last executing test programs: 7.411136073s ago: executing program 0 (id=2912): sched_setscheduler(0x0, 0x2, 0x0) clock_settime(0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000e80)={'filter\x00', 0xb001, 0x4, 0x3ac, 0x10c, 0x0, 0x1ec, 0x2cc, 0x2cc, 0x2cc, 0x7fffffe, 0x0, {[{{@arp={@empty, @local, 0xff000000, 0xff000000, 0xd, 0x6, {@mac=@broadcast, {[0xff, 0xff]}}, {@mac=@remote, {[0x0, 0xff, 0xff, 0x0, 0xff]}}, 0x1, 0x2, 0x7ff, 0x2, 0xfffb, 0x7f6, 'wlan1\x00', 'veth0_vlan\x00', {0xff}, {}, 0x0, 0x28}, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @rand_addr=0x64010111, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}}}, {{@uncond, 0xbc, 0xe0, 0x0, {0x0, 0x1e03}}, @unspec=@STANDARD={0x24, '\x00', 0x0, 0x10c}}, {{@uncond, 0xbc, 0xe0}, @unspec=@CLASSIFY={0x24, 'CLASSIFY\x00', 0x0, {0x31caf518}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x3fc) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2981) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600, 0x0, 0x2000]}}], 0xffc8) 7.056390688s ago: executing program 1 (id=2915): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) r5 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 5.742417829s ago: executing program 1 (id=2917): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x78, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x40, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0xc, 0x7, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "f5000000"}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x114}}, 0x0) 5.517485333s ago: executing program 1 (id=2918): creat(&(0x7f0000000000)='./file0\x00', 0x108) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x10, 0x0) read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x1, 0xc18da8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x78, 0x0, 0x0, {0xffffffffffffffff, 0x2, 0x0, {0x0, 0x4, 0x0, 0x101, 0x0, 0xfffffffffffffffc, 0x8000000, 0x8000, 0x200, 0x8000, 0x0, r2, r3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0xa4901, 0x0) write$tcp_congestion(r4, &(0x7f00000000c0)='lp\x00', 0xfffffdef) r5 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) recvmmsg(r5, &(0x7f0000008000)=[{{0x0, 0x0, &(0x7f00000001c0)}, 0x2}], 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) listen(r7, 0x3) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) creat(&(0x7f00000002c0)='./file0\x00', 0x0) 3.78989897s ago: executing program 0 (id=2924): mount(0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) execve(0x0, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000140), 0x3ffffffffffffffd, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000300)={0x6, 0x8000, 0x9}) r4 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000004c0)={0x0, 0x16, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r6, 0x0, 0x0, 0x0, 0x0, [0x0], [0x0, 0x1, 0x0, 0x1], [0x0, 0x20, 0x0, 0x80000000], [0x0, 0x0, 0x4]}) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000100)={r7}) ioctl$DRM_IOCTL_GEM_FLINK(r4, 0xc008640a, &(0x7f0000000000)={r7}) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) 2.636057809s ago: executing program 0 (id=2927): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100002e0001b7b70000000000000001"], 0x114}], 0x1}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000d00)=0x2b56, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) recvfrom$packet(r2, 0x0, 0x0, 0x2000, 0x0, 0x0) recvmmsg(r1, &(0x7f0000006b40)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x40000000, 0x0) 2.635857749s ago: executing program 1 (id=2928): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@redirect_dir_off}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) 2.51015986s ago: executing program 3 (id=2930): bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x123) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x54, 0x0, 0x1, 0x3, 0x0, 0x0, {0x5, 0x0, 0x9}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x9}, @CTA_ZONE={0x6}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x7f}, @CTA_NAT_DST={0x20, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010101}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @remote}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008005}, 0x11) 2.117897336s ago: executing program 3 (id=2932): socketpair$unix(0x1, 0x2, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0xfffffffe, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x0, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x767cdaec, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x6, 0x5, 0xb, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x7f, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.817944992s ago: executing program 1 (id=2933): fsopen(0x0, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000080), 0x10) listen(r0, 0x0) accept4$llc(r0, 0x0, 0x0, 0x0) 1.726505623s ago: executing program 2 (id=2934): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0x8}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3}}]}}]}, 0x48}}, 0x0) 1.645767554s ago: executing program 3 (id=2935): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xe, 0xfff3}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x1}}}}]}, 0x40}}, 0x40080) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000200)={0x4376ea830d56d49d}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.637226894s ago: executing program 0 (id=2936): mount(0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) execve(0x0, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000140), 0x3ffffffffffffffd, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000300)={0x6, 0x8000, 0x9}) r3 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000004c0)={0x0, 0x16, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x0, [0x0], [0x0, 0x1, 0x0, 0x1], [0x0, 0x20, 0x0, 0x80000000], [0x0, 0x0, 0x4]}) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000100)={r6}) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000000)={r6}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) 1.371278608s ago: executing program 2 (id=2937): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 1.321436559s ago: executing program 3 (id=2938): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) r5 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 1.221898401s ago: executing program 2 (id=2939): r0 = syz_open_dev$sndctrl(&(0x7f0000000340), 0xa7c6, 0x202) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, 0x0) 1.120545462s ago: executing program 2 (id=2940): bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x123) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x54, 0x0, 0x1, 0x3, 0x0, 0x0, {0x5, 0x0, 0x9}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x9}, @CTA_ZONE={0x6}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x7f}, @CTA_NAT_DST={0x20, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010101}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @remote}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008005}, 0x11) 1.019690754s ago: executing program 2 (id=2941): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@redirect_dir_off}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) 311.192275ms ago: executing program 0 (id=2942): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(0x0, r0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)={0x20, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x60010}, 0x4) 209.232077ms ago: executing program 3 (id=2943): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x6, 0x32315559, 0x3, @discrete={0x7, 0x5}}) 173.773347ms ago: executing program 1 (id=2944): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000140)={0x4000000, 0x4000002, 0x2}) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000040)={0x4000000, 0x400000, 0x7fffffffffffffff}) 129.917079ms ago: executing program 2 (id=2952): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) r5 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 685.76µs ago: executing program 3 (id=2945): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100002e0001b7b70000000000000001"], 0x114}], 0x1}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000d00)=0x2b56, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) recvfrom$packet(r2, 0x0, 0x0, 0x2000, 0x0, 0x0) recvmmsg(r1, &(0x7f0000006b40)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x40000000, 0x0) 0s ago: executing program 0 (id=2954): fsopen(0x0, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000080), 0x10) listen(r0, 0x0) accept4$llc(r0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): d 2-1:0.0: can't add hid device: -71 [ 486.098941][ T5835] usbhid: probe of 2-1:0.0 failed with error -71 [ 486.116485][ T5835] usb 2-1: USB disconnect, device number 39 [ 486.204309][ T5858] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 486.384757][ T5858] usb 4-1: Using ep0 maxpacket: 16 [ 487.134548][ T5858] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 487.150204][ T5858] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 487.167268][ T5858] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.184517][ T5858] usb 4-1: Product: syz [ 487.194185][ T5858] usb 4-1: Manufacturer: syz [ 487.204704][ T5858] usb 4-1: SerialNumber: syz [ 487.223117][ T5858] usb 4-1: config 0 descriptor?? [ 487.244835][ T5858] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 487.278937][ T5858] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 487.379825][ T9446] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1127'. [ 488.340992][ T5858] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 488.794883][ T5858] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 488.814193][ T5858] em28xx 4-1:0.0: board has no eeprom [ 488.904189][ T5858] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 488.912094][ T5858] em28xx 4-1:0.0: dvb set to bulk mode. [ 488.946953][ T5835] em28xx 4-1:0.0: Binding DVB extension [ 488.954727][ T5858] usb 4-1: USB disconnect, device number 39 [ 488.969996][ T5858] em28xx 4-1:0.0: Disconnecting em28xx [ 489.092517][ T5835] em28xx 4-1:0.0: Registering input extension [ 489.109463][ T5858] em28xx 4-1:0.0: Closing input extension [ 489.144436][ T5858] em28xx 4-1:0.0: Freeing device [ 489.449510][ T9460] qrtr: Invalid version 0 [ 491.291396][ T5857] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 491.518428][ T5857] usb 1-1: Using ep0 maxpacket: 16 [ 491.537072][ T5857] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 491.551269][ T5857] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 491.574196][ T5857] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 491.604181][ T5857] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 491.613386][ T5857] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.642275][ T5857] usb 1-1: config 0 descriptor?? [ 492.076234][ T9488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1141'. [ 492.364344][ T5857] usbhid 1-1:0.0: can't add hid device: -71 [ 492.370412][ T5857] usbhid: probe of 1-1:0.0 failed with error -71 [ 492.436675][ T5857] usb 1-1: USB disconnect, device number 39 [ 495.534192][ T5857] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 495.724208][ T5857] usb 1-1: Using ep0 maxpacket: 16 [ 495.756763][ T5857] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 495.785430][ T5857] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 495.797187][ T5857] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 495.813798][ T5857] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 495.914164][ T5857] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.960801][ T5857] usb 1-1: config 0 descriptor?? [ 496.646755][ T9527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1154'. [ 496.844403][ T5857] usbhid 1-1:0.0: can't add hid device: -71 [ 496.850477][ T5857] usbhid: probe of 1-1:0.0 failed with error -71 [ 496.873707][ T5857] usb 1-1: USB disconnect, device number 40 [ 499.091600][ T9553] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 499.098643][ T9553] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 499.108251][ T9553] vhci_hcd vhci_hcd.0: Device attached [ 499.304617][ T5835] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 499.614675][ T5899] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 499.874275][ T5835] usb 3-1: Using ep0 maxpacket: 16 [ 499.993458][ T5835] usb 3-1: config 0 has no interfaces? [ 500.076281][ T5835] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 500.227918][ T5835] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.474552][ T5835] usb 3-1: config 0 descriptor?? [ 501.124321][ T5899] usb 37-1: device descriptor read/64, error -94770237 [ 501.454261][ T5899] usb 37-1: new low-speed USB device number 3 using vhci_hcd [ 501.899475][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.925387][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.001057][ T5857] usb 3-1: USB disconnect, device number 25 [ 502.010874][ T9556] vhci_hcd: connection closed [ 502.022877][ T1115] vhci_hcd: stop threads [ 502.052495][ T1115] vhci_hcd: release socket [ 502.058523][ T1115] vhci_hcd: disconnect device [ 503.174959][ T9585] bridge_slave_0: left allmulticast mode [ 503.194140][ T9585] bridge_slave_0: left promiscuous mode [ 503.201113][ T9585] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.252282][ T9585] bridge_slave_1: left allmulticast mode [ 503.284402][ T9585] bridge_slave_1: left promiscuous mode [ 503.290253][ T9585] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.562972][ T9585] bond0: (slave bond_slave_0): Releasing backup interface [ 504.644156][ T9585] bond0: (slave bond_slave_1): Releasing backup interface [ 504.679742][ T9585] team0: Port device team_slave_0 removed [ 505.166750][ T9585] team0: Port device team_slave_1 removed [ 505.245575][ T9585] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 505.269055][ T9585] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 505.300602][ T9585] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 505.330306][ T9585] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 505.462254][ T9588] netlink: 'syz.3.1167': attribute type 10 has an invalid length. [ 505.478934][ T5857] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 505.585486][ T9588] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 506.626928][ T5899] vhci_hcd: vhci_device speed not set [ 507.556454][ T9630] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1176'. [ 511.473424][ T9684] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1187'. [ 513.182939][ T5788] Bluetooth: hci3: command 0x0406 tx timeout [ 513.750416][ T9693] block device autoloading is deprecated and will be removed. [ 514.544277][ T5835] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 514.746727][ T5835] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 514.760245][ T5835] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 514.783625][ T5835] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 514.806480][ T5835] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 514.859194][ T5835] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 514.868790][ T5835] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 514.877323][ T5835] usb 4-1: Product: syz [ 514.881892][ T5835] usb 4-1: Manufacturer: syz [ 515.111190][ T5857] usb 4-1: USB disconnect, device number 41 [ 519.154287][ T5837] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 519.405859][ T9784] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1209'. [ 519.421430][ T5837] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 519.444584][ T5837] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 519.503985][ T5837] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 519.573192][ T5837] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 519.639896][ T5837] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 519.702083][ T5837] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 519.722355][ T5837] usb 1-1: Product: syz [ 519.727106][ T5837] usb 1-1: Manufacturer: syz [ 519.977455][ T5835] usb 1-1: USB disconnect, device number 41 [ 520.967500][ T9810] sd 0:0:1:0: PR command failed: 1026 [ 520.975951][ T9810] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 520.982753][ T9810] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 524.624337][ T5899] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 524.713372][ T9852] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 524.934460][ T9852] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 525.686664][ T5899] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 525.768401][ T5899] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 525.811019][ T5899] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 525.838039][ T5899] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 525.864193][ T5899] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 525.873798][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 525.891864][ T5899] usb 2-1: Product: syz [ 525.900034][ T5899] usb 2-1: Manufacturer: syz [ 526.152647][ T5835] usb 2-1: USB disconnect, device number 40 [ 531.814350][ T5899] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 531.939697][ T9912] sd 0:0:1:0: PR command failed: 1026 [ 531.948169][ T9912] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 531.975014][ T9912] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 532.896688][ T5899] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 532.918785][ T5899] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 532.936273][ T5899] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 532.964388][ T5899] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 533.018063][ T5899] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 533.041383][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 533.049754][ T5899] usb 3-1: Product: syz [ 533.053967][ T5899] usb 3-1: Manufacturer: syz [ 533.863331][ T5899] usb 3-1: USB disconnect, device number 26 [ 539.514444][ T5899] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 539.989590][ T5899] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 540.000059][ T5899] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 540.011502][ T5899] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 540.185493][ T5899] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 540.196029][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 540.280675][ T5899] usb 4-1: Product: syz [ 540.285433][ T5899] usb 4-1: Manufacturer: syz [ 540.290552][ T5899] usb 4-1: SerialNumber: syz [ 540.301610][ T5899] usb 4-1: config 0 descriptor?? [ 540.311055][ T5899] radio-si470x 4-1:0.0: could not find interrupt in endpoint [ 540.319456][ T5899] radio-si470x: probe of 4-1:0.0 failed with error -5 [ 540.326820][ T5899] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 542.634292][ T8] usb 4-1: USB disconnect, device number 42 [ 547.394187][ T5858] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 547.594241][ T5858] usb 1-1: Using ep0 maxpacket: 8 [ 548.013005][ T5858] usb 1-1: config 0 has an invalid interface number: 122 but max is 0 [ 548.054814][ T5858] usb 1-1: config 0 has an invalid descriptor of length 158, skipping remainder of the config [ 548.094318][ T5858] usb 1-1: config 0 has no interface number 0 [ 548.105193][ T5858] usb 1-1: New USB device found, idVendor=17ef, idProduct=304b, bcdDevice=8c.80 [ 548.121776][ T5858] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.130002][ T5858] usb 1-1: Product: syz [ 548.220998][ T5858] usb 1-1: Manufacturer: syz [ 548.227452][ T5858] usb 1-1: SerialNumber: syz [ 548.253739][ T5858] usb 1-1: config 0 descriptor?? [ 548.717612][T10083] netlink: 9900 bytes leftover after parsing attributes in process `syz.3.1287'. [ 548.734530][T10085] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1288'. [ 548.870510][ T5858] ax88179_178a 1-1:0.122 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 548.884280][ T5858] ax88179_178a 1-1:0.122 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 549.680842][ T5858] ax88179_178a 1-1:0.122 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 549.925729][ T5858] ax88179_178a 1-1:0.122 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 550.041235][ T5858] ax88179_178a 1-1:0.122 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -71 [ 550.326013][ T5858] ax88179_178a 1-1:0.122 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 550.353790][ T5858] ax88179_178a 1-1:0.122 (unnamed net_device) (uninitialized): Failed to write reg index 0x0006: -71 [ 550.401596][ T5858] ax88179_178a 1-1:0.122 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71 [ 550.489867][ T5858] ax88179_178a 1-1:0.122 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 550.533578][ T5858] ax88179_178a 1-1:0.122 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 550.573881][ T5858] ax88179_178a 1-1:0.122 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 550.627312][ T5858] ax88179_178a 1-1:0.122 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 550.668242][ T5858] ax88179_178a 1-1:0.122 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 550.695250][ T5858] ax88179_178a 1-1:0.122 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 550.738436][ T5858] ax88179_178a 1-1:0.122 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 550.765163][ T5858] ax88179_178a 1-1:0.122 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 550.800611][ T5858] ax88179_178a 1-1:0.122 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 550.822482][ T5858] ax88179_178a 1-1:0.122 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 550.865284][ T5858] ax88179_178a 1-1:0.122 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 550.896792][ T5858] ax88179_178a 1-1:0.122 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 550.935559][ T5858] ax88179_178a 1-1:0.122 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 550.954584][ T5858] ax88179_178a 1-1:0.122 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 550.983295][ T5858] ax88179_178a 1-1:0.122 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 551.034798][ T5858] ax88179_178a 1-1:0.122 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 551.064943][ T5858] ax88179_178a 1-1:0.122 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 551.086377][ T5858] ax88179_178a 1-1:0.122 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 551.112544][ T5858] ax88179_178a 1-1:0.122 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 551.141385][ T5858] ax88179_178a 1-1:0.122 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 551.168927][ T5858] ax88179_178a 1-1:0.122 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 551.200935][ T5858] ax88179_178a 1-1:0.122 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 551.304327][ T5858] ax88179_178a 1-1:0.122 eth1: register 'ax88179_178a' at usb-dummy_hcd.0-1, Lenovo OneLinkDock Gigabit LAN, 5a:00:c0:ed:a7:1c [ 551.393962][ T5858] usb 1-1: USB disconnect, device number 42 [ 551.470791][ T5858] ax88179_178a 1-1:0.122 eth1: unregister 'ax88179_178a' usb-dummy_hcd.0-1, Lenovo OneLinkDock Gigabit LAN [ 552.168046][ T8] usb 4-1: new low-speed USB device number 43 using dummy_hcd [ 552.527421][ T8] usb 4-1: unable to get BOS descriptor or descriptor too short [ 552.542078][ T8] usb 4-1: config 38 has an invalid interface number: 48 but max is 0 [ 552.550770][ T8] usb 4-1: config 38 has no interface number 0 [ 553.314474][ T8] usb 4-1: config 38 interface 48 has no altsetting 0 [ 553.325986][ T8] usb 4-1: string descriptor 0 read error: -22 [ 553.332351][ T8] usb 4-1: New USB device found, idVendor=0421, idProduct=01d4, bcdDevice=87.76 [ 553.343628][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.359451][ T8] usb 4-1: bad CDC descriptors [ 553.375961][ T8] usb 4-1: bad CDC descriptors [ 553.545247][T10151] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 553.551891][T10151] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 553.576520][ T8] usb 4-1: USB disconnect, device number 43 [ 553.601993][T10151] vhci_hcd vhci_hcd.0: Device attached [ 553.658337][T10151] xt_hashlimit: max too large, truncated to 1048576 [ 553.675071][T10152] vhci_hcd: connection closed [ 553.676321][ T6670] vhci_hcd: stop threads [ 553.685512][ T6670] vhci_hcd: release socket [ 553.690047][ T6670] vhci_hcd: disconnect device [ 555.404557][T10156] process 'syz.2.1309' launched './file0' with NULL argv: empty string added [ 555.824403][ T5788] Bluetooth: hci2: command 0x0406 tx timeout [ 557.490300][T10168] tipc: Started in network mode [ 557.496001][T10168] tipc: Node identity ac14140c, cluster identity 4711 [ 557.508685][T10168] tipc: New replicast peer: 255.255.255.255 [ 557.517490][T10168] tipc: Enabled bearer , priority 10 [ 559.210115][ T5835] tipc: Node number set to 2886997004 [ 559.374249][ T5899] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 560.207579][ T5899] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 560.232746][ T5899] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 560.693652][ T5899] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 560.703303][ T5899] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 560.720477][ T5899] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 560.744128][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 560.752205][ T5899] usb 2-1: Product: syz [ 560.766641][ T5899] usb 2-1: Manufacturer: syz [ 560.923328][T10213] block nbd0: not configured, cannot reconfigure [ 561.033576][ T5899] usb 2-1: USB disconnect, device number 41 [ 562.630881][ T5837] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 563.067736][ T5837] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 563.179454][ T5837] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 563.328356][ T5837] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 563.358157][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.386784][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.624459][ T5837] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 563.680072][ T5837] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 563.713128][ T5837] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 563.762077][ T5837] usb 2-1: Product: syz [ 563.784284][ T5837] usb 2-1: Manufacturer: syz [ 564.055021][ T5837] usb 2-1: USB disconnect, device number 42 [ 565.364266][ T5899] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 565.414979][T10290] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 565.424002][T10290] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 565.439578][T10290] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 565.448735][T10290] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 565.458084][T10290] geneve2: entered promiscuous mode [ 565.463425][T10290] geneve2: entered allmulticast mode [ 566.306415][ T5899] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 566.323975][ T5899] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 566.335603][ T5899] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 566.345923][ T5899] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 566.362536][ T5899] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 566.372975][ T5899] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 566.386827][ T5899] usb 2-1: Manufacturer: syz [ 566.397384][ T5899] usb 2-1: config 0 descriptor?? [ 566.514195][ T5835] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 566.743128][ T5835] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 566.752366][ T5835] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 566.763628][ T5835] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 566.773478][ T5835] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 566.791123][ T5835] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 566.808596][ T5835] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 566.817724][ T5835] usb 3-1: Product: syz [ 566.822224][ T5835] usb 3-1: Manufacturer: syz [ 566.855316][ T5899] appleir 0003:05AC:8243.0003: unknown main item tag 0x0 [ 566.863308][ T5899] appleir 0003:05AC:8243.0003: No inputs registered, leaving [ 566.899980][ T5899] appleir 0003:05AC:8243.0003: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 567.206231][ T5875] usb 3-1: USB disconnect, device number 27 [ 568.003048][ T5835] usb 2-1: USB disconnect, device number 43 [ 572.314157][ T5875] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 572.551505][T10359] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1377'. [ 572.561159][T10359] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1377'. [ 572.748613][ T5875] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 572.759718][ T5875] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 572.951728][ T5875] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 573.033367][ T5875] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 573.114685][ T5875] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 573.134190][ T5875] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 573.142348][ T5875] usb 4-1: Manufacturer: syz [ 573.168674][ T5875] usb 4-1: config 0 descriptor?? [ 573.528359][T10375] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1380'. [ 576.126143][ T5875] appleir 0003:05AC:8243.0004: unknown main item tag 0x0 [ 576.138162][ T5875] appleir 0003:05AC:8243.0004: No inputs registered, leaving [ 576.152761][ T5875] appleir 0003:05AC:8243.0004: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 576.452549][ T23] usb 4-1: USB disconnect, device number 44 [ 582.868173][T10448] syz.2.1402 uses obsolete (PF_INET,SOCK_PACKET) [ 583.233585][T10449] io-wq is not configured for unbound workers [ 