last executing test programs: 42.12028455s ago: executing program 4 (id=3174): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/14, 0xe) sendmmsg$unix(r1, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x9802}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x80) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000025300)=""/102392, 0x18ff8) socketpair(0x1, 0x1, 0x0, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r5 = fcntl$dupfd(r4, 0x0, r4) write$sndseq(r5, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) 41.535098162s ago: executing program 4 (id=3175): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00'}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000519000/0x1000)=nil, 0x1000, 0x66) r4 = shmget$private(0x0, 0x1000, 0x800, &(0x7f0000896000/0x1000)=nil) shmctl$SHM_STAT(r4, 0xd, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000240)=0x101, 0x6, 0x1) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) socketpair(0x26, 0x5, 0x0, &(0x7f0000000240)) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f00000005c0)={"c7baf9b3ff957e1ec28ba3b2145b42bc25b27b5346abfc71995a4a0fdc208d9f3885c6e5338fe35cdccaab62c05936ce71303f7aa795498e1b1b5e157532ff2ab80810e717940cfcf4f599e80f4733947af296b558bc3fb961269fdc93304f827c67774820fa990bcdc6d5a94ff073f64da4fa1bb338c9f8c15ef953cbb35648c7e5736eb58537ebeeeb28e8fa0c0c5ae8469adf77f009e96c39042d18dd7cde40494e59196a0ac1ba860f8e24581b1a437949a4a4b886ef64cbe52c34d908256f466fe02fdf0a88537a7db05061fe96d766f46ca3f44a90789b058db02c2171c1839d95754ed3a23a9e683d1f19b9547f512064b88f2c8c9171ab6f21e2cb293dc93f4522554b2054d99e278797799b7bf96a81125a50ab2d8f60108853651a28898e02b004345bf7d125ea5ec0c15f1fe2ed5e7a163a81613885a19ac4e567026dbefaa8304aa7f2e9f6904499262b154a3b6c2545e03a0687ae5bc60bff7f6e09c05cf23e2d7c0b609e0063ab80c2cf03c133bf96e57512ccfe51769763ecfb5cc6dcd19a7551f737ca5a7d15a2297756e9655c2ae37a827d1dee20ff56facb7c5bf3c780a1b1d403080e59ab700456a8eff1c9b60a60b8066e4c6b4ae67a42086db9ef642685951a4b9e533e808e9b0f144648c5e1181dfc912d1eb5780c43422ab252e200435461800b4385972b8df9fb1e2a207ccde22e8372a738851df3f15794528d9b441086e69275adca0edd544abfa7ef06aa6170efa644ed5ff59f6b72c2eee7f454bbe29a861af4cc012529b9df8a64fdeb20d3b71b573fc0e37ea8ab91ddc62c940ebe7ffe18062464cff441cd43b57f432277a86bbe020eeee50efe3a02a363a3c5aa3ac2b608c82531e95c0607efb0c7d755707b21f14ab84796e8f5c2a3f2c240be2ebfaaad66d51c3bd76d721a28916d554c408d7c405a32883e01f96926d8701c652c365493d0ed6231b4b0063a02d774e09c3ea82eed6bcdf110ec63c2d8278dafbe3ddf40341e3d2321f1b95de8e38e6d1751aa8748740f7ecacc7fb1cf0346e58b3a2a0f6152dd21a1a35bcb6c7c598e98e9bf64d875db53158934e23753f1bca8cac252c9973c96fc4dd97dff10f5b21b6c7ed23a554d35799fb2775925de203f084283375c93d815b738776cefc06f4ab23b668d85c2be2f2d5e0738898910d734109440359f0c63200953bd06b92ea1e1e42f622d0f3964228fd5d41cc19f2f02379e8ae750901194524f913226bac2161b23f1afbfeb0c0a3c4aa898fc40ce3be251699b34f4630cfc2454fac55fc98390156943da357f9dbcc21b7a63e690dab4a855a56df46347daa32d5f1e772c3836d301d9adbe24f2dd83456376754448be6afdf02d00b1a6d1d8d4a426de2656a1cb3c90e419f5bb670b541faee9ea2cf4d3fe9f5d74dbf5b0f9344c2134058a9025db"}) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x40, 0x2, 0x1, 0x0, 0x3, 0x0, 0x76, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) 40.399674887s ago: executing program 4 (id=3176): memfd_create(0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') syz_open_procfs(0x0, &(0x7f0000005840)='net/snmp6\x00') r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r5, &(0x7f00000004c0)=""/57, 0x39) 39.965559886s ago: executing program 4 (id=3177): add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) syz_open_dev$vcsa(0x0, 0x4, 0xd49100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, 0x0, 0x20000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r2) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) close(0xffffffffffffffff) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) ioctl$sock_inet_SIOCSIFBRDADDR(r4, 0x891a, &(0x7f00000001c0)={'nr0\x00', {0x2, 0x4e24, @multicast2}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000706010300000000000000000100000005000100070000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0x541b, &(0x7f0000000000)) socket$igmp(0x2, 0x3, 0x2) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) 38.314371321s ago: executing program 4 (id=3181): syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000340)=ANY=[@ANYRESOCT], 0x0) shmctl$IPC_RMID(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c00000002060104000000000000000000000000050004000000090005000100060000000d000300686173683a6d61630000000005000500000000001400078008001240000500000500150028000000090002"], 0x5c}}, 0x4000894) 34.392180955s ago: executing program 4 (id=3189): add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r0 = socket$kcm(0x29, 0x5, 0x0) r1 = syz_open_dev$vcsa(0x0, 0x4, 0xd49100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, 0x0, 0x20000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r4) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) close(r0) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) ioctl$sock_inet_SIOCSIFBRDADDR(r6, 0x891a, &(0x7f00000001c0)={'nr0\x00', {0x2, 0x4e24, @multicast2}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000706010300000000000000000100000005000100070000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r8, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r9, r1, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) 18.157493582s ago: executing program 0 (id=3227): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x0, 0xffff, 0xb, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x4, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000007}, 0x0) close(r4) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r10, {}, {0x2, 0xb}, {0xb, 0xb}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x100}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 13.951996682s ago: executing program 0 (id=3233): r0 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r0, 0x800799c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x0, 0x488, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') syz_open_procfs(0x0, &(0x7f0000005840)='net/snmp6\x00') r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r7, &(0x7f00000004c0)=""/57, 0x39) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r0, 0x0) lseek(r0, 0x0, 0x4) 13.950978532s ago: executing program 1 (id=3234): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="a40000000001010400000000000000000a0000003c0001802c00018014000300000000000000000000000000000000001400e9c21b48f1f2af8f650400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fd0000cccf949d4baf970000000000000000000000000014000400000000000000000000000000000000000c0002800500010000000000080007400000000010000d800c00038006"], 0xa4}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x1, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0x18, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) 13.861536974s ago: executing program 2 (id=3235): timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r1, &(0x7f0000006300), 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x22110039, 0x1000, 0x0, 0x7ff, 0x58, 0x0, 0x0, 0x6, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) syz_fuse_handle_req(r1, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x78, 0x0, 0x399, {0x28000, 0xcbff, 0x0, {0x5, 0x0, 0x48b, 0xa, 0x400000000000007, 0xfffffffffffffff3, 0x1, 0x6, 0x101, 0x8000, 0xffff1854, 0xffffffffffffffff, 0x0, 0x3, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 13.332406696s ago: executing program 0 (id=3236): shmctl$IPC_RMID(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c00000002060104000000000000000000000000050004000000090005000100060000000d000300686173683a6d61630000000005000500000000001400078008001240000500000500150028000000090002"], 0x5c}}, 0x4000894) 10.163684343s ago: executing program 2 (id=3238): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x1, 0x8010000000000084) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900038073797a32000000001400000011000147"], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) 10.109853705s ago: executing program 1 (id=3239): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setrlimit(0xf, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 9.007944408s ago: executing program 3 (id=3240): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x20902, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x8001, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r3, 0x80044dfb, &(0x7f00000000c0)) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r6, 0xae64, 0x0) sendmsg$inet(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x44, 0x6, "fb24f619"}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x12}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x38}, 0x4000004) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) 8.774238863s ago: executing program 1 (id=3241): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x40d, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x600b2, 0xcc5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0xfffffff8}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x8840}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x40, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f0000000500)="89d9cea0b45b79b8757ccf482bd39ded0ec32e732a3607c0774ff095abb32cee6ba6a8784ea7adce3909fdbf3b0ea0c37deaef4a7cd7008937c67ba84a8dc8482e6cf284d8a8405fc7e0ced2192c767eb5753768e12a871ff0f5156daf03159bb2e1a797ae1ae62c658acbac5d602e59fa6bb39b9dcd0c45e1850ef649e415553be8f0bb2c", 0xfffb}, {0x0}], 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x20000023896) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000740)={0xffffffffffffffff, &(0x7f0000000600)="1ec94aa8cd2a9ba04ed2b4891a9b148540587ebc45ce5107a9b5c4c782afdbb3b861e671f47d0e414f6d12f417af68d45fd0f08b9cdd536ae821bc93067cffd928fd988e1846ad49bfac73d3f6a3baedee3cf7ca55f4b7d5459d11812e81c05d09f9de38f4e8761dd9c7cc1d72dd8b2522a308308841ba9decdbb382f7db3e6611581f5179fc4fcf0dfb75fdf0c1d983", &(0x7f0000000700)=@tcp, 0x4}, 0x20) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5c50fae9d6d8d3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x18}], 0x1, 0x0) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 7.578565919s ago: executing program 3 (id=3242): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x0, 0xffff, 0xb, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x4, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000007}, 0x0) close(r4) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r10, {}, {0x2, 0xb}, {0xb, 0xb}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x100}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 7.49712713s ago: executing program 1 (id=3243): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/14, 0xe) sendmmsg$unix(r1, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x9802}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x80) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000025300)=""/102392, 0x18ff8) socketpair(0x1, 0x1, 0x0, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r5 = fcntl$dupfd(r4, 0x0, r4) write$sndseq(r5, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) 7.069767139s ago: executing program 2 (id=3244): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setuid(0xee00) r1 = syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x0, 0x20e}, &(0x7f0000ff0000), &(0x7f0000000000), &(0x7f0000000000)) setrlimit(0x40000000000008, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}], &(0x7f00000005c0), 0x1}, 0x20) 5.708181608s ago: executing program 1 (id=3245): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x426502, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001980)={0x9, {"a2e3ad084fc752f91b2909094bf70e0dd038e7ff7fc6e5539b324c078b089b333b316d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b313b0d376d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df0784c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d618e462071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af44863c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000510b00", 0x1000}}, 0x1006) 5.65878659s ago: executing program 3 (id=3246): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x3fff, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff, 0xffff}, {0xfff1, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0xdc}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004840)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffee, 0xfff2}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) 5.492420453s ago: executing program 2 (id=3247): mount$9p_rdma(&(0x7f0000000180), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x1008840, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e24}}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x13, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)="d80000001c0081044e81f782db44b9040a1d08020a000000401296a1180002000f00000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d3227e7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x40000) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x8080, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) open(0x0, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/stat\x00', 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0xffffffff, 0x8000001000000001, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x8000000000000000, 0x6, 0xffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) write$evdev(0xffffffffffffffff, &(0x7f0000000040)=[{{}, 0x16, 0x3, 0xf}, {{0x0, 0xea60}, 0x3, 0x7, 0x4c}, {{0x77359400}, 0x17, 0x2, 0x7}], 0x48) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0xb, 0x1, 0x101, 0x70bd26, 0x25dfdbfb, {0x5, 0x0, 0x5}, [@typed={0x9, 0x5d, 0x0, 0x0, @str='ceph\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x4000001) request_key(&(0x7f0000000180)='ceph\x00', &(0x7f0000000140)={'syz', 0x2}, &(0x7f0000002a80)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb14x\x0f\xdf\x83\xdd31\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x14\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&>\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb]@F\xe3?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@RR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00'/335, 0xffffffffffffffff) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000003540)={0x2020}, 0x2020) r6 = socket$netlink(0x10, 0x3, 0x15) writev(r6, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r3) 5.230709069s ago: executing program 3 (id=3248): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="a40000000001010400000000000000000a0000003c0001802c00018014000300000000000000000000000000000000001400e9c21b48f1f2af8f650400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fd0000cccf949d4baf970000000000000000000000000014000400000000000000000000000000000000000c0002800500010000000000080007400000000010000d800c00038006"], 0xa4}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x1, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0x18, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) 3.368048818s ago: executing program 0 (id=3249): syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getpid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, 0x0, 0x2, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, [@CTA_EXPECT_FLAGS={0x8}, @CTA_EXPECT_MASTER={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10020041}, 0x3c1913ed243a65f3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0x18, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) r4 = syz_open_dev$sg(0x0, 0x0, 0x0) fcntl$dupfd(r4, 0x0, r4) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000300), &(0x7f0000000340)=0x4) close(0xffffffffffffffff) 2.021847047s ago: executing program 3 (id=3250): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x6}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000004}, 0x4890) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 1.530795088s ago: executing program 0 (id=3251): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x20902, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x8001, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r3, 0x80044dfb, &(0x7f00000000c0)) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r6, 0xae64, 0x0) sendmsg$inet(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_retopts={{0x18, 0x0, 0x7, {[@generic={0x44, 0x6, "fb24f619"}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x12}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x38}, 0x4000004) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) 1.242383614s ago: executing program 2 (id=3252): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x40d, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x600b2, 0xcc5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0xfffffff8}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x8840}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x40, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f0000000500)="89d9cea0b45b79b8757ccf482bd39ded0ec32e732a3607c0774ff095abb32cee6ba6a8784ea7adce3909fdbf3b0ea0c37deaef4a7cd7008937c67ba84a8dc8482e6cf284d8a8405fc7e0ced2192c767eb5753768e12a871ff0f5156daf03159bb2e1a797ae1ae62c658acbac5d602e59fa6bb39b9dcd0c45e1850ef649e415553be8f0bb2c", 