but max is 0 [ 1122.996748][ T24] usb 8-1: config 0 has no interface number 0 [ 1123.041592][ T24] usb 8-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 48, changing to 9 [ 1123.056161][ T24] usb 8-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid maxpacket 8240, setting to 1024 [ 1123.073124][ T24] usb 8-1: config 0 interface 85 has no altsetting 0 [ 1123.104860][ T24] usb 8-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1123.605965][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1123.663018][ T24] usb 8-1: Product: syz [ 1123.667743][ T24] usb 8-1: Manufacturer: syz [ 1123.721291][ T24] usb 8-1: SerialNumber: syz [ 1123.769818][ T24] usb 8-1: config 0 descriptor?? [ 1124.022765][ T24] appletouch 8-1:0.85: Failed to read mode from device. [ 1124.076265][ T24] appletouch 8-1:0.85: probe with driver appletouch failed with error -5 [ 1124.195053][ T9619] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1124.426945][ T9619] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1124.862094][ T24] usb 8-1: USB disconnect, device number 2 [ 1124.878422][ T9619] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1124.930503][ T9619] usb 1-1: too many endpoints for config 1 interface 1 altsetting 101: 118, using maximum allowed: 30 [ 1125.034502][ T9619] usb 1-1: config 1 interface 1 altsetting 101 has 0 endpoint descriptors, different from the interface descriptor's value: 118 [ 1125.081127][ T9619] usb 1-1: config 1 interface 1 has no altsetting 1 [ 1125.129942][ T9619] usb 1-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice= 0.40 [ 1125.162170][ T9619] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1125.176127][ T9619] usb 1-1: Product: syz [ 1125.181735][ T9619] usb 1-1: Manufacturer: syz [ 1125.186555][ T9619] usb 1-1: SerialNumber: syz [ 1125.693758][T17711] fuse: Bad value for 'fd' [ 1125.724642][ T9619] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1125.778868][ T9619] usb 1-1: USB disconnect, device number 37 [ 1125.780861][T17711] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1125.797844][ T89] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1125.833467][T17499] udevd[17499]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1126.193173][ T89] usb 4-1: Using ep0 maxpacket: 32 [ 1126.201190][ T89] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1126.216031][ T89] usb 4-1: config index 0 descriptor too short (expected 35364, got 36) [ 1126.232621][ T89] usb 4-1: config 21 has too many interfaces: 236, using maximum allowed: 32 [ 1126.279887][ T89] usb 4-1: config 21 has an invalid interface number: 251 but max is 235 [ 1126.909311][ T89] usb 4-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 1126.919746][ T89] usb 4-1: config 21 has 1 interface, different from the descriptor's value: 236 [ 1126.954097][ T89] usb 4-1: config 21 has no interface number 0 [ 1126.967186][T17722] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3796'. [ 1126.982891][ T89] usb 4-1: config 21 interface 251 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1127.026710][ T89] usb 4-1: config 21 interface 251 has no altsetting 0 [ 1127.055011][ T89] usb 4-1: New USB device found, idVendor=2304, idProduct=023f, bcdDevice=9e.f2 [ 1127.093211][ T89] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1127.150093][ T89] usb 4-1: Product: syz [ 1127.165716][ T89] usb 4-1: Manufacturer: syz [ 1128.520484][ T89] usb 4-1: SerialNumber: syz [ 1128.916477][ T89] usb 4-1: can't set config #21, error -71 [ 1129.014458][ T89] usb 4-1: USB disconnect, device number 47 [ 1129.390075][T17758] fuse: Bad value for 'fd' [ 1130.389878][T17766] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3811'. [ 1130.593817][T17771] erofs (device nullb0): cannot find valid erofs superblock [ 1133.064212][T17803] afs: Bad value for 'flock' [ 1134.772037][T17812] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3828'. [ 1137.744580][ T24] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1138.338852][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 1138.347916][ T24] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 1138.356868][ T24] usb 4-1: config 0 has no interface number 0 [ 1138.363661][ T24] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 48, changing to 9 [ 1138.396463][ T24] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid maxpacket 8240, setting to 1024 [ 1138.747223][ T24] usb 4-1: config 0 interface 85 has no altsetting 0 [ 1139.250833][ T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1139.259941][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1139.280759][ T24] usb 4-1: Product: syz [ 1139.285168][ T24] usb 4-1: Manufacturer: syz [ 1139.289785][ T24] usb 4-1: SerialNumber: syz [ 1139.316523][ T24] usb 4-1: config 0 descriptor?? [ 1140.415598][ T24] appletouch 4-1:0.85: Failed to read mode from device. [ 1140.455390][ T24] appletouch 4-1:0.85: probe with driver appletouch failed with error -5 [ 1140.509138][ T24] usb 4-1: USB disconnect, device number 48 [ 1143.856327][T17910] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3862'. [ 1143.914886][T17915] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3862'. [ 1146.186180][ T24] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1146.762595][ T24] usb 8-1: Using ep0 maxpacket: 32 [ 1146.803180][ T24] usb 8-1: config 0 has an invalid interface number: 85 but max is 0 [ 1146.853504][ T24] usb 8-1: config 0 has no interface number 0 [ 1146.870362][ T24] usb 8-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 48, changing to 9 [ 1147.107565][ T24] usb 8-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid maxpacket 8240, setting to 1024 [ 1147.120137][ T24] usb 8-1: config 0 interface 85 has no altsetting 0 [ 1147.152961][ T24] usb 8-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1147.936466][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1148.082738][ T24] usb 8-1: Product: syz [ 1148.087166][ T24] usb 8-1: Manufacturer: syz [ 1148.121867][T17953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3876'. [ 1148.131073][T17953] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3876'. [ 1148.743789][ T49] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1148.782475][ T24] usb 8-1: SerialNumber: syz [ 1148.790508][ T49] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1148.859869][ T24] usb 8-1: config 0 descriptor?? [ 1148.949727][ T49] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1149.025560][ T24] appletouch 8-1:0.85: Failed to read mode from device. [ 1149.034255][ T49] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1149.075540][ T24] appletouch 8-1:0.85: probe with driver appletouch failed with error -5 [ 1149.145857][ T24] usb 8-1: USB disconnect, device number 3 [ 1151.004893][ T5840] Bluetooth: hci3: command 0x0406 tx timeout [ 1151.023060][T17974] Bluetooth: MGMT ver 1.23 [ 1151.027920][T17974] Bluetooth: hci0: invalid length 0, exp 2 for type 14 [ 1152.874955][ T6077] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1153.090674][ T6077] usb 8-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 1153.131145][ T6077] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1153.701851][ T6077] usb 8-1: config 0 descriptor?? [ 1156.494934][ T6077] usb 8-1: Cannot set autoneg [ 1156.540295][ T6077] MOSCHIP usb-ethernet driver 8-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 1156.599358][ T6077] usb 8-1: USB disconnect, device number 4 [ 1158.468548][T18068] netlink: 'syz.0.3919': attribute type 1 has an invalid length. [ 1158.518278][T18068] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1158.589730][T18070] bond2: (slave ip6gretap1): making interface the new active one [ 1158.660924][T18070] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1159.654753][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1159.669657][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1160.365888][ T89] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1160.549415][ T89] usb 1-1: config 1 has an invalid descriptor of length 226, skipping remainder of the config [ 1160.567700][ T89] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1160.620345][ T89] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 5, skipping [ 1160.668098][ T89] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1160.714848][ T89] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1160.820646][ T89] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1161.064536][ T89] usb 1-1: SerialNumber: syz [ 1161.704398][ T89] usb 1-1: 0:2 : does not exist [ 1161.709370][ T89] usb 1-1: unit 5 not found! [ 1161.721202][T18114] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3935'. [ 1161.947323][ T89] usb 1-1: USB disconnect, device number 38 [ 1168.251230][T18156] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.3949'. [ 1168.851177][T18163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3951'. [ 1168.860758][T18163] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3951'. [ 1169.090098][ T996] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1169.503198][ T996] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1169.568500][ T996] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1169.597932][ T996] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1169.714612][T18170] erspan0: entered promiscuous mode [ 1169.941123][T18178] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3958'. [ 1172.309510][T18190] ufs: You didn't specify the type of your ufs filesystem [ 1172.309510][T18190] [ 1172.309510][T18190] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1172.309510][T18190] [ 1172.309510][T18190] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1172.340381][T18190] ufs: ufstype=old is supported read-only [ 1172.536833][ T89] usb 6-1: new full-speed USB device number 52 using dummy_hcd [ 1172.646427][T18206] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.3967'. [ 1172.730647][ T89] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1172.748116][ T89] usb 6-1: not running at top speed; connect to a high speed hub [ 1172.770489][ T89] usb 6-1: config 6 has an invalid interface number: 168 but max is 1 [ 1172.790011][ T89] usb 6-1: config 6 has an invalid interface number: 61 but max is 1 [ 1172.864395][ T89] usb 6-1: config 6 has no interface number 0 [ 1173.693423][ T89] usb 6-1: config 6 has no interface number 1 [ 1173.715273][ T89] usb 6-1: config 6 interface 61 has no altsetting 0 [ 1173.754488][ T89] usb 6-1: New USB device found, idVendor=2019, idProduct=4902, bcdDevice=94.7f [ 1173.795772][ T89] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1173.843876][ T89] usb 6-1: Product: syz [ 1173.856568][ T89] usb 6-1: Manufacturer: syz [ 1173.875440][ T89] usb 6-1: SerialNumber: syz [ 1173.975179][T18225] nbd: must specify a size in bytes for the device [ 1174.193111][ T89] usb 6-1: USB disconnect, device number 52 [ 1174.573094][ T5932] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 1174.752925][T18242] affs: No valid root block on device nullb0 [ 1174.921806][ T5932] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1175.502230][ T5932] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1175.527111][ T5932] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1175.538450][ T5932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1175.550907][ T5932] usb 5-1: config 0 descriptor?? [ 1175.769138][T18247] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.3982'. [ 1179.785839][ T5932] usbhid 5-1:0.0: can't add hid device: -71 [ 1179.791982][ T5932] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1179.837556][ T5932] usb 5-1: USB disconnect, device number 44 [ 1179.845214][T18262] use of bytesused == 0 is deprecated and will be removed in the future, [ 1179.924057][T18262] use the actual size instead. [ 1182.147318][T18295] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3995'. [ 1182.158020][T18295] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3995'. [ 1183.733606][T18301] bridge0: port 2(bridge_slave_1) entered disabled state [ 1183.741448][T18301] bridge0: port 1(bridge_slave_0) entered disabled state [ 1185.520926][T18301] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1185.558817][T18301] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1185.905301][ T13] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1185.949408][ T13] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1185.992116][ T13] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1186.037882][ T13] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1186.184650][ T13] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1186.537312][ T13] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1186.791611][ T13] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1186.836327][ T13] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1187.860238][T18372] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4027'. [ 1187.869182][T18372] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4027'. [ 1188.415793][T14839] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1189.996177][T18406] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4042'. [ 1190.795829][ T6077] IPVS: starting estimator thread 0... [ 1191.096948][T18417] IPVS: using max 23 ests per chain, 55200 per kthread [ 1191.650721][T18411] net_ratelimit: 10 callbacks suppressed [ 1191.650751][T18411] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1194.010488][T18462] ufs: You didn't specify the type of your ufs filesystem [ 1194.010488][T18462] [ 1194.010488][T18462] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1194.010488][T18462] [ 