last executing test programs: 8m59.167314478s ago: executing program 1 (id=27): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "d6776a312b7affbb", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r3, 0x0, 0x20000000002) 8m56.384094913s ago: executing program 1 (id=33): socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) syz_open_dev$radio(&(0x7f0000000040), 0x3, 0x2) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) 8m53.696036917s ago: executing program 1 (id=41): prctl$PR_SET_MM(0x41555856, 0x9, &(0x7f0000ffa000/0x3000)=nil) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000340)='.\x00', 0xa50003d1) readv(r2, &(0x7f0000004940)=[{&(0x7f00000047c0)=""/68, 0x44}], 0x1) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) 8m50.066570472s ago: executing program 1 (id=47): r0 = syz_ublk_setup_io_uring(0xed2, &(0x7f0000000240)={0x0, 0x4436, 0x80, 0x1024002, 0x4d}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000000c0), 0x1, 0x40, 0x1}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c000000180017"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x1, 0xf60, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x180}}}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000407f04ffff00000000000109022400010000000009040000020300000009210000000122180009058103000000000060bece57efcfc30535d01d15e0cb6df088b149f980fc5055d3a75e0a1898b83f4ec05a97e3fe1eb4a85ec88395becb5b7341459473008764e82cda"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) read$eventfd(r4, &(0x7f0000000340), 0x8) 8m44.935856323s ago: executing program 1 (id=55): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) 8m39.016939613s ago: executing program 1 (id=66): syz_open_dev$swradio(0x0, 0x1, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) listxattr(&(0x7f0000000180)='./mnt\x00', 0x0, 0x0) flock(0xffffffffffffffff, 0x20) syz_open_dev$tty1(0xc, 0x4, 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x4010744d, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000025300)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000000)={0x600, 0x1000000}) 8m23.471031839s ago: executing program 32 (id=66): syz_open_dev$swradio(0x0, 0x1, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) listxattr(&(0x7f0000000180)='./mnt\x00', 0x0, 0x0) flock(0xffffffffffffffff, 0x20) syz_open_dev$tty1(0xc, 0x4, 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x4010744d, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000025300)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000000)={0x600, 0x1000000}) 18.953535923s ago: executing program 3 (id=1085): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x7ff, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x1}]}, &(0x7f0000000100)=0x10) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000340)="0000000000000002ff69000000000001000000c000000006000200861f", 0x1d, 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000180)=0x4) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) write(0xffffffffffffffff, &(0x7f0000000900)="5b026c7c84c906313302b74cffc27a06877c09dc61343ab65276f8fec7d70d600a4e16599c827105ac95a27e5d69965d6efcf10b548be2c2652136869bf33ebba0c83ceb383ae23d8de5c6a723a02371626ed111780e5753699f245bdaf68f90deb799a63358aaf3477cbdc040bbc446c98091e167", 0x75) socket$inet_smc(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000085000000a000000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040)=r7, 0x4) 17.81789252s ago: executing program 4 (id=1087): prctl$PR_SET_MM(0x4e, 0x1, &(0x7f0000ffa000/0x3000)=nil) openat$audio1(0xffffffffffffff9c, &(0x7f0000000380), 0x80001, 0x0) fsopen(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x13, 0xffffffffffffffff, 0x0) socket(0xa, 0x801, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000ffc000/0x2000)=nil, 0x930, 0x0, 0x24132, 0xffffffffffffffff, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 17.070844008s ago: executing program 3 (id=1088): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x2, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @ioapic={0x2000, 0x5, 0x4, 0x9, 0x0, [{0x7, 0x3, 0x5a, '\x00', 0xcd}, {0x4, 0x9, 0x6, '\x00', 0xb}, {0x6, 0xfe, 0x3c, '\x00', 0x4}, {0xa, 0x40, 0x8, '\x00', 0x3}, {0x2, 0x7, 0x8, '\x00', 0x3}, {0x6, 0x4, 0x5, '\x00', 0x82}, {0x0, 0x80, 0x2, '\x00', 0x9}, {0x7, 0x7f, 0x28, '\x00', 0xbb}, {0x40, 0x3a, 0xa7, '\x00', 0xf}, {0x7, 0x6, 0x8, '\x00', 0x7}, {0x4, 0x4, 0x7, '\x00', 0x10}, {0x5, 0x5, 0x34}, {0x7, 0x46, 0x7, '\x00', 0x9}, {0xc, 0x1, 0x8c, '\x00', 0x9}, {0xfa, 0xdf, 0x1, '\x00', 0x1}, {0x80, 0x5, 0xb, '\x00', 0x15}, {0x7, 0x60, 0x5, '\x00', 0x81}, {0x1, 0x2, 0xe}, {0xb4, 0x0, 0x4, '\x00', 0x7}, {0x4, 0x7f, 0x3, '\x00', 0x32}, {0x8, 0xfd, 0x4, '\x00', 0x4}, {0x3, 0x7, 0x5, '\x00', 0xdd}, {0x8, 0x2, 0x5, '\x00', 0x3}, {0x0, 0x40, 0x8, '\x00', 0x6}]}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x0, 0x20, 0x3, 0x0, 0x106c, 0x80000001, 0x8000000000000, 0x80000004000080, 0x0, 0x8, 0x0, 0x4, 0x9, 0x8001], 0x1, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16.941450581s ago: executing program 5 (id=1091): socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r3, &(0x7f0000000300)='p:test/event1 ./file0:0x0 arg2=-', 0x20) 15.983512223s ago: executing program 5 (id=1093): r0 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0xa14a, 0x1000, 0x2, 0x235}) r1 = socket$rds(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) mq_unlink(&(0x7f0000000100)='\\%,\x00') bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000300)=""/4, 0x4}], 0x1, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18}, 0x4000000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/current_tracer\x00', 0x1, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 15.442603606s ago: executing program 3 (id=1095): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x2, 0xe69, 0x0, 0x0, 0x1000, 0x86, r0, 0x0, 0x30}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x2, 0x33d, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7396, 0x420, 0x0, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x727f, 0x80, 0xffffffff, 0x135}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x1, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) 13.286874287s ago: executing program 4 (id=1097): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fanotify_init(0x200, 0x0) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x4430, 0x80000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x2011}}) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) syz_ublk_setup_io_uring(0x1d, 0x0, 0x0, 0x0, &(0x7f0000000140)) mount$bind(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240), 0x1000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa, 0x2}, 0xe) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbfe, {}, [{0x3c, 0x1, [@m_mpls={0x38, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x5591b}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000010}, 0x44045) socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x12, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000000000000000000000000008500000056000000180000000000000000000000000000009500000000000000846bdab3ee67"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x94) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = syz_io_uring_setup(0x315b, &(0x7f0000000080)={0x0, 0xcfca, 0x1042, 0x6, 0x354}, &(0x7f0000009e40), &(0x7f0000000300), &(0x7f0000000000)) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) io_uring_register$IORING_REGISTER_IOWQ_AFF(r6, 0x11, &(0x7f00000026c0)='\\', 0x1) r7 = socket(0x400000000010, 0x3, 0x0) write(r7, &(0x7f0000000040)="0f03000019002551075c0165ff0ffc02802000030011000500e1000cee0203001a000000", 0x33a) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r6, 0xc, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="18120000", @ANYRES32=r5, @ANYBLOB="00d551c3a40000007c05000000020000000000000c000000b700000000000000b000000000000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) dup3(r0, 0xffffffffffffffff, 0x80000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r5, 0x58}, 0xffffffffffffff0b) 12.503771736s ago: executing program 2 (id=1098): socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$radio(&(0x7f0000000040), 0x3, 0x2) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) 9.963877845s ago: executing program 2 (id=1099): syz_open_dev$swradio(0x0, 0x1, 0x2) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) listxattr(&(0x7f0000000180)='./mnt\x00', 0x0, 0x0) flock(0xffffffffffffffff, 0x20) syz_open_dev$tty1(0xc, 0x4, 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x4010744d, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000025300)=""/102392, 0x18ff8) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000000)={0x600, 0x1000000}) 9.881240398s ago: executing program 3 (id=1101): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00'}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000001000000000000fcffffff00000000000000000000001000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000007000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000650901000000000066000000060000000000009af8ff000000005d9100000002000037010000f8ffffffb702000008000079f662f1848fe82a892700b70300000200000056000000060000002c93000000000000b5030000000000008500000078000000b70000000000"], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000140)={@mcast1}, 0x14) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000340)='.\x00', 0xa50003d1) readv(r4, &(0x7f0000004940)=[{&(0x7f00000047c0)=""/68, 0x44}], 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) 9.813175599s ago: executing program 4 (id=1102): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) read$FUSE(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000040), &(0x7f0000000440)=0x8) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) socket$kcm(0x29, 0x2, 0x0) 8.955962549s ago: executing program 0 (id=1103): openat$sequencer2(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="adcd1a9a3fc36e961ed00fe41b0cd69504a93b22de4d307894d5d308bf40560fef910001d079e7ef7999ba45e9ea808d165ec4be287dfdee382206d045cb73b2d56e13ec1121aa907f18a7b813f0ce8c0224c25fc04925656fd7e064", 0x5c) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0xc}], 0x1, 0x800) keyctl$read(0xb, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mknod(&(0x7f00000000c0)='./bus\x00', 0x8000, 0xd02) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001a00010027bd7000ffdbdf251c200007ff04000b001300000c00090003000205", @ANYRES32=0x0, @ANYBLOB="1400120003002c16d39f4eced36e537b22ff900f080001042e37d3cad7a80d0eee08dab5c10000000000"], 0x44}, 0x1, 0x0, 0x0, 0x840}, 0x20004080) r4 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') r5 = openat(r4, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) write(r5, &(0x7f0000000d00)=' f 127.0.0.1 2\\000\\00 : l\\calhost\n', 0x24) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000100)={0x0, @dev, @empty}, &(0x7f0000000180)=0xc) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e0000008da47f56090000000000000000100000", @ANYRES32=r5, @ANYBLOB="ffffff7f00"/20, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="020000000100000001000079ca000000000000"], 0x50) acct(0x0) socket$netlink(0x10, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, 0x0, &(0x7f0000000280)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) mount(0x0, 0x0, 0x0, 0x44021, 0x0) 8.739401614s ago: executing program 4 (id=1104): connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'pimreg0\x00'}}, 0x1e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xd40c, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x2, 0xe69, 0x0, 0x0, 0x1000, 0x86, r0, 0x0, 0x30}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x2, 0x33d, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7396, 0x420, 0x0, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x727f, 0x80, 0xffffffff, 0x135}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x1, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) 8.659865736s ago: executing program 5 (id=1105): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0xa, 0x6, 0xfb, 0x7f}, {0x9, 0xa, 0x1, 0x7}, {0x1, 0x80, 0x7f, 0x9}, {0x5, 0x2, 0x1, 0x8}, {0x0, 0x2, 0x80, 0x6}]}) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB], 0x50) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xffffffff, @loopback, 0xc}, {0xa, 0x4e1e, 0x800000d, @local}, r5, 0x800}}, 0x48) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x121a02, 0x0) sendfile(r6, r3, &(0x7f0000002700)=0x23, 0x1c) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000000140)={0x27}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000086fc000085000000860000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 7.21770898s ago: executing program 4 (id=1106): sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000140)={0x18c, 0x0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x178, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x172, 0x4, "fc654c187d6eb5f0ca15095cc8787b50b96435ad3147dd10e867248d37187c2a131a62d105462ce34d5cf8ded36159aea612a3460534d8c298556e91590238f40dd2c7148d365ab6cdd5f2a7f74bac8d59f731c655a46917f18b28ed05e58b70287d26677601258a5c0ab9f679e2e520228c3a1f1aede04c6ba82cc38cc2ab6b35a24fb20e032dedf6f6caf4bfea5435f746f746fd46ca192e3744eb6908b358c10833bf484237ba654641e6186a45957c6345e61ea620fdc74383ce1df4a24e7044bae596f018736424a5bfa438865044e7026fa37a3540fadd0e89d87aecd3bc127e0cb10274991d6127224a0f2a4ef19e2c4dedbe45f2471abcc38c584ead0e3df3f9211022b2421fb6b327361e8f58f2b73134fc5444b350ede95ecef5bbbf9950e75c9f772a3ff0180d2cfac287228709726a6abbab2971982de7f1a9149d71dcbfd212e89ff17cf284b7f8ad82a469cb1c1e3d9d1d3689271c8dad0ba89dda651d4242062ac0bc5877e397"}]}]}, 0x18c}}, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000840)={0x2c, &(0x7f0000000680)={0x0, 0x5, 0x4, "0c8ac451"}, 0x0, 0x0, 0x0, 0x0}) 7.21551122s ago: executing program 2 (id=1107): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_io_uring_setup(0x315b, &(0x7f0000000080)={0x0, 0xcfca, 0x1042, 0x6, 0x354}, &(0x7f0000009e40), &(0x7f0000000300), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_AFF(r0, 0x11, &(0x7f00000026c0)='\\', 0x1) 6.239398873s ago: executing program 5 (id=1108): sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x40854}, 0x4844) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x140000d0}, 0x20048810) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 6.119926116s ago: executing program 2 (id=1109): socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$radio(&(0x7f0000000040), 0x3, 0x2) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) 5.202208048s ago: executing program 3 (id=1110): syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) userfaultfd(0x801) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000540)=@mangle={'mangle\x00', 0x64, 0x6, 0x798, 0x550, 0x1f0, 0x408, 0x550, 0x120, 0x6c8, 0x6c8, 0x6c8, 0x6c8, 0x6c8, 0x6, 0x0, {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@length={{0x28}, {0x7, 0xb0, 0x81}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@mcast2, @loopback, [0x0, 0x0, 0xff0000ff], [0x0, 0x0, 0x0, 0xff000000], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0x1d0, 0x218, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@recent0={{0xf8}, {0x9, 0x58, 0x4, 0x1, 'syz0\x00', 0x9}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv6=@private1, 0x0, 0x38}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}, {0xfffffffc, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe]}}, @common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x1, 0x8]}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x7f8) 4.188778861s ago: executing program 2 (id=1111): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x1) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x7, 0xffffffff91020258, 0x200, 0x1, 0x4, 0x992, 0x0, 0x0, 0x124, 0x5}}, 0x50) r1 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r1, 0x2007ffb) sendfile(r1, r1, 0x0, 0x1000000201005) 4.050874784s ago: executing program 5 (id=1112): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x2, 0xe69, 0x0, 0x0, 0x1000, 0x86, r0, 0x0, 0x30}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x80000, 0x2, 0x33d, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7396, 0x420, 0x0, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x727f, 0x80, 0xffffffff, 0x135}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x1, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) 3.988672546s ago: executing program 0 (id=1113): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x14, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x458, 0xb, 0x0, 0xfeffffff, 0xf0, 0x218, 0x3c0, 0x3c0, 0xffffffff, 0x3c0, 0x3c0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x4}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}}, @common=@set={{0x40}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x22, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r8, 0x4048aecb, &(0x7f00000006c0)={0x7, 0x0, [{0xc0000000, 0xffffffff, 0x0, 0x7fffffff, 0x40006, 0x6, 0x1}, {0xc0000001, 0x4, 0x0, 0x11, 0x27, 0x7, 0xf8d1}, {0xd, 0x8, 0x0, 0xffff, 0x7fffffff, 0x2, 0x2}, {0x80000008, 0x10, 0x1, 0x0, 0xdf4, 0x6, 