584.666357][T10472] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 591.539065][T10553] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1430'. [ 591.548301][T10553] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1430'. [ 591.672904][T10564] dlm: no local IP address has been set [ 591.680054][T10564] dlm: cannot start dlm midcomms -107 [ 594.964148][ T5858] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 596.052291][ T5858] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 596.068690][ T5858] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.085341][ T5858] usb 3-1: config 0 descriptor?? [ 596.095166][ T5858] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 596.321330][ T5858] gp8psk: usb in 128 operation failed. [ 596.598087][ T5858] gp8psk: FW Version = 149.168.56 (0x95a838) Build 2230/235/26 [ 596.803594][ T5858] gp8psk: usb in 149 operation failed. [ 596.895302][ T5858] gp8psk: failed to get FPGA version [ 597.013863][ T5858] gp8psk: usb in 138 operation failed. [ 597.092930][ T5858] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 597.224914][ T5858] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 597.251736][ T5858] usb 3-1: USB disconnect, device number 28 [ 603.541673][T10675] netlink: 'syz.2.1469': attribute type 1 has an invalid length. [ 604.133281][T10675] 8021q: adding VLAN 0 to HW filter on device bond1 [ 604.239598][T10678] bond1: (slave ip6erspan0): making interface the new active one [ 604.266987][T10678] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 604.654714][ T23] usb 3-1: new low-speed USB device number 29 using dummy_hcd [ 604.912357][ T23] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 604.923567][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.035939][ T23] usb 3-1: config 0 descriptor?? [ 605.307982][ T23] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 606.657960][T10703] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1478'. [ 607.363275][ T23] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 607.373736][ T23] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 607.391412][ T23] asix: probe of 3-1:0.0 failed with error -71 [ 607.401794][ T23] usb 3-1: USB disconnect, device number 29 [ 610.644757][ T5875] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 610.844081][ T5875] usb 2-1: Using ep0 maxpacket: 8 [ 610.861669][ T5875] usb 2-1: unable to get BOS descriptor or descriptor too short [ 610.879923][ T5875] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 610.894762][ T5875] usb 2-1: config 0 has no interface number 0 [ 610.912706][ T5875] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 610.938749][ T5875] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 610.948865][ T5875] usb 2-1: config 0 interface 88 has no altsetting 0 [ 610.962851][ T5875] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 610.972336][ T5875] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 610.980651][ T5875] usb 2-1: Product: syz [ 610.985057][ T5875] usb 2-1: SerialNumber: syz [ 610.994849][ T5875] usb 2-1: config 0 descriptor?? [ 611.793348][ T5875] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.88/input/input16 [ 611.864342][ T5875] usb 2-1: USB disconnect, device number 44 [ 612.329489][T10751] loop2: detected capacity change from 0 to 7 [ 612.472707][T10751] Dev loop2: unable to read RDB block 7 [ 612.479038][T10751] loop2: AHDI p1 p2 p3 [ 612.483699][T10751] loop2: partition table partially beyond EOD, truncated [ 612.495037][T10751] loop2: p1 start 1601398130 is beyond EOD, truncated [ 612.502024][T10751] loop2: p2 start 1702059890 is beyond EOD, truncated [ 614.148305][ T5837] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 614.277679][T10774] xt_hashlimit: max too large, truncated to 1048576 [ 614.346471][ T5837] usb 1-1: Using ep0 maxpacket: 32 [ 614.398611][ T5837] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 614.472085][T10779] netlink: 'syz.2.1501': attribute type 2 has an invalid length. [ 614.487136][T10779] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1501'. [ 614.524402][ T5837] usb 1-1: config 0 has no interface number 0 [ 614.613842][ T5837] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 614.783268][ T5837] usb 1-1: config 0 interface 85 has no altsetting 0 [ 614.978609][ T5837] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 615.003416][ T5837] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.042731][ T5837] usb 1-1: Product: syz [ 615.064063][ T5837] usb 1-1: Manufacturer: syz [ 615.070392][ T5837] usb 1-1: SerialNumber: syz [ 615.088082][ T5837] usb 1-1: config 0 descriptor?? [ 616.041332][ T5837] appletouch 1-1:0.85: Geyser mode initialized. [ 616.254647][ T5837] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input17 [ 616.326276][ T5837] usb 1-1: USB disconnect, device number 43 [ 616.418427][ T5837] appletouch 1-1:0.85: input: appletouch disconnected [ 618.024454][ T5858] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 618.249179][ T5858] usb 2-1: no configurations [ 618.265206][ T5858] usb 2-1: can't read configurations, error -22 [ 618.444354][ T5858] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 618.648509][ T5858] usb 2-1: no configurations [ 618.653630][ T5858] usb 2-1: can't read configurations, error -22 [ 618.662392][ T5858] usb usb2-port1: attempt power cycle [ 619.074399][ T5858] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 619.118469][ T5858] usb 2-1: no configurations [ 619.128409][ T5858] usb 2-1: can't read configurations, error -22 [ 619.294213][ T5858] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 619.435903][ T5858] usb 2-1: no configurations [ 619.440729][ T5858] usb 2-1: can't read configurations, error -22 [ 619.448692][ T5858] usb usb2-port1: unable to enumerate USB device [ 620.394206][T10827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1516'. [ 620.407551][T10827] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1516'. [ 621.883745][T10835] loop2: detected capacity change from 0 to 7 [ 622.128059][T10835] Dev loop2: unable to read RDB block 7 [ 622.133943][T10835] loop2: AHDI p1 p2 p3 [ 622.138709][T10835] loop2: partition table partially beyond EOD, truncated [ 622.149623][T10835] loop2: p1 start 1601398130 is beyond EOD, truncated [ 622.156655][T10835] loop2: p2 start 1702059890 is beyond EOD, truncated [ 624.824232][ T5899] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 624.856877][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.863520][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.093193][ T5899] usb 1-1: unable to get BOS descriptor or descriptor too short [ 625.191597][ T5899] usb 1-1: config 10 has an invalid interface number: 156 but max is 0 [ 625.289025][ T5899] usb 1-1: config 10 has no interface number 0 [ 625.358323][ T5899] usb 1-1: config 10 interface 156 has no altsetting 0 [ 625.382638][ T5899] usb 1-1: New USB device found, idVendor=aaa4, idProduct=27f3, bcdDevice=7b.33 [ 625.404158][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.412268][ T5899] usb 1-1: Product: syz [ 625.440021][ T5899] usb 1-1: Manufacturer: syz [ 625.449907][ T5899] usb 1-1: SerialNumber: syz [ 625.829487][ T5899] usb 1-1: bad CDC descriptors [ 625.912225][T10878] loop2: detected capacity change from 0 to 7 [ 626.294344][T10878] Dev loop2: unable to read RDB block 7 [ 626.374142][T10878] loop2: AHDI p1 p2 p3 [ 626.414109][T10878] loop2: partition table partially beyond EOD, truncated [ 626.846074][T10878] loop2: p1 start 1601398130 is beyond EOD, truncated [ 626.852948][T10878] loop2: p2 start 1702059890 is beyond EOD, truncated [ 627.066934][ T5899] usb 1-1: bad CDC descriptors [ 627.098795][ T5899] usb 1-1: USB disconnect, device number 44 [ 628.083401][ T5899] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 628.924121][ T5899] usb 2-1: Using ep0 maxpacket: 32 [ 628.931552][ T5899] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 628.944255][ T5899] usb 2-1: config 0 has no interface number 0 [ 628.950443][ T5899] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 628.961989][ T5899] usb 2-1: config 0 interface 85 has no altsetting 0 [ 628.972129][ T5899] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 628.994082][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.002152][ T5899] usb 2-1: Product: syz [ 629.014347][ T5899] usb 2-1: Manufacturer: syz [ 629.019017][ T5899] usb 2-1: SerialNumber: syz [ 629.036522][ T5899] usb 2-1: config 0 descriptor?? [ 629.716387][ T5899] appletouch 2-1:0.85: Geyser mode initialized. [ 629.742306][ T5899] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input18 [ 630.032057][ T5875] usb 2-1: USB disconnect, device number 49 [ 630.191825][ T5875] appletouch 2-1:0.85: input: appletouch disconnected [ 633.264215][T10943] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1549'. [ 637.104718][ T28] audit: type=1804 audit(1752450670.467:67): pid=11000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1573" name=2F6E6577726F6F742F3430382F66696C65302FE91F7189591E9233614B dev="hugetlbfs" ino=24247 res=1 errno=0 [ 638.912844][T11015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1579'. [ 638.921864][T11015] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1579'. [ 644.255694][T11061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1596'. [ 644.264706][T11061] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1596'. [ 648.796402][T11115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1613'. [ 648.806838][T11115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1613'. [ 652.023401][ T5837] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 652.687880][ T5837] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 652.703355][ T5837] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 652.715615][ T5837] usb 4-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00 [ 652.730939][ T5837] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 652.753701][ T5837] usb 4-1: config 0 descriptor?? [ 653.659408][ T5837] samsung 0003:0419:0600.0005: item fetching failed at offset 5/7 [ 653.697674][ T5837] samsung 0003:0419:0600.0005: parse failed [ 653.704360][ T5837] samsung: probe of 0003:0419:0600.0005 failed with error -22 [ 653.721508][ T5837] usb 4-1: USB disconnect, device number 45 [ 657.886124][T11186] xt_nfacct: accounting object `syz1' does not exists [ 658.077220][T11194] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1639'. [ 662.732845][T11232] xt_nfacct: accounting object `syz1' does not exists [ 664.214492][T11248] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1654'. [ 664.223693][T11248] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1654'. [ 664.513368][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 667.007610][T11273] xt_nfacct: accounting object `syz1' does not exists [ 670.448962][T11311] 9pnet: p9_errstr2errno: server reported unknown error 1844674 [ 671.542309][T11332] xt_nfacct: accounting object `syz1' does not exists [ 671.725456][T11334] trusted_key: encrypted_key: insufficient parameters specified [ 671.896639][T11334] trusted_key: encrypted_key: insufficient parameters specified [ 673.515855][ T28] audit: type=1326 audit(1752450706.177:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11341 comm="syz.0.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73dcd8e929 code=0x7ffc0000 [ 673.784301][ T5858] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 673.873382][ T28] audit: type=1326 audit(1752450706.187:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11341 comm="syz.0.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7f73dcd8e929 code=0x7ffc0000 [ 673.954422][ T28] audit: type=1326 audit(1752450706.187:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11341 comm="syz.0.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73dcd8e929 code=0x7ffc0000 [ 673.991011][ T5858] usb 1-1: Using ep0 maxpacket: 32 [ 674.013012][ T28] audit: type=1326 audit(1752450706.187:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11341 comm="syz.0.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f73dcd8e929 code=0x7ffc0000 [ 674.043501][ T5858] usb 1-1: config 0 has an invalid interface number: 155 but max is 0 [ 674.056416][ T5858] usb 1-1: config 0 has no interface number 0 [ 674.082557][ T5858] usb 1-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice=a7.4c [ 674.092183][ T5858] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.102459][ T5858] usb 1-1: Product: syz [ 674.116981][ T5858] usb 1-1: Manufacturer: syz [ 674.121835][ T5858] usb 1-1: SerialNumber: syz [ 674.121992][ T28] audit: type=1326 audit(1752450706.187:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11341 comm="syz.0.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73dcd8e929 code=0x7ffc0000 [ 674.153577][ T28] audit: type=1326 audit(1752450706.187:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11341 comm="syz.0.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f73dcd8e929 code=0x7ffc0000 [ 674.225134][ T5858] usb 1-1: config 0 descriptor?? [ 674.267530][ T28] audit: type=1326 audit(1752450706.187:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11341 comm="syz.0.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73dcd8e929 code=0x7ffc0000 [ 674.477186][ T28] audit: type=1326 audit(1752450706.187:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11341 comm="syz.0.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f73dcd8e929 code=0x7ffc0000 [ 674.500518][ T28] audit: type=1326 audit(1752450706.197:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11341 comm="syz.0.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73dcd8e929 code=0x7ffc0000 [ 674.570860][ T28] audit: type=1326 audit(1752450706.197:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11341 comm="syz.0.1683" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f73dcd8d290 code=0x7ffc0000 [ 676.837958][ T5858] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.155/input/input19 [ 676.897851][ T5141] bcm5974 1-1:0.155: could not read from device [ 676.934344][ T5141] bcm5974 1-1:0.155: could not read from device [ 676.940917][ T5858] usb 1-1: USB disconnect, device number 45 [ 676.950993][ T5141] bcm5974 1-1:0.155: could not read from device [ 682.713100][T11405] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1702'. [ 682.764373][T11405] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1702'. [ 682.793517][T11393] syz.3.1699 (11393) used greatest stack depth: 17960 bytes left [ 687.417210][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 687.423585][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.836758][T11464] fuseblk: Bad value for 'fd' [ 691.037482][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 691.043914][ T28] audit: type=1326 audit(1752450724.367:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11474 comm="syz.2.