1194.010488][T18462] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1194.041967][T18462] ufs: ufstype=old is supported read-only [ 1194.242053][T18464] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4061'. [ 1195.100769][T18475] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4065'. [ 1195.183706][T18475] loop2: detected capacity change from 0 to 7 [ 1195.237101][T18441] Dev loop2: unable to read RDB block 7 [ 1195.255426][T18441] loop2: unable to read partition table [ 1195.261366][T18441] loop2: partition table beyond EOD, truncated [ 1195.302308][T18475] Dev loop2: unable to read RDB block 7 [ 1195.342768][T18475] loop2: unable to read partition table [ 1195.351202][T18485] netlink: 64 bytes leftover after parsing attributes in process `syz.6.4054'. [ 1195.381511][T18475] loop2: partition table beyond EOD, truncated [ 1195.453960][T18475] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 1196.722351][T18516] ufs: You didn't specify the type of your ufs filesystem [ 1196.722351][T18516] [ 1196.722351][T18516] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1196.722351][T18516] [ 1196.722351][T18516] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1196.754439][T18516] ufs: ufstype=old is supported read-only [ 1197.038174][T18524] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4082'. [ 1197.215096][T18526] syzkaller0: entered promiscuous mode [ 1197.237380][T18526] syzkaller0: entered allmulticast mode [ 1200.476185][T14839] Bluetooth: hci4: command 0x0406 tx timeout [ 1201.310207][T18553] fuse: Bad value for 'fd' [ 1201.360896][T18553] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1202.470014][T18569] ufs: You didn't specify the type of your ufs filesystem [ 1202.470014][T18569] [ 1202.470014][T18569] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1202.470014][T18569] [ 1202.470014][T18569] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1202.504306][T18569] ufs: ufstype=old is supported read-only [ 1204.004322][ T89] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1206.712791][ T89] usb 6-1: device descriptor read/all, error -71 [ 1206.971372][T18596] syzkaller0: entered promiscuous mode [ 1206.980596][T18602] fuse: Bad value for 'fd' [ 1206.991196][T18596] syzkaller0: entered allmulticast mode [ 1207.283382][T18604] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4112'. [ 1207.293628][T18604] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4112'. [ 1207.427468][ T6077] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1207.605359][ T6077] usb 4-1: Using ep0 maxpacket: 16 [ 1207.628799][ T6077] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1207.887153][ T6077] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1207.908609][ T6077] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1207.942568][ T6077] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1207.999030][ T6077] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1208.317317][ T6077] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1208.339540][ T6077] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1208.349069][T18619] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1208.382427][ T6077] usb 4-1: Manufacturer: syz [ 1208.427597][ T6077] usb 4-1: config 0 descriptor?? [ 1208.705902][ T9619] usb 7-1: new low-speed USB device number 12 using dummy_hcd [ 1208.795064][T18626] ufs: You didn't specify the type of your ufs filesystem [ 1208.795064][T18626] [ 1208.795064][T18626] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1208.795064][T18626] [ 1208.795064][T18626] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1208.826678][T18626] ufs: ufstype=old is supported read-only [ 1209.603870][ T9619] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1209.655972][ T9619] usb 7-1: config 0 has no interface number 0 [ 1209.683179][T18598] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4111'. [ 1209.926475][ T9619] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1209.977838][ T9619] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1210.156477][ T9619] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1210.378027][ T9619] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1210.589800][ T9619] usb 7-1: config 0 descriptor?? [ 1210.611930][T18621] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1210.643304][ T9619] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1211.202945][T18642] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4120'. [ 