last executing test programs: 51.515415658s ago: executing program 1 (id=3896): r0 = syz_open_dev$usbmon(&(0x7f0000000300), 0x100, 0x0) read$usbmon(r0, 0x0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beefff5d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d", 0x2a}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d", 0x24}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x9cde14b4b725c073}], 0x1, 0x448d4) recvmmsg(r3, &(0x7f0000003900)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)=""/242, 0xf2}], 0x1}, 0xfffffffd}, {{0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000000540)=""/225, 0xe1}, {&(0x7f0000001680)=""/253, 0xfd}, {&(0x7f0000001780)=""/4096, 0x1000}], 0x3}, 0x8000}], 0x2, 0x40000000, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000240)={0x0, 0x0}) ptrace(0x10, 0x0) ptrace$setregset(0x4205, 0x0, 0x200, &(0x7f00000001c0)={&(0x7f0000000440)="c94522e546f93f6dedf11f1509685636", 0x10}) syz_clone3(&(0x7f0000000400)={0x200000080, &(0x7f0000000080), &(0x7f00000001c0), &(0x7f0000000200), {0x34}, &(0x7f0000000640)=""/202, 0xca, &(0x7f0000000740)=""/229, &(0x7f0000000280)=[r4, 0x0], 0x2}, 0x58) r5 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r5, 0x0, 0xd0, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x124, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0xfffffffe, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0xb4, 0x8000000000000001, 0xb4, 0x5}}]}, 0x124}}, 0x0) socket$key(0xf, 0x3, 0x2) openat$nullb(0xffffffffffffff9c, 0x0, 0xa4242, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_open_dev$evdev(0x0, 0x6, 0x504482) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[], 0x0) r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r7, 0x707, &(0x7f0000000180)={&(0x7f0000000380)=[{0xfffb, 0x1001, 0x2, &(0x7f00000000c0)="1444"}, {0x2, 0x2000, 0x2, &(0x7f00000001c0)="bf88"}], 0x2}) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x100, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x9, 0x2, 0xfeffff7f00000000}, {0x0, 0x4, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x100}}, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x9208, 0x40) 46.50517881s ago: executing program 1 (id=3911): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000300)={'comedi_parport\x00', [0x800, 0x1f, 0x10000, 0x4, 0x3, 0xcc7, 0x4, 0x10, 0xe, 0x6, 0x2, 0x2, 0x7, 0x1, 0x6, 0x10000105, 0x0, 0x1244d, 0x3, 0x3fff7fff, 0x89, 0x10, 0x1, 0x20001e58, 0x80000b, 0xe6c, 0x8, 0x8, 0x6, 0xffffffff, 0xeffffff8]}) 43.991846725s ago: executing program 1 (id=3919): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x42}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, 0x0) pipe2(&(0x7f00000004c0)={0xffffffffffffffff}, 0x4080) io_uring_setup(0x2f00, &(0x7f0000000500)={0x0, 0xfa0d, 0x8, 0x20001, 0x2d6, 0x0, r4}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1e, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x9, 0x8006, 0xfffffffb, 0x6, 0x0, 0x60, 0x4e}, &(0x7f0000000340)=0x20) ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x7, 0x2}]}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003280)=[{{&(0x7f0000000100)=@nl=@unspec, 0x12, 0x0}}], 0x1, 0x0) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0xfff7, 0x2, 0x4}}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000900)={{}, 0x0, 0x10, @inherit={0x68, &(0x7f0000000680)={0x0, 0x4, 0x9, 0x2c7, {0x2, 0xf, 0x2, 0x9, 0x100000000}, [0x167400000000, 0x69f, 0x0, 0x3]}}, @subvolid=0xd0}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000020901030018000000000000010000050900010073797a3000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000010) 42.055226821s ago: executing program 1 (id=3922): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00006d3000/0x4000)=nil, 0x4000, 0x66) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r2, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) r3 = gettid() syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f0000000040)=0x2fff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_usb_connect(0x2, 0x0, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_procfs(0x0, 0x0) preadv(r5, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/230, 0xe6}], 0x1, 0x185, 0x0) timerfd_gettime(r5, &(0x7f0000000100)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010027bd7000fedbdf2500000000", @ANYRES32=r6, @ANYBLOB="1e5600000000000044459d51404c7a26e265c64cdb3b7f5e301fe7a0b50a30f1f54b"], 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x80) syz_open_dev$video(&(0x7f0000000000), 0x101, 0xc8380) 34.601238493s ago: executing program 1 (id=3943): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, 0x0) 34.184741274s ago: executing program 1 (id=3946): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 19.076556416s ago: executing program 32 (id=3946): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 17.955856722s ago: executing program 2 (id=3973): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_mptcp(0x2, 0x1, 0x106) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r5}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0xa, 0x11, &(0x7f0000000500)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x2a}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x85}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}]}, 0x0}, 0x94) 16.356841106s ago: executing program 2 (id=3977): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0xa, 0x3, 0x87) sendto(r4, &(0x7f00000003c0)="e1118ce4769b", 0xfdef, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x490040, 0x0) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x14) 14.429782397s ago: executing program 0 (id=3981): syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d000005"], 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000dae11c105e0484028fa4010203010902240001000000000904000002437d67000905"], 0x0) 10.743079504s ago: executing program 2 (id=3988): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f00000002c0)={0x40, 0xe}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 10.192680741s ago: executing program 0 (id=3990): socket$netlink(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040e0a0f0d04"], 0xd) 9.916702185s ago: executing program 0 (id=3991): socket(0x40000000015, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x3c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x5000, 0x80000001, @remote, 0x7}, 0x1c) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) 9.90626438s ago: executing program 4 (id=3992): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x42}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, 0x0) pipe2(&(0x7f00000004c0)={0xffffffffffffffff}, 0x4080) io_uring_setup(0x2f00, &(0x7f0000000500)={0x0, 0xfa0d, 0x8, 0x20001, 0x2d6, 0x0, r4}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1e, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x9, 0x8006, 0xfffffffb, 0x6, 0x0, 0x60, 0x4e, 0x0}, &(0x7f0000000340)=0x20) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000380)={r6, 0x25a}, &(0x7f00000003c0)=0x8) ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x7, 0x2}]}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003280)=[{{&(0x7f0000000100)=@nl=@unspec, 0x12, 0x0}}], 0x1, 0x0) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0xfff7, 0x2, 0x4}}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000900)={{}, 0x0, 0x10, @inherit={0x68, &(0x7f0000000680)={0x0, 0x4, 0x9, 0x2c7, {0x2, 0xf, 0x2, 0x9, 0x100000000}, [0x167400000000, 0x69f, 0x0, 0x3]}}, @subvolid=0xd0}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000020901030018000000000000010000050900010073797a3000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000010) 9.784757175s ago: executing program 3 (id=3993): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20048054) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) r3 = syz_io_uring_setup(0x49a, &(0x7f00000003c0)={0x0, 0x79ad, 0x3180, 0x7ffd, 0x32c, 0x0, r2}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r2, 0x6, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r3, 0xfd0, 0x4c1, 0x43, 0x0, 0x0) close(r0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendto$inet6(r6, 0x0, 0x0, 0x20010004, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) 8.718443934s ago: executing program 4 (id=3994): socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500), 0x42, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = syz_io_uring_setup(0x117, &(0x7f0000000400)={0x0, 0x0, 0x10, 0x0, 0x3a2}, &(0x7f00000001c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r1, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0, 0x40000, 0x1}) io_uring_enter(r2, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 8.406080079s ago: executing program 5 (id=3995): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60242, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x6b4, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$get_persistent(0x16, 0xffffffffffffffff, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x444d82, 0x0) write$P9_RSTATu(r3, &(0x7f00000004c0)={0x224, 0x7d, 0x0, {{0x500, 0xe3, 0x0, 0x4, {0x0, 0x40000, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x1f, ' nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x47, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\a\x00\x00\x00\x00\x00\x00\x00\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x224) keyctl$clear(0x7, 0x0) 8.295572896s ago: executing program 3 (id=3996): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x2) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b00000008000100", @ANYRES64=r0], 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) 7.105353648s ago: executing program 4 (id=3997): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, 0x0) 6.976687679s ago: executing program 5 (id=3998): r0 = mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x100, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r2}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000007c0)={0x28, 0x3, r2, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x1004000}) close_range(r0, 0xffffffffffffffff, 0x0) 6.854187949s ago: executing program 3 (id=3999): openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x24, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x4c}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) ptrace(0x10, 0x1) 6.489568775s ago: executing program 4 (id=4000): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x60081, 0x0) sendto(0xffffffffffffffff, &(0x7f00000003c0)="e1118ce4769b", 0xfdef, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x490040, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xffffff81, {0x0, 0x0, 0x0, r5, {0xe, 0x1}, {}, {0x9, 0xfff1}}}, 0x24}}, 0x40004) r6 = syz_open_dev$loop(&(0x7f0000000000), 0x80000000, 0x10b200) ioctl$BLKPG(r6, 0x1269, &(0x7f0000000140)={0x3, 0x0, 0x98, &(0x7f0000000080)={0x7, 0x2, 0x11}}) socket$netlink(0x10, 0x3, 0x14) 6.362997353s ago: executing program 3 (id=4001): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000180)=0x3, 0x4) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) syz_emit_ethernet(0x86, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = syz_clone(0xa1302400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x8, r3) r4 = syz_pidfd_open(r3, 0x0) process_mrelease(r4, 0x700000000000000) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_io_uring_setup(0x1d20, &(0x7f0000000200)={0x0, 0xd0d4, 0x10100, 0x3, 0xaa}, &(0x7f0000000000), &(0x7f0000000140)) r6 = eventfd2(0x6, 0x80000) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x7, &(0x7f0000000040)=r6, 0x1) io_uring_enter(r5, 0x474a, 0xdfffeff8, 0x48, 0x0, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x19, 0x0, &(0x7f0000000040)) r7 = io_uring_setup(0x7534, &(0x7f00000003c0)={0x0, 0x48c7, 0x0, 0xfffffffc, 0xffffffff}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) 6.292420933s ago: executing program 2 (id=4002): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000054000000030a01a2a5e960adabb49800010000000900030073797a31000000000900010073797a3100000000280004800800014000000005080002401b2fd2c5140003006970366772653000000000000000000028000000020a05000000000000000000010000080900010073797a3100"], 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) openat2$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040)={0x204100, 0x145, 0x13}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x4, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) r3 = syz_open_procfs(0x0, 0x0) preadv(r3, &(0x7f00000000c0)=[{0x0}], 0x1, 0xb6, 0x0) kexec_load(0xf5, 0x1, &(0x7f0000000b80)=[{0x0, 0x0, 0x0, 0x90000}], 0x0) 4.244956767s ago: executing program 2 (id=4003): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0xa002, 0x0) write(r0, &(0x7f0000000640)="bdd2b42667e2a3475fea422540731f27a6bb6b834bfe23a90e685866dae9c03ee5810f885fe0fe0ab56b3aaa09", 0x2d) 4.152238477s ago: executing program 5 (id=4004): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x8, 0x7}]}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) preadv(0xffffffffffffffff, &(0x7f00000007c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x101, 0x2) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'team_slave_0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0xff], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0xd2, &(0x7f0000000840)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "01a604", 0x9c, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, @mcast2, {[], {0x4e23, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "70aa406e06d33342a89e1bc0968edeaa64cb58eee34eeb4800", "0772f933c5c2d78f91903f58d74edaf1f5bd09edd42b31a9530f79148848b7242ef7c9f01044d3bb3442a35e698d4be4", "6bbff34b6adacc361bbd6a4728607fe4d73b3d26ace9cf1b196bb62b", {"6bed9da9ef24d4ff5a9052a252499bbe", "0ce437e5dc30b6a98f6e30a732bbe164"}}}}}}}}, 0x0) 3.908689406s ago: executing program 2 (id=4005): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000000) socket(0x28, 0x801, 0x0) socket$qrtr(0x2a, 0x2, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) lseek(0xffffffffffffffff, 0x101, 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000280)={0x13, 0x10, 0xfa00, {&(0x7f0000000380), r3, 0x1}}, 0x18) syz_usb_connect(0x2, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) 3.858820532s ago: executing program 0 (id=4006): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x42}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, 0x0) pipe2(&(0x7f00000004c0)={0xffffffffffffffff}, 0x4080) io_uring_setup(0x2f00, &(0x7f0000000500)={0x0, 0xfa0d, 0x8, 0x20001, 0x2d6, 0x0, r4}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1e, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x9, 0x8006, 0xfffffffb, 0x6, 0x0, 0x60, 0x4e, 0x0}, &(0x7f0000000340)=0x20) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000380)={r6, 0x25a}, &(0x7f00000003c0)=0x8) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x7, 0x2}]}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003280)=[{{&(0x7f0000000100)=@nl=@unspec, 0x12, 0x0}}], 0x1, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0xfff7, 0x2, 0x4}}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000900)={{}, 0x0, 0x10, @inherit={0x68, &(0x7f0000000680)={0x0, 0x4, 0x9, 0x2c7, {0x2, 0xf, 0x2, 0x9, 0x100000000}, [0x167400000000, 0x69f, 0x0, 0x3]}}, @subvolid=0xd0}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000020901030018000000000000010000050900010073797a3000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000010) 3.778851457s ago: executing program 5 (id=4007): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20048054) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) r3 = syz_io_uring_setup(0x49a, &(0x7f00000003c0)={0x0, 0x79ad, 0x3180, 0x7ffd, 0x32c, 0x0, r2}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r2, 0x6, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r3, 0xfd0, 0x4c1, 0x43, 0x0, 0x0) close(r0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendto$inet6(r6, 0x0, 0x0, 0x20010004, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) 2.668657043s ago: executing program 0 (id=4008): socket$nl_netfilter(0x10, 0x3, 0xc) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500), 0x42, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = syz_io_uring_setup(0x117, &(0x7f0000000400)={0x0, 0x0, 0x10, 0x0, 0x3a2}, &(0x7f00000001c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r1, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x18}, 0x0, 0x40000, 0x1}) io_uring_enter(r2, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 2.378025437s ago: executing program 3 (id=4009): mount$tmpfs(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000f80), 0x400, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRESDEC]) 2.33605082s ago: executing program 5 (id=4010): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60242, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x6b4, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$get_persistent(0x16, 0xffffffffffffffff, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x444d82, 0x0) write$P9_RSTATu(r3, &(0x7f00000004c0)={0x224, 0x7d, 0x0, {{0x500, 0xe3, 0x0, 0x4, {0x0, 0x40000, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x1f, ' nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x47, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\a\x00\x00\x00\x00\x00\x00\x00\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x224) keyctl$clear(0x7, 0x0) 2.214649119s ago: executing program 4 (id=4011): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x42}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, 0x0) pipe2(&(0x7f00000004c0)={0xffffffffffffffff}, 0x4080) io_uring_setup(0x2f00, &(0x7f0000000500)={0x0, 0xfa0d, 0x8, 0x20001, 0x2d6, 0x0, r4}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1e, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x9, 0x8006, 0xfffffffb, 0x6, 0x0, 0x60, 0x4e, 0x0}, &(0x7f0000000340)=0x20) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000380)={r6, 0x25a}, &(0x7f00000003c0)=0x8) ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x7, 0x2}]}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003280)=[{{&(0x7f0000000100)=@nl=@unspec, 0x12, 0x0}}], 0x1, 0x0) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x0, 