0x80000001}, {0xd, 0x2bb, 0x0, 0xa, 0x3, 0x80000001, 0x400}, {0x80000000, 0x100, 0x0, 0x2, 0x1, 0x2000001, 0x7}, {0x80000001, 0x200, 0x6, 0x68be, 0x8, 0x2}]}) 3.577388406s ago: executing program 0 (id=1114): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000200)={0x0, 0x7, 0x4, 0x0, 0x2, 0x1}) r0 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0xa14a, 0x1000, 0x2, 0x235}) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) sendmsg$rds(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000300)=""/4, 0x4}], 0x1, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18}, 0x4000000) close_range(r0, 0xffffffffffffffff, 0x0) 2.532896221s ago: executing program 0 (id=1115): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) read$FUSE(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000040), &(0x7f0000000440)=0x8) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) socket$kcm(0x29, 0x2, 0x0) 2.323484716s ago: executing program 2 (id=1116): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e040000000000000000"], 0x0, 0x52}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0x3, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x2}, 0x94) dup(0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x400, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x20002, 0x0) pwritev(r2, &(0x7f0000000880)=[{&(0x7f0000000040)="86", 0x1}], 0x1, 0x403, 0x20000000) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000280)={0x1, 0x0, [{0x3, 0x5, 0x0, 0x0, @adapter={0x5, 0x7fffffffffffffff, 0x8000000000000001, 0x80, 0x3}}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0x1ff, 0x3ff, 0x7f, 0x20004, r0, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffff, 0x3, 0x2}, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_disconnect(r4) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_emit_ethernet(0x42, &(0x7f0000000240)={@remote, @remote, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0xa, @broadcast, @loopback, @random="4d3f91828c8a", @private2}}}}, &(0x7f00000002c0)={0x1, 0x2, [0xf00, 0x7a0, 0x1e4, 0xf36]}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x1, 0x802) 1.617463802s ago: executing program 5 (id=1117): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x6) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c000200"], 0x20}}, 0x0) 1.434771176s ago: executing program 0 (id=1118): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0xa, 0x6, 0xfb, 0x7f}, {0x9, 0xa, 0x1, 0x7}, {0x1, 0x80, 0x7f, 0x9}, {0x5, 0x2, 0x1, 0x8}, {0x0, 0x2, 0x80, 0x6}]}) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB], 0x50) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0)={0xffffffffffffffff}, 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xffffffff, @loopback, 0xc}, {0xa, 0x4e1e, 0x800000d, @local}, r5, 0x800}}, 0x48) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x121a02, 0x0) sendfile(r6, r3, &(0x7f0000002700)=0x23, 0x1c) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000000140)={0x27}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000086fc000085000000860000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 579.711766ms ago: executing program 3 (id=1119): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(r0, 0x1, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x11}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000100)={0x0, 'veth1_to_batadv\x00', {0x4}, 0x26}) 133.357397ms ago: executing program 4 (id=1120): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00'}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000001000000000000fcffffff00000000000000000000001000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000007000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000650901000000000066000000060000000000009af8ff000000005d9100000002000037010000f8ffffffb702000008000079f662f1848fe82a892700b70300000200000056000000060000002c93000000000000b5030000000000008500000078000000b70000000000"], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000140)={@mcast1}, 0x14) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000340)='.\x00', 0xa50003d1) readv(r4, &(0x7f0000004940)=[{&(0x7f00000047c0)=""/68, 0x44}], 0x1) syz_emit_ethernet(0x0, 0x0, 0x0) 0s ago: executing program 0 (id=1121): socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$radio(&(0x7f0000000040), 0x3, 0x2) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) kernel console output (not intermixed with test programs): 356][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 209.899290][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 209.908191][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 209.917185][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 209.996796][ T14] usb 3-1: Using ep0 maxpacket: 32 [ 210.005092][ T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.045228][ T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.046243][ T5303] device hsr_slave_0 entered promiscuous mode [ 210.061730][ T14] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 210.080006][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.088628][ T5303] device hsr_slave_1 entered promiscuous mode [ 210.105949][ T5303] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 210.107440][ T14] usb 3-1: config 0 descriptor?? [ 210.114071][ T5303] Cannot create hsr debugfs directory [ 210.140550][ T4424] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.157477][ T4424] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.193754][ T14] hub 3-1:0.0: USB hub found [ 210.207149][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 210.221478][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 210.261289][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 210.346519][ T5098] device veth0_macvtap entered promiscuous mode [ 210.387828][ T14] hub 3-1:0.0: 1 port detected [ 210.432649][ T5098] device veth1_macvtap entered promiscuous mode [ 210.862876][ T14] usb 3-1: USB disconnect, device number 6 [ 210.970325][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.139566][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.283192][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.293780][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.303680][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.314321][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.324308][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.334820][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.355769][ T5098] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.364503][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 211.392205][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 211.462454][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 211.509982][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 211.560803][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.586761][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.605672][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.625773][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.645610][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.685925][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.741425][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.805654][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.890411][ T5098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.010864][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 212.096240][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 212.351778][ T5098] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.501084][ T5098] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.555743][ T5098] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.592537][ T5098] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.690538][ T5421] netlink: 'syz.2.211': attribute type 29 has an invalid length. [ 212.997639][ T4321] Process accounting resumed [ 213.772739][ T5421] netlink: 'syz.2.211': attribute type 29 has an invalid length. [ 213.788699][ T5423] netlink: 'syz.2.211': attribute type 29 has an invalid length. [ 213.797155][ T5431] netlink: 'syz.2.211': attribute type 29 has an invalid length. [ 214.010906][ T4334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.050906][ T4334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.071125][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 214.112249][ T4430] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.130791][ T4430] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.176098][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 215.839574][ T5303] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 215.871961][ T5303] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 215.939077][ T5303] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 215.986953][ T5303] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 217.938257][ T5303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.965357][ T26] audit: type=1800 audit(1788862759.867:2): pid=5480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.222" name=8006 dev="sda1" ino=2054 res=0 errno=0 [ 219.496431][ T5480] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 219.536604][ T5303] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.544239][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 219.556411][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 219.637096][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 219.648181][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 219.674468][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.681999][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.698603][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 219.711389][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 219.731994][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.739435][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.805971][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 219.944765][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 220.249818][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 220.497854][ T5498] netlink: 'syz.3.225': attribute type 29 has an invalid length. [ 220.606505][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 220.617066][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 220.630431][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 220.638828][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 220.654359][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 220.717913][ T5498] netlink: 'syz.3.225': attribute type 29 has an invalid length. [ 220.727248][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 220.738057][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 220.746696][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 220.758632][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 220.775893][ T5502] netlink: 'syz.3.225': attribute type 29 has an invalid length. [ 220.795972][ T5495] netlink: 'syz.3.225': attribute type 29 has an invalid length. [ 220.848634][ T5303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 222.465676][ T4320] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 222.665611][ T4320] usb 5-1: Using ep0 maxpacket: 32 [ 222.677378][ T4320] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.695624][ T4320] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.712685][ T4320] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 222.728795][ T4320] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.744872][ T4320] usb 5-1: config 0 descriptor?? [ 222.771384][ T4320] hub 5-1:0.0: USB hub found [ 223.060751][ T4320] hub 5-1:0.0: 1 port detected [ 223.323768][ T5527] ip_tables: iptables: counters copy to user failed while replacing table [ 223.532238][ T4320] usb 5-1: USB disconnect, device number 8 [ 225.761524][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 225.769128][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 225.929984][ T5303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.517403][ T5573] netlink: 'syz.4.240': attribute type 29 has an invalid length. [ 228.555708][ T5573] netlink: 'syz.4.240': attribute type 29 has an invalid length. [ 229.794131][ T5573] netlink: 'syz.4.240': attribute type 29 has an invalid length. [ 229.927260][ T5581] netlink: 'syz.4.240': attribute type 29 has an invalid length. [ 231.030861][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 231.095795][ T126] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 231.105246][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 231.110065][ T5592] ip_tables: iptables: counters copy to user failed while replacing table [ 231.375857][ T126] usb 5-1: Using ep0 maxpacket: 32 [ 231.988945][ T126] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 232.008142][ T126] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 232.033994][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 232.079815][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 232.088625][ T126] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 232.162112][ T5303] device veth0_vlan entered promiscuous mode [ 232.178637][ T126] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 232.190187][ T5303] device veth1_vlan entered promiscuous mode [ 232.216618][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 232.234329][ T4342] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 232.235573][ T126] usb 5-1: config 0 interface 0 has no altsetting 0 [ 232.298064][ T126] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 232.308556][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 232.325673][ T126] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 232.343414][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 232.345564][ T126] usb 5-1: Product: syz [ 232.365593][ T126] usb 5-1: Manufacturer: syz [ 232.366827][ T5303] device veth0_macvtap entered promiscuous mode [ 232.370232][ T126] usb 5-1: SerialNumber: syz [ 232.407427][ T5303] device veth1_macvtap entered promiscuous mode [ 232.444344][ T126] usb 5-1: config 0 descriptor?? [ 232.463827][ T126] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 232.482428][ T5303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.506685][ T5303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.529620][ T126] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 232.571489][ T5303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.603779][ T5303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.627034][ T5303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.647845][ T5303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.686309][ T5303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.854913][ T5303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.911055][ T5303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.935131][ T4320] usb 5-1: USB disconnect, device number 9 [ 232.935139][ C0] ldusb 5-1:0.0: usb_submit_urb failed (-19) [ 233.273470][ T4320] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 233.294133][ T5303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.548458][ T5303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.569533][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 233.584701][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 233.594291][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 233.604101][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 233.622508][ T5303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.634478][ T5303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.644848][ T5303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.656386][ T5303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.666381][ T5303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.676950][ T5303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.687317][ T5303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.698766][ T5303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.709623][ T5303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.720631][ T5303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.737633][ T5303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.749784][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 233.768478][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 234.660164][ T5303] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.710139][ T5303] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.741491][ T5303] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.781754][ T5303] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.915710][ T7] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 235.945681][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 235.960674][ T7] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 236.008978][ T7] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 236.868777][ T7] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 236.920404][ T4342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.934286][ T4342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.962809][ T7] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 237.024004][ T7] usb 1-1: config 0 interface 0 has no altsetting 0 [ 237.070882][ T7] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 237.096994][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 237.132607][ T4492] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.144089][ T7] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 237.157417][ T4492] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.180813][ T7] usb 1-1: Product: syz [ 237.199024][ T7] usb 1-1: Manufacturer: syz [ 237.204661][ T5532] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 237.235472][ T7] usb 1-1: SerialNumber: syz [ 237.261075][ T7] usb 1-1: config 0 descriptor?? [ 237.280835][ T7] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 237.313897][ T7] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 238.512374][ T7] usb 1-1: USB disconnect, device number 5 [ 238.535432][ T7] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 239.980314][ T5654] netlink: 'syz.3.254': attribute type 29 has an invalid length. [ 240.033646][ T5654] netlink: 'syz.3.254': attribute type 29 has an invalid length. [ 240.104777][ T5656] netlink: 'syz.3.254': attribute type 29 has an invalid length. [ 240.152924][ T5658] netlink: 'syz.3.254': attribute type 29 has an invalid length. [ 241.652388][ T5625] syz.2.246 (5625): drop_caches: 2 [ 243.493645][ T5694] ip_tables: iptables: counters copy to user failed while replacing table [ 246.135736][ T4363] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 247.039186][ T5727] netlink: 'syz.0.267': attribute type 29 has an invalid length. [ 247.065665][ T4363] usb 6-1: Using ep0 maxpacket: 32 [ 247.073252][ T4363] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 247.135667][ T4363] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 247.148994][ T5727] netlink: 'syz.0.267': attribute type 29 has an invalid length. [ 247.175932][ T4363] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 247.192056][ T5728] netlink: 'syz.0.267': attribute type 29 has an invalid length. [ 247.221066][ T4363] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 247.247243][ T5729] netlink: 'syz.0.267': attribute type 29 has an invalid length. [ 247.339923][ T4363] usb 6-1: config 0 interface 0 has no altsetting 0 [ 247.385096][ T4363] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 247.412193][ T4363] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 247.446748][ T4363] usb 6-1: Product: syz [ 247.451058][ T4363] usb 6-1: Manufacturer: syz [ 248.269088][ T4363] usb 6-1: SerialNumber: syz [ 248.284280][ T4363] usb 6-1: config 0 descriptor?? [ 248.297519][ T4363] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 248.324830][ T4363] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 248.908497][ T22] usb 6-1: USB disconnect, device number 3 [ 251.077027][ T22] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 252.186965][ T5763] fuse: Bad value for 'user_id' [ 255.676013][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.682388][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.874578][ T6144] process 'syz.3.377' launched './file0' with NULL argv: empty string added [ 270.310080][ T6326] capability: warning: `syz.0.441' uses 32-bit capabilities (legacy support in use) [ 275.134696][ T6399] ip_tables: iptables: counters copy to user failed while replacing table [ 275.645844][ T6405] xt_TCPMSS: Only works on TCP SYN packets [ 286.015839][ T6460] xt_TCPMSS: Only works on TCP SYN packets [ 293.585738][ T4283] Bluetooth: hci0: command 0x0406 tx timeout [ 296.736527][ T6526] netlink: 'syz.0.510': attribute type 29 has an invalid length. [ 297.765904][ T6526] netlink: 'syz.0.510': attribute type 29 has an invalid length. [ 297.913237][ T6532] netlink: 'syz.0.510': attribute type 29 has an invalid length. [ 298.025624][ T4319] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 298.053432][ T6538] netlink: 'syz.0.510': attribute type 29 has an invalid length. [ 298.221339][ T3600] Process accounting resumed [ 298.226777][ T4319] usb 3-1: Using ep0 maxpacket: 32 [ 298.247975][ T4319] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 298.865611][ T4319] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 298.935672][ T4319] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 299.005762][ T4319] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 299.065859][ T4319] usb 3-1: config 0 interface 0 has no altsetting 0 [ 299.107491][ T4319] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 299.125664][ T4319] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 299.150489][ T4319] usb 3-1: Product: syz [ 299.154851][ T4319] usb 3-1: Manufacturer: syz [ 299.959137][ T4319] usb 3-1: SerialNumber: syz [ 299.967336][ T4319] usb 3-1: config 0 descriptor?? [ 299.975181][ T4319] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 299.988822][ T4319] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 301.371136][ T4319] usb 3-1: USB disconnect, device number 7 [ 301.396967][ T4319] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 301.853511][ T5756] Process accounting resumed [ 303.825725][ T4286] Bluetooth: hci1: command 0x0406 tx timeout [ 305.535416][ T6586] syz.4.521 (6586) used greatest stack depth: 19184 bytes left [ 305.602289][ T26] audit: type=1800 audit(1788862847.507:3): pid=6588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.526" name=8006 dev="sda1" ino=2054 res=0 errno=0 [ 305.606897][ T6588] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 0 (only 8 groups) [ 308.358916][ T6610] netlink: 'syz.0.529': attribute type 29 has an invalid length. [ 308.441455][ T6610] netlink: 'syz.0.529': attribute type 29 has an invalid length. [ 308.487035][ T6615] fuse: Bad value for 'user_id' [ 308.544458][ T6611] netlink: 'syz.0.529': attribute type 29 has an invalid length. [ 308.598005][ T6610] netlink: 'syz.0.529': attribute type 29 has an invalid length. [ 309.591292][ T22] Process accounting resumed [ 311.025588][ T22] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 312.320322][ T22] usb 3-1: Using ep0 maxpacket: 32 [ 312.333495][ T22] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 312.388398][ T6652] ip_tables: iptables: counters copy to user failed while replacing table [ 312.480297][ T22] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 312.526602][ T22] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 313.495643][ T22] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 313.509893][ T22] usb 3-1: config 0 interface 0 has no altsetting 0 [ 313.527782][ T22] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 313.545556][ T22] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 313.554082][ T22] usb 3-1: Product: syz [ 313.560204][ T22] usb 3-1: Manufacturer: syz [ 313.566050][ T22] usb 3-1: SerialNumber: syz [ 313.586430][ T22] usb 3-1: config 0 descriptor?? [ 313.593910][ T22] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 313.619032][ T22] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 313.762635][ T22] usb 3-1: USB disconnect, device number 8 [ 314.701061][ T22] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 315.048906][ T6668] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 315.063958][ T6668] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 315.072265][ T6668] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 315.080305][ T6668] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 315.088648][ T6668] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 315.097426][ T6668] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 315.134420][ T6668] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 316.127597][ T3600] Process accounting resumed [ 317.109348][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.115914][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.270426][ T6698] netlink: 'syz.4.549': attribute type 29 has an invalid length. [ 317.315936][ T6698] netlink: 'syz.4.549': attribute type 29 has an invalid length. [ 317.354104][ T6702] netlink: 'syz.4.549': attribute type 29 has an invalid length. [ 317.386605][ T6698] netlink: 'syz.4.549': attribute type 29 has an invalid length. [ 318.035548][ T22] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 318.235680][ T22] usb 4-1: Using ep0 maxpacket: 32 [ 318.242636][ T22] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 318.275546][ T22] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 318.324314][ T22] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 318.375198][ T22] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 318.451158][ T22] usb 4-1: config 0 interface 0 has no altsetting 0 [ 318.498075][ T22] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 318.538190][ T22] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 318.561686][ T22] usb 4-1: Product: syz [ 318.567127][ T22] usb 4-1: Manufacturer: syz [ 318.572161][ T22] usb 4-1: SerialNumber: syz [ 318.598029][ T22] usb 4-1: config 0 descriptor?? [ 318.618967][ T22] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 318.646367][ T22] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 320.854656][ T126] usb 4-1: USB disconnect, device number 2 [ 320.864895][ T126] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 323.285761][ T5756] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 324.167295][ T5756] usb 6-1: config 1 has an invalid interface number: 27 but max is 1 [ 324.195558][ T5756] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 324.241796][ T5756] usb 6-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 324.645862][ T6753] xt_TCPMSS: Only works on TCP SYN packets [ 324.922521][ T4283] Bluetooth: hci3: command 0x0406 tx timeout [ 324.929260][ T5756] usb 6-1: config 1 has no interface number 2 [ 324.935958][ T5756] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x87 has invalid maxpacket 64 [ 324.947052][ T5756] usb 6-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 324.960474][ T5756] usb 6-1: config 1 interface 1 has no altsetting 0 [ 324.972896][ T5756] usb 6-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 324.985692][ T5756] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.998402][ T5756] usb 6-1: Product: syz [ 325.005781][ T5756] usb 6-1: Manufacturer: syz [ 325.014190][ T5756] usb 6-1: SerialNumber: syz [ 325.647030][ T126] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 325.647981][ T6746] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 326.215628][ T126] usb 5-1: Using ep0 maxpacket: 32 [ 326.404375][ T5756] ATM dev 0: failed to start ADSL synchronisation: -71 [ 326.466678][ C1] ATM dev 0: usbatm_complete: urb 0xffff8881416c9f00 failed (-71)! [ 326.484839][ C1] ATM dev 0: usbatm_complete: urb 0xffff8881416c9800 failed (-71)! [ 326.502151][ C1] ATM dev 0: usbatm_complete: urb 0xffff8881416c9300 failed (-71)! [ 326.520994][ C1] ATM dev 0: usbatm_complete: urb 0xffff8881416c9200 failed (-71)! [ 326.645976][ C1] ATM dev 0: usbatm_complete: urb 0xffff8881416c9f00 failed (-71)! [ 326.654074][ C1] ATM dev 0: usbatm_complete: urb 0xffff8881416c9800 failed (-71)! [ 326.662040][ C1] ATM dev 0: usbatm_complete: urb 0xffff8881416c9300 failed (-71)! [ 326.670004][ C1] ATM dev 0: usbatm_complete: urb 0xffff8881416c9200 failed (-71)! [ 326.716591][ T5756] speedtch 6-1:1.27: speedtch_bind: failed to claim interface 0 (-16)! [ 326.795851][ C1] ATM dev 0: usbatm_complete: urb 0xffff8881416c9f00 failed (-71)! [ 326.803888][ C1] ATM dev 0: usbatm_complete: urb 0xffff8881416c9800 failed (-71)! [ 326.858216][ T5756] speedtch 6-1:1.27: usbatm_usb_probe: bind failed: -16! [ 327.030252][ T126] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 327.045805][ T126] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 327.062871][ T5756] speedtch: probe of 6-1:1.27 failed with error -16 [ 327.063084][ T126] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 327.095628][ T126] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 327.115646][ T126] usb 5-1: config 0 interface 0 has no altsetting 0 [ 327.116954][ T5756] usb 6-1: USB disconnect, device number 4 [ 327.217649][ T126] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 327.235664][ T126] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 327.258166][ T126] usb 5-1: Product: syz [ 327.283984][ T126] usb 5-1: Manufacturer: syz [ 327.296721][ T126] usb 5-1: SerialNumber: syz [ 327.367559][ T126] usb 5-1: config 0 descriptor?? [ 327.407205][ T126] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 327.486000][ T126] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 328.896031][ T6781] ip_tables: iptables: counters copy to user failed while replacing table [ 329.694527][ T7] usb 5-1: USB disconnect, device number 10 [ 329.736827][ T7] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 330.196979][ T7] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 331.009180][ T6793] xt_TCPMSS: Only works on TCP SYN packets [ 331.045611][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 331.056957][ T7] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 331.171666][ T7] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 331.209772][ T6790] xt_TCPMSS: Only works on TCP SYN packets [ 331.227981][ T7] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 331.240023][ T7] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 331.253517][ T7] usb 5-1: config 0 interface 0 has no altsetting 0 [ 331.283330][ T7] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 331.366341][ T7] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 331.389029][ T7] usb 5-1: Product: syz [ 331.393266][ T7] usb 5-1: Manufacturer: syz [ 331.398943][ T7] usb 5-1: SerialNumber: syz [ 331.417495][ T7] usb 5-1: config 0 descriptor?? [ 331.426558][ T7] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 331.452158][ T7] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 332.119198][ T5756] usb 5-1: USB disconnect, device number 11 [ 332.227930][ T5756] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 338.425540][ T4321] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 338.455621][ T6824] syz.3.591 (6824): drop_caches: 2 [ 338.625786][ T4321] usb 6-1: Using ep0 maxpacket: 32 [ 338.636860][ T4321] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 338.676629][ T4321] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 338.724688][ T4321] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 338.756079][ T4321] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 338.778155][ T4321] usb 6-1: config 0 interface 0 has no altsetting 0 [ 338.800656][ T4321] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 338.813158][ T4321] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 338.823975][ T4321] usb 6-1: Product: syz [ 338.839543][ T4321] usb 6-1: Manufacturer: syz [ 338.845131][ T4321] usb 6-1: SerialNumber: syz [ 338.877501][ T4321] usb 6-1: config 0 descriptor?? [ 338.895525][ T4321] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 338.911684][ T4321] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 339.005570][ T126] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 339.195639][ T126] usb 5-1: Using ep0 maxpacket: 32 [ 339.202816][ T126] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 339.231643][ T126] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 339.284440][ T126] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 339.339390][ T126] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 339.405021][ T126] usb 5-1: config 0 interface 0 has no altsetting 0 [ 339.450238][ T126] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 339.480079][ T126] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 339.509820][ T126] usb 5-1: Product: syz [ 339.524205][ T126] usb 5-1: Manufacturer: syz [ 339.538031][ T126] usb 5-1: SerialNumber: syz [ 339.674207][ T126] usb 5-1: config 0 descriptor?? [ 339.706082][ T126] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 339.744928][ T126] ldusb 5-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 340.939558][ T3600] usb 5-1: USB disconnect, device number 12 [ 340.954013][ T3600] ldusb 5-1:0.0: LD USB Device #1 now disconnected [ 341.253982][ T3600] usb 6-1: USB disconnect, device number 5 [ 341.266343][ T3600] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 344.432780][ T6862] xt_TCPMSS: Only works on TCP SYN packets [ 344.619995][ T6886] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 344.634638][ T6886] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 344.651428][ T6886] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 344.665128][ T6886] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 344.705333][ T6886] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 344.718176][ T6886] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 344.730717][ T6886] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 348.072876][ T126] Process accounting resumed [ 348.341004][ T6339] syz.0.447 (6339) used greatest stack depth: 18448 bytes left [ 349.775762][ T6915] xt_TCPMSS: Only works on TCP SYN packets [ 349.955555][ T22] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 350.145637][ T22] usb 4-1: Using ep0 maxpacket: 32 [ 350.152386][ T22] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 350.183026][ T22] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 