last executing test programs: 26.070050152s ago: executing program 4 (id=4680): setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, &(0x7f0000000040)={{&(0x7f0000000800)=""/232, 0xe8}, &(0x7f0000000340), 0x7}, 0x20) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)={0x0, 0x2710}, 0x10) listen(0xffffffffffffffff, 0x0) accept$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x74000000, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000300009000000000000000000010000000c000180060000000547000008000200000000007a3ac58ab2b96c0a20be9ce70c43eac2f98ccfd4e658c1e6d94eed8755355121d038398b4efe2da257607bed6d7b80e87e72a1b2ecd81572db0dc86f1a1d4c23c09a37dab64e88b58cafc7f9da2a0df41f9a3c9beedd8391f62ae74e49f40a0bf0c1ac3bb04ae13859ab6ff91692c400ae73cd53383f05d1fee4999de355750675335d683c954c0df3654f3b093e0e33183f5550b4ade026536774225944c28fbebe95713bd00f76f728e62cc28efc2acea4deb1333a1d07e2b25a600571f12bd405804439d590e104d44b922eb0b3758297807d4782f5720f2dacfb294fa8257c5182202e97c7c7711999b9c1bdf9a38667e81b74fe269bb0"], 0x28}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket(0x0, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0xa4, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x108) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8], 0x3c}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r3, 0x2, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x20000000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r7, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r9, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000001800000008000300", @ANYRES32=r10, @ANYBLOB="380030803400018008000100000000002800038008000200030000000c0004000000000000000000060001"], 0x54}}, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r11) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x38, r12, 0x1, 0x0, 0x0, {0x4}, [@NLBL_UNLABEL_A_IPV4ADDR={0x5, 0x4, @multicast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x5, 0x5, @multicast1}]}, 0x38}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r9, &(0x7f0000000440)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, r12, 0x100, 0x70bd29, 0x65dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0xb}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x20000040) ioctl$TUNSETOFFLOAD(r6, 0x400454c9, 0x3) ioctl$TUNSETLINK(r6, 0x400454cd, 0xffff010e) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r9, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x4c, r8, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040840}, 0x0) 25.199837071s ago: executing program 4 (id=4684): r0 = epoll_create1(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r2 = syz_io_uring_setup(0x690b, &(0x7f00000006c0)={0x0, 0x0, 0x10100, 0x0, 0x328}, &(0x7f0000000200), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x1868, &(0x7f0000000140), &(0x7f0000000040)=0x0, &(0x7f0000000240)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014}) 24.197332957s ago: executing program 4 (id=4690): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[], 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 24.035097653s ago: executing program 4 (id=4691): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400000010000100f2c00000000000000000000a28000000090a000000000000000000000000000008000a40000000000900020073797a32"], 0x50}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x2f, 0x4, 0x0, 0x0, 0xbc, 0x67, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x14, 0x0, 0x0, 0x9, [0x401, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x34, 0xc0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x65c}, {@broadcast}, {@multicast1, 0xffd200}]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x8, [{@dev}, {@remote}, {@multicast2}, {}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 22.982828765s ago: executing program 4 (id=4696): ftruncate(0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x0, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffff, 0x0, "4ae23ae17df2e98c69ba36c4095c911abad88f"}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000000c0)=0x9) 20.728621158s ago: executing program 4 (id=4702): socket$inet6_sctp(0xa, 0x0, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_I_TEI={0x8}, @GTPA_O_TEI={0x8}]}, 0x34}}, 0x0) 11.702376485s ago: executing program 0 (id=4729): ftruncate(0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x0, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffff, 0x0, "4ae23ae17df2e98c69ba36c4095c911abad88f"}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000000c0)=0x9) 10.724022049s ago: executing program 1 (id=4734): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = socket$inet(0x2, 0x2, 0x1) bind$inet(r5, &(0x7f0000000500)={0x2, 0x0, @private=0xa010101}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x50}}, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffff47, 0xffffffffffffffda, 0x0, {0xb}}, 0x67) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_DEST_DROPPABLE(r7, 0x10f, 0x81, &(0x7f0000000300)=0xfffffff9, 0x4) sendmsg$tipc(r7, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) 10.510675971s ago: executing program 1 (id=4735): prctl$PR_SCHED_CORE(0x3e, 0x800000001, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="03c9000a4a660d55cba6e50f200000000000000000000000c1dfd337420a7f1d5a7b65b324ed3154ddee3f5bfe730d42a1627d330233170813d5b833195e7068399f35a471c36c4b8ac2d25d64774c6a08181766d61f31f8f82460759697c60b301bfef031e9f4bbd2f4c55fa02762e200000000"], 0xe) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYRESDEC=0x0], 0x54}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x1, &(0x7f0000000580)={0x0, 0x4000000}, 0x0, 0x0) r1 = socket(0x1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendto(0xffffffffffffffff, &(0x7f00000003c0)="ce4b3261f0a17bd615ccf514abe0203f552470ad7ce7ff8dfe238ddedb3fb8acc81f1d2f451a09e14177e4d3a9bdf1c7bcabc473a85006de892156ce86c7202b450a13e161780575d0f025", 0x4b, 0x90, &(0x7f0000000680)=@l2tp6={0xa, 0x0, 0x10001, @dev={0xfe, 0x80, '\x00', 0x43}, 0x7}, 0x80) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000480)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="4900330080000000ffffffffffff080211000000505050505050000000000000000000000000000001000406000000"], 0x68}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000030a01010000000000000000020000050c0002400000000000000001"], 0x5c}}, 0x0) r6 = getpgrp(0x0) syz_pidfd_open(r6, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c188001ac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r8 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 10.290577286s ago: executing program 3 (id=4737): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001080)) syz_open_dev$video4linux(&(0x7f0000000340), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_io_uring_setup(0x24f8, &(0x7f0000002ec0)={0x0, 0x0, 0x10100}, &(0x7f0000000080), &(0x7f0000000140)=0x0) r5 = memfd_secret(0x0) ftruncate(r5, 0x5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x11, r5, 0x0) syz_io_uring_submit(r6, r4, &(0x7f00000000c0)=@IORING_OP_SHUTDOWN={0x22, 0x11, 0x810, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 9.393104624s ago: executing program 2 (id=4738): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001080)) syz_open_dev$video4linux(&(0x7f0000000340), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(0xffffffffffffffff, 0x40046104, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e24, 0x0, @remote}}}, 0x90) epoll_create1(0x0) syz_open_dev$dri(0x0, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000040)={0x98f907, 0x0, "6a3ce4ab8ed6c54797be28dc6b7dcc8d5eba4a0f1dea455e02c75ec18cfcdbf4"}) r3 = socket(0x200000100000011, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = syz_io_uring_setup(0x24f8, &(0x7f0000002ec0)={0x0, 0x0, 0x10100}, &(0x7f0000000080), &(0x7f0000000140)=0x0) r6 = memfd_secret(0x0) ftruncate(r6, 0x5) syz_io_uring_submit(0x0, r5, &(0x7f00000000c0)=@IORING_OP_SHUTDOWN={0x22, 0x11, 0x810, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 8.357121895s ago: executing program 2 (id=4739): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x440, 0x20a, 0x278, 0x440, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'vlan0\x00'}, 0x0, 0x200, 0x228, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@private1, [], @ipv4=@multicast1}, {@ipv6=@private1, [], @ipv6=@dev}, {@ipv4=@private, [], @ipv4=@empty}, {@ipv4=@dev, [], @ipv4=@broadcast}], 0xf}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r5, &(0x7f0000001380)=[{0x0, 0x0, 0x0, 0x0, @tick, {0x4}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {0x0, 0x0, 0x3, 0x0, @time, {}, {}, @control}, {0x6, 0x0, 0x0, 0x0, @time, {}, {}, @connect={{0xd}, {0x0, 0x24}}}], 0x70) 7.664401038s ago: executing program 3 (id=4740): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001080)) syz_open_dev$video4linux(&(0x7f0000000340), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(0xffffffffffffffff, 0x40046104, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e24, 0x0, @remote}}}, 0x90) epoll_create1(0x0) syz_open_dev$dri(0x0, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000040)={0x98f907, 0x0, "6a3ce4ab8ed6c54797be28dc6b7dcc8d5eba4a0f1dea455e02c75ec18cfcdbf4"}) r3 = socket(0x200000100000011, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = syz_io_uring_setup(0x24f8, &(0x7f0000002ec0)={0x0, 0x0, 0x10100}, &(0x7f0000000080), &(0x7f0000000140)=0x0) r6 = memfd_secret(0x0) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x11, r6, 0x0) syz_io_uring_submit(r7, r5, &(0x7f00000000c0)=@IORING_OP_SHUTDOWN={0x22, 0x11, 0x810, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 6.714558773s ago: executing program 3 (id=4741): prctl$PR_SCHED_CORE(0x3e, 0x800000001, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="03c9000a4a660d55cba6e50f200000000000000000000000c1dfd337420a7f1d5a7b65b324ed3154ddee3f5bfe730d42a1627d330233170813d5b833195e7068399f35a471c36c4b8ac2d25d64774c6a08181766d61f31f8f82460759697c60b301bfef031e9f4bbd2f4c55fa02762e200000000"], 0xe) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYRESDEC=0x0], 0x54}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) syz_io_uring_setup(0x1, &(0x7f0000000580)={0x0, 0x4000000}, 0x0, 0x0) r1 = socket(0x1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendto(0xffffffffffffffff, &(0x7f00000003c0)="ce4b3261f0a17bd615ccf514abe0203f552470ad7ce7ff8dfe238ddedb3fb8acc81f1d2f451a09e14177e4d3a9bdf1c7bcabc473a85006de892156ce86c7202b450a13e161780575d0f025", 0x4b, 0x90, &(0x7f0000000680)=@l2tp6={0xa, 0x0, 0x10001, @dev={0xfe, 0x80, '\x00', 0x43}, 0x7}, 0x80) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000480)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="4900330080000000ffffffffffff080211000000505050505050000000000000000000000000000001000406000000"], 0x68}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000100)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000030a01010000000000000000020000050c0002400000000000000001"], 0x5c}}, 0x0) r6 = getpgrp(0x0) r7 = syz_pidfd_open(r6, 0x0) pidfd_send_signal(r7, 0x2c, &(0x7f0000000140)={0x10000, 0x19, 0xd2000000}, 0x4) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c188001ac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 6.1698755s ago: executing program 1 (id=4742): sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, 0x0}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000180)={0x0, 0x991d, 0x1, [0x0]}, 0xa) 6.050287308s ago: executing program 0 (id=4743): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{&(0x7f0000000080)={0xa, 0x0, 0x3, @private0}, 0x80, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002\x00\x00\x00', @ANYRES32], 0x28}}], 0x1, 0x20004000) unshare(0x20000400) syz_80211_inject_frame(&(0x7f0000000480)=@device_b, &(0x7f0000000c40)=@data_frame={@msdu=@type10={{0x0, 0x2, 0x6}, {}, @from_mac=@broadcast}}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000005b00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0xa}}], {0x14}}, 0x5c}}, 0x40010) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000b00002008000300", @ANYRES32=r6, @ANYBLOB="28005080050002000000000009000100e59e75e84c0000000800030005ac0f00080004"], 0x54}}, 0x0) r7 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000001b40)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) ppoll(&(0x7f0000000080)=[{r3}, {r3, 0x410c}, {0xffffffffffffffff, 0x200}, {r3, 0x10}, {r3, 0x200}, {r3, 0x9022}, {r7, 0x8006}], 0x7, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100), 0x8) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x4e23, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) recvfrom$inet(r3, &(0x7f0000000280)=""/124, 0x7c, 0x40000102, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000180)=ANY=[@ANYBLOB="80000000ffffffffffff08021100000050505050505000000000000000000000640000000006020202020202010003010a050300ff0072"], 0x47) writev(r3, &(0x7f0000000400)=[{&(0x7f0000000200)='g', 0x1}], 0x1) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) 5.985011664s ago: executing program 1 (id=4744): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = socket$inet(0x2, 0x2, 0x1) bind$inet(r5, &(0x7f0000000500)={0x2, 0x0, @private=0xa010101}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x50}}, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffff47, 0xffffffffffffffda, 0x0, {0xb}}, 0x67) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_DEST_DROPPABLE(r7, 0x10f, 0x81, &(0x7f0000000300)=0xfffffff9, 0x4) sendmsg$tipc(r7, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) 5.752913524s ago: executing program 1 (id=4745): socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x0, 0x5, 0x400, 0x65d, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x40}, 0x48) r2 = creat(&(0x7f0000000000)='./bus\x00', 0xc5) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1, 0x4, 0x2, 0xd, 0x1940, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x2}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe) listen(r6, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="02c9"], 0x5) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c910"], 0x17) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r7 = socket$kcm(0x2, 0x0, 0x2) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0xfd690f524803e068, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC=r1, @ANYRES64=r5], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5c, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r8}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04360781aaaaa2aa"], 0xa) syz_emit_vhci(&(0x7f0000000480)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x3, 0x0, 0x46}, @l2cap_cid_signaling={{0x42}, [@l2cap_cmd_rej_unk={{0x1, 0x5e, 0x2}, {0x81}}, @l2cap_conn_req={{0x2, 0x3, 0x4}, {0x3, 0x7}}, @l2cap_info_req={{0xa, 0x8, 0x2}, {0x401}}, @l2cap_create_chan_rsp={{0xd, 0x9, 0x8}, {0x200, 0x8, 0x6d, 0xfaf}}, @l2cap_info_req={{0xa, 0x3, 0x2}, {0x9}}, @l2cap_move_chan_cfm={{0x10, 0x2, 0x4}, {0x7fff, 0x3}}, @l2cap_conn_req={{0x2, 0x3, 0x4}, {0xddb4, 0x81}}, @l2cap_info_req={{0xa, 0x1, 0x2}, {0x1}}, @l2cap_cmd_rej_unk={{0x1, 0x80, 0x2}, {0x4}}]}}, 0x4b) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) 5.236632571s ago: executing program 3 (id=4746): openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socket$xdp(0x2c, 0x3, 0x0) getuid() socket$nl_route(0x10, 0x3, 0x0) mkdir(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)='\x00\x00\x00\x00%\x15&\xc0\xa7Z\x03\x1b\xa1\xb5\x00\xa1\x00\x00\x00\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(&(0x7f0000000380)='./file2\x00', 0x50107e, 0x20) r3 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)=0x0) io_submit(r4, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x7b8e, r3, &(0x7f00000002c0)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f00000000000029ffffff000000", 0x38}]) 5.235689257s ago: executing program 2 (id=4747): ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1) r1 = fanotify_init(0x0, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x1b4b, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x2}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000180)={r3}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x80}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e23, @empty}], 0x10) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB="515206"], 0x14) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r5, &(0x7f0000000040)=ANY=[], 0x920) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000002780)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000080)={r6, 0x3, r2, 0x5}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 4.053074395s ago: executing program 0 (id=4748): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001080)) syz_open_dev$video4linux(&(0x7f0000000340), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(0xffffffffffffffff, 0x40046104, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e24, 0x0, @remote}}}, 0x90) epoll_create1(0x0) syz_open_dev$dri(0x0, 0x0, 0x0) syz_open_dev$radio(0x0, 0x3, 0x2) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000040)={0x98f907, 0x0, "6a3ce4ab8ed6c54797be28dc6b7dcc8d5eba4a0f1dea455e02c75ec18cfcdbf4"}) r3 = socket(0x200000100000011, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) r4 = syz_io_uring_setup(0x24f8, &(0x7f0000002ec0)={0x0, 0x0, 0x10100}, &(0x7f0000000080), &(0x7f0000000140)=0x0) ftruncate(0xffffffffffffffff, 0x5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x11, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r6, r5, &(0x7f00000000c0)=@IORING_OP_SHUTDOWN={0x22, 0x11, 0x810, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 3.115590601s ago: executing program 3 (id=4749): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001080)) syz_open_dev$video4linux(&(0x7f0000000340), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(0xffffffffffffffff, 0x40046104, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e24, 0x0, @remote}}}, 0x90) r3 = syz_io_uring_setup(0x24f8, &(0x7f0000002ec0)={0x0, 0x0, 0x10100}, &(0x7f0000000080), &(0x7f0000000140)=0x0) r5 = memfd_secret(0x0) ftruncate(r5, 0x5) r6 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x11, r5, 0x0) syz_io_uring_submit(r6, r4, &(0x7f00000000c0)=@IORING_OP_SHUTDOWN={0x22, 0x11, 0x810, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 3.025960315s ago: executing program 0 (id=4750): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bind$rds(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000bc00000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000008850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) open(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 2.040369138s ago: executing program 0 (id=4751): openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socket$xdp(0x2c, 0x3, 0x0) getuid() socket$nl_route(0x10, 0x3, 0x0) mkdir(0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)='\x00\x00\x00\x00%\x15&\xc0\xa7Z\x03\x1b\xa1\xb5\x00\xa1\x00\x00\x00\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000080), 0x10) io_setup(0x9, &(0x7f0000000240)=0x0) io_submit(r4, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x7b8e, r3, &(0x7f00000002c0)="0500000093c21faf16da39de706f646800580f02000000003f420f000000000000580f02000000003f420f00000000000029ffffff000000", 0x38}]) 2.031024954s ago: executing program 3 (id=4752): ftruncate(0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x0, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xffff, 0x0, "4ae23ae17df2e98c69ba36c4095c911abad88f"}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000000c0)=0x9) 1.541151815s ago: executing program 2 (id=4753): sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000180)={0x0, 0x991d, 0x1, [0x0]}, 0xa) 439.471947ms ago: executing program 2 (id=4754): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = socket$inet(0x2, 0x2, 0x1) bind$inet(r5, &(0x7f0000000500)={0x2, 0x0, @private=0xa010101}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x50}}, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffff47, 0xffffffffffffffda, 0x0, {0xb}}, 0x67) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_DEST_DROPPABLE(r7, 0x10f, 0x81, &(0x7f0000000300)=0xfffffff9, 0x4) sendmsg$tipc(r7, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) 422.381888ms ago: executing program 0 (id=4755): r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x16, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550d, &(0x7f0000000080)) 132.894322ms ago: executing program 2 (id=4756): syz_emit_ethernet(0x86, &(0x7f0000000280)={@broadcast, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "9972ad", 0x50, 0x11, 0x0, @private2, @mcast2, {[@srh={0x0, 0x0, 0x4, 0x0, 0xfe}], {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "9ae39099202c3eb53062a4250d4de8173748082974fc9439", "7dbf58a3ed6c046d01d299a2533660920edbe52afbd139c7119ee51e21ee1040"}}}}}}}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, 0x0, 0x1, 0x0, 0x0, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0xfa7cb2321074fdda}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) unshare(0x26020280) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) ioctl$KIOCSOUND(0xffffffffffffffff, 0x4b2f, 0x0) 0s ago: executing program 1 (id=4757): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xc, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001340)=""/102378, 0x7706c522012798af) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe87ffffffffffe400000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) kernel console output (not intermixed with test programs): 鸓ᬪ哴s [ 1978.014593][T19025] usb 1-1: SerialNumber: syz [ 1978.520498][T19025] usb 1-1: 0:2 : does not exist [ 1978.562279][T19025] usb 1-1: USB disconnect, device number 45 [ 1978.846934][T25055] udevd[25055]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1979.339405][T25256] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1979.405304][ T5164] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1980.217084][T25264] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1980.482737][ T5164] usb 5-1: config 0 has no interfaces? [ 1981.287365][T25270] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1981.382107][ T5164] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1981.406228][ T5164] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1981.414400][ T5164] usb 5-1: Manufacturer: 她蕋멳龜ؔ됛ꦆ뗮齔㗘మᆤ幽埍瀷쬎룱窛퍽黱覝轤㴓犂讯࣍䉙녒ⶇ扚邆镻㢗濇蕃鐍혣☲밉庙랸袰৽夂憬芣稐录빬旟깿ꦇ婞㘳௴ﺋ࣊绾鸓ᬪ哴s [ 1981.477928][ T5164] usb 5-1: SerialNumber: syz [ 1981.522107][ T5164] usb 5-1: config 0 descriptor?? [ 1981.701967][T25278] netlink: 'syz.3.4240': attribute type 10 has an invalid length. [ 1981.714935][T25280] netlink: 'syz.2.4242': attribute type 5 has an invalid length. [ 1981.812238][T25278] batman_adv: batadv0: Adding interface: team0 [ 1981.812346][T21782] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 1981.829605][T25278] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1981.855939][T25278] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 1981.863313][ T5146] usb 5-1: USB disconnect, device number 56 [ 1981.933660][T25280] : entered promiscuous mode [ 1981.957780][T25283] netlink: 'syz.3.4240': attribute type 10 has an invalid length. [ 1981.966884][T25283] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4240'. [ 1981.979183][T25283] team0: entered promiscuous mode [ 1982.021630][T25283] team_slave_0: entered promiscuous mode [ 1982.029100][T25283] team_slave_1: entered promiscuous mode [ 1982.072820][T25283] 8021q: adding VLAN 0 to HW filter on device team0 [ 1982.089698][T25283] batman_adv: batadv0: Interface activated: team0 [ 1982.096829][T25283] batman_adv: batadv0: Interface deactivated: team0 [ 1982.120183][T25283] batman_adv: batadv0: Removing interface: team0 [ 1982.187261][T25283] bridge0: port 3(team0) entered blocking state [ 1982.205736][ T5144] usb 2-1: USB disconnect, device number 59 [ 1982.246444][T25283] bridge0: port 3(team0) entered disabled state [ 1982.283657][T25283] team0: entered allmulticast mode [ 1982.291020][T25283] team_slave_0: entered allmulticast mode [ 1982.303751][T25283] team_slave_1: entered allmulticast mode [ 1982.330442][T25283] bridge0: port 3(team0) entered blocking state [ 1982.336950][T25283] bridge0: port 3(team0) entered forwarding state [ 1983.184026][T25296] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1983.245888][T25293] input: syz1 as /devices/virtual/input/input138 [ 1983.777695][T25313] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1983.809310][T25314] netlink: 'syz.2.4249': attribute type 10 has an invalid length. [ 1983.853813][T25314] bridge0: port 3(team0) entered disabled state [ 1983.877840][T25314] team0: left allmulticast mode [ 1983.882838][T25314] team_slave_0: left allmulticast mode [ 1983.907044][T25314] team_slave_1: left allmulticast mode [ 1983.915510][T25313] input: syz1 as /devices/virtual/input/input139 [ 1983.923160][T25314] team0: left promiscuous mode [ 1983.933316][T25314] team_slave_0: left promiscuous mode [ 1983.987630][T25314] team_slave_1: left promiscuous mode [ 1984.039273][T25314] bridge0: port 3(team0) entered disabled state [ 1984.145856][T25314] batman_adv: batadv0: Adding interface: team0 [ 1984.199116][T25314] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1984.224640][ C1] vkms_vblank_simulate: vblank timer overrun [ 1984.247459][T25314] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 1984.295300][T25315] netlink: 'syz.2.4249': attribute type 10 has an invalid length. [ 1984.303318][T25315] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4249'. [ 1984.314100][T25315] team0: entered promiscuous mode [ 1984.319385][T25315] team_slave_0: entered promiscuous mode [ 1984.328828][T25315] team_slave_1: entered promiscuous mode [ 1984.338274][T25315] 8021q: adding VLAN 0 to HW filter on device team0 [ 1984.347521][T25315] batman_adv: batadv0: Interface activated: team0 [ 1984.377917][T25315] batman_adv: batadv0: Interface deactivated: team0 [ 1984.407405][T25315] batman_adv: batadv0: Removing interface: team0 [ 1984.505616][T25315] bridge0: port 3(team0) entered blocking state [ 1984.547610][T25315] bridge0: port 3(team0) entered disabled state [ 1984.572100][T25315] team0: entered allmulticast mode [ 1984.580670][T25315] team_slave_0: entered allmulticast mode [ 1984.592748][T25315] team_slave_1: entered allmulticast mode [ 1984.644465][T25315] bridge0: port 3(team0) entered blocking state [ 1984.650979][T25315] bridge0: port 3(team0) entered forwarding state [ 1985.153147][T25339] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4253'. [ 1985.504792][ T5144] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1985.557444][T25332] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1985.694849][ T5144] usb 1-1: Using ep0 maxpacket: 16 [ 1985.739153][ T5144] usb 1-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 1985.748515][ T5144] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1985.757586][ T5144] usb 1-1: Product: syz [ 1985.764794][ T5144] usb 1-1: Manufacturer: syz [ 1985.770326][ T5144] usb 1-1: SerialNumber: syz [ 1986.129074][ T5144] usb 1-1: config 0 descriptor?? [ 1986.218887][ T5144] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 1986.240579][ T5146] libceph: connect (1)[c::]:6789 error -101 [ 1986.254046][ T5146] libceph: mon0 (1)[c::]:6789 connect error [ 1986.574910][T25345] ceph: No mds server is up or the cluster is laggy [ 1986.584583][ T5146] libceph: connect (1)[c::]:6789 error -101 [ 1986.597890][ T5146] libceph: mon0 (1)[c::]:6789 connect error [ 1987.005181][T25355] input: syz0 as /devices/virtual/input/input141 [ 1987.013632][T25352] netlink: 'syz.4.4258': attribute type 10 has an invalid length. [ 1987.047092][T25356] input: syz1 as /devices/virtual/input/input140 [ 1987.112839][T25352] bridge0: port 3(team0) entered disabled state [ 1987.226100][T25352] team0: left allmulticast mode [ 1987.230993][T25352] team_slave_0: left allmulticast mode [ 1987.283393][T25352] team_slave_1: left allmulticast mode [ 1987.292067][T25352] team0: left promiscuous mode [ 1987.298256][T25352] team_slave_0: left promiscuous mode [ 1987.304294][T25352] team_slave_1: left promiscuous mode [ 1987.358872][T25352] bridge0: port 3(team0) entered disabled state [ 1987.559865][T25352] batman_adv: batadv0: Adding interface: team0 [ 1987.570713][T25352] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1987.672040][T25352] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 1987.737539][T25361] netlink: 'syz.4.4258': attribute type 10 has an invalid length. [ 1987.748523][T25361] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4258'. [ 1987.759848][T25361] team0: entered promiscuous mode [ 1987.774261][T25361] team_slave_0: entered promiscuous mode [ 1987.781265][T25361] team_slave_1: entered promiscuous mode [ 1987.796604][T25361] 8021q: adding VLAN 0 to HW filter on device team0 [ 1987.803683][T25361] batman_adv: batadv0: Interface activated: team0 [ 1987.845148][T25361] batman_adv: batadv0: Interface deactivated: team0 [ 1987.851815][T25361] batman_adv: batadv0: Removing interface: team0 [ 1987.900727][T25361] bridge0: port 3(team0) entered blocking state [ 1987.930701][T25361] bridge0: port 3(team0) entered disabled state [ 1987.953169][T25361] team0: entered allmulticast mode [ 1987.979736][T25361] team_slave_0: entered allmulticast mode [ 1987.993258][T25361] team_slave_1: entered allmulticast mode [ 1988.012535][T25361] bridge0: port 3(team0) entered blocking state [ 1988.019066][T25361] bridge0: port 3(team0) entered forwarding state [ 1988.285345][ T5144] gp8psk: usb in 128 operation failed. [ 1988.302140][ T5144] gp8psk: usb in 137 operation failed. [ 1988.332903][ T5144] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1988.365072][T25382] netlink: 'syz.1.4261': attribute type 10 has an invalid length. [ 1988.375261][ T5144] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 1988.408980][ T5144] usb 1-1: media controller created [ 1988.416550][T25382] bridge0: port 3(team0) entered disabled state [ 1988.469058][T25382] team0: left allmulticast mode [ 1988.479267][T25382] team_slave_0: left allmulticast mode [ 1988.506548][ T5144] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1988.516133][T25382] team_slave_1: left allmulticast mode [ 1988.527362][T25382] team0: left promiscuous mode [ 1988.532273][T25382] team_slave_0: left promiscuous mode [ 1988.551056][T25382] team_slave_1: left promiscuous mode [ 1988.561527][T25382] bridge0: port 3(team0) entered disabled state [ 1988.609124][ T5144] gp8psk_fe: Frontend revision 1 attached [ 1988.616290][ T5144] usb 1-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 1988.648492][ T5144] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 1988.666248][T25382] batman_adv: batadv0: Adding interface: team0 [ 1988.696670][T25382] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1988.804798][T25382] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 1988.839014][ T5144] gp8psk: usb in 138 operation failed. [ 1988.862641][ T5144] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 1988.893270][T25380] netlink: 'syz.1.4261': attribute type 10 has an invalid length. [ 1988.916818][ T5144] gp8psk: found Genpix USB device pID = 201 (hex) [ 1988.987463][T25380] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4261'. [ 1989.129451][T25380] team0: entered promiscuous mode [ 1989.144580][T25380] team_slave_0: entered promiscuous mode [ 1989.151870][T25380] team_slave_1: entered promiscuous mode [ 1989.157590][ T5144] usb 1-1: USB disconnect, device number 46 [ 1989.200861][T25380] 8021q: adding VLAN 0 to HW filter on device team0 [ 1989.274420][T25380] batman_adv: batadv0: Interface activated: team0 [ 1989.281429][T25380] batman_adv: batadv0: Interface deactivated: team0 [ 1989.304541][T25380] batman_adv: batadv0: Removing interface: team0 [ 1989.405638][T25380] bridge0: port 3(team0) entered blocking state [ 1990.190280][T25399] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1990.242843][T25380] bridge0: port 3(team0) entered disabled state [ 1990.327035][T25380] team0: entered allmulticast mode [ 1990.346666][ T5144] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 1990.359521][T25380] team_slave_0: entered allmulticast mode [ 1990.390799][T25380] team_slave_1: entered allmulticast mode [ 1990.417342][T25380] bridge0: port 3(team0) entered blocking state [ 1990.423717][T25380] bridge0: port 3(team0) entered forwarding state [ 1990.435125][T21782] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 1990.478216][T25401] netlink: 'syz.3.4265': attribute type 10 has an invalid length. [ 1990.568345][T25401] bridge0: port 3(team0) entered disabled state [ 1990.586855][T25397] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1990.664391][T25401] team0: left allmulticast mode [ 1990.694479][T25401] team_slave_0: left allmulticast mode [ 1990.883516][T25401] team_slave_1: left allmulticast mode [ 1990.890105][T25401] team0: left promiscuous mode [ 1990.895498][T25401] team_slave_0: left promiscuous mode [ 1990.902915][T25401] team_slave_1: left promiscuous mode [ 1990.912046][T25401] bridge0: port 3(team0) entered disabled state [ 1991.853433][T25401] batman_adv: batadv0: Adding interface: team0 [ 1991.859842][T25401] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1991.889465][T25401] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 1991.931568][T25403] netlink: 'syz.3.4265': attribute type 10 has an invalid length. [ 1991.948257][T25403] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4265'. [ 1991.981619][T25403] team0: entered promiscuous mode [ 1991.986983][T25403] team_slave_0: entered promiscuous mode [ 1991.994894][T25403] team_slave_1: entered promiscuous mode [ 1992.060146][T25403] 8021q: adding VLAN 0 to HW filter on device team0 [ 1992.103755][T25403] batman_adv: batadv0: Interface activated: team0 [ 1992.148731][T25403] batman_adv: batadv0: Interface deactivated: team0 [ 1992.155909][T25403] batman_adv: batadv0: Removing interface: team0 [ 1992.231875][T25403] bridge0: port 3(team0) entered blocking state [ 1992.241870][T25403] bridge0: port 3(team0) entered disabled state [ 1992.252347][T25403] team0: entered allmulticast mode [ 1992.266482][T25403] team_slave_0: entered allmulticast mode [ 1992.277393][T25403] team_slave_1: entered allmulticast mode [ 1992.391480][T25403] bridge0: port 3(team0) entered blocking state [ 1992.398024][T25403] bridge0: port 3(team0) entered forwarding state [ 1992.875843][T21782] Bluetooth: hci0: unexpected event for opcode 0x0c46 [ 1992.884395][T25436] input: syz1 as /devices/virtual/input/input143 [ 1992.975003][T21782] Bluetooth: hci0: Malformed HCI Event: 0x22 [ 1992.992980][T25405] input: syz1 as /devices/virtual/input/input142 [ 1993.146387][T25433] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1993.264355][T25433] input: syz1 as /devices/virtual/input/input144 [ 1993.785258][T21639] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1993.844330][T25447] input: syz1 as /devices/virtual/input/input145 [ 1993.995016][T21639] usb 3-1: Using ep0 maxpacket: 32 [ 1994.033324][T21782] Bluetooth: hci0: unexpected event for opcode 0x0c46 [ 1994.119280][T21639] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1994.176563][T21782] Bluetooth: hci0: Malformed HCI Event: 0x22 [ 1994.186681][T21639] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1994.194278][T21639] usb 