0xfffb}, {0x0}], 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x20000023896) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000740)={0xffffffffffffffff, &(0x7f0000000600)="1ec94aa8cd2a9ba04ed2b4891a9b148540587ebc45ce5107a9b5c4c782afdbb3b861e671f47d0e414f6d12f417af68d45fd0f08b9cdd536ae821bc93067cffd928fd988e1846ad49bfac73d3f6a3baedee3cf7ca55f4b7d5459d11812e81c05d09f9de38f4e8761dd9c7cc1d72dd8b2522a308308841ba9decdbb382f7db3e6611581f5179fc4fcf0dfb75fdf0c1d983bc07", &(0x7f0000000700)=@tcp, 0x4}, 0x20) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5c50fae9d6d8d3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x18}], 0x1, 0x0) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 963.93876ms ago: executing program 1 (id=3253): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x1, 0x8010000000000084) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900038073797a32000000001400000011000147"], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) 200.262256ms ago: executing program 0 (id=3254): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/14, 0xe) sendmmsg$unix(r1, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x9802}}, {{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x299, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x80) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000025300)=""/102392, 0x18ff8) socketpair(0x1, 0x1, 0x0, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r5 = fcntl$dupfd(r4, 0x0, r4) write$sndseq(r5, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) 126.568108ms ago: executing program 2 (id=3255): r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x80) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0xc02) socket(0x10, 0x3, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x401}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x18c6}, 0x0, 0x0) 0s ago: executing program 3 (id=3256): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x0, 0xffff, 0xb, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x4, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000007}, 0x0) close(r4) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r10, {}, {0x2, 0xb}, {0xb, 0xb}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x100}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) kernel console output (not intermixed with test programs): nvalid bInterval 0, changing to 7 [ 829.642673][ T4324] cp210x 3-1:0.0: querying part number failed [ 829.675636][ T4324] usb 3-1: cp210x converter now attached to ttyUSB0 [ 829.744472][ T5307] usb 4-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 829.782350][ T5307] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 829.792390][ T5307] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.215840][ T5307] mcp2221 0003:04D8:00DD.001C: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 830.487478][T11051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 830.516753][T11051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 830.586242][T11051] comedi comedi3: comedi_config --init_data is deprecated [ 831.509350][ T5307] usb 4-1: reset high-speed USB device number 30 using dummy_hcd [ 831.905681][ T8517] usb 3-1: USB disconnect, device number 29 [ 831.938960][ T8517] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 832.000401][ T8517] cp210x 3-1:0.0: device disconnected [ 834.600115][ T4326] usb 4-1: USB disconnect, device number 30 [ 836.519316][ T5307] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 836.749421][ T5307] usb 5-1: Using ep0 maxpacket: 16 [ 837.176149][ T5307] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 837.208032][ T5307] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 837.225193][ T5307] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 837.234774][ T5307] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.687765][ T5307] mcp2221 0003:04D8:00DD.001D: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 838.732588][T11127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 838.749941][T11127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 838.866162][T11127] comedi comedi3: comedi_config --init_data is deprecated [ 839.079270][ T4322] usb 5-1: reset high-speed USB device number 32 using dummy_hcd [ 841.364085][ T4324] usb 5-1: USB disconnect, device number 32 [ 842.588977][T11171] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 842.855338][T11179] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1879'. [ 842.893029][T11179] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1879'. [ 844.002902][T11197] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1883'. [ 847.237331][T11228] fuse: Unknown parameter 'user_id00000000000000000000' [ 847.612527][T11237] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1896'. [ 847.629451][T11237] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1896'. [ 855.226929][T11309] fuse: Bad value for 'fd' [ 859.007174][T11349] fuse: Bad value for 'fd' [ 863.324083][T11392] fuse: Bad value for 'fd' [ 864.558743][ T4320] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 865.381674][ T4320] usb 3-1: Using ep0 maxpacket: 16 [ 865.958094][ T4320] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 866.009658][ T4320] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 866.029432][ T4320] usb 3-1: config 0 interface 0 has no altsetting 0 [ 866.043053][ T4320] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 866.067091][ T4320] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.120478][ T4320] usb 3-1: config 0 descriptor?? [ 866.359474][ T14] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 866.581952][ T14] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 866.718275][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.336132][ T4320] usbhid 3-1:0.0: can't add hid device: -71 [ 867.379434][ T4320] usbhid: probe of 3-1:0.0 failed with error -71 [ 867.394236][ T14] usb 2-1: config 0 descriptor?? [ 867.425945][ T14] cp210x 2-1:0.0: cp210x converter detected [ 867.446751][ T4320] usb 3-1: USB disconnect, device number 30 [ 868.349987][ T14] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 868.357885][ T14] cp210x 2-1:0.0: querying part number failed [ 868.366633][ T14] usb 2-1: cp210x converter now attached to ttyUSB0 [ 870.988928][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 871.071430][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.486187][ T5219] usb 2-1: USB disconnect, device number 33 [ 871.670949][ T5219] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 871.701196][ T5219] cp210x 2-1:0.0: device disconnected [ 872.659451][ T5219] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 873.016710][ T5219] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 873.028056][ T5219] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 873.039483][ T5219] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 873.058285][ T5219] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 873.137060][ T5219] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 873.154160][ T5219] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.169395][ T5219] usb 3-1: Product: syz [ 873.174532][ T5219] usb 3-1: Manufacturer: syz [ 873.184677][ T5219] usb 3-1: SerialNumber: syz [ 873.267640][ T5219] usb 3-1: config 0 descriptor?? [ 874.511189][ T5219] adutux 3-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 874.528740][ T5219] usb 3-1: USB disconnect, device number 31 [ 878.543380][T11525] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1981'. [ 878.624871][T11525] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1981'. [ 879.219996][ T4326] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 879.431777][ T4326] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 879.453506][ T4326] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 879.473837][ T4326] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 879.509893][ T4326] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 879.542830][ T4326] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 879.576637][ T4326] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.613910][ T4326] usb 3-1: Product: syz [ 879.628457][ T4326] usb 3-1: Manufacturer: syz [ 879.642165][ T4326] usb 3-1: SerialNumber: syz [ 879.664371][ T4326] usb 3-1: config 0 descriptor?? [ 880.691844][ T4326] adutux 3-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 880.748630][ T4326] usb 3-1: USB disconnect, device number 32 [ 884.613874][T11594] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1996'. [ 884.623348][T11594] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1996'. [ 887.197422][T11620] tipc: Enabled bearer , priority 0 [ 887.258001][T11621] device syzkaller0 entered promiscuous mode [ 887.264821][ T953] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 887.378216][T11620] tipc: Resetting bearer [ 887.416574][T11619] tipc: Resetting bearer [ 887.586846][ T953] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 887.639649][T11619] tipc: Disabling bearer [ 887.838817][ T953] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 887.875444][ T953] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 887.900660][ T953] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 887.938861][ T953] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 887.968634][ T953] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.987666][ T953] usb 3-1: Product: syz [ 888.000462][ T953] usb 3-1: Manufacturer: syz [ 888.013866][ T953] usb 3-1: SerialNumber: syz [ 888.061553][ T953] usb 3-1: config 0 descriptor?? [ 889.369100][ T953] adutux 3-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 889.404899][ T953] usb 3-1: USB disconnect, device number 33 [ 891.118721][T11665] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2014'. [ 891.128677][T11665] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2014'. [ 892.665718][T11687] tipc: Enabled bearer , priority 0 [ 892.851479][T11687] device syzkaller0 entered promiscuous mode [ 892.862978][T11687] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 893.989444][T11683] tipc: Resetting bearer [ 894.312238][T11683] tipc: Disabling bearer [ 894.335549][ T953] tipc: Node number set to 2437442943 [ 895.243475][T11706] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2024'. [ 896.950803][T11721] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2029'. [ 896.966157][T11721] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2029'. [ 898.331959][T11741] tipc: Started in network mode [ 898.347229][T11741] tipc: Node identity 12d518de1b58, cluster identity 4711 [ 898.367612][T11741] tipc: Enabled bearer , priority 0 [ 898.777897][T11748] device syzkaller0 entered promiscuous mode [ 899.089676][T11741] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 899.226523][T11739] tipc: Resetting bearer [ 899.367414][T11739] tipc: Disabling bearer [ 900.347699][T11769] afs: Unknown parameter 'dy˜Ò®-' [ 900.372289][T11769] vivid-002: disconnect [ 900.406088][T11769] overlayfs: missing 'lowerdir' [ 900.466128][T11775] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2045'. [ 900.475962][T11775] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2045'. [ 900.542909][T11766] vivid-002: reconnect [ 902.709241][T11806] tipc: Enabled bearer , priority 0 [ 902.728300][T11802] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 902.768716][T11800] tipc: Disabling bearer [ 906.544785][T11844] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2062'. [ 911.629582][T11885] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2077'. [ 911.829538][T11751] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 912.065950][T11751] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 913.546089][T11751] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 913.581652][T11751] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 913.592819][T11751] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 913.703540][T11751] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 913.720693][T11751] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.736652][T11751] usb 1-1: Product: syz [ 913.744223][T11751] usb 1-1: Manufacturer: syz [ 913.748878][T11751] usb 1-1: SerialNumber: syz [ 913.760686][T11751] usb 1-1: config 0 descriptor?? [ 914.915734][T11751] adutux 1-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 914.973930][T11751] usb 1-1: USB disconnect, device number 48 [ 917.720402][T11946] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2091'. [ 919.706541][T11957] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2093'. [ 922.778656][T11976] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2098'. [ 928.061817][T12026] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2111'. [ 930.232331][T12051] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2120'. [ 931.040469][T12051] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2120'. [ 931.781274][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.787612][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.945487][T12084] device syzkaller0 entered promiscuous mode [ 934.004204][T12084] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 934.200705][T12090] afs: Unknown parameter 'dy˜Ò®-' [ 934.243114][T12090] vivid-002: disconnect [ 934.263927][T12090] overlayfs: missing 'lowerdir' [ 934.790312][T12087] vivid-002: reconnect [ 935.102492][T12101] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2135'. [ 935.210080][T12101] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2135'. [ 941.246497][T12175] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2153'. [ 942.972093][T12185] device syzkaller0 entered promiscuous mode [ 942.987428][T12185] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 944.697137][T12207] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2164'. [ 944.717704][T12207] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2164'. [ 946.050489][T12231] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2168'. [ 953.047548][T12309] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2194'. [ 953.102727][T12309] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2194'. [ 956.922412][T12361] fuse: Unknown parameter 'grou00000000000000000000' [ 962.300592][T12395] fuse: Unknown parameter 'grou00000000000000000000' [ 963.348598][T12401] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2225'. [ 963.443432][T12401] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2225'. [ 967.139631][T12430] fuse: Unknown parameter 'grou00000000000000000000' [ 968.386387][T12442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2237'. [ 968.942457][T12449] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2240'. [ 970.574719][T12463] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2244'. [ 970.613870][T12463] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2244'. [ 975.294861][T12495] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2254'. [ 977.730319][T12524] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2263'. [ 977.840836][T12524] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2263'. [ 984.490479][T12597] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2288'. [ 984.539391][T12597] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2288'. [ 984.552669][T12599] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2286'. [ 989.303220][T12641] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 989.580732][T12649] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2301'. [ 989.645276][T12654] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2302'. [ 989.659003][T12654] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2302'. [ 993.221075][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.227423][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.970816][T12701] zonefs (nullb0) ERROR: Not a zoned block device [ 995.424605][T12717] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2316'. [ 996.565616][T12728] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2319'. [ 996.829373][ T4378] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 997.028346][ T4378] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 997.064291][ T4378] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 997.079193][ T4378] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 997.091623][ T4378] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 997.105730][ T4378] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 997.329174][ T4378] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.403458][ T4378] usb 5-1: Product: syz [ 997.407703][ T4378] usb 5-1: Manufacturer: syz [ 997.413509][ T4378] usb 5-1: SerialNumber: syz [ 997.481681][ T4378] usb 5-1: config 0 descriptor?? [ 999.123749][ T4378] adutux 5-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 999.186491][ T4378] usb 5-1: USB disconnect, device number 33 [ 1000.919854][T12766] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2331'. [ 1001.960218][T11751] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1002.329451][T11751] usb 5-1: Using ep0 maxpacket: 8 [ 