1211.697467][ T9619] usb 7-1: USB disconnect, device number 12 [ 1213.685256][ T6077] rc_core: IR keymap rc-hauppauge not found [ 1213.691369][ T6077] Registered IR keymap rc-empty [ 1213.696712][ T6077] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1213.717546][ T6077] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1214.292910][ T6077] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1214.318268][ T6077] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input70 [ 1214.355543][ T6077] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1214.398801][ T6077] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1214.476656][ T6077] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1214.540142][ T6077] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1214.602039][ T6077] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1214.642351][ T6077] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1214.704294][ T6077] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1214.728291][T18664] fuse: Bad value for 'fd' [ 1214.744627][T18662] syzkaller0: entered promiscuous mode [ 1214.762943][T18662] syzkaller0: entered allmulticast mode [ 1214.769190][ T6077] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1214.837755][ T6077] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1214.886122][ T6077] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1214.952130][ T6077] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 1214.979694][ T6077] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1215.512038][ T6077] usb 4-1: USB disconnect, device number 49 [ 1215.915375][T18688] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1217.603951][ T6077] libceph: connect (1)[c::]:6789 error -101 [ 1217.618644][ T6077] libceph: mon0 (1)[c::]:6789 connect error [ 1217.684737][T18709] ceph: No mds server is up or the cluster is laggy [ 1217.983482][T18723] syzkaller0: entered promiscuous mode [ 1218.079308][T18723] syzkaller0: entered allmulticast mode [ 1220.622824][T18756] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1221.978141][ T9619] kernel write not supported for file /bluetooth/6lowpan_control (pid: 9619 comm: kworker/1:4) [ 1222.268072][ T177] Bluetooth: hci2: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 1222.304090][T18779] netlink: 'syz.3.4165': attribute type 8 has an invalid length. [ 1222.425498][ T177] Bluetooth: hci2: Frame reassembly failed (-84) [ 1224.414500][ T5840] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1224.567611][T18789] syzkaller0: entered promiscuous mode [ 1224.573202][T18789] syzkaller0: entered allmulticast mode [ 1225.333337][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1225.339861][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1226.073417][T18805] affs: No valid root block on device nullb0 [ 1227.338592][T18822] ufs: You didn't specify the type of your ufs filesystem [ 1227.338592][T18822] [ 1227.338592][T18822] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 1227.338592][T18822] [ 1227.338592][T18822] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 1227.370695][T18822] ufs: ufstype=old is supported read-only [ 1228.145494][T18826] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1229.261778][T18834] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4180'. [ 1229.700784][T18843] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4181'. [ 1229.710671][T18843] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4181'. [ 1229.848059][ T996] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1229.866940][ T996] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1229.884505][ T13] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1230.740137][ C1] ------------[ cut here ]------------ [ 1230.746122][ C1] ODEBUG: free active (active state 0) object: ffff888023bf6490 object type: timer_list hint: rose_t0timer_expiry+0x0/0x150 [ 1230.759115][ C1] WARNING: lib/debugobjects.c:629 at debug_print_object+0x18e/0x2a0, CPU#1: syz.7.4181/18838 [ 1230.769377][ C1] Modules linked in: [ 1230.773712][ C1] CPU: 1 UID: 0 PID: 18838 Comm: syz.7.4181 Tainted: G L syzkaller #0 PREEMPT(full) [ 1230.784737][ C1] Tainted: [L]=SOFTLOCKUP [ 1230.789099][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1230.799222][ C1] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 1230.805109][ C1] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 82 c2 e6 0b 41 56 48 8b 14 dd 60 30 1b 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 6c 5d dc 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 