3-1: can't read configurations, error -71 [ 1995.344288][T25451] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1995.489352][T25451] input: syz1 as /devices/virtual/input/input146 [ 1995.622187][T25472] sctp: [Deprecated]: syz.2.4283 (pid 25472) Use of int in maxseg socket option. [ 1995.622187][T25472] Use struct sctp_assoc_value instead [ 1996.441036][T25472] netlink: 184472 bytes leftover after parsing attributes in process `syz.2.4283'. [ 1996.690355][T25475] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1996.826110][T25485] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1996.913544][T25485] input: syz1 as /devices/virtual/input/input147 [ 1996.931162][T25485] input: failed to attach handler leds to device input147, error: -6 [ 1997.051885][T21782] Bluetooth: hci0: unexpected event for opcode 0x0c46 [ 1997.065175][T21782] Bluetooth: hci0: Malformed HCI Event: 0x22 [ 1997.537622][T25488] input: syz1 as /devices/virtual/input/input148 [ 1998.005027][T15296] libceph: connect (1)[c::]:6789 error -101 [ 1998.396417][T25500] ceph: No mds server is up or the cluster is laggy [ 1998.451053][T15296] libceph: mon0 (1)[c::]:6789 connect error [ 2000.960242][T25531] netlink: 'syz.3.4294': attribute type 10 has an invalid length. [ 2000.995745][T25531] bridge0: port 3(team0) entered disabled state [ 2001.030178][T25531] team0: left allmulticast mode [ 2001.036143][T25531] team_slave_0: left allmulticast mode [ 2001.041716][T25531] team_slave_1: left allmulticast mode [ 2001.051252][T25531] team0: left promiscuous mode [ 2001.068521][T25531] team_slave_0: left promiscuous mode [ 2001.081126][T25531] team_slave_1: left promiscuous mode [ 2001.088061][T25531] bridge0: port 3(team0) entered disabled state [ 2001.186446][T25531] batman_adv: batadv0: Adding interface: team0 [ 2001.192862][T25531] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2001.218512][T25531] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 2001.273829][T25537] netlink: 'syz.3.4294': attribute type 10 has an invalid length. [ 2001.274055][T21782] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2001.291845][T25537] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4294'. [ 2001.303820][T25537] team0: entered promiscuous mode [ 2001.311404][T25537] team_slave_0: entered promiscuous mode [ 2001.320664][T25537] team_slave_1: entered promiscuous mode [ 2001.541870][T25537] 8021q: adding VLAN 0 to HW filter on device team0 [ 2001.775212][T25537] batman_adv: batadv0: Interface activated: team0 [ 2001.783579][T25537] batman_adv: batadv0: Interface deactivated: team0 [ 2001.804459][T25537] batman_adv: batadv0: Removing interface: team0 [ 2002.488170][T25537] bridge0: port 3(team0) entered blocking state [ 2002.505131][T25537] bridge0: port 3(team0) entered disabled state [ 2002.517554][T25537] team0: entered allmulticast mode [ 2002.529179][T25537] team_slave_0: entered allmulticast mode [ 2002.558098][T25537] team_slave_1: entered allmulticast mode [ 2002.571942][T25537] bridge0: port 3(team0) entered blocking state [ 2002.578521][T25537] bridge0: port 3(team0) entered forwarding state [ 2003.078878][T25558] netlink: 'syz.0.4301': attribute type 10 has an invalid length. [ 2003.385297][T25558] bridge0: port 3(team0) entered disabled state [ 2004.067331][T23506] batman_adv: batadv_iv_ogm_emit: soft interface switch for queued OGM [ 2004.079492][T25558] team0: left allmulticast mode [ 2004.088160][T25558] team_slave_0: left allmulticast mode [ 2004.096304][T25558] team_slave_1: left allmulticast mode [ 2004.101973][T25558] team0: left promiscuous mode [ 2004.108358][T25558] team_slave_0: left promiscuous mode [ 2004.115484][T25558] team_slave_1: left promiscuous mode [ 2004.122533][T25558] bridge0: port 3(team0) entered disabled state [ 2004.254819][ T9766] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 2004.283715][T25558] batman_adv: batadv0: Adding interface: team0 [ 2004.318865][T25558] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2004.351515][T25558] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 2004.379036][T25554] netlink: 'syz.0.4301': attribute type 10 has an invalid length. [ 2004.390358][T25554] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4301'. [ 2004.413211][T25554] team0: entered promiscuous mode [ 2004.430818][T25554] team_slave_0: entered promiscuous mode [ 2004.440284][T25554] team_slave_1: entered promiscuous mode [ 2004.473425][T25554] 8021q: adding VLAN 0 to HW filter on device team0 [ 2004.482836][ T9766] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2004.497216][ T9766] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2004.523910][T25554] batman_adv: batadv0: Interface activated: team0 [ 2004.525318][T21782] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2004.550453][T25554] batman_adv: batadv0: Interface deactivated: team0 [ 2004.566236][ T9766] usb 3-1: New USB device found, idVendor=468c, idProduct=90ea, bcdDevice=99.6d [ 2004.601429][T25554] batman_adv: batadv0: Removing interface: team0 [ 2004.609377][ T9766] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2004.628282][T25554] bridge0: port 3(team0) entered blocking state [ 2004.645075][T25554] bridge0: port 3(team0) entered disabled state [ 2004.648299][ T9766] usb 3-1: Product: syz [ 2004.660215][ T9766] usb 3-1: Manufacturer: syz [ 2004.672224][ T9766] usb 3-1: SerialNumber: syz [ 2004.680978][T25554] team0: entered allmulticast mode [ 2004.686465][ T9766] usb 3-1: config 0 descriptor?? [ 2004.715661][T25554] team_slave_0: entered allmulticast mode [ 2004.721625][ T9766] usb 3-1: Found UVC 0.00 device syz (468c:90ea) [ 2004.741733][T25554] team_slave_1: entered allmulticast mode [ 2004.758032][ T9766] usb 3-1: No valid video chain found. [ 2004.820772][T25554] bridge0: port 3(team0) entered blocking state [ 2004.827153][T25554] bridge0: port 3(team0) entered forwarding state [ 2004.835406][T25553] ALSA: mixer_oss: invalid OSS volume '' [ 2004.853207][T25569] netlink: 'syz.3.4305': attribute type 10 has an invalid length. [ 2004.864522][T25569] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4305'. [ 2007.224359][T25594] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2007.517000][T25594] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2008.383471][T21760] usb 3-1: USB disconnect, device number 44 [ 2008.601245][T25612] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2008.734256][T25612] input: syz1 as /devices/virtual/input/input149 [ 2009.653355][T25630] netlink: 'syz.3.4319': attribute type 10 has an invalid length. [ 2009.661571][T25629] input: syz1 as /devices/virtual/input/input150 [ 2009.682828][T25630] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4319'. [ 2009.720243][T21782] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2009.731511][T25615] ALSA: mixer_oss: invalid OSS volume '' [ 2011.958256][T25656] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2012.023113][T25656] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2014.631511][T25682] rdma_op ffff88805cf8a9f0 conn xmit_rdma 0000000000000000 [ 2014.703648][T21782] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2014.713857][T21782] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2015.594744][ T5146] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 2015.674782][T19025] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 2015.690369][T25667] ALSA: mixer_oss: invalid OSS volume '' [ 2015.729596][T21782] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 2016.537022][ T5146] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2016.557332][ T5146] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2016.616638][T19025] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2016.658509][T19025] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2016.698092][ T5146] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2016.735396][ T5146] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2016.753955][T19025] usb 3-1: string descriptor 0 read error: -71 [ 2016.767384][T19025] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2016.791313][ T5146] usb 5-1: can't set config #1, error -71 [ 2016.825467][T19025] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2016.841092][ T5146] usb 5-1: USB disconnect, device number 57 [ 2016.880607][T19025] usb 3-1: can't set config #1, error -71 [ 2016.916861][T19025] usb 3-1: USB disconnect, device number 45 [ 2017.883641][T25708] netlink: 'syz.0.4339': attribute type 1 has an invalid length. [ 2017.896947][T25709] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2017.972115][T25709] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2018.312773][T25708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4339'. [ 2018.388865][T25708] tap0: tun_chr_ioctl cmd 1074025677 [ 2018.409952][T25708] tap0: linktype set to 270 [ 2018.958155][T25710] ALSA: mixer_oss: invalid OSS volume '' [ 2019.913278][T25733] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2020.105461][T25733] input: syz1 as /devices/virtual/input/input151 [ 2021.502607][T21782] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2021.516254][T21782] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2021.687066][T25702] ALSA: mixer_oss: invalid OSS volume '' [ 2021.750611][T25753] rdma_op ffff8880245489f0 conn xmit_rdma 0000000000000000 [ 2022.062891][T21782] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 2022.074766][ T5146] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 2022.347378][ T5146] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2022.370872][ T5146] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2022.641034][ T5146] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2022.694826][ T5146] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2022.779769][ T5146] usb 2-1: Manufacturer: 她蕋멳龜ؔ됛ꦆ뗮齔㗘మᆤ幽埍瀷쬎룱窛퍽黱覝轤㴓犂讯࣍䉙녒ⶇ扚邆镻㢗濇蕃鐍혣☲밉庙랸袰৽夂憬芣稐录빬旟깿ꦇ婞㘳௴ﺋ࣊绾鸓ᬪ哴s [ 2023.384835][ T5146] usb 2-1: SerialNumber: syz [ 2023.702972][T25775] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2023.769292][ T5146] usb 2-1: 0:2 : does not exist [ 2023.849510][ T5146] usb 2-1: USB disconnect, device number 60 [ 2024.156027][T25055] udevd[25055]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2025.487878][T25791] netlink: 'syz.0.4358': attribute type 10 has an invalid length. [ 2025.508992][T25768] ALSA: mixer_oss: invalid OSS volume '' [ 2025.534872][T25791] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4358'. [ 2025.728737][T25794] rdma_op ffff88802f0459f0 conn xmit_rdma 0000000000000000 [ 2026.054812][ T5144] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 2026.193497][T25785] ALSA: mixer_oss: invalid OSS volume '' [ 2026.297716][ T5144] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2026.311982][ T5144] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2026.369874][ T5144] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2026.401167][ T5144] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2026.432886][ T5144] usb 2-1: Manufacturer: 她蕋멳龜ؔ됛ꦆ뗮齔㗘మᆤ幽埍瀷쬎룱窛퍽黱覝轤㴓犂讯࣍䉙녒ⶇ扚邆镻㢗濇蕃鐍혣☲밉庙랸袰৽夂憬芣稐录빬旟깿ꦇ婞㘳௴ﺋ࣊绾鸓ᬪ哴s [ 2026.458396][ T5144] usb 2-1: SerialNumber: syz [ 2026.777008][ T5144] usb 2-1: 0:2 : does not exist [ 2026.850900][T25812] rdma_op ffff88807df6d9f0 conn xmit_rdma 0000000000000000 [ 2026.865394][ T5144] usb 2-1: USB disconnect, device number 61 [ 2027.074762][ T9766] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 2027.147240][T25055] udevd[25055]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2027.244790][ T5146] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 2027.274723][ T9766] usb 1-1: Using ep0 maxpacket: 16 [ 2027.308211][ T9766] usb 1-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 2027.327928][ T9766] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2027.338654][ T9766] usb 1-1: Product: syz [ 2027.345117][ T9766] usb 1-1: Manufacturer: syz [ 2027.350167][ T9766] usb 1-1: SerialNumber: syz [ 2027.374415][ T9766] usb 1-1: config 0 descriptor?? [ 2027.400887][ T9766] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 2027.449377][ T5146] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2027.460430][ T5146] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2027.479560][ T5146] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2027.489236][ T5146] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2027.499608][ T5146] usb 4-1: Manufacturer: 她蕋멳龜ؔ됛ꦆ뗮齔㗘మᆤ幽埍瀷쬎룱窛퍽黱覝轤㴓犂讯࣍䉙녒ⶇ扚邆镻㢗濇蕃鐍혣☲밉庙랸袰৽夂憬芣稐录빬旟깿ꦇ婞㘳௴ﺋ࣊绾鸓ᬪ哴s [ 2027.550991][ T5146] usb 4-1: SerialNumber: syz [ 2027.673451][T25820] rdma_op ffff88807cfd09f0 conn xmit_rdma 0000000000000000 [ 2027.831169][T25821] input: syz0 as /devices/virtual/input/input153 [ 2027.925149][ T5146] usb 4-1: 0:2 : does not exist [ 2027.939680][T25813] ALSA: mixer_oss: invalid OSS volume '' [ 2028.022971][ T5146] usb 4-1: USB disconnect, device number 47 [ 2028.135294][T15045] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 2028.328234][T25058] udevd[25058]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2028.379859][T15045] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2028.436175][T15045] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2028.502397][T15045] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2028.546913][T15045] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2028.581373][T15045] usb 2-1: Manufacturer: 她蕋멳龜ؔ됛ꦆ뗮齔㗘మᆤ幽埍瀷쬎룱窛퍽黱覝轤㴓犂讯࣍䉙녒ⶇ扚邆镻㢗濇蕃鐍혣☲밉庙랸袰৽夂憬芣稐录빬旟깿ꦇ婞㘳௴ﺋ࣊绾鸓ᬪ哴s [ 2028.620081][T15045] usb 2-1: SerialNumber: syz [ 2029.068169][T15045] usb 2-1: 0:2 : does not exist [ 2029.164249][T15045] usb 2-1: USB disconnect, device number 62 [ 2029.675991][ T9766] gp8psk: usb in 128 operation failed. [ 2030.275331][T25058] udevd[25058]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2030.365009][ T9766] gp8psk: usb in 137 operation failed. [ 2030.375086][ T9766] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2030.429299][ T9766] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 2030.472936][ T9766] usb 1-1: media controller created [ 2030.660432][ T9766] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2030.762786][ T9766] gp8psk_fe: Frontend revision 1 attached [ 2030.778452][ T9766] usb 1-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 2030.821270][ T9766] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 2031.115637][ T9766] gp8psk: usb in 138 operation failed. [ 2031.132653][ T9766] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 2031.178567][ T9766] gp8psk: found Genpix USB device pID = 201 (hex) [ 2031.239521][ T9766] usb 1-1: USB disconnect, device number 47 [ 2031.635367][T25838] ALSA: mixer_oss: invalid OSS volume '' [ 2031.760917][ T9766] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 2032.947125][T25863] ALSA: mixer_oss: invalid OSS volume '' [ 2033.442786][T25868] ALSA: mixer_oss: invalid OSS volume '' [ 2035.799483][ T5146] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 2035.903357][T25882] ALSA: mixer_oss: invalid OSS volume '' [ 2035.910848][T25901] sctp: [Deprecated]: syz.2.4391 (pid 25901) Use of int in maxseg socket option. [ 2035.910848][T25901] Use struct sctp_assoc_value instead [ 2035.953043][T25901] netlink: 184472 bytes leftover after parsing attributes in process `syz.2.4391'. [ 2036.015244][ T5146] usb 1-1: Using ep0 maxpacket: 16 [ 2036.050169][ T5146] usb 1-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 2036.073487][ T5146] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2036.101969][ T5146] usb 1-1: Product: syz [ 2036.106464][ T5146] usb 1-1: Manufacturer: syz [ 2036.116597][ T5146] usb 1-1: SerialNumber: syz [ 2036.138116][ T5146] usb 1-1: config 0 descriptor?? [ 2036.160683][ T5146] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 2037.409699][T25912] input: syz1 as /devices/virtual/input/input154 [ 2037.551357][T25917] input: syz0 as /devices/virtual/input/input155 [ 2037.702448][T25922] netlink: 'syz.2.4395': attribute type 10 has an invalid length. [ 2037.710719][T25922] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4395'. [ 2037.968491][ T1243] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.975518][ T1243] ieee802154 phy1 wpan1: encryption failed: -22 [ 2038.205081][ T5146] gp8psk: usb in 128 operation failed. [ 2038.241966][ T5146] gp8psk: usb in 137 operation failed. [ 2038.270520][ T5146] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2038.324969][ T5146] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 2038.370698][ T5146] usb 1-1: media controller created [ 2038.521928][ T5146] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2038.638907][ T5146] gp8psk_fe: Frontend revision 1 attached [ 2038.669880][ T5146] usb 1-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 2038.693759][ T5146] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 2039.100330][ T5146] gp8psk: usb in 138 operation failed. [ 2039.115532][T25935] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2039.124681][ T5146] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 2039.162042][ T5146] gp8psk: found Genpix USB device pID = 201 (hex) [ 2039.264423][T25935] input: syz1 as /devices/virtual/input/input156 [ 2039.493591][T15045] usb 1-1: USB disconnect, device number 48 [ 2039.697510][T25930] ALSA: mixer_oss: invalid OSS volume '' [ 2039.785382][T15045] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 2040.160773][T25956] rdma_op ffff8880642c81f0 conn xmit_rdma 0000000000000000 [ 2040.737889][T25946] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2040.959700][T25961] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2041.044791][T21639] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 2041.075432][T25961] input: syz1 as /devices/virtual/input/input157 [ 