0x0, 0xfff7, 0x2, 0x4}}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000900)={{}, 0x0, 0x10, @inherit={0x68, &(0x7f0000000680)={0x0, 0x4, 0x9, 0x2c7, {0x2, 0xf, 0x2, 0x9, 0x100000000}, [0x167400000000, 0x69f, 0x0, 0x3]}}, @subvolid=0xd0}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000020901030018000000000000010000050900010073797a3000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000010) 1.981001364s ago: executing program 3 (id=4012): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fgetxattr(r0, &(0x7f0000000180)=@random={'trusted.', 't\x00'}, &(0x7f0000000300)=""/131, 0x83) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) mkdirat(r4, 0x0, 0x112) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r5, 0x80000300, 0x0, 0x0) quotactl_fd$Q_GETINFO(r5, 0xffffffff80000500, 0x0, &(0x7f00000002c0)) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) 299.437251ms ago: executing program 4 (id=4013): openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x24, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x4c}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) ptrace(0x10, 0x1) 359.123µs ago: executing program 0 (id=4014): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000000)=0x9, 0x1) 0s ago: executing program 5 (id=4015): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="10007d8005", @ANYRES8=0x0, @ANYRES32=r0], 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) kernel console output (not intermixed with test programs): d bInterval 0, changing to 7 [ 1402.552356][ T5899] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1402.597753][ T5899] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1402.615361][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1402.632501][T18518] tipc: Resetting bearer [ 1402.661648][ T5899] usb 5-1: config 0 descriptor?? [ 1402.695187][ T9] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1402.741205][T18518] tipc: Disabling bearer [ 1402.872860][ T9] usb 6-1: config 0 has no interfaces? [ 1402.915265][ T9] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1402.959999][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1402.984305][ T9] usb 6-1: Product: syz [ 1402.995424][ T9] usb 6-1: Manufacturer: syz [ 1403.020558][ T9] usb 6-1: SerialNumber: syz [ 1403.054797][ T9] usb 6-1: config 0 descriptor?? [ 1403.160033][T18543] syzkaller0: entered promiscuous mode [ 1403.188961][T18543] syzkaller0: entered allmulticast mode [ 1403.547072][ T5899] usbhid 5-1:0.0: can't add hid device: -71 [ 1403.566724][ T5899] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1403.618628][ T5899] usb 5-1: USB disconnect, device number 50 [ 1404.584431][T18562] netlink: 'syz.4.3358': attribute type 13 has an invalid length. [ 1404.733425][ T5899] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1404.781666][ T9] usb 6-1: USB disconnect, device number 27 [ 1404.941102][ T5899] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1404.962642][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1404.985337][ T5899] usb 4-1: Product: syz [ 1404.996885][ T5899] usb 4-1: Manufacturer: syz [ 1405.003918][ T5899] usb 4-1: SerialNumber: syz [ 1405.060931][ T5899] usb 4-1: config 0 descriptor?? [ 1405.972818][ T5899] usb 4-1: Firmware version (0.0) predates our first public release. [ 1405.999702][ T5899] usb 4-1: Please update to version 0.2 or newer [ 1406.229027][ T5899] usb 4-1: USB disconnect, device number 41 [ 1407.874098][T18584] tipc: Enabled bearer , priority 0 [ 1407.884690][T18584] syzkaller0: entered promiscuous mode [ 1407.890198][T18584] syzkaller0: entered allmulticast mode [ 1408.019884][T18583] tipc: Resetting bearer [ 1408.211493][T18583] tipc: Disabling bearer [ 1409.414773][ T5899] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1409.658471][ T5899] usb 3-1: Using ep0 maxpacket: 16 [ 1409.748311][ T5899] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1409.784743][ T5899] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1409.835549][ T5899] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1410.339501][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1410.377109][ T5899] usb 3-1: config 0 descriptor?? [ 1411.173328][ T6836] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1411.238685][ T5899] usbhid 3-1:0.0: can't add hid device: -71 [ 1411.254098][ T5899] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1411.308189][ T5899] usb 3-1: USB disconnect, device number 50 [ 1411.377869][ T6836] usb 2-1: config 0 has no interfaces? [ 1411.427973][ T6836] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1411.465752][ T6836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1411.476271][ T6836] usb 2-1: Product: syz [ 1411.483069][ T6836] usb 2-1: Manufacturer: syz [ 1411.493230][ T6836] usb 2-1: SerialNumber: syz [ 1411.531673][ T6836] usb 2-1: config 0 descriptor?? [ 1412.674632][T18632] tipc: Enabled bearer , priority 0 [ 1412.728832][T18632] syzkaller0: entered promiscuous mode [ 1412.747411][T18632] syzkaller0: entered allmulticast mode [ 1412.817883][T18631] tipc: Resetting bearer [ 1413.052119][T18631] tipc: Disabling bearer [ 1413.364457][ T6836] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1413.547825][ T6836] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1413.576437][ T6836] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1413.600162][ T6836] usb 6-1: Product: syz [ 1413.612708][ T6836] usb 6-1: Manufacturer: syz [ 1413.632004][ T6836] usb 6-1: SerialNumber: syz [ 1413.669940][ T6836] usb 6-1: config 0 descriptor?? [ 1414.089664][ T6286] usb 2-1: USB disconnect, device number 45 [ 1414.099114][ T6836] usb 6-1: Firmware version (0.0) predates our first public release. [ 1414.132025][ T6836] usb 6-1: Please update to version 0.2 or newer [ 1414.269862][T18650] tipc: Enabled bearer , priority 0 [ 1414.479665][T18660] netlink: 112 bytes leftover after parsing attributes in process `syz.2.3380'. [ 1414.483320][ T6836] usb 6-1: USB disconnect, device number 28 [ 1414.499959][T18650] syzkaller0: entered promiscuous mode [ 1414.530950][T18659] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3382'. [ 1414.547500][T18650] syzkaller0: entered allmulticast mode [ 1414.730815][T18649] tipc: Resetting bearer [ 1414.810211][T18649] tipc: Disabling bearer [ 1414.863093][ T5899] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 1415.076412][ T5899] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1415.101026][ T5899] usb 2-1: config 0 has no interface number 0 [ 1415.128494][ T5899] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1415.161071][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1415.204909][ T5899] usb 2-1: config 0 descriptor?? [ 1415.228019][ T5899] usb 2-1: selecting invalid altsetting 1 [ 1415.441745][T18659] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3382'. [ 1415.619477][T18670] overlay: filesystem on ./file0 not supported as upperdir [ 1416.243151][ T5899] dvb_ttusb_budget: ttusb_init_controller: error [ 1416.253058][ T5899] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1416.500042][ T5899] DVB: Unable to find symbol cx22700_attach() [ 1416.826968][ T5899] DVB: Unable to find symbol tda10046_attach() [ 1416.857341][ T5899] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1416.901421][ T5899] usb 2-1: USB disconnect, device number 46 [ 1417.043073][ T6836] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1417.233028][ T6836] usb 3-1: Using ep0 maxpacket: 16 [ 1417.252694][ T6836] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1417.303278][ T6836] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1417.320078][ T6836] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1417.360103][ T6836] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1417.412153][ T6836] usb 3-1: config 0 descriptor?? [ 1417.928193][ T6836] nzxt-smart2 0003:1E71:2009.0012: unknown main item tag 0x0 [ 1417.979053][ T6836] nzxt-smart2 0003:1E71:2009.0012: unknown main item tag 0x0 [ 1418.010807][ T6836] nzxt-smart2 0003:1E71:2009.0012: unknown main item tag 0x0 [ 1418.039179][ T6836] nzxt-smart2 0003:1E71:2009.0012: unknown main item tag 0x0 [ 1418.069358][ T6836] nzxt-smart2 0003:1E71:2009.0012: unknown main item tag 0x0 [ 1418.134509][ T6836] nzxt-smart2 0003:1E71:2009.0012: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 1418.170588][ C1] usb 3-1: input irq status -75 received [ 1418.409060][ T5899] usb 3-1: USB disconnect, device number 51 [ 1418.555601][T18690] fido_id[18690]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1418.696639][T18692] tipc: Enabled bearer , priority 0 [ 1418.721730][T18692] syzkaller0: entered promiscuous mode [ 1418.747636][T18692] syzkaller0: entered allmulticast mode [ 1418.796839][T18692] tipc: Resetting bearer [ 1418.826629][T18691] tipc: Resetting bearer [ 1419.244529][T18691] tipc: Disabling bearer [ 1420.389690][T18711] netlink: 112 bytes leftover after parsing attributes in process `syz.3.3395'. [ 1421.414381][T18726] overlay: filesystem on ./file0 not supported as upperdir [ 1422.405103][T18733] netlink: 'syz.1.3396': attribute type 12 has an invalid length. [ 1422.906474][T18740] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3401'. [ 1423.883085][ T6836] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1423.983139][ T6286] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 1424.145388][ T6836] usb 3-1: Using ep0 maxpacket: 16 [ 1424.174382][ T6836] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1424.193160][ T6836] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1424.205248][ T6836] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1424.251964][ T6836] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1424.315847][ T6286] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1424.347410][ T6836] usb 3-1: config 0 descriptor?? [ 1424.361186][ T6286] usb 6-1: config 0 has no interface number 0 [ 1424.388253][ T6286] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1424.427725][ T6286] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1424.489776][ T6286] usb 6-1: config 0 descriptor?? [ 1424.543498][ T6286] usb 6-1: selecting invalid altsetting 1 [ 1424.581491][ T6286] dvb_ttusb_budget: ttusb_init_controller: error [ 1424.612103][ T6286] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1424.829500][T18737] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3401'. [ 1424.855621][ T6836] nzxt-smart2 0003:1E71:2009.0013: unknown main item tag 0x0 [ 1424.868963][ T6836] nzxt-smart2 0003:1E71:2009.0013: unknown main item tag 0x0 [ 1424.881613][ T6836] nzxt-smart2 0003:1E71:2009.0013: unknown main item tag 0x0 [ 1424.911472][ T6836] nzxt-smart2 0003:1E71:2009.0013: unknown main item tag 0x0 [ 1424.951374][ T6836] nzxt-smart2 0003:1E71:2009.0013: unknown main item tag 0x0 [ 1425.029565][ T6836] nzxt-smart2 0003:1E71:2009.0013: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 1425.094573][ C0] usb 3-1: input irq status -75 received [ 1425.110041][ T6286] DVB: Unable to find symbol cx22700_attach() [ 1425.478417][ T5899] usb 3-1: USB disconnect, device number 52 [ 1425.699932][T18759] fido_id[18759]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1425.897833][ T6286] DVB: Unable to find symbol tda10046_attach() [ 1425.933389][ T6286] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1426.094486][ T6286] usb 6-1: USB disconnect, device number 29 [ 1426.713069][ T6286] usb 6-1: new full-speed USB device number 30 using dummy_hcd [ 1427.205337][ T6286] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1427.264069][ T6286] usb 6-1: not running at top speed; connect to a high speed hub [ 1427.326209][ T6286] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1427.363054][ T6286] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1427.393814][T18774] netlink: 112 bytes leftover after parsing attributes in process `syz.2.3410'. [ 1427.434147][ T6286] usb 6-1: string descriptor 0 read error: -22 [ 1427.453194][ T6286] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1427.489714][ T6286] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1427.584466][ T6286] usb 6-1: 0:2 : does not exist [ 1428.201208][T18778] overlay: filesystem on ./file0 not supported as upperdir [ 1428.816608][ T6286] usb 6-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1428.831489][ T6286] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1428.849367][ T6286] usb 6-1: 5:0: failed to get current value for ch 1 (-22) [ 1428.933628][ T6286] usb 6-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1429.001232][ T6286] usb 6-1: USB disconnect, device number 30 [ 1430.303833][ T6286] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1430.535899][ T6286] usb 6-1: config 0 has no interfaces? [ 1430.631011][ T6286] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1430.690859][ T6286] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1430.765408][ T6286] usb 6-1: Product: syz [ 1430.769718][ T6286] usb 6-1: Manufacturer: syz [ 1430.786231][T18802] tipc: Enabled bearer , priority 0 [ 1430.811409][T18802] syzkaller0: entered promiscuous mode [ 1430.833787][ T6286] usb 6-1: SerialNumber: syz [ 1430.853388][T18802] syzkaller0: entered allmulticast mode [ 1430.893886][T18802] tipc: Resetting bearer [ 1430.931174][T18801] tipc: Resetting bearer [ 1431.075888][T18801] tipc: Disabling bearer [ 1431.234351][ T6286] usb 6-1: config 0 descriptor?? [ 1432.336363][T18817] netlink: 'syz.2.3420': attribute type 12 has an invalid length. [ 1432.616451][T18822] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3423'. [ 1432.713035][ T5899] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1432.752607][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1432.779514][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1432.958712][ T5899] usb 5-1: Using ep0 maxpacket: 16 [ 1432.967812][ T5899] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1432.983110][ T5899] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1432.989744][ T5899] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1433.026862][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1433.126751][ T5899] usb 5-1: config 0 descriptor?? [ 1433.608475][ T5899] nzxt-smart2 0003:1E71:2009.0014: unknown main item tag 0x0 [ 1433.633047][ T5899] nzxt-smart2 0003:1E71:2009.0014: unknown main item tag 0x0 [ 1433.661233][ T5899] nzxt-smart2 0003:1E71:2009.0014: unknown main item tag 0x0 [ 1433.691640][ T5899] nzxt-smart2 0003:1E71:2009.0014: unknown main item tag 0x0 [ 1433.727367][ T5899] nzxt-smart2 0003:1E71:2009.0014: unknown main item tag 0x0 [ 1433.803425][ T5899] nzxt-smart2 0003:1E71:2009.0014: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 1433.853966][ C0] usb 5-1: input irq status -75 received [ 1434.003515][ T5899] usb 5-1: USB disconnect, device number 51 [ 1434.474379][ T5899] usb 6-1: USB disconnect, device number 31 [ 1434.652741][T18832] fido_id[18832]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1435.743087][ T5899] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 1435.918264][ T5899] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1435.930680][ T5899] usb 2-1: not running at top speed; connect to a high speed hub [ 1435.974544][ T5899] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1436.009475][ T5899] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1436.049955][ T5899] usb 2-1: string descriptor 0 read error: -22 [ 1436.068624][ T5899] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1436.105112][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1436.203858][ T5899] usb 2-1: 0:2 : does not exist [ 1436.794521][ T5899] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1436.827199][ T5899] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1436.862911][ T5899] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 1436.945958][ T5899] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1436.981571][ T5899] usb 2-1: USB disconnect, device number 47 [ 1439.263881][T18868] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3436'. [ 1442.123178][ T6286] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1442.286476][ T5899] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1442.608123][ T6286] usb 3-1: config 0 has no interfaces? [ 1442.614280][ T6286] usb 3-1: New USB device found, idVendor=0919, idProduct=3333, bcdDevice= 0.40 [ 1442.650477][ T6286] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1442.831869][ T5899] usb 5-1: Using ep0 maxpacket: 16 [ 1443.001610][ T6286] usb 3-1: config 0 descriptor?? [ 1443.011653][ T5899] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1443.055640][ T5899] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1443.086093][ T5899] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1443.123128][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1443.133117][ T6836] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1443.152267][ T5899] usb 5-1: config 0 descriptor?? [ 1443.263891][T18880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1443.272927][T18880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1443.326119][ T6286] usb 3-1: USB disconnect, device number 53 [ 1443.348023][ T6836] usb 2-1: config 0 has no interfaces? [ 1443.359139][ T6836] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1443.399788][ T6836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1443.505736][ T6836] usb 2-1: Product: syz [ 1443.605312][ T5899] nzxt-smart2 0003:1E71:2009.0015: unknown main item tag 0x0 [ 1443.663531][ T5899] nzxt-smart2 0003:1E71:2009.0015: unknown main item tag 0x0 [ 1443.666180][ T6836] usb 2-1: Manufacturer: syz [ 1443.721804][ T5899] nzxt-smart2 0003:1E71:2009.0015: unknown main item tag 0x0 [ 1443.761171][ T5899] nzxt-smart2 0003:1E71:2009.0015: unknown main item tag 0x0 [ 1443.794260][ T5899] nzxt-smart2 0003:1E71:2009.0015: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 1443.861588][ T6836] usb 2-1: SerialNumber: syz [ 1443.913037][ T6286] usb 3-1: new full-speed USB device number 54 using dummy_hcd [ 1443.917624][ C0] usb 5-1: input irq status -75 received [ 1443.942677][ T6836] usb 2-1: config 0 descriptor?? [ 1444.085197][ T6286] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1444.127046][ T6286] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 4 [ 1444.172854][ T6286] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1444.196296][ T6286] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1444.233049][ T6286] usb 3-1: Product: syz [ 1444.245818][ T6286] usb 3-1: Manufacturer: syz [ 1444.275279][ T6286] usb 3-1: SerialNumber: syz [ 1444.294328][ T6286] usb 3-1: config 0 descriptor?? [ 1444.318204][ T6286] hub 3-1:0.0: bad descriptor, ignoring hub [ 1444.338262][ T6286] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1444.747208][ T6286] usb 3-1: USB disconnect, device number 54 [ 1444.956837][T18902] udevd[18902]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1445.243673][ T6836] usb 5-1: USB disconnect, device number 52 [ 1446.869709][T18926] overlay: filesystem on ./file0 not supported as upperdir [ 1447.041594][ T5899] usb 2-1: USB disconnect, device number 48 [ 1447.463401][ T6836] usb 3-1: new full-speed USB device number 55 using dummy_hcd [ 1447.630877][ T6836] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1447.639308][ T6836] usb 3-1: not running at top speed; connect to a high speed hub [ 1447.674490][ T6836] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1447.710244][ T6836] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1447.752904][ T6836] usb 3-1: string descriptor 0 read error: -22 [ 1447.783123][ T6836] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1447.808063][ T6836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1447.867961][ T6836] usb 3-1: 0:2 : does not exist [ 1448.940925][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 1448.969462][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 1448.977411][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 1448.984873][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 1448.992297][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 1449.000199][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 1449.007649][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 1449.016047][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 1449.023624][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 1449.030824][ T6836] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1449.038938][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 1449.047240][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 1449.054890][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 1449.062598][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 1449.070328][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 1449.079633][ T6836] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1449.101373][ T6836] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 1449.153108][ T6836] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1449.193330][ T6836] usb 3-1: USB disconnect, device number 55 [ 1451.203237][ T5899] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1451.373276][ T5899] usb 3-1: Using ep0 maxpacket: 16 [ 1451.394967][ T5899] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1451.430730][ T5899] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1451.448124][ T5899] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1451.472318][T18959] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3458'. [ 1451.491734][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1451.532417][ T5899] usb 3-1: config 0 descriptor?? [ 1451.553074][T18958] genirq: Flags mismatch irq 31. 00200000 (comedi_parport) vs. 00200000 (virtio1-input.0) [ 1452.011784][ T5899] nzxt-smart2 0003:1E71:2009.0016: unknown main item tag 0x0 [ 1452.034458][ T9] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 1452.042110][ T5899] nzxt-smart2 0003:1E71:2009.0016: unknown main item tag 0x0 [ 1452.056671][ T5899] nzxt-smart2 0003:1E71:2009.0016: unknown main item tag 0x0 [ 1452.079170][ T5899] nzxt-smart2 0003:1E71:2009.0016: unknown main item tag 0x0 [ 1452.104453][ T5899] nzxt-smart2 0003:1E71:2009.0016: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 1452.225424][ T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1452.251928][ T9] usb 4-1: config 0 has no interface number 0 [ 1452.279982][ T9] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1452.325397][ C0] usb 3-1: input irq status -75 received [ 1452.365012][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1452.433374][ T9] usb 4-1: config 0 descriptor?? [ 1452.491257][ T9] usb 4-1: selecting invalid altsetting 1 [ 1452.671893][T18959] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3458'. [ 1452.686388][ T9] dvb_ttusb_budget: ttusb_init_controller: error [ 1452.705472][ T9] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1453.316623][ T9] DVB: Unable to find symbol cx22700_attach() [ 1453.566474][ T9] DVB: Unable to find symbol tda10046_attach() [ 1453.593350][ T9] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1453.820037][ T6836] usb 3-1: USB disconnect, device number 56 [ 1454.115953][T18982] nbd: nbd2 already in use [ 1455.081350][ T5899] usb 4-1: USB disconnect, device number 42 [ 1455.495564][ T6836] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1455.623023][ T9] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1455.752250][T19004] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3469'. [ 1455.788078][ T9] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1455.797428][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1455.810879][ T9] usb 5-1: Product: syz [ 1455.823922][ T9] usb 5-1: Manufacturer: syz [ 1455.831907][ T6836] usb 3-1: config 0 has no interfaces? [ 1455.853096][ T9] usb 5-1: SerialNumber: syz [ 1455.861502][ T6836] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1455.890237][ T6836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1455.919255][ T6836] usb 3-1: Product: syz [ 1455.935895][ T6836] usb 3-1: Manufacturer: syz [ 1455.952754][ T6836] usb 3-1: SerialNumber: syz [ 1455.953864][ T9] usb 5-1: config 0 descriptor?? [ 1456.004343][ T6836] usb 3-1: config 0 descriptor?? [ 1456.399483][ T9] usb 5-1: Firmware version (0.0) predates our first public release. [ 1456.417930][ T9] usb 5-1: Please update to version 0.2 or newer [ 1457.204771][ T9] usb 5-1: USB disconnect, device number 53 [ 1458.785652][ T6836] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1458.910552][T19032] tipc: Enabled bearer , priority 0 [ 1458.917694][T19034] syzkaller0: entered promiscuous mode [ 1458.929487][T19034] syzkaller0: entered allmulticast mode [ 1458.940022][T19037] tipc: Resetting bearer [ 1458.945873][ T6836] usb 4-1: Using ep0 maxpacket: 16 [ 1458.955961][ T6836] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1458.967882][ T6836] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1458.974976][T19021] tipc: Resetting bearer [ 1459.008878][ T6836] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1459.037004][T19021] tipc: Disabling bearer [ 1459.103848][ T6836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1459.160935][ T6836] usb 4-1: config 0 descriptor?? [ 1459.613562][ T6836] nzxt-smart2 0003:1E71:2009.0017: unknown main item tag 0x0 [ 1459.683006][ T6836] nzxt-smart2 0003:1E71:2009.0017: unknown main item tag 0x0 [ 1459.703104][ T6836] nzxt-smart2 0003:1E71:2009.0017: unknown main item tag 0x0 [ 1459.730923][ T6836] nzxt-smart2 0003:1E71:2009.0017: unknown main item tag 0x0 [ 1459.792820][ T6836] nzxt-smart2 0003:1E71:2009.0017: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 1459.928292][ C1] usb 4-1: input irq status -75 received [ 1460.397556][ T9] usb 3-1: USB disconnect, device number 57 [ 1461.530786][ T6836] usb 4-1: USB disconnect, device number 43 [ 1462.314610][T19052] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3480'. [ 1462.542541][T19052] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3480'. [ 1462.863045][T18905] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 1466.776870][ T9] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1467.307618][ T9] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1467.316870][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1467.328874][ T9] usb 5-1: Product: syz [ 1467.333446][ T9] usb 5-1: Manufacturer: syz [ 1467.338169][ T9] usb 5-1: SerialNumber: syz [ 1467.358306][ T9] usb 5-1: config 0 descriptor?? [ 1467.522078][ T9] usb 5-1: Firmware version (0.0) predates our first public release. [ 1467.557163][ T9] usb 5-1: Please update to version 0.2 or newer [ 1467.727082][T19099] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3494'. [ 1467.773611][ T9] usb 5-1: USB disconnect, device number 54 [ 1468.195701][ T5899] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1468.495546][ T5899] usb 2-1: config 0 has no interfaces? [ 1468.571794][ T5899] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1468.599831][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1468.613092][ T5899] usb 2-1: Product: syz [ 1468.617281][ T5899] usb 2-1: Manufacturer: syz [ 1468.631785][ T5899] usb 2-1: SerialNumber: syz [ 1468.652482][ T5899] usb 2-1: config 0 descriptor?? [ 1468.883181][ T9] usb 5-1: new full-speed USB device number 55 using dummy_hcd [ 1469.056469][ T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1469.064990][ T9] usb 5-1: config 0 has no interface number 0 [ 1469.092295][ T9] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1469.125028][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1469.179781][ T9] usb 5-1: config 0 descriptor?? [ 1469.217190][ T9] usb 5-1: selecting invalid altsetting 1 [ 1469.293260][ T9] dvb_ttusb_budget: ttusb_init_controller: error [ 1469.313119][ T9] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1469.416865][T19099] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3494'. [ 1469.617616][ T9] DVB: Unable to find symbol cx22700_attach() [ 1470.112372][ T9] DVB: Unable to find symbol tda10046_attach() [ 1470.125562][ T9] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1470.708392][ T9] usb 5-1: USB disconnect, device number 55 [ 1470.840632][T19125] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3496'. [ 1472.281891][T19137] netlink: 112 bytes leftover after parsing attributes in process `syz.4.3500'. [ 1472.785368][ T9] usb 2-1: USB disconnect, device number 49 [ 1474.554688][T19154] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3505'. [ 1474.943462][ T9] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 1475.175415][ T9] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1475.240105][ T9] usb 4-1: config 0 has no interface number 0 [ 1475.274821][ T9] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1475.289336][ T5849] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1475.308931][ T5849] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1475.313228][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1475.317466][ T5849] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1475.332284][ T5849] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1475.340617][ T5849] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1476.574028][ T9] usb 4-1: config 0 descriptor?? [ 1476.579294][ T5852] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1476.596713][ T9] usb 4-1: selecting invalid altsetting 1 [ 1476.607196][ T5852] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1476.617272][ T9] dvb_ttusb_budget: ttusb_init_controller: error [ 1476.633015][ T9] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1476.656163][ T5852] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1476.664394][ T5852] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1476.691969][ T5852] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1476.757092][ T9] DVB: Unable to find symbol cx22700_attach() [ 1476.816987][T19154] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3505'. [ 1476.933637][ T9] DVB: Unable to find symbol tda10046_attach() [ 1476.983034][ T9] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1477.071884][T12916] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1477.246072][T12916] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1477.407507][T12916] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1478.203554][T19159] chnl_net:caif_netlink_parms(): no params data found [ 1478.415917][ T5899] usb 4-1: USB disconnect, device number 45 [ 1478.426447][T19173] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1478.455150][T12916] bridge_slave_1: left allmulticast mode [ 1478.461175][T12916] bridge_slave_1: left promiscuous mode [ 1478.480288][T19173] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1478.492246][T12916] bridge0: port 2(bridge_slave_1) entered disabled state [ 1478.565125][T12916] bridge_slave_0: left allmulticast mode [ 1478.570912][T12916] bridge_slave_0: left promiscuous mode [ 1478.598034][T19173] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1478.613201][T12916] bridge0: port 1(bridge_slave_0) entered disabled state [ 1478.638714][T12916] veth0_to_bond: left allmulticast mode [ 1478.655070][T12916] veth0_to_bond: left promiscuous mode [ 1478.661125][T12916] bridge1: port 1(veth0_to_bond) entered disabled state [ 1478.825540][T12916] veth5: left allmulticast mode [ 1478.830459][T12916] veth5: left promiscuous mode [ 1478.887123][T12916] bridge3: port 2(veth5) entered disabled state [ 1478.925751][T12916] veth3: left allmulticast mode [ 1478.942793][T12916] veth3: left promiscuous mode [ 1478.961617][T12916] bridge3: port 1(veth3) entered disabled state [ 1480.542133][ T5849] Bluetooth: hci6: command 0x041b tx timeout [ 1480.553208][T19213] netlink: 112 bytes leftover after parsing attributes in process `syz.3.3516'. [ 1482.613221][ T5849] Bluetooth: hci6: command 0x041b tx timeout [ 1482.703790][T12916] bond0 (unregistering): Released all slaves [ 1482.852425][T12916] bond1 (unregistering): Released all slaves [ 1482.927228][T12916] bond2 (unregistering): Released all slaves [ 1482.990000][T12916] bond3 (unregistering): Released all slaves [ 1483.225300][T12916] ‚#{6c: left promiscuous mode [ 1483.822455][T12916] tipc: Left network mode [ 1483.837248][T19159] bridge0: port 1(bridge_slave_0) entered blocking state [ 1483.865264][T19159] bridge0: port 1(bridge_slave_0) entered disabled state [ 1483.922398][T19159] bridge_slave_0: entered allmulticast mode [ 1484.074038][T19159] bridge_slave_0: entered promiscuous mode [ 1485.035195][ T5849] Bluetooth: hci6: command 0x041b tx timeout [ 1485.517002][T19159] bridge0: port 2(bridge_slave_1) entered blocking state [ 1485.528772][T19159] bridge0: port 2(bridge_slave_1) entered disabled state [ 1485.561244][T19159] bridge_slave_1: entered allmulticast mode [ 1485.588130][T19159] bridge_slave_1: entered promiscuous mode [ 1485.735447][T19251] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3523'. [ 1486.123143][T18905] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 1486.131467][T19159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1486.310478][T18905] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1486.359025][T18905] usb 2-1: config 0 has no interface number 0 [ 1486.382689][T18905] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1486.427251][T18905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1486.469129][T18905] usb 2-1: config 0 descriptor?? [ 1486.510750][T18905] usb 2-1: selecting invalid altsetting 1 [ 1486.529029][T18905] dvb_ttusb_budget: ttusb_init_controller: error [ 1486.963176][T18905] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1486.989548][T19251] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3523'. [ 1487.049954][T19159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1487.084937][T19260] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1487.172763][T12916] hsr_slave_0: left promiscuous mode [ 1487.204119][T12916] hsr_slave_1: left promiscuous mode [ 1487.223871][T18905] DVB: Unable to find symbol cx22700_attach() [ 1487.296845][T12916] veth1_macvtap: left promiscuous mode [ 1487.302958][T12916] veth0_macvtap: left promiscuous mode [ 1487.347010][T12916] veth1_vlan: left promiscuous mode [ 1487.365979][T12916] veth0_vlan: left promiscuous mode [ 1487.418712][T18905] DVB: Unable to find symbol tda10046_attach() [ 1487.444700][T18905] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1488.890544][T19285] block nbd2: NBD_DISCONNECT [ 1488.904515][T19285] block nbd2: Send disconnect failed -32 [ 1489.033215][T18905] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1489.041723][ T5899] usb 2-1: USB disconnect, device number 50 [ 1489.093445][ T5849] Bluetooth: hci6: command 0x041b tx timeout [ 1489.193044][T18905] usb 4-1: Using ep0 maxpacket: 16 [ 1489.222677][T18905] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1489.274279][T18905] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1489.454776][T18905] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1489.499383][T18905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1489.499564][ T9] usb 5-1: new full-speed USB device number 56 using dummy_hcd [ 1489.721371][T18905] usb 4-1: config 0 descriptor?? [ 1489.774356][ T9] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1489.792548][ T9] usb 5-1: config 0 has no interface number 0 [ 1489.809096][ T9] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1489.836374][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1489.909050][ T9] usb 5-1: config 0 descriptor?? [ 1489.937308][ T9] usb 5-1: selecting invalid altsetting 1 [ 1489.957576][ T9] dvb_ttusb_budget: ttusb_init_controller: error [ 1489.980614][ T9] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1490.131417][T19280] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3527'. [ 1490.181429][T18905] nzxt-smart2 0003:1E71:2009.0018: unknown main item tag 0x0 [ 1490.215667][T18905] nzxt-smart2 0003:1E71:2009.0018: unknown main item tag 0x0 [ 1490.241370][T18905] nzxt-smart2 0003:1E71:2009.0018: unknown main item tag 0x0 [ 1490.259343][ T9] DVB: Unable to find symbol cx22700_attach() [ 1490.285928][T18905] nzxt-smart2 0003:1E71:2009.0018: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 1490.492211][ C1] usb 4-1: input irq status -75 received [ 1490.584679][ T9] DVB: Unable to find symbol tda10046_attach() [ 1490.611563][ T9] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1491.257312][ T5849] Bluetooth: hci6: command 0x041b tx timeout [ 1491.464208][T19307] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3533'. [ 1491.561258][T12916] team0 (unregistering): Port device team_slave_1 removed [ 1491.595156][T18905] usb 5-1: USB disconnect, device number 56 [ 1491.652512][T12916] team0 (unregistering): Port device team_slave_0 removed [ 1491.870812][ T9] usb 4-1: USB disconnect, device number 46 [ 1493.830081][ T5849] Bluetooth: hci6: command 0x041b tx timeout [ 1494.140596][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1494.147108][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1495.309898][T19159] team0: Port device team_slave_0 added [ 1495.357216][T19159] team0: Port device team_slave_1 added [ 1495.463042][ T9] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1495.555823][T19159] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1495.583048][T19159] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1495.629578][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 1495.646582][T19333] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3541'. [ 1495.658551][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 1495.690573][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1495.723288][T19159] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1495.743031][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1495.769849][T19159] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1495.783601][ T9] usb 5-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad [ 1495.802996][ T9] usb 5-1: New USB device strings: Mfr=55, Product=237, SerialNumber=3 [ 1495.833400][T19159] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1495.860131][ T9] usb 5-1: Product: syz [ 1495.864756][ T9] usb 5-1: Manufacturer: syz [ 1495.869409][ T9] usb 5-1: SerialNumber: syz [ 1496.055330][T19159] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1496.183358][T18905] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 1496.193690][ T9] usb 5-1: config 0 descriptor?? [ 1496.206498][ T9] smsusb:smsusb_probe: board id=2, interface number 0 [ 1496.244412][ T9] smsusb:smsusb_probe: Device initialized with return code -19 [ 1496.559622][T19159] hsr_slave_0: entered promiscuous mode [ 1496.573403][T18905] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1496.581440][T18905] usb 3-1: config 0 has no interface number 0 [ 1496.589150][T19159] hsr_slave_1: entered promiscuous mode [ 1496.594857][T18905] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1496.604090][T18905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1496.605171][T19159] debugfs: 'hsr0' already exists in 'hsr' [ 1496.651464][T18905] usb 3-1: config 0 descriptor?? [ 1497.395472][T19159] Cannot create hsr debugfs directory [ 1497.428896][T18905] usb 3-1: selecting invalid altsetting 1 [ 1497.437432][T18905] dvb_ttusb_budget: ttusb_init_controller: error [ 1497.445293][T18905] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1497.637424][T19333] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3541'. [ 1497.662172][T18905] DVB: Unable to find symbol cx22700_attach() [ 1498.205901][T18905] DVB: Unable to find symbol tda10046_attach() [ 1498.239974][T18905] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1499.230159][T18905] usb 3-1: USB disconnect, device number 58 [ 1500.613140][T18905] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1500.794343][T18905] usb 2-1: Using ep0 maxpacket: 16 [ 1501.000372][T18905] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1501.027161][T18905] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1501.044787][T18905] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1501.054208][T18905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1501.223705][T18905] usb 2-1: config 0 descriptor?? [ 1501.703366][T18905] nzxt-smart2 0003:1E71:2009.0019: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 1502.071988][ T5899] usb 2-1: USB disconnect, device number 51 [ 1502.302131][T19385] fido_id[19385]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1502.351064][T19159] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1502.393538][T18905] usb 5-1: USB disconnect, device number 57 [ 1502.409964][T19159] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1502.494065][T19159] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1502.561447][T19159] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1503.366793][T19159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1503.479786][T19159] 8021q: adding VLAN 0 to HW filter on device team0 [ 1503.551064][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 1503.558294][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1503.649687][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 1503.656879][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1505.177595][T19159] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1507.014771][T19445] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3557'. [ 1507.393070][ T5899] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1507.523276][ T9] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 1507.574314][ T5899] usb 3-1: config 0 has no interfaces? [ 1507.623457][ T5899] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1507.646693][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1507.670873][ T5899] usb 3-1: Product: syz [ 1507.683014][ T5899] usb 3-1: Manufacturer: syz [ 1507.699265][ T5899] usb 3-1: SerialNumber: syz [ 1507.730546][ T5899] usb 3-1: config 0 descriptor?? [ 1507.749108][T19159] veth0_vlan: entered promiscuous mode [ 1508.010866][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1508.025278][T19159] veth1_vlan: entered promiscuous mode [ 1508.030895][ T9] usb 2-1: config 0 has no interface number 0 [ 1508.046149][ T9] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1508.076606][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1508.330395][T19159] veth0_macvtap: entered promiscuous mode [ 1508.341280][T19159] veth1_macvtap: entered promiscuous mode [ 1508.363171][T19159] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1508.375870][T19159] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1508.457635][ T9] usb 2-1: config 0 descriptor?? [ 1508.490341][ T9] usb 2-1: selecting invalid altsetting 1 [ 1508.518145][ T9] dvb_ttusb_budget: ttusb_init_controller: error [ 1508.542422][ T9] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1508.562220][ T6065] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1508.602355][ T4129] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1508.650547][ T4129] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1508.706468][T19445] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3557'. [ 1508.738743][ T4129] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1508.963203][ T5899] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1508.982549][ T9] DVB: Unable to find symbol cx22700_attach() [ 1509.101483][ T4129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1509.129946][ T4129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1509.143031][ T5899] usb 4-1: Using ep0 maxpacket: 16 [ 1509.163567][ T5899] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1509.181440][ T5899] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1509.210558][ T5899] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1509.239732][ T9] DVB: Unable to find symbol tda10046_attach() [ 1509.252193][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1509.276439][ T9] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1509.295242][T12916] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1509.308308][ T5899] usb 4-1: config 0 descriptor?? [ 1509.318025][T12916] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1509.769799][ T6836] usb 2-1: USB disconnect, device number 52 [ 1509.834505][ T5899] nzxt-smart2 0003:1E71:2009.001A: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 1509.993257][T18905] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1510.185022][T16334] usb 4-1: USB disconnect, device number 47 [ 1510.207632][T18905] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1510.263112][T18905] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1510.298408][T18905] usb 6-1: Product: syz [ 1510.302595][T18905] usb 6-1: Manufacturer: syz [ 1510.359208][T18905] usb 6-1: SerialNumber: syz [ 1510.394716][T18905] usb 6-1: config 0 descriptor?? [ 1510.398504][T19496] fido_id[19496]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1510.841645][T18905] usb 6-1: Firmware version (0.0) predates our first public release. [ 1510.880160][T18905] usb 6-1: Please update to version 0.2 or newer [ 1511.014481][T18905] usb 6-1: USB disconnect, device number 32 [ 1511.229542][ T5899] usb 3-1: USB disconnect, device number 59 [ 1511.984472][ T5852] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1511.995675][ T5852] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1512.137978][ T5852] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1512.148939][ T5852] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1512.157058][ T5852] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1513.791554][T19525] chnl_net:caif_netlink_parms(): no params data found [ 1514.292124][ T5852] Bluetooth: hci5: command tx timeout [ 1515.716308][T19525] bridge0: port 1(bridge_slave_0) entered blocking state [ 1515.753236][T19525] bridge0: port 1(bridge_slave_0) entered disabled state [ 1515.781193][T19525] bridge_slave_0: entered allmulticast mode [ 1515.811519][T19525] bridge_slave_0: entered promiscuous mode [ 1515.845030][T19525] bridge0: port 2(bridge_slave_1) entered blocking state [ 1515.863904][T19525] bridge0: port 2(bridge_slave_1) entered disabled state [ 1515.871239][T19525] bridge_slave_1: entered allmulticast mode [ 1515.939914][T19525] bridge_slave_1: entered promiscuous mode [ 1516.373207][ T5852] Bluetooth: hci5: command tx timeout [ 1516.646094][T19525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1516.691306][T19558] sg_write: data in/out 768/1 bytes for SCSI command 0x0-- guessing data in; [ 1516.691306][T19558] program syz.5.3576 not setting count and/or reply_len properly [ 1516.759055][T19525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1516.904220][T19525] team0: Port device team_slave_0 added [ 1516.929272][T19525] team0: Port device team_slave_1 added [ 1517.099191][T19525] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1517.141896][T19525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1517.371516][T19525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1517.536876][T19525] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1517.661389][T19525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1517.749729][T19525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1518.483092][ T5852] Bluetooth: hci5: command tx timeout [ 1518.675640][T19525] hsr_slave_0: entered promiscuous mode [ 1518.682642][T19525] hsr_slave_1: entered promiscuous mode [ 1518.755857][T19525] debugfs: 'hsr0' already exists in 'hsr' [ 1518.761646][T19525] Cannot create hsr debugfs directory [ 1518.993153][T19485] usb 5-1: new full-speed USB device number 58 using dummy_hcd [ 1519.188463][T19485] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1519.217252][T19485] usb 5-1: config 0 has no interface number 0 [ 1519.241937][T19485] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1519.279692][T19485] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1519.308953][T19485] usb 5-1: config 0 descriptor?? [ 1519.377570][T19485] usb 5-1: selecting invalid altsetting 1 [ 1519.403137][T19485] dvb_ttusb_budget: ttusb_init_controller: error [ 1519.409532][T19485] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1519.546716][T19572] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3579'. [ 1520.074884][T19485] DVB: Unable to find symbol cx22700_attach() [ 1520.167923][T19485] DVB: Unable to find symbol tda10046_attach() [ 1520.188785][T19485] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1520.534928][ T5852] Bluetooth: hci5: command tx timeout [ 1521.188090][ T6286] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1521.229824][T19525] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1521.365174][T19601] overlay: filesystem on ./file0 not supported as upperdir [ 1522.042183][T19525] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1522.050069][ T6286] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1522.081955][ T6286] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1522.122255][ T6286] usb 2-1: Product: syz [ 1522.144985][ T6286] usb 2-1: Manufacturer: syz [ 1522.149635][ T6286] usb 2-1: SerialNumber: syz [ 1522.383875][ T6286] usb 2-1: config 0 descriptor?? [ 1522.396004][T19525] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1523.442609][ T6286] usb 2-1: Firmware version (0.0) predates our first public release. [ 1523.473235][ T6286] usb 2-1: Please update to version 0.2 or newer [ 1523.479855][ C1] raw-gadget.2 gadget.1: ignoring, device is not running [ 1523.600717][T19525] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1523.623309][T18541] usb 5-1: USB disconnect, device number 58 [ 1523.855874][ T6286] usb 2-1: USB disconnect, device number 53 [ 1524.591751][T19525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1524.850929][T19525] 8021q: adding VLAN 0 to HW filter on device team0 [ 1524.979549][ T4129] bridge0: port 1(bridge_slave_0) entered blocking state [ 1524.986896][ T4129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1525.047935][ T4129] bridge0: port 2(bridge_slave_1) entered blocking state [ 1525.055289][ T4129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1526.587377][T19648] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1526.600298][T19648] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1526.607363][T19648] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1526.646814][T19648] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1528.586751][T19525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1528.623304][ T5852] Bluetooth: hci5: command 0x0c1a tx timeout [ 1528.623318][ T5849] Bluetooth: hci6: command 0x041b tx timeout [ 1528.780389][T19525] veth0_vlan: entered promiscuous mode [ 1528.904452][T19525] veth1_vlan: entered promiscuous mode [ 1529.066439][T19525] veth0_macvtap: entered promiscuous mode [ 1529.682821][T19525] veth1_macvtap: entered promiscuous mode [ 1529.933092][ T6286] usb 5-1: new full-speed USB device number 59 using dummy_hcd [ 1529.978005][T19525] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1530.060406][T19525] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1530.096039][ T6286] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1530.106129][ T6286] usb 5-1: config 0 has no interface number 0 [ 1530.144761][ T6286] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1530.182771][T19317] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1530.196224][ T6286] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1530.423880][ T6286] usb 5-1: config 0 descriptor?? [ 1530.438887][T19317] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1531.238712][ T5852] Bluetooth: hci5: command 0x0c1a tx timeout [ 1531.265246][T19317] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1531.283546][T19317] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1531.307998][ T6286] usb 5-1: selecting invalid altsetting 1 [ 1531.315724][ T6286] dvb_ttusb_budget: ttusb_init_controller: error [ 1531.322722][ T6286] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1531.523935][ T6286] DVB: Unable to find symbol cx22700_attach() [ 1531.540967][T19670] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3597'. [ 1531.680837][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1531.717621][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1531.748195][ T6286] DVB: Unable to find symbol tda10046_attach() [ 1531.774818][ T6286] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1531.874873][ T6066] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1531.886159][ T6066] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1531.952999][ T6286] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1532.513293][ T6286] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1532.546557][ T6286] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1532.580289][ T6286] usb 2-1: Product: syz [ 1532.595778][ T6286] usb 2-1: Manufacturer: syz [ 1532.617257][ T6286] usb 2-1: SerialNumber: syz [ 1532.717576][T16334] usb 5-1: USB disconnect, device number 59 [ 1532.782140][ T6286] usb 2-1: config 0 descriptor?? [ 1533.278402][ T5852] Bluetooth: hci5: command 0x0c1a tx timeout [ 1533.287769][ T6286] usb 2-1: Firmware version (0.0) predates our first public release. [ 1533.335659][ T6286] usb 2-1: Please update to version 0.2 or newer [ 1533.373032][T16334] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1533.667125][ T6286] usb 2-1: USB disconnect, device number 54 [ 1533.848331][T16334] usb 6-1: config 0 has no interfaces? [ 1533.985385][T16334] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1534.009233][T16334] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1534.031403][T16334] usb 6-1: Product: syz [ 1534.063133][T16334] usb 6-1: Manufacturer: syz [ 1534.084607][T16334] usb 6-1: SerialNumber: syz [ 1534.124593][T16334] usb 6-1: config 0 descriptor?? [ 1534.571302][T19700] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1535.156512][ T5852] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1535.169382][ T5852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1535.177719][ T5852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1535.195501][ T5852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1535.203789][ T5852] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1537.313811][ T5852] Bluetooth: hci3: command tx timeout [ 1538.068257][T19729] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1538.074672][T19729] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1538.081326][T19729] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1538.087463][T19729] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1538.110538][T19729] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1540.183592][T19160] Bluetooth: hci3: command 0x040f tx timeout [ 1540.192168][ T5849] Bluetooth: hci5: command 0x0c1a tx timeout [ 1540.206538][ T5852] Bluetooth: hci6: command 0x041b tx timeout [ 1540.546885][T19746] bridge2: entered promiscuous mode [ 1540.552139][T19746] bridge2: entered allmulticast mode [ 1541.096906][T19754] tipc: Enabled bearer , priority 0 [ 1541.173488][T19761] syzkaller0: entered promiscuous mode [ 1541.333054][T19761] syzkaller0: entered allmulticast mode [ 1541.419346][T19754] tipc: Resetting bearer [ 1541.626824][T19752] tipc: Resetting bearer [ 1541.814279][T19752] tipc: Disabling bearer [ 1541.944323][ T7124] usb 6-1: USB disconnect, device number 33 [ 1541.950674][T19715] chnl_net:caif_netlink_parms(): no params data found [ 1542.213397][ T5852] Bluetooth: hci3: command 0x040f tx timeout [ 1542.504332][ T7124] usb 5-1: new full-speed USB device number 60 using dummy_hcd [ 1542.725877][ T7124] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1542.747237][T19715] bridge0: port 1(bridge_slave_0) entered blocking state [ 1542.763102][T19715] bridge0: port 1(bridge_slave_0) entered disabled state [ 1542.772423][ T7124] usb 5-1: config 0 has no interface number 0 [ 1542.780579][T19715] bridge_slave_0: entered allmulticast mode [ 1542.802780][T19715] bridge_slave_0: entered promiscuous mode [ 1542.813118][ T7124] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1542.822176][ T7124] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1543.043827][T19715] bridge0: port 2(bridge_slave_1) entered blocking state [ 1543.068116][T19715] bridge0: port 2(bridge_slave_1) entered disabled state [ 1543.090821][T19715] bridge_slave_1: entered allmulticast mode [ 1543.136461][T19715] bridge_slave_1: entered promiscuous mode [ 1543.153869][ T7124] usb 5-1: config 0 descriptor?? [ 1543.203143][ T7124] usb 5-1: selecting invalid altsetting 1 [ 1543.254462][ T7124] dvb_ttusb_budget: ttusb_init_controller: error [ 1543.281163][ T7124] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1543.385361][T19715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1543.414070][T19763] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3614'. [ 1543.428689][T19715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1543.649305][T19715] team0: Port device team_slave_0 added [ 1543.696461][T19715] team0: Port device team_slave_1 added [ 1543.863626][ T7124] DVB: Unable to find symbol cx22700_attach() [ 1543.894430][T19715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1543.901508][T19715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1543.983153][T19715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1543.993987][T18541] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1544.013888][T19715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1544.022262][T19715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1544.102092][ T7124] DVB: Unable to find symbol tda10046_attach() [ 1544.131302][T19715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1544.142535][ T7124] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1544.155694][ T7124] usb 5-1: USB disconnect, device number 60 [ 1544.208054][T18541] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1544.346440][ T5852] Bluetooth: hci3: command 0x040f tx timeout [ 1545.159861][T18541] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1545.419589][T18541] usb 3-1: Product: syz [ 1545.428475][T18541] usb 3-1: Manufacturer: syz [ 1545.442631][T18541] usb 3-1: SerialNumber: syz [ 1545.461101][T18541] usb 3-1: config 0 descriptor?? [ 1545.542782][T19797] bridge1: entered promiscuous mode [ 1545.548398][T19797] bridge1: entered allmulticast mode [ 1545.592770][T19715] hsr_slave_0: entered promiscuous mode [ 1545.619656][T19715] hsr_slave_1: entered promiscuous mode [ 1545.643195][T19715] debugfs: 'hsr0' already exists in 'hsr' [ 1545.655995][T19715] Cannot create hsr debugfs directory [ 1545.889246][T18541] usb 3-1: Firmware version (0.0) predates our first public release. [ 1545.917836][T18541] usb 3-1: Please update to version 0.2 or newer [ 1546.087347][T19808] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1546.093898][T19808] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1546.100103][T19808] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1546.127873][T18541] usb 3-1: USB disconnect, device number 60 [ 1547.803976][T19823] bridge1: entered promiscuous mode [ 1547.809837][T19823] bridge1: entered allmulticast mode [ 1548.133473][ T5852] Bluetooth: hci5: command 0x0c1a tx timeout [ 1548.133537][T19160] Bluetooth: hci6: command 0x041b tx timeout [ 1548.139604][ T5849] Bluetooth: hci3: command 0x040f tx timeout [ 1548.941785][ T7124] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1549.008880][T19715] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1549.042438][T19715] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1549.118817][T19715] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1549.152754][T19715] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1549.164494][ T7124] usb 6-1: config 0 has no interfaces? [ 1549.190663][ T7124] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1549.240166][ T7124] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1549.281929][ T7124] usb 6-1: Product: syz [ 1549.331520][ T7124] usb 6-1: Manufacturer: syz [ 1549.346679][ T7124] usb 6-1: SerialNumber: syz [ 1549.384285][ T7124] usb 6-1: config 0 descriptor?? [ 1549.769715][T19715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1549.934174][T19715] 8021q: adding VLAN 0 to HW filter on device team0 [ 1550.226708][T14329] bridge0: port 1(bridge_slave_0) entered blocking state [ 1550.234070][T14329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1550.241898][ T5849] Bluetooth: hci3: command 0x040f tx timeout [ 1550.414122][T12916] bridge0: port 2(bridge_slave_1) entered blocking state [ 1550.421543][T12916] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1552.700196][T19715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1552.778640][ T7124] usb 6-1: USB disconnect, device number 34 [ 1553.025797][T19715] veth0_vlan: entered promiscuous mode [ 1553.080823][T19715] veth1_vlan: entered promiscuous mode [ 1553.452581][ T6286] usb 5-1: new full-speed USB device number 61 using dummy_hcd [ 1554.089034][T19879] bridge1: entered promiscuous mode [ 1554.094379][T19879] bridge1: entered allmulticast mode [ 1554.226358][ T6286] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1554.258811][ T6286] usb 5-1: config 0 has no interface number 0 [ 1554.373423][T19715] veth0_macvtap: entered promiscuous mode [ 1554.391460][T19715] veth1_macvtap: entered promiscuous mode [ 1554.423006][ T6286] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1554.432274][ T6286] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1554.467759][T19715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1554.521382][T19715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1554.819351][T19888] ptrace attach of "./syz-executor exec"[19159] was attempted by " [ 1555.511775][ T6286] usb 5-1: config 0 descriptor?? [ 1555.626637][T19723] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1555.639014][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1555.645939][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1555.779597][T19723] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1555.789164][T19723] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1555.806226][T19723] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1555.978229][ T6286] usb 5-1: can't set config #0, error -71 [ 1555.987386][ T6286] usb 5-1: USB disconnect, device number 61 [ 1556.023358][ T7124] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1556.119631][ T6164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1556.139822][ T6164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1556.182536][ T6164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1556.192687][ T6164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1556.212391][ T7124] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1556.228228][ T7124] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1556.245516][ T7124] usb 4-1: Product: syz [ 1556.260292][ T7124] usb 4-1: Manufacturer: syz [ 1556.266440][ T7124] usb 4-1: SerialNumber: syz [ 1556.279964][ T7124] usb 4-1: config 0 descriptor?? [ 1557.111353][ T7124] usb 4-1: Firmware version (0.0) predates our first public release. [ 1557.504486][ T7124] usb 4-1: Please update to version 0.2 or newer [ 1557.701352][ T7124] usb 4-1: USB disconnect, device number 48 [ 1559.502540][T19932] bridge2: entered promiscuous mode [ 1559.507867][T19932] bridge2: entered allmulticast mode [ 1559.733724][T19160] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1559.745534][T19160] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1559.755044][T19160] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1559.766486][T19160] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1559.796250][T19160] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1560.772088][T19950] ptrace attach of "./syz-executor exec"[19159] was attempted by " [ 1561.903168][ T5849] Bluetooth: hci0: command tx timeout [ 1563.828344][T19940] chnl_net:caif_netlink_parms(): no params data found [ 1564.043103][ T6286] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 1564.122954][ T5849] Bluetooth: hci0: command tx timeout [ 1564.894909][ T6286] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1564.943404][ T6286] usb 6-1: config 0 has no interface number 0 [ 1564.954426][ T6286] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1564.987220][ T6286] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1565.043598][ T6286] usb 6-1: config 0 descriptor?? [ 1565.075843][ T6286] usb 6-1: selecting invalid altsetting 1 [ 1565.108541][ T6286] dvb_ttusb_budget: ttusb_init_controller: error [ 1565.135819][ T6286] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1565.142089][ T6099] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1565.176567][ T6099] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1565.261702][T19959] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3653'. [ 1565.453538][ T6286] DVB: Unable to find symbol cx22700_attach() [ 1566.002360][ T6286] DVB: Unable to find symbol tda10046_attach() [ 1566.009405][ T6286] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1566.039972][ T6286] usb 6-1: USB disconnect, device number 35 [ 1566.133110][ T5849] Bluetooth: hci0: command tx timeout [ 1566.150829][ T6099] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1566.209193][ T6099] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1567.421381][T19940] bridge0: port 1(bridge_slave_0) entered blocking state [ 1567.432176][T19940] bridge0: port 1(bridge_slave_0) entered disabled state [ 1567.462603][T19940] bridge_slave_0: entered allmulticast mode [ 1567.488273][T19940] bridge_slave_0: entered promiscuous mode [ 1568.213041][ T5849] Bluetooth: hci0: command tx timeout [ 1568.229024][T19940] bridge0: port 2(bridge_slave_1) entered blocking state [ 1568.243129][T19940] bridge0: port 2(bridge_slave_1) entered disabled state [ 1568.250462][T19940] bridge_slave_1: entered allmulticast mode [ 1568.258991][T19940] bridge_slave_1: entered promiscuous mode [ 1568.576495][ T6099] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1568.592386][ T6099] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1568.643769][T20000] bridge2: entered promiscuous mode [ 1568.649500][T20000] bridge2: entered allmulticast mode [ 1568.856375][T19940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1569.745653][T19940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1570.996142][T20040] genirq: Flags mismatch irq 31. 00200000 (comedi_parport) vs. 00200000 (virtio1-input.0) [ 1571.053419][T19485] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1571.063292][T19940] team0: Port device team_slave_0 added [ 1571.395855][T19940] team0: Port device team_slave_1 added [ 1571.405802][T19485] usb 2-1: config 0 has no interfaces? [ 1571.434049][T19485] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1571.465760][T19485] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1571.487332][T19485] usb 2-1: Product: syz [ 1571.491534][T19485] usb 2-1: Manufacturer: syz [ 1571.554090][T19485] usb 2-1: SerialNumber: syz [ 1571.640801][T19485] usb 2-1: config 0 descriptor?? [ 1572.045970][T19940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1572.064833][T19940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1572.197495][T19940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1572.289852][T19940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1572.309542][T19940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1572.432571][T19940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1572.592974][T16334] usb 5-1: new full-speed USB device number 62 using dummy_hcd [ 1572.632674][ T6099] erspan0: left allmulticast mode [ 1572.662398][ T6099] erspan0: left promiscuous mode [ 1572.680668][ T6099] bridge0: port 3(erspan0) entered disabled state [ 1572.713122][ T6099] bridge_slave_1: left allmulticast mode [ 1572.733749][ T6099] bridge_slave_1: left promiscuous mode [ 1572.762053][ T6099] bridge0: port 2(bridge_slave_1) entered disabled state [ 1572.778522][T16334] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1572.821841][ T6099] : left allmulticast mode [ 1572.827229][T16334] usb 5-1: config 0 has no interface number 0 [ 1572.836511][ T6099] : left promiscuous mode [ 1572.855767][T16334] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1572.872783][ T6099] bridge0: port 1() entered disabled state [ 1572.920080][T16334] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1572.991582][T16334] usb 5-1: config 0 descriptor?? [ 1573.032214][T16334] usb 5-1: selecting invalid altsetting 1 [ 1573.059594][T16334] dvb_ttusb_budget: ttusb_init_controller: error [ 1573.084856][T16334] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1573.232044][T20049] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3673'. [ 1573.991801][T16334] DVB: Unable to find symbol cx22700_attach() [ 1574.148052][T16334] DVB: Unable to find symbol tda10046_attach() [ 1574.154774][T16334] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1576.819482][T16334] usb 5-1: USB disconnect, device number 62 [ 1578.003506][T19485] usb 2-1: USB disconnect, device number 55 [ 1578.607832][ T6099] bond0 (unregistering): Released all slaves [ 1578.655149][ T6099] bond1 (unregistering): Released all slaves [ 1579.307100][ T6099] bond2 (unregistering): Released all slaves [ 1579.354870][ T6099] bond3 (unregistering): Released all slaves [ 1579.420444][T20096] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1579.450082][T20096] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1579.516774][T20096] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1579.891451][T20096] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1580.241589][ T6099] ‚#{6c: left promiscuous mode [ 1580.345505][T20111] genirq: Flags mismatch irq 31. 00200000 (comedi_parport) vs. 00200000 (virtio1-input.0) [ 1580.383327][T19940] hsr_slave_0: entered promiscuous mode [ 1580.401965][T19940] hsr_slave_1: entered promiscuous mode [ 1580.425754][T19940] debugfs: 'hsr0' already exists in 'hsr' [ 1580.454741][T19940] Cannot create hsr debugfs directory [ 1580.475445][ T6099] tipc: Left network mode [ 1584.832266][T20145] bridge2: entered promiscuous mode [ 1584.837672][T20145] bridge2: entered allmulticast mode [ 1585.749968][ T6099] hsr_slave_0: left promiscuous mode [ 1585.783308][ T6099] hsr_slave_1: left promiscuous mode [ 1585.845149][ T6099] veth1_macvtap: left promiscuous mode [ 1585.867546][ T6099] veth0_macvtap: left promiscuous mode [ 1585.894540][ T6099] veth1_vlan: left promiscuous mode [ 1585.920896][ T6099] veth0_vlan: left promiscuous mode [ 1586.266127][T20168] ptrace attach of "./syz-executor exec"[5838] was attempted by " [ 1587.782078][T20177] genirq: Flags mismatch irq 31. 00200000 (comedi_parport) vs. 00200000 (virtio1-input.0) [ 1592.540019][ T6099] team0 (unregistering): Port device team_slave_1 removed [ 1593.255048][ T6099] team0 (unregistering): Port device team_slave_0 removed [ 1593.701637][T20189] tipc: Enabled bearer , priority 0 [ 1593.749723][T20191] syzkaller0: entered promiscuous mode [ 1593.756187][T20191] syzkaller0: entered allmulticast mode [ 1593.796107][T20203] bridge1: entered promiscuous mode [ 1593.801345][T20203] bridge1: entered allmulticast mode [ 1593.952663][T20228] bridge3: entered promiscuous mode [ 1593.957990][T20228] bridge3: entered allmulticast mode [ 1594.233280][T20191] tipc: Resetting bearer [ 1594.394678][T20191] tipc: Disabling bearer [ 1594.750210][ T6099] IPVS: stop unused estimator thread 0... [ 1596.115847][T20261] genirq: Flags mismatch irq 31. 