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab35f8e929 code=0x7ffc0000 [ 691.294317][ T8] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 691.494740][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 691.528318][ T8] usb 3-1: config 0 has an invalid interface number: 155 but max is 0 [ 692.224341][ T28] audit: type=1326 audit(1752450724.367:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11474 comm="syz.2.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab35f8e929 code=0x7ffc0000 [ 692.244167][ T8] usb 3-1: config 0 has no interface number 0 [ 692.249695][ T28] audit: type=1326 audit(1752450724.367:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11474 comm="syz.2.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7fab35f8e929 code=0x7ffc0000 [ 692.273765][ T8] usb 3-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice=a7.4c [ 692.285153][ T28] audit: type=1326 audit(1752450724.367:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11474 comm="syz.2.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab35f8e929 code=0x7ffc0000 [ 692.426012][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.499768][ T28] audit: type=1326 audit(1752450724.367:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11474 comm="syz.2.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab35f8e929 code=0x7ffc0000 [ 692.514101][ T8] usb 3-1: Product: syz [ 692.523471][ T28] audit: type=1326 audit(1752450724.367:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11474 comm="syz.2.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fab35f8e929 code=0x7ffc0000 [ 692.619631][ T28] audit: type=1326 audit(1752450724.377:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11474 comm="syz.2.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab35f8e929 code=0x7ffc0000 [ 692.634102][ T8] usb 3-1: Manufacturer: syz [ 692.694034][ T8] usb 3-1: SerialNumber: syz [ 692.698838][ T28] audit: type=1326 audit(1752450724.377:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11474 comm="syz.2.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab35f8e929 code=0x7ffc0000 [ 692.740197][ T8] usb 3-1: config 0 descriptor?? [ 692.762937][ T28] audit: type=1326 audit(1752450724.377:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11474 comm="syz.2.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fab35f8e929 code=0x7ffc0000 [ 692.826943][ T28] audit: type=1326 audit(1752450724.377:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11474 comm="syz.2.1724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab35f8e929 code=0x7ffc0000 [ 694.171765][ T8] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.155/input/input20 [ 694.193387][ T5141] bcm5974 3-1:0.155: could not read from device [ 694.213091][ T5141] bcm5974 3-1:0.155: could not read from device [ 694.240809][ T5141] bcm5974 3-1:0.155: could not read from device [ 694.265492][ T8] usb 3-1: USB disconnect, device number 30 [ 694.328494][T11504] fuseblk: Bad value for 'fd' [ 695.105720][ T5141] bcm5974 3-1:0.155: could not read from device [ 695.952851][T11517] ptrace attach of "./syz-executor exec"[5786] was attempted by "./syz-executor exec"[11517] [ 697.035414][T11529] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1739'. [ 697.065396][T11529] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1739'. [ 697.847015][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 697.847057][ T28] audit: type=1326 audit(1752450731.167:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11538 comm="syz.1.1742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f547fd8e929 code=0x7ffc0000 [ 698.084942][T11552] fuseblk: Bad value for 'fd' [ 698.406197][ T28] audit: type=1326 audit(1752450731.167:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11538 comm="syz.1.1742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f547fd8e929 code=0x7ffc0000 [ 698.509690][ T28] audit: type=1326 audit(1752450731.167:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11538 comm="syz.1.1742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7f547fd8e929 code=0x7ffc0000 [ 698.534604][ T28] audit: type=1326 audit(1752450731.167:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11538 comm="syz.1.1742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f547fd8e929 code=0x7ffc0000 [ 698.666480][ T28] audit: type=1326 audit(1752450731.167:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11538 comm="syz.1.1742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f547fd8e929 code=0x7ffc0000 [ 698.764451][ T28] audit: type=1326 audit(1752450731.167:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11538 comm="syz.1.1742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f547fd8e929 code=0x7ffc0000 [ 698.809786][T11561] capability: warning: `syz.2.1751' uses deprecated v2 capabilities in a way that may be insecure [ 698.830850][ T28] audit: type=1326 audit(1752450731.167:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11538 comm="syz.1.1742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f547fd8e929 code=0x7ffc0000 [ 699.058223][ T28] audit: type=1326 audit(1752450731.167:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11538 comm="syz.1.1742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f547fd8e929 code=0x7ffc0000 [ 699.430812][ T28] audit: type=1326 audit(1752450731.167:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11538 comm="syz.1.1742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f547fd8e929 code=0x7ffc0000 [ 699.523143][ T28] audit: type=1326 audit(1752450731.167:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11538 comm="syz.1.1742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f547fd8e929 code=0x7ffc0000 [ 699.691051][ T5857] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 699.894210][ T5857] usb 2-1: Using ep0 maxpacket: 32 [ 699.921526][ T5857] usb 2-1: config 0 has an invalid interface number: 155 but max is 0 [ 699.951766][ T5857] usb 2-1: config 0 has no interface number 0 [ 699.972648][ T5857] usb 2-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice=a7.4c [ 699.998551][ T5857] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.014284][ T5857] usb 2-1: Product: syz [ 700.021378][ T5857] usb 2-1: Manufacturer: syz [ 700.032165][ T5857] usb 2-1: SerialNumber: syz [ 700.055467][ T5857] usb 2-1: config 0 descriptor?? [ 701.377284][ T5857] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.155/input/input21 [ 701.397863][ T5141] bcm5974 2-1:0.155: could not read from device [ 701.411484][ T5141] bcm5974 2-1:0.155: could not read from device [ 701.429071][ T5857] usb 2-1: USB disconnect, device number 50 [ 706.202196][T11652] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1775'. [ 706.212428][T11652] afs: Unknown parameter '' [ 708.928191][T11670] xt_nfacct: accounting object `syz1' does not exists [ 709.524989][T11693] fuseblk: Bad value for 'fd' [ 713.182191][T11721] xt_nfacct: accounting object `syz1' does not exists [ 713.501543][T11736] fuseblk: Bad value for 'fd' [ 717.263793][T11761] xt_nfacct: accounting object `syz1' does not exists [ 718.010000][T11778] fuseblk: Bad value for 'fd' [ 720.516781][T11789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1812'. [ 720.526142][T11789] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1812'. [ 722.306976][T11811] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1821'. [ 724.105310][T11825] veth0_to_bridge: entered promiscuous mode [ 724.176982][T11822] veth0_to_bridge: left promiscuous mode [ 727.418314][T11844] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1830'. [ 727.429680][T11844] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1830'. [ 729.057484][T11867] fuse: Bad value for 'fd' [ 730.354684][ T1188] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 730.754192][ T1188] usb 3-1: Using ep0 maxpacket: 16 [ 730.841037][ T1188] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 730.863650][ T1188] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 730.938184][T11896] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.1847'. [ 730.947709][ T1188] usb 3-1: Product: syz [ 730.947732][ T1188] usb 3-1: Manufacturer: syz [ 730.947750][ T1188] usb 3-1: SerialNumber: syz [ 730.955698][ T1188] usb 3-1: config 0 descriptor?? [ 731.143760][T11897] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1844'. [ 731.153839][T11897] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1844'. [ 731.230315][T11901] fuse: Bad value for 'fd' [ 731.391350][ T5875] usb 3-1: USB disconnect, device number 31 [ 733.822075][T11934] fuse: Bad value for 'fd' [ 734.904451][ T8] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 735.367644][ T8] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 735.379554][ T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 735.532254][ T8] usb 2-1: config 0 has no interface number 0 [ 736.707535][ T8] usb 2-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 255 [ 736.744611][ T8] usb 2-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 736.790099][ T8] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 736.817578][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.840013][ T8] usb 2-1: Product: syz [ 737.075699][ T8] usb 2-1: Manufacturer: syz [ 737.082418][ T8] usb 2-1: SerialNumber: syz [ 737.093054][ T8] usb 2-1: config 0 descriptor?? [ 737.109025][T11946] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 737.815104][ T8] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 737.826063][ T8] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 737.834628][ T8] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 737.847879][ T8] usb 2-1: USB disconnect, device number 51 [ 737.869139][ T8] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 737.884767][ T8] cyberjack 2-1:0.69: device disconnected [ 738.356419][T11980] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1872'. [ 739.249146][T11987] mmap: syz.2.1872 (11987) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 741.421211][T11995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1877'. [ 741.431258][T11995] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1877'. [ 745.385631][T12035] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 747.669667][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.676085][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.048243][T12079] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 755.537210][T12155] fuse: Bad value for 'fd' [ 756.639414][T12158] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1927'. [ 759.526003][T12187] fuse: Bad value for 'fd' [ 763.070421][T12229] fuse: Bad value for 'fd' [ 764.065828][T12248] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1955'. [ 772.959399][T12352] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1991'. [ 772.968632][T12352] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1991'. [ 773.472299][T12360] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1994'. [ 773.491141][T12360] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 776.174119][T12405] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2005'. [ 776.183062][T12405] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2005'. [ 776.894227][ T5115] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 777.136613][ T5115] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 777.148613][ T5115] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 777.174260][ T5115] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 777.193674][ T5115] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.274273][ T5115] usb 3-1: config 0 descriptor?? [ 777.885176][ T5115] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 777.897237][ T5115] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 777.987367][ T5115] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.0006/input/input22 [ 778.090653][ T5115] cm6533_jd 0003:0D8C:0022.0006: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 778.216127][ T5857] usb 3-1: USB disconnect, device number 32 [ 778.360466][T12431] fido_id[12431]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 778.638416][T12442] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2022'. [ 778.647447][T12442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2022'. [ 778.924102][ T5899] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 779.134500][ T5899] usb 2-1: Using ep0 maxpacket: 8 [ 779.198224][ T5899] usb 2-1: unable to get BOS descriptor or descriptor too short [ 779.239859][ T5899] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 779.284050][ T5899] usb 2-1: config 0 has no interface number 0 [ 779.295080][ T5899] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 779.534133][ T5899] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 779.604145][ T5899] usb 2-1: config 0 interface 88 has no altsetting 0 [ 779.629458][ T5899] usb 2-1: string descriptor 0 read error: -22 [ 779.636572][ T5899] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 779.646219][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 779.657809][ T5899] usb 2-1: config 0 descriptor?? [ 779.714612][ T5899] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.88/input/input23 [ 779.890118][ T5899] usb 2-1: USB disconnect, device number 52 [ 779.943735][T12432] udevd[12432]: Error opening device "/dev/input/event4": No such file or directory [ 779.971270][T12432] udevd[12432]: Unable to EVIOCGABS device "/dev/input/event4" [ 779.994957][T12432] udevd[12432]: Unable to EVIOCGABS device "/dev/input/event4" [ 780.285113][T12460] xt_limit: Overflow, try lower: 0/0 [ 782.402007][T12472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2032'. [ 782.411164][T12472] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2032'. [ 782.824285][ T5899] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 783.038560][ T5899] usb 2-1: config 8 has an invalid interface number: 177 but max is 0 [ 783.060346][ T5899] usb 2-1: config 8 has no interface number 0 [ 783.168270][ T5899] usb 2-1: config 8 interface 177 altsetting 9 has an invalid endpoint with address 0xE8, skipping [ 783.180842][ T5899] usb 2-1: config 8 interface 177 altsetting 9 endpoint 0x87 has invalid wMaxPacketSize 0 [ 783.194789][ T5899] usb 2-1: config 8 interface 177 has no altsetting 0 [ 783.201907][ T5899] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 783.211823][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.262102][T12474] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 783.951174][ T5899] usb 2-1: string descriptor 0 read error: -71 [ 783.965324][ T5899] ir_toy 2-1:8.177: required endpoints not found [ 784.009046][ T5899] usb 2-1: USB disconnect, device number 53 [ 785.220586][T12501] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 785.258199][T12501] bridge0: port 2(bridge_slave_1) entered disabled state [ 785.265755][T12501] bridge0: port 1(bridge_slave_0) entered disabled state [ 785.489369][T12505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2042'. [ 785.498394][T12505] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2042'. [ 787.617684][T12530] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2053'. [ 787.626682][T12530] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2053'. [ 791.014188][T12562] xt_limit: Overflow, try lower: 0/0 [ 791.129324][T12569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2066'. [ 791.138362][T12569] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2066'. [ 795.481684][T12619] xt_limit: Overflow, try lower: 0/0 [ 797.395402][T12633] team0: No ports can be present during mode change [ 797.434039][ T5857] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 797.655119][ T5857] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 797.697125][ T5857] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 797.789217][ T5857] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 797.833089][ T5857] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.859781][ T5857] usb 2-1: config 0 descriptor?? [ 798.788376][ T5857] cm6533_jd 0003:0D8C:0022.0007: unknown main item tag 0x0 [ 798.832486][ T5857] cm6533_jd 0003:0D8C:0022.0007: unknown main item tag 0x0 [ 798.866584][ T5857] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.0007/input/input24 [ 798.944749][ T5857] cm6533_jd 0003:0D8C:0022.0007: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 799.026738][ T5857] usb 2-1: USB disconnect, device number 54 [ 799.219852][T12656] fido_id[12656]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 799.779225][T12663] cgroup2: Unknown parameter 'me' [ 803.773552][T12697] syzkaller0: entered promiscuous mode [ 803.779590][T12697] syzkaller0: entered allmulticast mode [ 804.885337][T12700] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.895208][T12700] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.904219][T12700] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.913254][T12700] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.354303][T12709] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 805.548808][T12709] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 805.561452][T12709] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 805.571993][T12709] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 805.581882][T12709] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.599692][T12709] usb 1-1: config 0 descriptor?? [ 806.042865][T12709] cm6533_jd 0003:0D8C:0022.0008: unknown main item tag 0x0 [ 806.050483][T12709] cm6533_jd 0003:0D8C:0022.0008: unknown main item tag 0x0 [ 806.070403][T12709] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.0008/input/input25 [ 806.093044][T12709] cm6533_jd 0003:0D8C:0022.0008: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 806.301813][T12722] usb 1-1: USB disconnect, device number 46 [ 808.274177][T12716] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 808.494112][T12716] usb 4-1: Using ep0 maxpacket: 32 [ 808.502679][T12716] usb 4-1: unable to get BOS descriptor or descriptor too short [ 808.522764][T12716] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 808.540784][T12716] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 808.553253][T12716] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 808.676448][T12716] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 808.736604][T12716] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.754997][T12716] usb 4-1: Product: syz [ 808.770061][T12716] usb 4-1: Manufacturer: syz [ 808.791489][T12716] usb 4-1: SerialNumber: syz [ 809.194909][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.201605][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.308927][T12750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 809.327040][T12750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 809.480800][T12716] cdc_ncm 4-1:1.0: bind() failure [ 809.495001][T12716] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 809.502032][T12716] cdc_ncm 4-1:1.1: bind() failure [ 809.517026][T12716] usb 4-1: USB disconnect, device number 46 [ 816.565051][T12722] IPVS: starting estimator thread 0... [ 816.814229][T12839] IPVS: using max 21 ests per chain, 50400 per kthread [ 821.810052][T12716] IPVS: starting estimator thread 0... [ 822.244353][T12881] IPVS: using max 26 ests per chain, 62400 per kthread [ 824.191165][T12902] binder: 12898:12902 ioctl c018620c 200000000380 returned -1 [ 825.177845][T12906] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2155'. [ 825.186982][T12906] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2155'. [ 826.878174][T12716] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 827.157229][T12722] IPVS: starting estimator thread 0... [ 827.364176][T12716] usb 2-1: Using ep0 maxpacket: 32 [ 827.374034][T12918] IPVS: using max 18 ests per chain, 43200 per kthread [ 827.384468][T12716] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 827.401479][T12716] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 827.444053][T12716] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 827.466183][T12716] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.520180][T12716] usb 2-1: config 0 descriptor?? [ 827.538465][T12716] hub 2-1:0.0: bad descriptor, ignoring hub [ 827.576847][T12716] hub: probe of 2-1:0.0 failed with error -5 [ 827.593047][T12716] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 827.704771][T12924] input: syz0 as /devices/virtual/input/input26 [ 828.981377][ T5899] usb 2-1: USB disconnect, device number 55 [ 830.804379][ T5899] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 830.995836][ T5899] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 831.036643][ T5899] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 831.094505][ T5899] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 831.138338][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.205109][ T5899] usb 4-1: config 0 descriptor?? [ 831.287680][ T5899] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 832.365307][ T5899] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 832.561627][ T5899] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 832.580485][ T5899] usb 2-1: config 0 has no interface number 0 [ 832.601383][ T5899] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 832.616782][ T5899] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 832.629395][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.638717][ T5899] usb 2-1: Product: syz [ 832.643385][ T5899] usb 2-1: Manufacturer: syz [ 832.648661][ T5899] usb 2-1: SerialNumber: syz [ 832.665545][ T5899] usb 2-1: config 0 descriptor?? [ 833.308416][ T5899] usbtouchscreen: probe of 2-1:0.214 failed with error -71 [ 834.029464][T12721] usb 4-1: USB disconnect, device number 47 [ 834.094351][ T5899] usb 2-1: USB disconnect, device number 56 [ 839.724584][T13058] fuse: Unknown parameter 'group_i00000000000000000000' [ 849.088721][T13144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2225'. [ 849.094089][ T5788] Bluetooth: hci3: command 0x0406 tx timeout [ 849.107665][T13144] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2225'. [ 851.126132][T13159] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 856.709788][T13203] fuse: Bad value for 'user_id' [ 860.372626][T13239] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 860.383536][T13239] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 860.392609][T13239] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 860.402233][T13239] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 860.411397][T13239] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 860.421825][T13239] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 861.304043][T12709] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 861.494226][T12709] usb 1-1: Using ep0 maxpacket: 16 [ 861.504624][T12709] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 861.527521][T12709] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 861.545563][T12709] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.554374][T12709] usb 1-1: Product: syz [ 861.558597][T12709] usb 1-1: Manufacturer: syz [ 861.563243][T12709] usb 1-1: SerialNumber: syz [ 861.580205][T12709] usb 1-1: config 0 descriptor?? [ 861.590274][T12709] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 861.613917][T12709] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 861.634311][T13249] fuse: Bad value for 'user_id' [ 861.699469][ T7460] tipc: Disabling bearer [ 861.727031][ T7460] tipc: Left network mode [ 861.954183][T13238] chnl_net:caif_netlink_parms(): no params data found [ 862.224618][T12709] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 862.328035][T13238] bridge0: port 1(bridge_slave_0) entered blocking state [ 862.339913][T13238] bridge0: port 1(bridge_slave_0) entered disabled state [ 862.348943][T13238] bridge_slave_0: entered allmulticast mode [ 862.361744][T13238] bridge_slave_0: entered promiscuous mode [ 862.422943][T13238] bridge0: port 2(bridge_slave_1) entered blocking state [ 862.445897][T13238] bridge0: port 2(bridge_slave_1) entered disabled state [ 862.454101][T13239] Bluetooth: hci3: command tx timeout [ 862.470766][T13238] bridge_slave_1: entered allmulticast mode [ 862.485589][T13238] bridge_slave_1: entered promiscuous mode [ 862.689723][T12709] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 862.704428][T12709] em28xx 1-1:0.0: board has no eeprom [ 862.766792][T13238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 862.802228][T12709] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 862.830450][T12709] em28xx 1-1:0.0: dvb set to bulk mode. [ 862.854905][ T5899] em28xx 1-1:0.0: Binding DVB extension [ 862.959521][ T5899] em28xx 1-1:0.0: Registering input extension [ 862.994473][T12709] usb 1-1: USB disconnect, device number 47 [ 863.049155][T12709] em28xx 1-1:0.0: Disconnecting em28xx [ 863.081292][T13238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 863.088741][T12709] em28xx 1-1:0.0: Closing input extension [ 863.145588][T12709] em28xx 1-1:0.0: Freeing device [ 863.327227][T13238] team0: Port device team_slave_0 added [ 863.413227][T13238] team0: Port device team_slave_1 added [ 863.558671][ T7460] bond0: (slave wlan1): Releasing backup interface [ 864.260015][T13238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 864.293336][T13238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 864.363521][T13238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 864.436328][T13238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 864.453983][T13238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 864.479920][ C0] vkms_vblank_simulate: vblank timer overrun [ 864.535430][T13239] Bluetooth: hci3: command tx timeout [ 864.540995][T13238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 865.191624][ T7460] hsr_slave_0: left promiscuous mode [ 865.211235][ T7460] hsr_slave_1: left promiscuous mode [ 866.614177][T13239] Bluetooth: hci3: command tx timeout [ 866.901181][T13328] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2267'. [ 866.930553][T13328] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2267'. [ 868.694221][T13239] Bluetooth: hci3: command tx timeout [ 870.538412][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.546108][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.564110][T13368] xt_hashlimit: size too large, truncated to 1048576 [ 870.843383][ T7460] bond0 (unregistering): Released all slaves [ 870.978360][T13238] hsr_slave_0: entered promiscuous mode [ 871.003301][T13238] hsr_slave_1: entered promiscuous mode [ 871.039866][T13238] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 871.060363][T13238] Cannot create hsr debugfs directory [ 872.569246][ T7460] IPVS: stop unused estimator thread 0... [ 873.532740][T13405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2288'. [ 873.563653][T13405] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2288'. [ 873.979289][T13238] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 874.031830][T13238] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 874.060994][T13238] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 874.115528][T13238] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 874.406914][T13238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 874.459343][T13238] 8021q: adding VLAN 0 to HW filter on device team0 [ 874.496483][ T6670] bridge0: port 1(bridge_slave_0) entered blocking state [ 874.503702][ T6670] bridge0: port 1(bridge_slave_0) entered forwarding state [ 874.578561][ T6670] bridge0: port 2(bridge_slave_1) entered blocking state [ 874.585774][ T6670] bridge0: port 2(bridge_slave_1) entered forwarding state [ 875.838042][T13238] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 876.026162][T13238] veth0_vlan: entered promiscuous mode [ 876.077522][T13238] veth1_vlan: entered promiscuous mode [ 876.170811][T13238] veth0_macvtap: entered promiscuous mode [ 876.194912][T13238] veth1_macvtap: entered promiscuous mode [ 876.265083][T13238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 876.288536][T13238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.316569][T13238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 876.338834][T13238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.353611][T13238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 876.369646][T13238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.395841][T13238] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 876.466339][T13238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 876.491680][T13238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.506945][T13238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 876.519539][T13238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.533473][T13238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 876.556039][T13238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.585937][T13238] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 876.717713][T13238] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.774494][T13238] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.783292][T13238] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.818818][T13238] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 877.119696][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 877.150529][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 877.299245][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 877.317623][T13469] tipc: Started in network mode [ 877.317954][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 877.330467][T13469] tipc: Node identity 4, cluster identity 4711 [ 