2041.293886][T21639] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2041.404835][T21639] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2041.465344][T21639] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2041.612457][T21639] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2041.664815][T21639] usb 2-1: Manufacturer: 她蕋멳龜ؔ됛ꦆ뗮齔㗘మᆤ幽埍瀷쬎룱窛퍽黱覝轤㴓犂讯࣍䉙녒ⶇ扚邆镻㢗濇蕃鐍혣☲밉庙랸袰৽夂憬芣稐录빬旟깿ꦇ婞㘳௴ﺋ࣊绾鸓ᬪ哴s [ 2041.732865][T21639] usb 2-1: SerialNumber: syz [ 2042.839079][T21639] usb 2-1: 0:2 : does not exist [ 2042.905013][T21639] usb 2-1: USB disconnect, device number 63 [ 2043.191367][T25055] udevd[25055]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2043.210114][T25985] netlink: 'syz.3.4413': attribute type 1 has an invalid length. [ 2043.479976][T25985] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4413'. [ 2043.574991][T25985] tap0: tun_chr_ioctl cmd 1074025677 [ 2043.599732][T25985] tap0: linktype set to 270 [ 2044.086720][T25982] ALSA: mixer_oss: invalid OSS volume '' [ 2044.205705][T25987] ALSA: mixer_oss: invalid OSS volume '' [ 2044.607114][T25992] ALSA: mixer_oss: invalid OSS volume '' [ 2045.413345][T26008] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2047.037685][T21782] Bluetooth: hci0: Malformed HCI Event: 0x22 [ 2048.055705][T26037] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2048.197900][T26037] input: syz1 as /devices/virtual/input/input158 [ 2048.433807][T26039] ALSA: mixer_oss: invalid OSS volume '' [ 2048.474205][T26055] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2048.557082][T26055] input: syz1 as /devices/virtual/input/input159 [ 2048.822336][T26042] ALSA: mixer_oss: invalid OSS volume '' [ 2050.478788][T26082] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2050.597533][T26073] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 2050.630504][ T5144] IPVS: starting estimator thread 0... [ 2050.747258][T26082] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2050.771376][T26085] IPVS: using max 19 ests per chain, 45600 per kthread [ 2051.522571][T26071] ALSA: mixer_oss: invalid OSS volume '' [ 2051.762844][T26097] rdma_op ffff88805f23c1f0 conn xmit_rdma 0000000000000000 [ 2051.894089][T26100] sctp: [Deprecated]: syz.4.4442 (pid 26100) Use of int in maxseg socket option. [ 2051.894089][T26100] Use struct sctp_assoc_value instead [ 2051.930666][T26100] netlink: 184472 bytes leftover after parsing attributes in process `syz.4.4442'. [ 2052.152275][ T5164] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 2052.348164][ T5164] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2052.368887][ T5164] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2052.422274][ T5164] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2052.454535][ T5164] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2052.477028][T26109] netlink: 'syz.3.4444': attribute type 10 has an invalid length. [ 2052.483420][ T5164] usb 1-1: Manufacturer: 她蕋멳龜ؔ됛ꦆ뗮齔㗘మᆤ幽埍瀷쬎룱窛퍽黱覝轤㴓犂讯࣍䉙녒ⶇ扚邆镻㢗濇蕃鐍혣☲밉庙랸袰৽夂憬芣稐录빬旟깿ꦇ婞㘳௴ﺋ࣊绾鸓ᬪ哴s [ 2052.550196][T26109] bridge0: port 3(team0) entered disabled state [ 2052.550296][ T5164] usb 1-1: SerialNumber: syz [ 2052.598358][T26109] team0: left allmulticast mode [ 2052.611560][T26109] team_slave_0: left allmulticast mode [ 2052.621818][T26109] team_slave_1: left allmulticast mode [ 2052.627561][T21782] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2052.640129][T26109] team0: left promiscuous mode [ 2052.648204][T26109] team_slave_0: left promiscuous mode [ 2052.656401][T26109] team_slave_1: left promiscuous mode [ 2052.662784][T26109] bridge0: port 3(team0) entered disabled state [ 2052.769804][T26109] batman_adv: batadv0: Adding interface: team0 [ 2052.777364][T26109] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2052.806729][T26109] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 2052.840198][T26110] netlink: 'syz.3.4444': attribute type 10 has an invalid length. [ 2052.892151][T26110] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4444'. [ 2052.916207][T26110] team0: entered promiscuous mode [ 2053.044835][T26110] team_slave_0: entered promiscuous mode [ 2053.056591][T26110] team_slave_1: entered promiscuous mode [ 2053.092782][T26110] 8021q: adding VLAN 0 to HW filter on device team0 [ 2053.100558][T26110] batman_adv: batadv0: Interface activated: team0 [ 2053.108959][T26110] batman_adv: batadv0: Interface deactivated: team0 [ 2053.116549][T26110] batman_adv: batadv0: Removing interface: team0 [ 2053.156245][T26110] bridge0: port 3(team0) entered blocking state [ 2053.164244][T26110] bridge0: port 3(team0) entered disabled state [ 2053.181864][T26110] team0: entered allmulticast mode [ 2053.193132][T26110] team_slave_0: entered allmulticast mode [ 2053.200204][T26110] team_slave_1: entered allmulticast mode [ 2053.262768][T26110] bridge0: port 3(team0) entered blocking state [ 2053.269276][T26110] bridge0: port 3(team0) entered forwarding state [ 2053.338052][ T5164] usb 1-1: 0:2 : does not exist [ 2053.401330][T26106] ALSA: mixer_oss: invalid OSS volume '' [ 2053.465986][ T5164] usb 1-1: USB disconnect, device number 49 [ 2053.787322][T25055] udevd[25055]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2053.864322][T26128] netlink: 'syz.1.4448': attribute type 10 has an invalid length. [ 2053.941805][T26128] bridge0: port 3(team0) entered disabled state [ 2053.977960][T26128] team0: left allmulticast mode [ 2053.994801][T26128] team_slave_0: left allmulticast mode [ 2054.004727][T26128] team_slave_1: left allmulticast mode [ 2054.011664][T26128] team0: left promiscuous mode [ 2054.018512][T26128] team_slave_0: left promiscuous mode [ 2054.024529][T26130] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2054.042764][T26128] team_slave_1: left promiscuous mode [ 2054.056662][T26128] bridge0: port 3(team0) entered disabled state [ 2054.088390][T26134] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2054.201147][T26128] batman_adv: batadv0: Adding interface: team0 [ 2054.207980][T26128] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2054.258766][T26134] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2054.280549][T26128] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 2054.295226][T26131] netlink: 'syz.1.4448': attribute type 10 has an invalid length. [ 2054.327004][T26131] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4448'. [ 2054.387059][T26131] team0: entered promiscuous mode [ 2054.403446][T26131] team_slave_0: entered promiscuous mode [ 2054.500380][T26131] team_slave_1: entered promiscuous mode [ 2054.537954][T26131] 8021q: adding VLAN 0 to HW filter on device team0 [ 2054.546792][T26131] batman_adv: batadv0: Interface activated: team0 [ 2054.554226][T26131] batman_adv: batadv0: Interface deactivated: team0 [ 2054.565764][T26131] batman_adv: batadv0: Removing interface: team0 [ 2054.606327][T26131] bridge0: port 3(team0) entered blocking state [ 2054.617365][T26131] bridge0: port 3(team0) entered disabled state [ 2054.624046][T26131] team0: entered allmulticast mode [ 2054.633756][T26131] team_slave_0: entered allmulticast mode [ 2054.640689][T26131] team_slave_1: entered allmulticast mode [ 2054.674247][T26131] bridge0: port 3(team0) entered blocking state [ 2054.680658][T26131] bridge0: port 3(team0) entered forwarding state [ 2055.214778][ T5146] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 2055.231313][T26156] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4456'. [ 2055.242240][T26156] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4456'. [ 2055.274755][ T9766] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 2055.394738][ T5146] usb 5-1: Using ep0 maxpacket: 32 [ 2055.456095][ T5146] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2055.474716][ T9766] usb 2-1: Using ep0 maxpacket: 16 [ 2055.494129][ T5146] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 2055.516324][ T5146] usb 5-1: can't read configurations, error -71 [ 2055.531733][ T9766] usb 2-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 2055.545977][ T9766] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2055.554022][ T9766] usb 2-1: Product: syz [ 2055.568509][ T9766] usb 2-1: Manufacturer: syz [ 2055.573405][ T9766] usb 2-1: SerialNumber: syz [ 2055.591771][ T9766] usb 2-1: config 0 descriptor?? [ 2055.606715][ T9766] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 2055.815436][T26167] netlink: 'syz.3.4460': attribute type 10 has an invalid length. [ 2055.985484][T26167] bridge0: port 3(team0) entered disabled state [ 2056.013347][T26167] team0: left allmulticast mode [ 2056.034921][T26170] input: syz0 as /devices/virtual/input/input160 [ 2056.053659][T26167] team_slave_0: left allmulticast mode [ 2056.103647][T26167] team_slave_1: left allmulticast mode [ 2056.135392][T26167] team0: left promiscuous mode [ 2056.140359][T26167] team_slave_0: left promiscuous mode [ 2056.146784][T26167] team_slave_1: left promiscuous mode [ 2056.155702][T21782] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2056.189399][T26167] bridge0: port 3(team0) entered disabled state [ 2056.209396][T26167] batman_adv: batadv0: Adding interface: team0 [ 2056.217581][T26167] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2056.243187][T26167] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 2056.267384][T26169] netlink: 'syz.3.4460': attribute type 10 has an invalid length. [ 2056.278229][T26169] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4460'. [ 2056.304426][T26169] team0: entered promiscuous mode [ 2056.334794][T26169] team_slave_0: entered promiscuous mode [ 2056.373352][T26169] team_slave_1: entered promiscuous mode [ 2056.481397][T26169] 8021q: adding VLAN 0 to HW filter on device team0 [ 2056.498272][T26169] batman_adv: batadv0: Interface activated: team0 [ 2056.508281][T26169] batman_adv: batadv0: Interface deactivated: team0 [ 2056.551743][T26169] batman_adv: batadv0: Removing interface: team0 [ 2056.578255][T26169] bridge0: port 3(team0) entered blocking state [ 2056.589421][T26169] bridge0: port 3(team0) entered disabled state [ 2056.598865][T26169] team0: entered allmulticast mode [ 2056.604159][T26169] team_slave_0: entered allmulticast mode [ 2056.636656][T26169] team_slave_1: entered allmulticast mode [ 2056.646555][T26163] ALSA: mixer_oss: invalid OSS volume '' [ 2056.681122][T26169] bridge0: port 3(team0) entered blocking state [ 2056.687739][T26169] bridge0: port 3(team0) entered forwarding state [ 2057.884835][ T9766] gp8psk: usb in 128 operation failed. [ 2057.923688][ T9766] gp8psk: usb in 137 operation failed. [ 2057.932701][ T9766] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2057.944152][ T9766] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 2058.047812][ T9766] usb 2-1: media controller created [ 2058.069285][ T9766] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2058.155426][ T9766] gp8psk_fe: Frontend revision 1 attached [ 2058.176602][ T9766] usb 2-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 2058.204367][ T9766] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 2058.360414][T26194] netlink: 'syz.3.4464': attribute type 1 has an invalid length. [ 2058.523518][ T9766] gp8psk: usb in 138 operation failed. [ 2058.542904][ T9766] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 2058.585176][ T9766] gp8psk: found Genpix USB device pID = 201 (hex) [ 2058.646654][ T9766] usb 2-1: USB disconnect, device number 64 [ 2058.681583][T26194] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4464'. [ 2058.767349][T26194] tap0: tun_chr_ioctl cmd 1074025677 [ 2058.797146][T26194] tap0: linktype set to 270 [ 2058.911388][ T9766] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 2058.957049][T25055] udevd[25055]: setting mode of /dev/bus/usb/002/064 to 020664 failed: No such file or directory [ 2058.985934][T25055] udevd[25055]: setting owner of /dev/bus/usb/002/064 to uid=0, gid=0 failed: No such file or directory [ 2058.990072][T26202] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4467'. [ 2059.154319][T26202] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4467'. [ 2059.968481][T26221] rdma_op ffff88806516a9f0 conn xmit_rdma 0000000000000000 [ 2060.559640][T21782] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2060.582098][T21782] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2060.664866][T21760] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 2060.861929][T21760] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2060.872459][T21760] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2060.916756][T21760] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2060.930266][T21760] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2060.961197][T21760] usb 3-1: Manufacturer: 她蕋멳龜ؔ됛ꦆ뗮齔㗘మᆤ幽埍瀷쬎룱窛퍽黱覝轤㴓犂讯࣍䉙녒ⶇ扚邆镻㢗濇蕃鐍혣☲밉庙랸袰৽夂憬芣稐录빬旟깿ꦇ婞㘳௴ﺋ࣊绾鸓ᬪ哴s [ 2060.984773][ C0] vkms_vblank_simulate: vblank timer overrun [ 2060.991502][T21782] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 2061.046273][T21760] usb 3-1: SerialNumber: syz [ 2061.242822][T26224] ALSA: mixer_oss: invalid OSS volume '' [ 2061.405508][T21760] usb 3-1: 0:2 : does not exist [ 2061.470774][T21760] usb 3-1: USB disconnect, device number 46 [ 2061.724017][T26240] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2061.875523][T26234] input: syz1 as /devices/virtual/input/input161 [ 2062.251001][T26246] sctp: [Deprecated]: syz.0.4478 (pid 26246) Use of int in maxseg socket option. [ 2062.251001][T26246] Use struct sctp_assoc_value instead [ 2062.279314][T26247] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4479'. [ 2062.365638][T26247] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4479'. [ 2062.380112][T26246] netlink: 184472 bytes leftover after parsing attributes in process `syz.0.4478'. [ 2062.468946][T21782] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2062.508180][T21782] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2062.853585][T21782] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 2063.996073][T15045] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 2064.155243][T26268] ALSA: mixer_oss: invalid OSS volume '' [ 2064.216042][T15045] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 2064.253895][T15045] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2064.275788][T15045] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2064.320786][T15045] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2064.333209][T15045] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2064.345803][T15045] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2064.358266][T15045] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2064.416586][T15045] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2064.428963][T21782] Bluetooth: hci0: unexpected event for opcode 0x0c46 [ 2064.441398][T15045] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2064.476324][T21782] Bluetooth: hci0: Malformed HCI Event: 0x22 [ 2064.507558][T15045] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2064.538942][T15045] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2064.568027][T15045] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2064.612631][T15045] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2064.656123][T15045] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2064.697288][T15045] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2064.747064][T15045] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2064.773616][T15045] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2064.786906][T26275] ALSA: mixer_oss: invalid OSS volume '' [ 2064.799398][T26284] input: syz1 as /devices/virtual/input/input162 [ 2064.811343][T15045] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2064.867695][T15045] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2064.903614][T15045] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2064.923509][T15045] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2064.956150][T15045] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2064.970404][T15045] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2065.006962][T15045] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2065.060823][T15045] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2065.072895][T15045] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 2065.083080][T15045] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 2065.097346][T15045] usb 5-1: Product: syz [ 2065.101652][T15045] usb 5-1: Manufacturer: syz [ 2065.108785][T15045] usb 5-1: SerialNumber: syz [ 2065.146781][T15045] usb 5-1: config 0 descriptor?? [ 2065.282596][T15045] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 2065.439798][T26282] ALSA: mixer_oss: invalid OSS volume '' [ 2065.596698][ T5146] usb 5-1: USB disconnect, device number 60 [ 2065.647124][ T5146] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 2066.117754][T26303] netlink: 'syz.3.4493': attribute type 10 has an invalid length. [ 2066.172480][T26303] bridge0: port 3(team0) entered disabled state [ 2066.190872][T26303] team0: left allmulticast mode [ 2066.191688][T21782] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2066.250211][T26303] team_slave_0: left allmulticast mode [ 2066.295392][T26303] team_slave_1: left allmulticast mode [ 2066.301083][T26303] team0: left promiscuous mode [ 2066.306487][T26303] team_slave_0: left promiscuous mode [ 2066.312455][T26303] team_slave_1: left promiscuous mode [ 2066.318878][T26303] bridge0: port 3(team0) entered disabled state [ 2066.409079][T26303] batman_adv: batadv0: Adding interface: team0 [ 2066.429885][T26303] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2066.474845][T26303] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 2067.280461][T26322] netlink: 'syz.2.4498': attribute type 10 has an invalid length. [ 2067.310147][T26322] bridge0: port 3(team0) entered