last executing test programs: 10m25.657124178s ago: executing program 2 (id=2066): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) 10m25.368601312s ago: executing program 2 (id=2068): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, 0x0, 0x0) socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f0000000140)=0xfffffffe, 0x4) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) close_range(r4, r4, 0x0) 10m24.352773995s ago: executing program 2 (id=2069): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r2, r2, &(0x7f0000000040)=0x4, 0x6) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = fsopen(&(0x7f00000000c0)='affs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000080)='source', &(0x7f0000000240)='//\xf2/\x06\b//\\o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15m.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8\t\x00\x00\x00\x00\x00\x00\x00\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff}, 0x80) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) getpid() setpgid(r1, r1) r2 = getpgid(r1) setpgid(0x0, r2) mount(&(0x7f0000000000)=@filename='./file0\x00', &(0x7f0000000040)='.\x00', &(0x7f0000000140)='f2fs\x00', 0x0, 0x0) 10m19.840360504s ago: executing program 2 (id=2089): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000400)={0x980929, 0x3}) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) epoll_create1(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xc}, [], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 10m18.979649875s ago: executing program 2 (id=2091): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, 0x0, 0x0) socket(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r1, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f0000000140)=0xfffffffe, 0x4) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) close_range(r5, r5, 0x0) 10m18.242120445s ago: executing program 32 (id=2091): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, 0x0, 0x0) socket(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0, r1, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_tcp_int(r0, 0x6, 0x5, &(0x7f0000000140)=0xfffffffe, 0x4) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) close_range(r5, r5, 0x0) 7.003737107s ago: executing program 0 (id=4437): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000140)={0x100, 0x640, &(0x7f0000000240), 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.389416665s ago: executing program 0 (id=4442): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) sendto$inet6(0xffffffffffffffff, 0x0, 0xffffffffffffff50, 0x8090, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x15}, 0xffffffff}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0xd4) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d61637674617000000008000140"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000480)={r4, 0xfffe, 0x30, 0x20000000000005, 0x3b0000}, &(0x7f00000009c0)=0x18) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000300)={r4, 0x328, 0x40, 0x9, 0x800, 0x7ac, 0x0, 0x3, {r5, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x401, 0x26, 0x4, 0x7, 0x10000}}, &(0x7f00000001c0)=0xb0) r6 = syz_io_uring_setup(0x3b, &(0x7f00000001c0)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r7, r8, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r10, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB=' '], 0x20}, 0x0, 0xe3d08660d3cd4684}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) io_uring_enter(r6, 0x92, 0x0, 0x0, 0x0, 0x0) 4.55324386s ago: executing program 5 (id=4452): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x48c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x378, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0xd, 0x8, 0x1}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}, @TCA_STAB={0x4}, @TCA_RATE={0x6, 0x5, {0x2, 0x2}}, @TCA_STAB={0xd8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x57, 0xb, 0x1, 0x0, 0x2b47, 0x9, 0x4}}, {0xc, 0x2, [0x400, 0xf, 0x64, 0x10]}}, {{0x1c, 0x1, {0x1, 0x0, 0x7e1, 0x2, 0x1, 0x1d7, 0x3}}, {0x4}}, {{0x1c, 0x1, {0x6, 0x1, 0x3, 0x4, 0x1, 0x8, 0x6}}, {0x4}}, {{0x1c, 0x1, {0x8, 0xff, 0x0, 0xf0000000, 0x0, 0xfcb0, 0x20e2, 0x1}}, {0x6, 0x2, [0x38]}}, {{0x1c, 0x1, {0x2, 0x9, 0xa3, 0x2, 0x1, 0x7, 0x3, 0x1}}, {0x6, 0x2, [0x5]}}, {{0x1c, 0x1, {0x9, 0x5, 0xfff9, 0x3, 0x1, 0x686, 0x6f4, 0x2}}, {0x8, 0x2, [0x6, 0x2]}}]}]}, 0x48c}}, 0x0) 4.197635745s ago: executing program 5 (id=4456): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window, @window={0x3, 0x2, 0x1}, @window={0x3, 0x0, 0x6}, @window={0x3, 0x8, 0x6}, @sack_perm, @timestamp, @mss={0x2, 0x1}, @sack_perm], 0x8) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0x40) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="3ce2de4d8d957a8de4e490b6cd03b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe102e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b830fa03e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c7e982472e6aac70e5d52ca2c1bab47b1f6d00f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd15", 0x1ae, 0x805, 0x0, 0x0) 4.011041107s ago: executing program 5 (id=4458): unshare(0x2a020400) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x42072, 0xffffffffffffffff, 0x0) bind$x25(0xffffffffffffffff, &(0x7f0000000040)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) 3.751222461s ago: executing program 5 (id=4461): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xaf4, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000240)=0x3) 3.04141556s ago: executing program 3 (id=4466): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x397, @empty}, 0x1c) shutdown(r0, 0x1) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0) 2.747528644s ago: executing program 3 (id=4469): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb60000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 2.530448847s ago: executing program 3 (id=4471): socket$packet(0x11, 0x3, 0x300) r0 = socket$kcm(0x10, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x6, 0xdd, 0xa, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r2}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000540), &(0x7f0000000580)='%ps \x00'}, 0x20) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 2.411666478s ago: executing program 4 (id=4473): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008044}, 0x4000) 2.045790533s ago: executing program 3 (id=4475): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000040)={0x6, 'nr0\x00', {0x1}, 0x2}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000080)={0x0, 'veth1_to_team\x00', {0x4}, 0x6}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000000c0)={0x0, 'veth1_to_team\x00', {}, 0x4}) 1.932590664s ago: executing program 4 (id=4476): syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a80)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_POLICE={0x4}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c011}, 0x4000000) 1.866430696s ago: executing program 5 (id=4477): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.678557668s ago: executing program 3 (id=4479): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xe0000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) io_setup(0x2, &(0x7f0000000200)=0x0) io_submit(r3, 0x1, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x700fbff, 0x4, 0x1, 0x0, r2, 0x0}]) dup3(r0, r2, 0x6700000000000000) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 1.603968469s ago: executing program 4 (id=4481): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 1.50022592s ago: executing program 0 (id=4482): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window, @window={0x3, 0x2, 0x1}, @window={0x3, 0x0, 0x6}, @window={0x3, 0x8, 0x6}, @sack_perm, @timestamp, @mss={0x2, 0x1}, @sack_perm], 0x8) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0x40) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="3ce2de4d8d957a8de4e490b6cd03b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe102e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b830fa03e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c7e982472e6aac70e5d52ca2c1bab47b1f6d00f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae", 0x1b0, 0x805, 0x0, 0x0) 1.388559692s ago: executing program 4 (id=4483): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) close_range(0xffffffffffffffff, r1, 0x2) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x2000, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0xfffffffffffffffc}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe4) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r2, 0x29, 0x18, 0x0, &(0x7f0000000280)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x800, 0x0, 0x2, 0x9, 0x0, 0x1}, 0x20) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) preadv(r3, &(0x7f00000005c0)=[{&(0x7f000001aa80)=""/102393, 0x18ff9}, {&(0x7f0000000500)=""/120, 0x78}], 0x2, 0x5, 0x0) 1.388129422s ago: executing program 1 (id=4484): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000bc0)={0x440, 0x3f3, 0x400, 0x70bd28, 0x25dfdbff, {0x2, 0x2, 0x2, [0x8, 0x10, 0x1, 0xfffffffb, 0x3, 0x9, 0x1, 0x9, 0x1, 0x4, 0xfffeffff, 0x800, 0x7, 0x8000, 0x3, 0x7, 0x1, 0x7, 0x0, 0x3, 0x0, 0x6, 0x80000000, 0x9, 0x80000000, 0x3, 0x1e, 0x6, 0x2, 0x4, 0x4, 0x7, 0x10, 0x9, 0xffff, 0x9a44, 0x7, 0x800, 0x0, 0x1, 0xfffffff7, 0x378c, 0x9, 0x7fffffff, 0x5, 0x5, 0x90a, 0x8, 0x0, 0x43, 0x400, 0x81, 0xfffffffb, 0x3, 0x84d, 0x0, 0x7fff, 0x7, 0x8, 0x0, 0x80000000, 0x3, 0x5, 0x2], [0x200, 0x2, 0x80000000, 0xf97, 0x1, 0x2, 0x709a, 0x3, 0x9, 0x8, 0x51b, 0x80000000, 0x0, 0x6, 0x1, 0x6, 0xffffffff, 0x8, 0x4, 0x6773, 0x7, 0x2, 0x9, 0x5, 0x6, 0x11d0, 0x7, 0x6, 0xa306, 0xcd, 0x8, 0x9, 0x1, 0x0, 0x2, 0x0, 0x200000, 0xaee, 0x2, 0x80000001, 0x5, 0x831, 0xb6, 0x5, 0x2, 0x90, 0x1, 0xffff0001, 0x45e2, 0x101, 0x3, 0x6, 0xd96e, 0x6, 0x101, 0x70000000, 0xfff, 0x0, 0xfffffff9, 0x0, 0x6, 0x81, 0x80000001, 0x4], [0x0, 0x9, 0x3ff, 0x9, 0x2, 0x7ff, 0xfffffff8, 0x8, 0xa579, 0x0, 0x9, 0x5, 0x1ff, 0x40, 0x0, 0x200, 0x7, 0xb62e, 0x4, 0x6, 0x3, 0x5, 0x1000, 0x4, 0x800, 0x5, 0x1, 0x2, 0xa6, 0x7, 0x6, 0x5c7e, 0x2, 0x2, 0x7fff, 0xfffffffb, 0xfffffffc, 0x7, 0xfffffff7, 0xb94, 0xbb, 0x3, 0x80000000, 0x4, 0x2, 0xffff, 0x917, 0x8, 0x20000000, 0x7f, 0x7, 0x7, 0x1000, 0xf37, 0x6, 0x4, 0xc, 0xd48, 0x1, 0x6, 0x3, 0x200, 0x9, 0x4], [0x100, 0x1, 0x81, 0x200, 0xb5da, 0xffffffff, 0x7, 0x50, 0x4, 0x4, 0x1, 0x3, 0x6c1d, 0x1, 0x4, 0xf100, 0x4, 0xb, 0x9, 0x3, 0x32, 0x4c, 0x800, 0x5, 0x7fffffff, 0x2, 0x3, 0x8, 0xffffffff, 0xfff, 0x6, 0x0, 0x101, 0x7, 0x3, 0x4f0, 0x3, 0xce, 0x7, 0x9, 0xffffffff, 0x13, 0x4, 0xf056, 0xf5f2, 0xa2df, 0x1ff, 0x800, 0x80, 0x8, 0xdb9, 0x400, 0x6, 0x0, 0x9, 0x80, 0x38fc, 0x7, 0x12, 0x200, 0x9ce, 0xffff, 0x3, 0xa69], 0x20, ['recent\x00', 'recent\x00', '-(}@}/\x00', 'CT\x00', 'syz1\x00', 'CT\x00']}, ["", "", "", "", "", "", ""]}, 0x440}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x598, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x4c8, 0xffffffff, 0xffffffff, 0x4c8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x208, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0xfffffffe, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0x7, 0x3, 0x98a9, '\x00', 'syz0\x00', {0x4}}}}, {{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x2, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x300, 0x4, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x4, 0x0, 0xffff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f8) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$alg(0x26, 0x5, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_netdev_private(r3, 0x8990, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000000a030000000000000000000700000030fdffff090a0104000000000000000003b1d2676800000008000a4000000001140000001000010000010000000000"], 0x58}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e20, 0x45ba, @local, 0x60}}, 0x7fff, 0x0, 0x3f8, 0x3ed, 0x32}, 0x9c) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2) close(0x3) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r4, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) 1.361995192s ago: executing program 0 (id=4485): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x2}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.236874214s ago: executing program 0 (id=4486): socket$packet(0x11, 0x3, 0x300) r0 = socket$kcm(0x10, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x6, 0xdd, 0xa, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r2}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000540), &(0x7f0000000580)='%ps \x00'}, 0x20) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 1.087796006s ago: executing program 5 (id=4487): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xaf4, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000240)=0x3) 1.080391316s ago: executing program 1 (id=4488): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000008b00)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x76, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10, 0x0, 0x0, 0x5000}}}}}}, 0x0) 990.048287ms ago: executing program 3 (id=4489): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x4, &(0x7f0000000100)={0xa, 0x0, 0x3, @loopback, 0x8}, 0x1c) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) 936.404008ms ago: executing program 4 (id=4490): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0x200000000000001, 0x106) r1 = syz_create_resource$binfmt(&(0x7f0000000080)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x41, 0x1ff) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x1, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0x9, @private0={0xfc, 0x0, '\x00', 0x6}, 0x5}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x18}}, 0x0) move_mount(r3, 0x0, 0xffffffffffffff9c, 0x0, 0x167) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r8, r6, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x1c) bind$packet(r3, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r3) 847.614689ms ago: executing program 1 (id=4491): syz_init_net_socket$rose(0xb, 0x5, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a80)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_POLICE={0x4}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c011}, 0x4000000) 806.55002ms ago: executing program 0 (id=4492): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) sendto$inet6(0xffffffffffffffff, 0x0, 0xffffffffffffff50, 0x8090, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x15}, 0xffffffff}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0xd4) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d61637674617000000008000140"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000480)={r4, 0xfffe, 0x30, 0x20000000000005, 0x3b0000}, &(0x7f00000009c0)=0x18) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000300)={r4, 0x328, 0x40, 0x9, 0x800, 0x7ac, 0x0, 0x3, {r5, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x401, 0x26, 0x4, 0x7, 0x10000}}, &(0x7f00000001c0)=0xb0) r6 = syz_io_uring_setup(0x3b, &(0x7f00000001c0)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r7, r8, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r10, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB=' '], 0x20}, 0x0, 0xe3d08660d3cd4684}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) io_uring_enter(r6, 0x92, 0x0, 0x0, 0x0, 0x0) 602.247922ms ago: executing program 1 (id=4493): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 297.282516ms ago: executing program 4 (id=4494): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_DETACH(0x22, 0x0, 0x0) 235.557207ms ago: executing program 1 (id=4495): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah\x00', 0x5) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window, @window={0x3, 0x2, 0x1}, @window={0x3, 0x0, 0x6}, @window={0x3, 0x8, 0x6}, @sack_perm, @timestamp, @mss={0x2, 0x1}, @sack_perm], 0x8) write$binfmt_elf64(r0, &(0x7f0000000280)=ANY=[], 0x40) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x1b0, 0x805, 0x0, 0x0) 0s ago: executing program 1 (id=4496): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x2}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): 16785][T12187] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1106.370680][T12187] usb 1-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 1106.405224][T12187] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1106.461112][T14903] device hsr_slave_1 entered promiscuous mode [ 1106.478225][T12187] usb 1-1: config 0 descriptor?? [ 1106.508219][T14903] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1106.526365][T14903] Cannot create hsr debugfs directory [ 1106.585557][ T4556] device hsr_slave_0 left promiscuous mode [ 1106.611609][ T4556] device hsr_slave_1 left promiscuous mode [ 1107.585506][ T4556] device veth1_macvtap left promiscuous mode [ 1107.592804][T12187] usbhid 1-1:0.0: can't add hid device: -71 [ 1107.604773][T12187] usbhid: probe of 1-1:0.0 failed with error -71 [ 1107.796393][ T4264] Bluetooth: hci1: command 0x0419 tx timeout [ 1108.150737][T12187] usb 1-1: USB disconnect, device number 80 [ 1109.955302][ T4264] Bluetooth: hci1: command 0x0401 tx timeout [ 1112.043556][ T4264] Bluetooth: hci1: command 0x0401 tx timeout [ 1114.397864][ T4556] bond0 (unregistering): Released all slaves [ 1114.690396][T12187] lo speed is unknown, defaulting to 1000 [ 1114.847358][T15026] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 