877.353927][T13469] tipc: Node number set to 4 [ 882.053190][ T5788] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 882.066746][ T5788] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 882.075715][ T5788] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 882.089555][ T5788] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 882.100263][ T5788] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 882.109188][ T5788] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 882.961376][ T7460] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.994964][ T7460] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 883.258030][ T7460] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.471119][ T7460] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 884.129866][ T7460] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.174721][ T7460] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 884.214296][ T5788] Bluetooth: hci0: command tx timeout [ 884.314207][ T7460] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.326707][ T7460] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 884.692475][T13528] chnl_net:caif_netlink_parms(): no params data found [ 885.100361][ T7460] bond1: (slave ip6erspan0): Releasing active interface [ 885.918350][T13528] bridge0: port 1(bridge_slave_0) entered blocking state [ 885.987585][T13528] bridge0: port 1(bridge_slave_0) entered disabled state [ 886.043311][T13528] bridge_slave_0: entered allmulticast mode [ 886.094114][T13528] bridge_slave_0: entered promiscuous mode [ 886.297059][ T5788] Bluetooth: hci0: command tx timeout [ 887.019745][T13584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2319'. [ 887.037901][T13584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2319'. [ 887.047087][T13584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2319'. [ 887.216349][T13589] Falling back ldisc for ptm0. [ 887.272292][T13584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2319'. [ 887.400509][T13584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2319'. [ 887.514275][T13584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2319'. [ 887.523636][T13584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2319'. [ 887.619122][T13584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2319'. [ 887.645228][T13584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2319'. [ 887.671202][T13584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2319'. [ 887.754256][T13528] bridge0: port 2(bridge_slave_1) entered blocking state [ 887.765735][T13528] bridge0: port 2(bridge_slave_1) entered disabled state [ 887.786385][T13528] bridge_slave_1: entered allmulticast mode [ 887.831194][T13528] bridge_slave_1: entered promiscuous mode [ 888.432252][ T5788] Bluetooth: hci0: command tx timeout [ 888.582891][T13528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 888.681863][T13528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 888.823507][T13528] team0: Port device team_slave_0 added [ 888.833569][T13528] team0: Port device team_slave_1 added [ 889.030386][T13528] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 889.043274][T13528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 889.078164][T13528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 889.142112][T13528] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 889.156495][T13528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 889.243980][T13528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 889.778669][T13528] hsr_slave_0: entered promiscuous mode [ 889.820239][T13528] hsr_slave_1: entered promiscuous mode [ 889.848656][T13528] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 889.891293][T13528] Cannot create hsr debugfs directory [ 890.027345][ T7460] hsr_slave_0: left promiscuous mode [ 890.040210][ T7460] hsr_slave_1: left promiscuous mode [ 890.048096][ T7460] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 890.055997][ T7460] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 890.065783][ T7460] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 890.079844][ T7460] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 890.087334][T12721] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 890.099679][ T7460] bridge_slave_1: left allmulticast mode [ 890.109999][ T7460] bridge_slave_1: left promiscuous mode [ 890.120527][ T7460] bridge0: port 2(bridge_slave_1) entered disabled state [ 890.136291][ T7460] bridge_slave_0: left allmulticast mode [ 890.148462][ T7460] bridge_slave_0: left promiscuous mode [ 890.184271][ T7460] bridge0: port 1(bridge_slave_0) entered disabled state [ 890.258013][ T7460] veth1_macvtap: left promiscuous mode [ 890.264705][ T7460] veth0_macvtap: left promiscuous mode [ 890.270869][ T7460] veth1_vlan: left promiscuous mode [ 890.278045][ T7460] veth0_vlan: left promiscuous mode [ 890.285302][T12721] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 890.306203][T12721] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 890.346727][T12721] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 890.380650][T12721] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.430761][T12721] usb 1-1: config 0 descriptor?? [ 890.454131][ T5788] Bluetooth: hci0: command tx timeout [ 890.926024][T12721] usbhid 1-1:0.0: can't add hid device: -71 [ 890.949142][T12721] usbhid: probe of 1-1:0.0 failed with error -71 [ 890.968347][T12721] usb 1-1: USB disconnect, device number 48 [ 891.000638][ T7460] bond1 (unregistering): Released all slaves [ 891.608815][ T7460] team0 (unregistering): Port device team_slave_1 removed [ 891.670183][ T7460] team0 (unregistering): Port device team_slave_0 removed [ 891.731202][ T7460] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 891.789099][ T7460] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 891.844022][T12713] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 892.044717][T12713] usb 1-1: Using ep0 maxpacket: 8 [ 892.067771][T12713] usb 1-1: config 0 has an invalid interface number: 122 but max is 0 [ 892.079951][T12713] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 892.102023][T12713] usb 1-1: config 0 has no interface number 0 [ 892.108649][T12713] usb 1-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 892.120300][T12713] usb 1-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 892.130620][T12713] usb 1-1: config 0 interface 122 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 892.141222][T12713] usb 1-1: config 0 interface 122 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 892.153342][T12713] usb 1-1: config 0 interface 122 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 8 [ 892.189183][T12713] usb 1-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 892.204105][T12713] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.212212][T12713] usb 1-1: Product: syz [ 892.220972][T12713] usb 1-1: Manufacturer: syz [ 892.226252][T12713] usb 1-1: SerialNumber: syz [ 892.233710][T12713] usb 1-1: config 0 descriptor?? [ 892.247343][T13645] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 892.371378][ T7460] bond0 (unregistering): Released all slaves [ 892.535782][T12713] usb 1-1: NFC: intf ffff888078e91000 id ffffffff8d63d9e0 [ 892.598362][T12713] nfcmrvl 1-1:0.122: NFC: registered with nci successfully [ 892.632183][T13643] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 892.641706][T13643] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 892.651360][T13643] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 892.704097][T12713] usb 1-1: USB disconnect, device number 49 [ 892.742911][T12713] usb 1-1: NFC: intf ffff888078e91000 [ 894.355234][ T7460] IPVS: stop unused estimator thread 0... [ 894.909309][T13679] fuse: Bad value for 'rootmode' [ 895.646591][T13691] __nla_validate_parse: 44 callbacks suppressed [ 895.646621][T13691] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2342'. [ 895.666827][T13691] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2342'. [ 896.092902][T13528] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 896.368662][T13528] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 896.475420][T13528] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 896.495311][T13528] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 896.676721][T13528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 896.715748][T13528] 8021q: adding VLAN 0 to HW filter on device team0 [ 896.730364][ T6670] bridge0: port 1(bridge_slave_0) entered blocking state [ 896.737585][ T6670] bridge0: port 1(bridge_slave_0) entered forwarding state [ 896.800615][ T7460] bridge0: port 2(bridge_slave_1) entered blocking state [ 896.807966][ T7460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 897.172692][T13718] fuse: Bad value for 'rootmode' [ 898.427312][T13528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 898.599892][T13528] veth0_vlan: entered promiscuous mode [ 898.619004][T13528] veth1_vlan: entered promiscuous mode [ 898.855395][T13528] veth0_macvtap: entered promiscuous mode [ 899.020043][T13528] veth1_macvtap: entered promiscuous mode [ 899.291787][T13528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 899.386366][T13528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 899.424049][T13528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 899.456051][T13528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 899.488756][T13528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 899.566105][T13528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 899.669439][T13528] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 899.725694][T13528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 899.743924][T13528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 899.754415][T13528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 899.771444][T13528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 899.801354][T13528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 899.834763][T13528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 899.917609][T13528] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 900.131743][T13764] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2356'. [ 900.153802][T13764] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2356'. [ 900.259147][T13528] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.296421][T13528] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.317129][T13528] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.587202][T13528] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 901.106922][ T6670] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 901.127238][ T6670] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 901.824921][ T6670] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 901.900622][ T6670] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 902.014865][T13779] fuse: Bad value for 'rootmode' [ 905.902353][T13817] fuse: Unknown parameter 'use00000000000000000000' [ 905.940972][T13812] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2366'. [ 905.949994][T13812] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2366'. [ 905.962025][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 905.962041][ T28] audit: type=1326 audit(1752450939.337:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13814 comm="syz.0.2367" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f73dcd8e929 code=0x0 [ 910.421352][T13855] fuse: Unknown parameter 'use00000000000000000000' [ 910.718351][T12721] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 910.922464][T12721] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 910.952494][T12721] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.982677][T12721] usb 2-1: Product: syz [ 910.992749][T12721] usb 2-1: Manufacturer: syz [ 911.007551][T12721] usb 2-1: SerialNumber: syz [ 911.026627][T12721] usb 2-1: config 0 descriptor?? [ 911.212110][T13868] netlink: 'syz.3.2381': attribute type 4 has an invalid length. [ 911.220842][T13868] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2381'. [ 911.319634][T13868] : renamed from bond0 (while UP) [ 911.682124][T12721] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 913.883294][T12721] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 913.929831][T12721] usb 2-1: USB disconnect, device number 57 [ 915.094796][T13894] fuse: Unknown parameter 'use00000000000000000000' [ 920.333932][T12721] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 920.541463][T12721] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 920.565004][T12721] usb 1-1: config 0 has no interface number 0 [ 920.587783][T12721] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 920.601806][T12721] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.617696][T12721] usb 1-1: Product: syz [ 920.622832][T12721] usb 1-1: Manufacturer: syz [ 920.629182][T12721] usb 1-1: SerialNumber: syz [ 920.642072][T12721] usb 1-1: config 0 descriptor?? [ 921.005945][T12721] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 921.031157][T12721] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 921.062591][T12721] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 921.081196][T12721] usb 1-1: media controller created [ 921.131133][T12721] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 921.271229][T12721] i2c i2c-1: ec100: i2c rd failed=-32 reg=33 [ 922.407758][T12721] usb 1-1: USB disconnect, device number 50 [ 927.801465][T14034] fuse: Unknown parameter 'user_id00000000000000000000' [ 927.934420][T12707] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 928.258362][T12707] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 928.356870][T12707] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 928.418827][T12707] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 928.456799][T12707] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 928.487566][T12707] usb 1-1: Product: syz [ 928.491991][T12707] usb 1-1: Manufacturer: syz [ 928.496851][T12707] usb 1-1: SerialNumber: syz [ 928.523177][T12707] usb 1-1: config 0 descriptor?? [ 928.550779][T12707] usb 1-1: Found UVC 0.00 device syz (18ec:3288) [ 928.557640][T12707] usb 1-1: No valid video chain found. [ 928.756210][T12713] usb 1-1: USB disconnect, device number 51 [ 929.062347][ T5788] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 929.074214][ T5788] CPU: 0 PID: 5788 Comm: kworker/u5:2 Not tainted 6.6.97-syzkaller #0 [ 929.082441][ T5788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 929.092561][ T5788] Workqueue: hci0 hci_rx_work [ 929.097340][ T5788] Call Trace: [ 929.100651][ T5788] [ 929.103629][ T5788] dump_stack_lvl+0x16c/0x230 [ 929.108384][ T5788] ? show_regs_print_info+0x20/0x20 [ 929.113646][ T5788] ? load_image+0x3b0/0x3b0 [ 929.118212][ T5788] sysfs_create_dir_ns+0x256/0x280 [ 929.123346][ T5788] ? hci_rx_work+0x43a/0xd80 [ 