00200000 (comedi_parport) vs. 00200000 (virtio1-input.0) [ 1596.124024][T19940] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1596.151399][T19940] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1596.163792][T19940] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1596.177130][T19940] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1598.853034][T19940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1599.695754][T19940] 8021q: adding VLAN 0 to HW filter on device team0 [ 1600.644216][ T6105] bridge0: port 1(bridge_slave_0) entered blocking state [ 1600.651419][ T6105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1601.287656][ T6105] bridge0: port 2(bridge_slave_1) entered blocking state [ 1601.294860][ T6105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1602.132544][T20315] bridge4: entered promiscuous mode [ 1602.137974][T20315] bridge4: entered allmulticast mode [ 1603.018485][T20330] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1605.516030][T19940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1606.408462][T19940] veth0_vlan: entered promiscuous mode [ 1606.478394][T19940] veth1_vlan: entered promiscuous mode [ 1606.608377][T19940] veth0_macvtap: entered promiscuous mode [ 1606.640815][T19940] veth1_macvtap: entered promiscuous mode [ 1606.697996][T19940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1606.770637][T19940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1606.807011][ T4034] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1606.846075][ T4034] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1606.888452][ T4034] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1606.922615][ T4034] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1607.043231][ T6836] usb 5-1: new full-speed USB device number 63 using dummy_hcd [ 1607.171933][T19863] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1607.203180][T19863] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1607.243901][ T6836] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1607.264264][ T6836] usb 5-1: config 0 has no interface number 0 [ 1607.277077][ T6836] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1607.295829][ T6836] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1607.361066][ T6836] usb 5-1: config 0 descriptor?? [ 1607.402397][ T6836] usb 5-1: selecting invalid altsetting 1 [ 1607.409180][ T6164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1607.439607][ T6836] dvb_ttusb_budget: ttusb_init_controller: error [ 1607.446314][ T6164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1607.474314][ T6836] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1607.664352][T20358] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3732'. [ 1607.833475][ T6836] DVB: Unable to find symbol cx22700_attach() [ 1608.574089][T20383] ptrace attach of "./syz-executor exec"[19940] was attempted by "./syz-executor exec"[20383] [ 1608.643151][T20368] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1608.986546][ T6836] DVB: Unable to find symbol tda10046_attach() [ 1609.026468][ T6836] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1609.105894][ T6836] usb 5-1: USB disconnect, device number 63 [ 1609.193119][T20368] usb 6-1: Using ep0 maxpacket: 8 [ 1609.210956][T20368] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 1609.229102][T20368] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1609.239979][T20368] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1609.274341][T20368] usb 6-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad [ 1609.289815][T20368] usb 6-1: New USB device strings: Mfr=55, Product=237, SerialNumber=3 [ 1609.303022][T20389] tipc: Started in network mode [ 1609.310629][T20389] tipc: Node identity 721ab2f1604d, cluster identity 4711 [ 1609.343384][T20368] usb 6-1: Product: syz [ 1609.355868][T20389] tipc: Enabled bearer , priority 0 [ 1609.364940][T20368] usb 6-1: Manufacturer: syz [ 1609.369563][T20368] usb 6-1: SerialNumber: syz [ 1609.381128][T20390] syzkaller0: entered promiscuous mode [ 1609.392033][T20368] usb 6-1: config 0 descriptor?? [ 1609.402977][T20390] syzkaller0: entered allmulticast mode [ 1609.434157][T20368] smsusb:smsusb_probe: board id=2, interface number 0 [ 1609.466637][T20368] smsusb:smsusb_probe: Device initialized with return code -19 [ 1609.491036][T20389] tipc: Resetting bearer [ 1609.531355][T20387] tipc: Resetting bearer [ 1609.665675][T19160] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1609.686336][T19160] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1609.697350][T19160] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1609.707615][T19160] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1609.716996][T19160] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1609.991055][T20387] tipc: Disabling bearer [ 1611.913170][ T5849] Bluetooth: hci1: command tx timeout [ 1613.017563][T20408] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1613.825711][T20408] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1613.928799][T20408] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1613.937447][T20408] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1614.014437][ T5849] Bluetooth: hci1: command tx timeout [ 1616.055437][ T5849] Bluetooth: hci1: command tx timeout [ 1616.696462][T18905] usb 6-1: USB disconnect, device number 36 [ 1617.019149][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1617.033020][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1617.345434][T20392] chnl_net:caif_netlink_parms(): no params data found [ 1617.845438][T20458] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3755'. [ 1617.961090][T20392] bridge0: port 1(bridge_slave_0) entered blocking state [ 1617.999971][T20392] bridge0: port 1(bridge_slave_0) entered disabled state [ 1618.036940][T20392] bridge_slave_0: entered allmulticast mode [ 1618.052676][T20392] bridge_slave_0: entered promiscuous mode [ 1618.075731][T13656] bridge_slave_1: left allmulticast mode [ 1618.097402][T13656] bridge_slave_1: left promiscuous mode [ 1618.105701][T13656] bridge0: port 2(bridge_slave_1) entered disabled state [ 1618.134118][ T5849] Bluetooth: hci1: command tx timeout [ 1618.152966][T20218] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 1618.274759][T13656] bridge_slave_0: left allmulticast mode [ 1618.327015][T13656] bridge_slave_0: left promiscuous mode [ 1618.338774][T13656] bridge0: port 1(bridge_slave_0) entered disabled state [ 1618.387549][T20218] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1618.424479][T20218] usb 3-1: config 0 has no interface number 0 [ 1618.432083][T20218] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1618.462051][T20218] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1618.596396][T20218] usb 3-1: config 0 descriptor?? [ 1618.639084][T20218] usb 3-1: selecting invalid altsetting 1 [ 1618.660044][T20218] dvb_ttusb_budget: ttusb_init_controller: error [ 1618.688270][T20218] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1618.825178][T20458] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3755'. [ 1618.934400][T13656] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 1618.963009][ T5899] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1618.982650][T20218] DVB: Unable to find symbol cx22700_attach() [ 1619.273279][ T5899] usb 5-1: Using ep0 maxpacket: 16 [ 1619.298818][ T5899] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1620.023075][ T5899] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1620.066917][ T5899] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1620.121223][ T5899] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 1620.131349][T20218] DVB: Unable to find symbol tda10046_attach() [ 1620.172124][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1620.180330][T20218] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1620.202256][ T5899] usb 5-1: Product: syz [ 1620.226169][ T5899] usb 5-1: Manufacturer: syz [ 1620.249527][ T5899] usb 5-1: SerialNumber: syz [ 1620.264323][ T5899] usb 5-1: config 0 descriptor?? [ 1620.478363][ T6286] usb 5-1: USB disconnect, device number 64 [ 1620.789717][ T5899] usb 3-1: USB disconnect, device number 61 [ 1624.655717][T13656] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1626.954035][T13656] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1626.982824][T13656] bond0 (unregistering): Released all slaves [ 1629.066618][T13656] bond1 (unregistering): Released all slaves [ 1629.093167][T13656] bond2 (unregistering): Released all slaves [ 1629.206467][T13656] bond3 (unregistering): Released all slaves [ 1629.372239][T13656] bond4 (unregistering): Released all slaves [ 1629.530245][T13656] bond5 (unregistering): Released all slaves [ 1629.615079][T13656] bond6 (unregistering): Released all slaves [ 1629.685505][T13656] bond7 (unregistering): Released all slaves [ 1629.930455][T13656] bond8 (unregistering): Released all slaves [ 1629.937613][T20492] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 1630.194499][T20392] bridge0: port 2(bridge_slave_1) entered blocking state [ 1630.244945][T20392] bridge0: port 2(bridge_slave_1) entered disabled state [ 1630.252538][T20392] bridge_slave_1: entered allmulticast mode [ 1630.260834][T20392] bridge_slave_1: entered promiscuous mode [ 1630.397592][T20492] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1630.419849][T20492] usb 3-1: config 0 has no interface number 0 [ 1630.490919][T20492] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1630.575405][T20492] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1630.707980][T20539] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1630.724567][T20539] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1630.745876][T20492] usb 3-1: config 0 descriptor?? [ 1630.758707][T20492] usb 3-1: selecting invalid altsetting 1 [ 1630.770247][T20492] dvb_ttusb_budget: ttusb_init_controller: error [ 1630.783257][T20492] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1631.035416][T20532] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3770'. [ 1631.840458][T20539] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1631.848222][T20552] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3771'. [ 1631.884260][T20539] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1631.914157][T20492] DVB: Unable to find symbol cx22700_attach() [ 1632.001417][T20492] DVB: Unable to find symbol tda10046_attach() [ 1632.015851][T20492] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1632.210125][ T9] usb 3-1: USB disconnect, device number 62 [ 1632.476056][T20565] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1633.303692][T13656] tipc: Left network mode [ 1633.533016][ T5899] usb 6-1: new full-speed USB device number 37 using dummy_hcd [ 1633.558216][T20392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1633.580762][T20392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1635.965627][ T5899] usb 6-1: device descriptor read/all, error -71 [ 1636.013234][T20392] team0: Port device team_slave_0 added [ 1636.105733][T20392] team0: Port device team_slave_1 added [ 1636.193150][T20585] genirq: Flags mismatch irq 31. 00200000 (comedi_parport) vs. 00200000 (virtio1-input.0) [ 1636.450491][T20392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1636.480885][T20392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1636.541420][T20392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1636.558071][T20392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1636.566308][T20392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1636.657462][T20392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1636.797051][T20596] tipc: Enabled bearer , priority 0 [ 1636.844967][T13656] hsr_slave_0: left promiscuous mode [ 1636.871687][T13656] hsr_slave_1: left promiscuous mode [ 1636.885657][T13656] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1636.922265][T13656] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1638.331875][T20612] input: syz1 as /devices/virtual/input/input41 [ 1638.938238][T20620] vivid-003: disconnect [ 1638.944156][T20620] vivid-003: reconnect [ 1639.525257][ T6286] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 1639.829313][ T6286] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1639.931551][ T6286] usb 3-1: config 0 has no interface number 0 [ 1640.050796][ T6286] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1640.079484][ T6286] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1641.115671][ T6286] usb 3-1: config 0 descriptor?? [ 1641.158056][ T6286] usb 3-1: selecting invalid altsetting 1 [ 1641.193844][ T6286] dvb_ttusb_budget: ttusb_init_controller: error [ 1641.215335][ T6286] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1641.326149][ T6286] DVB: Unable to find symbol cx22700_attach() [ 1641.338474][T20618] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3787'. [ 1641.431275][ T6286] DVB: Unable to find symbol tda10046_attach() [ 1641.443112][T18541] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1641.462066][ T6286] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1641.494752][ T6286] usb 3-1: USB disconnect, device number 63 [ 1641.587421][T13656] team0 (unregistering): Port device team_slave_1 removed [ 1641.612923][T18541] usb 6-1: Using ep0 maxpacket: 8 [ 1641.621830][T18541] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 1641.635356][T18541] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1641.645230][T18541] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1641.655711][T13656] team0 (unregistering): Port device team_slave_0 removed [ 1641.658355][T18541] usb 6-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad [ 1641.672466][T18541] usb 6-1: New USB device strings: Mfr=55, Product=237, SerialNumber=3 [ 1641.683233][T18541] usb 6-1: Product: syz [ 1641.687464][T18541] usb 6-1: Manufacturer: syz [ 1641.692089][T18541] usb 6-1: SerialNumber: syz [ 1641.707125][T18541] usb 6-1: config 0 descriptor?? [ 1641.719701][T18541] smsusb:smsusb_probe: board id=2, interface number 0 [ 1641.722295][ T6836] usb 5-1: new full-speed USB device number 65 using dummy_hcd [ 1641.727526][T18541] smsusb:smsusb_probe: Device initialized with return code -19 [ 1641.903122][ T6836] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1641.911229][ T6836] usb 5-1: config 0 has no interface number 0 [ 1641.923085][ T6836] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1641.932153][ T6836] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1641.972798][ T6836] usb 5-1: config 0 descriptor?? [ 1641.989710][ T6836] usb 5-1: selecting invalid altsetting 1 [ 1641.992779][T18541] usb 6-1: USB disconnect, device number 39 [ 1642.018113][ T6836] dvb_ttusb_budget: ttusb_init_controller: error [ 1642.033027][ T6836] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1642.170914][ T6836] DVB: Unable to find symbol cx22700_attach() [ 1642.209448][T20634] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3791'. [ 1642.262783][ T6836] DVB: Unable to find symbol tda10046_attach() [ 1642.356301][T20596] syzkaller0: entered promiscuous mode [ 1642.362321][T20596] syzkaller0: entered allmulticast mode [ 1642.404239][T20603] tipc: Resetting bearer [ 1642.430483][T20593] tipc: Resetting bearer [ 1642.509191][ T6836] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1642.525350][ T6836] usb 5-1: USB disconnect, device number 65 [ 1642.540230][T20593] tipc: Disabling bearer [ 1643.055990][T20260] tipc: Node number set to 307737329 [ 1643.365005][T20647] bridge1: entered promiscuous mode [ 1643.370270][T20647] bridge1: entered allmulticast mode [ 1643.432430][T20392] hsr_slave_0: entered promiscuous mode [ 1643.445590][T20392] hsr_slave_1: entered promiscuous mode [ 1643.454658][T20392] debugfs: 'hsr0' already exists in 'hsr' [ 1643.460542][T20392] Cannot create hsr debugfs directory [ 1644.513078][T20676] input: syz1 as /devices/virtual/input/input42 [ 1647.653685][T20702] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3804'. [ 1648.329151][T20702] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3804'. [ 1648.419622][T20392] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1648.452978][T19485] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 1648.463635][T20392] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1648.491951][T20392] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1648.587168][T20392] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1648.627401][T19485] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1648.637072][T19485] usb 3-1: config 0 has no interface number 0 [ 1648.652643][T19485] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1648.674900][T19485] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1648.721406][T19485] usb 3-1: config 0 descriptor?? [ 1648.754389][T19485] usb 3-1: selecting invalid altsetting 1 [ 1648.770507][T19485] dvb_ttusb_budget: ttusb_init_controller: error [ 1648.795128][T19485] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1648.932215][T20392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1648.955854][T20709] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3807'. [ 1648.985730][T20392] 8021q: adding VLAN 0 to HW filter on device team0 [ 1649.011835][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 1649.019118][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1649.121824][ T6105] bridge0: port 2(bridge_slave_1) entered blocking state [ 1649.129078][ T6105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1649.139060][T19485] DVB: Unable to find symbol cx22700_attach() [ 1649.235497][T20726] tipc: Enabled bearer , priority 0 [ 1649.265755][T20726] syzkaller0: entered promiscuous mode [ 1649.288054][T20726] syzkaller0: entered allmulticast mode [ 1649.294679][T19485] DVB: Unable to find symbol tda10046_attach() [ 1649.300980][T19485] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1649.366566][T20726] tipc: Resetting bearer [ 1649.401708][T20724] tipc: Resetting bearer [ 1649.451575][T20724] tipc: Disabling bearer [ 1650.135823][T20748] genirq: Flags mismatch irq 31. 00200000 (comedi_parport) vs. 00200000 (virtio1-input.0) [ 1650.268054][T20392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1650.499036][T20392] veth0_vlan: entered promiscuous mode [ 1650.568922][T20392] veth1_vlan: entered promiscuous mode [ 1650.706186][T20392] veth0_macvtap: entered promiscuous mode [ 1650.733641][T20392] veth1_macvtap: entered promiscuous mode [ 1650.791756][T20392] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1650.842746][T20392] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1650.969250][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1651.035957][ T6065] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1651.077181][ T6065] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1651.365890][ T6065] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1652.229699][T19485] usb 3-1: USB disconnect, device number 64 [ 1654.860941][ T6065] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1654.892136][ T6065] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1655.104375][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1655.154059][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1655.201059][T20790] tipc: Started in network mode [ 1655.207985][T20790] tipc: Node identity 22b2baccdd18, cluster identity 4711 [ 1655.237993][T20790] tipc: Enabled bearer , priority 0 [ 1655.267576][T20790] syzkaller0: entered promiscuous mode [ 1655.291685][T20790] syzkaller0: entered allmulticast mode [ 1655.376249][T20787] tipc: Resetting bearer [ 1655.571606][T20787] tipc: Disabling bearer [ 1656.093312][T20805] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3824'. [ 1656.122007][T20806] genirq: Flags mismatch irq 31. 