last executing test programs: 12m43.43438294s ago: executing program 1 (id=1534): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r1 = dup(r0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0x1b, "0062ba7d820700000000000000000000096304"}) r2 = syz_open_pts(r0, 0x80) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004845) io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xb1d7, 0xc880, 0x1, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x3, 0xffff}, {0xe, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x40010) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000000)=0x6, 0x2c) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) dup3(r2, r0, 0x80000) read(r0, &(0x7f00000005c0)=""/228, 0xe4) write$binfmt_script(r1, &(0x7f0000000140)={'#! ', './file0'}, 0xb) 12m43.276524471s ago: executing program 1 (id=1535): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x1, 0xcccc0000, 0x1000, &(0x7f0000c56000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000fff000/0x1000)=nil}) 12m43.05439313s ago: executing program 1 (id=1537): munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) syz_mount_image$vfat(&(0x7f00000010c0), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003f80)=ANY=[], 0x1, 0x2f4, &(0x7f0000000900)="$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") open(&(0x7f0000000080)='./bus\x00', 0x147c7c, 0x0) mount(0x0, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb351) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x9000}], 0x1, 0x7000, 0x7, 0x1e) 12m42.850731152s ago: executing program 1 (id=1539): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) lsetxattr$security_capability(&(0x7f0000000340)='./file1\x00', &(0x7f00000002c0), &(0x7f0000000300)=@v2={0x2000000, [{0x5, 0x400}, {0x33c057da, 0xc8}]}, 0x14, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) write$binfmt_script(r0, &(0x7f0000000940)={'#! ', './file0/file2'}, 0x11) acct(&(0x7f0000000140)='./file0/file2\x00') 12m42.602136216s ago: executing program 1 (id=1542): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000063c0)="99529ca7d265e2dba44891e35e7d5dab7921b730436ecd4e999a25bcf86a25f8f029c0dd50373e90b7cf7779b12ecd4423c5b13cfac186975cd723976f3c747612913029d42517c189364bc59d8ebad53ed1b86f8f66c99b1f9b5b40d78cef1f14f81815d53bdca7fef40607358db69eb8c0b1f6b0942ab4b1ee7ca8deb4eddef06381a3d1c52d6147fc5109c7c607591497a6b2477f60cc881d3219c96bffb34aadec3fa97250713cce17cd536721bf9c40a019531ed0bbad139e26a3d4d39b68ab1bf37cb1a4bd197a8789cb1940cd86d9e56713bc36c7cffd07a311f5bc2e91f16d152eb480645e85ec9b3bf09c7fa140dced0afd55d7b99e90a96e7748e2d0dc09672ac199ce529e631efe1783769819c182ca106f6184bcbb387ed246c43562d74c36ac3a7ec2f0e11f70bad0007c03bb9c0d2dacc2148cce4a4aea327c7319016ad146b52bfae0357f9e892e9bec61a13c93551cfa3d4f4bfa7585c93bb0bef01a9114f3dc54179cf9a57fe88f5cff3403e33c9d09e3e9c2e10f1f16894e1b59e3cad47c1f202cf7b756f2851fc96d09459c9a8d34c19e6a3525cd5001aac5181f57286d0e1e88ce5092c7c76b6abdaebf2c499aa47587b48eb12a2b72548c190b0324ebedb81a63333b6edb25550f859c5ccc404a944ff7f61af8800888192fbd4c8e0e417d1d181b4b335a6f52e0a7dae18397e81e3f747cab7be902ed903bdd6a622f178f9b4244718ee1206237257374d2fd1466ab6135ef7ef4a114ae170eafe9cd78cf9ffc36974cbc4b8003072bed78765a0b9f1240f24dec6a9e46db9bb498d40f727c0cbf8f4a6a49539bd0805caf65d80130d7fb60a69dc7ed890874a17530c042cf33a977d331435d68ef33885f638c777ad49564ca77d8b81ddd853a21cd55d95b627310dd633a4f005853a5506cd8f744c367f3cb6998b0fa97de6bb35b166b0c6408c4e0a38ed26235a88520c38ca97ac8a6dc81e6dc6483d383fa09f198997b8eea1c68c9e3320683c9a02dd89ddc34c241e7294ccc88d6b35762892e8746e558bfbc2251949f2ecb763dad5b975eaf36e2864be6a41d3e20514d32f5d4b6350dc7e3cc3a85428ea98efb3b1edc2a2ec1e618452949cc7e2ba1251990168fee342d4f304b7a7af9162bcbe6b09c75d7420d2c547b4e3cee1836df6eddd5dff73a4e308fcd8eaa7a33e6980a6f8ead03257a37d72d3b265d02fa42f57db877654ed513e31c35e1af0bd28511d6b57cfe07b27cbe9767a534b426dfc3dd257d5899444f34cbf4dc74b9eab2e7e3e1e1a8a6ac5e4359d653506b299a5b7c67b92dc462f1216655f952362a3387ad9966b606d98e8d1b544dc27dc6bc78fd18a446736e25c51143db9886b6c09812d5825b5d9e0932f218ff8bea4d9e1c4df9c9d4eb19336d48163a921c4ff1f0beef26b01b7e8c0d23fb59b84e229eaabb791f2cffc9aa4db75162cbfe4c9ae8d76a5b6bc4bff20e3f8f125b9aadb3e728d7f78d61fd55f46b7f59511b876e6563256686e44f25cf38d393a9b762bada272eba8df28e4086c4cd2fe3c9fab97756fb145373e6ca1991bb1ee6589e49c821ff29f047970819f88f724bd077cd3f0ae463d99b3e53078431e3f9bebabc5289a65479359efe3909186aac60a29f561de8c590988c913c9e693ab8106e8287f6565eee6735f7c88cad7124d1c8d9ff347e97912824088ee954de01c6d8a06447f06899607eadbfd078bc3df506252005749378dbd7399c9eca60b81dc0d88dedec31e5cf6e7b6d6d411958df8f9e0bf4443e8d3bdfe49d05f811d17088024d0629fc8ab8e05e309bf55e8e60d342623765f4e8d2dc4a90291cd4354ff9568c8170e6ea56e028bcf2719595253adb8c84050bb9ce4927a1c1f4560da87d109ceda90bbe45a1717763d8025f1ff40f157185ddf17079da272ae10c4f34162caf4b0d31221a57b3059fd449c87554d968a54b2eebd760dc3263c40d9eedf5905d5699d29706ea6e9e81ff2bf92489a06deffe7e978661f37a88450783e23f107c2bfce000dfc91c5fca49e46d9ea978f215a45984699f0d2503b30a741e13be56b7abe3e5663c0825c3cb04ead44ce97719c4ee6f4cdd3c452775ad7163d5c9034583cc2dbc2b0c04917a3e1aa3d0a8bb6fcf94d7922eb1d543c09185827aeb1b72ae7103ef2c014af2ff4b47fca40fb0e66ddf0264476d7a84e9b8dc551d4c407bdbac6757f7a25bd404b45bec1091696203cc438860131ad5f2fd80e3c45629864dd9f7d302b66fb8fb86735c9a6dcf8b135a273dd2ae9473bc905081be9fcb8f91b1ddba1ac692798dac0b9ccffe0319a779f5e10c65f294b22fe475283b023f9cd890e92c5447b1bc1528255c5af383bc1fb6e72cb9a67215a9e25cde63c89baa8c7125c7e8b748b728d07d9cb66778404f54e6a9e3ae1ae82f3d0ce77199f23f94a01b71b805b476fedbebeb52c83a1b857f23ba438c56a6c4c2a5909f721e6e3d240e4a16455e92220d13022ce7ec0b1365ba4e67aa6ecb324f8826579e12cebdfc0d8af63e83b5e5624d5b791f99093f9a27f7baea9fd10111209c0857a04f07408111063ef34026aee27a3d51b40e53883f9094402534bdd21cc49d7f5593e99cb204cd805bee4add0f82cf4b6dc5da14d6b79fbc68c9ccf7fb5fe774f8879e13079b024a8ad24bf123c420d630837a84ba05abf0ae4dc3fc04f25c7f74ff91d0d609c958642a48551e51b5c0074a56a7da10ce153b08cabea636f8489d8e7b655758a41d7f7474c9d76bf4d54d789bfceaffef139854065de6a94b0275a9626aab99ae838364b1a491e55017e4212b6b01f7a41bc9c215ecd17c49a8610db28c699259c58b81a0e84c45fd8e719c05c48501c49e8a6515044d247f58e4cd0bf22fd6ae31f45339d1f801196d426c52269b1aaffaf18e2a03760bb231cb7cefa6d72f1d7eb6a3bbd65d0914221b8fbf531dbd562eb4a1b28983ac7d83d4813b10b34c9525ba644f61a2c4800d4fe96a7bca63da1041ed73cc57fb9d42f9dfc8ca41d80292bbb311c89b0a0fcee1d88a025a7416863342aea00e6f049cb2ddebd17c5c617ff562a8af0c965cbe8341431a30ea239e4a62aa2b19757a3b0de04229a9907f8610c27b26591405845bf8b5b83706ed18d910c4f68777378366ff565617b19168a04560a32ce5ad64aaef9f4377118c4335b24826cdcde78fb4bdb11498553f56d8dfeb3a482c70cc6580c399b92339cbdb3464fcc7b00e9839fd0d2b8b6db90c56b33593a0048bf7983421f29b1285c81a239045b96a9b0cacd70d6d9853206471f06915efc8d3ec4c50fb13601abc73247a656066fd7b329159b3ce9e3302b4c0d6aec58cb0946a8ee8e7f55f1af604f1edb4d887fa6292dc0ce57705c1a25dc62650c127d11a364b397aefc2fcc3a164bdc53165a461b01de9180c1461b309c75af0911b4cc1b8aa05652b62119c87b4b235c573aa15b1516cddf61efd6a7f8c953fbaaee9c0e800e8f519e1494de850ddb976864088fe0cf90bbc54395078ea2501e8baa84d6807e184105bc2a140b663416496886422643bbf764d406af06e7d086678828defda0b648b25666b7b5ea29e927141740d5be0e61bf25d40b8404ffd3c67bb855b11d4faf82b7b8051615c101c3deb0601a0fa9ecd8b4a95082ccbc8222b0982802dd8430e653d6eea2786dc3a91397135faffdc65a5bae048f5c463b1a6648becce961d39d063d28d1ad6dafcea0b0878379adb16cc0d4cea572abeacd9a168a4fe2e338092b5bc93ecf02ac6ccda03e5b23adf511fdf7a79442093233b79c67d3fdd3c36c96a8f67aa79e4743d99cf963ae6161877f73656eb0314d889f4b8649bbce8a759f90eac6c006197b54b2bbac7c9b237f1e3dc099c62a65481960e6ad697fc66316ac084ba99c60f58bf44ff45f3b2006cbc4196a25f124dfaf247e863a855ef6070deb45219a922dcf2be9bd01c340e1ca5ed7c3ddac9f7a677c5d00610991d21e0751ac8044585b39f3fec5b672a11a9bce32196c2003d01ea50b0f0403e16df188ecbbb74f295f01398363ddfecdb63a49347c912c125670205d7b6be999688df85bb7d5ac12b62b4fdc4eadcc2a9a7897028404f697b007603a0ad588c772952d6670ee870771774ad157c0b9cccd4b2192d835606198ea0c65036ae4e406cdc539ff3aa81fa20b7ab58d6f3abdb69cc1f503d593f7025d2035e7f21db76336efc2843a0dc9bd2eb8794718134ee68fc57d4d2bcc18969d08177f442b87433b48540c661940cf9e2462c53efa310c7e47487deab2ae15b1978ef05aa1e14110943f649d82486f710a39854409e74edcaf06b4a92d3580b9cdabf83c6351657698d3d5af7514f382e75d1c912cded577258603fc9ed002e010747cddf7885d34afc9a84d82696c6660cb5ecafb68b564908fc49c4db6a187d037241a26b1141cf20f2e968a53366db0f60b79cd98cf3c897c50b7b9728e6e7100f99e4d5ed2428dbd285516ca6660777a39b4b2617c1be5b0232d60b9c8099f5daedbf190109439c40b46090985200d6c0501313f3fa4d244864575c275faca47aeff32c7b3e3c59392618562a7c2d4b3af85a37a8847f595352024cb63d3a9085c2a502c6a3248f43c5fc828e636cb634b2d393d853ae2dc9605985cf85c060860a90256c7b574c1e01c320687a2bb0b2d51cc2950c485f2ffa5db0ad7aaf753f543de7f86efb775c6bac2989a33757a28836fd27f9347229a0004bd2e546994c69c678fe5717f613f905d945c072004c3a80e0e54215e19ff9972521890d4e705e429f16fc35fe5a15f2e6b75cd719d38f76b087b62e4b5dcdb35f4baa2bab167150bafb6c69e260ca51004bc826d46b77c3f67eaa08497294868e6d91b7b867e4da62052f4f891677256cfbaf19cf32bad99a7da69d8a66537686f89a58d78c7eeaa99cd38009a1a32582bedc5c718e57b19cd405ae659a89909356a07fcef89384d160fa5ae6683cc379642aea4f0c915f72d679bd521399cb16112f2abdede3001400b4a64d2173e153a68631183679b56b8f389ba889784133453a7e892fd3b092f5040870a3cfd6f982990143e7c0882b4ff4c5d049192d36925a25ae4be441aa30dc7e74398b340c45b52c73ed3b0cd640e3cc9fd4be24e7355f386106f65895f1ee850b2a781d1d1d322ca5a3b0fdb78ce1eda048ece94af25437969c99c58c08f1446ca5541e03987a20fd75283e3e116dc4c9222ab7522e4ccf6da14aef49cac9a6a2cd4aba1c54d49e6da4179a66b84e384cd3da53908579b28c11d525ebdc4dc69074cef8a9ecd3aab98f2858769d656b46141c3a4e69a5ed6c0a732c9ec1fce080eaebf537fa5e17236a44ba9c931f555d193e475ffafd20c53ccbab607c1a15fd06742a64691205eb0d00f7f40e4dd8efb279cf09b2522aac0729a631aacb92d5cfa2ce6bb07385b981890b5916755d5cc3a51c8c36bd2987068cc24fcf73840895469bbb9aff1059601f771afedf0a48d5921103920515b27d7e607951982feba197df8c61600feb3622b9eea13a4db4068728cb98cca76cfae197f6258758490bf41673ee29acd91fd296ec863c646e0ca6a0f0e9de146c663ba13d962964d7c32804fd12a14c1ca7212ad48bdfab469c6570dca562220ecbe7b6b163ed4c9361c5c10bed5c92861b8786ada20a99245d282e4454187ec02adfe354e30647cb10661c85168f7958e3ce69ab48c9455214707a63c9b1167f0845a6bfcce2a96cd53eab430f13cd527f1666290719a47c517cfa22fec2e9916af8aa93c78e567993d7fb8ee60fc4b903b8c67a3658302c5e