929.127981][ T5788] ? sysfs_warn_dup+0xa0/0xa0 [ 929.132677][ T5788] ? do_raw_spin_unlock+0x121/0x230 [ 929.137905][ T5788] kobject_add_internal+0x6b8/0xc70 [ 929.143124][ T5788] kobject_add+0x156/0x220 [ 929.147550][ T5788] ? __rwlock_init+0x150/0x150 [ 929.152328][ T5788] ? kobject_init+0x1e0/0x1e0 [ 929.157015][ T5788] ? _raw_spin_unlock+0x28/0x40 [ 929.161878][ T5788] ? get_device_parent+0x366/0x390 [ 929.166999][ T5788] device_add+0x408/0xc20 [ 929.171341][ T5788] hci_conn_add_sysfs+0xd5/0x1e0 [ 929.176288][ T5788] le_conn_complete_evt+0xc37/0x1220 [ 929.181599][ T5788] ? hci_event_packet+0x4a7/0x1210 [ 929.186731][ T5788] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 929.192985][ T5788] ? __copy_skb_header+0xa7/0x550 [ 929.198021][ T5788] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 929.203676][ T5788] ? skb_pull_data+0xfb/0x200 [ 929.208379][ T5788] hci_le_conn_complete_evt+0x187/0x440 [ 929.213943][ T5788] ? hci_remote_host_features_evt+0x160/0x160 [ 929.220025][ T5788] hci_event_packet+0x795/0x1210 [ 929.224980][ T5788] ? bis_list+0x290/0x290 [ 929.229322][ T5788] ? lockdep_hardirqs_on+0x98/0x150 [ 929.234530][ T5788] ? hci_send_to_monitor+0xd7/0x4f0 [ 929.239747][ T5788] hci_rx_work+0x43a/0xd80 [ 929.244189][ T5788] ? process_scheduled_works+0x957/0x15b0 [ 929.249934][ T5788] process_scheduled_works+0xa45/0x15b0 [ 929.255517][ T5788] ? assign_work+0x400/0x400 [ 929.260123][ T5788] ? assign_work+0x39e/0x400 [ 929.264725][ T5788] worker_thread+0xa55/0xfc0 [ 929.269327][ T5788] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 929.275231][ T5788] ? _raw_spin_unlock+0x40/0x40 [ 929.280108][ T5788] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 929.286029][ T5788] kthread+0x2fa/0x390 [ 929.290105][ T5788] ? pr_cont_work+0x560/0x560 [ 929.294807][ T5788] ? kthread_blkcg+0xd0/0xd0 [ 929.299405][ T5788] ret_from_fork+0x48/0x80 [ 929.303839][ T5788] ? kthread_blkcg+0xd0/0xd0 [ 929.308475][ T5788] ret_from_fork_asm+0x11/0x20 [ 929.313266][ T5788] [ 929.320832][ T5788] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 929.334928][ T5788] Bluetooth: hci0: failed to register connection device [ 930.820897][T14066] fuse: Unknown parameter 'user_id00000000000000000000' [ 931.510803][T14073] sp0: Synchronizing with TNC [ 931.571951][T13239] Bluetooth: hci1: unexpected event for opcode 0x204e [ 932.012440][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.183955][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.149481][T14088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2455'. [ 933.161744][T14088] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2455'. [ 933.798390][T14093] fuse: Unknown parameter 'user_id00000000000000000000' [ 934.405657][T14102] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 934.416807][T14102] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 934.443959][T14102] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 934.473713][T14102] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 934.485055][T14102] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 934.492567][T14102] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 934.822863][T14108] sp0: Synchronizing with TNC [ 934.885968][T14029] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.031099][T14029] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.300244][T14029] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.558270][T14029] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.814731][T13239] Bluetooth: hci0: command 0x0406 tx timeout [ 936.177012][T14123] fuse: Bad value for 'fd' [ 936.534124][T13239] Bluetooth: hci1: command tx timeout [ 936.582007][T14101] chnl_net:caif_netlink_parms(): no params data found [ 936.812273][T14029] tipc: Left network mode [ 937.198794][T14101] bridge0: port 1(bridge_slave_0) entered blocking state [ 937.222074][T14101] bridge0: port 1(bridge_slave_0) entered disabled state [ 937.257062][T14101] bridge_slave_0: entered allmulticast mode [ 937.307321][T14101] bridge_slave_0: entered promiscuous mode [ 937.437093][T14101] bridge0: port 2(bridge_slave_1) entered blocking state [ 937.482483][T14101] bridge0: port 2(bridge_slave_1) entered disabled state [ 937.504275][T14101] bridge_slave_1: entered allmulticast mode [ 937.522081][T14101] bridge_slave_1: entered promiscuous mode [ 937.885245][T14145] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2470'. [ 937.895495][T14145] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2470'. [ 938.045376][T14101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 938.158572][T14101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 938.219638][T14150] sp0: Synchronizing with TNC [ 938.410217][T14101] team0: Port device team_slave_0 added [ 938.439145][T14101] team0: Port device team_slave_1 added [ 938.520150][T14163] fuse: Bad value for 'fd' [ 938.614001][T13239] Bluetooth: hci1: command tx timeout [ 938.752456][T14101] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 938.774430][T14101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 938.886551][T14101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 939.445422][T14101] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 939.635612][T14101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 939.770689][T14101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 940.207585][T14101] hsr_slave_0: entered promiscuous mode [ 940.254547][T14101] hsr_slave_1: entered promiscuous mode [ 940.264994][T14101] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 940.278374][T14101] Cannot create hsr debugfs directory [ 940.699611][T13239] Bluetooth: hci1: command tx timeout [ 942.843413][T13239] Bluetooth: hci1: command tx timeout [ 943.023374][T14029] hsr_slave_0: left promiscuous mode [ 943.099171][T14029] hsr_slave_1: left promiscuous mode [ 943.136745][T14029] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 943.137230][T14029] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 943.154848][T14029] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 943.155241][T14029] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 943.213277][T14029] bridge_slave_1: left allmulticast mode [ 943.213415][T14029] bridge_slave_1: left promiscuous mode [ 943.223004][T14029] bridge0: port 2(bridge_slave_1) entered disabled state [ 943.234969][T14029] bridge_slave_0: left allmulticast mode [ 943.234996][T14029] bridge_slave_0: left promiscuous mode [ 943.236385][T14029] bridge0: port 1(bridge_slave_0) entered disabled state [ 943.440028][T14029] veth1_macvtap: left promiscuous mode [ 943.440276][T14029] veth0_macvtap: left promiscuous mode [ 943.440785][T14029] veth1_vlan: left promiscuous mode [ 943.441133][T14029] veth0_vlan: left promiscuous mode [ 943.914294][T14215] fuse: Bad value for 'fd' [ 943.946676][T14206] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2483'. [ 943.955675][T14206] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2483'. [ 945.606536][T14029] team0 (unregistering): Port device team_slave_1 removed [ 945.692252][T14029] team0 (unregistering): Port device team_slave_0 removed [ 945.780724][T14029] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 945.942532][T14029] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 948.291100][T14244] fuse: Unknown parameter '0x0000000000000003' [ 949.039868][T14254] usb usb8: usbfs: process 14254 (syz.3.2496) did not claim interface 0 before use [ 949.373120][T14029] bond0 (unregistering): Released all slaves [ 951.020925][T14282] fuse: Unknown parameter '0x0000000000000003' [ 951.136351][T14101] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 951.243382][T14101] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 951.338724][T14101] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 951.358683][T14101] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 952.964720][T14101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 953.067314][T14101] 8021q: adding VLAN 0 to HW filter on device team0 [ 953.117225][ T6105] bridge0: port 1(bridge_slave_0) entered blocking state [ 953.124536][ T6105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 953.209808][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 953.217096][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 955.221265][T14101] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 955.380011][T14101] veth0_vlan: entered promiscuous mode [ 955.443466][T14101] veth1_vlan: entered promiscuous mode [ 955.541301][T14101] veth0_macvtap: entered promiscuous mode [ 955.567442][T14101] veth1_macvtap: entered promiscuous mode [ 955.625883][T14101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 955.646865][T14101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.674942][T14101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 955.693789][T14101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.704967][T14101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 955.715990][T14101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.728376][T14101] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 955.750695][T14101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 955.761891][T14101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.773506][T14101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 955.786017][T14101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.796885][T14101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 955.813845][T14101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.836445][T14101] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 955.890988][T14101] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.915030][T14101] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.933883][T14101] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.947246][T14101] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 956.125407][ T6670] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 956.164831][T14352] fuse: Unknown parameter '0x0000000000000003' [ 956.178727][ T6670] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 956.300393][ T6105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 956.330144][ T6105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 959.384927][T14396] fuse: Unknown parameter '0x0000000000000003' [ 961.202363][ T12] Bluetooth: hci4: Frame reassembly failed (-84) [ 961.646861][T14408] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 962.696554][ T5788] Bluetooth: hci4: command 0x1003 tx timeout [ 962.703491][T13239] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 963.150290][ T5788] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 963.164233][ T5788] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 963.172989][ T5788] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 963.204023][ T5788] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 963.227532][ T5788] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 963.236096][ T5788] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 965.272360][T14413] chnl_net:caif_netlink_parms(): no params data found [ 965.334090][T13239] Bluetooth: hci2: command tx timeout [ 965.434996][T14451] fuse: Unknown parameter '0x0000000000000003' [ 965.655336][T14413] bridge0: port 1(bridge_slave_0) entered blocking state [ 965.743360][T14413] bridge0: port 1(bridge_slave_0) entered disabled state [ 965.759222][T14413] bridge_slave_0: entered allmulticast mode [ 965.794148][T14413] bridge_slave_0: entered promiscuous mode [ 965.802900][T14413] bridge0: port 2(bridge_slave_1) entered blocking state [ 965.810918][T14413] bridge0: port 2(bridge_slave_1) entered disabled state [ 965.819640][T14413] bridge_slave_1: entered allmulticast mode [ 965.827133][T14413] bridge_slave_1: entered promiscuous mode [ 966.127832][T14466] overlayfs: failed to resolve './file0': -2 [ 967.272872][T14413] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 967.605209][T13239] Bluetooth: hci2: command tx timeout [ 971.506444][ T5788] Bluetooth: hci4: command 0x1003 tx timeout [ 971.513384][ T5788] Bluetooth: hci2: command tx timeout [ 971.944228][T13239] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 972.896182][T14477] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 973.152115][T14413] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 973.508784][T14413] team0: Port device team_slave_0 added [ 973.544329][T14413] team0: Port device team_slave_1 added [ 973.576476][T13239] Bluetooth: hci2: command tx timeout [ 974.289040][T14413] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 974.318689][T14413] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 974.353440][T14413] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 974.399496][T14503] fuse: Unknown parameter '0x0000000000000003' [ 974.420280][T14413] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 974.463592][T14413] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 974.517247][T14413] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 974.910279][T14413] hsr_slave_0: entered promiscuous mode [ 974.983160][T14413] hsr_slave_1: entered promiscuous mode [ 976.568768][T14413] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 976.658588][T14413] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 976.729648][T14413] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 976.885847][T14413] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.217289][T14413] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 977.263434][T14413] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 977.293259][T14413] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 977.381264][T14413] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 977.999937][T14413] 8021q: adding VLAN 0 to HW filter on device bond0 [ 978.351431][T14413] 8021q: adding VLAN 0 to HW filter on device team0 [ 978.396733][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 978.404001][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 978.480778][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 978.488050][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 978.596070][T14413] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 979.573321][T14413] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 979.653068][T14413] veth0_vlan: entered promiscuous mode [ 979.693039][T14413] veth1_vlan: entered promiscuous mode [ 979.760773][T14413] veth0_macvtap: entered promiscuous mode [ 979.799693][T14413] veth1_macvtap: entered promiscuous mode [ 979.870695][T14413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 979.902869][T14413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 979.915673][T14413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 979.926899][T14413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 979.936967][T14413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 