00200000 (comedi_parport) vs. 00200000 (virtio1-input.0) [ 1656.583840][T20805] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3824'. [ 1657.173299][T20260] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1657.363006][T20260] usb 4-1: Using ep0 maxpacket: 8 [ 1657.392585][T20260] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 1657.448588][T20260] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1657.494158][T20260] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1657.547447][T20260] usb 4-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad [ 1657.595527][T20260] usb 4-1: New USB device strings: Mfr=55, Product=237, SerialNumber=3 [ 1657.628693][T20260] usb 4-1: Product: syz [ 1657.665049][T20260] usb 4-1: Manufacturer: syz [ 1657.906075][T20260] usb 4-1: SerialNumber: syz [ 1658.712683][T20260] usb 4-1: config 0 descriptor?? [ 1658.726653][T20260] smsusb:smsusb_probe: board id=2, interface number 0 [ 1658.753146][ T6836] usb 5-1: new full-speed USB device number 66 using dummy_hcd [ 1658.762290][T20260] smsusb:smsusb_probe: Device initialized with return code -19 [ 1658.975754][ T6836] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1659.013389][ T6836] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1659.042561][ T6836] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1659.087019][ T6836] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1659.096146][T19485] usb 4-1: USB disconnect, device number 49 [ 1660.547966][ T6836] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1660.665255][ T6836] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1660.936466][ T6836] usb 5-1: Manufacturer: syz [ 1660.948946][ T6836] usb 5-1: config 0 descriptor?? [ 1660.994894][ T6836] usb 5-1: can't set config #0, error -71 [ 1661.144528][T20849] bridge2: entered promiscuous mode [ 1661.149857][T20849] bridge2: entered allmulticast mode [ 1661.377095][T20368] usb 6-1: new full-speed USB device number 40 using dummy_hcd [ 1661.547649][ T6836] usb 5-1: USB disconnect, device number 66 [ 1662.863797][T20855] tipc: Enabled bearer , priority 0 [ 1662.914530][T20857] syzkaller0: entered promiscuous mode [ 1662.920056][T20857] syzkaller0: entered allmulticast mode [ 1663.163439][T20854] tipc: Resetting bearer [ 1663.185000][T20368] usb 6-1: device descriptor read/all, error -71 [ 1663.318226][T20854] tipc: Disabling bearer [ 1663.354158][T20864] genirq: Flags mismatch irq 31. 00200000 (comedi_parport) vs. 00200000 (virtio1-input.0) [ 1663.381440][T19160] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1663.405264][T19160] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1663.425412][T19160] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1663.443684][T19160] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1663.452090][T19160] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1665.493396][ T5849] Bluetooth: hci4: command tx timeout [ 1666.171562][T20863] chnl_net:caif_netlink_parms(): no params data found [ 1667.606890][ T5849] Bluetooth: hci4: command tx timeout [ 1668.607134][T20863] bridge0: port 1(bridge_slave_0) entered blocking state [ 1669.423157][T20863] bridge0: port 1(bridge_slave_0) entered disabled state [ 1669.430589][T20863] bridge_slave_0: entered allmulticast mode [ 1669.455278][T20863] bridge_slave_0: entered promiscuous mode [ 1669.486116][T20863] bridge0: port 2(bridge_slave_1) entered blocking state [ 1669.528966][T20863] bridge0: port 2(bridge_slave_1) entered disabled state [ 1669.554985][T20863] bridge_slave_1: entered allmulticast mode [ 1669.594608][T20863] bridge_slave_1: entered promiscuous mode [ 1669.665882][ T5849] Bluetooth: hci4: command tx timeout [ 1669.716711][T20863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1669.739124][T20863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1669.847457][T20863] team0: Port device team_slave_0 added [ 1669.889128][T20863] team0: Port device team_slave_1 added [ 1670.162450][T20913] bridge2: entered promiscuous mode [ 1670.167795][T20913] bridge2: entered allmulticast mode [ 1670.167798][T20780] usb 4-1: new full-speed USB device number 50 using dummy_hcd [ 1670.368682][T20919] tipc: Started in network mode [ 1670.374766][T20780] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1670.397238][T20919] tipc: Node identity b2a3ce841bb5, cluster identity 4711 [ 1670.404578][T20780] usb 4-1: config 0 has no interface number 0 [ 1670.418551][T20780] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1670.423357][T20919] tipc: Enabled bearer , priority 0 [ 1670.448360][T20923] genirq: Flags mismatch irq 31. 00200000 (comedi_parport) vs. 00200000 (virtio1-input.0) [ 1670.455606][T20780] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1670.464264][T20863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1670.498311][T20863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1670.504549][T20780] usb 4-1: config 0 descriptor?? [ 1670.573499][T20780] usb 4-1: selecting invalid altsetting 1 [ 1670.579427][T20780] dvb_ttusb_budget: ttusb_init_controller: error [ 1670.625307][T20863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1670.627521][T20780] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1670.679161][T20920] syzkaller0: entered promiscuous mode [ 1670.714112][T20920] syzkaller0: entered allmulticast mode [ 1670.785708][T20909] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3850'. [ 1670.845604][T20780] DVB: Unable to find symbol cx22700_attach() [ 1670.918236][T20863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1670.948031][T20863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1671.081691][T20863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1671.742949][ T5849] Bluetooth: hci4: command tx timeout [ 1671.861798][T20780] DVB: Unable to find symbol tda10046_attach() [ 1671.870696][T20780] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1671.908892][T20918] tipc: Resetting bearer [ 1671.999635][T20918] tipc: Disabling bearer [ 1672.019824][T16334] tipc: Node number set to 2836844164 [ 1672.241018][T20863] hsr_slave_0: entered promiscuous mode [ 1672.261099][T20780] usb 4-1: USB disconnect, device number 50 [ 1672.275349][T20863] hsr_slave_1: entered promiscuous mode [ 1672.296897][T20863] debugfs: 'hsr0' already exists in 'hsr' [ 1672.342989][T20863] Cannot create hsr debugfs directory [ 1673.906532][T20863] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1674.054534][T20863] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1675.099452][T20973] genirq: Flags mismatch irq 31. 00200000 (comedi_parport) vs. 00200000 (virtio1-input.0) [ 1676.160885][T20863] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1676.192184][T20863] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1676.452342][T20976] bridge3: entered promiscuous mode [ 1676.458273][T20976] bridge3: entered allmulticast mode [ 1676.714786][T20863] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1676.773000][T20863] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1676.894076][T20987] netlink: 'syz.2.3869': attribute type 11 has an invalid length. [ 1676.942751][T20987] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3869'. [ 1677.753575][T16334] usb 6-1: new full-speed USB device number 42 using dummy_hcd [ 1678.076934][T16334] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1678.096120][T20863] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1678.108068][T16334] usb 6-1: config 0 has no interface number 0 [ 1678.132095][T16334] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 1678.167256][T16334] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1678.240594][T20863] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1678.248384][T16334] usb 6-1: config 0 descriptor?? [ 1678.306229][T16334] usb 6-1: selecting invalid altsetting 1 [ 1678.334075][T16334] dvb_ttusb_budget: ttusb_init_controller: error [ 1678.362979][T16334] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1678.440914][T20863] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1678.457197][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1678.473290][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1678.546179][T20989] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3870'. [ 1678.594476][T20863] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1678.770873][T16334] DVB: Unable to find symbol cx22700_attach() [ 1679.426848][T21024] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3873'. [ 1679.533140][T16334] DVB: Unable to find symbol tda10046_attach() [ 1679.539341][T16334] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 1679.619231][T16334] usb 6-1: USB disconnect, device number 42 [ 1679.846393][T20863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1680.044204][T20863] 8021q: adding VLAN 0 to HW filter on device team0 [ 1680.150366][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1680.157623][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1680.495545][T14329] bridge0: port 2(bridge_slave_1) entered blocking state [ 1680.502777][T14329] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1683.052748][T21056] genirq: Flags mismatch irq 31. 00200000 (comedi_parport) vs. 00200000 (virtio1-input.0) [ 1683.978527][T20863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1684.933005][ T6286] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1685.663863][ T5849] Bluetooth: hci0: command 0x0406 tx timeout [ 1685.763025][ T6286] usb 2-1: Using ep0 maxpacket: 8 [ 1685.775531][ T6286] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 1685.935952][ T6286] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1685.947719][ T6286] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1685.977547][ T6286] usb 2-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad [ 1685.989194][ T6286] usb 2-1: New USB device strings: Mfr=55, Product=237, SerialNumber=3 [ 1686.007179][ T6286] usb 2-1: Product: syz [ 1686.017137][ T6286] usb 2-1: Manufacturer: syz [ 1686.028998][ T6286] usb 2-1: SerialNumber: syz [ 1686.044425][ T6286] usb 2-1: config 0 descriptor?? [ 1686.078931][ T6286] smsusb:smsusb_probe: board id=2, interface number 0 [ 1686.123132][ T6286] smsusb:smsusb_probe: Device initialized with return code -19 [ 1686.399710][ T6286] usb 2-1: USB disconnect, device number 56 [ 1687.449263][T20863] veth0_vlan: entered promiscuous mode [ 1687.471275][T20863] veth1_vlan: entered promiscuous mode [ 1687.673210][T20863] veth0_macvtap: entered promiscuous mode [ 1687.850194][T20863] veth1_macvtap: entered promiscuous mode [ 1687.911474][T20863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1688.739089][T21114] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3896'. [ 1688.753541][T20863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1688.783236][T21116] genirq: Flags mismatch irq 31. 00200000 (comedi_parport) vs. 00200000 (virtio1-input.0) [ 1688.925278][ T6066] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1688.940477][ T6066] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1689.012810][ T6066] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1689.032521][ T6065] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1689.345984][T12760] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1689.372942][T12760] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1689.458710][T20078] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1689.485311][T20078] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1689.515211][ T6286] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 1689.673579][ T6286] usb 2-1: device descriptor read/64, error -71 [ 1689.932997][ T6286] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 1690.088545][ T5899] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1690.914273][ T6286] usb 2-1: device descriptor read/64, error -71 [ 1691.053742][ T6286] usb usb2-port1: attempt power cycle [ 1691.104456][ T5899] usb 5-1: Using ep0 maxpacket: 16 [ 1691.123896][ T5899] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1691.144663][ T5899] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1691.201708][ T5899] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1691.464383][ T6286] usb 2-1: new full-speed USB device number 59 using dummy_hcd [ 1692.367649][ T5899] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 1692.405001][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1692.457675][ T5899] usb 5-1: Product: syz [ 1692.461899][ T5899] usb 5-1: Manufacturer: syz [ 1692.502940][ T5899] usb 5-1: SerialNumber: syz [ 1692.512923][ T6286] usb 2-1: device descriptor read/8, error -71 [ 1692.556425][ T5899] usb 5-1: config 0 descriptor?? [ 1692.743384][T20492] usb 5-1: USB disconnect, device number 67 [ 1692.771212][T21152] tmpfs: Bad value for 'mpol' [ 1693.153222][ T6836] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1693.983093][ T6836] usb 4-1: Using ep0 maxpacket: 8 [ 1694.001854][ T6836] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 1694.043078][ T6836] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1694.071801][ T6836] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1694.333434][ T6836] usb 4-1: New USB device found, idVendor=187f, idProduct=0200, bcdDevice=6b.ad [ 1694.352340][ T6836] usb 4-1: New USB device strings: Mfr=55, Product=237, SerialNumber=3 [ 1694.375349][ T6836] usb 4-1: Product: syz [ 1694.379737][ T6836] usb 4-1: Manufacturer: syz [ 1694.400701][ T6836] usb 4-1: SerialNumber: syz [ 1694.505372][T21174] bridge2: entered promiscuous mode [ 1694.510792][T21174] bridge2: entered allmulticast mode [ 1695.163586][ T6836] usb 4-1: config 0 descriptor?? [ 1695.182723][ T6836] smsusb:smsusb_probe: board id=2, interface number 0 [ 1695.198706][ T6836] smsusb:smsusb_probe: Device initialized with return code -19 [ 1696.639641][T18541] usb 4-1: USB disconnect, device number 51 [ 1698.900970][T21212] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3924'. [ 1699.367443][T21222] tmpfs: Bad value for 'mpol' [ 1699.379161][T19686] usb 5-1: new full-speed USB device number 68 using dummy_hcd [ 1699.590584][T21225] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1699.624709][T19686] usb 5-1: device descriptor read/64, error -71 [ 1699.712149][T21225] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1700.705393][T19686] usb 5-1: new full-speed USB device number 69 using dummy_hcd [ 1700.731283][T21225] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1700.831839][T21225] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1700.863699][T19686] usb 5-1: device descriptor read/64, error -71 [ 1700.973542][T19686] usb usb5-port1: attempt power cycle [ 1701.363042][T19686] usb 5-1: new full-speed USB device number 70 using dummy_hcd [ 1701.473676][T19686] usb 5-1: device descriptor read/8, error -71 [ 1702.571791][T21245] bridge3: entered promiscuous mode [ 1702.577085][T21245] bridge3: entered allmulticast mode [ 1702.642943][T19686] usb 5-1: new full-speed USB device number 71 using dummy_hcd [ 1702.882527][T19686] usb 5-1: device descriptor read/8, error -71 [ 1703.178798][T19686] usb usb5-port1: unable to enumerate USB device [ 1704.358094][T21265] input: syz0 as /devices/virtual/input/input43 [ 1704.599672][T21268] nbd: must specify at least one socket [ 1704.719268][T21275] fuse: Bad value for 'fd' [ 1705.221326][T21281] netlink: 'syz.4.3944': attribute type 11 has an invalid length. [ 1705.229489][T21281] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3944'. [ 1706.452985][T19160] Bluetooth: hci6: command 0x041b tx timeout [ 1706.461356][T21145] Bluetooth: hci6: Opcode 0x0c1a failed: -110 [ 1706.468820][T21145] Bluetooth: hci6: Error when powering off device on rfkill (-110) [ 1709.653065][T19160] Bluetooth: hci5: command 0x0c1a tx timeout [ 1709.653064][T21145] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 1709.653100][T21145] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 1709.873057][T21320] bridge1: entered promiscuous mode [ 1709.878411][T21320] bridge1: entered allmulticast mode [ 1712.533003][T19160] Bluetooth: hci3: command 0x040f tx timeout [ 1713.072953][T21145] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 1713.079342][T21145] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 1713.549053][T21333] fuse: Bad value for 'fd' [ 1713.754212][T21335] nbd: must specify at least one socket [ 1715.422949][T21145] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1715.423086][T19160] Bluetooth: hci0: command 0x0406 tx timeout [ 1715.429102][T21145] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 1717.493581][T19160] Bluetooth: hci1: command 0x0c1a tx timeout [ 1717.541424][T21145] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 1717.562939][T21145] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 1719.813017][T19160] Bluetooth: hci4: command 0x0c1a tx timeout [ 1719.813045][T21145] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 1719.825311][T21145] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 1720.419280][T21369] fuse: Bad value for 'fd' [ 1721.251823][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1721.266695][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1721.279197][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1721.287546][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1721.295520][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1721.376498][T19160] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1721.384235][T19160] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1721.391650][T19160] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1721.400091][T19160] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1721.408372][T19160] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1723.839454][T19160] Bluetooth: hci2: command tx timeout [ 1726.563081][T19160] Bluetooth: hci2: command tx timeout [ 1727.172176][ T6105] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1728.623063][T19160] Bluetooth: hci2: command tx timeout [ 1728.894213][ T6105] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1728.976270][T21433] input: syz0 as /devices/virtual/input/input44 [ 1728.985102][T21437] block nbd4: NBD_DISCONNECT [ 1729.143009][T20780] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 1729.337505][T20780] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1729.349230][ T6105] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1729.362688][T20780] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1729.390081][T20780] usb 3-1: Product: syz [ 1729.572270][T21371] chnl_net:caif_netlink_parms(): no params data found [ 1729.596444][T20780] usb 3-1: Manufacturer: syz [ 1729.616904][T20780] usb 3-1: SerialNumber: syz [ 1730.404768][T20780] usb 3-1: config 0 descriptor?? [ 1730.648353][T20780] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1730.693082][T19160] Bluetooth: hci2: command tx timeout [ 1730.774858][ T6105] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1731.340180][T20780] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1731.934963][T20780] usb 3-1: USB disconnect, device number 65 [ 1732.169916][T21371] bridge0: port 1(bridge_slave_0) entered blocking state [ 1732.198914][T21371] bridge0: port 1(bridge_slave_0) entered disabled state [ 1732.214717][T21371] bridge_slave_0: entered allmulticast mode [ 1732.223136][T21371] bridge_slave_0: entered promiscuous mode [ 1732.232950][T21371] bridge0: port 2(bridge_slave_1) entered blocking state [ 1732.240178][T21371] bridge0: port 2(bridge_slave_1) entered disabled state [ 1732.247892][T21371] bridge_slave_1: entered allmulticast mode [ 1732.281371][T21371] bridge_slave_1: entered promiscuous mode [ 1732.351090][T21471] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1732.645582][T21473] ptrace attach of "./syz-executor exec"[19525] was attempted by "./syz-executor exec"[21473] [ 1732.771668][T21371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1732.797203][T21371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1733.112686][ T6105] bridge_slave_1: left allmulticast mode [ 1733.163890][ T6105] bridge_slave_1: left promiscuous mode [ 1733.220365][T21482] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4002'. [ 1733.760574][ T6105] bridge0: port 2(bridge_slave_1) entered disabled state [ 1733.795957][ T6105] bridge_slave_0: left allmulticast mode [ 1733.801673][ T6105] bridge_slave_0: left promiscuous mode [ 1733.814913][ T6105] bridge0: port 1(bridge_slave_0) entered disabled state [ 1736.539038][ T6105] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1736.561282][ T6105] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1736.586107][ T6105] bond0 (unregistering): Released all slaves [ 1736.636873][T21371] team0: Port device team_slave_0 added [ 1736.643825][T21479] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1736.649806][T21479] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1736.659700][T21479] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1736.922984][T21371] team0: Port device team_slave_1 added [ 1736.962984][ T6105] tipc: Left network mode [ 1737.045313][T21513] tmpfs: Unknown parameter '18446744073709551615' [ 1738.772966][T19160] Bluetooth: hci2: command 0x0c1a tx timeout [ 1738.830146][T21371] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1738.862681][T21371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1738.926333][T21371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1739.169476][T21371] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1739.177550][T21371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1739.908142][ C1] ------------[ cut here ]------------ [ 1739.914074][ C1] ODEBUG: free active (active state 0) object: ffff888057792c90 object type: timer_list hint: rose_t0timer_expiry+0x0/0x150 [ 1739.927070][ C1] WARNING: lib/debugobjects.c:612 at debug_print_object+0x18e/0x2a0, CPU#1: syz.3.4012/21526 [ 1739.937329][ C1] Modules linked in: [ 1739.941565][ C1] CPU: 1 UID: 0 PID: 21526 Comm: syz.3.4012 Tainted: G L syzkaller #0 PREEMPT(full) [ 1739.952585][ C1] Tainted: [L]=SOFTLOCKUP [ 1739.957041][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1739.967205][ C1] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 1739.973098][ C1] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d e2 ca d3 0b 41 56 48 8b 14 dd e0 44 fa 8b 4c 89 e6 <67> 48 0f b9 3a 58 83 05 bc 8c c9 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 1739.993071][ C1] RSP: 0018:ffffc90000a08a18 EFLAGS: 00010246 [ 1739.999188][ C1] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 1740.007311][ C1] RDX: ffffffff8bfa4420 RSI: ffffffff8bfa4040 RDI: ffffffff90c1ce70 [ 1740.015352][ C1] RBP: 0000000000000001 R08: ffff888057792c90 R09: ffffffff8b92b900 [ 1740.023388][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8bfa4040 [ 1740.031392][ C1] R13: ffffffff8b92b940 R14: ffffffff8a649cc0 R15: ffffc90000a08b18 [ 1740.036054][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1740.039421][ C1] FS: 00007f906131e6c0(0000) GS:ffff8881246de000(0000) knlGS:0000000000000000 [ 1740.045867][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1740.054900][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1740.068210][ C1] CR2: 00007f8cd24706c0 CR3: 00000000a13f8000 CR4: 0000000000350ef0 [ 1740.076235][ C1] Call Trace: [ 1740.079547][ C1] [ 1740.082403][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1740.088165][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1740.094046][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1740.099735][ C1] debug_check_no_obj_freed+0x4da/0x630 [ 1740.105396][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 1740.111523][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1740.115977][T21525] ptrace attach of "./syz-executor exec"[20863] was attempted by "./syz-executor exec"[21525] [ 1740.117247][ C1] ? mark_held_locks+0x40/0x70 [ 1740.133118][ C1] ? kasan_quarantine_put+0x104/0x240 [ 1740.138563][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1740.144361][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 1740.149706][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1740.155434][ C1] kfree+0x34c/0x690 [ 1740.159454][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1740.164907][ C1] ? rose_timer_expiry+0x53f/0x630 [ 1740.170078][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1740.176223][ C1] ? rose_timer_expiry+0x53f/0x630 [ 1740.181383][ C1] rose_timer_expiry+0x53f/0x630 [ 1740.186414][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1740.191924][ C1] call_timer_fn+0x19a/0x590 [ 1740.196606][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1740.201767][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1740.207597][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1740.213139][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1740.218823][ C1] ? mark_held_locks+0x40/0x70 [ 1740.223700][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1740.229203][ C1] __run_timers+0x757/0xac0 [ 1740.231847][T21371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1740.233908][ C1] ? __pfx___run_timers+0x10/0x10 [ 1740.249499][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1740.255238][ C1] run_timer_base+0x114/0x190 [ 1740.259974][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 1740.265270][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1740.270954][ C1] run_timer_softirq+0x1a/0x50 [ 1740.275824][ C1] handle_softirqs+0x1ea/0x910 [ 1740.280644][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1740.286033][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1740.291741][ C1] __irq_exit_rcu+0xef/0x150 [ 1740.296451][ C1] irq_exit_rcu+0x9/0x30 [ 1740.300737][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1740.306445][ C1] [ 1740.309403][ C1] [ 1740.312364][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1740.318504][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 1740.325056][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 a6 f2 6a f6 48 89 df e8 8e 40 6b f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 45 89 5b f6 65 8b 05 3e 0a 6c 08 85 c0 74 16 5b [ 1740.345024][ C1] RSP: 0018:ffffc9000cd2f838 EFLAGS: 00000246 [ 1740.351399][ C1] RAX: 0000000000000002 RBX: ffff8880418c0740 RCX: 0000000000000040 [ 1740.359489][ C1] RDX: 0000000000000000 RSI: ffffffff8dc42dff RDI: ffffffff8bfa3320 [ 1740.367537][ C1] RBP: 0000000000000282 R08: 0000000000000001 R09: 0000000000000000 [ 1740.375857][ C1] R10: 0000000000000001 R11: 0000000000000001 R12: ffff8880418c0590 [ 1740.383983][ C1] R13: ffff8880418c0780 R14: ffff8880418c00e8 R15: ffff88805e159280 [ 1740.392045][ C1] __unix_dgram_recvmsg+0x31a/0xc30 [ 1740.397377][ C1] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 1740.403184][ C1] ? __lock_acquire+0x4a5/0x2630 [ 1740.408378][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1740.414210][ C1] ? iovec_from_user+0xbb/0x140 [ 1740.419143][ C1] unix_dgram_recvmsg+0xd0/0x110 [ 1740.424196][ C1] ____sys_recvmsg+0x5f7/0x6b0 [ 1740.429024][ C1] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1740.434459][ C1] ? rcu_is_watching+0x12/0xc0 [ 1740.439279][ C1] ___sys_recvmsg+0x16a/0x1a0 [ 1740.444075][ C1] ? __pfx____sys_recvmsg+0x10/0x10 [ 1740.449533][ C1] ? __pfx___might_resched+0x10/0x10 [ 1740.454907][ C1] do_recvmmsg+0x301/0x760 [ 1740.459373][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 1740.464525][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1740.470394][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1740.476109][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1740.481814][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1740.487584][ C1] ? do_futex+0x192/0x350 [ 1740.491974][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1740.497794][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1740.503511][ C1] __x64_sys_recvmmsg+0x22a/0x280 [ 1740.508604][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1740.514464][ C1] do_syscall_64+0xc9/0xf80 [ 1740.519045][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1740.525053][ C1] RIP: 0033:0x7f906039acb9 [ 1740.529520][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1740.549360][ C1] RSP: 002b:00007f906131e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1740.557881][ C1] RAX: ffffffffffffffda RBX: 00007f9060616090 RCX: 00007f906039acb9 [ 1740.565950][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1740.574075][ C1] RBP: 00007f9060408bf7 R08: 0000000000000000 R09: 0000000000000000 [ 1740.582188][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1740.590447][ C1] R13: 00007f9060616128 R14: 00007f9060616090 R15: 00007ffcd2dcf588 [ 1740.598543][ C1] [ 1740.601594][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1740.608910][ C1] CPU: 1 UID: 0 PID: 21526 Comm: syz.3.4012 Tainted: G L syzkaller #0 PREEMPT(full) [ 1740.619907][ C1] Tainted: [L]=SOFTLOCKUP [ 1740.624244][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1740.634317][ C1] Call Trace: [ 1740.637621][ C1] [ 1740.640472][ C1] dump_stack_lvl+0x100/0x190 [ 1740.645198][ C1] vpanic+0x20d/0x630 [ 1740.649202][ C1] panic+0xd1/0xd1 [ 1740.652947][ C1] ? __pfx_panic+0x10/0x10 [ 1740.657484][ C1] ? check_panic_on_warn+0x1f/0x90 [ 1740.662621][ C1] check_panic_on_warn.cold+0x19/0x34 [ 1740.668105][ C1] ? debug_print_object+0x18e/0x2a0 [ 1740.673423][ C1] __warn.cold+0x191/0x2f8 [ 1740.678091][ C1] __report_bug+0x296/0x3d0 [ 1740.682665][ C1] ? debug_print_object+0x18e/0x2a0 [ 1740.688049][ C1] ? __pfx___report_bug+0x10/0x10 [ 1740.693098][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1740.698795][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1740.704456][ C1] ? mark_held_locks+0x40/0x70 [ 1740.709261][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1740.715103][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1740.720781][ C1] report_bug_entry+0xe1/0x290 [ 1740.725574][ C1] ? debug_print_object+0x19b/0x2a0 [ 1740.730803][ C1] handle_bug+0x1c9/0x2a0 [ 1740.735174][ C1] exc_invalid_op+0x17/0x50 [ 1740.739711][ C1] asm_exc_invalid_op+0x1a/0x20 [ 1740.744576][ C1] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 1740.750408][ C1] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d e2 ca d3 0b 41 56 48 8b 14 dd e0 44 fa 8b 4c 89 e6 <67> 48 0f b9 3a 58 83 05 bc 8c c9 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 1740.770138][ C1] RSP: 0018:ffffc90000a08a18 EFLAGS: 00010246 [ 1740.776236][ C1] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 1740.784308][ C1] RDX: ffffffff8bfa4420 RSI: ffffffff8bfa4040 RDI: ffffffff90c1ce70 [ 1740.792306][ C1] RBP: 0000000000000001 R08: ffff888057792c90 R09: ffffffff8b92b900 [ 1740.800295][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8bfa4040 [ 1740.808301][ C1] R13: ffffffff8b92b940 R14: ffffffff8a649cc0 R15: ffffc90000a08b18 [ 1740.816306][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1740.822187][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1740.827850][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1740.834151][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1740.840077][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1740.845755][ C1] debug_check_no_obj_freed+0x4da/0x630 [ 1740.851614][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 1740.857726][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1740.863400][ C1] ? mark_held_locks+0x40/0x70 [ 1740.868218][ C1] ? kasan_quarantine_put+0x104/0x240 [ 1740.873631][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1740.879295][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 1740.884521][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1740.890185][ C1] kfree+0x34c/0x690 [ 1740.894114][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1740.899517][ C1] ? rose_timer_expiry+0x53f/0x630 [ 1740.904668][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1740.910343][ C1] ? rose_timer_expiry+0x53f/0x630 [ 1740.915484][ C1] rose_timer_expiry+0x53f/0x630 [ 1740.920458][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1740.925949][ C1] call_timer_fn+0x19a/0x590 [ 1740.930671][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1740.935819][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1740.941504][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1740.946991][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1740.952659][ C1] ? mark_held_locks+0x40/0x70 [ 1740.957482][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1740.962982][ C1] __run_timers+0x757/0xac0 [ 1740.967549][ C1] ? __pfx___run_timers+0x10/0x10 [ 1740.972613][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1740.978297][ C1] run_timer_base+0x114/0x190 [ 1740.983027][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 1740.988364][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1740.994043][ C1] run_timer_softirq+0x1a/0x50 [ 1740.999109][ C1] handle_softirqs+0x1ea/0x910 [ 1741.003930][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1741.009263][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1741.014931][ C1] __irq_exit_rcu+0xef/0x150 [ 1741.019716][ C1] irq_exit_rcu+0x9/0x30 [ 1741.023998][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 1741.029856][ C1] [ 1741.032816][ C1] [ 1741.035770][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1741.041787][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 1741.048239][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 a6 f2 6a f6 48 89 df e8 8e 40 6b f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 45 89 5b f6 65 8b 05 3e 0a 6c 08 85 c0 74 16 5b [ 1741.068011][ C1] RSP: 0018:ffffc9000cd2f838 EFLAGS: 00000246 [ 1741.074125][ C1] RAX: 0000000000000002 RBX: ffff8880418c0740 RCX: 0000000000000040 [ 1741.082221][ C1] RDX: 0000000000000000 RSI: ffffffff8dc42dff RDI: ffffffff8bfa3320 [ 1741.090234][ C1] RBP: 0000000000000282 R08: 0000000000000001 R09: 0000000000000000 [ 1741.098318][ C1] R10: 0000000000000001 R11: 0000000000000001 R12: ffff8880418c0590 [ 1741.106313][ C1] R13: ffff8880418c0780 R14: ffff8880418c00e8 R15: ffff88805e159280 [ 1741.114603][ C1] __unix_dgram_recvmsg+0x31a/0xc30 [ 1741.119885][ C1] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 1741.125639][ C1] ? __lock_acquire+0x4a5/0x2630 [ 1741.130641][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1741.136305][ C1] ? iovec_from_user+0xbb/0x140 [ 1741.141212][ C1] unix_dgram_recvmsg+0xd0/0x110 [ 1741.146191][ C1] ____sys_recvmsg+0x5f7/0x6b0 [ 1741.151032][ C1] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1741.156453][ C1] ? rcu_is_watching+0x12/0xc0 [ 1741.161260][ C1] ___sys_recvmsg+0x16a/0x1a0 [ 1741.165996][ C1] ? __pfx____sys_recvmsg+0x10/0x10 [ 1741.171256][ C1] ? __pfx___might_resched+0x10/0x10 [ 1741.176590][ C1] do_recvmmsg+0x301/0x760 [ 1741.181052][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 1741.186020][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1741.191857][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1741.197518][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1741.203197][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1741.208860][ C1] ? do_futex+0x192/0x350 [ 1741.213226][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1741.218889][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1741.224645][ C1] __x64_sys_recvmmsg+0x22a/0x280 [ 1741.229715][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1741.235320][ C1] do_syscall_64+0xc9/0xf80 [ 1741.239863][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1741.245787][ C1] RIP: 0033:0x7f906039acb9 [ 1741.250315][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1741.269958][ C1] RSP: 002b:00007f906131e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1741.278406][ C1] RAX: ffffffffffffffda RBX: 00007f9060616090 RCX: 00007f906039acb9 [ 1741.286394][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1741.294380][ C1] RBP: 00007f9060408bf7 R08: 0000000000000000 R09: 0000000000000000 [ 1741.302449][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1741.310697][ C1] R13: 00007f9060616128 R14: 00007f9060616090 R15: 00007ffcd2dcf588 [ 1741.318721][ C1] [ 1741.321846][ C1] Kernel Offset: disabled [ 1741.326174][ C1] Rebooting in 86400 seconds..