5f35250c30427e4c055b6c54705bc599861f80b7200d361965ff98c88cc698a2615cadeac4bdfd3d613377cea52d2bbcb7e6b78ac31d4b2c33eaf0b2ed40b963e3cb25c7dfea3ebfe7b4aff2aaaaf184dc80ab649a108e2c830ce7eaea58a263392aa9cd13d7f7bd607dc7c804b19dfa41b3e5a5155201a87311e22062c93896e70f3a5c4b03521300b61cc311ebd5beb9838d0ed207c6bfc99e4392508e95804b10b36024f32e1fe1138e9ee7773f797b2bc6be7416f4e9691ef4c2a8d06af6c8b84bd1e6fd1ba3d3183475ef6c139ccf8dcf37671fbb96a2ab5e0e042f7c4728cf30bcc1a0de28a5024276ceaa194b4926e7f6a97b78bac36e47f832d56a96cd266434d37bcf2c2f57877717d91b1854972f832354acc207a2ee8caace7504e0e6197dd7e64a01c4c67bb2de8acc0cccc6c6bff0b0cbfe345542c5a795dfa48cc0990ab5702574d36494bc44c20f5b324f7c984d986cc8cb40cb2550076d96a069b6688d22171beed2dc5b6ff3ede8fff4c4a9de6d3817357a7ca7d24d87300b4545ebbac8cf7f09ec637a4f4d6bd07673709b6c363a75ccef585610c5f15de7851b5ab53e02a757bfc3caeb9a9a8996beffdc0cfd1201b6cd99cb035584e51a6c15a5d2e17d2f8aa6b41e26809392fac6caed1e02a53dcea8a413203608780dab33315a76eba24d540e4c5b9790420834bc8d4e47bc65ae52a54c0ff308427a8d7aff746aa6589d17514e40fee5d0b3533cf4ad2c5f9d96db9f50bd69ed8c92b860e199a35cf268c66ed13516a3b4b024f62d4b2a656067eece95575bdb4907efc488a9821bc3a9c81dd11b2128b7a01aa7a9ce6e73de3b4e9beced70206f91575baddbcbe5722337953c8016a0f4b62120d776c43b7d1a879b692107954f45acdf8967dcaa994aad4922d4fe093e16c2d0090906f5036af99e50bb09b04e9c9b3b5085abf621297ce203010249cede92e9b66b446b86b43eaaae228dfdd3b4408c12b404bb727f7e969e7da04fc59900112bf8d38af0416dc616e75f167aa1352215f07115a6f4eb6bb5fff6f5c2fc9ab906392036b44090e65fdaf017dc53bc94e0807d679d793df18cc44e6c846d414cef1569530f7692daf91eaaf4ae89fe2522f2c9cf33b6ca508ebcd006bc1a61f0c800553aff9dc7d57200b25ecb83e1e0b8cd29520b63aa649d3f71a62570eee56e03223ddf31f0c04fa686b7f6dd054e7a259d9ba335c2c5b2c508897506c0db7f01878dec1411c33f0af61b81dbcf9ff8bdc0c50044963a79f3ee1462150c6bd03a32dbdfef8d72f0b8b3a395ffb0cc85792e7bc867feb5e312cb64e29e193388e9f173c162f4a1320a6f99ea3795fb77d982605959909a1aa11076fcc779ea6b80ec1bf0edfc2569ec04d15a0bdeebccf3c75393dca5e81663532f8ced12d08e4c2ae6e2954d427c7bf053dc4718f56f453bc88d74045bd2f9747aae9b5298a0de927f1d6b1308f4e1483487f083e71ed09298deb52bb10079b13def7453eb432498069edb5ade70c5c54913684d934a3febf78753ac13300a91f467ff3f6e2f00898f015d08f7739047b321b3eaee5ad8aa7adbf7833f014d8c576a491af9fca6843b327ed513821cb3951b2e67a275225d7af6b382e2f955adaacba5d1fdea2223202dee132b91d5cf381b51da94145255f584a70c5e8d11e06a44afa6599bf3ed0cb61703eba254333af53afac60e54cf6397f9f7302249ab644f0b576c713b15007be1f4f9bb213660bca8a70251472b86669d361ef968f542e81ddbe8f4d2e9cabe8d7bf6a31f14a2cc272963553a424c105e7750437ec5bf316e30ce60b4b0c27ccc1eb27e60f6472fef27654da49905ff9c01b28695310ecd8701aedff25a83da4b7c41995f902bdf249769dcb53a3efa894710dd66ba8745ae2253cc6b75a038183a0bee21226d48239320efad6727093e4f94bbc2fdcc216200d903c32bb9f16dd17d5dac423ae0696f3decc576b8f1fdce63d0532370af7d1e2fa2ca5c5d17bd88f5e3abb4792dac8689ca13752f83d753b06b037bf5a80a3748983790352775685b0414c9d74849fd217e388f904278ddb6b0abdda941b61579c796e2bb77a9bc363b18642c401faa502a31011544111b6eedaa369976c814773d83220a75f31026d6ad0b8b4298ea6062234db232bc435e096e84f740e55bb14d46ae04af0500aa5bb218aff6c76aa8a8e3140a1b0d6638538fd7f30fa8d992e53abf8af2fbc16b9e8a668c1aac72cea1a746ee5f7f3392a4ec8f1d19f2f426b6069b1cd347cbc38bceba96ce5da49198083403143c740c04639cd1089abb34fe812d85921c47437604f684bca44a1eaa965c0a6e1c1fd1f70ee932af3455b36184cc15934cdb3f28959d37d8fc10696f8ec1e4b0c3d1b9ff74a01b796d1bb68954a3768c8bcec741b3b69da892f8922142b16b2cabb469a9906b34216243fac80374c10e178c5fd36440f8d7a8588a9c2510d86ffa8cb68ce8c330d2111c94724e522f04573dad43bce252eb505d29ca9379a6b281519d38b7174f3ae8f185544f3003c936a7e6b23ca97a313aac6a061caa45fda73522f3061767bb4e33dbe4bde390eb0f07225a8aef939cb6ab2ada10c02527281abad394cd4ea9f59467a08b72047cdb75d7b2b98e5b4542554a60f953ac7a4b980f42518eec05ff2c044549cab0cf33eef36dfbabcbc0300009d898862d2194cfcdd9a713c30bbe52291105193656ea5eb830873ac956469d31689cc3c69edb5cb9a6e31ce3e6fb50ddd4e52ef9fdeacfc0db21e1e83e0d8d0a64f17cacb4dc208a893e7fd8ffa86cfc554dfba3d9fd281115eccb4b9d909f2fbf3fbb66bedd7b5db3f6d4f076f5d8fb54f8832896f8ef6f624162f1dd589be7a8e87dd5065708a8b0bfb18a5c2299f5605ac8a11c1add55b2018e6099380a70bee3e0727ca6ec58928fe6eb3147b47401e8d822eebade713b58335787669e5e0de5d328a1067df4cd9124665bb02ee8adfd1b3618374ef167df1f0fe79456f78aee3da4c1bf397e4637b0cf41a0f4a2910efd02b17bf5f3c15b0084b36fa7d4e85a53e5be366b428244eeba7499c3e54397227928e2ff6e583f332d6f7e8cf4d058f379b58a7d03a4bfa454bb4b6d543804b8970e6a9fe8886179eb418a8ce9e509e8433571f7d32378f2e983fa418c8c91760ec9fb20968e7fc23b7c4ac71693b2576ac0f8ce2020ff1e7a7ff24301b48b544fb29a1ca4f2502daded865e488a16dd33ec67b2eee3025cdc5ef90f253c4b5e0a61d51e495b675c5a1d55b4ba3812c5f44cd08487e61d36b0c2dc32d27333a5ee8a0906bfbcd388bd9389d1509912c0471c7b706a5aff880569a3fb11ac5f14d780deb4c1b1afe30fb6b8daf87b27a4ceb869d587a97f2f5af8d819aa47bbf207db68a6ecbbefb1e109ed0bfbbf3b54fba9e79de8fad9c3bcd3e74b8b92ccea3ff5c558c6cd72d78a711fc39df603bd4aa1439dd302258edd2204e52d7f435c6f552b612fbc321bea971195cd4d8bb033e2a779e239164d7eea6d8fd233b0b9b776246564cfcf44b31a83031a2413bf98a398c9f93da243cef9ce73d81bade8ad551fb0ffa75bc874c11d23ac9d7752f22a0f54c3870f3314a83e64332db810da1ebb288e10c4eb9be9ec037317b8f813e68160a887da3f5c0389510a0734b69ef275e19973b169d340610cf2112e9964cc0566b9b690c3feb36c8526491d3a563f0bead2abbcf0665e048aa3f929351b2f89876580633a403250ae3b5244c8c0e996bf888938dfc8920348d88e272e6eadc7c0387ca1dae228bd620ce3975d43b58758d9412d304a227245587065f58c4573ba2557f1d8333ba007709b1239d682f03405b22135757178fb701bbde81d2f8faaa7666c025d8a8bb426dc4b8e61aed79b3b3d3a9b01ee9142772d869677ede166e7a8be8ab84cdd6946b1478ce77ba307213971cfb24c86c344310f279e38d22254bf4caf83c02e715cb0550e615dc9f8dd2400fa749e3527493c15fb454c158e4c0603ae6e962b7890058ec7c10f0618ee274a15bca6ca9fe5bc5f9e7797c0950299912be9c58463c07d667d4bffe8aa590ae43db08512b40f3d265026bef2facdd508984e5f6d2ac7ef573397f14ed2e2ccdcbe5796e60ae64d173814906d1da5a5bfe8a2a4c5d6bb0b3315b878b4877d0c045f6e6cfa0dfc1ea4de7abe26f2b2d8c93299ed1d83f1b7853c756bfa346cd53b008fec169883983fe0f2405777dd85e17b2e4e8b23432c0dc4c386d67b6597184d0b4b95877362304638484cc0951400f66ee8391dd44417c58b3d46a8345a8049fcd70f7b5f4a6f912e2b18760947c74ef2b732b342878d7e7cc99902de87db36469555fbbfe76189f108d6ab31f4727fe4e22d075afaf6cc726ab17a5e1b4ab6c8f29a459da3c4266b5ad8ff55906a190f8b19a3bb92a50df49647c03d5d6106ec07e9300038d059a75b54ac31683ef8e5eee946e1c84d016ee1e7800a92c0a3823b62e0417fe86b191951f65abc0c38c1e0e8f1121a04b62a8a720790560f922804b1b7e7eaa497e1bede6e3d0dcf0312dbf221561958fa1e85a8f99e6fc82f919e78c17d1beda16cfef25fb5d00f7c32df9a51eac76000c988ffdf011564aa0e319764b16a5a7c728a470ff70772fb76c9ada26a0ac073fcbfa12501c2454b19e02d928e3939a40bfff76c002533b3849cdf8016728445131e5f1e292b7d3dc06bb3a3cfff6fabae0b7341694a8938c1d2497cd70b76c337c9a312e96c8f736d7625a535e1906eba53d199221ca60202a65be0f7e530aca10e61fa39c7601d65954e5ed4cab94345c6b89c7f8a0de5c61a7945e1564731b6715331d13263b2961a163382f7c4934d847033860e402f3aadb4f3e6cf47a97a2031401da4d2c8de8c80cdad71b97b4deb2075a02282f958ac6772354e67f097ca693778224b80892490015e7d697fb9107f75cea708178ffec93fb1d44e8493bad1d42c918e661219ea819e0200759037a5a585c0fe074fd407536fe58013f42612c41bfc66e16870d7a9c00ee93a3122b253fecbf5de3837641f4a1376af0f053463413c26c29f9a346318565276856b963da30ba6ab8c4c8ef6cfddc432328586d9d9829895835759bcde0851ae0c838a3927ea63fe5ba793fae94da61cab00fc05f3a265a2da1221bb2b66775ed7ba856b41011652d4984991e56249360ddfc997245ac1547a1c16382d42df383a8d1c852643b24895c422712e79c436fdfffece4ed1c50922d4f25296aaf6b204522086d188bee254f8303b60537ead1195ac5dd301286f0042dd68aa05a70e4beb779aa0b61a316f736b72c9ab7ed860a0908a078f4b8a53f2df0abf993f689de4b02b9138ca5047fb0bfc9ba3b92bff033e36fc9553260b008cef3d147c62d1d3944fd1eaff79bc5a922ec2190907bfda1b51c2c7fb867db1f8e13a37b5e3ae0165e93350b958a239ec1f2b78561cff854b975307b5b5dd23b040602a5a36bd79947ee04c7d0e5e30f9c4c79f7b4e6eada98bfc6c357cdf8939213423f1b21ba26cfc2b2756ea3eb992372db0ab8a7c37d8ae96bf3ed6be873c1891550ef741812032e1ae938326c399ee43a3061602dda006f1b6b620bebb6a5752bee77e8acf9921ebf4d4c8af7eb5e937c65697c0664c594e31a62377a25605051996c474ca322ce8e0e6ef8a7988be", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x10, 0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0}) getdents64(r2, 0x0, 0x0) 12m42.250786041s ago: executing program 1 (id=1544): pipe(&(0x7f0000000000)={0xffffffffffffffff}) close(0x3) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0xa0, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x4004085, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x4000000000000080, 0x8) 12m41.81218187s ago: executing program 32 (id=1544): pipe(&(0x7f0000000000)={0xffffffffffffffff}) close(0x3) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0xa0, 0x4) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x4004085, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x4000000000000080, 0x8) 5.998700554s ago: executing program 4 (id=5513): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) write$tun(r4, &(0x7f00000001c0)={@void, @void, @mpls={[], @ipv6=@tipc_packet={0x3, 0x6, "460ba0", 0x54, 0x6, 0x0, @empty, @dev={0xfe, 0x80, '\x00', 0x24}, {[@srh={0x3a, 0x4, 0x4, 0x2, 0x6, 0x18, 0xe39c, [@private2, @empty]}], @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x0, 0x0, 0xb, 0x0, 0x2, 0x5, 0x0, 0x57082eceb02ffff2, 0x4, 0x1, 0x1, 0x8, 0x4, 0xa, 0x4e22, 0x4e24}, 0x0, 0x2}, 0x1, 0x4}, 0x1}}}}}}}, 0x7c) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x3, 0x5, 0x4, 0x4}) r5 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x40) 4.557489306s ago: executing program 4 (id=5516): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x1, 0xfffff109, 0x3132564e, 0x1, 0xc, [{0x27b, 0x1}, {0x7, 0xffffff65}, {0x3ff, 0x7f}, {0x7, 0xa}, {0x0, 0x10001}, {0x8da, 0x2}, {0xbbf3, 0x80000001}, {0x4b82}], 0xd2, 0x7, 0x9, 0x1, 0x2}}) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000014c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$sndctrl(0x0, 0x2, 0x10acc1) 4.207701372s ago: executing program 3 (id=5518): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x10, 0x3, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280), 0x44000, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) getsockopt$inet_buf(r0, 0x118, 0x0, 0x0, 0x0) 3.894718603s ago: executing program 2 (id=5519): socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) socket(0x1e, 