979.948264][T14413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 979.958209][T14413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 979.968720][T14413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 979.981093][T14413] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 980.035317][T14413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 980.050621][T14413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 980.062955][T14413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 980.231710][T14413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 980.491540][T14413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 980.502236][T14413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 980.512399][T14413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 980.523958][T14413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 980.537586][T14413] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 980.577182][T14413] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.591774][T14413] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.612072][T14413] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.627880][T14413] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.526356][T14480] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 981.540846][T14480] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 982.054184][T14480] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 982.076803][T14480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 984.183027][T14638] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2561'. [ 985.256722][T14102] Bluetooth: hci3: command 0x0406 tx timeout [ 986.571894][T14662] overlayfs: failed to resolve './file0': -2 [ 988.379662][T14676] cgroup: fork rejected by pids controller in /syz1 [ 991.271782][T14102] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 991.294708][T14102] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 991.312662][T14102] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 991.322660][T14102] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 991.392742][T14102] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 991.400726][T14102] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 993.447496][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.467969][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.494250][T13239] Bluetooth: hci2: command tx timeout [ 993.868947][T14710] chnl_net:caif_netlink_parms(): no params data found [ 994.711661][T14710] bridge0: port 1(bridge_slave_0) entered blocking state [ 994.739546][T14710] bridge0: port 1(bridge_slave_0) entered disabled state [ 994.755827][T14710] bridge_slave_0: entered allmulticast mode [ 994.796149][T14710] bridge_slave_0: entered promiscuous mode [ 994.839310][T14710] bridge0: port 2(bridge_slave_1) entered blocking state [ 994.854133][T14710] bridge0: port 2(bridge_slave_1) entered disabled state [ 994.861456][T14710] bridge_slave_1: entered allmulticast mode [ 994.876641][T14710] bridge_slave_1: entered promiscuous mode [ 994.999222][T14710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 995.090661][T14710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 995.575138][T13239] Bluetooth: hci2: command tx timeout [ 995.723069][T14710] team0: Port device team_slave_0 added [ 995.765246][T14710] team0: Port device team_slave_1 added [ 995.847156][T14710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 995.856117][T14710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 995.902226][T14710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 995.972677][T14710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 996.004062][T14710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 996.064920][T14710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 996.172261][T14710] hsr_slave_0: entered promiscuous mode [ 996.182564][T14710] hsr_slave_1: entered promiscuous mode [ 996.198879][T14710] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 996.207289][T14710] Cannot create hsr debugfs directory [ 997.674274][T13239] Bluetooth: hci2: command tx timeout [ 998.199381][T14710] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.616435][T14710] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.735851][T14710] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.834204][T14710] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.209398][T14710] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 999.263468][T14710] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 999.276142][T14710] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 999.288157][T14710] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 999.558097][T14710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 999.621193][T14710] 8021q: adding VLAN 0 to HW filter on device team0 [ 999.734003][T13239] Bluetooth: hci2: command tx timeout [ 999.766861][ T6105] bridge0: port 1(bridge_slave_0) entered blocking state [ 999.774159][ T6105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 999.883044][T13358] bridge0: port 2(bridge_slave_1) entered blocking state [ 999.890345][T13358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1000.832600][T14710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1001.858515][T14710] veth0_vlan: entered promiscuous mode [ 1001.894583][T14710] veth1_vlan: entered promiscuous mode [ 1001.973025][T14710] veth0_macvtap: entered promiscuous mode [ 1002.001403][T14710] veth1_macvtap: entered promiscuous mode [ 1002.071313][T14710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1002.112998][T14710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.145157][T14710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1002.169858][T14710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.179980][T14710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1002.191262][T14710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.201171][T14710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1002.212133][T14710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.222125][T14710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1002.419388][T14710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.671812][T14710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1002.824131][T14710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1002.861574][T14710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.922837][T14710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1002.978031][T14710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1003.040412][T14710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1003.063782][T14710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1003.094267][T14710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1003.129836][T14710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1003.147946][T14710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1003.174188][T14710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1003.194957][T14710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1003.251494][T14710] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1003.277887][T14710] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1003.307528][T14710] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1003.330297][T14710] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1003.552194][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1003.592823][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1003.691903][T13358] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1003.733302][T13358] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1005.738135][T14102] Bluetooth: hci0: command 0x0406 tx timeout [ 1005.793929][T14874] fuse: Bad value for 'fd' [ 1007.205962][T14891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2627'. [ 1008.897994][T14918] fuse: Bad value for 'fd' [ 1011.228031][T14951] fuse: Bad value for 'fd' [ 1015.494714][T12707] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 1015.574649][T12707] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1020.431501][T11251] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1021.295442][T11251] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1021.305805][T11251] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1021.319021][T11251] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1021.328263][T11251] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1021.343215][T11251] usb 4-1: config 0 descriptor?? [ 1021.360071][T11251] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1021.906944][T15101] netlink: 7 bytes leftover after parsing attributes in process `syz.0.2693'. [ 1023.820520][T12721] usb 4-1: USB disconnect, device number 48 [ 1027.397037][T15176] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond_slave_1, syncid = 1, id = 0 [ 1027.574684][T15180] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2714'. [ 1027.712640][T15179] raw_sendmsg: syz.1.2714 forgot to set AF_INET. Fix it! [ 1031.896910][T15213] misc userio: Can't change port type on an already running userio instance [ 1035.199068][T15244] misc userio: Can't change port type on an already running userio instance [ 1039.584314][T11251] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1039.927636][T11251] usb 3-1: Using ep0 maxpacket: 16 [ 1040.008715][T11251] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1040.112639][T15286] fuse: Bad value for 'fd' [ 1040.141389][T11251] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1040.383306][T11251] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1040.390393][T11251] usb 3-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 1040.399875][T11251] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1040.445027][T11251] usb 3-1: config 0 descriptor?? [ 1041.091104][T11251] cougar 0003:060B:500A.000A: unexpected long global item [ 1041.099186][T11251] cougar 0003:060B:500A.000A: parse failed [ 1041.129700][T11251] cougar: probe of 0003:060B:500A.000A failed with error -22 [ 1041.167735][T11251] usb 3-1: USB disconnect, device number 33 [ 1042.585071][T15322] fuse: Bad value for 'fd' [ 1047.112793][T15381] fuse: Bad value for 'fd' [ 1049.363841][ T5899] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1049.554014][ T5899] usb 4-1: Using ep0 maxpacket: 16 [ 1049.563051][ T5899] usb 4-1: config 8 has an invalid interface number: 39 but max is 0 [ 1049.600836][ T5899] usb 4-1: config 8 has no interface number 0 [ 1049.613325][ T5899] usb 4-1: config 8 interface 39 altsetting 1 has an invalid endpoint with address 0xDF, skipping [ 1049.633179][ T5899] usb 4-1: config 8 interface 39 has no altsetting 0 [ 1049.657066][ T5899] usb 4-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 1049.673192][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1049.682052][ T5899] usb 4-1: Product: syz [ 1049.697139][ T5899] usb 4-1: Manufacturer: syz [ 1049.702340][ T5899] usb 4-1: SerialNumber: syz [ 1050.355329][ T5899] ipheth 4-1:8.39: Unable to find endpoints [ 1052.734370][T11251] usb 4-1: USB disconnect, device number 49 [ 1053.102261][T15476] misc userio: The device must be registered before sending interrupts [ 1054.858713][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.865383][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.251544][T15496] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 1055.273504][T15496] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 1056.297004][T15506] misc userio: The device must be registered before sending interrupts [ 1056.561689][T15517] overlayfs: failed to resolve './file0': -2 [ 1057.193851][T14102] Bluetooth: hci1: command 0x0406 tx timeout [ 1057.215925][T15515] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2818'. [ 1059.389964][T15546] misc userio: The device must be registered before sending interrupts [ 1062.357099][T13239] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 1062.357204][T13239] Bluetooth: hci2: Malformed LE Event: 0x0d [ 1062.969434][T15583] misc userio: No port type given on /dev/userio [ 1063.114258][T15583] misc userio: The device must be registered before sending interrupts [ 1063.983787][T15592] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 1064.438466][T15590] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 1068.120814][T15635] overlayfs: failed to resolve './file0': -2 [ 1071.081619][T15676] overlayfs: failed to resolve './file0': -2 [ 1074.551957][T15715] overlayfs: failed to resolve './file1': -2 [ 1079.717639][T15758] kvm: MWAIT instruction emulated as NOP! [ 1079.759879][T15758] Bluetooth: MGMT ver 1.22 [ 1082.465643][T12720] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 1083.169837][T12720] usb 4-1: config 5 has an invalid interface number: 123 but max is 0 [ 1083.179140][T12720] usb 4-1: config 5 has no interface number 0 [ 1083.224801][T12720] usb 4-1: config 5 interface 123 altsetting 7 has an invalid endpoint with address 0xEB, skipping [ 1083.283576][T12720] usb 4-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid maxpacket 50589, setting to 64 [ 1083.310518][T12720] usb 4-1: config 5 interface 123 has no altsetting 0 [ 1083.359202][T12720] usb 4-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 1083.391951][T12720] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1083.402645][T12720] usb 4-1: Product: syz [ 1083.477533][T12720] usb 4-1: Manufacturer: syz [ 1083.504914][T12720] usb 4-1: SerialNumber: syz [ 1083.552828][T15789] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1084.803583][T12720] comedi comedi4: Wrong number of endpoints [ 1084.809910][T12720] ni6501 4-1:5.123: driver 'ni6501' failed to auto-configure device. [ 1084.830997][T12720] usb 4-1: USB disconnect, device number 50 [ 1090.677490][T14029] unregister_netdevice: waiting for lo to become free. Usage count = 2 [ 1090.686611][T14029] ref_tracker: lo@ffff88805fe885b8 has 1/1 users at [ 1090.686611][T14029] dst_init+0xd9/0x460 [ 1090.686611][T14029] dst_alloc+0x12e/0x170 [ 1090.686611][T14029] ip_route_input_rcu+0x1f56/0x3010 [ 1090.686611][T14029] ip_route_input_noref+0x16f/0x260 [ 1090.686611][T14029] ip_rcv_finish_core+0x5a6/0x1bc0 [ 1090.686611][T14029] ip_rcv_finish+0x14e/0x250 [ 1090.686611][T14029] NF_HOOK+0x303/0x390 [ 1090.686611][T14029] __netif_receive_skb+0xcc/0x290 [ 1090.686611][T14029] netif_receive_skb+0x1bc/0x6f0 [ 1090.686611][T14029] tun_rx_batched+0x1ba/0x730 [ 1090.686611][T14029] tun_get_user+0x283f/0x3bf0 [ 1090.686611][T14029] tun_chr_write_iter+0x119/0x200 [ 1090.686611][T14029] vfs_write+0x43b/0x940 [ 1090.686611][T14029] ksys_write+0x147/0x250 [ 1090.686611][T14029] do_syscall_64+0x55/0xb0 [ 1090.686611][T14029] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1090.686611][T14029] [ 1090.774870][ C1] vkms_vblank_simulate: vblank timer overrun