350.688631][ T6923] ip_tables: iptables: counters copy to user failed while replacing table [ 351.366102][ T22] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 351.382377][ T22] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 351.395662][ T22] usb 4-1: config 0 interface 0 has no altsetting 0 [ 351.436139][ T22] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 351.481363][ T22] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 351.514740][ T22] usb 4-1: Product: syz [ 351.528540][ T22] usb 4-1: Manufacturer: syz [ 351.542640][ T22] usb 4-1: SerialNumber: syz [ 351.677533][ T6932] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 351.689194][ T6932] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 351.697372][ T6932] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 351.705297][ T6932] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 351.713422][ T6932] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 351.721543][ T6932] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 351.768847][ T22] usb 4-1: config 0 descriptor?? [ 351.783613][ T22] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 351.802685][ T22] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 351.897464][ T6932] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 352.864174][ T22] usb 4-1: USB disconnect, device number 3 [ 352.864415][ C0] ldusb 4-1:0.0: usb_submit_urb failed (-19) [ 352.883089][ T4498] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 353.129597][ T22] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 353.325659][ T4498] usb 1-1: Using ep0 maxpacket: 32 [ 353.333475][ T4498] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 353.347416][ T4498] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 353.370526][ T4498] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 353.384108][ T4498] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 353.403037][ T4498] usb 1-1: config 0 interface 0 has no altsetting 0 [ 353.423536][ T4498] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 353.464155][ T4498] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 353.473528][ T4498] usb 1-1: Product: syz [ 353.480429][ T4498] usb 1-1: Manufacturer: syz [ 353.486436][ T4498] usb 1-1: SerialNumber: syz [ 353.494922][ T4498] usb 1-1: config 0 descriptor?? [ 353.510502][ T4498] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 353.531280][ T4498] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 355.866219][ T22] usb 1-1: USB disconnect, device number 6 [ 356.136210][ T22] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 357.796910][ T6976] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 357.813677][ T6976] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 357.830516][ T6976] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 357.844106][ T6976] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 357.858704][ T6976] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 357.871939][ T6976] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 357.887647][ T6976] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 362.275813][ T14] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 362.475746][ T14] usb 1-1: Using ep0 maxpacket: 32 [ 362.496117][ T14] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 362.515544][ T14] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 362.531412][ T14] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 362.543362][ T14] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 362.556968][ T14] usb 1-1: config 0 interface 0 has no altsetting 0 [ 362.576871][ T14] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 362.595535][ T14] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 362.625681][ T14] usb 1-1: Product: syz [ 362.632193][ T14] usb 1-1: Manufacturer: syz [ 362.675576][ T14] usb 1-1: SerialNumber: syz [ 362.686541][ T14] usb 1-1: config 0 descriptor?? [ 362.696743][ T14] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 362.749767][ T14] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 363.455385][ T4320] usb 1-1: USB disconnect, device number 7 [ 363.601968][ T4320] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 366.748389][ T126] Process accounting resumed [ 368.347914][ T7036] xt_TCPMSS: Only works on TCP SYN packets [ 368.617159][ T7041] netlink: 'syz.3.648': attribute type 29 has an invalid length. [ 369.200805][ T7041] netlink: 'syz.3.648': attribute type 29 has an invalid length. [ 369.232348][ T7044] ip_tables: iptables: counters copy to user failed while replacing table [ 369.316455][ T7045] netlink: 'syz.3.648': attribute type 29 has an invalid length. [ 369.399119][ T7041] netlink: 'syz.3.648': attribute type 29 has an invalid length. [ 370.118039][ T7058] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 370.130239][ T7058] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 370.138764][ T7058] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 370.145546][ T14] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 370.155230][ T7058] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 370.163967][ T7058] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 370.207185][ T7058] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 370.215656][ T7058] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 371.135712][ T14] usb 4-1: Using ep0 maxpacket: 32 [ 371.155006][ T14] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 371.174875][ T14] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 371.213337][ T14] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 371.235627][ T14] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 371.285897][ T14] usb 4-1: config 0 interface 0 has no altsetting 0 [ 371.315292][ T14] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 371.355516][ T14] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 371.398114][ T14] usb 4-1: Product: syz [ 371.425406][ T14] usb 4-1: Manufacturer: syz [ 371.433286][ T14] usb 4-1: SerialNumber: syz [ 371.487356][ T14] usb 4-1: config 0 descriptor?? [ 371.533242][ T14] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 371.599950][ T14] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 371.725510][ T4498] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 371.897329][ T14] usb 4-1: USB disconnect, device number 4 [ 371.920262][ T14] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 372.025562][ T4498] usb 6-1: Using ep0 maxpacket: 32 [ 372.033414][ T4498] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 372.042523][ T4498] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 372.055811][ T4498] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 372.074032][ T4498] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 372.088228][ T4498] usb 6-1: config 0 interface 0 has no altsetting 0 [ 372.107012][ T4498] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 372.117413][ T4498] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 372.130556][ T4498] usb 6-1: Product: syz [ 372.146335][ T4498] usb 6-1: Manufacturer: syz [ 372.152969][ T4498] usb 6-1: SerialNumber: syz [ 372.178565][ T4498] usb 6-1: config 0 descriptor?? [ 372.196430][ T4498] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 372.218185][ T4498] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 372.519915][ T4498] usb 6-1: USB disconnect, device number 6 [ 372.530361][ T4498] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 373.714149][ T7081] xt_TCPMSS: Only works on TCP SYN packets [ 375.018231][ T7098] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 375.031838][ T7098] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 375.040049][ T7098] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 375.048349][ T7098] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 375.057663][ T7098] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 375.066509][ T7098] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 375.075075][ T7098] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 375.356511][ T14] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 375.569600][ T7103] netlink: 'syz.0.662': attribute type 29 has an invalid length. [ 376.156410][ T14] usb 3-1: device descriptor read/64, error -71 [ 376.178370][ T7103] netlink: 'syz.0.662': attribute type 29 has an invalid length. [ 376.194429][ T7101] ip_tables: iptables: counters copy to user failed while replacing table [ 376.278609][ T7105] netlink: 'syz.0.662': attribute type 29 has an invalid length. [ 376.341983][ T7103] netlink: 'syz.0.662': attribute type 29 has an invalid length. [ 376.426077][ T14] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 376.585594][ T14] usb 3-1: device descriptor read/64, error -71 [ 376.709242][ T14] usb usb3-port1: attempt power cycle [ 377.145667][ T14] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 377.197251][ T14] usb 3-1: device descriptor read/8, error -71 [ 377.880318][ T7118] ip_tables: iptables: counters copy to user failed while replacing table [ 378.596103][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.602469][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.655715][ T14] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 378.751294][ T14] usb 3-1: device descriptor read/8, error -71 [ 379.361097][ T7126] ip_tables: iptables: counters copy to user failed while replacing table [ 380.015558][ T14] usb usb3-port1: unable to enumerate USB device [ 380.385750][ T14] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 380.595756][ T14] usb 3-1: Using ep0 maxpacket: 32 [ 380.611383][ T14] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 380.661803][ T14] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 380.693707][ T14] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 380.741916][ T14] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 380.835638][ T14] usb 3-1: config 0 interface 0 has no altsetting 0 [ 380.879127][ T14] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 380.903240][ T14] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 380.921829][ T14] usb 3-1: Product: syz [ 380.931511][ T14] usb 3-1: Manufacturer: syz [ 380.936579][ T14] usb 3-1: SerialNumber: syz [ 380.951494][ T14] usb 3-1: config 0 descriptor?? [ 380.997602][ T14] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 381.027314][ T14] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 381.388039][ T14] usb 3-1: USB disconnect, device number 13 [ 381.394366][ C0] ldusb 3-1:0.0: usb_submit_urb failed (-19) [ 381.423430][ T14] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 383.180318][ T7146] xt_TCPMSS: Only works on TCP SYN packets [ 383.616784][ T7155] netlink: 'syz.5.676': attribute type 29 has an invalid length. [ 383.677163][ T7155] netlink: 'syz.5.676': attribute type 29 has an invalid length. [ 383.825145][ T7156] netlink: 'syz.5.676': attribute type 29 has an invalid length. [ 383.926572][ T7157] netlink: 'syz.5.676': attribute type 29 has an invalid length. [ 387.324145][ T4455] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.530065][ T4455] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.567131][ T4455] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.715199][ T7187] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 388.724717][ T7187] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 388.733310][ T7187] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 389.156721][ T4455] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.209067][ T7196] xt_TCPMSS: Only works on TCP SYN packets [ 389.299689][ T7201] netlink: 'syz.0.689': attribute type 29 has an invalid length. [ 389.329602][ T7201] netlink: 'syz.0.689': attribute type 29 has an invalid length. [ 389.619232][ T7202] netlink: 'syz.0.689': attribute type 29 has an invalid length. [ 389.703549][ T4283] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 389.714850][ T4283] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 389.731658][ T4283] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 389.742198][ T4283] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 389.753082][ T4283] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 389.760837][ T4283] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 389.929282][ T7203] netlink: 'syz.0.689': attribute type 29 has an invalid length. [ 391.031585][ T7206] chnl_net:caif_netlink_parms(): no params data found [ 391.825792][ T4286] Bluetooth: hci3: command 0x0409 tx timeout [ 392.439729][ T7247] ip_tables: iptables: counters copy to user failed while replacing table [ 393.224592][ T7206] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.290938][ T7206] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.330762][ T7206] device bridge_slave_0 entered promiscuous mode [ 393.512128][ T7206] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.531333][ T7206] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.685737][ T126] Process accounting resumed [ 393.905522][ T4286] Bluetooth: hci3: command 0x041b tx timeout [ 394.492300][ T7206] device bridge_slave_1 entered promiscuous mode [ 394.632883][ T7226] syz.4.692 (7226): drop_caches: 2 [ 394.662334][ T7206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 394.841773][ T7206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 395.987740][ T4286] Bluetooth: hci3: command 0x040f tx timeout [ 396.100542][ T7262] xt_TCPMSS: Only works on TCP SYN packets [ 396.303624][ T7267] netlink: 'syz.2.701': attribute type 29 has an invalid length. [ 396.919908][ T7206] team0: Port device team_slave_0 added [ 396.954315][ T7267] netlink: 'syz.2.701': attribute type 29 has an invalid length. [ 397.055291][ T7270] netlink: 'syz.2.701': attribute type 29 has an invalid length. [ 397.291297][ T7206] team0: Port device team_slave_1 added [ 398.065577][ T4286] Bluetooth: hci3: command 0x0419 tx timeout [ 398.108681][ T7269] netlink: 'syz.2.701': attribute type 29 has an invalid length. [ 398.918492][ T7206] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 398.935150][ T7206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 399.036516][ T7206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.315570][ T4320] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 399.875720][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 400.025532][ T4320] usb 1-1: device descriptor read/64, error -32 [ 400.040684][ T4455] device hsr_slave_0 left promiscuous mode [ 400.074022][ T4455] device hsr_slave_1 left promiscuous mode [ 400.126138][ T4455] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 400.133599][ T4455] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 400.216337][ T4455] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 400.265542][ T4455] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 400.274589][ T4455] device bridge_slave_1 left promiscuous mode [ 400.317102][ T4455] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.326742][ T4320] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 400.421958][ T4455] device bridge_slave_0 left promiscuous mode [ 400.432991][ T4455] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.635620][ T4320] usb 1-1: Using ep0 maxpacket: 32 [ 401.648349][ T4320] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 401.735298][ T4320] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 401.837776][ T4320] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 401.940664][ T4320] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 402.135591][ T4320] usb 1-1: config 0 interface 0 has no altsetting 0 [ 402.227988][ T4320] usb 1-1: string descriptor 0 read error: -71 [ 402.234360][ T4320] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 402.291046][ T4320] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 402.356395][ T4320] usb 1-1: config 0 descriptor?? [ 402.362155][ T4455] device veth1_macvtap left promiscuous mode [ 402.385691][ T4320] usb 1-1: can't set config #0, error -71 [ 402.391628][ T4455] device veth0_macvtap left promiscuous mode [ 402.439984][ T4455] device veth1_vlan left promiscuous mode [ 402.483653][ T4320] usb 1-1: USB disconnect, device number 9 [ 402.515694][ T4455] device veth0_vlan left promiscuous mode [ 404.303275][ T7332] fuse: Bad value for 'fd' [ 405.437269][ T4455] team0 (unregistering): Port device team_slave_1 removed [ 406.947633][ T4455] team0 (unregistering): Port device team_slave_0 removed [ 408.746009][ T4455] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 408.897039][ T4455] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 409.620271][ T4455] bond0 (unregistering): Released all slaves [ 409.885377][ T7206] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.899049][ T7206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.929022][ T7206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.946277][ T7317] netlink: 'syz.2.713': attribute type 3 has an invalid length. [ 409.953946][ T7317] netlink: 3 bytes leftover after parsing attributes in process `syz.2.713'. [ 410.009585][ T7329] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 410.017887][ T7329] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 410.026627][ T7329] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 