1002.339493][T11751] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1002.381320][T11751] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1002.400485][T11751] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1002.420669][T11751] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1002.444153][T11751] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1002.459063][T11751] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1002.677224][T11751] usb 5-1: GET_CAPABILITIES returned 0 [ 1002.683102][T11751] usbtmc 5-1:16.0: can't read capabilities [ 1002.808184][T12795] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2340'. [ 1003.111941][ T8517] usb 5-1: USB disconnect, device number 34 [ 1003.480625][T12797] device syzkaller0 entered promiscuous mode [ 1008.389396][ T14] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1008.669450][ T14] usb 5-1: Using ep0 maxpacket: 8 [ 1008.680545][ T14] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1008.744368][ T14] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1008.784896][ T14] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1008.829272][ T14] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1009.424948][ T14] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1009.467765][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.713483][ T14] usb 5-1: GET_CAPABILITIES returned 0 [ 1009.719054][ T14] usbtmc 5-1:16.0: can't read capabilities [ 1009.944657][ T5913] usb 5-1: USB disconnect, device number 35 [ 1011.245373][ T26] audit: type=1326 audit(1782821455.467:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12872 comm="syz.2.2364" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45cd39ce59 code=0x7ffc0000 [ 1011.570642][ T26] audit: type=1326 audit(1782821455.507:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12872 comm="syz.2.2364" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45cd39ce59 code=0x7ffc0000 [ 1012.802755][ T26] audit: type=1326 audit(1782821455.507:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12872 comm="syz.2.2364" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f45cd39ce59 code=0x7ffc0000 [ 1012.826880][ T26] audit: type=1326 audit(1782821455.507:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12872 comm="syz.2.2364" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45cd39ce59 code=0x7ffc0000 [ 1012.851444][ T26] audit: type=1326 audit(1782821455.527:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12872 comm="syz.2.2364" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f45cd39ce59 code=0x7ffc0000 [ 1012.876905][ T26] audit: type=1326 audit(1782821455.527:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12872 comm="syz.2.2364" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45cd39ce59 code=0x7ffc0000 [ 1012.902139][ T26] audit: type=1326 audit(1782821455.537:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12872 comm="syz.2.2364" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45cd39ce59 code=0x7ffc0000 [ 1013.379514][ T5913] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1013.625519][ T5913] usb 2-1: Using ep0 maxpacket: 32 [ 1013.855768][ T5913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1014.125061][ T5913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1014.242153][ T5913] usb 2-1: New USB device found, idVendor=25dd, idProduct=f3d2, bcdDevice=d2.37 [ 1014.264885][ T5913] usb 2-1: New USB device strings: Mfr=84, Product=45, SerialNumber=0 [ 1014.275411][ T5913] usb 2-1: Product: syz [ 1014.283267][ T5913] usb 2-1: Manufacturer: syz [ 1014.318866][ T5913] usb 2-1: config 0 descriptor?? [ 1016.742619][ T5913] usbhid 2-1:0.0: can't add hid device: -71 [ 1016.748924][ T5913] usbhid: probe of 2-1:0.0 failed with error -71 [ 1016.809641][ T5913] usb 2-1: USB disconnect, device number 34 [ 1018.705948][T12965] fuse: Bad value for 'fd' [ 1019.069286][ T5219] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1019.077120][ T125] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1019.269424][ T5219] usb 2-1: Using ep0 maxpacket: 8 [ 1019.269467][ T125] usb 4-1: Using ep0 maxpacket: 16 [ 1019.295935][ T125] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1019.427712][ T5219] usb 2-1: config 0 has no interfaces? [ 1019.438432][ T125] usb 4-1: config 128 has 0 interfaces, different from the descriptor's value: 1 [ 1019.498337][ T5219] usb 2-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 1019.524321][ T125] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1019.568381][ T5219] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.591379][ T125] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1019.706628][ T5219] usb 2-1: Product: syz [ 1019.787710][ T5219] usb 2-1: Manufacturer: syz [ 1019.843166][ T5219] usb 2-1: SerialNumber: syz [ 1020.014621][ T5219] usb 2-1: config 0 descriptor?? [ 1020.466198][ T4323] usb 2-1: USB disconnect, device number 35 [ 1021.163971][T13010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1021.210380][T13010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1021.288448][T13010] comedi comedi3: comedi_config --init_data is deprecated [ 1021.442057][T13015] fuse: Bad value for 'fd' [ 1021.871776][T13025] input: syz1 as /devices/virtual/input/input20 [ 1021.941941][T13027] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1676948635 (3353897270 ns) > initial count (433553246 ns). Using initial count to start timer. [ 1021.961242][T13027] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2583018472 (5166036944 ns) > initial count (2648882350 ns). Using initial count to start timer. [ 1022.515016][ T125] usb 4-1: USB disconnect, device number 31 [ 1024.611656][T13053] fuse: Bad value for 'fd' [ 1025.860709][T13069] 8021q: VLANs not supported on ip6gre0 [ 1026.423924][T13077] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2429'. [ 1029.229176][ T4323] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1030.092007][ T4323] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 1030.127207][ T4323] usb 4-1: config 0 descriptor has 1 excess byte, ignoring [ 1030.149364][ T4323] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1030.194601][ T4323] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1030.220637][ T4323] usb 4-1: config 0 descriptor has 1 excess byte, ignoring [ 1030.261808][ T4323] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1030.278624][ T4323] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1030.304147][ T4323] usb 4-1: config 0 descriptor has 1 excess byte, ignoring [ 1030.335153][ T4323] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1030.363607][ T4323] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1030.384507][ T4323] usb 4-1: config 0 descriptor has 1 excess byte, ignoring [ 1030.405956][ T4323] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1030.434571][ T4323] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1030.462204][ T4323] usb 4-1: config 0 descriptor has 1 excess byte, ignoring [ 1030.492741][ T4323] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1030.517007][ T4323] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1030.543810][ T4323] usb 4-1: config 0 descriptor has 1 excess byte, ignoring [ 1030.574523][ T4323] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1030.602644][ T4323] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1030.624952][ T4323] usb 4-1: config 0 descriptor has 1 excess byte, ignoring [ 1030.646968][ T4323] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1030.698174][ T4323] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1030.727236][ T4323] usb 4-1: config 0 descriptor has 1 excess byte, ignoring [ 1030.766324][ T4323] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1030.884786][ T4323] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1030.901932][ T4323] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1030.913117][ T4323] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1030.930021][ T4323] usb 4-1: Product: syz [ 1030.939472][ T4323] usb 4-1: Manufacturer: syz [ 1030.944149][ T4323] usb 4-1: SerialNumber: syz [ 1031.581160][ T4323] usb 4-1: config 0 descriptor?? [ 1031.597963][ T4323] yurex 4-1:0.0: Could not find endpoints [ 1031.810458][ T4323] usb 4-1: USB disconnect, device number 32 [ 1031.821020][T13131] tipc: Enabling of bearer rejected, failed to enable media [ 1032.800292][T13146] fuse: Invalid rootmode [ 1033.526500][T13164] device syzkaller1 entered promiscuous mode [ 1035.519257][T13188] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1676948635 (3353897270 ns) > initial count (433553246 ns). Using initial count to start timer. [ 1035.538850][T13188] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2583018472 (5166036944 ns) > initial count (2648882350 ns). Using initial count to start timer. [ 1036.481088][T13200] tipc: Enabling of bearer rejected, failed to enable media [ 1036.943911][T13217] binder: 13216:13217 unknown command 1074553619 [ 1036.983106][T13217] binder: 13216:13217 ioctl c0306201 200000000540 returned -22 [ 1039.785636][T13251] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2475'. [ 1039.830375][T13251] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2475'. [ 1040.118086][T13261] tipc: Enabled bearer , priority 0 [ 1040.132131][T13261] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1040.166825][T13261] tipc: Resetting bearer [ 1040.210052][T13260] tipc: Disabling bearer [ 1040.424525][T13266] device syzkaller0 entered promiscuous mode [ 1042.456822][T13291] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2486'. [ 1045.185716][T13315] device syzkaller0 entered promiscuous mode [ 1046.011728][T13336] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2499'. [ 1048.110371][T13324] fuse: Unknown parameter 'eroup_id' [ 1048.122992][T13324] netlink: 312 bytes leftover after parsing attributes in process `syz.4.2497'. [ 1048.132419][T13324] netlink: 'syz.4.2497': attribute type 1 has an invalid length. [ 1048.159298][T13324] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2497'. [ 1048.790779][T13359] device syzkaller0 entered promiscuous mode [ 1049.539577][ T125] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 1049.549425][ T41] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1049.739159][ T41] usb 2-1: Using ep0 maxpacket: 8 [ 1049.746639][ T41] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 1049.767247][ T125] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1049.803347][ T125] usb 1-1: not running at top speed; connect to a high speed hub [ 1049.821155][ T41] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 1049.841745][ T125] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 4 [ 1049.935261][ T41] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 1049.988064][ T125] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 4 [ 1050.055317][ T41] usb 2-1: config 250 has no interface number 0 [ 1050.188485][ T41] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 1050.225496][ T125] usb 1-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 1050.357495][ T125] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.382296][ T41] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1050.467117][ T125] usb 1-1: Product: syz [ 1050.472004][ T41] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1050.493175][ T125] usb 1-1: Manufacturer: syz [ 1050.497836][ T125] usb 1-1: SerialNumber: syz [ 1050.524892][ T41] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 1050.552246][ T41] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 1050.576330][ T41] usb 2-1: config 250 interface 228 has no altsetting 0 [ 1050.736578][ T41] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 1050.747285][ T41] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 1050.798695][ T41] usb 2-1: Product: syz [ 1050.816235][ T41] usb 2-1: SerialNumber: syz [ 1050.857707][ T41] hub 2-1:250.228: bad descriptor, ignoring hub [ 1050.867070][ T41] hub: probe of 2-1:250.228 failed with error -5 [ 1051.080530][ T41] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 36 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 1051.425660][ T125] usb 1-1: USB disconnect, device number 49 [ 1051.806283][T13374] usb 2-1: reset high-speed USB device number 36 using dummy_hcd [ 1053.067163][T13422] netlink: 'syz.0.2522': attribute type 1 has an invalid length. [ 1053.108141][T13419] device syzkaller0 entered promiscuous mode [ 1053.459193][ T14] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1053.649169][ T14] usb 1-1: Using ep0 maxpacket: 8 [ 1054.661449][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1056.233513][ T14] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1056.247183][ T14] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1056.473076][ T14] usb 1-1: can't read configurations, error -71 [ 1057.621283][T13374] usb 2-1: failed to restore interface 228 altsetting 255 (error=-110) [ 1057.704368][ T41] usb 2-1: USB disconnect, device number 36 [ 1057.720678][ T41] usblp0: removed [ 1060.556495][T13488] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2546'. [ 1062.106055][T13499] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2552'. [ 1062.137428][T13499] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2552'. [ 1064.339837][ T26] audit: type=1326 audit(1782821508.577:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13522 comm="syz.3.2559" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcefa39ce59 code=0x7ffc0000 [ 1064.438842][T13523] program syz.3.2559 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1064.722532][ T26] audit: type=1326 audit(1782821508.577:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13522 comm="syz.3.2559" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcefa39ce59 code=0x7ffc0000 [ 1064.749835][ T26] audit: type=1326 audit(1782821508.667:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13522 comm="syz.3.2559" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcefa35d68e code=0x7ffc0000 [ 1064.776304][ T26] audit: type=1326 audit(1782821508.667:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13522 comm="syz.3.2559" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcefa39ce59 code=0x7ffc0000 [ 1064.836851][ T26] audit: type=1326 audit(1782821508.667:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13522 comm="syz.3.2559" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcefa39ce59 code=0x7ffc0000 [ 1064.872109][ T26] audit: type=1326 audit(1782821508.987:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13522 comm="syz.3.2559" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcefa39ce59 code=0x7ffc0000 [ 1064.906861][ T26] audit: type=1326 audit(1782821508.987:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13522 comm="syz.3.2559" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcefa39ce59 code=0x7ffc0000 [ 1064.979941][ T41] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1065.209169][ T41] usb 4-1: Using ep0 maxpacket: 16 [ 1065.987993][ T41] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 1065.996234][ T41] usb 4-1: config 0 has no interface number 0 [ 1066.003876][ T41] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1066.014211][ T41] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1066.024488][ T41] usb 4-1: config 0 interface 41 has no altsetting 0 [ 1066.033662][ T41] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 1066.043133][ T41] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.051480][ T41] usb 4-1: Product: syz [ 1066.055720][ T41] usb 4-1: Manufacturer: syz [ 1066.061993][ T41] usb 4-1: SerialNumber: syz [ 1066.070160][ T41] usb 4-1: config 0 descriptor?? [ 1066.075800][T13525] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1066.084322][T13525] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1066.242059][T13541] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2564'. [ 1066.327288][ T26] audit: type=1326 audit(1782821510.557:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13522 comm="syz.3.2559" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcefa39ce59 code=0x7ffc0000 [ 1066.361213][T13541] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2564'. [ 1066.579232][ T26] audit: type=1326 audit(1782821510.587:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13522 comm="syz.3.2559" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcefa39ce59 code=0x7ffc0000 [ 1067.382204][ T41] sr9700: probe of 4-1:0.41 failed with error -71 [ 1067.400379][ T41] usb 4-1: USB disconnect, device number 33 [ 1067.554262][T13555] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1676948635 (3353897270 ns) > initial count (433553246 ns). Using initial count to start timer. [ 1067.567399][ T26] audit: type=1326 audit(1782821510.587:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13522 comm="syz.3.2559" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcefa39ce59 code=0x7ffc0000 [ 1067.572297][T13555] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2583018472 (5166036944 ns) > initial count (2648882350 ns). Using initial count to start timer. [ 1068.429413][ T41] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1068.619291][ T41] usb 1-1: Using ep0 maxpacket: 16 [ 