1115.726468][T13833] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1115.797256][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.804682][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.070783][T13833] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1116.307003][T13833] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1116.327816][T13833] usb 6-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 1116.337883][T13833] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1116.364646][T13833] usb 6-1: config 0 descriptor?? [ 1116.596729][ T5540] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1116.710965][T13833] usbhid 6-1:0.0: can't add hid device: -71 [ 1116.721134][T13833] usbhid: probe of 6-1:0.0 failed with error -71 [ 1116.762671][T13833] usb 6-1: USB disconnect, device number 14 [ 1116.886603][ T5540] usb 5-1: Using ep0 maxpacket: 32 [ 1116.902666][ T5540] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1116.949287][ T5540] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1116.990294][ T5540] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1117.048063][ T5540] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1117.080877][ T5540] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1117.104987][ T5540] usb 5-1: Product: syz [ 1117.114996][ T5540] usb 5-1: Manufacturer: syz [ 1117.123509][ T5540] usb 5-1: SerialNumber: syz [ 1117.202881][ T5540] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input14 [ 1117.448930][ T4304] usb 5-1: USB disconnect, device number 76 [ 1117.482923][ T4304] appletouch 5-1:1.0: input: appletouch disconnected [ 1117.710236][T14903] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1117.796058][T15076] hfsplus: unable to find HFS+ superblock [ 1118.290832][T14903] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1118.306626][T14903] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1118.328860][T14903] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1118.674562][T14903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1118.723650][ T5539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1118.754988][ T5539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1118.991438][T14903] 8021q: adding VLAN 0 to HW filter on device team0 [ 1119.064822][ T5539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1119.157918][ T5539] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1119.196095][ T5539] bridge0: port 1(bridge_slave_0) entered blocking state [ 1119.203310][ T5539] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1119.251136][ T5539] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1119.388912][ T5539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1119.420624][ T5539] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1119.473981][ T5539] bridge0: port 2(bridge_slave_1) entered blocking state [ 1119.481241][ T5539] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1119.690741][ T5539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1119.706345][ T4264] Bluetooth: hci1: command 0x0401 tx timeout [ 1119.842564][ T5801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1119.871364][ T7165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1119.895289][ T7165] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1119.967291][ T7165] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1119.979443][ T7165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1120.022184][ T7165] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1120.060550][ T7165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1120.089415][ T7165] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1120.287327][ T7165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1121.070251][ T7165] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1121.866372][T13833] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1122.078077][T13833] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1122.104103][T13833] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1122.159232][T13833] usb 5-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 1122.204427][T13833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1122.251829][T13833] usb 5-1: config 0 descriptor?? [ 1122.473309][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1122.487994][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1122.574042][T13833] usbhid 5-1:0.0: can't add hid device: -71 [ 1122.580140][T13833] usbhid: probe of 5-1:0.0 failed with error -71 [ 1122.605556][T13833] usb 5-1: USB disconnect, device number 77 [ 1122.621251][T14903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1122.717954][ T5801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1122.733960][ T5801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1122.951660][ T7165] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1122.961482][ T7165] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1122.975229][T14903] device veth0_vlan entered promiscuous mode [ 1122.983791][ T7165] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1122.993050][ T7165] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1123.020075][T14903] device veth1_vlan entered promiscuous mode [ 1123.053689][T14903] device veth0_macvtap entered promiscuous mode [ 1123.070088][ T5801] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1123.094208][ T5801] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1123.117223][ T5801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1123.126812][ T5801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1123.139939][T14903] device veth1_macvtap entered promiscuous mode [ 1123.155112][ T5801] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1123.176669][ T5801] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1123.200940][T14903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1123.211792][ T4304] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1123.232596][T14903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1123.254663][T14903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1123.297646][T14903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1123.340680][T14903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1123.366157][ T5801] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1123.394967][ T5801] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1123.406448][ T4304] usb 6-1: Using ep0 maxpacket: 32 [ 1123.413723][ T4304] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1123.428314][T14903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1123.436662][ T4304] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1123.450152][ T4304] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1123.463355][T14903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1123.481545][T13983] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1123.488140][ T4304] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1123.518206][ T4304] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1123.520934][T14903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1123.539292][ T4304] usb 6-1: Product: syz [ 1123.544419][T14903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1123.549934][ T4304] usb 6-1: Manufacturer: syz [ 1123.570075][T14903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1123.572019][ T4304] usb 6-1: SerialNumber: syz [ 1123.587549][ T5801] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1123.612284][ T5801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1123.633641][T14903] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1123.660398][T14903] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1123.674607][T14903] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1123.688504][T13983] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1123.709426][ T4304] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input15 [ 1123.721166][T14903] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1123.743803][T13983] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1123.787619][T13983] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1123.830067][T13983] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1123.850626][T13983] usb 2-1: Product: syz [ 1123.860771][T13983] usb 2-1: Manufacturer: syz [ 1123.865513][T13983] usb 2-1: SerialNumber: syz [ 1123.913718][T13983] usb 2-1: config 0 descriptor?? [ 1124.028646][T13983] usb 2-1: selecting invalid altsetting 0 [ 1124.039657][ T4556] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1124.071136][ T4556] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1124.504784][ T22] usb 6-1: USB disconnect, device number 15 [ 1124.719658][ T5801] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1124.775803][T13983] usb 2-1: USB disconnect, device number 85 [ 1124.986426][ T4264] Bluetooth: hci1: command 0x0401 tx timeout [ 1126.252689][T15178] lo speed is unknown, defaulting to 1000 [ 1126.267917][ T5801] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1126.268346][ T22] appletouch 6-1:1.0: input: appletouch disconnected [ 1126.356446][ T5801] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1126.380525][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1126.666546][ T22] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1127.953413][ T22] usb 6-1: device descriptor read/64, error -71 [ 1128.356428][ T22] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1129.342925][T15217] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3051'. [ 1129.956305][ T22] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1130.158059][ T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1130.177768][ T22] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1130.213402][ T22] usb 4-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 1130.223018][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1130.246002][ T22] usb 4-1: config 0 descriptor?? [ 1130.363345][T15224] hfsplus: unable to find HFS+ superblock [ 1130.976669][ T22] usbhid 4-1:0.0: can't add hid device: -71 [ 1130.982799][ T22] usbhid: probe of 4-1:0.0 failed with error -71 [ 1131.057936][ T22] usb 4-1: USB disconnect, device number 81 [ 1131.236491][ T4296] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1131.446504][ T4296] usb 1-1: Using ep0 maxpacket: 8 [ 1131.453571][ T4296] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1131.485624][ T4296] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1131.518163][ T4296] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1131.557188][ T7165] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1131.580404][ T4296] usb 1-1: config 0 descriptor?? [ 1131.598452][ T7165] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1131.729870][T11510] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1131.753600][T11510] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1131.763633][T11510] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1131.775005][T11510] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1131.788017][T11510] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1131.799648][ T4296] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1131.821101][T11510] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1131.868424][ T7165] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1131.879204][ T7165] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1131.947609][ T4264] Bluetooth: hci1: command 0x0401 tx timeout [ 1131.991705][ T7165] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1132.008608][ T4296] usb 1-1: USB disconnect, device number 81 [ 1132.015829][ T7165] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1132.042215][T15234] lo speed is unknown, defaulting to 1000 [ 1132.076528][T13833] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1132.141520][ T7165] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1132.169778][ T7165] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1132.278976][T13833] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1132.316536][T13833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1132.365170][T13833] usb 5-1: config 0 descriptor?? [ 1132.391661][T13833] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1132.783141][T13833] gspca_cpia1: usb_control_msg 03, error -32 [ 1132.812357][T13833] gspca_cpia1: usb_control_msg 03, error -71 [ 1133.375260][T13833] gspca_cpia1: usb_control_msg 01, error -71 [ 1133.406888][T13833] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 1133.631498][T13833] usb 5-1: USB disconnect, device number 78 [ 1133.867849][ T4264] Bluetooth: hci2: command 0x0409 tx timeout [ 1135.946608][ T4264] Bluetooth: hci2: command 0x041b tx timeout [ 1136.456279][ T4304] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1136.598831][T15234] chnl_net:caif_netlink_parms(): no params data found [ 1136.658786][ T4304] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1136.679039][ T4304] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1136.713394][ T4304] usb 1-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 1136.756917][ T4304] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1137.356050][ T4304] usb 1-1: config 0 descriptor?? [ 1137.466350][ T4264] Bluetooth: hci1: command 0x0401 tx timeout [ 1138.406330][ T4264] Bluetooth: hci2: command 0x040f tx timeout [ 1138.937544][ T4304] usbhid 1-1:0.0: can't add hid device: -71 [ 1138.943577][ T4304] usbhid: probe of 1-1:0.0 failed with error -71 [ 1138.962296][ T4304] usb 1-1: USB disconnect, device number 82 [ 1140.408840][T15234] bridge0: port 1(bridge_slave_0) entered blocking state [ 1140.444145][T15234] bridge0: port 1(bridge_slave_0) entered disabled state [ 1140.521577][T15234] device bridge_slave_0 entered promiscuous mode [ 1140.616555][T15234] bridge0: port 2(bridge_slave_1) entered blocking state [ 1140.627178][T15234] bridge0: port 2(bridge_slave_1) entered disabled state [ 1140.668738][T15234] device bridge_slave_1 entered promiscuous mode [ 1140.907078][ T4264] Bluetooth: hci2: command 0x0419 tx timeout [ 1141.688167][T15234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1141.733150][T15234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1141.756068][T15342] tipc: Started in network mode [ 1141.786979][T15342] tipc: Node identity 7f000001, cluster identity 4711 [ 1141.794669][T15342] tipc: Enabled bearer , priority 10 [ 1142.150375][T15234] team0: Port device team_slave_0 added [ 1142.196286][ T4264] Bluetooth: hci1: command 0x0401 tx timeout [ 1142.513960][ T7165] device batadv0 left promiscuous mode [ 1142.808262][ T22] tipc: Node number set to 2130706433 [ 1143.034756][ T7165] device batadv_slave_0 left promiscuous mode [ 1143.054671][ T7165] device hsr_slave_0 left promiscuous mode [ 1143.076633][ T7165] device hsr_slave_1 left promiscuous mode [ 1143.114383][ T7165] device veth1_macvtap left promiscuous mode [ 1143.126075][ T7165] device veth0_macvtap left promiscuous mode [ 1143.486571][T12187] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1143.511151][ T7165] bond1 (unregistering): Released all slaves [ 1143.686742][T12187] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1143.726334][T12187] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1143.745319][T12187] usb 1-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 1143.768795][T12187] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1143.807960][T12187] usb 1-1: config 0 descriptor?? [ 1144.456663][T12187] usbhid 1-1:0.0: can't add hid device: -71 [ 1144.464213][T12187] usbhid: probe of 1-1:0.0 failed with error -71 [ 1144.762808][T12187] usb 1-1: USB disconnect, device number 83 [ 1146.586388][T11510] Bluetooth: hci1: command 0x0401 tx timeout [ 1147.328145][ T7165] bond0 (unregistering): Released all slaves [ 1147.669265][T15234] team0: Port device team_slave_1 added [ 1147.681170][T15366] netdevsim netdevsim4: Direct firmware load for . [ 1147.681170][T15366] failed with error -2 [ 1147.716247][T15366] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1147.716247][T15366] [ 1148.491886][T15234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1148.525102][T15234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1148.551073][ C1] vkms_vblank_simulate: vblank timer overrun [ 1149.125768][T15234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1149.175836][T15234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1149.203279][T15234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1149.229224][ C1] vkms_vblank_simulate: vblank timer overrun [ 1149.260693][T15234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1149.571712][T15234] device hsr_slave_0 entered promiscuous mode [ 1149.640531][T15234] device hsr_slave_1 entered promiscuous mode [ 1149.811290][T15417] netlink: 'syz.5.3102': attribute type 16 has an invalid length. [ 1149.819542][T15417] netlink: 64138 bytes leftover after parsing attributes in process `syz.5.3102'. [ 1150.016312][ T126] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1150.409907][ T126] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1150.461584][ T126] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1150.553830][ T126] usb 5-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 1150.592636][ T126] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1150.617036][ T126] usb 5-1: config 0 descriptor?? [ 1150.696986][T15426] tipc: Started in network mode [ 1150.701918][T15426] tipc: Node identity 7f000001, cluster identity 4711 [ 1150.728368][T15426] tipc: Enabled bearer , priority 10 [ 1151.053865][T15437] Illegal XDP return value 4294967274 on prog (id 191) dev N/A, expect packet loss! [ 1151.112996][ T126] usbhid 5-1:0.0: can't add hid device: -71 [ 1151.123897][ T126] usbhid: probe of 5-1:0.0 