410.082653][ T7370] xt_TCPMSS: Only works on TCP SYN packets [ 410.934181][ T7206] device hsr_slave_0 entered promiscuous mode [ 411.108086][ T7378] netlink: 'syz.3.730': attribute type 29 has an invalid length. [ 411.148745][ T7206] device hsr_slave_1 entered promiscuous mode [ 411.166115][ T7206] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 411.224902][ T7206] Cannot create hsr debugfs directory [ 411.244548][ T7378] netlink: 'syz.3.730': attribute type 29 has an invalid length. [ 411.274563][ T7381] netlink: 'syz.3.730': attribute type 29 has an invalid length. [ 411.292797][ T7382] netlink: 'syz.3.730': attribute type 29 has an invalid length. [ 412.864030][ T7408] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 412.876529][ T7408] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 412.884522][ T7408] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 412.893271][ T7408] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 412.901626][ T7408] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 412.909744][ T7408] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 412.941426][ T7408] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 417.016615][ T7442] fuse: Bad value for 'fd' [ 417.120969][ T7206] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 417.308379][ T7206] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 417.337803][ T7451] netlink: 'syz.3.746': attribute type 29 has an invalid length. [ 419.011948][ T7444] xt_TCPMSS: Only works on TCP SYN packets [ 419.052329][ T7206] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 419.132972][ T7206] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 419.169580][ T7451] netlink: 'syz.3.746': attribute type 29 has an invalid length. [ 419.217276][ T7459] netlink: 'syz.3.746': attribute type 29 has an invalid length. [ 419.341536][ T7446] netlink: 'syz.3.746': attribute type 29 has an invalid length. [ 420.532763][ T7206] 8021q: adding VLAN 0 to HW filter on device bond0 [ 420.618528][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 420.639951][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 420.719219][ T7206] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.808794][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 420.858033][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 420.896433][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.904328][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 420.976929][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 421.005206][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 421.605764][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 421.662780][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.670891][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 421.723167][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 421.760880][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 421.800432][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 421.840006][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 421.872898][ T7472] netlink: 'syz.3.751': attribute type 3 has an invalid length. [ 421.881100][ T7472] netlink: 3 bytes leftover after parsing attributes in process `syz.3.751'. [ 421.957182][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 422.004280][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 422.035105][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 422.062627][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 422.141441][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 422.215600][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 422.234523][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 422.272343][ T7206] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 423.180319][ T7502] fuse: Bad value for 'fd' [ 426.068968][ T7515] netlink: 'syz.3.761': attribute type 29 has an invalid length. [ 426.087341][ T7515] netlink: 'syz.3.761': attribute type 29 has an invalid length. [ 426.115641][ T7512] xt_TCPMSS: Only works on TCP SYN packets [ 426.223137][ T7515] netlink: 'syz.3.761': attribute type 29 has an invalid length. [ 426.300143][ T7520] netlink: 'syz.3.761': attribute type 29 has an invalid length. [ 426.996615][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 427.004578][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 427.094553][ T7206] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 430.060739][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 430.080174][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 430.129162][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 430.193826][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 430.242121][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 430.286308][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 430.333781][ T7206] device veth0_vlan entered promiscuous mode [ 430.411482][ T7206] device veth1_vlan entered promiscuous mode [ 430.538632][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 430.569527][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 430.646642][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 430.676608][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 430.718239][ T7206] device veth0_macvtap entered promiscuous mode [ 430.764171][ T7206] device veth1_macvtap entered promiscuous mode [ 431.939832][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 431.956471][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 432.004553][ T7206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.058860][ T7206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.082197][ T7206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.115466][ T7206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.162463][ T7206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.189445][ T7206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.215483][ T7206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.245687][ T7206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.264205][ T7206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.282923][ T7206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.348482][ T7206] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 432.383816][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 432.406046][ T4455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 432.458893][ T7206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.515581][ T7206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.561824][ T7206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.615567][ T7206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.656502][ T7206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.715694][ T7206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.772501][ T7206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.835532][ T7206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.842707][ T7598] netlink: 'syz.4.775': attribute type 29 has an invalid length. [ 432.874376][ T7206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.922813][ T7206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.996100][ T7206] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 433.019217][ T7598] netlink: 'syz.4.775': attribute type 29 has an invalid length. [ 433.067148][ T7602] netlink: 'syz.4.775': attribute type 29 has an invalid length. [ 433.099010][ T7603] netlink: 'syz.4.775': attribute type 29 has an invalid length. [ 433.130967][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 433.151431][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 433.186833][ T7206] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.233565][ T7206] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.297673][ T7206] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.464025][ T7206] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.835849][ T7607] xt_TCPMSS: Only works on TCP SYN packets [ 435.145851][ T7615] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 435.174026][ T7615] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 435.198461][ T7615] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 435.228061][ T7615] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 435.261701][ T7615] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 435.303867][ T7615] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 436.196489][ T7615] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 436.273951][ T4508] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.326301][ T4508] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.407699][ T4598] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.420661][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 436.479906][ T4598] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.516863][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 440.005765][ T7673] xt_TCPMSS: Only works on TCP SYN packets [ 440.240261][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.247122][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.470043][ T7678] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 440.478873][ T7678] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 440.488324][ T7678] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 440.720849][ T4320] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 440.905715][ T4320] usb 1-1: Using ep0 maxpacket: 32 [ 441.786122][ T4320] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 441.838611][ T4320] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 441.895562][ T4320] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 441.939608][ T4320] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 441.971346][ T4320] usb 1-1: config 0 interface 0 has no altsetting 0 [ 442.043763][ T4320] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 442.086272][ T4320] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 442.169892][ T7704] netlink: 'syz.5.789': attribute type 29 has an invalid length. [ 442.194324][ T7704] netlink: 'syz.5.789': attribute type 29 has an invalid length. [ 442.203924][ T7704] netlink: 'syz.5.789': attribute type 29 has an invalid length. [ 442.267806][ T7709] netlink: 'syz.5.789': attribute type 29 has an invalid length. [ 442.275839][ T4320] usb 1-1: Product: syz [ 442.280657][ T4320] usb 1-1: Manufacturer: syz [ 442.285283][ T4320] usb 1-1: SerialNumber: syz [ 442.314340][ T4320] usb 1-1: config 0 descriptor?? [ 442.324813][ T4320] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 442.372391][ T4320] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 444.140684][ T4319] usb 1-1: USB disconnect, device number 10 [ 444.990040][ T4319] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 445.133642][ T7728] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 445.145387][ T7728] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 445.153719][ T7728] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 445.162081][ T7728] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 445.170881][ T7728] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 445.179462][ T7728] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 445.214311][ T7728] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 447.362930][ T4598] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.539535][ T4598] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.835386][ T4598] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.862521][ T7748] syz.3.805 (7748): drop_caches: 2 [ 448.388548][ T4319] Process accounting resumed [ 449.127378][ T4598] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.277965][ T7765] netlink: 'syz.0.808': attribute type 29 has an invalid length. [ 449.324954][ T7765] netlink: 'syz.0.808': attribute type 29 has an invalid length. [ 449.423641][ T7766] netlink: 'syz.0.808': attribute type 29 has an invalid length. [ 449.441051][ T4283] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 449.454665][ T4283] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 449.486629][ T4283] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 449.499960][ T4283] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 449.509107][ T4283] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 449.524521][ T4283] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 449.524596][ T7765] netlink: 'syz.0.808': attribute type 29 has an invalid length. [ 451.759607][ T4286] Bluetooth: hci3: command 0x0409 tx timeout [ 453.825798][ T4286] Bluetooth: hci3: command 0x041b tx timeout [ 454.559900][ T7767] chnl_net:caif_netlink_parms(): no params data found [ 455.905864][ T4286] Bluetooth: hci3: command 0x040f tx timeout [ 456.477760][ T4320] Process accounting resumed [ 457.204793][ T7834] syz.4.821 (7834): drop_caches: 2 [ 457.985783][ T4286] Bluetooth: hci3: command 0x0419 tx timeout [ 458.947169][ T7842] netlink: 'syz.0.822': attribute type 29 has an invalid length. [ 459.160388][ T7767] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.215046][ T7767] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.254710][ T7767] device bridge_slave_0 entered promiscuous mode [ 459.424332][ T7842] netlink: 'syz.0.822': attribute type 29 has an invalid length. [ 459.845138][ T7767] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.933742][ T7767] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.976402][ T7767] device bridge_slave_1 entered promiscuous mode [ 460.796051][ T7844] netlink: 'syz.0.822': attribute type 29 has an invalid length. [ 461.064274][ T7843] netlink: 'syz.0.822': attribute type 29 has an invalid length. [ 461.138924][ T4598] device hsr_slave_0 left promiscuous mode [ 461.163861][ T4598] device hsr_slave_1 left promiscuous mode [ 461.174537][ T4598] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 461.256667][ T4598] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 461.362042][ T4598] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 461.421961][ T4598] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 462.705728][ T4598] device bridge_slave_1 left promiscuous mode [ 462.730724][ T4598] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.784190][ T4598] device bridge_slave_0 left promiscuous mode [ 462.817599][ T4598] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.945173][ T4598] device veth1_macvtap left promiscuous mode [ 462.967408][ T4598] device veth0_macvtap left promiscuous mode [ 463.000891][ T4598] device veth1_vlan left promiscuous mode [ 463.040694][ T4598] device veth0_vlan left promiscuous mode [ 464.415542][ T4321] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 464.625650][ T4321] usb 1-1: Using ep0 maxpacket: 32 [ 464.632767][ T4321] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 464.648645][ T4321] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 464.671567][ T4321] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 464.690507][ T4321] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 464.728138][ T4321] usb 1-1: config 0 interface 0 has no altsetting 0 [ 464.749604][ T4321] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 464.794227][ T4321] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 464.836686][ T4321] usb 1-1: Product: syz [ 464.841200][ T4321] usb 1-1: Manufacturer: syz [ 464.864941][ T4321] usb 1-1: SerialNumber: syz [ 464.964997][ T4321] usb 1-1: config 0 descriptor?? [ 465.051988][ T4321] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 465.139037][ T4321] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 465.405676][ T4321] usb 1-1: USB disconnect, device number 11 [ 465.426333][ T4321] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 467.264574][ T7893] netlink: 'syz.0.835': attribute type 29 has an invalid length. [ 468.532465][ T4598] team0 (unregistering): Port device team_slave_1 removed [ 468.572635][ T7906] syz.4.837 (7906): drop_caches: 2 [ 468.621186][ T4598] team0 (unregistering): Port device team_slave_0 removed [ 468.679903][ T4598] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 468.761260][ T4598] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 469.600957][ T4598] bond0 (unregistering): Released all slaves [ 469.739110][ T7767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 469.751189][ T7857] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 469.769534][ T7857] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 469.813488][ T7857] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 469.828863][ T7857] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 469.842710][ T7857] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 469.863517][ T7857] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 469.875826][ T7857] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 469.894015][ T7893] netlink: 'syz.0.835': attribute type 29 has an invalid length. [ 469.930751][ T7767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 470.103661][ T7767] team0: Port device team_slave_0 added [ 470.139448][ T7767] team0: Port device team_slave_1 added [ 470.446128][ T7767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 470.607034][ T7767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 473.141213][ T7767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 473.158415][ T4318] Process accounting resumed [ 474.137003][ T7921] syz.0.839 (7921): drop_caches: 2 [ 474.149777][ T7767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 474.206480][ T7767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 474.272954][ T7767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 474.389591][ T7767] device hsr_slave_0 entered promiscuous mode [ 474.477716][ T7767] device hsr_slave_1 entered promiscuous mode [ 474.549264][ T7767] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 474.563081][ T7767] Cannot create hsr debugfs directory [ 474.665588][ T22] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 474.886731][ T22] usb 5-1: Using ep0 maxpacket: 32 [ 474.910717][ T22] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 474.936750][ T22] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 474.984599][ T22] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 476.214477][ T22] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 476.230085][ T22] usb 5-1: config 0 interface 0 has no altsetting 0 [ 476.242549][ T22] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 476.253865][ T22] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 476.262878][ T22] usb 5-1: Product: syz [ 476.270058][ T22] usb 5-1: Manufacturer: syz [ 476.275341][ T22] usb 5-1: SerialNumber: syz [ 476.290744][ T22] usb 5-1: config 0 descriptor?? [ 476.307444][ T22] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 476.351374][ T22] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 476.628655][ T4318] usb 5-1: USB disconnect, device number 13 [ 476.648436][ T4318] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 476.704770][ T7951] netlink: 'syz.3.849': attribute type 29 has an invalid length. [ 476.746405][ T7951] netlink: 'syz.3.849': attribute type 29 has an invalid length. [ 476.828295][ T7953] netlink: 'syz.3.849': attribute type 29 has an invalid length. [ 476.995717][ T7951] netlink: 'syz.3.849': attribute type 29 has an invalid length. [ 479.090889][ T7767] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 479.298091][ T7967] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 479.356690][ T4318] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 479.527298][ T7967] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 479.552512][ T7967] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 479.567410][ T4318] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 479.591456][ T4318] usb 5-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice= 1.00 [ 479.621709][ T7967] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 479.636763][ T4318] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.650589][ T7967] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 479.686982][ T4318] usb 5-1: Product: syz [ 479.691578][ T7967] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 479.701930][ T4318] usb 5-1: Manufacturer: syz [ 479.718492][ T4318] usb 5-1: SerialNumber: syz [ 479.726825][ T7967] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 479.771277][ T7767] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 480.551796][ T22] Process accounting resumed [ 480.865984][ T4318] ttusb_dec_send_command: command bulk message failed: error -110 [ 481.347487][ T4318] ttusb-dec: probe of 5-1:1.0 failed with error -110 [ 481.416811][ T7767] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 481.456843][ T22] usb 5-1: USB disconnect, device number 14 [ 481.567964][ T7767] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 481.919397][ T7767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.741252][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 483.216342][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 483.284511][ T7767] 8021q: adding VLAN 0 to HW filter on device team0 [ 483.435706][ T7998] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 483.473564][ T7998] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 483.556580][ T7998] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 483.564694][ T7998] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 483.575688][ T7998] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 483.606611][ T7998] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 483.615809][ T7998] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 483.627077][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 483.745038][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 483.801660][ T4430] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.809671][ T4430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 483.921866][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 483.968848][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 484.008403][ T4430] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.015630][ T4430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 484.015853][ T4319] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 484.081690][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 484.113182][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 484.201693][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 484.231920][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 484.275624][ T4319] usb 3-1: Using ep0 maxpacket: 32 [ 484.278904][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 484.290971][ T4319] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 484.326075][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 484.335058][ T4319] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 484.363304][ T8020] netlink: 'syz.0.864': attribute type 29 has an invalid length. [ 484.374807][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 484.412645][ T4319] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 484.413135][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 484.488647][ T4319] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 484.499232][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 484.553940][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 484.604043][ T4319] usb 3-1: config 0 interface 0 has no altsetting 0 [ 484.650027][ T7767] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 484.662044][ T4319] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 484.703461][ T4319] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 484.713347][ T7767] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 484.759738][ T4319] usb 3-1: Product: syz [ 484.767787][ T8020] netlink: 'syz.0.864': attribute type 29 has an invalid length. [ 484.786534][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 484.795213][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 484.827506][ T4319] usb 3-1: Manufacturer: syz [ 484.832228][ T4319] usb 3-1: SerialNumber: syz [ 484.872023][ T8021] netlink: 'syz.0.864': attribute type 29 has an invalid length. [ 484.877253][ T4319] usb 3-1: config 0 descriptor?? [ 484.923304][ T8024] netlink: 'syz.0.864': attribute type 29 has an invalid length. [ 484.939602][ T4319] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 485.007998][ T4319] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 485.342749][ T4321] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 485.353521][ T126] usb 3-1: USB disconnect, device number 14 [ 485.395693][ T126] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 485.605659][ T4321] usb 5-1: config 1 has an invalid interface number: 27 but max is 1 [ 485.624814][ T4321] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 485.747055][ T4321] usb 5-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 485.795498][ T4321] usb 5-1: config 1 has no interface number 2 [ 485.844172][ T4321] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x87 has invalid maxpacket 64 [ 486.005674][ T4321] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 486.085476][ T4321] usb 5-1: config 1 interface 1 has no altsetting 0 [ 486.144314][ T4321] usb 5-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 486.174781][ T4321] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.791624][ T4321] usb 5-1: Product: syz [ 486.825534][ T4321] usb 5-1: Manufacturer: syz [ 486.830215][ T4321] usb 5-1: SerialNumber: syz [ 486.942639][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 486.973946][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 487.017477][ T7767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 487.527062][ T4318] Process accounting resumed [ 488.286286][ T4321] speedtch 5-1:1.0: speedtch_bind: setting interface to 1 failed (-71)! [ 488.295012][ T4321] usb 5-1: selecting invalid altsetting 0 [ 488.337844][ T4321] speedtch 5-1:1.0: usbatm_usb_probe: bind failed: -71! [ 488.385980][ T4321] speedtch: probe of 5-1:1.0 failed with error -71 [ 488.454980][ T4321] speedtch 5-1:1.27: speedtch_bind: setting interface to 1 failed (-71)! [ 488.496866][ T4321] usb 5-1: selecting invalid altsetting 0 [ 488.523464][ T4321] speedtch 5-1:1.27: usbatm_usb_probe: bind failed: -71! [ 488.590755][ T4321] speedtch: probe of 5-1:1.27 failed with error -71 [ 488.621753][ T4321] usb 5-1: selecting invalid altsetting 0 [ 488.657114][ T4321] usbtest: probe of 5-1:1.1 failed with error -22 [ 489.585715][ T4321] usb 5-1: selecting invalid altsetting 0 [ 489.592697][ T4321] speedtch: probe of 5-1:1.1 failed with error -22 [ 489.610908][ T4321] usb 5-1: USB disconnect, device number 15 [ 491.096497][ T8084] netlink: 'syz.2.883': attribute type 3 has an invalid length. [ 491.104912][ T8084] netlink: 3 bytes leftover after parsing attributes in process `syz.2.883'. [ 491.345974][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 491.362565][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 491.468495][ T5532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 491.509000][ T5532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 491.572267][ T5532] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 491.606007][ T5532] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 491.654843][ T7767] device veth0_vlan entered promiscuous mode [ 491.725484][ T7767] device veth1_vlan entered promiscuous mode [ 491.798593][ T5532] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 491.856339][ T5532] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 491.890701][ T5532] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 493.244583][ T5532] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 494.226465][ T7767] device veth0_macvtap entered promiscuous mode [ 494.238773][ T5532] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 494.369999][ T7767] device veth1_macvtap entered promiscuous mode [ 494.456930][ T7767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 494.907257][ T7767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.465600][ T7767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.519312][ T7767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.552013][ T7767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.585520][ T7767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.691693][ T7767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.715527][ T14] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 495.750908][ T7767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.789622][ T7767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 495.819929][ T7767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.904443][ T7767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 495.914742][ T14] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 495.934555][ T14] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 495.970190][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 495.975260][ T14] usb 3-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 496.015331][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.019676][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 496.046586][ T7767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 496.078585][ T7767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.090992][ T7767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 496.108873][ T7767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.121741][ T14] as10x_usb: device has been detected [ 496.127018][ T8138] Bluetooth: MGMT ver 1.22 [ 496.128122][ T14] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 496.143867][ T7767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 496.168062][ T7767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.197395][ T7767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 496.209057][ T14] usb 3-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 496.223972][ T7767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.236205][ T7767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 496.260068][ T7767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.310855][ T7767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 496.345789][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 496.354916][ T14] as10x_usb: error during firmware upload part1 [ 496.386775][ T14] Registered device Abilis Systems DVB-Titan [ 496.389904][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 496.439307][ T7767] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.459052][ T7767] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.472941][ T7767] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.989216][ T8141] ip_tables: iptables: counters copy to user failed while replacing table [ 497.667740][ T7767] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.718486][ T4318] usb 3-1: USB disconnect, device number 15 [ 497.850245][ T4318] Unregistered device Abilis Systems DVB-Titan [ 497.862191][ T4318] as10x_usb: device has been disconnected [ 497.975556][ T7455] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 498.023696][ T4301] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.049311][ T4301] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.068151][ T4648] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 498.093543][ T4430] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.130745][ T4430] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.175850][ T7455] usb 1-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 498.175869][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 498.235968][ T7455] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.263569][ T7455] usb 1-1: Product: syz [ 498.291679][ T7455] usb 1-1: Manufacturer: syz [ 498.311104][ T7455] usb 1-1: SerialNumber: syz [ 498.345219][ T7455] usb 1-1: config 0 descriptor?? [ 498.556617][ T7455] usb 1-1: ignoring: probably an ADSL modem [ 498.767648][ T7455] cxacru 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 498.813903][ T7455] usb 1-1: USB disconnect, device number 12 [ 498.854026][ T8151] FAULT_INJECTION: forcing a failure. [ 498.854026][ T8151] name fail_futex, interval 1, probability 0, space 0, times 1 [ 498.906173][ T8151] CPU: 1 PID: 8151 Comm: syz.5.888 Not tainted syzkaller #0 [ 498.913530][ T8151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 498.923631][ T8151] Call Trace: [ 498.926934][ T8151] [ 498.930167][ T8151] dump_stack_lvl+0x188/0x24e [ 498.936031][ T8151] ? show_regs_print_info+0x12/0x12 [ 498.941532][ T8151] ? load_image+0x410/0x410 [ 498.946354][ T8151] should_fail_ex+0x390/0x4c0 [ 498.951259][ T8151] get_futex_key+0x1b1/0x1000 [ 498.956000][ T8151] ? futex_setup_timer+0xc0/0xc0 [ 498.961177][ T8151] futex_wake+0x123/0x4f0 [ 498.966032][ T8151] ? futex_wake_mark+0x150/0x150 [ 498.971445][ T8151] ? finish_task_switch+0x262/0x8e0 [ 498.976687][ T8151] ? __schedule+0x1087/0x4030 [ 498.981970][ T8151] do_futex+0x2e2/0x320 [ 498.986263][ T8151] ? __ia32_sys_get_robust_list+0x100/0x100 [ 498.992723][ T8151] __se_sys_futex+0x381/0x410 [ 498.997442][ T8151] ? __x64_sys_futex+0xf0/0xf0 [ 499.002599][ T8151] ? __x64_sys_futex+0x1d/0xf0 [ 499.007406][ T8151] do_syscall_64+0x4c/0xa0 [ 499.011902][ T8151] ? clear_bhb_loop+0x60/0xb0 [ 499.016815][ T8151] ? clear_bhb_loop+0x60/0xb0 [ 499.021516][ T8151] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 499.027609][ T8151] RIP: 0033:0x7fe00c79e159 [ 499.032121][ T8151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 499.051924][ T8151] RSP: 002b:00007fe00d5ee0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 499.060548][ T8151] RAX: ffffffffffffffda RBX: 00007fe00ca25fa8 RCX: 00007fe00c79e159 [ 499.068552][ T8151] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe00ca25fac [ 499.076529][ T8151] RBP: 00007fe00ca25fa0 R08: 0030b3ca08b2d968 R09: 0000000000000000 [ 499.084527][ T8151] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 499.092512][ T8151] R13: 00007fe00ca26038 R14: 00007ffcadd47060 R15: 00007ffcadd47148 [ 499.100520][ T8151] [ 501.428589][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.450332][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.906939][ T8186] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 503.916180][ T8182] ip_tables: iptables: counters copy to user failed while replacing table [ 503.938500][ T8186] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 503.949518][ T8186] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 