1068.641930][ T41] usb 1-1: config 128 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1068.729513][ T41] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1068.801626][ T41] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1068.956700][ T41] usbhid 1-1:128.0: couldn't find an input interrupt endpoint [ 1069.210096][T13580] device syzkaller0 entered promiscuous mode [ 1069.224255][T13580] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1070.539237][ T14] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1070.607537][T13592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1070.634715][T13592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1070.651761][T13592] comedi comedi3: comedi_config --init_data is deprecated [ 1070.739249][ T14] usb 2-1: device descriptor read/64, error -71 [ 1071.009206][ T14] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1071.169244][ T14] usb 2-1: device descriptor read/64, error -71 [ 1071.290032][ T14] usb usb2-port1: attempt power cycle [ 1071.699369][ T14] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1071.747112][ T4326] usb 1-1: USB disconnect, device number 52 [ 1071.756096][ T14] usb 2-1: device descriptor read/8, error -71 [ 1071.900593][T13598] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2581'. [ 1071.931584][T13598] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2581'. [ 1072.132067][ T14] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1072.179960][ T14] usb 2-1: device descriptor read/8, error -71 [ 1072.858689][ T14] usb usb2-port1: unable to enumerate USB device [ 1074.208611][T13630] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2588'. [ 1075.579312][ T41] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1075.759212][ T14] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1075.809274][ T41] usb 3-1: Using ep0 maxpacket: 16 [ 1075.820262][ T41] usb 3-1: config 128 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1075.834878][ T41] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1075.845317][ T41] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1075.988625][ T41] usbhid 3-1:128.0: couldn't find an input interrupt endpoint [ 1076.139308][ T14] usb 4-1: device descriptor read/64, error -71 [ 1076.419260][ T14] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1076.629302][ T14] usb 4-1: device descriptor read/64, error -71 [ 1076.759686][ T14] usb usb4-port1: attempt power cycle [ 1076.956572][T13650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1077.000925][T13650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1077.083690][T13650] comedi comedi3: comedi_config --init_data is deprecated [ 1077.169183][ T14] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1077.229985][ T14] usb 4-1: device descriptor read/8, error -71 [ 1077.552121][ T14] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1077.601228][ T14] usb 4-1: device descriptor read/8, error -71 [ 1077.729651][ T14] usb usb4-port1: unable to enumerate USB device [ 1078.360898][ T4378] usb 3-1: USB disconnect, device number 34 [ 1078.747800][T13672] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2600'. [ 1081.111779][T13686] device syzkaller0 entered promiscuous mode [ 1083.849211][ T4378] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1084.789229][ T4378] usb 4-1: device descriptor read/64, error -71 [ 1086.619164][ T4378] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1088.930824][T13762] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2629'. [ 1088.980489][T13762] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2629'. [ 1088.990594][T13762] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2629'. [ 1089.004596][T13762] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2629'. [ 1089.013813][T13762] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2629'. [ 1089.025518][T13762] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2629'. [ 1089.034710][T13762] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2629'. [ 1089.045320][T13762] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2629'. [ 1089.054592][T13762] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2629'. [ 1089.129566][T13762] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2629'. [ 1089.214232][T13762] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1089.259753][ T4326] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1089.288873][T13762] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1089.324976][T13762] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1089.366536][T13776] fuse: Bad value for 'fd' [ 1089.461442][ T4326] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1089.530146][ T4326] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1089.574023][ T4326] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1089.602765][ T4326] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.623347][ T4326] usb 2-1: Product: syz [ 1089.635713][ T4326] usb 2-1: Manufacturer: syz [ 1089.646321][ T4326] usb 2-1: SerialNumber: syz [ 1089.713136][ T4326] usb 2-1: config 0 descriptor?? [ 1090.770045][ T4378] usb 2-1: USB disconnect, device number 42 [ 1093.880320][T13809] fuse: Bad value for 'fd' [ 1094.165599][T13815] __nla_validate_parse: 140 callbacks suppressed [ 1094.165619][T13815] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2645'. [ 1094.204907][T13817] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2647'. [ 1094.329619][T13817] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2647'. [ 1094.824568][T13815] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2645'. [ 1095.052770][T13815] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2645'. [ 1095.428012][T13815] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2645'. [ 1095.459311][T13815] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2645'. [ 1095.521548][T13815] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2645'. [ 1095.595514][T13815] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2645'. [ 1095.610134][T13815] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2645'. [ 1095.709657][T13815] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1095.748581][T13815] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1095.788945][T13815] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1096.759277][ T4326] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1097.110365][ T4326] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1098.753532][ T4326] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1098.782054][T13853] fuse: Bad value for 'fd' [ 1098.807692][ T4326] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1098.852872][ T4326] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1099.018385][ T4326] usb 3-1: Product: syz [ 1099.026019][ T4326] usb 3-1: Manufacturer: syz [ 1099.040573][ T4326] usb 3-1: SerialNumber: syz [ 1099.858005][ T4326] usb 3-1: config 0 descriptor?? [ 1099.906560][ T4326] usb 3-1: can't set config #0, error -71 [ 1099.961274][ T4326] usb 3-1: USB disconnect, device number 35 [ 1101.593307][T13872] __nla_validate_parse: 141 callbacks suppressed [ 1101.593323][T13872] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2661'. [ 1101.640295][T13872] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2661'. [ 1103.156612][T13886] device syzkaller0 entered promiscuous mode [ 1103.240244][T13888] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1103.483461][T13890] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2666'. [ 1103.513018][T13890] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2666'. [ 1103.536776][T13890] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2666'. [ 1103.560013][T13890] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2666'. [ 1103.586647][T13890] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2666'. [ 1103.617902][T13890] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2666'. [ 1103.659351][T13890] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2666'. [ 1103.744875][T13890] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2666'. [ 1103.774178][T13890] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1103.798460][T13890] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1103.808419][T13890] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1104.069408][T11751] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1104.287250][T11751] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1104.358512][T11751] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1104.493853][T11751] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1104.616240][T11751] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1104.636006][T11751] usb 3-1: Product: syz [ 1104.671998][T11751] usb 3-1: Manufacturer: syz [ 1104.696013][T11751] usb 3-1: SerialNumber: syz [ 1104.759923][T11751] usb 3-1: config 0 descriptor?? [ 1105.714228][ T41] usb 3-1: USB disconnect, device number 36 [ 1107.223935][T13926] device syzkaller0 entered promiscuous mode [ 1107.562007][T13932] fuse: Unknown parameter '0x0000000000000003' [ 1107.827400][T13936] device syzkaller0 entered promiscuous mode [ 1107.862624][T13936] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1110.011142][T13948] fuse: Bad value for 'fd' [ 1111.826736][T13971] fuse: Unknown parameter '0x0000000000000003' [ 1112.988700][T13984] __nla_validate_parse: 139 callbacks suppressed [ 1112.988776][T13984] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2694'. [ 1116.101515][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.406678][T14016] fuse: Unknown parameter '0x0000000000000003' [ 1119.799182][ T4554] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1120.461067][ T4554] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1120.476943][ T4554] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1120.494350][T14050] fuse: Unknown parameter '0x0000000000000003' [ 1120.516613][ T4554] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1120.555131][ T4554] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1120.583719][ T4554] usb 4-1: Product: syz [ 1120.600208][ T4554] usb 4-1: Manufacturer: syz [ 1120.604875][ T4554] usb 4-1: SerialNumber: syz [ 1120.623692][ T4554] usb 4-1: config 0 descriptor?? [ 1120.643595][ T4554] adutux 4-1:0.0: interrupt endpoints not found [ 1122.532347][ T125] usb 4-1: USB disconnect, device number 40 [ 1126.225493][T14099] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2731'. [ 1135.901236][T14176] afs: Unknown parameter 'dy˜Ò®-' [ 1135.970015][T14176] overlayfs: missing 'lowerdir' [ 1136.370638][T14186] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2757'. [ 1140.315916][T14212] device syzkaller0 entered promiscuous mode [ 1140.374887][T14214] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1142.841522][T14244] afs: Unknown parameter 'dy˜Ò®-' [ 1142.893960][T14244] overlayfs: missing 'lowerdir' [ 1144.480065][T14274] device syzkaller0 entered promiscuous mode [ 1144.532914][T14277] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1145.030954][T14284] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2779'. [ 1149.036590][T14305] afs: Unknown parameter 'dy˜Ò®-' [ 1149.043573][T14305] vivid-006: disconnect [ 1149.050384][T14305] overlayfs: missing 'lowerdir' [ 1150.231473][T14304] vivid-006: reconnect [ 1156.725002][T14371] afs: Unknown parameter 'dy˜Ò®-' [ 1156.746659][T14371] vivid-002: disconnect [ 1156.759751][T14371] overlayfs: missing 'lowerdir' [ 1157.361448][T14370] vivid-002: reconnect [ 1161.914824][T14414] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2815'. [ 1161.923883][T14414] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2815'. [ 1161.932833][T14414] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2815'. [ 1161.942238][T14414] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2815'. [ 1161.951406][T14414] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2815'. [ 1161.961433][T14414] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2815'. [ 1161.970563][T14414] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2815'. [ 1161.979952][T14414] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2815'. [ 1161.988856][T14414] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2815'. [ 1161.998160][T14414] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2815'. [ 1162.008911][T14414] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1162.017575][T14414] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1162.025076][T14414] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1164.600379][T14435] vivid-008: disconnect [ 1164.640919][T14435] overlayfs: missing 'lowerdir' [ 1165.723478][T14432] vivid-008: reconnect [ 1166.019715][T14444] device syzkaller0 entered promiscuous mode [ 1169.660544][T14465] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1169.902938][T14473] __nla_validate_parse: 137 callbacks suppressed [ 1169.902957][T14473] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2827'. [ 1169.918468][T14473] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2827'. [ 1169.927559][T14473] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2827'. [ 1169.936932][T14473] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2827'. [ 1169.947012][T14473] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2827'. [ 1169.956474][T14473] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2827'. [ 1169.965467][T14473] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2827'. [ 1169.974833][T14473] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2827'. [ 1169.984083][T14473] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2827'. [ 1169.993461][T14473] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2827'. [ 1170.005353][T14473] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1170.015185][T14473] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1170.023121][T14473] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1173.500954][T14511] device syzkaller0 entered promiscuous mode [ 1174.851505][T14526] device syzkaller0 entered promiscuous mode [ 1175.322754][T14528] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1175.860764][T14533] __nla_validate_parse: 137 callbacks suppressed [ 1175.860784][T14533] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2843'. [ 1175.876831][T14533] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2843'. [ 1175.886841][T14533] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2843'. [ 1175.896248][T14533] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2843'. [ 1175.905241][T14533] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2843'. [ 1175.914721][T14533] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2843'. [ 1175.923905][T14533] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2843'. [ 1175.933306][T14533] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2843'. [ 1175.942355][T14533] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2843'. [ 1175.951740][T14533] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2843'. [ 1175.963565][T14533] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1175.973569][T14533] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1175.982170][T14533] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1177.541737][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1178.499869][T14560] device syzkaller0 entered promiscuous mode [ 1188.494393][T14652] fuse: Bad value for 'group_id' [ 1188.903348][T14668] __nla_validate_parse: 139 callbacks suppressed [ 1188.903367][T14668] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2874'. [ 1194.602039][T14724] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2887'. [ 1208.192542][T14838] vivid-000: disconnect [ 1208.226351][T14838] overlayfs: missing 'lowerdir' [ 1209.622172][T14837] vivid-000: reconnect [ 1211.599676][ T4326] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1211.789173][ T4326] usb 3-1: Using ep0 maxpacket: 16 [ 1211.827805][ T4326] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1211.843637][ T4326] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1211.854383][ T4326] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1211.866752][ T4326] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1212.302327][ T4326] mcp2221 0003:04D8:00DD.001E: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 1212.560705][T14882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1212.600423][T14882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1212.655737][T14882] comedi comedi3: comedi_config --init_data is deprecated [ 1213.919199][ T5307] usb 3-1: reset high-speed USB device number 37 using dummy_hcd [ 1214.843009][ T4326] usb 3-1: USB disconnect, device number 37 [ 1214.999262][ T125] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1215.203638][ T125] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1215.218693][ T125] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1215.243253][ T125] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1215.275473][ T125] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1215.334138][ T125] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1215.358442][ T125] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1215.382600][ T125] usb 2-1: Product: syz [ 1215.387879][ T125] usb 2-1: Manufacturer: syz [ 1215.395270][ T125] usb 2-1: SerialNumber: syz [ 1215.431589][ T125] usb 2-1: config 0 descriptor?? [ 1216.686428][ T125] adutux 2-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 1216.707741][ T125] usb 2-1: USB disconnect, device number 43 [ 1216.848978][T14918] vivid-004: disconnect [ 1216.858574][T14918] overlayfs: missing 'lowerdir' [ 1217.830259][T14917] vivid-004: reconnect [ 1222.669185][ T4326] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1222.715137][T14978] vivid-006: disconnect [ 1222.732821][T14978] overlayfs: missing 'lowerdir' [ 1222.870755][ T4326] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1222.889209][ T4326] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1222.899602][ T4326] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1222.917910][ T4326] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1222.937713][ T4326] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1222.947103][ T4326] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1222.961508][ T4326] usb 5-1: Product: syz [ 1222.969253][ T4326] usb 5-1: Manufacturer: syz [ 1223.007874][ T4326] usb 5-1: SerialNumber: syz [ 1223.016915][ T4326] usb 5-1: config 0 descriptor?? [ 1223.477443][ T4326] adutux 5-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 1223.488415][ T4326] usb 5-1: USB disconnect, device number 36 [ 1223.580893][T14977] vivid-006: reconnect [ 1227.330098][ T4550] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1227.570441][ T4550] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1227.757517][ T4550] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1227.791631][T15029] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1227.806134][T15029] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1227.815445][T15029] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1227.824965][T15029] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1227.838257][T15029] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1227.846331][T15029] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1227.969611][T15032] vivid-008: disconnect [ 1228.001605][ T4550] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1228.013650][T15032] overlayfs: missing 'lowerdir' [ 1228.420586][T15031] vivid-008: reconnect [ 1229.833313][ T4550] tipc: Left network mode [ 1229.859463][ T4292] Bluetooth: hci1: command 0x0409 tx timeout [ 1230.784686][T15027] chnl_net:caif_netlink_parms(): no params data found [ 1231.939146][ T4292] Bluetooth: hci1: command 0x041b tx timeout [ 1233.013055][T15027] bridge0: port 1(bridge_slave_0) entered blocking state [ 1233.038520][T15027] bridge0: port 1(bridge_slave_0) entered disabled state [ 1233.073423][T15027] device bridge_slave_0 entered promiscuous mode [ 1233.210383][T15094] vivid-002: disconnect [ 1233.254642][T15027] bridge0: port 2(bridge_slave_1) entered blocking state [ 1233.264719][T15027] bridge0: port 2(bridge_slave_1) entered disabled state [ 1233.270452][T15094] overlayfs: missing 'lowerdir' [ 1233.288557][T15027] device bridge_slave_1 entered promiscuous mode [ 1233.448214][T15027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1233.459130][T15092] vivid-002: reconnect [ 1233.887722][T15027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1234.272270][T15027] team0: Port device team_slave_0 added [ 1234.307941][T15027] team0: Port device team_slave_1 added [ 1234.459245][ T4292] Bluetooth: hci1: command 0x040f tx timeout [ 1234.500251][T15027] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1234.507261][T15027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1234.701603][T15027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1234.851498][T15027] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1234.863959][T15027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1235.106313][T15027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1236.508501][T15027] device hsr_slave_0 entered promiscuous mode [ 1236.515156][ T4292] Bluetooth: hci1: command 0x0419 tx timeout [ 1236.523199][T15027] device hsr_slave_1 entered promiscuous mode [ 1236.541161][T15027] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1236.549073][T15027] Cannot create hsr debugfs directory [ 1236.935882][ T4550] device hsr_slave_0 left promiscuous mode [ 1236.991071][ T4550] device hsr_slave_1 left promiscuous mode [ 1237.157657][ T4550] device veth1_macvtap left promiscuous mode [ 1237.205955][ T4550] device veth0_macvtap left promiscuous mode [ 1237.242538][ T4550] device veth1_vlan left promiscuous mode [ 1237.272194][ T4550] device veth0_vlan left promiscuous mode [ 1238.980677][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1242.165094][ T4550] bond0 (unregistering): Released all slaves [ 1242.833356][T15204] 8021q: VLANs not supported on ip6_vti0 [ 1247.162283][T15027] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1247.182822][T15027] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1247.233221][T15027] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1247.306338][T15027] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1249.237571][T15027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1249.272838][T15027] 8021q: adding VLAN 0 to HW filter on device team0 [ 1249.309860][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1249.326842][ T4380] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1249.374576][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1249.412366][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1249.450774][ T4302] bridge0: port 1(bridge_slave_0) entered blocking state [ 1249.457988][ T4302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1249.475592][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1249.484843][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1249.502928][ T4302] bridge0: port 2(bridge_slave_1) entered blocking state [ 1249.510163][ T4302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1249.536083][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1249.583899][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1249.608646][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1249.638830][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1249.680862][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1249.690503][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1249.717177][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1250.018133][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1250.726932][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1250.768961][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1250.800221][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1250.825578][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1253.790306][T12646] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1253.811989][T12646] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1253.894888][T15027] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1254.132817][ T4660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1254.288738][ T4660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1254.544286][T15321] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3005'. [ 1254.680771][T15027] device veth0_vlan entered promiscuous mode [ 1256.279595][ T4660] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1256.692841][ T4660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1256.733334][ T4660] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1256.742054][ T4660] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1257.191480][T15027] device veth1_vlan entered promiscuous mode [ 1257.390012][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1257.410367][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1257.547960][T15027] device veth0_macvtap entered promiscuous mode [ 1257.561010][T15027] device veth1_macvtap entered promiscuous mode [ 1258.508846][ T4660] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1258.584137][ T4660] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1258.653230][T15027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1258.734345][T15027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1258.761635][T15027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1258.823330][T15027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1258.874563][T15027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1258.923569][T15027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1258.971470][T15027] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1260.078957][ T4660] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1260.087806][ T4660] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1260.140341][T15027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1260.195895][T15027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1260.599389][T15027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1260.792845][T15027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1260.814229][T15027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1260.834515][T15027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1260.871114][T15027] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1261.320115][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1261.409862][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1261.423814][T15027] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1261.438801][T15027] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1261.448319][T15027] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1261.457140][T15027] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1261.656187][ T4498] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1261.695273][ T4498] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1261.724664][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1261.810269][ T4425] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1261.828059][ T4425] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1261.851536][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1261.969378][ T4323] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1262.169187][ T4323] usb 5-1: Using ep0 maxpacket: 16 [ 1262.176291][ T4323] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1262.218028][ T4323] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1262.248516][ T4323] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1262.268166][ T4323] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1262.726631][ T4323] mcp2221 0003:04D8:00DD.001F: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 1263.420212][T15399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1263.511678][T15399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1263.602464][T15399] comedi comedi3: comedi_config --init_data is deprecated [ 1264.091108][ T4323] usb 5-1: reset high-speed USB device number 37 using dummy_hcd [ 1265.719710][ T5307] usb 5-1: USB disconnect, device number 37 [ 1266.072671][ T4292] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1266.083687][ T4292] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1266.109202][ T4292] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1266.127500][ T4292] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1266.135207][ T4292] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1266.144449][ T4292] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1266.798023][T15428] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3022'. [ 1267.648803][T15432] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 1267.882302][ T4375] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1268.073020][ T4375] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1268.114620][T15418] chnl_net:caif_netlink_parms(): no params data found [ 1268.179212][ T4292] Bluetooth: hci5: command 0x0409 tx timeout [ 1268.315063][ T4375] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1268.526939][ T4375] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1268.767857][T15418] bridge0: port 1(bridge_slave_0) entered blocking state [ 1268.785071][T15418] bridge0: port 1(bridge_slave_0) entered disabled state [ 1268.824489][T15418] device bridge_slave_0 entered promiscuous mode [ 1268.907546][T15418] bridge0: port 2(bridge_slave_1) entered blocking state [ 1268.933242][T15418] bridge0: port 2(bridge_slave_1) entered disabled state [ 1268.972176][T15418] device bridge_slave_1 entered promiscuous mode [ 1269.150695][ T4375] tipc: Left network mode [ 1269.168129][T15463] tipc: Enabling of bearer rejected, failed to enable media [ 1269.187403][T15418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1269.237187][T15463] device syzkaller0 entered promiscuous mode [ 1269.262306][T15418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1269.416983][T15465] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1269.725640][T15418] team0: Port device team_slave_0 added [ 1269.840293][T15418] team0: Port device team_slave_1 added [ 1270.189868][T15418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1270.273781][ T4292] Bluetooth: hci5: command 0x041b tx timeout [ 1270.314453][T15418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1270.669062][T15418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1270.940158][T15418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1270.947273][T15418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1271.114548][T15418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1271.607936][T15418] device hsr_slave_0 entered promiscuous mode [ 1272.349084][ T4292] Bluetooth: hci5: command 0x040f tx timeout [ 1272.372016][T15418] device hsr_slave_1 entered promiscuous mode [ 1272.501753][T15418] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1272.511517][T15418] Cannot create hsr debugfs directory [ 1274.401769][ T4375] device hsr_slave_0 left promiscuous mode [ 1274.419484][ T4292] Bluetooth: hci5: command 0x0419 tx timeout [ 1274.437090][ T4375] device hsr_slave_1 left promiscuous mode [ 1274.512475][ T4375] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1274.552781][ T4375] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1274.591317][ T4375] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1274.619953][ T4375] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1274.658785][ T4375] device bridge_slave_1 left promiscuous mode [ 1274.688435][ T4375] bridge0: port 2(bridge_slave_1) entered disabled state [ 1274.767862][ T4375] device bridge_slave_0 left promiscuous mode [ 1274.775763][ T4375] bridge0: port 1(bridge_slave_0) entered disabled state [ 1274.868529][ T4375] device veth1_macvtap left promiscuous mode [ 1274.907648][ T4375] device veth0_macvtap left promiscuous mode [ 1274.914757][ T4375] device veth1_vlan left promiscuous mode [ 1274.921546][ T4375] device veth0_vlan left promiscuous mode [ 1275.484686][T15552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3039'. [ 1275.857024][T15556] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3040'. [ 1277.600140][ T4375] team0 (unregistering): Port device team_slave_1 removed [ 1277.696430][ T4375] team0 (unregistering): Port device team_slave_0 removed [ 1277.777727][ T4375] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1277.855717][ T4375] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1278.689394][ T4375] bond0 (unregistering): Released all slaves [ 1279.195489][T15539] tipc: Enabling of bearer rejected, failed to enable media [ 1279.509521][T15540] device syzkaller0 entered promiscuous mode [ 1280.039157][ T4554] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1280.229165][ T4554] usb 2-1: Using ep0 maxpacket: 16 [ 1280.364175][ T4554] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1280.379252][ T4554] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1280.389938][ T4554] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1280.442417][ T4554] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1280.741551][T15418] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1280.807439][T15418] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1280.894220][ T4554] mcp2221 0003:04D8:00DD.0020: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 1280.971966][T15418] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1280.994555][T15418] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1281.153193][T15609] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1281.184653][T15609] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1281.250171][T15609] comedi comedi3: comedi_config --init_data is deprecated [ 1281.377762][T15418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1281.437355][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1281.451339][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1281.485892][T15418] 8021q: adding VLAN 0 to HW filter on device team0 [ 1281.523476][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1281.554029][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1281.592696][ T4425] bridge0: port 1(bridge_slave_0) entered blocking state [ 1281.599921][ T4425] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1281.687029][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1281.717493][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1281.757280][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1281.795539][ T4425] bridge0: port 2(bridge_slave_1) entered blocking state [ 1281.802776][ T4425] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1281.872181][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1281.918300][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1281.935651][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1281.983447][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1282.010626][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1282.049885][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1282.086850][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1282.121601][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1282.146466][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1282.178445][T15418] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1282.179304][ T4378] usb 2-1: reset high-speed USB device number 44 using dummy_hcd [ 1282.224618][T15418] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1282.258060][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1282.275018][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1282.755191][T15626] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3055'. [ 1283.318440][T15631] vivid-002: disconnect [ 1283.338344][T15631] overlayfs: missing 'lowerdir' [ 1283.466976][T15634] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3056'. [ 1283.740636][T15630] vivid-002: reconnect [ 1283.825077][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1283.843785][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1283.902287][T15418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1284.028518][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1284.064639][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1284.074000][ T8517] usb 2-1: USB disconnect, device number 44 [ 1284.278835][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1284.292992][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1284.308487][T15418] device veth0_vlan entered promiscuous mode [ 1284.318531][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1284.328102][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1284.352168][T15418] device veth1_vlan entered promiscuous mode [ 1284.893707][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1285.952656][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1286.036006][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1286.527120][T15418] device veth0_macvtap entered promiscuous mode [ 1286.554589][T15418] device veth1_macvtap entered promiscuous mode [ 1286.653338][T15418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1286.699056][T15418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1286.708952][T15418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1286.764877][T15418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1286.825116][T15418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1286.839409][T15418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1286.876560][T15418] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1286.918243][T15418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1286.947320][T15418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1286.975077][T15418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1287.019012][T15418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1287.028902][T15418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1287.079077][T15418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1287.137502][T15418] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1287.192545][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1287.215317][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1287.250095][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1287.260431][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1287.282921][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1287.319998][T15674] tipc: Enabling of bearer rejected, failed to enable media [ 1287.368091][T15418] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1287.412170][T15418] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1287.453657][T15418] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1287.497869][T15418] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1287.562040][T15677] device syzkaller0 entered promiscuous mode [ 1287.598492][T15677] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 1287.903334][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1287.926306][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1287.954620][T12646] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1287.969414][ T14] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1287.988321][T12646] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1288.000209][T12646] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1288.048249][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1288.189287][ T14] usb 1-1: Using ep0 maxpacket: 16 [ 1288.202376][ T14] usb 1-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1288.240807][ T14] usb 1-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1288.282631][ T14] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1288.315821][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1288.755401][ T14] mcp2221 0003:04D8:00DD.0021: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 1288.768806][T15706] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3068'. [ 1289.012821][T15707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1289.061955][T15707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1289.120098][T15707] comedi comedi3: comedi_config --init_data is deprecated [ 1289.999062][ T4323] usb 1-1: reset high-speed USB device number 53 using dummy_hcd [ 1292.428041][T15719] fuse: Unknown parameter 'grou00000000000000000000' [ 1292.510042][ T5307] usb 1-1: USB disconnect, device number 53 [ 1292.944176][ T4660] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1292.961827][ T4292] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1293.479741][ T4292] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1293.489268][ T4292] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1293.501374][ T4292] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1293.520793][ T4292] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1293.534065][ T4292] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1293.735697][ T4660] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1294.015986][ T4660] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1294.858276][T15750] tipc: Enabling of bearer rejected, failed to enable media [ 1295.084100][ T4660] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1295.165952][T15751] device syzkaller0 entered promiscuous mode [ 1295.179582][T15751] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 1295.619158][T15029] Bluetooth: hci0: command 0x0409 tx timeout [ 1295.664756][ T4660] tipc: Left network mode [ 1295.815681][T15731] chnl_net:caif_netlink_parms(): no params data found [ 1295.835301][T15757] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3078'. [ 1296.419204][ T5307] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1296.544373][T15731] bridge0: port 1(bridge_slave_0) entered blocking state [ 1296.627112][T15731] bridge0: port 1(bridge_slave_0) entered disabled state [ 1296.658712][T15731] device bridge_slave_0 entered promiscuous mode [ 1296.659225][ T5307] usb 3-1: Using ep0 maxpacket: 16 [ 1296.695551][ T5307] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1296.703244][T15731] bridge0: port 2(bridge_slave_1) entered blocking state [ 1296.743236][T15731] bridge0: port 2(bridge_slave_1) entered disabled state [ 1296.749400][ T5307] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1296.860336][ T5307] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1296.878658][ T5307] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1296.914037][T15731] device bridge_slave_1 entered promiscuous mode [ 1297.699199][ T4292] Bluetooth: hci0: command 0x041b tx timeout [ 1297.833963][ T5307] mcp2221 0003:04D8:00DD.0022: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 1298.032625][T15772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1298.049593][T15772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1298.063145][T15792] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3083'. [ 1298.148264][T15731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1298.188924][T15772] comedi comedi3: comedi_config --init_data is deprecated [ 1298.272360][ T4378] usb 3-1: USB disconnect, device number 38 [ 1298.312615][T15731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1298.574099][T15731] team0: Port device team_slave_0 added [ 1298.643203][T15731] team0: Port device team_slave_1 added [ 1299.016239][T15731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1299.026642][T15731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1299.121668][T15731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1299.779443][T15731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1299.797730][T15029] Bluetooth: hci0: command 0x040f tx timeout [ 1299.809366][T15731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1300.008341][T15731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1300.174943][T15805] fuse: Unknown parameter 'grou00000000000000000000' [ 1300.376034][ T4660] device hsr_slave_0 left promiscuous mode [ 1300.390913][ T4660] device hsr_slave_1 left promiscuous mode [ 1300.406323][ T4660] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1300.421089][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.489175][ T4660] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1300.528621][ T4660] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1300.578841][ T4660] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1300.597529][ T4660] device bridge_slave_1 left promiscuous mode [ 1300.619429][ T4660] bridge0: port 2(bridge_slave_1) entered disabled state [ 1300.657712][ T4660] device bridge_slave_0 left promiscuous mode [ 1300.683561][ T4660] bridge0: port 1(bridge_slave_0) entered disabled state [ 1300.775812][ T4660] device veth1_macvtap left promiscuous mode [ 1300.782055][ T5307] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1300.799240][ T4660] device veth0_macvtap left promiscuous mode [ 1300.816742][ T4660] device veth1_vlan left promiscuous mode [ 1300.835941][ T4660] device veth0_vlan left promiscuous mode [ 1301.035306][ T5307] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1301.071283][ T5307] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1301.124518][ T5307] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1301.156424][ T5307] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1301.213119][ T5307] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1301.233509][ T5307] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1301.256550][ T5307] usb 3-1: Product: syz [ 1301.278588][ T5307] usb 3-1: Manufacturer: syz [ 1301.288245][ T5307] usb 3-1: SerialNumber: syz [ 1301.306579][ T5307] usb 3-1: config 0 descriptor?? [ 1301.859241][T15029] Bluetooth: hci0: command 0x0419 tx timeout [ 1302.165542][ T5307] adutux 3-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 1302.219286][ T5307] usb 3-1: USB disconnect, device number 39 [ 1304.188156][ T4660] team0 (unregistering): Port device team_slave_1 removed [ 1304.242093][T15850] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3093'. [ 1304.286897][ T4660] team0 (unregistering): Port device team_slave_0 removed [ 1304.378620][ T4660] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1304.458409][T15852] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3094'. [ 1304.467672][T15852] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3094'. [ 1304.488603][ T4660] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1305.277956][ T4660] bond0 (unregistering): Released all slaves [ 1305.433974][T15820] tipc: Enabling of bearer rejected, failed to enable media [ 1305.489248][T15824] device syzkaller0 entered promiscuous mode [ 1305.602909][T15731] device hsr_slave_0 entered promiscuous mode [ 1305.799608][T15731] device hsr_slave_1 entered promiscuous mode [ 1305.848603][T15731] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1305.870941][T15731] Cannot create hsr debugfs directory [ 1305.880000][T15864] fuse: Unknown parameter 'group_i00000000000000000000' [ 1307.605962][T15731] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1307.647757][T15731] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1307.803606][T15731] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1307.833530][T15731] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1308.051704][T15731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1308.097790][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1308.108911][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1308.142363][T15731] 8021q: adding VLAN 0 to HW filter on device team0 [ 1308.165121][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1308.182233][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1308.209137][ T125] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1308.217571][ T4375] bridge0: port 1(bridge_slave_0) entered blocking state [ 1308.224783][ T4375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1308.266597][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1308.295384][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1308.316902][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1308.335803][ T4375] bridge0: port 2(bridge_slave_1) entered blocking state [ 1308.343033][ T4375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1308.410468][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1308.410798][ T125] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1308.435805][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1308.466179][ T125] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1308.485415][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1308.502777][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1308.629517][ T125] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 1308.645453][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1308.653460][ T125] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1308.774143][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1309.394522][ T125] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 1309.404075][ T125] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1309.413830][ T125] usb 5-1: Product: syz [ 1309.418176][ T125] usb 5-1: Manufacturer: syz [ 1309.423445][ T125] usb 5-1: SerialNumber: syz [ 1309.432975][ T125] usb 5-1: config 0 descriptor?? [ 1309.529786][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1309.553309][T15731] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1309.582599][T15731] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1309.623055][ T1073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1309.643914][ T1073] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1309.672821][ T1073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1310.285668][ T1073] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1310.299213][ T1073] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1310.559285][ T125] adutux 5-1:0.0: ADU208 now attached to /dev/usb/adutux0 [ 1310.607385][ T125] usb 5-1: USB disconnect, device number 38 [ 1312.520460][T15927] tipc: Enabling of bearer rejected, failed to enable media [ 1312.549957][T15927] device syzkaller0 entered promiscuous mode [ 1312.585383][T15927] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1313.011719][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1313.025914][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1313.082735][T15731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1313.124467][T15924] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3107'. [ 1313.233227][T15723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1313.295775][T15723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1313.349328][T15947] fuse: Unknown parameter 'group_i00000000000000000000' [ 1313.430032][T15723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1313.448432][T15723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1313.497058][T15731] device veth0_vlan entered promiscuous mode [ 1313.570350][T15723] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1313.658487][T15723] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1313.695985][T15731] device veth1_vlan entered promiscuous mode [ 1313.893883][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1313.914608][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1313.961087][T15731] device veth0_macvtap entered promiscuous mode [ 1314.027369][T15723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1314.049360][ T125] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1314.239243][ T125] usb 5-1: Using ep0 maxpacket: 16 [ 1314.283391][ T125] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1314.531961][ T125] usb 