0x4, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0x0, 0x9, 0x0, 0xf, 0x80000002}, 0x0, 0x0) 3.846819105s ago: executing program 3 (id=5520): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x40480923, 0x200000000005) pipe(&(0x7f0000000080)) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) 3.726703342s ago: executing program 3 (id=5522): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000001, 0x4c032, 0xffffffffffffffff, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) syz_clone(0x623f, 0x0, 0x0, 0x0, 0x0, 0x0) 3.598713228s ago: executing program 4 (id=5524): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) write$tun(r4, &(0x7f00000001c0)={@void, @void, @mpls={[], @ipv6=@tipc_packet={0x3, 0x6, "460ba0", 0x54, 0x6, 0x0, @empty, @dev={0xfe, 0x80, '\x00', 0x24}, {[@srh={0x3a, 0x4, 0x4, 0x2, 0x6, 0x18, 0xe39c, [@private2, @private0]}], @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x0, 0x0, 0xb, 0x0, 0x2, 0x5, 0x0, 0x57082eceb02ffff2, 0x4, 0x1, 0x1, 0x8, 0x4, 0xa, 0x4e22, 0x4e24}, 0x0, 0x2}, 0x1, 0x4}, 0x1}}}}}}}, 0x7c) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={&(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x3, 0x5, 0x4, 0x4}) r5 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x40) 2.835734656s ago: executing program 3 (id=5526): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socket(0x10, 0x3, 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000000)="8ee8c9b8ee088ed8660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca0fc7380f0136bb000f22e0", 0x2f}], 0x1, 0x0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) pipe(&(0x7f0000000100)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.820664003s ago: executing program 2 (id=5527): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r6 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r7], 0x5c}}, 0x40) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}}, 0x20}}, 0x884) 2.618235196s ago: executing program 0 (id=5528): syz_emit_ethernet(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x4008032, 0xffffffffffffffff, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) unshare(0x8040600) r0 = syz_open_dev$sg(&(0x7f0000000000), 0xf9ba, 0x501) tee(r0, r0, 0x9, 0xb) 2.53126455s ago: executing program 4 (id=5529): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x10, 0x3, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280), 0x44000, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) getsockopt$inet_buf(r0, 0x118, 0x0, 0x0, 0x0) 2.373210061s ago: executing program 2 (id=5530): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x40480923, 0x200000000005) pipe(&(0x7f0000000080)) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) 2.192389607s ago: executing program 4 (id=5531): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x35c, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) connect$packet(r0, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x82, 0x6, @random="a55378321800"}, 0x14) shutdown(r0, 0x1) 2.167746273s ago: executing program 3 (id=5532): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b9432f74331c6e9412ac6557c54c6ac72bc24ff70ca2f8ef", 0xdb}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)='&', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000380)="1f70db3e7c3e9a6b9033f55b5e49213563306e516f432d32648d574339c6531f3b4cb35dcd0b0c389637db278ecea0d75906b793c59c9a5bcb0ff3b7d11d073cecd28e301645ea2abe883bc4dd6154991c838d9617", 0x55}, {&(0x7f0000000740)="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", 0x2e4}], 0x2}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000180)="13", 0xffffffffffffff9f, 0x10008095, 0x0, 0x0) 2.143953818s ago: executing program 2 (id=5533): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7ff, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0x1, 0xfffff109, 0x3132564e, 0x1, 0xc, [{0x27b, 0x1}, {0x7, 0xffffff65}, {0x3ff, 0x7f}, {0x7, 0xa}, {0x0, 0x10001}, {0x8da, 0x2}, {0xbbf3, 0x80000001}, {0x4b82}], 0xd2, 0x7, 0x9, 0x1, 0x2}}) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000014c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$rds(r3, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$sndctrl(0x0, 0x2, 0x10acc1) 957.259747ms ago: executing program 4 (id=5534): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 814.691221ms ago: executing program 0 (id=5535): socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x1e, 0x4, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0x0, 0x9, 0x0, 0xf, 0x80000002}, 0x0, 0x0) 718.153503ms ago: executing program 0 (id=5536): setresuid(0x0, 0xee01, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x5, 0x4, 0x7}) fanotify_init(0x40, 0x80000) 601.710681ms ago: executing program 0 (id=5537): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffff8, 0x1815}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 399.703104ms ago: executing program 3 (id=5538): r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r0, 0x2) r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(0x0, 0x100000, 0x0) flock(r2, 0x1) flock(r2, 0x1) flock(r0, 0x5) 388.830932ms ago: executing program 2 (id=5539): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x10, 0x3, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000280), 0x44000, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) getsockopt$inet_buf(r0, 0x118, 0x0, 0x0, 0x0) 214.59532ms ago: executing program 0 (id=5540): r0 = syz_open_dev$vim2m(0x0, 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0xb, 0x1, 0x4, 0x0, 0x7}) 70.783923ms ago: executing program 0 (id=5541): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x40480923, 0x200000000005) pipe(&(0x7f0000000080)) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) 0s ago: executing program 2 (id=5542): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x35c, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) connect$packet(r0, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x82, 0x6, @random="a55378321800"}, 0x14) shutdown(r0, 0x1) kernel console output (not intermixed with test programs): 868984][ T5875] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 929.881119][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 929.891830][ T5875] usb 3-1: Product: syz [ 929.896923][ T5875] usb 3-1: Manufacturer: syz [ 929.901633][ T5875] usb 3-1: SerialNumber: syz [ 929.933736][ T5875] usb 3-1: config 0 descriptor?? [ 929.946499][T19690] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 929.948176][T19506] veth0_vlan: entered promiscuous mode [ 929.992990][T19506] veth1_vlan: entered promiscuous mode [ 930.075068][T19506] veth0_macvtap: entered promiscuous mode [ 930.092312][T19506] veth1_macvtap: entered promiscuous mode [ 930.152002][T19506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 930.167505][T19690] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 930.191763][T19506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 930.209034][T19506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 930.219820][T19506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 930.262920][T19506] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 930.306467][T19506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 930.328712][T19506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 930.338949][T19506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 930.349820][T19506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 930.371688][T19506] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 930.407871][T19506] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.430608][T19506] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.440130][T19506] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.449990][T19506] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.622692][T19439] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 930.676776][T19439] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 930.754809][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 930.763943][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 931.098748][T19711] syzkaller0: entered promiscuous mode [ 931.107105][T19711] syzkaller0: entered allmulticast mode [ 931.192954][ T5875] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 931.215736][ T5875] asix: probe of 3-1:0.188 failed with error -32 [ 931.614326][T12748] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 931.759757][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.774443][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.804311][T12748] usb 4-1: Using ep0 maxpacket: 32 [ 931.810450][T12748] usb 4-1: too many configurations: 17, using maximum allowed: 8 [ 931.820033][T12748] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 931.832576][T12748] usb 4-1: config 0 has no interface number 0 [ 931.841474][T12748] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 931.853721][T12748] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 931.875398][T12748] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 931.883445][T12748] usb 4-1: config 0 has no interface number 0 [ 931.894121][T12748] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 931.913729][T12748] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 931.927077][T12748] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 931.935272][T12748] usb 4-1: config 0 has no interface number 0 [ 931.941411][T12748] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 931.951812][T12748] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 931.963691][T12748] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 931.972203][T12748] usb 4-1: config 0 has no interface number 0 [ 931.979069][T12748] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 931.989305][T12748] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 932.011061][T12748] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 932.019553][T12748] usb 4-1: config 0 has no interface number 0 [ 932.025829][T12748] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 932.035786][T12748] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 932.046993][T12748] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 932.055942][T12748] usb 4-1: config 0 has no interface number 0 [ 932.066525][T12748] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 932.076703][T12748] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 