failed with error -71 [ 1151.140755][ T126] usb 5-1: USB disconnect, device number 79 [ 1152.117789][T12808] tipc: Node number set to 2130706433 [ 1152.123683][T11510] Bluetooth: hci1: command 0x0401 tx timeout [ 1152.671175][T15234] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1152.762266][T15234] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1152.783838][T15234] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1152.947317][T15234] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1153.624619][T15454] netdevsim netdevsim0: Direct firmware load for . [ 1153.624619][T15454] failed with error -2 [ 1153.736454][T15454] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1153.736454][T15454] [ 1154.186366][ T4257] Bluetooth: hci4: command 0x0406 tx timeout [ 1155.037953][T15234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1155.066348][T11510] Bluetooth: hci1: command 0x0401 tx timeout [ 1155.315940][T15480] netlink: 'syz.4.3116': attribute type 16 has an invalid length. [ 1155.324090][T15480] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.3116'. [ 1155.680676][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1155.699222][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1155.761734][T15234] 8021q: adding VLAN 0 to HW filter on device team0 [ 1155.822090][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1155.871138][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1155.904585][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 1155.911792][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1155.980709][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1156.029068][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1156.105661][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1156.147143][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 1156.154417][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1156.200858][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1156.266379][T13983] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1156.267040][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1156.345474][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1156.389915][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1156.407457][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1156.446471][T13983] usb 4-1: device descriptor read/64, error -71 [ 1156.449419][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1156.488094][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1156.577131][ T5700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1156.598263][ T5700] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1156.639964][T15234] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1156.743949][T15234] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1156.746299][T13983] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1156.808233][ T5700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1156.857280][ T5700] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1156.936349][T13983] usb 4-1: device descriptor read/64, error -71 [ 1157.066482][T13983] usb usb4-port1: attempt power cycle [ 1157.486416][T13983] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1157.530906][T13983] usb 4-1: device descriptor read/8, error -71 [ 1157.597695][ T5700] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1157.610553][ T5700] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1157.641022][T15234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1157.721262][ T5700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1157.744645][ T5700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1157.804353][ T5700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1157.816382][T13983] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1157.823620][ T5700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1157.846535][T15234] device veth0_vlan entered promiscuous mode [ 1157.847120][T13983] usb 4-1: device descriptor read/8, error -71 [ 1157.872233][ T5700] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1157.888483][ T5700] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1157.926476][T12808] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1157.926705][T15234] device veth1_vlan entered promiscuous mode [ 1157.996469][T13983] usb usb4-port1: unable to enumerate USB device [ 1158.059765][ T5700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1158.070578][ T5700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1158.139261][T15234] device veth0_macvtap entered promiscuous mode [ 1158.165716][T12808] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1158.183262][T15234] device veth1_macvtap entered promiscuous mode [ 1158.195933][T12808] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1158.259888][T12808] usb 1-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 1158.279140][T15234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1158.292710][T12808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1158.303327][T15234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1158.324549][T12808] usb 1-1: config 0 descriptor?? [ 1158.329982][T15234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1158.348032][T15234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1158.362847][T15234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1158.375204][T15234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1158.394020][T15234] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1158.407876][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1158.422025][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1158.436843][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1158.456286][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1159.038418][T15234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1159.082078][T15234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1159.567474][T15234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1159.937691][T15234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1159.947753][T15234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1159.958797][T15234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1160.078857][T15234] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1160.158247][T15234] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1160.191146][T15234] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1160.226325][T15234] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1160.253855][T15234] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1160.279740][ T5909] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1160.300710][T12808] usbhid 1-1:0.0: can't add hid device: -71 [ 1160.310949][T12808] usbhid: probe of 1-1:0.0 failed with error -71 [ 1160.318944][ T5909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1160.340140][T12808] usb 1-1: USB disconnect, device number 84 [ 1160.356271][T11510] Bluetooth: hci1: command 0x0401 tx timeout [ 1160.508249][ T5539] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1160.518614][ T5539] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1160.553320][ T5909] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1160.605839][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1160.605900][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1160.610349][ T5909] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1161.993678][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.042882][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1162.162006][ T4257] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1162.173782][ T4257] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1162.192542][ T4257] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1162.205224][ T4257] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1162.227597][ T4257] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1162.235402][ T4264] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1162.257460][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.275842][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1162.317756][ T4296] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1162.424794][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.446434][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1162.495308][T15556] lo speed is unknown, defaulting to 1000 [ 1162.506877][ T4296] usb 2-1: device descriptor read/64, error -71 [ 1162.796404][ T4296] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1162.821540][ T9] device netdevsim0 left promiscuous mode [ 1162.865765][ T9] bridge0: port 1(netdevsim0) entered disabled state [ 1162.968807][ T4296] usb 2-1: device descriptor read/64, error -71 [ 1163.003197][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1163.072553][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1163.096656][ T4296] usb usb2-port1: attempt power cycle [ 1163.506392][ T4296] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1163.567880][ T4296] usb 2-1: device descriptor read/8, error -71 [ 1163.706515][T11510] Bluetooth: hci1: command 0x0401 tx timeout [ 1163.836542][ T4296] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1163.877117][ T4296] usb 2-1: device descriptor read/8, error -71 [ 1163.980632][ T9] tipc: Left network mode [ 1163.996695][ T4296] usb usb2-port1: unable to enumerate USB device [ 1164.406496][T11510] Bluetooth: hci0: command 0x0409 tx timeout [ 1166.011886][T13983] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1166.199591][T13983] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1166.209865][T13983] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1166.241679][T13983] usb 4-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 1166.270020][T13983] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1166.299649][T15556] chnl_net:caif_netlink_parms(): no params data found [ 1166.313405][T13983] usb 4-1: config 0 descriptor?? [ 1166.586455][T11510] Bluetooth: hci0: command 0x041b tx timeout [ 1166.879193][T13983] usbhid 4-1:0.0: can't add hid device: -71 [ 1166.891643][T13983] usbhid: probe of 4-1:0.0 failed with error -71 [ 1166.931424][T13983] usb 4-1: USB disconnect, device number 86 [ 1167.433080][T15556] bridge0: port 1(bridge_slave_0) entered blocking state [ 1167.456270][ T5540] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1167.469423][T15556] bridge0: port 1(bridge_slave_0) entered disabled state [ 1167.506014][T15556] device bridge_slave_0 entered promiscuous mode [ 1167.679558][T15556] bridge0: port 2(bridge_slave_1) entered blocking state [ 1167.692495][T15556] bridge0: port 2(bridge_slave_1) entered disabled state [ 1167.696313][ T5540] usb 2-1: Using ep0 maxpacket: 16 [ 1167.716701][ T5540] usb 2-1: config 8 has an invalid interface number: 39 but max is 0 [ 1167.738459][T15556] device bridge_slave_1 entered promiscuous mode [ 1167.755550][ T5540] usb 2-1: config 8 has no interface number 0 [ 1167.797286][ T5540] usb 2-1: config 8 interface 39 altsetting 1 has an invalid endpoint with address 0xDF, skipping [ 1167.837629][ T5540] usb 2-1: config 8 interface 39 has no altsetting 0 [ 1167.896680][ T5540] usb 2-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 1167.926249][ T5540] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1167.981732][ T5540] usb 2-1: Product: syz [ 1168.002872][ T5540] usb 2-1: Manufacturer: syz [ 1168.033464][ T5540] usb 2-1: SerialNumber: syz [ 1168.115997][T15556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1168.333571][ T5540] ipheth 2-1:8.39: Unable to find endpoints [ 1168.363463][ T5540] usb 2-1: USB disconnect, device number 90 [ 1168.448105][T15556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1168.666438][T11510] Bluetooth: hci0: command 0x040f tx timeout [ 1169.390525][T15556] team0: Port device team_slave_0 added [ 1169.437149][T15556] team0: Port device team_slave_1 added [ 1169.635817][T15556] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1169.644240][T15556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1169.670297][ C0] vkms_vblank_simulate: vblank timer overrun [ 1169.683010][T15556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1169.789924][ T9] device veth1_macvtap left promiscuous mode [ 1169.805295][ T9] device veth0_macvtap left promiscuous mode [ 1169.823850][ T9] device veth1_vlan left promiscuous mode [ 1169.831311][ T9] device veth0_vlan left promiscuous mode [ 1169.953087][T11510] Bluetooth: Unexpected continuation frame (len 16) [ 1170.756451][T11510] Bluetooth: hci0: command 0x0419 tx timeout [ 1170.846655][ T4296] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1171.006533][ T4296] usb 5-1: device descriptor read/64, error -71 [ 1171.292897][ T4296] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1171.467147][ T4296] usb 5-1: device descriptor read/64, error -71 [ 1171.479555][ T22] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1171.586489][ T4296] usb usb5-port1: attempt power cycle [ 1171.681345][ T22] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1171.707447][ T22] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1171.733804][ T22] usb 2-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 1171.743408][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1171.767508][ T22] usb 2-1: config 0 descriptor?? [ 1171.996390][ T4296] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1172.045143][ T4296] usb 5-1: device descriptor read/8, error -71 [ 1172.797577][ T22] usbhid 2-1:0.0: can't add hid device: -71 [ 1172.803626][ T22] usbhid: probe of 2-1:0.0 failed with error -71 [ 1172.820955][ T22] usb 2-1: USB disconnect, device number 91 [ 1173.056464][ T4296] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1173.118526][ T4296] usb 5-1: device descriptor read/8, error -71 [ 1173.269194][ T4296] usb usb5-port1: unable to enumerate USB device [ 1177.033733][ T9] bond0 (unregistering): Released all slaves [ 1177.229401][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.236329][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.261560][T15556] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1177.278799][T15556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1177.574638][T15556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1177.640224][T15680] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3160'. [ 1178.246474][T15556] device hsr_slave_0 entered promiscuous mode [ 1178.287556][T15556] device hsr_slave_1 entered promiscuous mode [ 1178.347013][T15556] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1178.406236][T15556] Cannot create hsr debugfs directory [ 1178.876239][T12187] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1179.056470][T12187] usb 2-1: device descriptor read/64, error -71 [ 1179.366239][T12187] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1179.536244][T12187] usb 2-1: device descriptor read/64, error -71 [ 1180.366561][T12187] usb usb2-port1: attempt power cycle [ 1181.256433][T12187] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1181.297112][T12187] usb 2-1: device descriptor read/8, error -71 [ 1181.666260][T12187] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1181.780456][T15733] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3174'. [ 1181.941713][T12187] usb 2-1: device not accepting address 95, error -71 [ 1181.981483][T12187] usb usb2-port1: unable to enumerate USB device [ 1182.461132][T15556] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1182.522842][T15556] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1182.584685][T15556] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1182.689120][T15556] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1183.334585][T15556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1183.387630][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1183.396663][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1183.411036][T15556] 8021q: adding VLAN 0 to HW filter on device team0 [ 1183.431996][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1183.476785][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1183.537016][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state [ 1183.544111][ T5800] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1183.577231][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1183.649058][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1183.649765][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1183.650306][ T4556] bridge0: port 2(bridge_slave_1) entered blocking state [ 1183.650422][ T4556] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1183.650904][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1183.652141][ T4556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1183.666677][ T5909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1183.670345][ T5909] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1183.672709][ T5909] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1183.675662][ T5801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1183.678003][ T5801] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1183.681986][ T5909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1183.682663][ T5909] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1183.691768][ T5801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1183.693100][ T5801] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1183.705079][T15556] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1185.433525][ T52] block nbd5: Attempted send on invalid socket [ 1185.440138][ T52] I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1185.454622][ T52] block nbd5: Attempted send on invalid socket [ 1185.461867][ T52] I/O error, dev nbd5, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1185.506250][T15787] Mount JFS Failure: -5 [ 1185.510964][T15787] jfs_mount failed w/return code = -5 [ 1186.467069][T15791] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3185'. [ 1187.281069][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1187.340666][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1187.376507][T15556] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1187.508642][T15556] device veth0_vlan entered promiscuous mode [ 1187.601792][T15556] device veth1_vlan entered promiscuous mode [ 1187.705321][T15556] device veth0_macvtap entered promiscuous mode [ 1187.755273][T15556] device veth1_macvtap entered promiscuous mode [ 1187.841181][T15556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1187.889450][T15556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1187.929516][T15556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1187.969332][T15556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1188.002117][T15556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1188.033345][T15556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1188.059502][T15556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1188.089876][T15556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1188.120207][T15556] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1188.145724][T15556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1188.171206][T15556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1188.206560][T15556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1188.221147][T15556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1188.231542][T15556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1188.245961][T15556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1188.259796][T15556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1188.271100][T15556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1188.286070][T15556] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1188.304556][T15556] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1188.314227][T15556] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1188.327290][T15556] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1188.336107][T15556] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1188.433710][ T5801] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1188.453298][ T5801] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1188.500235][ T5801] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1188.509323][ T5801] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1188.534693][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1188.587501][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1188.621779][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1188.699851][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1188.783251][T15814] fuse: Bad value for 'fd' [ 1188.903797][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1188.982510][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1189.025286][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1189.072190][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1189.118507][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1189.150701][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1189.201716][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1189.255943][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1189.372100][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1189.427150][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1189.499162][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1189.581745][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1189.650222][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1189.715313][ T5800] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1191.696373][T13983] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1191.886344][T13983] usb 1-1: Using ep0 maxpacket: 8 [ 1191.895108][T13983] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1191.947794][T13983] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1192.008591][T13983] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1192.026531][ T4296] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1192.075823][T13983] usb 1-1: config 0 descriptor?? [ 1192.216267][ T33] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1192.229176][ T4296] usb 4-1: config index 0 descriptor too short (expected 45, got 36) [ 1192.256262][ T4296] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1192.287548][T13983] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1192.329024][ T4296] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1192.372780][ T4296] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1192.417605][ T4296] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1192.426315][ T33] usb 6-1: Using ep0 maxpacket: 16 [ 1192.433867][ T33] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1192.453181][ T33] usb 6-1: config 6 has an invalid interface number: 19 but max is 0 [ 1192.462650][ T4296] usb 4-1: config 0 descriptor?? [ 1192.470765][ T33] usb 6-1: config 6 has no interface number 0 [ 1192.498090][ T33] usb 6-1: config 6 interface 19 altsetting 129 bulk endpoint 0xB has invalid maxpacket 1023 [ 1192.508221][ T4296] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1192.517755][T13833] usb 1-1: USB disconnect, device number 85 [ 1192.527028][ T33] usb 6-1: config 6 interface 19 altsetting 129 bulk endpoint 0x7 has invalid maxpacket 32 [ 1192.601799][ T33] usb 6-1: config 6 interface 19 has no altsetting 0 [ 1192.680857][ T33] usb 6-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=8d.6d [ 1192.715577][ T33] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1192.766416][ T33] usb 6-1: Product: syz [ 1192.771781][ T33] usb 6-1: Manufacturer: syz [ 1192.773257][T15878] hfsplus: unable to find HFS+ superblock [ 1192.776601][ T33] usb 6-1: SerialNumber: syz [ 1192.823438][T15867] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1192.832586][T15867] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1193.118775][ T33] pn533_usb 6-1:6.19: NFC: Could not find bulk-in or bulk-out endpoint [ 1193.258490][ T33] usb 6-1: USB disconnect, device number 18 [ 1193.469598][T15884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1193.493478][T15884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1193.528955][T15884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1193.572791][T15884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1193.756412][T11819] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1193.876236][T13833] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1193.946213][T11819] usb 1-1: Using ep0 maxpacket: 32 [ 1193.958478][T11819] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1194.005697][T11819] usb 1-1: config 0 has no interface number 0 [ 1194.031638][T11819] usb 1-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 1194.059008][T11819] usb 1-1: config 0 interface 1 has no altsetting 0 [ 1194.068142][T13833] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1194.083780][T11819] usb 1-1: New USB device found, idVendor=0572, idProduct=58a2, bcdDevice=27.0a [ 1194.099335][T11819] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1194.106456][T13833] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1194.110612][T11819] usb 1-1: Product: syz [ 1194.129882][T11819] usb 1-1: Manufacturer: syz [ 1194.137078][T11819] usb 1-1: SerialNumber: syz [ 1194.141823][T13833] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1194.156289][ T4296] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1194.167915][T11819] usb 1-1: config 0 descriptor?? [ 1194.191738][T13833] usb 2-1: config 0 descriptor?? [ 1194.359045][ T4296] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1194.382671][T11819] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a2) with 1 interfaces [ 1194.396800][ T4296] usb 6-1: config 0 has no interface number 0 [ 1194.403031][ T4296] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1194.410511][T11819] cx231xx 1-1:0.1: Failed to read PCB config [ 1194.432302][T11819] cx231xx: probe of 1-1:0.1 failed with error -71 [ 1194.451688][T11819] usb 1-1: USB disconnect, device number 86 [ 1194.476287][ T4296] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1194.507699][ T4296] usb 6-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1194.528368][ T4296] usb 6-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 1194.546298][ T4296] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1194.576879][ T4296] usb 6-1: config 0 descriptor?? [ 1194.622314][T15889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1194.649874][T15889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1194.737065][ T5540] usb 4-1: USB disconnect, device number 87 [ 1194.920557][T15889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1194.943811][T15889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1194.965598][T13833] keytouch 0003:0926:3333.0009: fixing up Keytouch IEC report descriptor [ 1194.976395][T11819] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1194.991688][T13833] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0009/input/input16 [ 1195.016498][ T126] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1195.186346][T11819] usb 1-1: Using ep0 maxpacket: 32 [ 1195.203332][T11819] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1195.211495][T11819] usb 1-1: config 0 has no interface number 0 [ 1195.217737][T11819] usb 1-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 1195.220117][ T4296] input: HID 28bd:0042 Pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.1/0003:28BD:0042.000A/input/input17 [ 1195.228317][T11819] usb 1-1: config 0 interface 1 has no altsetting 0 [ 1195.232187][T11819] usb 1-1: New USB device found, idVendor=0572, idProduct=58a2, bcdDevice=27.0a [ 1195.257708][T11819] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1195.265893][T11819] usb 1-1: Product: syz [ 1195.270369][T11819] usb 1-1: Manufacturer: syz [ 1195.275005][T11819] usb 1-1: SerialNumber: syz [ 1195.283198][T11819] usb 1-1: config 0 descriptor?? [ 1195.578755][T11819] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a2) with 1 interfaces [ 1195.597932][T11819] cx231xx 1-1:0.1: Identified as Conexant Hybrid TV - CARRAERA (card=1) [ 1195.610256][ T126] usb 5-1: config 0 has no interfaces? [ 1195.632890][T13833] keytouch 0003:0926:3333.0009: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 1196.304967][ T4296] uclogic 0003:28BD:0042.000A: input,hidraw1: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.5-1/input1 [ 1196.383550][T11819] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --110 [ 1196.409024][T11819] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --71 [ 1196.460004][ T126] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1196.469302][T11819] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --71 [ 1196.490485][T11819] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --71 [ 1196.513805][ T126] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1196.540984][T11819] cx231xx 1-1:0.1: cx231xx_send_gpio_cmd: failed with status --71 [ 1196.542709][T13833] usb 2-1: USB disconnect, device number 96 [ 1196.568838][T11819] cx231xx 1-1:0.1: Failed to set devmode to analog: error: -71 [ 1196.577729][ T4296] usb 6-1: USB disconnect, device number 19 [ 1196.585503][ T126] usb 5-1: Product: syz [ 1196.595656][ T126] usb 5-1: Manufacturer: syz [ 1196.628978][ T126] usb 5-1: SerialNumber: syz [ 1196.657446][ T126] usb 5-1: config 0 descriptor?? [ 1196.677281][T11819] i2c i2c-2: Added multiplexed i2c bus 4 [ 1196.693085][T15931] tipc: Started in network mode [ 1196.704620][T11819] i2c i2c-2: Added multiplexed i2c bus 5 [ 1196.716035][T15931] tipc: Node identity 7f000001, cluster identity 4711 [ 1196.733898][T11819] cx231xx 1-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-71]! [ 1196.745635][T15931] tipc: Enabled bearer , priority 10 [ 1196.755661][T11819] cx231xx 1-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-71]! [ 1196.848755][T11819] cx231xx: probe of 1-1:0.1 failed with error -71 [ 1196.878043][T11819] usb 1-1: USB disconnect, device number 87 [ 1197.619471][T15941] hfsplus: unable to find HFS+ superblock [ 1197.717163][ T33] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1197.836430][ T5540] tipc: Node number set to 2130706433 [ 1198.023748][ T33] usb 2-1: Using ep0 maxpacket: 8 [ 1198.031121][ T33] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1198.045598][ T33] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1198.062399][ T33] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1198.072787][ T33] usb 2-1: config 0 descriptor?? [ 1198.186351][ T5540] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1198.285188][ T33] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1198.326301][T13833] usb 1-1: new full-speed USB device number 88 using dummy_hcd [ 1198.396363][ T5540] usb 4-1: Using ep0 maxpacket: 32 [ 1198.405978][ T5540] usb 4-1: config 0 has an invalid interface number: 230 but max is 0 [ 1198.438472][ T5540] usb 4-1: config 0 has no interface number 0 [ 1198.450537][ T5540] usb 4-1: config 0 interface 230 has no altsetting 0 [ 1198.489316][ T4296] usb 2-1: USB disconnect, device number 97 [ 1198.511612][ T5540] usb 4-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 1198.538118][ T5540] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1198.546881][ T5540] usb 4-1: Product: syz [ 1198.549105][T13833] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1198.551063][ T5540] usb 4-1: Manufacturer: syz [ 1198.564014][ T5540] usb 4-1: SerialNumber: syz [ 1198.583197][ T5540] usb 4-1: config 0 descriptor?? [ 1198.612602][T13833] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1198.628953][ T5540] ums-usbat 4-1:0.230: USB Mass Storage device detected [ 1198.642779][T13833] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1198.666047][ T5540] ums-usbat 4-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 1198.692262][T13833] usb 1-1: Product: syz [ 1198.704864][T13833] usb 1-1: Manufacturer: syz [ 1198.711268][T13833] usb 1-1: SerialNumber: syz [ 1199.341273][T13833] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 88 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1199.908908][ T4296] usb 1-1: USB disconnect, device number 88 [ 1200.222602][T11819] usb 5-1: USB disconnect, device number 84 [ 1200.331586][ T93] block nbd1: Attempted send on invalid socket [ 1200.338088][ T93] I/O error, dev nbd1, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1200.352771][ T93] block nbd1: Attempted send on invalid socket [ 1200.359170][ T93] I/O error, dev nbd1, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1200.368719][T15971] Mount JFS Failure: -5 [ 1200.372900][T15971] jfs_mount failed w/return code = -5 [ 1200.626273][ T4296] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1200.766275][T11819] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1200.806234][ T4296] usb 1-1: Using ep0 maxpacket: 32 [ 1200.816851][ T4296] usb 1-1: New USB device found, idVendor=1286, idProduct=2043, bcdDevice=99.e8 [ 1200.826045][ T4296] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1200.834475][ T4296] usb 1-1: Product: syz [ 1200.836361][ T33] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1200.839407][ T4296] usb 1-1: Manufacturer: syz [ 1200.856385][T13833] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1200.876364][ T4296] usb 1-1: SerialNumber: syz [ 1200.897182][ T4296] usb 1-1: config 0 descriptor?? [ 1200.951327][T11819] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1200.959247][T15988] tipc: Enabling of bearer rejected, already enabled [ 1200.970758][ T4296] usb 1-1: can't set config #0, error -71 [ 1200.973392][ T5540] ums-usbat: probe of 4-1:0.230 failed with error -5 [ 1200.981283][ T4296] usb 1-1: USB disconnect, device number 89 [ 1200.990742][T11819] usb 6-1: config 0 has no interface number 0 [ 1200.997797][T15973] usblp0: removed [ 1201.016235][T11819] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1201.028831][ T5540] usb 4-1: USB disconnect, device number 88 [ 1201.036456][ T33] usb 2-1: Using ep0 maxpacket: 16 [ 1201.043815][ T33] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 1201.061065][T11819] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1201.069618][T13833] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1201.084740][T11819] usb 6-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1201.100315][ T33] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1201.117400][ T33] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1201.127457][T13833] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1201.133763][ T33] usb 2-1: Product: syz [ 1201.143945][T11819] usb 6-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 1201.147189][T13833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1201.160552][ T33] usb 2-1: Manufacturer: syz [ 1201.165830][ T33] usb 2-1: SerialNumber: syz [ 1201.176385][T11819] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1201.193320][T13833] usb 5-1: config 0 descriptor?? [ 1201.208803][ T33] usb 2-1: config 0 descriptor?? [ 1201.224925][T11819] usb 6-1: config 0 descriptor?? [ 1201.409421][T15986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1201.431009][T15986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1201.451771][T13833] usbhid 