5-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1314.659548][ T125] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1314.685712][T15723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1314.729296][ T125] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1314.729933][T15723] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1314.751026][T15731] device veth1_macvtap entered promiscuous mode [ 1314.810206][T15731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1314.821456][T15731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1314.832955][T15731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1314.844913][T15731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1314.855049][T15731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1314.871404][T15731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1314.893142][T15731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1315.034978][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1315.100106][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1315.111180][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1315.154311][T15731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1315.185447][T15731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1315.214189][T15731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1315.222996][ T125] mcp2221 0003:04D8:00DD.0023: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 1315.245632][T15731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1315.289289][T15731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1315.331889][T15731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1315.397534][T15731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1315.752008][T15954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1315.800108][T15954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1315.808064][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1315.832457][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1315.852501][T15954] comedi comedi3: comedi_config --init_data is deprecated [ 1315.908712][T15731] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1315.936564][T15731] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1315.950180][T11326] usb 5-1: USB disconnect, device number 39 [ 1316.484600][T15731] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1316.569218][T15731] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1316.995816][T15992] tipc: Enabling of bearer rejected, failed to enable media [ 1317.025153][ T4427] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1317.075782][ T4427] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1317.131598][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1317.464788][T15723] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1317.482859][T15723] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1317.556685][ T8061] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1318.728084][T16020] fuse: Unknown parameter 'group_i00000000000000000000' [ 1319.081501][T16028] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3125'. [ 1319.150172][T16028] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3125'. [ 1319.757833][ T4292] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1319.769264][ T4292] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1319.793463][ T4292] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1319.812025][ T4292] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1319.820770][ T4292] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1319.829208][ T4292] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1319.926285][T16046] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3121'. [ 1321.439148][ T4483] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1321.939090][ T4292] Bluetooth: hci3: command 0x0409 tx timeout [ 1322.043359][T16062] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1322.120507][ T4483] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1322.354456][ T4483] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1322.407795][T16041] chnl_net:caif_netlink_parms(): no params data found [ 1322.946073][ T4483] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1324.020197][ T4292] Bluetooth: hci3: command 0x041b tx timeout [ 1324.241638][T16041] bridge0: port 1(bridge_slave_0) entered blocking state [ 1324.258811][T16084] fuse: Unknown parameter 'group_id00000000000000000000' [ 1324.279602][T16041] bridge0: port 1(bridge_slave_0) entered disabled state [ 1324.287967][T16041] device bridge_slave_0 entered promiscuous mode [ 1324.352218][T16041] bridge0: port 2(bridge_slave_1) entered blocking state [ 1324.375404][T16041] bridge0: port 2(bridge_slave_1) entered disabled state [ 1324.406525][T16041] device bridge_slave_1 entered promiscuous mode [ 1324.526356][ T4483] tipc: Left network mode [ 1324.543781][T16041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1324.578391][T16041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1325.156135][T16041] team0: Port device team_slave_0 added [ 1325.174287][T16041] team0: Port device team_slave_1 added [ 1325.613777][T16041] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1325.740859][T16041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1325.882710][T16041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1326.187845][ T4292] Bluetooth: hci3: command 0x040f tx timeout [ 1326.933742][T16041] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1326.943096][T16041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1327.573777][T16041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1328.025915][T16041] device hsr_slave_0 entered promiscuous mode [ 1328.046620][T16041] device hsr_slave_1 entered promiscuous mode [ 1328.057329][T16041] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1328.081669][T16041] Cannot create hsr debugfs directory [ 1328.182787][T16121] device syzkaller0 entered promiscuous mode [ 1328.202049][T16124] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1328.259065][T15029] Bluetooth: hci3: command 0x0419 tx timeout [ 1329.997484][T16140] fuse: Unknown parameter 'group_id00000000000000000000' [ 1330.004918][T16142] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3146'. [ 1330.021854][T16142] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3146'. [ 1330.036257][ T4483] device hsr_slave_0 left promiscuous mode [ 1330.069320][ T4483] device hsr_slave_1 left promiscuous mode [ 1330.116804][ T4483] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1330.136940][ T4483] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1330.864527][ T4483] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1330.879180][ T4483] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1331.021015][ T4483] device bridge_slave_1 left promiscuous mode [ 1331.027354][ T4483] bridge0: port 2(bridge_slave_1) entered disabled state [ 1331.085846][ T4483] device bridge_slave_0 left promiscuous mode [ 1331.130924][ T4483] bridge0: port 1(bridge_slave_0) entered disabled state [ 1331.273486][ T4483] device veth1_macvtap left promiscuous mode [ 1331.301347][ T4483] device veth0_macvtap left promiscuous mode [ 1331.383028][ T4483] device veth1_vlan left promiscuous mode [ 1331.412367][ T4483] device veth0_vlan left promiscuous mode [ 1334.172188][ T4483] team0 (unregistering): Port device team_slave_1 removed [ 1334.221971][ T4483] team0 (unregistering): Port device team_slave_0 removed [ 1334.272345][ T4483] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1334.320300][ T4483] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1334.693323][ T4483] bond0 (unregistering): Released all slaves [ 1334.931936][T16177] device syzkaller0 entered promiscuous mode [ 1336.648424][T16211] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3159'. [ 1336.716750][T16211] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3159'. [ 1336.780530][T16215] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3157'. [ 1337.911098][T16226] fuse: Unknown parameter 'group_id00000000000000000000' [ 1338.435244][T16041] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1339.267650][T16041] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1339.329626][T16041] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1339.378681][T16041] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1341.142083][T16041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1341.246816][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1341.267707][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1341.317854][T16041] 8021q: adding VLAN 0 to HW filter on device team0 [ 1341.368582][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1341.428361][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1341.492132][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 1341.499379][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1341.541753][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1341.596619][T16263] device syzkaller0 entered promiscuous mode [ 1341.627992][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1341.651924][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1341.697191][ T4483] bridge0: port 2(bridge_slave_1) entered blocking state [ 1341.704444][ T4483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1341.712446][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1341.723754][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1341.739536][T16263] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1341.774655][T16266] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3169'. [ 1341.784149][T16266] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3169'. [ 1342.809240][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1342.828798][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1342.871548][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1342.891683][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1342.915861][ T4483] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1342.957946][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1342.995838][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1343.015090][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1343.035153][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1343.057219][T16041] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1343.129172][ T14] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1343.499287][ T14] usb 3-1: Using ep0 maxpacket: 16 [ 1343.521426][ T14] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1343.569758][ T14] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1343.641039][ T14] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1343.712804][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1344.756980][T16301] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3171'. [ 1344.793775][ T14] mcp2221 0003:04D8:00DD.0024: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 1344.993602][T16278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1345.002861][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1345.050931][T16278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1345.132852][T16278] comedi comedi3: comedi_config --init_data is deprecated [ 1345.146409][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1345.181757][T16041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1345.194357][ T4488] usb 3-1: USB disconnect, device number 40 [ 1345.991763][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1346.019805][ T4524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1346.147974][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1346.199692][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1346.247286][T16041] device veth0_vlan entered promiscuous mode [ 1346.416233][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1346.610428][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1346.815869][T16041] device veth1_vlan entered promiscuous mode [ 1347.227119][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1347.237340][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1347.303513][T16041] device veth0_macvtap entered promiscuous mode [ 1347.553914][T16041] device veth1_macvtap entered promiscuous mode [ 1347.608607][T16331] device syzkaller0 entered promiscuous mode [ 1347.630353][T16041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1347.647497][T16041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1347.666739][T16041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1347.687909][T16041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1347.711101][T16041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1347.751411][T16041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1347.774832][T16335] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3183'. [ 1347.804460][T16335] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3183'. [ 1347.807232][T16041] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1347.868879][T16331] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1348.694035][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1348.725718][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1348.777512][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1348.826802][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1348.883882][T16041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1348.915491][T16041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1348.959198][T16041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1348.998246][T16041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1349.030566][T16041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1349.068067][T16041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1349.104367][T16041] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1349.215684][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1349.237623][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1349.271031][T16041] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1349.292807][T16041] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1349.317499][T16041] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1349.345323][T16041] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1350.769551][ T4550] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1350.778249][ T4550] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1350.857488][T16365] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3187'. [ 1350.954712][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1351.014249][ T5913] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1351.479077][ T5913] usb 2-1: Using ep0 maxpacket: 16 [ 1351.493069][ T5913] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1351.584734][ T4427] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1351.601426][ T5913] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1351.761334][ T5913] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1351.771053][ T4427] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1351.794125][ T5913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1352.269914][ T4550] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1352.491491][ T5913] mcp2221 0003:04D8:00DD.0025: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 1352.827783][T16387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1352.866795][T16387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1352.884785][T16362] comedi comedi3: comedi_config --init_data is deprecated [ 1352.911704][ T5913] usb 2-1: USB disconnect, device number 45 [ 1353.363228][T16393] fuse: Bad value for 'user_id' [ 1353.686328][T16395] device syzkaller0 entered promiscuous mode [ 1353.699307][ T4292] Bluetooth: hci1: command 0x0406 tx timeout [ 1353.742907][T16401] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3197'. [ 1353.752966][T16401] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3197'. [ 1353.770791][T16395] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1354.878738][ T4292] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1354.896536][ T4292] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1354.905699][ T4292] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1354.944187][ T4292] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1354.968209][ T4292] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1354.982428][ T4292] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1355.479807][ T4375] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1356.686346][ T4375] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1356.994604][ T4375] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1357.059351][T15029] Bluetooth: hci2: command 0x0409 tx timeout [ 1357.149757][ T4375] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1357.426814][T16416] chnl_net:caif_netlink_parms(): no params data found [ 1357.924273][ T4375] tipc: Left network mode [ 1358.043983][T16451] vivid-002: disconnect [ 1358.060614][T16451] overlayfs: missing 'lowerdir' [ 1358.221789][T16416] bridge0: port 1(bridge_slave_0) entered blocking state [ 1358.237750][T16416] bridge0: port 1(bridge_slave_0) entered disabled state [ 1358.247774][T16416] device bridge_slave_0 entered promiscuous mode [ 