503.958656][ T8186] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 503.981699][ T8186] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 504.010630][ T8186] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 504.022229][ T8186] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 505.383673][ T4498] Process accounting resumed [ 506.733047][ T8208] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 506.748893][ T8208] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 506.757351][ T8208] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 506.765332][ T8208] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 506.773604][ T8208] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 506.812663][ T8208] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 506.822298][ T8208] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 510.230324][ T8225] ip_tables: iptables: counters copy to user failed while replacing table [ 512.808110][ T4363] Process accounting resumed [ 513.068506][ T8256] FAULT_INJECTION: forcing a failure. [ 513.068506][ T8256] name fail_futex, interval 1, probability 0, space 0, times 0 [ 513.092098][ T8256] CPU: 1 PID: 8256 Comm: syz.3.915 Not tainted syzkaller #0 [ 513.099461][ T8256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 513.109541][ T8256] Call Trace: [ 513.112988][ T8256] [ 513.115996][ T8256] dump_stack_lvl+0x188/0x24e [ 513.120760][ T8256] ? show_regs_print_info+0x12/0x12 [ 513.125956][ T8256] ? load_image+0x410/0x410 [ 513.130481][ T8256] ? mark_lock+0x94/0x320 [ 513.134846][ T8256] should_fail_ex+0x390/0x4c0 [ 513.140136][ T8256] get_futex_key+0x1b1/0x1000 [ 513.144918][ T8256] ? futex_setup_timer+0xc0/0xc0 [ 513.149881][ T8256] ? verify_lock_unused+0x140/0x140 [ 513.155131][ T8256] futex_wake+0x123/0x4f0 [ 513.159593][ T8256] ? futex_wake_mark+0x150/0x150 [ 513.164754][ T8256] do_futex+0x2e2/0x320 [ 513.169045][ T8256] ? __ia32_sys_get_robust_list+0x100/0x100 [ 513.175686][ T8256] __se_sys_futex+0x381/0x410 [ 513.180498][ T8256] ? __x64_sys_futex+0xf0/0xf0 [ 513.185507][ T8256] ? __x64_sys_futex+0x1d/0xf0 [ 513.190351][ T8256] do_syscall_64+0x4c/0xa0 [ 513.194860][ T8256] ? clear_bhb_loop+0x60/0xb0 [ 513.199549][ T8256] ? clear_bhb_loop+0x60/0xb0 [ 513.204254][ T8256] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 513.210258][ T8256] RIP: 0033:0x7f18a8d9e159 [ 513.214682][ T8256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 513.234296][ T8256] RSP: 002b:00007f18a9bc30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 513.243176][ T8256] RAX: ffffffffffffffda RBX: 00007f18a9025fa8 RCX: 00007f18a8d9e159 [ 513.251166][ T8256] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f18a9025fac [ 513.259160][ T8256] RBP: 00007f18a9025fa0 R08: 000235ee5dbdfcb8 R09: 0000000000000000 [ 513.267138][ T8256] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 513.275116][ T8256] R13: 00007f18a9026038 R14: 00007ffd3863f6b0 R15: 00007ffd3863f798 [ 513.283210][ T8256] [ 514.946019][ T8269] ip_tables: iptables: counters copy to user failed while replacing table [ 519.936075][ T4320] Process accounting resumed [ 520.249779][ T4363] Process accounting resumed [ 521.890202][ T8313] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 521.946299][ T8313] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 521.976327][ T8313] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 523.149644][ T8319] ip_tables: iptables: counters copy to user failed while replacing table [ 523.444844][ T8323] syz.5.933 (8323): drop_caches: 2 [ 523.785555][ T4321] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 524.048906][ T4321] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 524.064282][ T4321] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.091595][ T4321] usb 3-1: Product: syz [ 524.109353][ T4321] usb 3-1: Manufacturer: syz [ 524.114102][ T4321] usb 3-1: SerialNumber: syz [ 524.162093][ T4321] usb 3-1: config 0 descriptor?? [ 524.399936][ T4321] usb 3-1: ignoring: probably an ADSL modem [ 524.615912][ T4321] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 524.657522][ T4321] usb 3-1: USB disconnect, device number 16 [ 526.793366][ T5756] Process accounting resumed [ 530.917748][ T8363] ip_tables: iptables: counters copy to user failed while replacing table [ 532.448959][ T8373] syz.3.950 (8373): drop_caches: 2 [ 533.816680][ T5756] Process accounting resumed [ 534.427400][ T8379] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 534.453770][ T8379] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 534.463716][ T8379] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 537.002235][ T8389] ip_tables: iptables: counters copy to user failed while replacing table [ 538.020735][ T8396] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 538.032777][ T8396] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 538.041347][ T8396] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 538.049743][ T8396] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 538.058324][ T8396] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 538.067677][ T8396] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 538.102929][ T8396] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 539.219929][ T8399] netlink: 'syz.4.944': attribute type 3 has an invalid length. [ 539.302972][ T8399] netlink: 3 bytes leftover after parsing attributes in process `syz.4.944'. [ 542.224330][ T5756] Process accounting resumed [ 545.539265][ T8445] netlink: 'syz.5.969': attribute type 3 has an invalid length. [ 545.549694][ T8445] netlink: 3 bytes leftover after parsing attributes in process `syz.5.969'. [ 545.655618][ T14] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 545.845596][ T14] usb 5-1: Using ep0 maxpacket: 32 [ 545.852852][ T14] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 545.880910][ T14] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 545.919903][ T14] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 545.943926][ T14] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 545.967194][ T14] usb 5-1: config 0 interface 0 has no altsetting 0 [ 546.917123][ T14] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 546.970878][ T14] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 547.009009][ T14] usb 5-1: Product: syz [ 547.028660][ T14] usb 5-1: Manufacturer: syz [ 547.044599][ T14] usb 5-1: SerialNumber: syz [ 547.116784][ T14] usb 5-1: config 0 descriptor?? [ 547.156809][ T14] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 547.181802][ T14] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 548.733656][ T5756] Process accounting resumed [ 549.805959][ T14] usb 5-1: USB disconnect, device number 16 [ 550.993876][ T14] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 555.240894][ T4363] Process accounting resumed [ 556.915449][ T4321] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 556.923569][ T5756] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 557.142929][ T4321] usb 5-1: Using ep0 maxpacket: 32 [ 557.149504][ T5756] usb 3-1: Using ep0 maxpacket: 32 [ 557.163287][ T5756] usb 3-1: config 0 has no interfaces? [ 557.175338][ T4321] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 557.184196][ T4321] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 557.224729][ T5756] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 557.244900][ T5756] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.259657][ T4321] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 557.273918][ T5756] usb 3-1: Product: syz [ 557.278706][ T5756] usb 3-1: Manufacturer: syz [ 557.283329][ T5756] usb 3-1: SerialNumber: syz [ 557.288608][ T4321] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 557.427462][ T5756] usb 3-1: config 0 descriptor?? [ 557.452639][ T4321] usb 5-1: config 0 interface 0 has no altsetting 0 [ 557.481027][ T4321] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 557.499723][ T4321] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 557.527841][ T4321] usb 5-1: Product: syz [ 557.543131][ T4321] usb 5-1: Manufacturer: syz [ 557.557811][ T4321] usb 5-1: SerialNumber: syz [ 557.575207][ T4321] usb 5-1: config 0 descriptor?? [ 557.663853][ T8521] ip_tables: iptables: counters copy to user failed while replacing table [ 557.698813][ T4321] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 557.757147][ T4321] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 560.007833][ T4363] usb 3-1: USB disconnect, device number 17 [ 560.010718][ T22] usb 5-1: USB disconnect, device number 17 [ 560.115847][ T22] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 562.356881][ T8535] Process accounting resumed [ 562.915704][ T4321] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 562.923762][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 563.095643][ T4321] usb 5-1: device descriptor read/64, error -32 [ 563.316051][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.322508][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.929389][ T4321] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 564.217302][ T4321] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 565.344480][ T4321] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 566.589370][ T4321] usb 5-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 566.611840][ T4321] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.750793][ T4321] usb 5-1: can't set config #1, error -71 [ 566.767215][ T4321] usb 5-1: USB disconnect, device number 19 [ 567.921806][ T4321] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 568.610320][ T8582] ip_tables: iptables: counters copy to user failed while replacing table [ 569.275822][ T4321] usb 5-1: Using ep0 maxpacket: 32 [ 569.313375][ T4321] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 569.352981][ T4321] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 569.419560][ T4321] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 569.459191][ T4321] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 569.496593][ T4321] usb 5-1: config 0 interface 0 has no altsetting 0 [ 570.358183][ T4321] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 570.405489][ T4321] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 570.414025][ T4321] usb 5-1: Product: syz [ 570.556467][ T4321] usb 5-1: Manufacturer: syz [ 570.561140][ T4321] usb 5-1: SerialNumber: syz [ 570.586648][ T4321] usb 5-1: config 0 descriptor?? [ 570.616889][ T4321] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 570.677327][ T4321] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 570.735268][ T4321] usb 5-1: USB disconnect, device number 20 [ 570.767268][ T4321] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 574.235500][ T7455] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 574.390669][ T8618] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 574.401963][ T8618] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 574.410499][ T8618] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 574.418568][ T8618] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 574.427035][ T8618] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 574.435486][ T8618] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 574.476320][ T8618] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 574.503893][ T7455] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 575.185484][ T4286] Bluetooth: hci3: command 0x0406 tx timeout [ 575.260857][ T7455] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 575.310887][ T7455] usb 3-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 575.356062][ T7455] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.461197][ T7455] as10x_usb: device has been detected [ 575.477519][ T7455] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 575.565744][ T7455] usb 3-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 576.558002][ T7455] as10x_usb: error during firmware upload part1 [ 576.574596][ T7455] Registered device Abilis Systems DVB-Titan [ 576.793077][ T4498] usb 3-1: USB disconnect, device number 18 [ 576.903774][ T4498] Unregistered device Abilis Systems DVB-Titan [ 576.904631][ T4498] as10x_usb: device has been disconnected [ 577.185507][ T14] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 577.987127][ T14] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 578.000451][ T14] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 578.039722][ T8634] ip_tables: iptables: counters copy to user failed while replacing table [ 578.056189][ T14] usb 1-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 578.056221][ T22] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 578.066438][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.101537][ T14] as10x_usb: device has been detected [ 578.114990][ T14] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 578.239199][ T7455] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 578.295572][ T22] usb 4-1: Using ep0 maxpacket: 32 [ 578.310200][ T22] usb 4-1: config 0 has no interfaces? [ 578.625782][ T22] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 578.634977][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.645519][ T22] usb 4-1: Product: syz [ 578.656166][ T22] usb 4-1: Manufacturer: syz [ 578.660972][ T22] usb 4-1: SerialNumber: syz [ 578.725472][ T14] usb 1-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 578.736271][ T22] usb 4-1: config 0 descriptor?? [ 578.745840][ T14] as10x_usb: error during firmware upload part1 [ 578.758585][ T14] Registered device Abilis Systems DVB-Titan [ 578.815621][ T7455] usb 3-1: Using ep0 maxpacket: 32 [ 578.837442][ T7455] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 578.861720][ T7455] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 578.915981][ T7455] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 578.956246][ T7455] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 579.000282][ T7455] usb 3-1: config 0 interface 0 has no altsetting 0 [ 579.042669][ T7455] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 579.065452][ T7455] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 579.075524][ T7455] usb 3-1: Product: syz [ 579.079727][ T7455] usb 3-1: Manufacturer: syz [ 579.085174][ T7455] usb 3-1: SerialNumber: syz [ 579.091652][ T7455] usb 3-1: config 0 descriptor?? [ 579.112089][ T7455] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 579.142774][ T7455] ldusb 3-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 579.265027][ T8656] fuse: Unknown parameter 'user_i00000000000000000000' [ 580.348570][ T22] usb 1-1: USB disconnect, device number 13 [ 580.731329][ T22] Unregistered device Abilis Systems DVB-Titan [ 581.118940][ T22] as10x_usb: device has been disconnected [ 581.675676][ T8664] xt_TCPMSS: Only works on TCP SYN packets [ 581.862848][ T14] usb 4-1: USB disconnect, device number 5 [ 581.940004][ T5756] usb 3-1: USB disconnect, device number 19 [ 582.036168][ T5756] ldusb 3-1:0.0: LD USB Device #1 now disconnected [ 583.446529][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 583.446569][ T26] audit: type=1800 audit(1788863125.357:4): pid=8654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1027" name="syzkaller0" dev="sda1" ino=2058 res=0 errno=0 [ 583.553598][ T26] audit: type=1800 audit(1788863125.387:5): pid=8657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1027" name="syzkaller0" dev="sda1" ino=2058 res=0 errno=0 [ 586.848086][ T8686] Process accounting resumed [ 587.417251][ T8700] netlink: 'syz.3.1040': attribute type 12 has an invalid length. [ 587.673348][ T8707] syz.0.1042 (8707): drop_caches: 2 [ 588.225668][ T8708] xt_TCPMSS: Only works on TCP SYN packets [ 590.735455][ T5756] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 591.730313][ T5756] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 591.745088][ T5756] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 591.854560][ T5756] usb 3-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 591.901144][ T5756] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 591.992550][ T5756] as10x_usb: device has been detected [ 592.027326][ T5756] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 592.189964][ T5756] usb 3-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 592.195988][ T8727] ip_tables: iptables: counters copy to user failed while replacing table [ 592.222513][ T5756] as10x_usb: error during firmware upload part1 [ 592.238386][ T5756] Registered device Abilis Systems DVB-Titan [ 592.816163][ T4318] usb 3-1: USB disconnect, device number 20 [ 592.930340][ T4318] Unregistered device Abilis Systems DVB-Titan [ 593.431982][ T4318] as10x_usb: device has been disconnected [ 594.256239][ T8743] ip_tables: iptables: counters copy to user failed while replacing table [ 594.739864][ T8750] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 594.751771][ T8750] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 594.759810][ T8750] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 594.767951][ T8750] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 594.775945][ T8750] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 594.784097][ T8750] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 