disabled state [ 2067.320520][T26322] team0: left allmulticast mode [ 2067.329082][T26322] team_slave_0: left allmulticast mode [ 2067.338240][T26322] team_slave_1: left allmulticast mode [ 2067.355526][T26322] team0: left promiscuous mode [ 2067.370512][T26322] team_slave_0: left promiscuous mode [ 2067.379594][T26322] team_slave_1: left promiscuous mode [ 2067.389580][T26322] bridge0: port 3(team0) entered disabled state [ 2067.424383][T26322] batman_adv: batadv0: Adding interface: team0 [ 2067.430914][T26322] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2067.475226][T26322] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 2067.509531][T26323] netlink: 'syz.2.4498': attribute type 10 has an invalid length. [ 2068.364894][T26323] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4498'. [ 2068.373938][T26323] team0: entered promiscuous mode [ 2068.419842][T26323] team_slave_0: entered promiscuous mode [ 2068.448564][T26323] team_slave_1: entered promiscuous mode [ 2068.502643][T26323] 8021q: adding VLAN 0 to HW filter on device team0 [ 2068.510142][T26323] batman_adv: batadv0: Interface activated: team0 [ 2068.516972][T26323] batman_adv: batadv0: Interface deactivated: team0 [ 2068.523923][T26323] batman_adv: batadv0: Removing interface: team0 [ 2068.574251][T26335] rdma_op ffff88806ea351f0 conn xmit_rdma 0000000000000000 [ 2068.630003][T26324] ALSA: mixer_oss: invalid OSS volume '' [ 2068.638088][T26323] bridge0: port 3(team0) entered blocking state [ 2068.649835][T26323] bridge0: port 3(team0) entered disabled state [ 2068.657937][T26323] team0: entered allmulticast mode [ 2068.663223][T26323] team_slave_0: entered allmulticast mode [ 2068.675941][T26323] team_slave_1: entered allmulticast mode [ 2068.794067][T26323] bridge0: port 3(team0) entered blocking state [ 2068.800617][T26323] bridge0: port 3(team0) entered forwarding state [ 2069.005235][T19025] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 2069.197641][T19025] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2069.208286][T19025] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2069.222978][T19025] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2069.234154][T19025] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2069.242421][T19025] usb 1-1: Product: 抡֨顼쐼⃉ꝫ㧨㙘ܓ슪ꀡ⚃⶟墔蓼༣鴾Ꚑ儧홳ڋ쪗鸎 [ 2069.254885][T19025] usb 1-1: Manufacturer: 她蕋멳龜ؔ됛ꦆ뗮齔㗘మᆤ幽埍瀷쬎룱窛퍽黱覝轤㴓犂讯࣍䉙녒ⶇ扚邆镻㢗濇蕃鐍혣☲밉庙랸袰৽夂憬芣稐录빬旟깿ꦇ婞㘳௴ﺋ࣊绾鸓ᬪ哴s [ 2069.301443][T19025] usb 1-1: SerialNumber: syz [ 2069.617988][T19025] usb 1-1: 0:2 : does not exist [ 2069.686402][T19025] usb 1-1: USB disconnect, device number 50 [ 2069.692451][T21782] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2069.702828][T21782] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2070.039001][T25055] udevd[25055]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2070.740924][T26364] rdma_op ffff88807accd9f0 conn xmit_rdma 0000000000000000 [ 2070.765044][T21782] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 2070.939510][T26362] netlink: 'syz.4.4509': attribute type 10 has an invalid length. [ 2071.007640][T26362] bridge0: port 3(team0) entered disabled state [ 2071.028638][T26362] team0: left allmulticast mode [ 2071.036036][T26362] team_slave_0: left allmulticast mode [ 2071.041997][T26362] team_slave_1: left allmulticast mode [ 2071.051924][T26362] team0: left promiscuous mode [ 2071.057105][T26362] team_slave_0: left promiscuous mode [ 2071.070793][T26362] team_slave_1: left promiscuous mode [ 2071.078776][T26362] bridge0: port 3(team0) entered disabled state [ 2071.114807][T26362] batman_adv: batadv0: Adding interface: team0 [ 2071.121145][T26362] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2071.148854][T26362] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 2071.184388][T26375] netlink: 'syz.2.4511': attribute type 10 has an invalid length. [ 2071.218263][T26375] bridge0: port 3(team0) entered disabled state [ 2071.233357][T26375] team0: left allmulticast mode [ 2071.240993][T26375] team_slave_0: left allmulticast mode [ 2071.249206][T26375] team_slave_1: left allmulticast mode [ 2071.254966][T15045] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 2071.263386][T26375] team0: left promiscuous mode [ 2071.269467][T26375] team_slave_0: left promiscuous mode [ 2071.275486][T26375] team_slave_1: left promiscuous mode [ 2071.282005][T26375] bridge0: port 3(team0) entered disabled state [ 2071.318776][T26375] batman_adv: batadv0: Adding interface: team0 [ 2071.325476][T26375] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2071.356162][T26375] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 2071.380622][T26378] netlink: 'syz.2.4511': attribute type 10 has an invalid length. [ 2071.457075][T15045] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2071.482679][T15045] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2071.492181][T26378] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4511'. [ 2071.533118][T15045] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2071.535087][T26378] team0: entered promiscuous mode [ 2071.558648][T15045] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2071.580815][T26378] team_slave_0: entered promiscuous mode [ 2071.587252][T15045] usb 1-1: Product: 抡֨顼쐼⃉ꝫ㧨㙘ܓ슪ꀡ⚃⶟墔蓼༣鴾Ꚑ儧홳ڋ쪗鸎 [ 2071.603653][T26378] team_slave_1: entered promiscuous mode [ 2071.626534][T26378] 8021q: adding VLAN 0 to HW filter on device team0 [ 2071.636143][T15045] usb 1-1: Manufacturer: 她蕋멳龜ؔ됛ꦆ뗮齔㗘మᆤ幽埍瀷쬎룱窛퍽黱覝轤㴓犂讯࣍䉙녒ⶇ扚邆镻㢗濇蕃鐍혣☲밉庙랸袰৽夂憬芣稐录빬旟깿ꦇ婞㘳௴ﺋ࣊绾鸓ᬪ哴s [ 2071.677541][T26378] batman_adv: batadv0: Interface activated: team0 [ 2071.684872][T26378] batman_adv: batadv0: Interface deactivated: team0 [ 2071.685885][T15045] usb 1-1: SerialNumber: syz [ 2071.697516][T26378] batman_adv: batadv0: Removing interface: team0 [ 2071.726923][T26378] bridge0: port 3(team0) entered blocking state [ 2071.733513][T26378] bridge0: port 3(team0) entered disabled state [ 2071.741220][T26378] team0: entered allmulticast mode [ 2071.751086][T26378] team_slave_0: entered allmulticast mode [ 2071.757094][T26378] team_slave_1: entered allmulticast mode [ 2071.767880][T26378] bridge0: port 3(team0) entered blocking state [ 2071.774393][T26378] bridge0: port 3(team0) entered forwarding state [ 2071.774557][T26384] rdma_op ffff88806e3d79f0 conn xmit_rdma 0000000000000000 [ 2072.001781][T15045] usb 1-1: 0:2 : does not exist [ 2072.049964][T15045] usb 1-1: USB disconnect, device number 51 [ 2072.085091][T26386] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2072.164117][T26386] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2072.274834][T21639] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 2072.302526][T26391] netlink: 'syz.2.4517': attribute type 10 has an invalid length. [ 2072.321163][T26391] bridge0: port 3(team0) entered disabled state [ 2072.332048][T26391] team0: left allmulticast mode [ 2072.340105][T25055] udevd[25055]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2072.357134][T26391] team_slave_0: left allmulticast mode [ 2072.368920][T26391] team_slave_1: left allmulticast mode [ 2072.374588][T26391] team0: left promiscuous mode [ 2072.388512][T26391] team_slave_0: left promiscuous mode [ 2072.399721][T26391] team_slave_1: left promiscuous mode [ 2072.407628][T26391] bridge0: port 3(team0) entered disabled state [ 2072.423797][T26391] batman_adv: batadv0: Adding interface: team0 [ 2072.430774][T26391] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2072.466064][T26391] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 2072.478213][T21639] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2072.494490][T21639] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2072.509126][T21639] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2072.519044][T21639] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2072.533865][T21639] usb 5-1: Product: 抡֨顼쐼⃉ꝫ㧨㙘ܓ슪ꀡ⚃⶟墔蓼༣鴾Ꚑ儧홳ڋ쪗鸎 [ 2072.559987][T21639] usb 5-1: Manufacturer: 她蕋멳龜ؔ됛ꦆ뗮齔㗘మᆤ幽埍瀷쬎룱窛퍽黱覝轤㴓犂讯࣍䉙녒ⶇ扚邆镻㢗濇蕃鐍혣☲밉庙랸袰৽夂憬芣稐录빬旟깿ꦇ婞㘳௴ﺋ࣊绾鸓ᬪ哴s [ 2072.590056][T21639] usb 5-1: SerialNumber: syz [ 2072.885174][T21639] usb 5-1: 0:2 : does not exist [ 2072.932443][T26399] netlink: 'syz.3.4520': attribute type 10 has an invalid length. [ 2072.944276][T21639] usb 5-1: USB disconnect, device number 61 [ 2072.976107][T21782] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 2073.874017][T25055] udevd[25055]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2073.975065][T26406] netlink: 'syz.1.4523': attribute type 1 has an invalid length. [ 2074.133869][T26414] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4523'. [ 2074.381443][T26406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4523'. [ 2074.423978][T26417] netlink: 'syz.2.4524': attribute type 10 has an invalid length. [ 2074.457872][T26406] tap0: tun_chr_ioctl cmd 1074025677 [ 2074.477904][T26406] tap0: linktype set to 270 [ 2074.896307][T26425] input: syz1 as /devices/virtual/input/input163 [ 2075.639252][T26445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2075.784762][T26449] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2076.833889][T26463] rdma_op ffff8880401fc1f0 conn xmit_rdma 0000000000000000 [ 2079.354753][T21639] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 2079.570965][T21639] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2080.424181][T21639] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2080.494202][T21639] usb 3-1: string descriptor 0 read error: -71 [ 2080.522435][T21639] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2080.538093][T21639] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2080.748540][T21639] usb 3-1: can't set config #1, error -71 [ 2080.828342][T21639] usb 3-1: USB disconnect, device number 47 [ 2081.757233][T26500] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2081.839153][T26475] ALSA: mixer_oss: invalid OSS volume '' [ 2081.860282][T26503] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2087.206903][T26530] netlink: 'syz.2.4553': attribute type 10 has an invalid length. [ 2089.934940][ T5144] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 2090.103169][T26563] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2090.145048][ T5144] usb 3-1: Using ep0 maxpacket: 32 [ 2090.248028][ T5144] usb 3-1: unable to get BOS descriptor or descriptor too short [ 2090.276675][ T5144] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 2090.278184][T26566] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2090.300460][ T5144] usb 3-1: can't read configurations, error -71 [ 2099.012165][T26594] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2099.057308][T26606] rdma_op ffff88801b2f61f0 conn xmit_rdma 0000000000000000 [ 2099.092846][T26594] input: syz1 as /devices/virtual/input/input164 [ 2099.409734][ T1243] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.419916][ T1243] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.475359][ T5146] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 2099.599600][T17125] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2099.609935][T17125] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2099.624036][T17125] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2099.635617][T17125] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2099.643607][T17125] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2099.652219][T17125] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2099.686843][ T5146] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2099.710207][ T5146] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2099.731520][ T5146] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2099.754071][ T5146] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2099.785771][ T5146] usb 5-1: Manufacturer: 她蕋멳龜ؔ됛ꦆ뗮齔㗘మᆤ幽埍瀷쬎룱窛퍽黱覝轤㴓犂讯࣍䉙녒ⶇ扚邆镻㢗濇蕃鐍혣☲밉庙랸袰৽夂憬芣稐录빬旟깿ꦇ婞㘳௴ﺋ࣊绾鸓ᬪ哴s [ 2099.831160][ T5146] usb 5-1: SerialNumber: syz [ 2101.681796][T26624] input: syz1 as /devices/virtual/input/input165 [ 2101.694843][T24803] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2101.724848][T21782] Bluetooth: hci3: command tx timeout [ 2101.864991][ T5146] usb 5-1: 0:2 : does not exist [ 2102.006671][T24803] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2102.018551][ T5146] usb 5-1: USB disconnect, device number 62 [ 2102.203778][T24803] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2102.329425][T26608] udevd[26608]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2102.544896][T24803] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2103.568893][T26612] chnl_net:caif_netlink_parms(): no params data found [ 2105.877092][T21782] Bluetooth: hci3: command tx timeout [ 2110.136610][T17125] Bluetooth: hci3: command tx timeout [ 2110.554050][T26671] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2110.640075][T26672] netlink: 'syz.4.4582': attribute type 10 has an invalid length. [ 2110.933788][T26683] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2110.947245][T26612] bridge0: port 1(bridge_slave_0) entered blocking state [ 2110.971547][T26612] bridge0: port 1(bridge_slave_0) entered disabled state [ 2110.986013][T26612] bridge_slave_0: entered allmulticast mode [ 2110.998387][T26612] bridge_slave_0: entered promiscuous mode [ 2111.049679][T26672] netlink: 'syz.4.4582': attribute type 10 has an invalid length. [ 2111.063648][T26672] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4582'. [ 2111.080450][T26672] team0: entered promiscuous mode [ 2111.088080][T26672] team_slave_0: entered promiscuous mode [ 2111.101603][T26672] team_slave_1: entered promiscuous mode [ 2111.107608][T26663] ALSA: mixer_oss: invalid OSS volume '' [ 2111.118335][T26672] 8021q: adding VLAN 0 to HW filter on device team0 [ 2111.127643][T26672] batman_adv: batadv0: Interface activated: team0 [ 2111.137011][T26672] batman_adv: batadv0: Interface deactivated: team0 [ 2111.148686][T26672] batman_adv: batadv0: Removing interface: team0 [ 2111.165993][T26672] bridge0: port 3(team0) entered blocking state [ 2111.181785][T26672] bridge0: port 3(team0) entered disabled state [ 2111.196074][T26672] team0: entered allmulticast mode [ 2111.210463][T26672] team_slave_0: entered allmulticast mode [ 2111.227935][T26672] team_slave_1: entered allmulticast mode [ 2111.250724][T26672] bridge0: port 3(team0) entered blocking state [ 2111.257231][T26672] bridge0: port 3(team0) entered forwarding state [ 2111.281220][T24803] team0: left allmulticast mode [ 2111.290125][T24803] team_slave_0: left allmulticast mode [ 2111.301709][T24803] team_slave_1: left allmulticast mode [ 2111.367909][T24803] bridge0: port 3(team0) entered disabled state [ 2111.559334][T24803] bridge_slave_1: left allmulticast mode [ 2111.574222][T24803] bridge_slave_1: left promiscuous mode [ 2111.602510][T24803] bridge0: port 2(bridge_slave_1) entered disabled state [ 2112.243255][T21782] Bluetooth: hci3: command tx timeout [ 2112.283147][T24803] bridge_slave_0: left allmulticast mode [ 2112.291821][T24803] bridge_slave_0: left promiscuous mode [ 2112.301060][T24803] bridge0: port 1(bridge_slave_0) entered disabled state [ 2113.032379][T24803] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2113.050464][T24803] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2113.062295][T24803] bond0 (unregistering): Released all slaves [ 2113.079047][T26612] bridge0: port 2(bridge_slave_1) entered blocking state [ 2113.088935][T26612] bridge0: port 2(bridge_slave_1) entered disabled state [ 2113.110891][T26612] bridge_slave_1: entered allmulticast mode [ 2113.142415][T26612] bridge_slave_1: entered promiscuous mode [ 2113.508438][T26612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2116.368631][T26612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2116.523703][T26718] netlink: 'syz.4.4589': attribute type 10 has an invalid length. [ 2116.562174][T26718] bridge0: port 3(team0) entered disabled state [ 2116.601787][T26718] team0: left allmulticast mode [ 2116.607921][T26718] team_slave_0: left allmulticast mode [ 2116.613618][T26718] team_slave_1: left allmulticast mode [ 2116.678781][T26718] team0: left promiscuous mode [ 2116.714402][T26718] team_slave_0: left promiscuous mode [ 2116.720972][T26718] team_slave_1: left promiscuous mode [ 2116.758834][T26718] bridge0: port 3(team0) entered disabled state [ 2116.820949][T26718] batman_adv: batadv0: Adding interface: team0 [ 2116.837106][T26718] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2116.898712][T26734] input: syz1 as /devices/virtual/input/input166 [ 2116.909733][T26707] ALSA: mixer_oss: invalid OSS volume '' [ 2116.944894][T26718] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 2117.064384][T26723] netlink: 'syz.4.4589': attribute type 10 has an invalid length. [ 2117.074989][T26723] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4589'. [ 2117.124507][T26723] team0: entered promiscuous mode [ 2117.154214][T26723] team_slave_0: entered promiscuous mode [ 2117.178492][T26723] team_slave_1: entered promiscuous mode [ 2117.196854][T26723] 8021q: adding VLAN 0 to HW filter on device team0 [ 2117.215424][T26723] batman_adv: batadv0: Interface activated: team0 [ 2117.231471][T26723] batman_adv: batadv0: Interface deactivated: team0 [ 2117.241305][T26723] batman_adv: batadv0: Removing interface: team0 [ 2117.264238][T26723] bridge0: port 3(team0) entered blocking state [ 2117.273689][T26723] bridge0: port 3(team0) entered disabled state [ 2117.289816][T26723] team0: entered allmulticast mode [ 2117.299798][T26723] team_slave_0: entered allmulticast mode [ 2117.314161][T26723] team_slave_1: entered allmulticast mode [ 2117.326606][T26744] sctp: [Deprecated]: syz.2.4595 (pid 26744) Use of int in maxseg socket option. [ 2117.326606][T26744] Use struct sctp_assoc_value instead [ 