5-1:0.0: can't add hid device: -71 [ 1201.463571][T13833] usbhid: probe of 5-1:0.0 failed with error -71 [ 1201.497913][T13833] usb 5-1: USB disconnect, device number 85 [ 1201.848964][T11819] input: HID 28bd:0042 Pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.1/0003:28BD:0042.000B/input/input18 [ 1201.929797][T11819] uclogic 0003:28BD:0042.000B: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.5-1/input1 [ 1202.016402][T13833] usb 5-1: new full-speed USB device number 86 using dummy_hcd [ 1202.049375][ T126] usb 6-1: USB disconnect, device number 20 [ 1202.070598][ T4296] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1202.219846][T13833] usb 5-1: New USB device found, idVendor=1740, idProduct=9707, bcdDevice=34.de [ 1202.229905][T13833] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1202.239006][T13833] usb 5-1: Product: syz [ 1202.243753][T13833] usb 5-1: Manufacturer: syz [ 1202.248578][T13833] usb 5-1: SerialNumber: syz [ 1202.263706][T13833] usb 5-1: config 0 descriptor?? [ 1202.268967][ T4296] usb 1-1: Using ep0 maxpacket: 8 [ 1202.275748][T13833] hub 5-1:0.0: bad descriptor, ignoring hub [ 1202.282020][T13833] hub: probe of 5-1:0.0 failed with error -5 [ 1202.288555][ T4296] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1202.302025][ T4296] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1202.312814][ T4296] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1202.322594][ T4296] usb 1-1: config 0 descriptor?? [ 1202.386284][T11819] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1202.533226][ T4296] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1202.568811][T11819] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1202.589640][T11819] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1202.615775][T11819] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1202.625302][T11819] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1202.642529][T11819] usb 4-1: config 0 descriptor?? [ 1202.735128][ T4296] usb 1-1: USB disconnect, device number 90 [ 1203.036268][ T126] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1203.057555][T11819] cm6533_jd 0003:0D8C:0022.000C: No inputs registered, leaving [ 1203.083628][T11819] cm6533_jd 0003:0D8C:0022.000C: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 1203.245192][ T126] usb 6-1: config 0 has no interfaces? [ 1203.255666][ T126] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1203.273509][ T126] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1203.292366][ T126] usb 6-1: Product: syz [ 1203.303643][ T126] usb 6-1: Manufacturer: syz [ 1203.312437][ T126] usb 6-1: SerialNumber: syz [ 1203.328974][ T126] usb 6-1: config 0 descriptor?? [ 1203.509596][ T126] usb 4-1: USB disconnect, device number 89 [ 1203.574939][T11819] usb 2-1: USB disconnect, device number 98 [ 1203.796893][T13983] usb 5-1: USB disconnect, device number 86 [ 1204.046359][T11819] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1204.278591][T11819] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1204.336401][T11819] usb 2-1: config 0 has no interfaces? [ 1204.354357][T11819] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1204.379098][T11819] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1204.414023][T11819] usb 2-1: config 0 descriptor?? [ 1204.611835][T16030] tipc: Enabling of bearer rejected, already enabled [ 1204.630497][ T126] usb 2-1: USB disconnect, device number 99 [ 1205.216228][ T126] usb 2-1: new full-speed USB device number 100 using dummy_hcd [ 1205.411279][ T126] usb 2-1: config index 0 descriptor too short (expected 551, got 441) [ 1205.423789][ T126] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1205.472409][ T126] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1205.539235][ T126] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1205.581347][ T126] usb 2-1: Product: syz [ 1205.588470][ T126] usb 2-1: Manufacturer: syz [ 1205.594689][ T126] usb 2-1: SerialNumber: syz [ 1205.641899][ T126] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1206.413467][ T5540] usb 6-1: USB disconnect, device number 21 [ 1206.996816][ T5540] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1207.026281][T13833] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1207.046711][ T126] usb 2-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 1207.077464][ T126] usb 2-1: USB disconnect, device number 100 [ 1207.216212][ T5540] usb 6-1: Using ep0 maxpacket: 8 [ 1207.228650][ T5540] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1207.246366][T13833] usb 5-1: Using ep0 maxpacket: 32 [ 1207.263512][T13833] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1207.266542][ T5540] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1207.292533][ T5540] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1207.328252][T13833] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1207.328969][ T5540] usb 6-1: config 0 descriptor?? [ 1207.331318][T13833] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1207.331361][T13833] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1207.331387][T13833] usb 5-1: Product: syz [ 1207.331405][T13833] usb 5-1: Manufacturer: syz [ 1207.331424][T13833] usb 5-1: SerialNumber: syz [ 1207.536770][ T5540] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1207.592281][ T5540] usb 5-1: USB disconnect, device number 87 [ 1207.737372][T13833] usb 6-1: USB disconnect, device number 22 [ 1207.775980][T16052] device syzkaller0 entered promiscuous mode [ 1211.212555][T16092] device wg2 entered promiscuous mode [ 1211.456774][T13983] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 1211.536476][ T5540] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1211.766456][T13983] usb 1-1: Using ep0 maxpacket: 32 [ 1211.777604][T13983] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1211.794634][T13983] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1212.747665][T13983] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1212.757003][ T5540] usb 6-1: Using ep0 maxpacket: 8 [ 1212.800678][T13983] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1212.809482][ T5540] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1212.826247][ T5540] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1212.835348][ T5540] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1212.856169][T13983] usb 1-1: Product: syz [ 1212.860446][T13983] usb 1-1: Manufacturer: syz [ 1212.865357][T13983] usb 1-1: SerialNumber: syz [ 1212.907806][T13983] appletouch 1-1:1.0: Could not find int-in endpoint [ 1212.914573][T13983] appletouch: probe of 1-1:1.0 failed with error -5 [ 1212.934977][ T5540] usb 6-1: config 0 descriptor?? [ 1212.949878][T13983] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 1213.117248][T12187] usb 1-1: USB disconnect, device number 91 [ 1213.167966][ T5540] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1213.373287][T12187] usb 6-1: USB disconnect, device number 23 [ 1215.956345][ T4303] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1216.016431][ T126] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1216.176353][ T4303] usb 6-1: Using ep0 maxpacket: 32 [ 1216.221968][ T126] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1216.601020][ T4303] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1216.638008][ T126] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1216.656234][ T4303] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1216.673624][ T126] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1216.689334][ T126] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1216.700180][ T4303] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1216.713354][ T4303] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1216.732134][T16154] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1216.779376][ T4303] usb 6-1: Product: syz [ 1216.861205][ T4303] usb 6-1: Manufacturer: syz [ 1216.927121][ T4303] usb 6-1: SerialNumber: syz [ 1216.971799][ T4303] appletouch 6-1:1.0: Could not find int-in endpoint [ 1216.988673][ T4303] appletouch: probe of 6-1:1.0 failed with error -5 [ 1217.032057][ T4303] usbhid 6-1:1.0: couldn't find an input interrupt endpoint [ 1217.039703][T11819] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 1217.176258][ T4303] usb 6-1: USB disconnect, device number 24 [ 1217.236436][T11819] usb 2-1: Using ep0 maxpacket: 8 [ 1217.254775][T11819] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1217.286354][T11819] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1217.340216][T11819] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1217.394237][T11819] usb 2-1: config 0 descriptor?? [ 1217.632619][T11819] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1218.376578][T11819] usb 2-1: USB disconnect, device number 101 [ 1219.612653][T16199] tipc: Enabled bearer , priority 0 [ 1219.637806][T16199] device syzkaller0 entered promiscuous mode [ 1219.699643][T16199] tipc: Resetting bearer [ 1219.741966][T16198] tipc: Resetting bearer [ 1219.802190][ T4303] usb 1-1: USB disconnect, device number 92 [ 1219.911879][T16198] tipc: Disabling bearer [ 1221.180304][T16216] netlink: 'syz.1.3303': attribute type 39 has an invalid length. [ 1221.427954][T16220] netlink: 232 bytes leftover after parsing attributes in process `syz.3.3304'. [ 1221.837569][ T4303] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1222.026223][ T4303] usb 5-1: Using ep0 maxpacket: 8 [ 1222.033475][ T4303] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1222.100419][ T4303] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1222.193888][ T4303] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1222.244162][ T4303] usb 5-1: config 0 descriptor?? [ 1222.465702][ T4303] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1222.594592][T16236] kvm [16235]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x1 [ 1222.626529][T16236] kvm [16235]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x28 [ 1222.716540][T16236] kvm [16235]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x28 [ 1222.725580][T11819] usb 5-1: USB disconnect, device number 88 [ 1222.803273][T16236] kvm [16235]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0x28 [ 1223.059252][T16236] kvm [16235]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x187 data 0x39 [ 1223.090325][T16236] kvm [16235]: vcpu0, guest rIP: 0x18e vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x1, nop [ 1223.582451][T16260] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 1225.130549][T16285] kvm [16282]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x1 [ 1225.193530][T16285] kvm [16282]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x28 [ 1225.232069][T16285] kvm [16282]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x28 [ 1225.308111][T16285] kvm [16282]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0x28 [ 1225.345041][T16285] kvm [16282]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x187 data 0x39 [ 1225.388248][ T4264] Bluetooth: hci1: command 0x0406 tx timeout [ 1225.409166][T16285] kvm [16282]: vcpu0, guest rIP: 0x18e vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x1, nop [ 1227.128791][T16320] hfsplus: unable to find HFS+ superblock [ 1229.700213][T16343] tipc: Enabled bearer , priority 0 [ 1229.766988][T16340] tipc: Resetting bearer [ 1230.682075][T16359] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1230.704557][T16359] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1235.768829][T16340] tipc: Disabling bearer [ 1235.791911][T16374] tipc: Enabled bearer , priority 0 [ 1235.812495][T16376] device syzkaller0 entered promiscuous mode [ 1235.858704][T16384] tipc: Resetting bearer [ 1235.892240][T16367] tipc: Resetting bearer [ 1236.031395][T16416] hfsplus: unable to find HFS+ superblock [ 1236.461865][T16367] tipc: Disabling bearer [ 1238.671213][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.681704][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.076198][ T5540] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1239.302960][ T5540] usb 1-1: Using ep0 maxpacket: 32 [ 1239.430418][ T5540] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1239.483579][ T5540] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1239.508346][ T5540] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1239.526459][ T5540] usb 1-1: Product: syz [ 1239.531335][ T5540] usb 1-1: Manufacturer: syz [ 1239.536213][ T5540] usb 1-1: SerialNumber: syz [ 1239.593526][ T5540] appletouch 1-1:1.0: Could not find int-in endpoint [ 1239.600532][ T5540] appletouch: probe of 1-1:1.0 failed with error -5 [ 1239.614292][ T5540] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 1239.783294][ T5540] usb 1-1: USB disconnect, device number 93 [ 1240.086271][T13833] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1240.309575][T13833] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1240.724408][T13833] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1240.751405][T13833] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1240.795058][T13833] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1240.837416][T16472] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1243.905004][ T5540] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1244.116639][ T5540] usb 5-1: Using ep0 maxpacket: 32 [ 1244.127381][ T5540] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1244.203923][ T5540] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1244.234892][ T5540] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1244.260919][ T5540] usb 5-1: Product: syz [ 1244.279598][ T5540] usb 5-1: Manufacturer: syz [ 1244.284289][ T5540] usb 5-1: SerialNumber: syz [ 1244.336718][ T5540] appletouch 5-1:1.0: Could not find int-in endpoint [ 1244.343623][ T5540] appletouch: probe of 5-1:1.0 failed with error -5 [ 1244.358231][ T5540] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 1244.538634][ T126] usb 5-1: USB disconnect, device number 89 [ 1244.914379][ T126] usb 6-1: USB disconnect, device number 25 [ 1247.926814][T16560] hfsplus: unable to find HFS+ superblock [ 1248.808364][ T4303] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1249.016359][ T4303] usb 1-1: Using ep0 maxpacket: 32 [ 1249.027200][ T4303] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1249.075987][ T4303] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1249.140285][ T4303] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1249.187318][ T4303] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1249.249298][ T4303] usb 1-1: Product: syz [ 1249.274534][ T4303] usb 1-1: Manufacturer: syz [ 1249.306474][ T4303] usb 1-1: SerialNumber: syz [ 1249.379495][ T4303] appletouch 1-1:1.0: Could not find int-in endpoint [ 1249.408681][ T4303] appletouch: probe of 1-1:1.0 failed with error -5 [ 1249.427963][ T4303] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 1249.572895][ T4303] usb 1-1: USB disconnect, device number 94 [ 1250.001873][T16597] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3418'. [ 1251.941667][T16597] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1252.011881][T16597] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1252.476971][T16597] bond0 (unregistering): Released all slaves [ 1252.754047][T16629] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3426'. [ 1253.416340][T13983] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1253.593845][T16649] device geneve0 entered promiscuous mode [ 1253.626558][T13983] usb 6-1: Using ep0 maxpacket: 32 [ 1253.637260][T13983] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1253.686227][T13983] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1253.780170][T13983] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1253.781857][T16652] hfsplus: unable to find HFS+ superblock [ 1253.794258][T13983] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1253.803960][T13983] usb 6-1: Product: syz [ 1253.808543][T13983] usb 6-1: Manufacturer: syz [ 1253.813252][T13983] usb 6-1: SerialNumber: syz [ 1253.944868][T13983] appletouch 6-1:1.0: Could not find int-in endpoint [ 1253.951981][T13983] appletouch: probe of 6-1:1.0 failed with error -5 [ 1253.997785][T13983] usbhid 6-1:1.0: couldn't find an input interrupt endpoint [ 1254.341740][T13833] usb 6-1: USB disconnect, device number 26 [ 1255.336599][T16672] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3439'. [ 1256.106209][T11510] Bluetooth: hci2: command 0x0406 tx timeout [ 1256.886206][T12187] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1257.076243][T12187] usb 4-1: Using ep0 maxpacket: 32 [ 1257.328438][T12187] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1257.819825][T12187] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1258.003830][T12187] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1258.036321][T12187] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1258.044742][T12187] usb 4-1: Product: syz [ 1258.094295][T12187] usb 4-1: Manufacturer: syz [ 1258.138870][T12187] usb 4-1: SerialNumber: syz [ 1258.171710][T12187] appletouch 4-1:1.0: Could not find int-in endpoint [ 1258.195313][T12187] appletouch: probe of 4-1:1.0 failed with error -5 [ 1258.219619][T12187] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 1258.406921][T13983] usb 4-1: USB disconnect, device number 90 [ 1259.737215][T16748] hfsplus: unable to find HFS+ superblock [ 1260.405404][T16758] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3470'. [ 1261.133578][T16765] tipc: Enabled bearer , priority 0 [ 1261.140591][ T4303] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 1261.177457][T16764] tipc: Resetting bearer [ 1261.340895][ T4303] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1261.369675][ T4303] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1261.400171][ T4303] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1261.410786][ T4303] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1261.443037][T16761] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1261.717701][T12187] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1261.946427][T12187] usb 1-1: Using ep0 maxpacket: 32 [ 1261.960605][T12187] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1262.011539][T12187] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1262.031169][T12187] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1262.127837][T12187] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1262.159118][T12187] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1262.188960][T12187] usb 1-1: Product: syz [ 1262.193317][T12187] usb 1-1: Manufacturer: syz [ 1262.198319][T12187] usb 1-1: SerialNumber: syz [ 1262.218273][T12187] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input19 [ 1262.440637][T12187] usb 1-1: USB disconnect, device number 95 [ 1262.462217][T12187] appletouch 1-1:1.0: input: appletouch disconnected [ 1263.334876][T12187] usb 2-1: USB disconnect, device number 102 [ 1263.576019][T16790] hfsplus: unable to find HFS+ superblock [ 1266.728099][T16764] tipc: Disabling bearer [ 1266.746765][T16793] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3482'. [ 1266.771204][T16806] netlink: 'syz.0.3487': attribute type 10 has an invalid length. [ 1266.799318][T16806] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3487'. [ 1266.944633][T16806] team0: Port device geneve0 added [ 1267.166534][T13833] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1267.356279][T13833] usb 4-1: Using ep0 maxpacket: 32 [ 1267.364522][T13833] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1267.405087][T13833] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1267.426192][ T5540] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1267.468406][T13833] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1267.576540][T13833] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1267.890487][ T5540] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1267.901954][ T5540] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1267.939264][ T5540] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1268.001385][ T5540] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1268.113154][T16820] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1268.154614][T13833] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1268.259419][T13833] usb 4-1: Product: syz [ 1268.268117][T13833] usb 4-1: Manufacturer: syz [ 1268.282155][T13833] usb 4-1: SerialNumber: syz [ 1268.357485][T13833] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input20 [ 1268.583280][T13833] usb 4-1: USB disconnect, device number 91 [ 1268.718833][T16840] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3500'. [ 1268.922578][T14046] udevd[14046]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 1268.934529][T13833] appletouch 4-1:1.0: input: appletouch disconnected [ 1270.019928][T16857] netlink: 'syz.3.3506': attribute type 10 has an invalid length. [ 1270.074810][T16857] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3506'. [ 1270.099595][T16857] device geneve0 left promiscuous mode [ 1270.156622][T16857] team0: Port device geneve0 added [ 1270.357079][T16865] fuse: Unknown parameter 'group_id00000000000000000000' [ 1270.756645][ T5540] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 1270.952326][T16876] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3514'. [ 1271.026529][ T5540] usb 1-1: Using ep0 maxpacket: 8 [ 1271.066574][ T5540] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1271.102054][ T5540] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1271.126280][ T5540] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1271.161902][ T5540] usb 1-1: config 0 descriptor?? [ 1271.387453][ T5540] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1271.590492][T13983] usb 1-1: USB disconnect, device number 96 [ 1271.616605][T16882] tipc: Enabling of bearer rejected, failed to enable media [ 1272.032841][T13833] usb 5-1: USB disconnect, device number 90 [ 1272.295122][T16898] netlink: 'syz.0.3521': attribute type 10 has an invalid length. [ 1272.342378][T16898] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3521'. [ 1272.417761][T16903] fuse: Unknown parameter 'group_id00000000000000000000' [ 1272.505701][T16905] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3520'. [ 1273.830193][T16940] fuse: Bad value for 'user_id' [ 1273.933925][ T5540] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 1274.117229][ T5540] usb 1-1: Using ep0 maxpacket: 8 [ 1274.127883][ T5540] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1274.151287][ T5540] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1274.169286][ T5540] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1274.190367][ T5540] usb 1-1: config 0 descriptor?? [ 1274.406526][ T5540] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1274.607568][ T5540] usb 1-1: USB disconnect, device number 97 [ 1275.291081][T16970] fuse: Bad value for 'user_id' [ 1275.671785][T16980] netlink: 'syz.4.3552': attribute type 10 has an invalid length. [ 1275.703250][T16980] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3552'. [ 1275.768206][T16980] team0: Port device geneve0 added [ 1276.059463][T16993] fuse: Bad value for 'user_id' [ 1276.206229][ T4296] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1276.416289][ T4296] usb 4-1: Using ep0 maxpacket: 8 [ 1276.423810][ T4296] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1276.437283][ T4296] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1276.458689][ T4296] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1276.611678][T17015] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3567'. [ 1277.008688][ T4296] usb 4-1: config 0 descriptor?? [ 1277.229550][ T4296] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1277.443985][ T4296] usb 4-1: USB disconnect, device number 92 [ 1278.884222][T17049] netlink: 'syz.1.3582': attribute type 10 has an invalid length. [ 1278.893717][T17049] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3582'. [ 1278.946791][T17049] team0: Port device geneve0 added [ 1279.106223][ T4296] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1279.124108][T17058] Bluetooth: MGMT ver 1.22 [ 1279.269399][T17065] device syzkaller1 entered promiscuous mode [ 1279.296263][ T4296] usb 6-1: Using ep0 maxpacket: 8 [ 1279.312658][ T4296] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1279.335195][ T4296] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1279.345429][ T4296] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1279.394201][ T4296] usb 6-1: config 0 descriptor?? [ 1279.618854][ T4296] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1279.842247][ T4296] usb 6-1: USB disconnect, device number 27 [ 1280.218104][T17077] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3595'. [ 1280.592165][T17087] netlink: 'syz.5.3599': attribute type 29 has an invalid length. [ 1280.625576][T17087] netlink: 'syz.5.3599': attribute type 29 has an invalid length. [ 1280.664083][T17090] netlink: 'syz.5.3599': attribute type 29 has an invalid length. [ 1281.210281][T17104] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3604'. [ 1281.786216][T13983] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 1282.004961][T13983] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1282.018421][T13983] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1282.046638][T13983] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1282.057454][T13983] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1282.077034][T17098] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1282.256314][ T22] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1282.456161][ T22] usb 4-1: Using ep0 maxpacket: 8 [ 1282.464235][ T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1282.476176][ T22] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1282.485472][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1282.619647][T17129] hfsplus: unable to find HFS+ superblock [ 1282.640652][ T22] usb 4-1: config 0 descriptor?? [ 1283.060700][ T22] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1283.225402][T17132] fuse: Bad value for 'fd' [ 1283.264265][T13833] usb 4-1: USB disconnect, device number 93 [ 1283.834005][T13833] usb 2-1: USB disconnect, device number 103 [ 1284.528397][T17155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3627'. [ 1284.651210][T17155] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 1284.682571][T17159] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3627'. [ 1284.764010][T17160] hfsplus: unable to find HFS+ superblock [ 1285.198200][T17167] fuse: Bad value for 'fd' [ 1285.724533][T17179] tipc: Enabling of bearer rejected, failed to enable media [ 1285.856187][T13983] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1285.956309][ T4303] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1286.056304][T13983] usb 6-1: Using ep0 maxpacket: 8 [ 1286.064993][T13983] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1286.084958][T13983] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1286.114558][T13983] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1286.131695][T17188] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3638'. [ 1286.151326][ T4303] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1286.178799][T13983] usb 6-1: config 0 descriptor?? [ 1286.187755][ T4303] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1286.244605][ T4303] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1286.338436][ T4303] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1286.401542][T13983] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1286.448451][T17177] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1286.620372][ T4303] usb 6-1: USB disconnect, device number 28 [ 1286.807506][T17199] fuse: Bad value for 'fd' [ 1286.826256][ T4264] Bluetooth: hci0: command 0x0406 tx timeout [ 1287.086929][T17204] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3645'. [ 1287.215586][T17207] netlink: 'syz.4.3646': attribute type 10 has an invalid length. [ 1287.267491][T17207] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3646'. [ 1287.305622][T17207] device dummy0 entered promiscuous mode [ 1287.342893][T17207] bridge0: port 3(dummy0) entered blocking state [ 1287.435732][T17207] bridge0: port 3(dummy0) entered disabled state [ 1287.497092][T17207] bridge0: port 3(dummy0) entered blocking state [ 1287.503742][T17207] bridge0: port 3(dummy0) entered forwarding state [ 1287.755561][T17221] netlink: 'syz.5.3653': attribute type 10 has an invalid length. [ 1287.765595][T17221] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3653'. [ 1287.862223][T17221] team0: Port device geneve0 added [ 1287.991824][T17226] fuse: Bad value for 'fd' [ 1288.313309][T17233] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3658'. [ 1288.595292][T17242] netlink: 'syz.4.3662': attribute type 5 has an invalid length. [ 1288.616945][T17242] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3662'. [ 1288.960994][T17250] netlink: 'syz.4.3667': attribute type 10 has an invalid length. [ 1288.986308][T17250] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3667'. [ 1289.002076][T17254] fuse: Invalid rootmode [ 1289.688106][T13833] usb 4-1: USB disconnect, device number 94 [ 1290.198989][T17284] fuse: Invalid rootmode [ 1290.339252][T17289] netlink: 232 bytes leftover after parsing attributes in process `syz.3.3680'. [ 1290.676134][ T5540] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 1290.870200][ T5540] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1290.902537][ T5540] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1290.940488][ T5540] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1290.972203][ T5540] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1291.012698][T17293] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1291.228949][T17307] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3689'. [ 1291.289873][T17307] xt_socket: unknown flags 0xfc [ 1292.214110][T17317] fuse: Invalid rootmode [ 1292.670968][T17331] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3699'. [ 1293.074196][T17339] netlink: 232 bytes leftover after parsing attributes in process `syz.0.3701'. [ 1294.433790][T17355] netlink: 232 bytes leftover after parsing attributes in process `syz.0.3718'. [ 1294.464672][T17361] fuse: Bad value for 'rootmode' [ 1294.608961][T17363] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 1294.789821][ T5540] usb 2-1: USB disconnect, device number 104 [ 1294.803195][T17368] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3712'. [ 1295.384532][T17392] fuse: Bad value for 'rootmode' [ 1296.386172][T13983] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1296.530283][T17422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3734'. [ 1296.577707][T17422] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready [ 1296.612340][T13983] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1296.633971][T17422] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3734'. [ 1296.643734][T13983] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1296.684501][T13983] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1296.704781][T13983] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1296.745845][T17406] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1296.778633][T17432] fuse: Bad value for 'rootmode' [ 1298.382909][T17464] netlink: 'syz.4.3750': attribute type 10 has an invalid length. [ 1298.394414][T17464] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3750'. [ 1298.405639][T17465] fuse: Unknown parameter 'use00000000000000000000' [ 1299.769527][T13833] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 1300.002789][T17498] netlink: 'syz.5.3762': attribute type 10 has an invalid length. [ 1300.016940][T13833] usb 1-1: config 0 has no interfaces? [ 1300.025395][T17498] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3762'. [ 1300.114442][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.121628][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.215072][T13833] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1300.246015][T13833] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1300.264757][T13833] usb 1-1: Product: syz [ 1300.277170][T17500] fuse: Unknown parameter 'use00000000000000000000' [ 1300.293734][T13833] usb 1-1: Manufacturer: syz [ 1300.303898][T13833] usb 1-1: SerialNumber: syz [ 1300.385120][T13833] usb 1-1: config 0 descriptor?? [ 1300.462716][ T22] usb 4-1: USB disconnect, device number 95 [ 1302.054951][T17538] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3777'. [ 1302.090175][T17538] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1302.114639][T17535] xt_CT: No such helper "pptp" [ 1302.131723][T17538] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1302.168732][T17538] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1302.189686][T17538] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1302.217058][T17538] batman_adv: batadv0: Removing interface: macvtap0 [ 1303.086197][ T5540] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1303.328096][ T5540] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1303.354802][ T5540] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1303.391980][ T5540] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1303.402773][ T5540] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1303.445689][ T22] usb 1-1: USB disconnect, device number 98 [ 1303.452599][T17545] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1305.246127][ T5540] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 1305.363719][T17595] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3798'. [ 1305.909885][ T5540] usb 2-1: config 0 has no interfaces? [ 1306.052537][ T5540] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1306.076260][ T5540] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1306.133437][ T5540] usb 2-1: Product: syz [ 1306.149254][ T5540] usb 2-1: Manufacturer: syz [ 1306.168925][ T5540] usb 2-1: SerialNumber: syz [ 1306.195750][ T5540] usb 2-1: config 0 descriptor?? [ 1306.454226][T17588] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3794'. [ 1307.245698][ T5540] usb 5-1: USB disconnect, device number 91 [ 1307.778587][T17629] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3809'. [ 1307.841791][T17629] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready [ 1307.882291][T17629] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3809'. [ 1308.238453][T17643] hfsplus: unable to find HFS+ superblock [ 1309.615411][ T4303] usb 2-1: USB disconnect, device number 105 [ 1309.810556][T17670] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3825'. [ 1309.854214][T17670] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready [ 1309.874398][T17670] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3825'. [ 1311.256126][T17690] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 1311.772331][T17703] fuse: Unknown parameter 'user_id00000000000000000000' [ 