1230.824879][ C1] RSP: 0000:ffffc9000507f968 EFLAGS: 00010246 [ 1230.831055][ C1] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 1230.839098][ C1] RDX: ffffffff8c1b2fa0 RSI: ffffffff8c1b2bc0 RDI: ffffffff90e49cf0 [ 1230.847160][ C1] RBP: 0000000000000001 R08: ffff888023bf6490 R09: ffffffff8bb2bba0 [ 1230.855202][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1b2bc0 [ 1230.863693][ C1] R13: ffffffff8bb2bbe0 R14: ffffffff8a7b89c0 R15: ffffc9000507fa68 [ 1230.871914][ C1] FS: 00007f3410bf66c0(0000) GS:ffff888124439000(0000) knlGS:0000000000000000 [ 1230.881040][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1230.887663][ C1] CR2: 00007ffc28ef1fe0 CR3: 000000007424f000 CR4: 0000000000350ef0 [ 1230.895729][ C1] Call Trace: [ 1230.899028][ C1] [ 1230.902037][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1230.907719][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1230.913651][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1230.919335][ C1] debug_check_no_obj_freed+0x4da/0x630 [ 1230.925032][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 1230.931180][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1230.936928][ C1] ? mark_held_locks+0x40/0x70 [ 1230.941852][ C1] ? kasan_quarantine_put+0x104/0x240 [ 1230.947357][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1230.953102][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 1230.958343][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1230.964082][ C1] ? rose_timer_expiry+0x53f/0x630 [ 1230.969268][ C1] kfree+0x38f/0x6b0 [ 1230.973303][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1230.979102][ C1] rose_timer_expiry+0x53f/0x630 [ 1230.984133][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1230.989726][ C1] call_timer_fn+0x19a/0x670 [ 1230.994367][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1230.999632][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1231.005418][ C1] ? __run_timers+0x747/0xb30 [ 1231.010210][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1231.016434][ C1] ? rcu_is_watching+0x12/0xc0 [ 1231.021451][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1231.027009][ C1] __run_timers+0x757/0xb30 [ 1231.031726][ C1] ? __pfx___run_timers+0x10/0x10 [ 1231.036911][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1231.042650][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 1231.047740][ C1] run_timer_base+0x114/0x190 [ 1231.048512][ T13] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1231.052529][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 1231.052612][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1231.052672][ C1] run_timer_softirq+0x1a/0x50 [ 1231.068780][T18850] syzkaller0: entered promiscuous mode [ 1231.072239][ C1] handle_softirqs+0x1eb/0x9e0 [ 1231.072308][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1231.077752][T18850] syzkaller0: entered allmulticast mode [ 1231.082639][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1231.082708][ C1] __irq_exit_rcu+0xef/0x150 [ 1231.082766][ C1] irq_exit_rcu+0x9/0x30 [ 1231.113324][ C1] sysvec_apic_timer_interrupt+0x56/0xc0 [ 1231.118997][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1231.125247][ C1] RIP: 0033:0x7f341299c819 [ 1231.129773][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1231.150085][ C1] RSP: 002b:00007f3410bf60e8 EFLAGS: 00000246 [ 1231.156274][ C1] RAX: ffffffffffffffda RBX: 00007f3412c15fa8 RCX: 00007f341299c819 [ 1231.164452][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3412c15fa8 [ 1231.172599][ C1] RBP: 00007f3412c15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1231.180814][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1231.188882][ C1] R13: 00007f3412c16038 R14: 00007ffcc7e293f0 R15: 00007ffcc7e294d8 [ 1231.197024][ C1] [ 1231.200116][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1231.207430][ C1] CPU: 1 UID: 0 PID: 18838 Comm: syz.7.4181 Tainted: G L syzkaller #0 PREEMPT(full) [ 1231.218583][ C1] Tainted: [L]=SOFTLOCKUP [ 1231.223092][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1231.233369][ C1] Call Trace: [ 1231.236654][ C1] [ 1231.239589][ C1] dump_stack_lvl+0x100/0x190 [ 1231.244402][ C1] vpanic+0x552/0x970 [ 1231.248504][ C1] ? __pfx_vpanic+0x10/0x10 [ 1231.253033][ C1] panic+0xd1/0xe0 [ 1231.256815][ C1] ? __pfx_panic+0x10/0x10 [ 1231.261249][ C1] ? check_panic_on_warn+0x1f/0x90 [ 1231.266489][ C1] check_panic_on_warn.cold+0x19/0x34 [ 1231.271899][ C1] ? debug_print_object+0x18e/0x2a0 [ 1231.277099][ C1] __warn.cold+0x191/0x348 [ 1231.281535][ C1] __report_bug+0x296/0x3d0 [ 1231.286058][ C1] ? debug_print_object+0x18e/0x2a0 [ 1231.291270][ C1] ? __pfx___report_bug+0x10/0x10 [ 1231.296307][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1231.302423][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1231.308072][ C1] ? mark_held_locks+0x40/0x70 [ 1231.312892][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1231.318831][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1231.324512][ C1] report_bug_entry+0xe1/0x290 [ 1231.329298][ C1] ? debug_print_object+0x19b/0x2a0 [ 1231.334536][ C1] handle_bug+0x1cd/0x2a0 [ 1231.338916][ C1] exc_invalid_op+0x17/0x50 [ 1231.343447][ C1] asm_exc_invalid_op+0x1a/0x20 [ 1231.348324][ C1] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 1231.354144][ C1] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 82 c2 e6 0b 41 56 48 8b 14 dd 60 30 1b 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 6c 5d dc 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 1231.373954][ C1] RSP: 0000:ffffc9000507f968 EFLAGS: 00010246 [ 1231.380050][ C1] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 1231.388047][ C1] RDX: ffffffff8c1b2fa0 RSI: ffffffff8c1b2bc0 RDI: ffffffff90e49cf0 [ 1231.396051][ C1] RBP: 0000000000000001 R08: ffff888023bf6490 R09: ffffffff8bb2bba0 [ 1231.404055][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1b2bc0 [ 1231.412161][ C1] R13: ffffffff8bb2bbe0 R14: ffffffff8a7b89c0 R15: ffffc9000507fa68 [ 1231.420249][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1231.426025][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1231.431717][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1231.437375][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1231.443324][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1231.448988][ C1] debug_check_no_obj_freed+0x4da/0x630 [ 1231.454579][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 1231.460695][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1231.466350][ C1] ? mark_held_locks+0x40/0x70 [ 1231.471150][ C1] ? kasan_quarantine_put+0x104/0x240 [ 1231.476604][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1231.482334][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 1231.487557][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1231.493214][ C1] ? rose_timer_expiry+0x53f/0x630 [ 1231.498414][ C1] kfree+0x38f/0x6b0 [ 1231.502366][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1231.508032][ C1] rose_timer_expiry+0x53f/0x630 [ 1231.513016][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1231.518505][ C1] call_timer_fn+0x19a/0x670 [ 1231.523150][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1231.528291][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1231.533955][ C1] ? __run_timers+0x747/0xb30 [ 1231.538669][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1231.544323][ C1] ? rcu_is_watching+0x12/0xc0 [ 1231.549203][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1231.554697][ C1] __run_timers+0x757/0xb30 [ 1231.559257][ C1] ? __pfx___run_timers+0x10/0x10 [ 1231.564328][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1231.569998][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 1231.575073][ C1] run_timer_base+0x114/0x190 [ 1231.579791][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 1231.585044][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1231.590712][ C1] run_timer_softirq+0x1a/0x50 [ 1231.595516][ C1] handle_softirqs+0x1eb/0x9e0 [ 1231.600315][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1231.605627][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1231.611326][ C1] __irq_exit_rcu+0xef/0x150 [ 1231.615955][ C1] irq_exit_rcu+0x9/0x30 [ 1231.620220][ C1] sysvec_apic_timer_interrupt+0x56/0xc0 [ 1231.625877][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1231.631876][ C1] RIP: 0033:0x7f341299c819 [ 1231.636483][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1231.656115][ C1] RSP: 002b:00007f3410bf60e8 EFLAGS: 00000246 [ 1231.662384][ C1] RAX: ffffffffffffffda RBX: 00007f3412c15fa8 RCX: 00007f341299c819 [ 1231.670466][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3412c15fa8 [ 1231.678549][ C1] RBP: 00007f3412c15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1231.686635][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1231.694713][ C1] R13: 00007f3412c16038 R14: 00007ffcc7e293f0 R15: 00007ffcc7e294d8 [ 1231.702907][ C1] [ 1231.706556][ C1] Kernel Offset: disabled [ 1231.710923][ C1] Rebooting in 86400 seconds..