932.088161][T12748] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 932.096794][T12748] usb 4-1: config 0 has no interface number 0 [ 932.103186][T12748] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 932.113511][T12748] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 932.125426][T12748] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 932.133464][T12748] usb 4-1: config 0 has no interface number 0 [ 932.144300][T12748] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 932.157584][T12748] usb 4-1: config 0 interface 2 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 932.174788][ T5875] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 932.186979][T12748] usb 4-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 932.197173][T12748] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.205852][T12748] usb 4-1: Product: syz [ 932.210245][T12748] usb 4-1: Manufacturer: syz [ 932.216025][T12748] usb 4-1: SerialNumber: syz [ 932.231001][T12748] usb 4-1: config 0 descriptor?? [ 932.238456][T12748] etas_es58x 4-1:0.2: Starting syz syz (Serial Number syz) [ 932.260468][ T5809] usb 3-1: USB disconnect, device number 8 [ 932.374328][ T5875] usb 1-1: Using ep0 maxpacket: 32 [ 932.401679][ T5875] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 932.412776][ T5875] usb 1-1: config 0 has no interface number 0 [ 932.427623][ T5875] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 932.455968][T12748] etas_es58x 4-1:0.2: could not parse product info: '诫慍菪㟢櫇' [ 932.459636][ T5875] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 932.485990][ T5875] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.504578][ T5875] usb 1-1: Product: syz [ 932.522063][ T5875] usb 1-1: Manufacturer: syz [ 932.538581][ T5875] usb 1-1: SerialNumber: syz [ 932.566994][ T5875] usb 1-1: config 0 descriptor?? [ 932.592822][T19733] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 932.797432][ T5800] usb 4-1: USB disconnect, device number 115 [ 932.837696][ T5800] etas_es58x 4-1:0.2: Disconnecting syz syz [ 932.896760][ T5875] asix: probe of 1-1:0.188 failed with error -71 [ 932.919101][T19755] sg_write: data in/out 418780/98 bytes for SCSI command 0x0-- guessing data in; [ 932.919101][T19755] program syz.2.4635 not setting count and/or reply_len properly [ 932.964548][ T5875] usb 1-1: USB disconnect, device number 9 [ 933.288101][T19766] autofs4:pid:19766:autofs_fill_super: called with bogus options [ 933.725923][T19771] syzkaller0: entered promiscuous mode [ 933.746581][T19771] syzkaller0: entered allmulticast mode [ 934.325160][ T5809] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 934.345372][T18434] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 934.514555][ T5809] usb 4-1: Using ep0 maxpacket: 32 [ 934.541092][ T5809] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 934.561092][ T5809] usb 4-1: config 0 has no interface number 0 [ 934.568038][ T5809] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 934.582960][ T5809] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 934.592306][ T5809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.601028][ T5809] usb 4-1: Product: syz [ 934.607253][T19792] sg_write: data in/out 418780/98 bytes for SCSI command 0x0-- guessing data in; [ 934.607253][T19792] program syz.4.4646 not setting count and/or reply_len properly [ 934.608263][ T5809] usb 4-1: Manufacturer: syz [ 934.654387][T18434] usb 3-1: Using ep0 maxpacket: 16 [ 934.666305][T18434] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 934.680742][T18434] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 934.699498][T18434] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 934.711633][T18434] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.756892][T18434] usb 3-1: config 0 descriptor?? [ 934.771995][T18434] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 935.011061][ T5809] usb 4-1: SerialNumber: syz [ 935.019370][ T5809] usb 4-1: config 0 descriptor?? [ 935.027296][T19781] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 935.253574][T19781] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 935.321459][T19798] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4648'. [ 935.509886][T19805] syzkaller0: entered promiscuous mode [ 935.515919][T19805] syzkaller0: entered allmulticast mode [ 936.269736][ T5809] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 936.280892][ T5809] asix: probe of 4-1:0.188 failed with error -32 [ 936.611360][T19821] sg_write: data in/out 418780/98 bytes for SCSI command 0x0-- guessing data in; [ 936.611360][T19821] program syz.4.4656 not setting count and/or reply_len properly [ 936.703331][T19824] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4657'. [ 937.114972][ T5875] usb 3-1: USB disconnect, device number 9 [ 937.335860][T19832] tipc: Enabled bearer , priority 0 [ 937.441156][T12748] usb 4-1: USB disconnect, device number 116 [ 937.473154][T19831] tipc: Disabling bearer [ 937.763889][T19834] syzkaller0: entered promiscuous mode [ 937.780909][T19834] syzkaller0: entered allmulticast mode [ 938.254622][ T27] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 938.406991][ T27] usb 1-1: device descriptor read/64, error -71 [ 938.687164][ T27] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 938.844444][ T27] usb 1-1: device descriptor read/64, error -71 [ 938.985083][ T27] usb usb1-port1: attempt power cycle [ 939.419437][ T27] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 939.475089][ T27] usb 1-1: device descriptor read/8, error -71 [ 939.774382][ T27] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 939.816313][ T27] usb 1-1: device descriptor read/8, error -71 [ 939.947313][ T27] usb usb1-port1: unable to enumerate USB device [ 940.406906][T19853] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4666'. [ 940.649190][T19861] tipc: Started in network mode [ 940.654105][T19861] tipc: Node identity 3a2c69416ac7, cluster identity 4711 [ 940.661649][T19861] tipc: Enabled bearer , priority 0 [ 940.671258][T19858] tipc: Disabling bearer [ 940.734573][T19863] sg_write: data in/out 418780/98 bytes for SCSI command 0x0-- guessing data in; [ 940.734573][T19863] program syz.4.4668 not setting count and/or reply_len properly [ 940.834344][ T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 941.024422][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 941.043183][ T9] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 941.059612][ T9] usb 3-1: config 0 has no interface number 0 [ 941.067158][ T9] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 941.089077][ T9] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 941.100752][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.109450][ T9] usb 3-1: Product: syz [ 941.113728][ T9] usb 3-1: Manufacturer: syz [ 941.119002][ T9] usb 3-1: SerialNumber: syz [ 941.128995][ T9] usb 3-1: config 0 descriptor?? [ 941.138935][T19860] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 941.358549][T19860] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 941.406444][T19880] syzkaller0: entered promiscuous mode [ 941.412785][T19880] syzkaller0: entered allmulticast mode [ 941.482568][T19882] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4677'. [ 941.680339][T19890] tipc: Enabling of bearer rejected, failed to enable media [ 941.968513][T18434] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 942.148770][T18434] usb 1-1: device descriptor read/64, error -71 [ 942.348483][ T9] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 942.359847][ T9] asix 3-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 942.372083][ T9] asix: probe of 3-1:0.188 failed with error -61 [ 942.863851][T19905] syzkaller0: entered promiscuous mode [ 942.872092][T19905] syzkaller0: entered allmulticast mode [ 942.914417][T18434] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 943.075099][T18434] usb 1-1: device descriptor read/64, error -71 [ 943.180029][T19914] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4687'. [ 943.211182][T18434] usb usb1-port1: attempt power cycle [ 943.227494][ T5800] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 943.394416][ T5800] usb 5-1: device descriptor read/64, error -71 [ 943.644557][T18434] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 943.674339][ T5800] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 943.684747][T18434] usb 1-1: device descriptor read/8, error -71 [ 943.841735][ T5875] usb 3-1: USB disconnect, device number 10 [ 943.856362][ T5800] usb 5-1: device descriptor read/64, error -71 [ 943.954292][T18434] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 943.994775][T18434] usb 1-1: device descriptor read/8, error -71 [ 944.004626][ T5800] usb usb5-port1: attempt power cycle [ 944.124141][T18434] usb usb1-port1: unable to enumerate USB device [ 944.360245][T19930] tipc: Enabling of bearer rejected, failed to enable media [ 944.424850][ T5800] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 944.477440][ T5800] usb 5-1: device descriptor read/8, error -71 [ 944.765151][ T5800] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 944.809005][ T5800] usb 5-1: device descriptor read/8, error -71 [ 944.934508][ T5800] usb usb5-port1: unable to enumerate USB device [ 945.364413][T18434] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 945.554449][T18434] usb 1-1: Using ep0 maxpacket: 32 [ 945.561780][T18434] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 945.573669][T18434] usb 1-1: config 0 has no interface number 0 [ 945.579975][T18434] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 945.593232][T18434] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 945.602387][T18434] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.613334][T18434] usb 1-1: Product: syz [ 945.617777][T18434] usb 1-1: Manufacturer: syz [ 945.622537][T18434] usb 1-1: SerialNumber: syz [ 945.630805][T18434] usb 1-1: config 0 descriptor?? [ 945.644899][T19949] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 945.859650][T19949] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 945.934297][ T5800] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 946.086918][ T5800] usb 4-1: device descriptor read/64, error -71 [ 946.364468][ T5800] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 946.514316][ T5800] usb 4-1: device descriptor read/64, error -71 [ 946.637963][ T5800] usb usb4-port1: attempt power cycle [ 946.672468][T18434] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 946.690020][T18434] asix 1-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 946.701643][T18434] asix: probe of 1-1:0.188 failed with error -61 [ 947.084699][ T5800] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 947.137835][ T5800] usb 4-1: device descriptor read/8, error -71 [ 947.424402][ T5800] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 947.455467][ T5800] usb 4-1: device descriptor read/8, error -71 [ 947.578178][ T5800] usb usb4-port1: unable to enumerate USB device [ 947.634501][T18434] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 947.842336][T18434] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 947.851470][T18434] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.859641][T18434] usb 3-1: Product: syz [ 947.864607][T18434] usb 3-1: Manufacturer: syz [ 947.869241][T18434] usb 3-1: SerialNumber: syz [ 947.875896][T18434] usb 3-1: config 0 descriptor?? [ 947.885785][T18434] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 948.151789][T12748] usb 1-1: USB disconnect, device number 18 [ 948.199392][T19979] fuse: Bad value for 'fd' [ 948.280061][T19981] tap0: tun_chr_ioctl cmd 2147767520 [ 948.505668][T18434] gspca_sunplus: reg_w_riv err -71 [ 948.512206][T18434] sunplus: probe of 3-1:0.0 failed with error -71 [ 948.559359][T18434] usb 3-1: USB disconnect, device number 11 [ 949.056221][T19990] autofs4:pid:19990:autofs_fill_super: called with bogus options [ 949.429328][T20005] fuse: Bad value for 'fd' [ 949.677432][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 949.919219][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 949.932308][ T9] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 949.941501][ T9] usb 3-1: config 0 has no interface number 0 [ 949.950294][ T9] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 949.963867][ T9] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 949.973495][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 949.981874][ T9] usb 3-1: Product: syz [ 949.986435][ T9] usb 3-1: Manufacturer: syz [ 949.991177][ T9] usb 3-1: SerialNumber: syz [ 950.001694][ T9] usb 3-1: config 0 descriptor?? [ 950.009622][T20003] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 950.248801][T20003] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 951.098630][T20021] autofs4:pid:20021:autofs_fill_super: called with bogus options [ 951.817813][T20032] fuse: Bad value for 'fd' [ 951.929241][ T9] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 951.946131][ T9] asix 3-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 951.966681][ T9] asix: probe of 3-1:0.188 failed with error -61 [ 953.221115][ T9] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 954.175140][T12748] usb 3-1: USB disconnect, device number 12 [ 954.251008][ T9] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 954.268252][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 954.294457][ T9] usb 4-1: Product: syz [ 954.298674][ T9] usb 4-1: Manufacturer: syz [ 954.303289][ T9] usb 4-1: SerialNumber: syz [ 954.310948][ T9] usb 4-1: config 0 descriptor?? [ 954.927731][ T9] usb 4-1: Firmware: major: 226, minor: 19, hardware type: UNKNOWN (46) [ 955.128800][ T9] usb 4-1: Firmware: build  [ 955.467740][ T9] usb 4-1: no permanent extended address found, random address set [ 955.655381][ T9] usb 4-1: atusb_probe: initialization failed, error = -524 [ 955.677129][ T9] atusb: probe of 4-1:0.0 failed with error -524 [ 955.707852][ T9] usb 4-1: USB disconnect, device number 121 [ 956.504596][ T5800] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 956.731004][ T5800] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 956.741470][ T5800] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.754637][ T5800] usb 1-1: Product: syz [ 956.759009][ T5800] usb 1-1: Manufacturer: syz [ 956.764906][ T5800] usb 1-1: SerialNumber: syz [ 956.818843][ T5800] usb 1-1: config 0 descriptor?? [ 956.867171][ T5800] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 957.050689][ T5800] gspca_sunplus: reg_r err -32 [ 957.145539][T20112] tipc: Enabling of bearer rejected, failed to enable media [ 957.271417][T20118] syzkaller0: entered promiscuous mode [ 957.304246][T20118] syzkaller0: entered allmulticast mode [ 957.621403][T20137] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4767'. [ 957.978981][T20158] tipc: Enabling of bearer rejected, failed to enable media [ 957.990510][T20155] syzkaller0: entered promiscuous mode [ 958.005546][T20155] syzkaller0: entered allmulticast mode [ 958.402205][T20172] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4777'. [ 958.875439][T20191] syzkaller0: entered promiscuous mode [ 958.881178][T20191] syzkaller0: entered allmulticast mode [ 958.950176][T20196] tipc: Enabling of bearer rejected, failed to enable media [ 959.268399][ T5800] usb 1-1: USB disconnect, device number 19 [ 959.384246][T20212] mmap: syz.3.4790 (20212) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 959.622476][T20222] syzkaller0: entered promiscuous mode [ 959.632096][T20222] syzkaller0: entered allmulticast mode [ 959.731107][T20230] tipc: Enabling of bearer rejected, failed to enable media [ 960.649220][ T5083] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 960.657977][T18434] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 960.670281][ T5083] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 960.680700][ T5083] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 960.690470][ T5083] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 960.699765][ T5083] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 960.707921][ T5083] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 960.896222][T18434] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 960.923990][T18434] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 960.948009][T18434] usb 1-1: Product: syz [ 960.952228][T18434] usb 1-1: Manufacturer: syz [ 961.004395][T18434] usb 1-1: SerialNumber: syz [ 961.053246][T18434] usb 1-1: config 0 descriptor?? [ 961.091201][T18434] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 961.292772][T20251] chnl_net:caif_netlink_parms(): no params data found [ 961.296013][T18434] gspca_sunplus: reg_r err -32 [ 961.422240][ T2932] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 961.543119][ T2932] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 961.566168][T20251] bridge0: port 1(bridge_slave_0) entered blocking state [ 961.573401][T20251] bridge0: port 1(bridge_slave_0) entered disabled state [ 961.590148][T20251] bridge_slave_0: entered allmulticast mode [ 961.602324][T20251] bridge_slave_0: entered promiscuous mode [ 961.649798][ T2932] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 961.671968][T20251] bridge0: port 2(bridge_slave_1) entered blocking state [ 961.689231][T20251] bridge0: port 2(bridge_slave_1) entered disabled state [ 961.699819][T20251] bridge_slave_1: entered allmulticast mode [ 961.716184][T20251] bridge_slave_1: entered promiscuous mode [ 961.972085][T20251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 962.016937][T20251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 962.116632][T20251] team0: Port device team_slave_0 added [ 962.147786][T20251] team0: Port device team_slave_1 added [ 962.252690][T20251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 962.273159][T20251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 962.302307][T20251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 962.335177][T20251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 962.342169][T20251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 962.402201][T20251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 962.532406][ T2932] tipc: Left network mode [ 962.603630][T20251] hsr_slave_0: entered promiscuous mode [ 962.612160][T20251] hsr_slave_1: entered promiscuous mode [ 962.623058][T20251] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 962.636473][T20251] Cannot create hsr debugfs directory [ 962.803797][T12655] Bluetooth: hci4: command tx timeout [ 962.857220][T20305] netlink: 112 bytes leftover after parsing attributes in process `syz.2.4815'. [ 963.231243][T20317] overlayfs: conflicting lowerdir path [ 963.427131][ T5800] usb 1-1: USB disconnect, device number 20 [ 963.637533][ T2932] bond6: (slave gretap1): Releasing active interface [ 963.653950][T20328] netlink: 'syz.0.4820': attribute type 1 has an invalid length. [ 963.772971][T20330] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 963.798772][T20330] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 963.881994][T20335] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4820'. [ 963.901488][T20335] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4820'. [ 963.933511][T20328] macvlan2: entered promiscuous mode [ 963.946489][T20328] macvlan2: entered allmulticast mode [ 963.959335][T20328] bond1: entered promiscuous mode [ 963.967394][T20328] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 963.982367][T20328] bond1: left promiscuous mode [ 964.141070][T20347] netlink: 112 bytes leftover after parsing attributes in process `syz.4.4823'. [ 964.562287][T20364] autofs4:pid:20364:autofs_fill_super: called with bogus options [ 964.600591][T20251] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 964.625758][T20251] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 964.660491][ T2932] hsr_slave_0: left promiscuous mode [ 964.680427][ T2932] hsr_slave_1: left promiscuous mode [ 964.695935][ T2932] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 964.712441][ T2932] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 964.743511][ T2932] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 964.778123][ T2932] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 964.803516][ T2932] bridge_slave_1: left allmulticast mode [ 964.816121][ T2932] bridge_slave_1: left promiscuous mode [ 964.823046][ T2932] bridge0: port 2(bridge_slave_1) entered disabled state [ 964.874317][T12655] Bluetooth: hci4: command tx timeout [ 965.133639][ T2932] bridge_slave_0: left allmulticast mode [ 965.144845][ T2932] bridge_slave_0: left promiscuous mode [ 965.153114][ T2932] bridge0: port 1(bridge_slave_0) entered disabled state [ 965.260198][ T2932] veth1_macvtap: left promiscuous