594.822892][ T8750] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 595.885469][ T4318] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 596.115587][ T4318] usb 5-1: Using ep0 maxpacket: 32 [ 596.123851][ T4318] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 596.236581][ T4318] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 596.289922][ T4318] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 596.365200][ T4318] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 596.429272][ T4318] usb 5-1: config 0 interface 0 has no altsetting 0 [ 596.457740][ T4318] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 596.501273][ T4318] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 596.525556][ T4318] usb 5-1: Product: syz [ 596.545965][ T4318] usb 5-1: Manufacturer: syz [ 596.550629][ T4318] usb 5-1: SerialNumber: syz [ 596.593374][ T4318] usb 5-1: config 0 descriptor?? [ 596.624362][ T4318] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 596.679143][ T4318] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 597.964581][ T8769] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 597.986906][ T8769] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 598.014358][ T8769] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 598.737006][ T14] usb 5-1: USB disconnect, device number 21 [ 598.815930][ T14] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 600.363914][ T4318] Process accounting resumed [ 601.961339][ T8790] ip_tables: iptables: counters copy to user failed while replacing table [ 602.241917][ T8787] xt_TCPMSS: Only works on TCP SYN packets [ 603.275658][ T8804] xt_TCPMSS: Only works on TCP SYN packets [ 603.691988][ T8811] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 603.702893][ T8811] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 603.711017][ T8811] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 603.718924][ T8811] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 603.727019][ T8811] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 603.735049][ T8811] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 603.769599][ T8811] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 605.575614][ T22] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 605.616871][ T8822] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 605.634208][ T8822] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 605.656511][ T8822] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 605.695435][ T8822] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 605.711474][ T8822] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 605.724749][ T8822] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 605.737879][ T8822] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 606.206804][ T22] usb 4-1: Using ep0 maxpacket: 32 [ 606.222557][ T22] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 606.252249][ T22] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 606.297850][ T22] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 606.361713][ T22] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 606.433728][ T22] usb 4-1: config 0 interface 0 has no altsetting 0 [ 607.787165][ T22] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 607.825472][ T22] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 607.855501][ T22] usb 4-1: Product: syz [ 607.866344][ T22] usb 4-1: Manufacturer: syz [ 607.885436][ T22] usb 4-1: SerialNumber: syz [ 607.916449][ T22] usb 4-1: config 0 descriptor?? [ 607.968824][ T22] usb 4-1: can't set config #0, error -71 [ 609.407687][ T22] usb 4-1: USB disconnect, device number 6 [ 613.708605][ T8870] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 613.720369][ T8870] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 613.728520][ T8870] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 613.736457][ T8870] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 613.744712][ T8870] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 613.753025][ T8870] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 613.835181][ T8870] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 615.065696][ T8878] xt_TCPMSS: Only works on TCP SYN packets [ 616.723850][ T8891] syz.4.1087 (8891): drop_caches: 2 [ 618.131114][ T8905] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 618.142130][ T8905] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 618.150284][ T8905] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 618.158215][ T8905] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 618.166615][ T8905] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 618.174688][ T8905] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 618.209855][ T8905] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 620.185477][ T4318] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 621.016105][ T4318] usb 1-1: Using ep0 maxpacket: 32 [ 621.397030][ T4318] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 622.255449][ T4318] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 622.266819][ T4318] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 622.278185][ T4318] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 622.291855][ T4318] usb 1-1: config 0 interface 0 has no altsetting 0 [ 622.404615][ T4318] usb 1-1: string descriptor 0 read error: -71 [ 622.417290][ T4318] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 622.436680][ T4318] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 622.465109][ T4318] usb 1-1: config 0 descriptor?? [ 622.489437][ T4318] usb 1-1: can't set config #0, error -71 [ 622.527045][ T4318] usb 1-1: USB disconnect, device number 14 [ 623.055681][ T8924] xt_TCPMSS: Only works on TCP SYN packets [ 625.128015][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.134352][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 628.604490][ T4318] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 628.640520][ T8973] xt_TCPMSS: Only works on TCP SYN packets [ 628.755430][ T4321] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 628.845456][ T4318] usb 4-1: Using ep0 maxpacket: 32 [ 628.854565][ T4318] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 629.458091][ T4318] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 629.465418][ T4321] usb 5-1: Using ep0 maxpacket: 32 [ 629.485658][ T4321] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 629.498714][ T4318] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 629.524668][ T4318] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 629.555275][ T4321] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 629.568620][ T8985] capability: warning: `syz.0.1114' uses deprecated v2 capabilities in a way that may be insecure [ 629.593459][ T4318] usb 4-1: config 0 interface 0 has no altsetting 0 [ 629.608724][ T4321] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.628750][ T4318] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 629.647564][ T4318] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 629.656247][ T4318] usb 4-1: Product: syz [ 629.660439][ T4318] usb 4-1: Manufacturer: syz [ 629.665053][ T4318] usb 4-1: SerialNumber: syz [ 629.671936][ T4318] usb 4-1: config 0 descriptor?? [ 629.678191][ T26] audit: type=1800 audit(1788863171.587:6): pid=8967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1111" name="syzkaller0" dev="sda1" ino=2058 res=0 errno=0 [ 629.706300][ T4318] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 629.717965][ T4321] usb 5-1: config 0 descriptor?? [ 629.747429][ T4321] hub 5-1:0.0: bad descriptor, ignoring hub [ 629.756601][ T4318] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 629.763586][ T26] audit: type=1800 audit(1788863171.587:7): pid=8968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1111" name="syzkaller0" dev="sda1" ino=2058 res=0 errno=0 [ 629.796709][ T4321] hub: probe of 5-1:0.0 failed with error -5 [ 629.803819][ T4321] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 631.798937][ T27] usb 4-1: USB disconnect, device number 7 [ 632.045504][ T7455] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 632.067180][ T27] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 632.235862][ T5756] usb 5-1: USB disconnect, device number 22 [ 632.307146][ T7455] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 632.342979][ T7455] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 632.542583][ T9001] ip_tables: iptables: counters copy to user failed while replacing table [ 632.656055][ T7455] usb 3-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 632.797886][ T7455] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.925503][ T7455] as10x_usb: device has been detected [ 632.932709][ T7455] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 633.143286][ T7455] usb 3-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 633.740634][ T9009] ------------[ cut here ]------------ [ 633.746193][ T9009] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 633.795591][ T7455] as10x_usb: error during firmware upload part1 [ 633.810881][ T9009] WARNING: CPU: 0 PID: 9009 at kernel/locking/mutex.c:582 __mutex_lock+0xa1c/0xae0 [ 633.820503][ T9009] Modules linked in: [ 633.824400][ T9009] CPU: 0 PID: 9009 Comm: syz.2.1116 Not tainted syzkaller #0 [ 633.831904][ T9009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 633.842019][ T9009] RIP: 0010:__mutex_lock+0xa1c/0xae0 [ 633.847407][ T9009] Code: 04 20 84 c0 0f 85 b3 00 00 00 83 3d 75 fe e6 03 00 0f 85 f5 f6 ff ff 48 c7 c7 20 03 8c 8a 48 c7 c6 c0 03 8c 8a e8 d4 7b 13 f7 <0f> 0b e9 db f6 ff ff 0f 0b e9 89 f9 ff ff 48 c7 c1 40 a1 c1 96 80 [ 633.867133][ T9009] RSP: 0018:ffffc9000ee6f580 EFLAGS: 00010246 [ 633.873216][ T9009] RAX: 1599476026963200 RBX: ffff8880297ce010 RCX: 0000000000080000 [ 633.881234][ T9009] RDX: ffffc9000f833000 RSI: 0000000000002ac5 RDI: 0000000000002ac6 [ 633.889244][ T9009] RBP: ffffc9000ee6f6e0 R08: ffff8880b8e279db R09: 1ffff110171c4f3b [ 633.897263][ T9009] R10: dffffc0000000000 R11: ffffed10171c4f3c R12: dffffc0000000000 [ 633.905272][ T9009] R13: 0000000000000000 R14: ffff8880297ce008 R15: 0000000000000000 [ 633.913283][ T9009] FS: 00007f77a5a946c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 633.922258][ T9009] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 633.928897][ T9009] CR2: 000000110c442ce6 CR3: 000000001eb63000 CR4: 00000000003526f0 [ 633.936897][ T9009] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 633.944865][ T9009] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 633.952906][ T9009] Call Trace: [ 633.956302][ T9009] [ 633.959319][ T9009] ? preempt_schedule_notrace+0x120/0x120 [ 633.965107][ T9009] ? lock_chain_count+0x20/0x20 [ 633.970040][ T9009] ? as102_stream_ctrl+0x23/0xb0 [ 633.975050][ T9009] ? mutex_lock_nested+0x10/0x10 [ 633.980002][ T9009] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 633.985654][ T9009] ? lockdep_hardirqs_on+0x94/0x140 [ 633.990918][ T9009] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 633.996568][ T9009] as102_stream_ctrl+0x23/0xb0 [ 634.001323][ T9009] dvb_frontend_open+0x52c/0x12d0 [ 634.006466][ T9009] ? down_read+0x1a8/0x2d0 [ 634.010880][ T9009] ? dvb_frontend_compat_ioctl+0x8a0/0x8a0 [ 634.016691][ T9009] dvb_device_open+0x269/0x360 [ 634.021525][ T9009] chrdev_open+0x585/0x5f0 [ 634.026021][ T9009] ? cd_forget+0x160/0x160 [ 634.030427][ T9009] ? fsnotify_perm+0x39b/0x550 [ 634.035239][ T9009] ? cd_forget+0x160/0x160 [ 634.039681][ T9009] do_dentry_open+0x7dd/0x10b0 [ 634.044473][ T9009] path_openat+0x2674/0x2f10 [ 634.049072][ T9009] ? __schedule+0x1087/0x4030 [ 634.053736][ T9009] ? do_filp_open+0x420/0x420 [ 634.058421][ T9009] do_filp_open+0x1ee/0x420 [ 634.062916][ T9009] ? vfs_tmpfile+0x470/0x470 [ 634.067508][ T9009] ? _raw_spin_unlock+0x24/0x40 [ 634.072352][ T9009] ? alloc_fd+0x590/0x640 [ 634.076733][ T9009] do_sys_openat2+0x14b/0x4f0 [ 634.081468][ T9009] ? do_sys_open+0xe0/0xe0 [ 634.085914][ T9009] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 634.091890][ T9009] ? lock_chain_count+0x20/0x20 [ 634.096750][ T9009] __x64_sys_openat+0x135/0x160 [ 634.101597][ T9009] do_syscall_64+0x4c/0xa0 [ 634.106022][ T9009] ? clear_bhb_loop+0x60/0xb0 [ 634.110687][ T9009] ? clear_bhb_loop+0x60/0xb0 [ 634.115384][ T9009] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 634.121306][ T9009] RIP: 0033:0x7f77a4b5e98e [ 634.125746][ T9009] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 634.145374][ T9009] RSP: 002b:00007f77a5a93b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 634.153779][ T9009] RAX: ffffffffffffffda RBX: 00007f77a5a946c0 RCX: 00007f77a4b5e98e [ 634.161760][ T9009] RDX: 0000000000000802 RSI: 00007f77a5a93c00 RDI: ffffffffffffff9c [ 634.169737][ T9009] RBP: 00007f77a5a93c00 R08: 0000000000000000 R09: 0000000000000000 [ 634.177720][ T9009] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 634.185699][ T9009] R13: 00007f77a4e26128 R14: 00007f77a4e26090 R15: 00007ffce9c7d518 [ 634.193662][ T9009] [ 634.196695][ T9009] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 634.203959][ T9009] CPU: 0 PID: 9009 Comm: syz.2.1116 Not tainted syzkaller #0 [ 634.211309][ T9009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 634.221438][ T9009] Call Trace: [ 634.224784][ T9009] [ 634.227718][ T9009] dump_stack_lvl+0x188/0x24e [ 634.232424][ T9009] ? memcpy+0x3c/0x60 [ 634.236531][ T9009] ? show_regs_print_info+0x12/0x12 [ 634.241722][ T9009] ? load_image+0x410/0x410 [ 634.246231][ T9009] panic+0x2d3/0x710 [ 634.250132][ T9009] ? bpf_jit_dump+0xd0/0xd0 [ 634.254627][ T9009] __warn+0x2f8/0x4f0 [ 634.258605][ T9009] ? __mutex_lock+0xa1c/0xae0 [ 634.263266][ T9009] ? __mutex_lock+0xa1c/0xae0 [ 634.267948][ T9009] report_bug+0x2ba/0x4f0 [ 634.272337][ T9009] ? __mutex_lock+0xa1c/0xae0 [ 634.277005][ T9009] handle_bug+0x3a/0x70 [ 634.281165][ T9009] exc_invalid_op+0x16/0x40 [ 634.285660][ T9009] asm_exc_invalid_op+0x16/0x20 [ 634.290507][ T9009] RIP: 0010:__mutex_lock+0xa1c/0xae0 [ 634.295777][ T9009] Code: 04 20 84 c0 0f 85 b3 00 00 00 83 3d 75 fe e6 03 00 0f 85 f5 f6 ff ff 48 c7 c7 20 03 8c 8a 48 c7 c6 c0 03 8c 8a e8 d4 7b 13 f7 <0f> 0b e9 db f6 ff ff 0f 0b e9 89 f9 ff ff 48 c7 c1 40 a1 c1 96 80 [ 634.315384][ T9009] RSP: 0018:ffffc9000ee6f580 EFLAGS: 00010246 [ 634.321443][ T9009] RAX: 1599476026963200 RBX: ffff8880297ce010 RCX: 0000000000080000 [ 634.329400][ T9009] RDX: ffffc9000f833000 RSI: 0000000000002ac5 RDI: 0000000000002ac6 [ 634.337357][ T9009] RBP: ffffc9000ee6f6e0 R08: ffff8880b8e279db R09: 1ffff110171c4f3b [ 634.345321][ T9009] R10: dffffc0000000000 R11: ffffed10171c4f3c R12: dffffc0000000000 [ 634.353296][ T9009] R13: 0000000000000000 R14: ffff8880297ce008 R15: 0000000000000000 [ 634.361260][ T9009] ? preempt_schedule_notrace+0x120/0x120 [ 634.366973][ T9009] ? lock_chain_count+0x20/0x20 [ 634.371815][ T9009] ? as102_stream_ctrl+0x23/0xb0 [ 634.376739][ T9009] ? mutex_lock_nested+0x10/0x10 [ 634.381664][ T9009] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 634.387288][ T9009] ? lockdep_hardirqs_on+0x94/0x140 [ 634.392471][ T9009] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 634.398097][ T9009] as102_stream_ctrl+0x23/0xb0 [ 634.402846][ T9009] dvb_frontend_open+0x52c/0x12d0 [ 634.407858][ T9009] ? down_read+0x1a8/0x2d0 [ 634.412257][ T9009] ? dvb_frontend_compat_ioctl+0x8a0/0x8a0 [ 634.418050][ T9009] dvb_device_open+0x269/0x360 [ 634.422805][ T9009] chrdev_open+0x585/0x5f0 [ 634.427207][ T9009] ? cd_forget+0x160/0x160 [ 634.431615][ T9009] ? fsnotify_perm+0x39b/0x550 [ 634.436374][ T9009] ? cd_forget+0x160/0x160 [ 634.440771][ T9009] do_dentry_open+0x7dd/0x10b0 [ 634.445525][ T9009] path_openat+0x2674/0x2f10 [ 634.450108][ T9009] ? __schedule+0x1087/0x4030 [ 634.454777][ T9009] ? do_filp_open+0x420/0x420 [ 634.459444][ T9009] do_filp_open+0x1ee/0x420 [ 634.463937][ T9009] ? vfs_tmpfile+0x470/0x470 [ 634.468514][ T9009] ? _raw_spin_unlock+0x24/0x40 [ 634.473350][ T9009] ? alloc_fd+0x590/0x640 [ 634.477671][ T9009] do_sys_openat2+0x14b/0x4f0 [ 634.482345][ T9009] ? do_sys_open+0xe0/0xe0 [ 634.486765][ T9009] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 634.492732][ T9009] ? lock_chain_count+0x20/0x20 [ 634.497571][ T9009] __x64_sys_openat+0x135/0x160 [ 634.502408][ T9009] do_syscall_64+0x4c/0xa0 [ 634.506814][ T9009] ? clear_bhb_loop+0x60/0xb0 [ 634.511480][ T9009] ? clear_bhb_loop+0x60/0xb0 [ 634.516144][ T9009] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 634.522021][ T9009] RIP: 0033:0x7f77a4b5e98e [ 634.526418][ T9009] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 634.546023][ T9009] RSP: 002b:00007f77a5a93b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 634.554445][ T9009] RAX: ffffffffffffffda RBX: 00007f77a5a946c0 RCX: 00007f77a4b5e98e [ 634.562430][ T9009] RDX: 0000000000000802 RSI: 00007f77a5a93c00 RDI: ffffffffffffff9c [ 634.570419][ T9009] RBP: 00007f77a5a93c00 R08: 0000000000000000 R09: 0000000000000000 [ 634.578378][ T9009] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 634.586335][ T9009] R13: 00007f77a4e26128 R14: 00007f77a4e26090 R15: 00007ffce9c7d518 [ 634.594296][ T9009] [ 634.597567][ T9009] Kernel Offset: disabled [ 634.601879][ T9009] Rebooting in 86400 seconds..