2117.347838][T26723] bridge0: port 3(team0) entered blocking state [ 2117.354278][T26723] bridge0: port 3(team0) entered forwarding state [ 2117.378705][T26744] netlink: 184472 bytes leftover after parsing attributes in process `syz.2.4595'. [ 2117.390951][T26722] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4593'. [ 2117.582462][T26726] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4593'. [ 2117.733316][T26612] team0: Port device team_slave_0 added [ 2117.772822][T24803] hsr_slave_0: left promiscuous mode [ 2117.794379][T24803] hsr_slave_1: left promiscuous mode [ 2117.808212][T24803] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2117.830043][T24803] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2117.835512][T26757] sctp: [Deprecated]: syz.3.4599 (pid 26757) Use of int in maxseg socket option. [ 2117.835512][T26757] Use struct sctp_assoc_value instead [ 2117.870054][T24803] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2117.883675][T26757] netlink: 184472 bytes leftover after parsing attributes in process `syz.3.4599'. [ 2117.893545][T24803] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2117.904749][ T5144] usb 5-1: new full-speed USB device number 63 using dummy_hcd [ 2117.966048][T24803] veth1_macvtap: left promiscuous mode [ 2117.971658][T24803] veth0_macvtap: left promiscuous mode [ 2118.000085][T24803] veth1_vlan: left promiscuous mode [ 2118.013404][T24803] veth0_vlan: left promiscuous mode [ 2118.107522][ T5144] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2118.141422][ T5144] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2118.182551][ T5144] usb 5-1: New USB device found, idVendor=468c, idProduct=90ea, bcdDevice=99.6d [ 2118.216525][ T5144] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2118.242070][ T5144] usb 5-1: Product: syz [ 2118.254075][ T5144] usb 5-1: Manufacturer: syz [ 2118.273028][ T5144] usb 5-1: SerialNumber: syz [ 2118.299225][ T5144] usb 5-1: config 0 descriptor?? [ 2118.324200][ T5144] usb 5-1: Found UVC 0.00 device syz (468c:90ea) [ 2118.330977][ T5144] usb 5-1: No valid video chain found. [ 2118.659471][T26764] sctp: [Deprecated]: syz.3.4601 (pid 26764) Use of int in maxseg socket option. [ 2118.659471][T26764] Use struct sctp_assoc_value instead [ 2118.759588][T26764] netlink: 184472 bytes leftover after parsing attributes in process `syz.3.4601'. [ 2120.204415][T26765] ALSA: mixer_oss: invalid OSS volume '' [ 2120.685043][T15045] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 2120.900005][T15045] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2120.952207][T15045] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2121.007446][T15045] usb 4-1: New USB device found, idVendor=468c, idProduct=90ea, bcdDevice=99.6d [ 2121.016881][T15045] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2121.039489][T15045] usb 4-1: Product: syz [ 2121.043751][T15045] usb 4-1: Manufacturer: syz [ 2121.077648][T15045] usb 4-1: SerialNumber: syz [ 2121.114406][T15045] usb 4-1: config 0 descriptor?? [ 2121.143382][T15045] usb 4-1: Found UVC 0.00 device syz (468c:90ea) [ 2121.169304][T15045] usb 4-1: No valid video chain found. [ 2121.323120][T24803] team_slave_1 (unregistering): left promiscuous mode [ 2121.390484][T24803] team0 (unregistering): Port device team_slave_1 removed [ 2121.616548][T24803] team_slave_0 (unregistering): left promiscuous mode [ 2121.655598][T24803] team0 (unregistering): Port device team_slave_0 removed [ 2122.641478][T15045] usb 5-1: USB disconnect, device number 63 [ 2122.952215][T26612] team0: Port device team_slave_1 added [ 2123.034223][T26789] netlink: 'syz.2.4607': attribute type 10 has an invalid length. [ 2123.058749][T26790] netlink: 'syz.2.4607': attribute type 10 has an invalid length. [ 2123.084544][T26790] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4607'. [ 2123.108414][T26790] team0: entered promiscuous mode [ 2123.128364][T26790] team_slave_0: entered promiscuous mode [ 2123.154050][T26790] team_slave_1: entered promiscuous mode [ 2123.181083][T26790] 8021q: adding VLAN 0 to HW filter on device team0 [ 2123.203578][T26790] batman_adv: batadv0: Interface activated: team0 [ 2123.219095][T26790] batman_adv: batadv0: Interface deactivated: team0 [ 2123.234555][T26790] batman_adv: batadv0: Removing interface: team0 [ 2123.258551][T26790] bridge0: port 3(team0) entered blocking state [ 2123.271806][T26790] bridge0: port 3(team0) entered disabled state [ 2123.287130][T26790] team0: entered allmulticast mode [ 2123.293508][T26790] team_slave_0: entered allmulticast mode [ 2123.304511][T26790] team_slave_1: entered allmulticast mode [ 2123.327989][T26790] bridge0: port 3(team0) entered blocking state [ 2123.334360][T26790] bridge0: port 3(team0) entered forwarding state [ 2123.361758][T26794] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4608'. [ 2123.383185][T26795] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4608'. [ 2123.517371][T26612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2123.535506][T26612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2123.574862][ T5144] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 2123.599824][T26612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2123.616183][T26612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2123.623909][T26612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2123.657556][T26612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2124.324465][ T5144] usb 1-1: Using ep0 maxpacket: 32 [ 2124.377152][T21639] usb 4-1: USB disconnect, device number 48 [ 2128.337468][ T5144] usb 1-1: unable to get BOS descriptor or descriptor too short [ 2128.346643][ T5144] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 2128.363415][ T5144] usb 1-1: can't read configurations, error -71 [ 2128.568115][T26612] hsr_slave_0: entered promiscuous mode [ 2128.577763][T26812] netlink: 'syz.2.4613': attribute type 1 has an invalid length. [ 2128.598846][T26612] hsr_slave_1: entered promiscuous mode [ 2128.635552][T26813] rdma_op ffff8880231099f0 conn xmit_rdma 0000000000000000 [ 2128.870934][T24803] IPVS: stop unused estimator thread 0... [ 2129.029526][T26812] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4613'. [ 2129.045840][ T5144] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 2129.086908][T26812] tap0: tun_chr_ioctl cmd 1074025677 [ 2129.096307][T26812] tap0: linktype set to 270 [ 2129.257792][ T5144] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2129.283970][ T5144] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2129.359922][ T5144] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2129.380394][ T5144] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2129.431849][ T5144] usb 1-1: Product: syz [ 2129.459867][ T5144] usb 1-1: Manufacturer: syz [ 2129.470040][ T5144] usb 1-1: SerialNumber: syz [ 2129.678860][T26840] netlink: 'syz.2.4617': attribute type 10 has an invalid length. [ 2129.745449][T26840] bridge0: port 3(team0) entered disabled state [ 2129.780317][T26840] team0: left allmulticast mode [ 2129.785861][T26840] team_slave_0: left allmulticast mode [ 2129.791727][T26840] team_slave_1: left allmulticast mode [ 2129.797821][T26840] team0: left promiscuous mode [ 2129.809131][T26840] team_slave_0: left promiscuous mode [ 2129.834452][T26840] team_slave_1: left promiscuous mode [ 2129.875832][T26840] bridge0: port 3(team0) entered disabled state [ 2129.911806][T26824] ALSA: mixer_oss: invalid OSS volume '' [ 2129.961045][T26840] batman_adv: batadv0: Adding interface: team0 [ 2129.995595][T26840] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2130.051505][T26840] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 2130.080046][T26842] netlink: 'syz.2.4617': attribute type 10 has an invalid length. [ 2130.088947][T26842] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4617'. [ 2130.104031][T26842] team0: entered promiscuous mode [ 2130.109415][T26842] team_slave_0: entered promiscuous mode [ 2130.116284][T26842] team_slave_1: entered promiscuous mode [ 2130.150078][T26842] 8021q: adding VLAN 0 to HW filter on device team0 [ 2130.166052][T26842] batman_adv: batadv0: Interface activated: team0 [ 2130.172950][T26842] batman_adv: batadv0: Interface deactivated: team0 [ 2130.194437][T26842] batman_adv: batadv0: Removing interface: team0 [ 2130.206432][T26842] bridge0: port 3(team0) entered blocking state [ 2130.213244][T26842] bridge0: port 3(team0) entered disabled state [ 2130.221134][T26842] team0: entered allmulticast mode [ 2130.227707][T26842] team_slave_0: entered allmulticast mode [ 2130.234072][T26842] team_slave_1: entered allmulticast mode [ 2130.243166][T26842] bridge0: port 3(team0) entered blocking state [ 2130.249821][T26842] bridge0: port 3(team0) entered forwarding state [ 2130.443157][T26850] netlink: 'syz.4.4619': attribute type 10 has an invalid length. [ 2130.464443][ T5144] usb 1-1: 0:2 : does not exist [ 2130.523059][ T5144] usb 1-1: USB disconnect, device number 53 [ 2130.552169][T26850] bridge0: port 3(team0) entered disabled state [ 2130.576747][T26850] team0: left allmulticast mode [ 2130.588882][T26850] team_slave_0: left allmulticast mode [ 2130.604036][T26850] team_slave_1: left allmulticast mode [ 2130.617369][T26850] team0: left promiscuous mode [ 2130.631103][T26850] team_slave_0: left promiscuous mode [ 2130.638669][T26850] team_slave_1: left promiscuous mode [ 2130.646004][T26850] bridge0: port 3(team0) entered disabled state [ 2130.662177][T26850] batman_adv: batadv0: Adding interface: team0 [ 2130.668792][T26850] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2130.701637][T26850] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 2130.729434][T26851] netlink: 'syz.4.4619': attribute type 10 has an invalid length. [ 2130.741612][T26851] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4619'. [ 2130.760171][T26851] team0: entered promiscuous mode [ 2130.770060][T26851] team_slave_0: entered promiscuous mode [ 2130.776566][T26851] team_slave_1: entered promiscuous mode [ 2130.786727][T26851] 8021q: adding VLAN 0 to HW filter on device team0 [ 2130.793968][T26851] batman_adv: batadv0: Interface activated: team0 [ 2130.800725][T26851] batman_adv: batadv0: Interface deactivated: team0 [ 2130.807661][T26851] batman_adv: batadv0: Removing interface: team0 [ 2130.825345][T26732] udevd[26732]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2130.863454][T26851] bridge0: port 3(team0) entered blocking state [ 2130.872788][T26851] bridge0: port 3(team0) entered disabled state [ 2130.889477][T26851] team0: entered allmulticast mode [ 2130.897379][T26851] team_slave_0: entered allmulticast mode [ 2130.906132][T26851] team_slave_1: entered allmulticast mode [ 2130.930848][T26851] bridge0: port 3(team0) entered blocking state [ 2130.931101][T26851] bridge0: port 3(team0) entered forwarding state [ 2130.942357][T26853] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4620'. [ 2131.030797][T26855] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4620'. [ 2131.287613][T26612] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2131.349213][T26612] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2131.364247][T26867] rdma_op ffff888029b119f0 conn xmit_rdma 0000000000000000 [ 2131.403840][T26612] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2131.439359][T26866] sctp: [Deprecated]: syz.0.4621 (pid 26866) Use of int in maxseg socket option. [ 2131.439359][T26866] Use struct sctp_assoc_value instead [ 2131.480738][T26612] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2131.515064][T26866] netlink: 184472 bytes leftover after parsing attributes in process `syz.0.4621'. [ 2131.794993][ T9766] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 2131.844781][ T5146] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 2131.948296][T26612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2131.989578][ T9766] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2132.031464][ T9766] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2132.041622][ T5146] usb 5-1: Using ep0 maxpacket: 32 [ 2132.075099][T26612] 8021q: adding VLAN 0 to HW filter on device team0 [ 2132.095806][ T9766] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2132.131833][ T9766] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2132.151482][ T5146] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2132.160652][ T5144] bridge0: port 1(bridge_slave_0) entered blocking state [ 2132.167912][ T5144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2132.183393][ T9766] usb 3-1: Product: 抡֨顼쐼⃉ꝫ㧨㙘ܓ슪ꀡ⚃⶟墔蓼༣鴾Ꚑ儧홳ڋ쪗鸎 [ 2132.205320][ T5146] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 2132.214903][ T5146] usb 5-1: can't read configurations, error -71 [ 2132.222461][ T9766] usb 3-1: Manufacturer: 她蕋멳龜ؔ됛ꦆ뗮齔㗘మᆤ幽埍瀷쬎룱窛퍽黱覝轤㴓犂讯࣍䉙녒ⶇ扚邆镻㢗濇蕃鐍혣☲밉庙랸袰৽夂憬芣稐录빬旟깿ꦇ婞㘳௴ﺋ࣊绾鸓ᬪ哴s [ 2132.272799][T19025] bridge0: port 2(bridge_slave_1) entered blocking state [ 2132.280155][T19025] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2132.304745][ T9766] usb 3-1: SerialNumber: syz [ 2132.655597][ T9766] usb 3-1: 0:2 : does not exist [ 2132.745022][ T9766] usb 3-1: USB disconnect, device number 50 [ 2132.971610][T26891] sctp: [Deprecated]: syz.4.4626 (pid 26891) Use of int in maxseg socket option. [ 2132.971610][T26891] Use struct sctp_assoc_value instead [ 2133.023571][T26900] netlink: 184472 bytes leftover after parsing attributes in process `syz.4.4626'. [ 2133.091311][T26732] udevd[26732]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2133.229755][T26612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2133.611141][T26612] veth0_vlan: entered promiscuous mode [ 2134.327239][T26612] veth1_vlan: entered promiscuous mode [ 2134.576563][T26612] veth0_macvtap: entered promiscuous mode [ 2134.599807][T26612] veth1_macvtap: entered promiscuous mode [ 2134.752277][T26918] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4631'. [ 2134.808662][T26923] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4631'. [ 2134.887388][T26612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2134.912794][T26612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2135.500969][T26612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2135.552218][T26612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2135.615166][T26612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2135.668687][T26612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2135.729744][T26612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2135.784632][T26612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2135.826074][T26612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2135.878145][T26934] sctp: [Deprecated]: syz.2.4633 (pid 26934) Use of int in maxseg socket option. [ 2135.878145][T26934] Use struct sctp_assoc_value instead [ 2135.910927][T26612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2135.948347][T26934] netlink: 184472 bytes leftover after parsing attributes in process `syz.2.4633'. [ 2135.957855][T26612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2135.971233][T26612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2136.004631][T26612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2136.034672][T26612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2136.066915][T26612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2136.091178][T26612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2136.101815][T19025] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 2136.129427][T26612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2136.153573][T26612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2136.261640][T26612] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2136.278845][T26612] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2136.291360][T26612] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2136.302747][T19025] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2136.315130][T19025] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2136.325064][T26612] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2136.341121][T19025] usb 4-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 2136.371286][T19025] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2136.379681][T26941] sctp: [Deprecated]: syz.2.4635 (pid 26941) Use of int in maxseg socket option. [ 2136.379681][T26941] Use struct sctp_assoc_value instead [ 2136.415587][T19025] usb 4-1: config 0 descriptor?? [ 2136.454042][T26941] netlink: 184472 bytes leftover after parsing attributes in process `syz.2.4635'. [ 2136.697176][T23506] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2136.724974][T23506] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2136.750041][T26946] rdma_op ffff88807efc59f0 conn xmit_rdma 0000000000000000 [ 2136.891745][T24803] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2136.932680][T24803] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2137.216819][T21760] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 2137.499722][T21760] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2137.536357][T21760] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2137.576821][T21760] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2137.586334][T11668] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 2137.601460][T21760] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2137.643838][T21760] usb 1-1: Product: 抡֨顼쐼⃉ꝫ㧨㙘ܓ슪ꀡ⚃⶟墔 [ 2137.664742][T21760] usb 1-1: Manufacturer: 她蕋멳龜ؔ됛ꦆ뗮齔㗘మᆤ幽埍瀷쬎룱窛퍽黱覝轤㴓犂讯࣍䉙녒ⶇ扚邆镻㢗濇蕃鐍혣☲밉庙랸袰৽夂憬芣稐录빬旟깿ꦇ婞㘳௴ﺋ࣊绾鸓ᬪ哴s [ 2137.717595][T21760] usb 1-1: SerialNumber: syz [ 2137.808684][T11668] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 