mode [ 965.266605][ T2932] veth0_macvtap: left promiscuous mode [ 965.281977][ T2932] veth1_vlan: left promiscuous mode [ 965.642779][ T2932] bond10 (unregistering): Released all slaves [ 966.020450][ T2932] bond9 (unregistering): (slave bond0): Releasing active interface [ 966.071165][ T2932] bond9 (unregistering): Released all slaves [ 966.092229][ T2932] bond8 (unregistering): Released all slaves [ 966.119799][ T2932] bond7 (unregistering): Released all slaves [ 966.202427][ T2932] bond6 (unregistering): Released all slaves [ 966.514060][ T2932] bond5 (unregistering): Released all slaves [ 966.731735][ T2932] bond4 (unregistering): Released all slaves [ 966.914994][ T2932] bond3 (unregistering): Released all slaves [ 966.965610][T12655] Bluetooth: hci4: command tx timeout [ 967.095370][ T2932] bond2 (unregistering): Released all slaves [ 967.129483][ T2932] bond1 (unregistering): Released all slaves [ 967.272837][T20404] netlink: 112 bytes leftover after parsing attributes in process `syz.4.4833'. [ 967.863873][ T2932] team0 (unregistering): Port device team_slave_1 removed [ 967.918538][ T2932] team0 (unregistering): Port device team_slave_0 removed [ 967.969994][ T2932] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 968.027499][ T2932] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 968.426099][ T2932] bond0 (unregistering): Released all slaves [ 968.492898][T20251] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 968.505513][T20380] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4830'. [ 968.695102][T20384] syzkaller0: entered promiscuous mode [ 968.700641][T20384] syzkaller0: entered allmulticast mode [ 968.753570][T20251] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 969.039627][T12655] Bluetooth: hci4: command tx timeout [ 971.175484][T20423] autofs4:pid:20423:autofs_fill_super: called with bogus options [ 971.209066][T12655] Bluetooth: hci1: command 0x0c1a tx timeout [ 972.020666][T20251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 972.063022][T20430] 8021q: adding VLAN 0 to HW filter on device bond11 [ 972.081913][ T2932] IPVS: stop unused estimator thread 0... [ 972.107522][T20251] 8021q: adding VLAN 0 to HW filter on device team0 [ 972.128230][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 972.135390][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 972.189074][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 972.196239][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 972.229310][T20430] 8021q: adding VLAN 0 to HW filter on device team0 [ 972.245522][T20430] bond11: (slave team0): Enslaving as an active interface with an up link [ 973.225802][T20251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 973.370357][T20251] veth0_vlan: entered promiscuous mode [ 973.411668][T20251] veth1_vlan: entered promiscuous mode [ 973.491894][T20251] veth0_macvtap: entered promiscuous mode [ 973.539115][T20251] veth1_macvtap: entered promiscuous mode [ 973.597784][T20251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 973.630666][T20251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 973.655326][T20251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 973.698568][T20251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 973.719810][T20251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 973.751095][T20251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 973.784238][T20251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 973.794134][T20251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 973.834472][T20251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 973.855865][T20251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 973.901569][T20251] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.925947][T20251] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.950328][T20251] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.978871][T20251] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.266024][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 974.297988][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 974.367738][ T2932] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 974.407139][ T2932] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 975.386004][ T5800] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 975.645793][ T5800] usb 5-1: Using ep0 maxpacket: 16 [ 975.757069][ T5800] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 975.801579][ T5800] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 975.880411][ T5800] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 975.924286][ T5800] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 975.966315][ T5800] usb 5-1: config 0 descriptor?? [ 976.002398][ T5800] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 976.267182][ T5083] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 976.285115][ T5083] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 976.304740][ T5083] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 976.320400][ T5083] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 976.331728][ T5083] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 976.340592][ T5083] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 976.932918][T20511] chnl_net:caif_netlink_parms(): no params data found [ 977.183575][T16235] tipc: Left network mode [ 977.192387][T20511] bridge0: port 1(bridge_slave_0) entered blocking state [ 977.210239][T20511] bridge0: port 1(bridge_slave_0) entered disabled state [ 977.240434][T20511] bridge_slave_0: entered allmulticast mode [ 977.252252][T20511] bridge_slave_0: entered promiscuous mode [ 977.406766][T20511] bridge0: port 2(bridge_slave_1) entered blocking state [ 977.418347][T20511] bridge0: port 2(bridge_slave_1) entered disabled state [ 977.436941][T20511] bridge_slave_1: entered allmulticast mode [ 977.458933][T20511] bridge_slave_1: entered promiscuous mode [ 977.547551][T20542] syzkaller0: entered promiscuous mode [ 977.553258][T20542] syzkaller0: entered allmulticast mode [ 977.610554][T20511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 977.686683][T20511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 977.921463][T20511] team0: Port device team_slave_0 added [ 977.956763][T20511] team0: Port device team_slave_1 added [ 978.033936][T20553] tipc: Started in network mode [ 978.044747][T20553] tipc: Node identity b27ebf4b22f6, cluster identity 4711 [ 978.053146][T20553] tipc: Enabled bearer , priority 0 [ 978.092777][T12748] usb 5-1: USB disconnect, device number 25 [ 978.205642][T20555] syzkaller0: entered promiscuous mode [ 978.211911][T20555] syzkaller0: entered allmulticast mode [ 978.250977][T20553] tipc: Resetting bearer [ 978.258115][T20511] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 978.268679][T20511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 978.296977][T20511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 978.310623][T20511] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 978.317976][T20511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 978.344586][T20511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 978.394943][ T5083] Bluetooth: hci1: command tx timeout [ 978.433928][T16235] bond8: (slave gretap1): Releasing active interface [ 978.447864][T20552] tipc: Resetting bearer [ 978.471314][T20552] tipc: Disabling bearer [ 978.613139][T20511] hsr_slave_0: entered promiscuous mode [ 978.626698][T20511] hsr_slave_1: entered promiscuous mode [ 978.641137][T20511] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 978.653824][T20511] Cannot create hsr debugfs directory [ 980.075806][T16235] hsr_slave_0: left promiscuous mode [ 980.089991][T16235] hsr_slave_1: left promiscuous mode [ 980.106901][T16235] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 980.132476][T16235] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 980.165241][T16235] bridge_slave_1: left allmulticast mode [ 980.175140][T16235] bridge_slave_1: left promiscuous mode [ 980.186700][T16235] bridge0: port 2(bridge_slave_1) entered disabled state [ 980.247160][T16235] bridge_slave_0: left allmulticast mode [ 980.252866][T16235] bridge_slave_0: left promiscuous mode [ 980.282211][T16235] bridge0: port 1(bridge_slave_0) entered disabled state [ 980.474990][ T5083] Bluetooth: hci1: command tx timeout [ 980.843131][T16235] bond11 (unregistering): (slave team0): Releasing backup interface [ 980.853231][T16235] bond11 (unregistering): Released all slaves [ 980.888101][T16235] bond10 (unregistering): Released all slaves [ 980.911214][T16235] bond9 (unregistering): Released all slaves [ 980.968536][T16235] bond8 (unregistering): Released all slaves [ 981.248361][T16235] bond7 (unregistering): (slave bond0): Releasing active interface [ 981.257812][T16235] bond7 (unregistering): Released all slaves [ 981.490806][T16235] bond6 (unregistering): Released all slaves [ 981.740669][T16235] bond5 (unregistering): Released all slaves [ 981.992791][T16235] bond4 (unregistering): Released all slaves [ 982.033342][T16235] bond3 (unregistering): (slave vcan1): Releasing backup interface [ 982.041410][T16235] vcan1 (unregistering): left promiscuous mode [ 982.226094][T16235] bond3 (unregistering): Released all slaves [ 982.424325][T16235] bond2 (unregistering): Released all slaves [ 982.562416][ T5083] Bluetooth: hci1: command tx timeout [ 982.625537][T16235] bond1 (unregistering): Released all slaves [ 983.268025][T16235] team0 (unregistering): Port device team_slave_1 removed [ 983.326750][T16235] team0 (unregistering): Port device C removed [ 983.390343][T16235] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 983.447124][T16235] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 983.885597][T16235] bond0 (unregistering): Released all slaves [ 983.980942][T20579] syzkaller0: entered promiscuous mode [ 983.986520][T20579] syzkaller0: entered allmulticast mode [ 984.640571][ T5083] Bluetooth: hci1: command tx timeout [ 986.352089][T20615] tipc: Enabling of bearer rejected, failed to enable media [ 987.550252][T20645] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 987.556717][T20645] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 987.562698][T20645] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 987.583167][T20642] 8021q: adding VLAN 0 to HW filter on device bond3 [ 987.618726][T20645] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 