1311.985457][T17710] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3840'. [ 1312.041884][T17710] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready [ 1312.065172][T17711] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3840'. [ 1312.089765][T17713] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3841'. [ 1312.138244][T17713] IPv6: ADDRCONF(NETDEV_CHANGE): gre3: link becomes ready [ 1312.164178][T17713] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3841'. [ 1312.304722][T17718] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3843'. [ 1312.345319][T17718] bridge0: port 1(bridge_slave_0) entered blocking state [ 1312.352575][T17718] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1313.335383][ T5540] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1313.400132][T17728] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3848'. [ 1313.546242][ T5540] usb 4-1: Using ep0 maxpacket: 8 [ 1313.560264][ T5540] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1313.586416][ T5540] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1313.600647][ T5540] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1313.618547][ T5540] usb 4-1: config 0 descriptor?? [ 1313.670222][T17741] fuse: Unknown parameter 'user_id00000000000000000000' [ 1313.842819][ T5540] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1314.045965][T13833] usb 4-1: USB disconnect, device number 96 [ 1315.644843][T17764] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3859'. [ 1315.800792][T17772] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3863'. [ 1315.813202][T17771] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3864'. [ 1315.857847][T17772] bond0: option arp_all_targets: invalid value (2) [ 1317.387227][T11819] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1317.596199][T11819] usb 5-1: Using ep0 maxpacket: 8 [ 1317.610492][T11819] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1317.624994][T11819] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1317.635129][T11819] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1317.707533][T11819] usb 5-1: config 0 descriptor?? [ 1317.758144][T17797] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3872'. [ 1317.771289][T17797] IPv6: ADDRCONF(NETDEV_CHANGE): gre4: link becomes ready [ 1317.782160][T17797] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3872'. [ 1317.930562][T11819] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1318.105701][T17807] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3876'. [ 1318.131386][T17807] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3876'. [ 1318.243182][ T4304] usb 5-1: USB disconnect, device number 92 [ 1318.983800][T17822] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3883'. [ 1319.002782][T17822] IPv6: ADDRCONF(NETDEV_CHANGE): gre3: link becomes ready [ 1319.013364][T17822] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3883'. [ 1320.501025][T17853] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3894'. [ 1321.145223][T17858] hfsplus: unable to find HFS+ superblock [ 1321.688503][T17861] netlink: 'syz.5.3897': attribute type 10 has an invalid length. [ 1321.729636][T17861] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3897'. [ 1324.234893][T17902] netlink: 'syz.0.3911': attribute type 10 has an invalid length. [ 1324.246333][T17902] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3911'. [ 1324.881341][T17908] netlink: 232 bytes leftover after parsing attributes in process `syz.4.3914'. [ 1326.001385][T17937] netlink: 'syz.4.3924': attribute type 10 has an invalid length. [ 1326.056311][T17937] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3924'. [ 1326.935640][T17950] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3928'. [ 1326.959611][T17950] IPv6: ADDRCONF(NETDEV_CHANGE): gre3: link becomes ready [ 1327.071135][T17955] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3928'. [ 1327.185927][T17950] Cannot find add_set index 0 as target [ 1328.312689][T17968] netlink: 232 bytes leftover after parsing attributes in process `syz.1.3934'. [ 1328.838797][T17996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3945'. [ 1329.610029][T17996] IPv6: ADDRCONF(NETDEV_CHANGE): gre3: link becomes ready [ 1329.646913][T18001] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3945'. [ 1329.826823][T18007] hfsplus: unable to find HFS+ superblock [ 1331.168538][T18028] netlink: 232 bytes leftover after parsing attributes in process `syz.3.3956'. [ 1331.712568][T18038] fuse: Unknown parameter '0x0000000000000004' [ 1331.906506][T18042] hfsplus: unable to find HFS+ superblock [ 1333.948154][T18081] fuse: Unknown parameter '0x0000000000000004' [ 1334.000298][T18087] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3978'. [ 1334.071602][T18087] IPv6: ADDRCONF(NETDEV_CHANGE): gre4: link becomes ready [ 1334.117506][T18090] hfsplus: unable to find HFS+ superblock [ 1334.572447][T18087] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3978'. [ 1334.588175][T18087] Cannot find add_set index 0 as target [ 1334.906601][ T4304] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1335.109215][ T4304] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1335.143910][ T4304] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1335.169520][ T4304] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1335.183044][ T4304] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1335.206833][T18088] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1335.459824][T18116] fuse: Unknown parameter '0x0000000000000004' [ 1335.767457][T18127] hfsplus: unable to find HFS+ superblock [ 1336.445580][T18131] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3994'. [ 1336.472274][T18131] IPv6: ADDRCONF(NETDEV_CHANGE): gre5: link becomes ready [ 1336.495647][T18131] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3994'. [ 1336.529138][T18131] Cannot find add_set index 0 as target [ 1336.713223][T18139] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.3998'. [ 1336.799252][T18139] netlink: zone id is out of range [ 1336.823005][T18139] netlink: zone id is out of range [ 1336.859802][T18149] fuse: Unknown parameter 'fd0x0000000000000004' [ 1336.876935][T18139] netlink: del zone limit has 4 unknown bytes [ 1336.886564][T18147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4001'. [ 1336.911250][T18147] IPv6: ADDRCONF(NETDEV_CHANGE): gre4: link becomes ready [ 1336.924502][T18147] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4001'. [ 1337.292681][T18159] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4007'. [ 1337.326413][T18159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4007'. [ 1337.381741][T18162] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1337.442070][T18162] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1337.472434][T18162] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1337.487082][T18162] device bridge_slave_0 left promiscuous mode [ 1337.493579][T18162] bridge0: port 1(bridge_slave_0) entered disabled state [ 1337.510011][T18162] device bridge_slave_1 left promiscuous mode [ 1337.522650][T18162] bridge0: port 2(bridge_slave_1) entered disabled state [ 1337.543405][T18162] bond0: (slave bond_slave_0): Releasing backup interface [ 1337.569556][T18162] bond0: (slave bond_slave_1): Releasing backup interface [ 1337.647962][T18162] team0: Port device team_slave_0 removed [ 1337.687815][T18162] team0: Port device team_slave_1 removed [ 1337.695568][T18162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1337.703556][T18162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1337.714755][T18162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1337.724892][T18162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1337.760401][T18162] team0: Port device geneve0 removed [ 1337.779708][T18162] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 1337.794260][T18162] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready [ 1337.811220][T18162] IPv6: ADDRCONF(NETDEV_CHANGE): gre4: link becomes ready [ 1338.119531][T18176] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4012'. [ 1338.149435][T18176] IPv6: ADDRCONF(NETDEV_CHANGE): gre5: link becomes ready [ 1338.185610][T18176] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4012'. [ 1338.225577][T18176] Cannot find add_set index 0 as target [ 1338.372066][ T5540] usb 6-1: USB disconnect, device number 29 [ 1338.395417][T18181] fuse: Unknown parameter 'fd0x0000000000000004' [ 1338.517653][T18185] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4015'. [ 1338.623610][T18185] IPv6: ADDRCONF(NETDEV_CHANGE): gre4: link becomes ready [ 1339.141812][T18221] IPv6: ADDRCONF(NETDEV_CHANGE): gre6: link becomes ready [ 1339.170386][T18221] Cannot find add_set index 0 as target [ 1339.364795][T18228] fuse: Unknown parameter 'fd0x0000000000000004' [ 1339.366208][T17792] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1339.592361][T17792] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1339.611316][T18232] IPv6: ADDRCONF(NETDEV_CHANGE): gre4: link becomes ready [ 1339.627314][T17792] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1339.670973][T17792] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1339.702816][T17792] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1339.738194][T18218] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1343.504540][ T5540] usb 5-1: USB disconnect, device number 93 [ 1343.896837][T18315] __nla_validate_parse: 5 callbacks suppressed [ 1343.896852][T18315] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4066'. [ 1344.001015][T18320] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4066'. [ 1344.011371][T18315] IPv6: ADDRCONF(NETDEV_CHANGE): gre6: link becomes ready [ 1344.094314][T18324] device batadv_slave_0 entered promiscuous mode [ 1344.094646][T18320] Cannot find add_set index 0 as target [ 1344.203036][T18326] lo speed is unknown, defaulting to 1000 [ 1344.764268][T18324] device batadv_slave_0 left promiscuous mode [ 1345.558092][T18366] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4087'. [ 1345.581422][T18366] IPv6: ADDRCONF(NETDEV_CHANGE): gre7: link becomes ready [ 1345.717865][T18366] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4087'. [ 1345.729137][T18366] Cannot find add_set index 0 as target [ 1349.038157][T18439] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4112'. [ 1349.060450][T18439] IPv6: ADDRCONF(NETDEV_CHANGE): gre5: link becomes ready [ 1349.115386][T18445] netlink: 'syz.1.4113': attribute type 10 has an invalid length. [ 1349.116598][T18439] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4112'. [ 1349.155424][T18445] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4113'. [ 1349.189626][T18439] Cannot find add_set index 0 as target [ 1351.907218][T18492] netlink: 'syz.3.4129': attribute type 10 has an invalid length. [ 1351.935135][T18492] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4129'. [ 1353.503406][T18536] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4146'. [ 1354.319154][T18536] device batadv0 entered promiscuous mode [ 1354.416891][T18536] device batadv0 left promiscuous mode [ 1354.526157][ T22] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1354.858669][T18556] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4153'. [ 1354.983825][ T22] usb 5-1: config 0 has no interfaces? [ 1355.004204][ T22] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1355.037041][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1355.059823][ T22] usb 5-1: Product: syz [ 1355.064046][ T22] usb 5-1: Manufacturer: syz [ 1355.073642][ T22] usb 5-1: SerialNumber: syz [ 1355.094132][ T22] usb 5-1: config 0 descriptor?? [ 1355.507603][T18563] lo speed is unknown, defaulting to 1000 [ 1358.615007][T18607] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4170'. [ 1359.346409][T18607] IPv6: ADDRCONF(NETDEV_CHANGE): gre6: link becomes ready [ 1359.435926][T18607] Cannot find add_set index 0 as target [ 1359.556350][ T4296] usb 5-1: USB disconnect, device number 94 [ 1360.119981][T18622] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4176'. [ 1360.930820][T18635] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4182'. [ 1361.551862][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.558382][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.366162][T17792] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1362.640013][T18659] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4190'. [ 1363.158843][T17792] usb 4-1: config 0 has no interfaces? [ 1363.606621][T17792] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1363.701313][T17792] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1363.727299][T17792] usb 4-1: Product: syz [ 1363.731863][T17792] usb 4-1: Manufacturer: syz [ 1363.746129][T17792] usb 4-1: SerialNumber: syz [ 1363.884731][T17792] usb 4-1: config 0 descriptor?? [ 1367.800540][T17792] usb 4-1: USB disconnect, device number 97 [ 1367.984556][T18723] device syzkaller1 entered promiscuous mode [ 1368.007283][T18726] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4219'. [ 1369.346911][T18739] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4223'. [ 1369.748593][T18752] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4230'. [ 1369.777420][T18752] IPv6: ADDRCONF(NETDEV_CHANGE): gre8: link becomes ready [ 1369.961158][T18752] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4230'. [ 1369.980211][T18752] Cannot find add_set index 0 as target [ 1370.136105][T17792] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 1370.506385][T17792] usb 2-1: config 0 has no interfaces? [ 1370.562430][T17792] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1370.585313][T18766] device syzkaller1 entered promiscuous mode [ 1370.611802][T17792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1370.706201][T17792] usb 2-1: Product: syz [ 1370.726116][T17792] usb 2-1: Manufacturer: syz [ 1370.730779][T17792] usb 2-1: SerialNumber: syz [ 1370.788855][T17792] usb 2-1: config 0 descriptor?? [ 1371.484989][T18788] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4243'. [ 1371.555777][T18788] IPv6: ADDRCONF(NETDEV_CHANGE): gre8: link becomes ready [ 1371.606460][T18790] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4243'. [ 1371.665220][T18788] Cannot find add_set index 0 as target [ 1372.261508][T18798] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4245'. [ 1373.042923][T18804] device syzkaller1 entered promiscuous mode [ 1375.596257][T17792] usb 2-1: USB disconnect, device number 106 [ 1375.608529][T18829] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4256'. [ 1376.352476][T18838] lo speed is unknown, defaulting to 1000 [ 1376.379438][T18842] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4259'. [ 1376.636305][T18846] device syzkaller1 entered promiscuous mode [ 1377.983129][T18869] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4270'. [ 1378.354478][T18881] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4273'. [ 1380.140979][T18914] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4284'. [ 1380.251018][T18914] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1380.260776][T18914] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1380.269609][T18914] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1380.278378][T18914] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1381.234036][T18914] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1381.238451][T18920] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4287'. [ 1381.244206][T18914] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1381.261455][T18914] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1381.270355][T18914] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1382.757095][T18951] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 0, id = 0 [ 1382.823106][T18953] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4298'. [ 1382.905790][T18953] Cannot find add_set index 0 as target [ 1382.929040][T18958] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4300'. [ 1384.167241][T18979] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4308'. [ 1384.737647][T18993] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4312'. [ 1386.265350][T19021] can: request_module (can-proto-3) failed. [ 1386.338406][T19026] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4322'. [ 1386.897931][T19041] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4329'. [ 1386.972180][T19045] device syzkaller1 entered promiscuous mode [ 1387.219372][T19049] netlink: 192 bytes leftover after parsing attributes in process `syz.0.4333'. [ 1387.331380][T19056] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4335'. [ 1388.555424][T19094] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4351'. [ 1388.593365][T19093] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4350'. [ 1388.816231][T12187] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1389.077530][T12187] usb 6-1: config 0 has no interfaces? [ 1389.094676][T12187] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1389.221928][T12187] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1389.334511][T12187] usb 6-1: Product: syz [ 1389.464734][T12187] usb 6-1: Manufacturer: syz [ 1389.689637][T12187] usb 6-1: SerialNumber: syz [ 1389.808748][T12187] usb 6-1: config 0 descriptor?? [ 1390.975894][T19122] syz.4.4361 (19122) used greatest stack depth: 20352 bytes left [ 1391.094027][T19135] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4366'. [ 1391.323930][T19146] device syzkaller1 