2137.841655][T11668] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2137.864809][T11668] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2137.895743][T11668] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2137.914306][T11668] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2137.933745][T11668] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2137.978146][T11668] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2138.003091][T11668] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2138.031682][T11668] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2138.072895][T21760] usb 1-1: 0:2 : does not exist [ 2138.078060][T11668] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2138.096166][T11668] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2138.115991][T21760] usb 1-1: USB disconnect, device number 54 [ 2138.124910][T11668] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2138.163538][T11668] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2138.198139][T11668] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2138.213726][T11668] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2138.228286][T11668] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2138.240841][T11668] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2138.252684][T11668] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2138.273499][T11668] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2138.282493][T11668] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2138.298697][T11668] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2138.311926][T11668] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2138.320911][T11668] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2138.330671][T11668] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 2138.356151][T11668] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2138.367293][T11668] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 2138.384418][T26953] udevd[26953]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2138.404056][T11668] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 2138.419717][T11668] usb 3-1: Product: syz [ 2138.430406][T11668] usb 3-1: Manufacturer: syz [ 2138.443842][T11668] usb 3-1: SerialNumber: syz [ 2138.462773][T11668] usb 3-1: config 0 descriptor?? [ 2138.489689][T11668] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 2138.871359][ C0] usb 3-1: yurex_control_callback - control failed: -71 [ 2138.894877][T19025] usbhid 4-1:0.0: can't add hid device: -71 [ 2138.901014][T19025] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2138.915777][ C0] usb 3-1: yurex_control_callback - control failed: -71 [ 2138.937088][ T9766] usb 3-1: USB disconnect, device number 51 [ 2138.984461][T19025] usb 4-1: USB disconnect, device number 49 [ 2139.010353][ T9766] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 2139.377647][T26983] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4641'. [ 2139.389055][T26982] rdma_op ffff88802ed8f1f0 conn xmit_rdma 0000000000000000 [ 2139.426088][T26983] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4641'. [ 2139.597644][T26985] sctp: [Deprecated]: syz.4.4642 (pid 26985) Use of int in maxseg socket option. [ 2139.597644][T26985] Use struct sctp_assoc_value instead [ 2139.627742][T26985] netlink: 184472 bytes leftover after parsing attributes in process `syz.4.4642'. [ 2139.764923][ T9766] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 2139.944323][T26991] sctp: [Deprecated]: syz.2.4644 (pid 26991) Use of int in maxseg socket option. [ 2139.944323][T26991] Use struct sctp_assoc_value instead [ 2139.992416][T26991] netlink: 184472 bytes leftover after parsing attributes in process `syz.2.4644'. [ 2140.010257][ T9766] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2140.034807][ T9766] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2140.063889][ T9766] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2140.089130][ T9766] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2140.102141][ T9766] usb 4-1: Product: 抡֨顼쐼⃉ꝫ㧨㙘ܓ슪ꀡ⚃⶟墔蓼༣鴾Ꚑ儧홳ڋ쪗鸎 [ 2140.163127][ T9766] usb 4-1: Manufacturer: 她蕋멳龜ؔ됛ꦆ뗮齔㗘మᆤ幽埍瀷쬎룱窛퍽黱覝轤㴓犂讯࣍䉙녒ⶇ扚邆镻㢗濇蕃鐍혣☲밉庙랸袰৽夂憬芣稐录빬旟깿ꦇ婞㘳௴ﺋ࣊绾鸓ᬪ哴s [ 2140.227055][ T9766] usb 4-1: SerialNumber: syz [ 2140.526738][T26986] ALSA: mixer_oss: invalid OSS volume '' [ 2140.621973][ T9766] usb 4-1: 0:2 : does not exist [ 2140.672456][T27004] netlink: 'syz.4.4648': attribute type 1 has an invalid length. [ 2140.681044][ T9766] usb 4-1: USB disconnect, device number 50 [ 2140.941986][T27004] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4648'. [ 2140.970819][T26732] udevd[26732]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2141.026910][T27004] tap0: tun_chr_ioctl cmd 1074025677 [ 2141.052689][T27004] tap0: linktype set to 270 [ 2141.136366][T26997] ALSA: mixer_oss: invalid OSS volume '' [ 2141.405245][T27017] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4652'. [ 2141.455511][T27017] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4652'. [ 2141.678435][T27019] netlink: 'syz.3.4653': attribute type 1 has an invalid length. [ 2141.786419][T27006] ALSA: mixer_oss: invalid OSS volume '' [ 2142.000727][T27019] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4653'. [ 2142.074463][T27019] tap0: tun_chr_ioctl cmd 1074025677 [ 2142.101261][T27019] tap0: linktype set to 270 [ 2142.747723][T27045] rdma_op ffff8880625f49f0 conn xmit_rdma 0000000000000000 [ 2143.164728][ T5146] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 2143.386933][ T5146] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2143.430709][ T5146] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2143.444304][ T5146] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2143.464045][ T5146] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2143.472348][ T5146] usb 3-1: Product: syz [ 2143.476984][ T5146] usb 3-1: Manufacturer: 抡֨顼쐼⃉ꝫ㧨㙘ܓ슪ꀡ⚃⶟墔蓼༣鴾Ꚑ儧홳ڋ쪗鸎 [ 2143.498242][ T5146] usb 3-1: SerialNumber: syz [ 2143.812478][ T5146] usb 3-1: 0:2 : does not exist [ 2143.886003][ T5146] usb 3-1: USB disconnect, device number 52 [ 2144.161137][T27058] netlink: 'syz.4.4662': attribute type 1 has an invalid length. [ 2144.188902][T26732] udevd[26732]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2144.436046][T27051] ALSA: mixer_oss: invalid OSS volume '' [ 2144.486696][T27058] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4662'. [ 2144.569101][T27058] tap0: tun_chr_ioctl cmd 1074025677 [ 2144.582425][T27058] tap0: linktype set to 270 [ 2144.763203][T27064] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4664'. [ 2144.782483][T27064] wg0: entered promiscuous mode [ 2144.803333][T27064] wg0: entered allmulticast mode [ 2144.826797][T27070] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4664'. [ 2144.847274][T27067] rdma_op ffff88807b3d79f0 conn xmit_rdma 0000000000000000 [ 2144.867841][T27070] wg0: left promiscuous mode [ 2144.936228][T27070] wg0: left allmulticast mode [ 2145.314684][T11668] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 2145.524404][T27061] ALSA: mixer_oss: invalid OSS volume '' [ 2145.538092][T11668] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2145.559723][T11668] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2145.603012][T11668] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2145.643319][T11668] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2145.691551][T11668] usb 3-1: Product: 抡֨顼쐼⃉ꝫ㧨㙘ܓ슪ꀡ⚃⶟墔蓼༣鴾Ꚑ儧홳ڋ쪗鸎 [ 2145.715704][T11668] usb 3-1: SerialNumber: syz [ 2146.002402][T27090] sctp: [Deprecated]: syz.4.4673 (pid 27090) Use of int in maxseg socket option. [ 2146.002402][T27090] Use struct sctp_assoc_value instead [ 2146.053388][T11668] usb 3-1: 0:2 : does not exist [ 2146.057563][T27090] netlink: 184472 bytes leftover after parsing attributes in process `syz.4.4673'. [ 2146.121463][T11668] usb 3-1: USB disconnect, device number 53 [ 2146.411482][T26732] udevd[26732]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2146.906933][T27107] netlink: 'syz.2.4676': attribute type 1 has an invalid length. [ 2147.175376][T27107] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4676'. [ 2148.042934][T27128] netlink: 'syz.4.4680': attribute type 1 has an invalid length. [ 2148.361379][T27128] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4680'. [ 2148.416807][T27118] ALSA: mixer_oss: invalid OSS volume '' [ 2148.529080][T27128] tap0: tun_chr_ioctl cmd 1074025677 [ 2148.552575][T27128] tap0: linktype set to 270 [ 2148.602277][T27138] netlink: 'syz.0.4683': attribute type 1 has an invalid length. [ 2148.943638][T27138] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4683'. [ 2149.012342][T27138] tap0: tun_chr_ioctl cmd 1074025677 [ 2149.029181][T27138] tap0: linktype set to 270 [ 2149.057445][T27149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2149.093354][T27151] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2149.178444][T27153] rdma_op ffff88801fad89f0 conn xmit_rdma 0000000000000000 [ 2149.337261][T27155] sctp: [Deprecated]: syz.0.4687 (pid 27155) Use of int in maxseg socket option. [ 2149.337261][T27155] Use struct sctp_assoc_value instead [ 2149.418707][T27155] netlink: 184472 bytes leftover after parsing attributes in process `syz.0.4687'. [ 2149.458479][T27148] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2149.586163][ T9766] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 2149.811261][ T9766] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2149.838249][ T9766] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2149.870945][ T9766] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2149.894317][ T9766] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2149.917292][ T9766] usb 4-1: Product: 抡֨顼쐼⃉ꝫ㧨㙘ܓ슪ꀡ⚃⶟墔蓼༣鴾Ꚑ儧홳ڋ쪗鸎 [ 2149.945710][ T9766] usb 4-1: SerialNumber: syz [ 2149.968362][T27163] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.4689'. [ 2150.515895][T27178] rdma_op ffff88807a07d1f0 conn xmit_rdma 0000000000000000 [ 2150.621469][ T9766] usb 4-1: 0:2 : does not exist [ 2150.709252][ T9766] usb 4-1: USB disconnect, device number 51 [ 2151.017239][T26732] udevd[26732]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2151.053757][ T5144] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 2151.135011][T27186] rdma_op ffff88807dae09f0 conn xmit_rdma 0000000000000000 [ 2151.259367][ T5144] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2151.287273][ T5144] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2151.307233][ T5144] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2151.321507][ T5144] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2151.340815][ T5144] usb 3-1: Product: 抡֨顼쐼⃉ꝫ㧨㙘ܓ슪ꀡ⚃⶟墔 [ 2151.357765][ T5144] usb 3-1: Manufacturer: 她蕋멳龜ؔ됛ꦆ뗮齔㗘మᆤ幽埍瀷쬎룱窛퍽黱覝轤㴓犂讯࣍䉙녒ⶇ扚邆镻㢗濇蕃鐍혣☲밉庙랸袰৽夂憬芣稐录빬旟깿ꦇ婞㘳௴ﺋ࣊绾鸓ᬪ哴s [ 2151.404028][ T5144] usb 3-1: SerialNumber: syz [ 2151.484746][ T9766] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 2151.528864][T27189] rdma_op ffff888061a7f9f0 conn xmit_rdma 0000000000000000 [ 2151.682362][ T9766] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2151.709428][T27179] ALSA: mixer_oss: invalid OSS volume '' [ 2151.715816][ T9766] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2151.753546][ T5144] usb 3-1: 0:2 : does not exist [ 2151.766340][ T9766] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2151.794647][ T9766] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2151.826926][ T9766] usb 2-1: Manufacturer: 她蕋멳龜ؔ됛ꦆ뗮齔㗘మᆤ幽埍瀷쬎룱窛퍽黱覝轤㴓犂讯࣍䉙녒ⶇ扚邆镻㢗濇蕃鐍혣☲밉庙랸袰৽夂憬芣稐录빬旟깿ꦇ婞㘳௴ﺋ࣊绾鸓ᬪ哴s [ 2151.874951][ T5144] usb 3-1: USB disconnect, device number 54 [ 2151.902223][ T9766] usb 2-1: SerialNumber: syz [ 2151.975310][ T5147] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 2152.103094][T26732] udevd[26732]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2152.173928][ T5147] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2152.206125][ T5147] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2152.232241][ T9766] usb 2-1: 0:2 : does not exist [ 2152.244011][ T5147] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2152.285305][ T5147] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2152.301912][ T9766] usb 2-1: USB disconnect, device number 65 [ 2152.314857][ T5147] usb 4-1: Product: syz [ 2152.324220][ T5147] usb 4-1: Manufacturer: 抡֨顼쐼⃉ꝫ㧨㙘ܓ슪ꀡ⚃⶟墔蓼༣鴾Ꚑ儧홳ڋ쪗鸎 [ 2152.352469][ T5147] usb 4-1: SerialNumber: syz [ 2152.576475][T26732] udevd[26732]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2152.674341][ T5147] usb 4-1: 0:2 : does not exist [ 2152.773508][ T5147] usb 4-1: USB disconnect, device number 52 [ 2153.083656][T26732] udevd[26732]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2153.461387][T27197] ALSA: mixer_oss: invalid OSS volume '' [ 2153.836076][T27219] sctp: [Deprecated]: syz.3.4706 (pid 27219) Use of int in maxseg socket option. [ 2153.836076][T27219] Use struct sctp_assoc_value instead [ 2153.903535][T27221] netlink: 184472 bytes leftover after parsing attributes in process `syz.3.4706'. [ 2154.059139][T27226] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.4705'. [ 2154.588166][T17125] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2154.604248][T17125] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2154.613120][T17125] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2154.635642][T17125] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2154.650451][T17125] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2154.658292][T17125] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2155.987053][T27244] rdma_op ffff88807fd941f0 conn xmit_rdma 0000000000000000 [ 2155.995441][T24732] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2156.226004][T24732] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2156.281837][T27251] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.4713'. [ 2156.342012][ T29] audit: type=1400 audit(1721275359.617:2118): avc: denied { bind } for pid=27246 comm="syz.2.4713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2156.420421][ T5146] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 2156.526350][T24732] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2156.684802][T17125] Bluetooth: hci4: command tx timeout [ 2156.692986][T24732] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2156.704774][ T5146] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2156.734655][ T5146] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2156.784982][ T5146] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2156.816256][ T5146] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2156.862633][ T5146] usb 2-1: Product: 抡֨顼쐼⃉ꝫ㧨㙘ܓ슪ꀡ⚃⶟墔蓼༣鴾Ꚑ儧홳ڋ쪗鸎 [ 2156.883802][ T5146] usb 2-1: Manufacturer: 她蕋멳龜ؔ됛ꦆ뗮齔㗘మᆤ幽埍瀷쬎룱窛퍽黱覝轤㴓犂讯࣍䉙녒ⶇ扚邆镻㢗濇蕃鐍혣☲밉庙랸袰৽夂憬芣稐录빬旟깿ꦇ婞㘳௴ﺋ࣊绾鸓ᬪ哴s [ 2156.915143][ T5146] usb 2-1: SerialNumber: syz [ 2157.220284][ T5146] usb 2-1: 0:2 : does not exist [ 2157.273017][ T5146] usb 2-1: USB disconnect, device number 66 [ 2157.517439][T24732] team0: left allmulticast mode [ 2157.528345][T24732] team_slave_0: left allmulticast mode [ 2158.310921][T26732] udevd[26732]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2158.365139][T24732] team_slave_1: left allmulticast mode [ 2158.370914][T24732] bridge0: port 3(team0) entered disabled state [ 2158.452152][T24732] bridge_slave_1: left allmulticast mode [ 2158.472647][T24732] bridge_slave_1: left promiscuous mode [ 2158.478983][T24732] bridge0: port 2(bridge_slave_1) entered disabled state [ 2158.493216][T24732] bridge_slave_0: left allmulticast mode [ 2158.502481][T24732] bridge_slave_0: left promiscuous mode [ 2158.525869][T17125] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 2158.532601][T24732] bridge0: port 1(bridge_slave_0) entered disabled state [ 2158.767513][T17125] Bluetooth: hci4: command tx timeout [ 2158.850392][T27275] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.4718'. [ 2158.911983][T27264] ALSA: mixer_oss: invalid OSS volume '' [ 2159.901175][T24732] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2159.918477][T24732] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2159.945082][T24732] bond0 (unregistering): Released all slaves [ 2159.970295][T27229] chnl_net:caif_netlink_parms(): no params data found [ 2160.225868][T27289] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.4722'. [ 2160.860787][T17125] Bluetooth: hci4: command tx timeout [ 2160.873596][ T1243] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.882404][ T1243] ieee802154 phy1 wpan1: encryption failed: -22 [ 2160.942831][T27312] sctp: [Deprecated]: syz.0.4725 (pid 27312) Use of int in maxseg socket option. [ 2160.942831][T27312] Use struct sctp_assoc_value instead [ 2160.997475][T27314] netlink: 184472 bytes leftover after parsing attributes in process `syz.0.4725'. [ 2161.101958][T27318] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2161.245014][T27229] bridge0: port 1(bridge_slave_0) entered blocking state [ 2161.246079][T27318] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4726'. [ 2161.252181][T27229] bridge0: port 1(bridge_slave_0) entered disabled state [ 2161.312748][T27229] bridge_slave_0: entered allmulticast mode [ 2161.335442][T27229] bridge_slave_0: entered promiscuous mode [ 2161.354047][ T29] audit: type=1400 audit(1721275364.627:2119): avc: denied { bind } for pid=27316 comm="syz.1.4726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2161.362292][T27229] bridge0: port 2(bridge_slave_1) entered blocking state [ 2161.433760][T27229] bridge0: port 2(bridge_slave_1) entered disabled state [ 2161.434768][ T29] audit: type=1400 audit(1721275364.677:2120): avc: denied { connect } for pid=27316 comm="syz.1.4726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2161.452542][T27325] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2161.730126][T27229] bridge_slave_1: entered allmulticast