1358.294392][T16450] vivid-002: reconnect [ 1358.441353][T16416] bridge0: port 2(bridge_slave_1) entered blocking state [ 1358.452856][T16416] bridge0: port 2(bridge_slave_1) entered disabled state [ 1358.498784][T16416] device bridge_slave_1 entered promiscuous mode [ 1358.659730][ T5307] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1358.691777][T16416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1358.863269][T16416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1358.877864][ T5307] usb 2-1: Using ep0 maxpacket: 16 [ 1358.901459][ T5307] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1358.959550][ T5307] usb 2-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1358.988175][T16467] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3209'. [ 1359.006592][ T5307] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1359.017297][T16467] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3209'. [ 1359.035326][ T5307] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1359.139142][T15029] Bluetooth: hci2: command 0x041b tx timeout [ 1360.061008][T16477] fuse: Bad value for 'user_id' [ 1360.108782][ T5307] mcp2221 0003:04D8:00DD.0026: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 1360.191684][T16416] team0: Port device team_slave_0 added [ 1360.201540][T16416] team0: Port device team_slave_1 added [ 1360.339918][T16416] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1360.346936][T16416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1360.379873][T16478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1360.413742][T16478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1360.485083][T16478] comedi comedi3: comedi_config --init_data is deprecated [ 1360.575038][T16416] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1360.709650][ T5307] usb 2-1: USB disconnect, device number 46 [ 1361.219409][ T4292] Bluetooth: hci2: command 0x040f tx timeout [ 1361.760553][T16416] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1361.777528][T16416] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1361.832346][T16416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1361.870722][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.997148][T16506] vivid-006: disconnect [ 1362.031182][T16506] overlayfs: missing 'lowerdir' [ 1362.101827][T16416] device hsr_slave_0 entered promiscuous mode [ 1362.123130][T16416] device hsr_slave_1 entered promiscuous mode [ 1362.246681][T16505] vivid-006: reconnect [ 1363.299098][ T4292] Bluetooth: hci2: command 0x0419 tx timeout [ 1363.623946][ T4375] device hsr_slave_0 left promiscuous mode [ 1363.632491][ T4375] device hsr_slave_1 left promiscuous mode [ 1363.720284][ T4375] device veth1_macvtap left promiscuous mode [ 1363.726986][ T4375] device veth0_macvtap left promiscuous mode [ 1363.733940][ T4375] device veth1_vlan left promiscuous mode [ 1363.740416][ T4375] device veth0_vlan left promiscuous mode [ 1364.003398][T16528] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1676948635 (3353897270 ns) > initial count (433553246 ns). Using initial count to start timer. [ 1364.170009][T16532] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2583018472 (5166036944 ns) > initial count (2648882350 ns). Using initial count to start timer. [ 1364.477486][T16536] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3222'. [ 1364.503852][T16536] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3222'. [ 1366.043842][T16550] fuse: Bad value for 'fd' [ 1366.609106][ T4554] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1366.939171][ T4554] usb 3-1: Using ep0 maxpacket: 16 [ 1366.947433][ T4554] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1366.974834][ T4554] usb 3-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1366.984940][ T4554] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1366.994299][ T4554] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1367.426924][ T4554] mcp2221 0003:04D8:00DD.0027: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 1367.685349][T16575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1367.721098][T16575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1367.747318][T16575] comedi comedi3: comedi_config --init_data is deprecated [ 1367.819822][ T4554] usb 3-1: USB disconnect, device number 41 [ 1369.457000][ T4375] bond0 (unregistering): Released all slaves [ 1369.561015][T16524] 8021q: VLANs not supported on ip6gre0 [ 1369.603677][T16562] device syzkaller0 entered promiscuous mode [ 1371.130442][T16598] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3232'. [ 1374.607444][T16625] fuse: Bad value for 'fd' [ 1375.999641][T16640] 8021q: VLANs not supported on ip6tnl0 [ 1377.514718][T16416] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1377.623346][T16416] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1377.697962][T16416] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1377.760891][T16656] device syzkaller0 entered promiscuous mode [ 1377.791377][T16636] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3238'. [ 1377.853159][T16416] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1377.917867][T16656] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1379.484353][T16416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1379.616174][T15723] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1379.616644][T15723] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1379.622019][T16416] 8021q: adding VLAN 0 to HW filter on device team0 [ 1379.625563][ T1073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1379.626513][ T1073] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1379.626884][ T1073] bridge0: port 1(bridge_slave_0) entered blocking state [ 1379.626972][ T1073] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1379.627638][ T1073] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1379.681850][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1379.682814][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1379.683421][ T4375] bridge0: port 2(bridge_slave_1) entered blocking state [ 1379.683488][ T4375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1379.693345][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1379.696985][ T1073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1379.744119][ T1073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1379.753552][ T1073] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1379.762785][ T1073] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1379.779203][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1379.779769][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1379.780183][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1379.780497][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1379.780820][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1379.781140][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1379.804869][T16416] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1379.902647][T16677] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3247'. [ 1381.868284][T16690] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3248'. [ 1381.869831][T16690] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3248'. [ 1384.973833][T12646] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1384.996618][T12646] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1385.054889][T16416] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1385.206395][T16738] ================================================================== [ 1385.214611][T16738] BUG: KASAN: slab-out-of-bounds in try_module_get+0x4f/0xf0 [ 1385.222130][T16738] Write of size 4 at addr ffff8880292885a0 by task syz.2.3255/16738 [ 1385.230199][T16738] [ 1385.232609][T16738] CPU: 0 PID: 16738 Comm: syz.2.3255 Not tainted syzkaller #0 [ 1385.240222][T16738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1385.250301][T16738] Call Trace: [ 1385.253720][T16738] [ 1385.256781][T16738] dump_stack_lvl+0x188/0x24e [ 1385.261547][T16738] ? __lock_acquire+0x7bd0/0x7bd0 [ 1385.266622][T16738] ? show_regs_print_info+0x12/0x12 [ 1385.271835][T16738] ? load_image+0x410/0x410 [ 1385.276377][T16738] ? __virt_addr_valid+0x467/0x540 [ 1385.281559][T16738] ? try_module_get+0x4f/0xf0 [ 1385.286242][T16738] print_report+0xa8/0x210 [ 1385.290694][T16738] kasan_report+0x10b/0x140 [ 1385.295288][T16738] ? try_module_get+0x4f/0xf0 [ 1385.299968][T16738] kasan_check_range+0x235/0x290 [ 1385.304909][T16738] try_module_get+0x4f/0xf0 [ 1385.309404][T16738] dvb_device_open+0xf0/0x360 [ 1385.314120][T16738] chrdev_open+0x585/0x5f0 [ 1385.318580][T16738] ? cd_forget+0x160/0x160 [ 1385.322991][T16738] ? fsnotify_perm+0x39b/0x550 [ 1385.327807][T16738] ? cd_forget+0x160/0x160 [ 1385.332235][T16738] do_dentry_open+0x7dd/0x10b0 [ 1385.337051][T16738] path_openat+0x2674/0x2f10 [ 1385.341745][T16738] ? verify_lock_unused+0x140/0x140 [ 1385.346951][T16738] ? do_sys_openat2+0xdd/0x4f0 [ 1385.351720][T16738] ? do_filp_open+0x420/0x420 [ 1385.356422][T16738] do_filp_open+0x1ee/0x420 [ 1385.360930][T16738] ? vfs_tmpfile+0x470/0x470 [ 1385.365525][T16738] ? _raw_spin_unlock+0x24/0x40 [ 1385.370469][T16738] ? alloc_fd+0x590/0x640 [ 1385.374840][T16738] do_sys_openat2+0x14b/0x4f0 [ 1385.379617][T16738] ? do_sys_open+0xe0/0xe0 [ 1385.384031][T16738] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1385.390015][T16738] ? lock_chain_count+0x20/0x20 [ 1385.394962][T16738] __x64_sys_openat+0x135/0x160 [ 1385.399826][T16738] do_syscall_64+0x4c/0xa0 [ 1385.404264][T16738] ? clear_bhb_loop+0x60/0xb0 [ 1385.409040][T16738] ? clear_bhb_loop+0x60/0xb0 [ 1385.413738][T16738] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1385.419771][T16738] RIP: 0033:0x7f0555d5d68e [ 1385.424254][T16738] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1385.444190][T16738] RSP: 002b:00007f0556be2b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1385.452674][T16738] RAX: ffffffffffffffda RBX: 00007f0556be36c0 RCX: 00007f0555d5d68e [ 1385.460934][T16738] RDX: 0000000000000c02 RSI: 00007f0556be2c00 RDI: ffffffffffffff9c [ 1385.468916][T16738] RBP: 00007f0556be2c00 R08: 0000000000000000 R09: 0000000000000000 [ 1385.476904][T16738] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1385.484884][T16738] R13: 00007f0556016128 R14: 00007f0556016090 R15: 00007fff6fa1a348 [ 1385.492860][T16738] [ 1385.495912][T16738] [ 1385.498245][T16738] Allocated by task 1: [ 1385.502341][T16738] kasan_set_track+0x4b/0x70 [ 1385.506983][T16738] __kasan_kmalloc+0x8e/0xa0 [ 1385.511589][T16738] dvb_register_device+0x305/0x1dc0 [ 1385.516789][T16738] dvb_dmxdev_init+0x2bf/0x410 [ 1385.521575][T16738] vidtv_bridge_probe+0xb6b/0xf50 [ 1385.526727][T16738] platform_probe+0x137/0x1c0 [ 1385.531471][T16738] really_probe+0x24a/0xb40 [ 1385.535993][T16738] __driver_probe_device+0x1f5/0x390 [ 1385.541290][T16738] driver_probe_device+0x4f/0x420 [ 1385.546318][T16738] __driver_attach+0x43d/0x6c0 [ 1385.551185][T16738] bus_for_each_dev+0x182/0x1f0 [ 1385.556048][T16738] bus_add_driver+0x324/0x5d0 [ 1385.560750][T16738] driver_register+0x32d/0x430 [ 1385.565582][T16738] vidtv_bridge_init+0x39/0x67 [ 1385.570464][T16738] do_one_initcall+0x257/0x800 [ 1385.575247][T16738] do_initcall_level+0x13d/0x1ed [ 1385.580193][T16738] do_initcalls+0x4b/0x8a [ 1385.584605][T16738] kernel_init_freeable+0x401/0x5ab [ 1385.589877][T16738] kernel_init+0x19/0x1b0 [ 1385.594233][T16738] ret_from_fork+0x1f/0x30 [ 1385.598668][T16738] [ 1385.601005][T16738] The buggy address belongs to the object at ffff888029288400 [ 1385.601005][T16738] which belongs to the cache kmalloc-256 of size 256 [ 1385.615178][T16738] The buggy address is located 160 bytes to the right of [ 1385.615178][T16738] 256-byte region [ffff888029288400, ffff888029288500) [ 1385.628997][T16738] [ 1385.631335][T16738] The buggy address belongs to the physical page: [ 1385.637801][T16738] page:ffffea0000a4a200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x29288 [ 1385.647970][T16738] head:ffffea0000a4a200 order:1 compound_mapcount:0 compound_pincount:0 [ 1385.656289][T16738] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1385.664399][T16738] raw: 00fff00000010200 ffffea00018ad280 dead000000000006 ffff888017441b40 [ 1385.672976][T16738] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 1385.681547][T16738] page dumped because: kasan: bad access detected [ 1385.687948][T16738] page_owner tracks the page as allocated [ 1385.693671][T16738] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 17017726272, free_ts 0 [ 1385.713405][T16738] post_alloc_hook+0x173/0x1a0 [ 1385.718226][T16738] get_page_from_freelist+0x206b/0x2180 [ 1385.723780][T16738] __alloc_pages+0x1ec/0x4f0 [ 1385.728364][T16738] alloc_page_interleave+0x24/0x1e0 [ 1385.733592][T16738] alloc_slab_page+0x5d/0x180 [ 1385.738265][T16738] new_slab+0x87/0x2d0 [ 1385.742346][T16738] ___slab_alloc+0xbc5/0x1240 [ 1385.747076][T16738] __kmem_cache_alloc_node+0x126/0x270 [ 1385.752539][T16738] kmalloc_trace+0x26/0xe0 [ 1385.757027][T16738] bus_add_driver+0xdc/0x5d0 [ 1385.761632][T16738] driver_register+0x32d/0x430 [ 1385.766411][T16738] vidtv_bridge_init+0x39/0x67 [ 1385.771196][T16738] do_one_initcall+0x257/0x800 [ 1385.775987][T16738] do_initcall_level+0x13d/0x1ed [ 1385.780931][T16738] do_initcalls+0x4b/0x8a [ 1385.785268][T16738] kernel_init_freeable+0x401/0x5ab [ 1385.790593][T16738] page_owner free stack trace missing [ 1385.795978][T16738] [ 1385.798299][T16738] Memory state around the buggy address: [ 1385.803992][T16738] ffff888029288480: 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc [ 1385.812061][T16738] ffff888029288500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1385.820123][T16738] >ffff888029288580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1385.828207][T16738] ^ [ 1385.833332][T16738] ffff888029288600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1385.841445][T16738] ffff888029288680: 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc [ 1385.849499][T16738] ================================================================== [ 1385.858705][T16738] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1385.865916][T16738] CPU: 0 PID: 16738 Comm: syz.2.3255 Not tainted syzkaller #0 [ 1385.873374][T16738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1385.883443][T16738] Call Trace: [ 1385.886749][T16738] [ 1385.889706][T16738] dump_stack_lvl+0x188/0x24e [ 1385.894422][T16738] ? memcpy+0x3c/0x60 [ 1385.898425][T16738] ? show_regs_print_info+0x12/0x12 [ 1385.903625][T16738] ? load_image+0x410/0x410 [ 1385.908132][T16738] panic+0x2d3/0x710 [ 1385.912027][T16738] ? bpf_jit_dump+0xd0/0xd0 [ 1385.916530][T16738] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 1385.922525][T16738] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1385.928447][T16738] ? _raw_spin_unlock+0x40/0x40 [ 1385.933292][T16738] ? print_memory_metadata+0x314/0x400 [ 1385.938766][T16738] check_panic_on_warn+0x80/0xa0 [ 1385.943774][T16738] ? try_module_get+0x4f/0xf0 [ 1385.948441][T16738] end_report+0x66/0x110 [ 1385.952684][T16738] kasan_report+0x118/0x140 [ 1385.957202][T16738] ? try_module_get+0x4f/0xf0 [ 1385.961882][T16738] kasan_check_range+0x235/0x290 [ 1385.966817][T16738] try_module_get+0x4f/0xf0 [ 1385.971315][T16738] dvb_device_open+0xf0/0x360 [ 1385.975989][T16738] chrdev_open+0x585/0x5f0 [ 1385.980410][T16738] ? cd_forget+0x160/0x160 [ 1385.984819][T16738] ? fsnotify_perm+0x39b/0x550 [ 1385.989595][T16738] ? cd_forget+0x160/0x160 [ 1385.994005][T16738] do_dentry_open+0x7dd/0x10b0 [ 1385.998780][T16738] path_openat+0x2674/0x2f10 [ 1386.003386][T16738] ? verify_lock_unused+0x140/0x140 [ 1386.008581][T16738] ? do_sys_openat2+0xdd/0x4f0 [ 1386.013351][T16738] ? do_filp_open+0x420/0x420 [ 1386.018025][T16738] do_filp_open+0x1ee/0x420 [ 1386.022528][T16738] ? vfs_tmpfile+0x470/0x470 [ 1386.027119][T16738] ? _raw_spin_unlock+0x24/0x40 [ 1386.031966][T16738] ? alloc_fd+0x590/0x640 [ 1386.036291][T16738] do_sys_openat2+0x14b/0x4f0 [ 1386.040964][T16738] ? do_sys_open+0xe0/0xe0 [ 1386.045376][T16738] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1386.051366][T16738] ? lock_chain_count+0x20/0x20 [ 1386.056210][T16738] __x64_sys_openat+0x135/0x160 [ 1386.061068][T16738] do_syscall_64+0x4c/0xa0 [ 1386.065497][T16738] ? clear_bhb_loop+0x60/0xb0 [ 1386.070186][T16738] ? clear_bhb_loop+0x60/0xb0 [ 1386.074865][T16738] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1386.080775][T16738] RIP: 0033:0x7f0555d5d68e [ 1386.085197][T16738] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1386.104987][T16738] RSP: 002b:00007f0556be2b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1386.113450][T16738] RAX: ffffffffffffffda RBX: 00007f0556be36c0 RCX: 00007f0555d5d68e [ 1386.121426][T16738] RDX: 0000000000000c02 RSI: 00007f0556be2c00 RDI: ffffffffffffff9c [ 1386.129429][T16738] RBP: 00007f0556be2c00 R08: 0000000000000000 R09: 0000000000000000 [ 1386.137411][T16738] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1386.145413][T16738] R13: 00007f0556016128 R14: 00007f0556016090 R15: 00007fff6fa1a348 [ 1386.153406][T16738] [ 1386.156686][T16738] Kernel Offset: disabled [ 1386.161023][T16738] Rebooting in 86400 seconds..