987.652097][T20645] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 987.653515][T20650] 8021q: adding VLAN 0 to HW filter on device team0 [ 987.658152][T20645] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 987.672601][T20645] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 987.680417][T20650] bond3: (slave team0): Enslaving as an active interface with an up link [ 987.714952][T20645] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 987.720977][T20645] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 987.747927][T20645] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 987.788921][T20647] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 988.106338][T20665] autofs4:pid:20665:autofs_fill_super: called with bogus options [ 988.136364][T20511] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 988.180208][T20511] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 988.267937][T20511] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 988.303675][T20511] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 989.282359][T20511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 989.289271][ T5083] Bluetooth: hci0: command 0x0c1a tx timeout [ 989.360390][T20511] 8021q: adding VLAN 0 to HW filter on device team0 [ 989.387650][ T2932] bridge0: port 1(bridge_slave_0) entered blocking state [ 989.394860][ T2932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 989.594894][ T5083] Bluetooth: hci2: command 0x0c1a tx timeout [ 989.674460][ T5083] Bluetooth: hci4: command 0x0c1a tx timeout [ 989.724821][T20694] bridge0: port 2(bridge_slave_1) entered disabled state [ 989.733948][T20694] bridge0: port 1(bridge_slave_0) entered disabled state [ 989.754324][ T5083] Bluetooth: hci1: command 0x0c1a tx timeout [ 990.419891][T20694] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.433216][T20694] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.448546][T20694] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.459053][T20694] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 990.638890][T20696] netlink: 'syz.3.4885': attribute type 1 has an invalid length. [ 991.289226][T18700] bridge0: port 2(bridge_slave_1) entered blocking state [ 991.296427][T18700] bridge0: port 2(bridge_slave_1) entered forwarding state [ 991.675742][ T5083] Bluetooth: hci2: command 0x0c1a tx timeout [ 991.754339][ T5083] Bluetooth: hci4: command 0x0c1a tx timeout [ 991.834283][ T5083] Bluetooth: hci1: command 0x0c1a tx timeout [ 992.063729][T20511] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 992.144185][T20511] veth0_vlan: entered promiscuous mode [ 992.166742][T20511] veth1_vlan: entered promiscuous mode [ 992.220882][T20511] veth0_macvtap: entered promiscuous mode [ 992.251038][T20511] veth1_macvtap: entered promiscuous mode [ 992.276278][T20511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 992.287721][T20511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 992.298658][T20511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 992.310092][T20511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 992.329006][T20511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 992.339839][T20511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 992.352243][T20511] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 992.366645][T20511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 992.378096][T20511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 992.390054][T20511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 992.401942][T20511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 992.412777][T20511] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 992.423493][T20511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 992.442534][T20511] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 992.487532][T20511] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.524268][T20511] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.533053][T20511] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.581348][T20511] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.897187][ T2964] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 992.934352][ T2964] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 993.137894][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 993.190307][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 993.216041][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.222390][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.764999][ T5083] Bluetooth: hci2: command 0x0c1a tx timeout [ 993.834998][ T5083] Bluetooth: hci4: command 0x0c1a tx timeout [ 993.928575][ T5083] Bluetooth: hci1: command 0x0c1a tx timeout [ 993.989863][T20771] netlink: 'syz.3.4896': attribute type 1 has an invalid length. [ 996.166057][T20802] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4906'. [ 996.384394][ T9] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 996.627152][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 996.663035][T20820] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4911'. [ 996.700019][ T9] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 996.873863][ T9] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 996.954040][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.031886][ T9] usb 1-1: Product: syz [ 997.061834][ T9] usb 1-1: Manufacturer: syz [ 997.094665][ T9] usb 1-1: SerialNumber: syz [ 997.222659][ T9] usb 1-1: config 0 descriptor?? [ 997.440067][T20823] Sensor A: ================= START STATUS ================= [ 997.456706][T20823] Sensor A: Test Pattern: 75% Colorbar [ 997.464911][T20823] Sensor A: Show Information: All [ 997.506309][T20823] Sensor A: Vertical Flip: false [ 997.511430][T20823] Sensor A: Horizontal Flip: false [ 997.528729][T20823] Sensor A: Brightness: 128 [ 997.533427][T20823] Sensor A: Contrast: 0 [ 997.545834][T20800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 997.560423][T20823] Sensor A: Hue: 0 [ 997.564977][T20800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 997.580474][T20823] Sensor A: Saturation: 128 [ 997.591681][ T5800] usb 1-1: USB disconnect, device number 21 [ 997.599005][T20823] Sensor A: ================== END STATUS ================== [ 997.627070][ T5083] Bluetooth: hci2: unknown advertising packet type: 0x17 [ 997.627185][ T5083] Bluetooth: hci2: Dropping invalid advertising data [ 997.652155][ T5083] Bluetooth: hci2: Malformed LE Event: 0x02 [ 997.810089][ T12] Bluetooth: hci3: Frame reassembly failed (-84) [ 997.907987][ T12] Bluetooth: hci3: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 999.839610][T12655] Bluetooth: hci3: command 0x1003 tx timeout [ 999.899860][ T5083] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1004.024292][ T5809] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1004.184381][ T5809] usb 3-1: device descriptor read/64, error -71 [ 1004.484369][ T5809] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1004.684805][ T5809] usb 3-1: device descriptor read/64, error -71 [ 1004.814596][ T5809] usb usb3-port1: attempt power cycle [ 1005.245986][ T5809] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1005.295875][ T5809] usb 3-1: device descriptor read/8, error -71 [ 1005.484689][ T5083] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 1005.852719][ T5809] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1005.885128][ T5809] usb 3-1: device descriptor read/8, error -71 [ 1006.017049][ T5809] usb usb3-port1: unable to enumerate USB device [ 1007.055887][T19508] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 1007.117950][T19508] Bluetooth: hci4: command 0x0c1a tx timeout [ 1009.958520][T20974] tipc: Started in network mode [ 1009.963588][T20974] tipc: Node identity d2c956cb7611, cluster identity 4711 [ 1009.976657][T20974] tipc: Enabled bearer , priority 0 [ 1009.987543][T20974] syzkaller0: entered promiscuous mode [ 1009.993204][T20974] syzkaller0: entered allmulticast mode [ 1010.015802][T20974] tipc: Resetting bearer [ 1010.032261][T20973] tipc: Resetting bearer [ 1010.069034][T20973] tipc: Disabling bearer [ 1010.194311][ T5838] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1010.385692][ T5838] usb 3-1: Using ep0 maxpacket: 32 [ 1010.397406][T19508] Bluetooth: hci0: command 0x0c1a tx timeout [ 1010.426230][ T5838] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 1010.455760][ T5838] usb 3-1: config 0 has no interface number 0 [ 1010.482505][ T5838] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1010.516533][ T5838] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1010.527207][ T5838] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1010.537449][ T5838] usb 3-1: Product: syz [ 1010.541653][ T5838] usb 3-1: Manufacturer: syz [ 1010.550779][ T5838] usb 3-1: SerialNumber: syz [ 1010.559709][ T5838] usb 3-1: config 0 descriptor?? [ 1010.570152][T20970] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1010.791565][T20970] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1011.132968][T20982] sch_tbf: burst 256 is lower than device syzkaller0 mtu (1500) ! [ 1011.160242][T20982] syzkaller0: entered promiscuous mode [ 1011.170096][T20982] syzkaller0: entered allmulticast mode [ 1011.443937][ T5838] asix 3-1:0.188 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1011.995685][ T5838] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1012.006275][ T5838] asix 3-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 1012.016964][ T5838] asix: probe of 3-1:0.188 failed with error -61 [ 1012.950246][T21012] fuse: Bad value for 'user_id' [ 1012.972888][T21013] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4977'. [ 1012.984851][ T27] usb 3-1: USB disconnect, device number 17 [ 1013.139255][T21019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4979'. [ 1013.158872][T21018] bond3: (slave team0): Releasing backup interface [ 1013.609287][T21031] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4984'. [ 1014.004412][T19508] Bluetooth: hci1: command 0x0c1a tx timeout [ 1014.399453][T21038] netlink: 'syz.3.4987': attribute type 1 has an invalid length. [ 1014.463745][T21038] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1014.476124][T21038] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 1014.537147][T21044] fuse: Bad value for 'user_id' [ 1014.608835][T21043] macvlan3: entered promiscuous