mode [ 2161.730347][ T29] audit: type=1400 audit(1721275364.687:2121): avc: denied { read } for pid=27316 comm="syz.1.4726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2161.828251][T27229] bridge_slave_1: entered promiscuous mode [ 2162.301586][T24732] hsr_slave_0: left promiscuous mode [ 2162.331329][T24732] hsr_slave_1: left promiscuous mode [ 2162.349381][T24732] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2162.368306][ T29] audit: type=1400 audit(1721275365.637:2122): avc: denied { getopt } for pid=27316 comm="syz.1.4726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2162.399971][T24732] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2162.411591][T11668] hid-generic 0000:0000:FFFFFFFD.0001: unknown main item tag 0x0 [ 2162.421845][T11668] hid-generic 0000:0000:FFFFFFFD.0001: unknown main item tag 0x0 [ 2162.430096][T11668] hid-generic 0000:0000:FFFFFFFD.0001: unknown main item tag 0x0 [ 2162.438277][T11668] hid-generic 0000:0000:FFFFFFFD.0001: unknown main item tag 0x0 [ 2162.445737][T24732] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2162.446802][T11668] hid-generic 0000:0000:FFFFFFFD.0001: unknown main item tag 0x0 [ 2162.464522][T11668] hid-generic 0000:0000:FFFFFFFD.0001: unknown main item tag 0x0 [ 2162.466740][T24732] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2162.481081][T11668] hid-generic 0000:0000:FFFFFFFD.0001: unknown main item tag 0x0 [ 2162.490814][T11668] hid-generic 0000:0000:FFFFFFFD.0001: unknown main item tag 0x0 [ 2162.511849][T11668] hid-generic 0000:0000:FFFFFFFD.0001: unknown main item tag 0x0 [ 2162.519945][T11668] hid-generic 0000:0000:FFFFFFFD.0001: unknown main item tag 0x0 [ 2162.530146][T11668] hid-generic 0000:0000:FFFFFFFD.0001: unknown main item tag 0x0 [ 2162.542298][T11668] hid-generic 0000:0000:FFFFFFFD.0001: unknown main item tag 0x0 [ 2162.552962][T24732] veth1_macvtap: left promiscuous mode [ 2162.554026][T11668] hid-generic 0000:0000:FFFFFFFD.0001: unknown main item tag 0x0 [ 2162.569162][T24732] veth0_macvtap: left promiscuous mode [ 2162.576764][T11668] hid-generic 0000:0000:FFFFFFFD.0001: unknown main item tag 0x0 [ 2162.586021][T24732] veth1_vlan: left promiscuous mode [ 2162.590684][T11668] hid-generic 0000:0000:FFFFFFFD.0001: unknown main item tag 0x0 [ 2162.601555][T24732] veth0_vlan: left promiscuous mode [ 2162.601960][T11668] hid-generic 0000:0000:FFFFFFFD.0001: unknown main item tag 0x0 [ 2162.627910][T11668] hid-generic 0000:0000:FFFFFFFD.0001: unknown main item tag 0x0 [ 2162.641450][T11668] hid-generic 0000:0000:FFFFFFFD.0001: unknown main item tag 0x0 [ 2162.653941][T11668] hid-generic 0000:0000:FFFFFFFD.0001: unknown main item tag 0x0 [ 2162.669604][T11668] hid-generic 0000:0000:FFFFFFFD.0001: unknown main item tag 0x0 [ 2162.682073][T11668] hid-generic 0000:0000:FFFFFFFD.0001: unknown main item tag 0x0 [ 2162.699562][T11668] hid-generic 0000:0000:FFFFFFFD.0001: unknown main item tag 0x0 [ 2162.714061][T11668] hid-generic 0000:0000:FFFFFFFD.0001: unknown main item tag 0x0 [ 2162.732538][T11668] hid-generic 0000:0000:FFFFFFFD.0001: unknown main item tag 0x0 [ 2162.741638][T11668] hid-generic 0000:0000:FFFFFFFD.0001: unknown main item tag 0x0 [ 2162.795455][T11668] hid-generic 0000:0000:FFFFFFFD.0001: unknown main item tag 0x0 [ 2162.818049][T11668] hid-generic 0000:0000:FFFFFFFD.0001: unknown main item tag 0x0 [ 2162.833818][T11668] hid-generic 0000:0000:FFFFFFFD.0001: unknown main item tag 0x0 [ 2162.852450][T11668] hid-generic 0000:0000:FFFFFFFD.0001: unknown main item tag 0x0 [ 2162.871902][T11668] hid-generic 0000:0000:FFFFFFFD.0001: unknown main item tag 0x0 [ 2162.883134][T11668] hid-generic 0000:0000:FFFFFFFD.0001: unknown main item tag 0x0 [ 2162.907969][T11668] hid-generic 0000:0000:FFFFFFFD.0001: unknown main item tag 0x0 [ 2162.924890][T17125] Bluetooth: hci4: command tx timeout [ 2162.941675][T11668] hid-generic 0000:0000:FFFFFFFD.0001: unknown main item tag 0x0 [ 2162.951177][T11668] hid-generic 0000:0000:FFFFFFFD.0001: unknown main item tag 0x0 [ 2162.969053][T11668] hid-generic 0000:0000:FFFFFFFD.0001: unknown main item tag 0x0 [ 2162.981006][T11668] hid-generic 0000:0000:FFFFFFFD.0001: unknown main item tag 0x0 [ 2162.993048][T11668] hid-generic 0000:0000:FFFFFFFD.0001: unknown main item tag 0x0 [ 2163.013366][T11668] hid-generic 0000:0000:FFFFFFFD.0001: unknown main item tag 0x0 [ 2163.057572][T11668] hid-generic 0000:0000:FFFFFFFD.0001: unknown main item tag 0x0 [ 2163.084789][T11668] hid-generic 0000:0000:FFFFFFFD.0001: unknown main item tag 0x0 [ 2163.113070][T11668] hid-generic 0000:0000:FFFFFFFD.0001: unknown main item tag 0x0 [ 2163.146456][T11668] hid-generic 0000:0000:FFFFFFFD.0001: unknown main item tag 0x0 [ 2163.154348][T11668] hid-generic 0000:0000:FFFFFFFD.0001: unknown main item tag 0x0 [ 2163.208499][T11668] hid-generic 0000:0000:FFFFFFFD.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 2163.543814][T27353] overlayfs: missing 'lowerdir' [ 2163.854394][T27361] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.4735'. [ 2164.712914][T24732] team_slave_1 (unregistering): left promiscuous mode [ 2164.740678][T24732] team0 (unregistering): Port device team_slave_1 removed [ 2164.979465][T24732] team_slave_0 (unregistering): left promiscuous mode [ 2165.057991][T24732] team0 (unregistering): Port device team_slave_0 removed [ 2167.316878][T17125] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 2167.611877][T27229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2167.682213][T27380] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.4741'. [ 2167.718105][T27229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2168.125749][T27390] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2168.168818][T27229] team0: Port device team_slave_0 added [ 2168.244115][T27229] team0: Port device team_slave_1 added [ 2168.387161][T27397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2168.547549][T17125] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 2168.554239][T17125] Bluetooth: Wrong link type (-22) [ 2168.561077][T17125] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 2168.568375][T17125] Bluetooth: Wrong link type (-22) [ 2168.575186][T17125] Bluetooth: hci3: link tx timeout [ 2168.581631][T17125] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 2168.595997][T27229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2168.603066][T27229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2168.630480][T27229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2168.784123][T27229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2168.811821][T27229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2168.874014][T27229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2169.303810][T24732] IPVS: stop unused estimator thread 0... [ 2170.615074][T21782] Bluetooth: hci3: command 0x0406 tx timeout [ 2170.987375][T27229] hsr_slave_0: entered promiscuous mode [ 2171.038214][T27229] hsr_slave_1: entered promiscuous mode [ 2171.050596][T27229] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2171.074751][T27229] Cannot create hsr debugfs directory [ 2174.215163][ T5144] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 2279.044539][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 2279.051526][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P11668/1:b..l [ 2279.059972][ C1] rcu: (detected by 1, t=10503 jiffies, g=193505, q=351 ncpus=2) [ 2279.067756][ C1] task:kworker/0:0 state:R running task stack:22256 pid:11668 tgid:11668 ppid:2 flags:0x00004000 [ 2279.080375][ C1] Workqueue: events_power_efficient gc_worker [ 2279.086456][ C1] Call Trace: [ 2279.089721][ C1] [ 2279.092633][ C1] __schedule+0xe37/0x5490 [ 2279.097048][ C1] ? hlock_class+0x4e/0x130 [ 2279.101540][ C1] ? __pfx_mark_lock+0x10/0x10 [ 2279.106290][ C1] ? __pfx___schedule+0x10/0x10 [ 2279.111125][ C1] ? mark_lock+0xb5/0xc60 [ 2279.115434][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 2279.120612][ C1] ? find_held_lock+0x2d/0x110 [ 2279.125361][ C1] ? mark_held_locks+0x9f/0xe0 [ 2279.130105][ C1] preempt_schedule_irq+0x51/0x90 [ 2279.135119][ C1] irqentry_exit+0x36/0x90 [ 2279.139532][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2279.145511][ C1] RIP: 0010:gc_worker+0x2e1/0x1770 [ 2279.150617][ C1] Code: 00 00 48 c7 c7 e8 e8 e5 8f e8 8b f2 5e f8 9c 5b 81 e3 00 02 00 00 31 ff 48 89 de e8 c9 12 81 f8 48 85 db 58 0f 85 3d 10 00 00 8a 17 81 f8 eb 07 e8 83 17 81 f8 f3 90 44 8b 35 aa 02 d9 06 31 [ 2279.170211][ C1] RSP: 0000:ffffc900032f7bc8 EFLAGS: 00000293 [ 2279.176261][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff890cf1f1 [ 2279.184215][ C1] RDX: ffff8880203e3c00 RSI: ffffffff890cf200 RDI: 0000000000000007 [ 2279.192255][ C1] RBP: ffff88801e000000 R08: 0000000000000007 R09: 0000000000000000 [ 2279.200212][ C1] R10: 0000000000000000 R11: 0000000000000003 R12: 000000000002e099 [ 2279.208170][ C1] R13: dffffc0000000000 R14: 000000000005c131 R15: 0000000000040000 [ 2279.216212][ C1] ? gc_worker+0xeb1/0x1770 [ 2279.220720][ C1] ? gc_worker+0xec0/0x1770 [ 2279.225214][ C1] ? gc_worker+0xec0/0x1770 [ 2279.229793][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 2279.234800][ C1] ? __pfx_gc_worker+0x10/0x10 [ 2279.239692][ C1] process_one_work+0x9c5/0x1b40 [ 2279.244660][ C1] ? __pfx_delayed_vfree_work+0x10/0x10 [ 2279.250212][ C1] ? __pfx_process_one_work+0x10/0x10 [ 2279.255576][ C1] ? assign_work+0x1a0/0x250 [ 2279.260152][ C1] worker_thread+0x6c8/0xf20 [ 2279.264731][ C1] ? __pfx_worker_thread+0x10/0x10 [ 2279.269829][ C1] kthread+0x2c1/0x3a0 [ 2279.273891][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 2279.279078][ C1] ? __pfx_kthread+0x10/0x10 [ 2279.283657][ C1] ret_from_fork+0x45/0x80 [ 2279.288065][ C1] ? __pfx_kthread+0x10/0x10 [ 2279.292659][ C1] ret_from_fork_asm+0x1a/0x30 [ 2279.297416][ C1] [ 2279.300422][ C1] rcu: rcu_preempt kthread starved for 10493 jiffies! g193505 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 2279.311754][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 2279.321704][ C1] rcu: RCU grace-period kthread stack dump: [ 2279.327573][ C1] task:rcu_preempt state:R running task stack:27872 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 2279.339285][ C1] Call Trace: [ 2279.342638][ C1] [ 2279.345559][ C1] __schedule+0xe37/0x5490 [ 2279.349964][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 2279.355148][ C1] ? preempt_schedule_common+0x44/0xc0 [ 2279.360610][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 2279.365997][ C1] ? __pfx___schedule+0x10/0x10 [ 2279.370838][ C1] ? schedule+0x298/0x350 [ 2279.375170][ C1] ? __pfx_lock_release+0x10/0x10 [ 2279.380177][ C1] ? __pfx___mod_timer+0x10/0x10 [ 2279.385099][ C1] ? lock_acquire+0x1b1/0x560 [ 2279.389756][ C1] ? lockdep_init_map_type+0x16d/0x7d0 [ 2279.395198][ C1] schedule+0xe7/0x350 [ 2279.399254][ C1] schedule_timeout+0x136/0x2a0 [ 2279.404107][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 2279.409487][ C1] ? __pfx_process_timeout+0x10/0x10 [ 2279.414764][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 2279.420556][ C1] ? prepare_to_swait_event+0xf0/0x470 [ 2279.425999][ C1] rcu_gp_fqs_loop+0x1eb/0xb00 [ 2279.430753][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 2279.436024][ C1] ? rcu_gp_init+0xc82/0x1630 [ 2279.440704][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 2279.445906][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 2279.451713][ C1] rcu_gp_kthread+0x271/0x380 [ 2279.456391][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2279.461590][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 2279.466783][ C1] ? __kthread_parkme+0x148/0x220 [ 2279.471796][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2279.477004][ C1] kthread+0x2c1/0x3a0 [ 2279.481071][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 2279.486257][ C1] ? __pfx_kthread+0x10/0x10 [ 2279.490835][ C1] ret_from_fork+0x45/0x80 [ 2279.495248][ C1] ? __pfx_kthread+0x10/0x10 [ 2279.499832][ C1] ret_from_fork_asm+0x1a/0x30 [ 2279.504605][ C1] [ 2279.507611][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 2279.513921][ C1] Sending NMI from CPU 1 to CPUs 0: [ 2279.519125][ C0] NMI backtrace for cpu 0 skipped: idling at acpi_safe_halt+0x1a/0x20 [ 2280.305657][ T1243] ieee802154 phy0 wpan0: encryption failed: -22 [ 2280.312004][ T1243] ieee802154 phy1 wpan1: encryption failed: -22 SYZFAIL: failed to send rpc fd=3 want=26824 sent=0 n=-1 (errno 32: Broken pipe) [ 2282.234217][T27452] syz_tun (unregistering): left allmulticast mode [ 2282.439658][ T5144] usb 1-1: device descriptor read/all, error -71 [ 2282.446188][T17125] Bluetooth: hci4: command 0x0406 tx timeout [ 2282.757014][T24732] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2282.998797][T24732] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2283.143597][T24732] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2283.321722][T24732] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2283.594308][T24732] team0: left allmulticast mode [ 2283.601383][T24732] team_slave_0: left allmulticast mode [ 2283.613761][T24732] team_slave_1: left allmulticast mode [ 2283.619985][T24732] bridge0: port 3(team0) entered disabled state [ 2283.636679][T24732] bridge_slave_1: left allmulticast mode [ 2283.642890][T24732] bridge_slave_1: left promiscuous mode [ 2283.653338][T24732] bridge0: port 2(bridge_slave_1) entered disabled state [ 2283.664361][T24732] bridge_slave_0: left allmulticast mode [ 2283.670283][T24732] bridge_slave_0: left promiscuous mode [ 2283.677436][T24732] bridge0: port 1(bridge_slave_0) entered disabled state [ 2283.728813][ T1243] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.735415][ T1243] ieee802154 phy1 wpan1: encryption failed: -22 [ 2284.413179][T24732] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2284.432274][T24732] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2284.443672][T24732] bond0 (unregistering): Released all slaves [ 2284.725385][T24732] hsr_slave_0: left promiscuous mode [ 2284.731647][T24732] hsr_slave_1: left promiscuous mode [ 2284.744175][T24732] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2284.754434][T24732] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2284.770808][T24732] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2284.779287][T24732] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2284.812090][T24732] veth1_macvtap: left promiscuous mode [ 2284.821783][T24732] veth0_macvtap: left promiscuous mode [ 2284.829583][T24732] veth1_vlan: left promiscuous mode [ 2284.835170][T24732] veth0_vlan: left promiscuous mode [ 2285.573661][T24732] team_slave_1 (unregistering): left promiscuous mode [ 2285.586726][T24732] team0 (unregistering): Port device team_slave_1 removed [ 2285.630137][T24732] team_slave_0 (unregistering): left promiscuous mode [ 2285.641377][T24732] team0 (unregistering): Port device team_slave_0 removed [ 2286.393250][T24732] IPVS: stop unused estimator thread 0... [ 2286.546732][T24732] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2286.635355][T24732] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2286.763071][T24732] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2286.871218][T24732] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2287.171892][T24732] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2287.274365][T24732] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2287.353009][T24732] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2287.430611][T24732] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2287.666171][T24732] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2287.769991][T24732] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2287.862830][T24732] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2287.952236][T24732] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2288.169980][T24732] bridge_slave_1: left allmulticast mode [ 2288.177579][T24732] bridge_slave_1: left promiscuous mode [ 2288.184163][T24732] bridge0: port 2(bridge_slave_1) entered disabled state [ 2288.196980][T24732] bridge_slave_0: left allmulticast mode [ 2288.203119][T24732] bridge_slave_0: left promiscuous mode [ 2288.209828][T24732] bridge0: port 1(bridge_slave_0) entered disabled state [ 2288.221691][T24732] bridge_slave_1: left allmulticast mode [ 2288.227700][T24732] bridge_slave_1: left promiscuous mode [ 2288.233495][T24732] bridge0: port 2(bridge_slave_1) entered disabled state [ 2288.246255][T24732] bridge_slave_0: left allmulticast mode [ 2288.253222][T24732] bridge_slave_0: left promiscuous mode [ 2288.261524][T24732] bridge0: port 1(bridge_slave_0) entered disabled state [ 2288.276551][T24732] team0: left allmulticast mode [ 2288.281443][T24732] team_slave_0: left allmulticast mode [ 2288.287688][T24732] team_slave_1: left allmulticast mode [ 2288.293501][T24732] bridge0: port 3(team0) entered disabled state [ 2288.303688][T24732] bridge_slave_1: left allmulticast mode [ 2288.309689][T24732] bridge_slave_1: left promiscuous mode [ 2288.315779][T24732] bridge0: port 2(bridge_slave_1) entered disabled state [ 2288.324481][T24732] bridge_slave_0: left allmulticast mode [ 2288.330986][T24732] bridge_slave_0: left promiscuous mode [ 2288.337010][T24732] bridge0: port 1(bridge_slave_0) entered disabled state [ 2288.347420][T24732] bridge_slave_1: left allmulticast mode [ 2288.353588][T24732] bridge_slave_1: left promiscuous mode [ 2288.359666][T24732] bridge0: port 2(bridge_slave_1) entered disabled state [ 2288.370300][T24732] bridge_slave_0: left allmulticast mode [ 2288.376057][T24732] bridge_slave_0: left promiscuous mode [ 2288.381766][T24732] bridge0: port 1(bridge_slave_0) entered disabled state