entered promiscuous mode [ 1391.395110][T19148] sctp: [Deprecated]: syz.1.4369 (pid 19148) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1391.395110][T19148] Use struct sctp_sack_info instead [ 1391.463839][T19148] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4369'. [ 1392.342932][T19164] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4377'. [ 1393.862602][T19192] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4387'. [ 1394.085346][ T4296] usb 6-1: USB disconnect, device number 30 [ 1394.317957][T19200] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4390'. [ 1394.618985][T19207] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4393'. [ 1395.704268][ C1] Unknown status report in ack skb [ 1395.921936][ T4296] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1396.024549][T19242] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4406'. [ 1396.129863][ T4296] usb 6-1: config 0 has no interfaces? [ 1396.189245][ T4296] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1396.207601][ T4296] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1396.234885][ T4296] usb 6-1: Product: syz [ 1396.255322][ T4296] usb 6-1: Manufacturer: syz [ 1396.272260][ T4296] usb 6-1: SerialNumber: syz [ 1396.310702][ T4296] usb 6-1: config 0 descriptor?? [ 1396.548364][T19246] netlink: 228 bytes leftover after parsing attributes in process `syz.0.4408'. [ 1398.260049][T19286] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4420'. [ 1398.419236][T19284] netlink: 228 bytes leftover after parsing attributes in process `syz.3.4421'. [ 1398.551040][T19294] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4424'. [ 1399.938475][T19311] netlink: 'syz.0.4430': attribute type 10 has an invalid length. [ 1399.956783][T19311] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4430'. [ 1400.020618][ T5540] usb 6-1: USB disconnect, device number 31 [ 1400.031191][T19311] team0: Port device geneve0 added [ 1400.114973][T19314] device syzkaller1 entered promiscuous mode [ 1400.608815][T19331] af_packet: tpacket_rcv: packet too big, clamped from 112 to 4294967272. macoff=96 [ 1400.736269][T19325] netlink: 228 bytes leftover after parsing attributes in process `syz.1.4435'. [ 1402.117165][T19348] device veth0_to_bond entered promiscuous mode [ 1402.317011][T19353] device syzkaller1 entered promiscuous mode [ 1402.496171][ T5540] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 1402.791235][ T5540] usb 1-1: config 0 has no interfaces? [ 1402.830944][ T5540] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1402.849878][ T5540] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1402.896215][ T5540] usb 1-1: Product: syz [ 1402.913747][ T5540] usb 1-1: Manufacturer: syz [ 1402.929132][ T5540] usb 1-1: SerialNumber: syz [ 1402.952745][ T5540] usb 1-1: config 0 descriptor?? [ 1403.058863][T19368] netlink: 228 bytes leftover after parsing attributes in process `syz.5.4452'. [ 1403.080982][T19373] netlink: 'syz.3.4453': attribute type 1 has an invalid length. [ 1403.092281][T19373] netlink: 'syz.3.4453': attribute type 2 has an invalid length. [ 1403.512623][T19382] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4457'. [ 1403.911926][T19397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4462'. [ 1405.118532][T19416] netlink: 'syz.3.4471': attribute type 10 has an invalid length. [ 1405.171736][T19416] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4471'. [ 1405.236374][T19419] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4473'. [ 1405.905512][T11819] usb 1-1: USB disconnect, device number 99 [ 1406.275564][T19447] netlink: 'syz.0.4486': attribute type 10 has an invalid length. [ 1406.321612][T19447] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4486'. [ 1407.156350][ T5540] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 1407.383181][ T5540] usb 1-1: config 0 has no interfaces? [ 1407.484209][ T5540] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1407.518856][ T5540] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1407.556296][ T5540] usb 1-1: Product: syz [ 1407.570239][ T5540] usb 1-1: Manufacturer: syz [ 1407.574977][ T5540] usb 1-1: SerialNumber: syz [ 1407.587500][ T5540] usb 1-1: config 0 descriptor?? [ 1407.627314][ C0] ================================================================== [ 1407.635502][ C0] BUG: KASAN: use-after-free in rose_timer_expiry+0x470/0x490 [ 1407.642972][ C0] Read of size 2 at addr ffff8880585da82a by task swapper/0/0 [ 1407.650433][ C0] [ 1407.652773][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 6.1.136-syzkaller #0 [ 1407.660490][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1407.670647][ C0] Call Trace: [ 1407.673921][ C0] [ 1407.676765][ C0] dump_stack_lvl+0x168/0x22e [ 1407.681452][ C0] ? __lock_acquire+0x7c50/0x7c50 [ 1407.686487][ C0] ? show_regs_print_info+0x12/0x12 [ 1407.691806][ C0] ? load_image+0x3b0/0x3b0 [ 1407.696593][ C0] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 1407.701975][ C0] ? __virt_addr_valid+0x188/0x540 [ 1407.707181][ C0] ? __virt_addr_valid+0x465/0x540 [ 1407.712296][ C0] ? rose_timer_expiry+0x470/0x490 [ 1407.717409][ C0] print_report+0xa8/0x220 [ 1407.721851][ C0] kasan_report+0x10b/0x140 [ 1407.726379][ C0] ? rose_timer_expiry+0x470/0x490 [ 1407.731498][ C0] rose_timer_expiry+0x470/0x490 [ 1407.736562][ C0] call_timer_fn+0x1a0/0x670 [ 1407.741192][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 1407.746246][ C0] ? call_timer_fn+0xc1/0x670 [ 1407.750982][ C0] ? __run_timers+0x7c0/0x7c0 [ 1407.755769][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1407.761082][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 1407.766299][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 1407.771336][ C0] __run_timers+0x525/0x7c0 [ 1407.775844][ C0] ? detach_timer+0x350/0x350 [ 1407.780541][ C0] ? lock_chain_count+0x20/0x20 [ 1407.785403][ C0] ? seqcount_lockdep_reader_access+0x15c/0x1c0 [ 1407.792105][ C0] run_timer_softirq+0x63/0xf0 [ 1407.796896][ C0] handle_softirqs+0x2a1/0x920 [ 1407.801708][ C0] ? __irq_exit_rcu+0x12f/0x220 [ 1407.806577][ C0] ? do_softirq+0x200/0x200 [ 1407.811263][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 1407.816511][ C0] __irq_exit_rcu+0x12f/0x220 [ 1407.821251][ C0] ? irq_exit_rcu+0x20/0x20 [ 1407.825796][ C0] irq_exit_rcu+0x5/0x20 [ 1407.830061][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 1407.835705][ C0] [ 1407.838646][ C0] [ 1407.841621][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1407.847704][ C0] RIP: 0010:default_idle+0xb/0x10 [ 1407.852840][ C0] Code: 48 89 df e8 67 3a b9 f7 e9 4c ff ff ff e8 4d 14 f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 66 90 0f 00 2d b7 a2 4d 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 1407.872657][ C0] RSP: 0018:ffffffff8c607d88 EFLAGS: 000002c6 [ 1407.878749][ C0] RAX: 6f1dbdc9cfbca600 RBX: ffffffff8a1900d7 RCX: 6f1dbdc9cfbca600 [ 1407.886727][ C0] RDX: 0000000000000001 RSI: ffffffff8a6bfe00 RDI: ffffffff8abf0da0 [ 1407.894899][ C0] RBP: ffffffff8c607ec0 R08: dffffc0000000000 R09: ffffed10171c6aee [ 1407.902885][ C0] R10: ffffed10171c6aee R11: 1ffff110171c6aed R12: 0000000000000000 [ 1407.910869][ C0] R13: dffffc0000000000 R14: ffffffff8c6bc680 R15: 1ffffffff1bfd07e [ 1407.918848][ C0] ? default_idle_call+0x77/0xc0 [ 1407.923891][ C0] default_idle_call+0x84/0xc0 [ 1407.928672][ C0] do_idle+0x1fc/0x570 [ 1407.932759][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 1407.937965][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 1407.943266][ C0] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 1407.948903][ C0] ? schedule_idle+0x57/0x90 [ 1407.953518][ C0] cpu_startup_entry+0x3f/0x60 [ 1407.958381][ C0] rest_init+0x2dc/0x300 [ 1407.962626][ C0] ? time_init+0x33/0x33 [ 1407.966877][ C0] arch_call_rest_init+0xa/0xa [ 1407.971649][ C0] start_kernel+0x490/0x539 [ 1407.976161][ C0] secondary_startup_64_no_verify+0xcf/0xdb [ 1407.982070][ C0] [ 1407.985090][ C0] [ 1407.987510][ C0] Allocated by task 19170: [ 1407.991948][ C0] kasan_set_track+0x4b/0x70 [ 1407.996549][ C0] __kasan_kmalloc+0x8e/0xa0 [ 1408.001145][ C0] __kmalloc_node_track_caller+0xae/0x230 [ 1408.006864][ C0] __alloc_skb+0x22a/0x7e0 [ 1408.011284][ C0] alloc_skb_with_frags+0xa7/0x710 [ 1408.016394][ C0] sock_alloc_send_pskb+0x853/0x980 [ 1408.021631][ C0] __ip_append_data+0x253c/0x3760 [ 1408.026659][ C0] ip_make_skb+0x1d6/0x3f0 [ 1408.031075][ C0] udp_sendmsg+0x19ea/0x23d0 [ 1408.035661][ C0] udpv6_sendmsg+0xa48/0x2540 [ 1408.040340][ C0] ____sys_sendmsg+0x59b/0x970 [ 1408.045108][ C0] ___sys_sendmsg+0x21c/0x290 [ 1408.049790][ C0] __sys_sendmmsg+0x272/0x490 [ 1408.054474][ C0] __x64_sys_sendmmsg+0x9c/0xb0 [ 1408.059336][ C0] do_syscall_64+0x4c/0xa0 [ 1408.063757][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1408.069664][ C0] [ 1408.071993][ C0] Freed by task 19170: [ 1408.076054][ C0] kasan_set_track+0x4b/0x70 [ 1408.080647][ C0] kasan_save_free_info+0x2d/0x50 [ 1408.085689][ C0] ____kasan_slab_free+0x126/0x1e0 [ 1408.090810][ C0] slab_free_freelist_hook+0x131/0x1a0 [ 1408.096273][ C0] __kmem_cache_free+0xb6/0x1f0 [ 1408.101126][ C0] skb_release_data+0x5db/0x7c0 [ 1408.105985][ C0] kfree_skb_reason+0x163/0x370 [ 1408.110847][ C0] kfree_skb_list_reason+0x43/0x70 [ 1408.115997][ C0] __dev_queue_xmit+0x20f1/0x3760 [ 1408.121043][ C0] ip_finish_output2+0xbe8/0x11b0 [ 1408.126073][ C0] ip_send_skb+0x129/0x1c0 [ 1408.130499][ C0] udp_send_skb+0xa88/0x1580 [ 1408.135191][ C0] udp_sendmsg+0x1a31/0x23d0 [ 1408.139833][ C0] udpv6_sendmsg+0xa48/0x2540 [ 1408.145037][ C0] ____sys_sendmsg+0x59b/0x970 [ 1408.149810][ C0] ___sys_sendmsg+0x21c/0x290 [ 1408.154493][ C0] __sys_sendmmsg+0x272/0x490 [ 1408.159176][ C0] __x64_sys_sendmmsg+0x9c/0xb0 [ 1408.164029][ C0] do_syscall_64+0x4c/0xa0 [ 1408.168448][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1408.174356][ C0] [ 1408.176692][ C0] Last potentially related work creation: [ 1408.182406][ C0] kasan_save_stack+0x3a/0x60 [ 1408.187115][ C0] __kasan_record_aux_stack+0xb2/0xc0 [ 1408.192595][ C0] kvfree_call_rcu+0x108/0x870 [ 1408.197451][ C0] ipv6_mc_destroy_dev+0x3bd/0x590 [ 1408.202569][ C0] addrconf_ifdown+0x151f/0x1a10 [ 1408.207608][ C0] addrconf_notify+0x405/0xf40 [ 1408.212376][ C0] raw_notifier_call_chain+0xcb/0x160 [ 1408.217774][ C0] unregister_netdevice_many+0xfdc/0x1840 [ 1408.223599][ C0] default_device_exit_batch+0x9c3/0xa50 [ 1408.229250][ C0] cleanup_net+0x77b/0xb80 [ 1408.233676][ C0] process_one_work+0x898/0x1160 [ 1408.238616][ C0] worker_thread+0xaa2/0x1250 [ 1408.243292][ C0] kthread+0x29d/0x330 [ 1408.247539][ C0] ret_from_fork+0x1f/0x30 [ 1408.251958][ C0] [ 1408.254287][ C0] The buggy address belongs to the object at ffff8880585da800 [ 1408.254287][ C0] which belongs to the cache kmalloc-512 of size 512 [ 1408.268516][ C0] The buggy address is located 42 bytes inside of [ 1408.268516][ C0] 512-byte region [ffff8880585da800, ffff8880585daa00) [ 1408.281879][ C0] [ 1408.284232][ C0] The buggy address belongs to the physical page: [ 1408.290652][ C0] page:ffffea0001617600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x585d8 [ 1408.300805][ C0] head:ffffea0001617600 order:2 compound_mapcount:0 compound_pincount:0 [ 1408.309218][ C0] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1408.317213][ C0] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888017441c80 [ 1408.325901][ C0] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 1408.334916][ C0] page dumped because: kasan: bad access detected [ 1408.341335][ C0] page_owner tracks the page as allocated [ 1408.347062][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4250, tgid 4250 (syz-executor), ts 75773240549, free_ts 20935008402 [ 1408.368514][ C0] post_alloc_hook+0x173/0x1a0 [ 1408.373293][ C0] get_page_from_freelist+0x1a26/0x1ac0 [ 1408.379117][ C0] __alloc_pages+0x1df/0x4e0 [ 1408.383714][ C0] alloc_slab_page+0x5d/0x160 [ 1408.388393][ C0] new_slab+0x87/0x2c0 [ 1408.392484][ C0] ___slab_alloc+0xbc6/0x1220 [ 1408.397278][ C0] __kmem_cache_alloc_node+0x1a0/0x260 [ 1408.403000][ C0] __kmalloc_node_track_caller+0x9e/0x230 [ 1408.408722][ C0] __alloc_skb+0x22a/0x7e0 [ 1408.413145][ C0] alloc_uevent_skb+0x7d/0x230 [ 1408.417909][ C0] kobject_uevent_net_broadcast+0x17e/0x530 [ 1408.423800][ C0] kobject_uevent_env+0x54c/0x8a0 [ 1408.428822][ C0] net_rx_queue_update_kobjects+0x23f/0x4a0 [ 1408.434821][ C0] netdev_register_kobject+0x223/0x310 [ 1408.440313][ C0] register_netdevice+0x12b9/0x1aa0 [ 1408.445555][ C0] veth_newlink+0x592/0xbe0 [ 1408.450068][ C0] page last free stack trace: [ 1408.454741][ C0] free_unref_page_prepare+0x8b4/0x9a0 [ 1408.460218][ C0] free_unref_page+0x2e/0x3f0 [ 1408.464909][ C0] free_contig_range+0x9d/0x150 [ 1408.469762][ C0] destroy_args+0xef/0x8bf [ 1408.474257][ C0] debug_vm_pgtable+0x32a/0x37e [ 1408.479121][ C0] do_one_initcall+0x214/0x7a0 [ 1408.483921][ C0] do_initcall_level+0x137/0x1e4 [ 1408.488872][ C0] do_initcalls+0x4b/0x8a [ 1408.493205][ C0] kernel_init_freeable+0x3fa/0x5ac [ 1408.498414][ C0] kernel_init+0x19/0x1b0 [ 1408.503198][ C0] ret_from_fork+0x1f/0x30 [ 1408.507618][ C0] [ 1408.510123][ C0] Memory state around the buggy address: [ 1408.515776][ C0] ffff8880585da700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1408.523836][ C0] ffff8880585da780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1408.531926][ C0] >ffff8880585da800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1408.539982][ C0] ^ [ 1408.545387][ C0] ffff8880585da880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1408.553481][ C0] ffff8880585da900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1408.561600][ C0] ================================================================== [ 1408.569891][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1408.577095][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 6.1.136-syzkaller #0 [ 1408.584814][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 1408.595077][ C0] Call Trace: [ 1408.598361][ C0] [ 1408.601205][ C0] dump_stack_lvl+0x168/0x22e [ 1408.605889][ C0] ? memcpy+0x3c/0x60 [ 1408.609870][ C0] ? show_regs_print_info+0x12/0x12 [ 1408.615070][ C0] ? load_image+0x3b0/0x3b0 [ 1408.619580][ C0] panic+0x2c9/0x710 [ 1408.623480][ C0] ? asm_common_interrupt+0x22/0x40 [ 1408.628684][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 1408.633231][ C0] ? _raw_spin_unlock_irqrestore+0xa5/0x100 [ 1408.639131][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 1408.645023][ C0] ? _raw_spin_unlock+0x40/0x40 [ 1408.649889][ C0] check_panic_on_warn+0x80/0xa0 [ 1408.654827][ C0] ? rose_timer_expiry+0x470/0x490 [ 1408.659948][ C0] end_report+0x66/0x110 [ 1408.664207][ C0] kasan_report+0x118/0x140 [ 1408.668721][ C0] ? rose_timer_expiry+0x470/0x490 [ 1408.673845][ C0] rose_timer_expiry+0x470/0x490 [ 1408.678796][ C0] call_timer_fn+0x1a0/0x670 [ 1408.683404][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 1408.688461][ C0] ? call_timer_fn+0xc1/0x670 [ 1408.693164][ C0] ? __run_timers+0x7c0/0x7c0 [ 1408.697871][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1408.703099][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 1408.708312][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 1408.713339][ C0] __run_timers+0x525/0x7c0 [ 1408.717858][ C0] ? detach_timer+0x350/0x350 [ 1408.722558][ C0] ? lock_chain_count+0x20/0x20 [ 1408.727417][ C0] ? seqcount_lockdep_reader_access+0x15c/0x1c0 [ 1408.733675][ C0] run_timer_softirq+0x63/0xf0 [ 1408.738458][ C0] handle_softirqs+0x2a1/0x920 [ 1408.743235][ C0] ? __irq_exit_rcu+0x12f/0x220 [ 1408.748145][ C0] ? do_softirq+0x200/0x200 [ 1408.752654][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 1408.758313][ C0] __irq_exit_rcu+0x12f/0x220 [ 1408.763001][ C0] ? irq_exit_rcu+0x20/0x20 [ 1408.767515][ C0] irq_exit_rcu+0x5/0x20 [ 1408.771764][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 1408.777430][ C0] [ 1408.780418][ C0] [ 1408.783425][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1408.789411][ C0] RIP: 0010:default_idle+0xb/0x10 [ 1408.794444][ C0] Code: 48 89 df e8 67 3a b9 f7 e9 4c ff ff ff e8 4d 14 f6 ff 00 00 cc cc 00 00 cc cc 00 00 cc cc 00 66 90 0f 00 2d b7 a2 4d 00 fb f4 0f 1f 40 00 41 57 41 56 53 49 be 00 00 00 00 00 fc ff df 65 48 [ 1408.814081][ C0] RSP: 0018:ffffffff8c607d88 EFLAGS: 000002c6 [ 1408.820150][ C0] RAX: 6f1dbdc9cfbca600 RBX: ffffffff8a1900d7 RCX: 6f1dbdc9cfbca600 [ 1408.828210][ C0] RDX: 0000000000000001 RSI: ffffffff8a6bfe00 RDI: ffffffff8abf0da0 [ 1408.836181][ C0] RBP: ffffffff8c607ec0 R08: dffffc0000000000 R09: ffffed10171c6aee [ 1408.844153][ C0] R10: ffffed10171c6aee R11: 1ffff110171c6aed R12: 0000000000000000 [ 1408.852129][ C0] R13: dffffc0000000000 R14: ffffffff8c6bc680 R15: 1ffffffff1bfd07e [ 1408.860100][ C0] ? default_idle_call+0x77/0xc0 [ 1408.865153][ C0] default_idle_call+0x84/0xc0 [ 1408.869954][ C0] do_idle+0x1fc/0x570 [ 1408.874062][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 1408.879269][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 1408.884489][ C0] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 1408.890126][ C0] ? schedule_idle+0x57/0x90 [ 1408.894760][ C0] cpu_startup_entry+0x3f/0x60 [ 1408.899542][ C0] rest_init+0x2dc/0x300 [ 1408.903781][ C0] ? time_init+0x33/0x33 [ 1408.908022][ C0] arch_call_rest_init+0xa/0xa [ 1408.912788][ C0] start_kernel+0x490/0x539 [ 1408.917297][ C0] secondary_startup_64_no_verify+0xcf/0xdb [ 1408.923193][ C0] [ 1408.926514][ C0] Kernel Offset: disabled [ 1408.930950][ C0] Rebooting in 86400 seconds..