mode [ 1014.629848][T21043] macvlan3: entered allmulticast mode [ 1014.639631][T21043] bond1: entered promiscuous mode [ 1014.653391][T21043] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1014.672647][T21043] bond1: left promiscuous mode [ 1015.321264][T21062] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4994'. [ 1016.052968][T21069] fuse: Bad value for 'user_id' [ 1016.153142][T21073] netlink: 112 bytes leftover after parsing attributes in process `syz.4.5000'. [ 1016.211340][T21078] netlink: 'syz.3.5002': attribute type 1 has an invalid length. [ 1016.290289][T21078] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1016.302667][T21078] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 1016.360451][T21084] macvlan3: entered promiscuous mode [ 1016.368923][T21084] macvlan3: entered allmulticast mode [ 1016.383334][T21084] bond2: entered promiscuous mode [ 1016.389755][T21084] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1016.417939][T21084] bond2: left promiscuous mode [ 1016.464480][T12655] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1016.587049][T21088] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5005'. [ 1016.597523][T21088] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5005'. [ 1016.704490][ T5800] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1016.848538][T21092] sch_tbf: burst 256 is lower than device syzkaller0 mtu (1500) ! [ 1016.856966][ T5800] usb 1-1: device descriptor read/64, error -71 [ 1016.865810][T21092] syzkaller0: entered promiscuous mode [ 1016.871472][T21092] syzkaller0: entered allmulticast mode [ 1017.141143][ T5800] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1017.184381][T21099] fuse: Bad value for 'fd' [ 1017.250024][T21101] netlink: 112 bytes leftover after parsing attributes in process `syz.2.5011'. [ 1017.304299][ T5800] usb 1-1: device descriptor read/64, error -71 [ 1017.420914][T19508] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1017.630617][ T5800] usb usb1-port1: attempt power cycle [ 1018.054329][ T5800] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1018.094859][ T5800] usb 1-1: device descriptor read/8, error -71 [ 1018.374346][ T5800] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1018.427746][ T5800] usb 1-1: device descriptor read/8, error -71 [ 1018.448313][T21118] sch_tbf: burst 256 is lower than device syzkaller0 mtu (1500) ! [ 1018.458376][T21118] syzkaller0: entered promiscuous mode [ 1018.464334][T21118] syzkaller0: entered allmulticast mode [ 1018.504339][ T23] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 1018.554582][ T5800] usb usb1-port1: unable to enumerate USB device [ 1018.975454][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1018.985638][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 1018.996749][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 255, setting to 64 [ 1019.001167][T21124] fuse: Bad value for 'fd' [ 1019.008775][ T23] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 1019.022871][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1019.037418][ T23] usb 3-1: config 0 descriptor?? [ 1019.049603][T21116] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1019.121364][T21127] tipc: Started in network mode [ 1019.128908][T21127] tipc: Node identity 3a1f8b2845b5, cluster identity 4711 [ 1019.160133][T21127] tipc: Enabled bearer , priority 0 [ 1019.181217][T21129] syzkaller0: entered promiscuous mode [ 1019.197432][T21129] syzkaller0: entered allmulticast mode [ 1019.215964][T21127] tipc: Resetting bearer [ 1019.223712][T21126] tipc: Resetting bearer [ 1019.248520][T21126] tipc: Disabling bearer [ 1019.271161][ T23] ath6kl: Failed to submit usb control message: -71 [ 1019.280557][ T23] ath6kl: unable to send the bmi data to the device: -71 [ 1019.288121][ T23] ath6kl: Unable to send get target info: -71 [ 1019.307146][ T23] ath6kl: Failed to init ath6kl core: -71 [ 1019.314344][ T23] ath6kl_usb: probe of 3-1:0.0 failed with error -71 [ 1019.340689][ T23] usb 3-1: USB disconnect, device number 18 [ 1019.573250][T21138] netlink: 'syz.4.5024': attribute type 1 has an invalid length. [ 1019.623249][T21138] bond4: (slave vxcan5): The slave device specified does not support setting the MAC address [ 1019.635574][T21138] bond4: (slave vxcan5): Error -95 calling set_mac_address [ 1019.680812][T21140] macvlan3: entered promiscuous mode [ 1019.686488][T21140] macvlan3: entered allmulticast mode [ 1019.692590][T21140] bond4: entered promiscuous mode [ 1019.698277][T21140] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1019.707949][T21140] bond4: left promiscuous mode [ 1019.876232][T21144] sch_tbf: burst 256 is lower than device syzkaller0 mtu (1500) ! [ 1019.886793][T21144] syzkaller0: entered promiscuous mode [ 1019.894203][T21144] syzkaller0: entered allmulticast mode [ 1020.098613][T21148] fuse: Bad value for 'fd' [ 1020.189884][T12655] Bluetooth: hci1: unexpected event for opcode 0x1005 [ 1020.434305][ T5809] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1021.397167][ T5809] usb 1-1: Using ep0 maxpacket: 32 [ 1021.425414][ T5809] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1021.444734][ T5809] usb 1-1: can't read configurations, error -61 [ 1021.623622][ T5809] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1021.729395][T21171] netlink: 'syz.3.5035': attribute type 1 has an invalid length. [ 1021.814900][T21173] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1021.826792][T21173] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 1021.859515][ T5809] usb 1-1: Using ep0 maxpacket: 32 [ 1021.882227][ T5809] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1021.904410][ T5809] usb 1-1: can't read configurations, error -61 [ 1021.943807][ T5809] usb usb1-port1: attempt power cycle [ 1021.951065][T21175] sch_tbf: burst 256 is lower than device syzkaller0 mtu (1500) ! [ 1021.970274][T21175] syzkaller0: entered promiscuous mode [ 1021.977607][T21175] syzkaller0: entered allmulticast mode [ 1021.991452][T21171] macvlan3: entered promiscuous mode [ 1021.997934][T21171] macvlan3: entered allmulticast mode [ 1022.005437][T21171] bond3: entered promiscuous mode [ 1022.011019][T21171] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1022.021248][T21171] bond3: left promiscuous mode [ 1022.170158][T21183] Sensor A: ================= START STATUS ================= [ 1022.178100][T21183] Sensor A: Test Pattern: 75% Colorbar [ 1022.183614][T21183] Sensor A: Show Information: All [ 1022.188916][T21183] Sensor A: Vertical Flip: false [ 1022.193906][T21183] Sensor A: Horizontal Flip: false [ 1022.199329][T21183] Sensor A: Brightness: 128 [ 1022.204185][T21183] Sensor A: Contrast: 0 [ 1022.208396][T21183] Sensor A: Hue: 0 [ 1022.212231][T21183] Sensor A: Saturation: 128 [ 1022.216904][T21183] Sensor A: ================== END STATUS ================== [ 1022.331153][ T2964] Bluetooth: hci3: Frame reassembly failed (-84) [ 1022.364298][ T5809] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1022.373758][ T2964] Bluetooth: hci3: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1024.237566][T19508] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1024.246551][T19508] Bluetooth: hci1: Injecting HCI hardware error event [ 1024.259760][T19508] Bluetooth: hci1: hardware error 0x00 [ 1024.394417][T12655] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1024.401167][T21188] Bluetooth: hci3: command 0x1003 tx timeout [ 1024.453771][ T5809] usb 1-1: device descriptor read/8, error -71 [ 1024.552485][T21192] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5043'. [ 1024.744322][ T27] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1024.881952][T21206] netlink: 'syz.2.5047': attribute type 1 has an invalid length. [ 1024.944368][ T27] usb 4-1: Using ep0 maxpacket: 16 [ 1024.951741][ T27] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1024.962052][T21206] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1024.963424][ T27] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1024.980331][ T27] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1024.988895][T21206] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 1024.994294][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1025.019181][ T27] usb 4-1: config 0 descriptor?? [ 1025.032024][T21209] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5047'. [ 1025.059654][T21209] macvlan2: entered promiscuous mode [ 1025.077458][T21209] macvlan2: entered allmulticast mode [ 1025.084070][T21209] bond1: entered promiscuous mode [ 1025.092026][T21209] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1025.109287][T21209] bond1: left promiscuous mode [ 1025.318995][T21212] tipc: Started in network mode [ 1025.326300][T21212] tipc: Node identity c66e6902c447, cluster identity 4711 [ 1025.336449][T21212] tipc: Enabled bearer , priority 0 [ 1025.347460][T21212] syzkaller0: entered promiscuous mode [ 1025.353084][T21212] syzkaller0: entered allmulticast mode [ 1025.380329][T21212] tipc: Resetting bearer [ 1025.389882][T21211] tipc: Resetting bearer [ 1025.427023][T21211] tipc: Disabling bearer [ 1025.448668][ T27] nzxt-smart2 0003:1E71:2009.0015: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 1025.929301][ T27] usb 4-1: USB disconnect, device number 122 [ 1026.144323][ T5809] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1026.202685][T21223] Sensor A: ================= START STATUS ================= [ 1026.211384][T21223] Sensor A: Test Pattern: 75% Colorbar [ 1026.217303][T21223] Sensor A: Show Information: All [ 1026.222369][T21223] Sensor A: Vertical Flip: false [ 1026.227499][T21223] Sensor A: Horizontal Flip: false [ 1026.232641][T21223] Sensor A: Brightness: 128 [ 1026.237392][T21223] Sensor A: Contrast: 0 [ 1026.241587][T21223] Sensor A: Hue: 0 [ 1026.246034][T21223] Sensor A: Saturation: 128 [ 1026.250672][T21223] Sensor A: ================== END STATUS ================== [ 1026.314292][T19508] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1026.348136][ T12] Bluetooth: hci3: Frame reassembly failed (-84) [ 1026.354739][ T5809] usb 5-1: Using ep0 maxpacket: 32 [ 1026.379289][ T5809] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1026.403649][ T42] Bluetooth: hci3: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1026.419110][ T5809] usb 5-1: can't read configurations, error -61 [ 1026.614655][ T5809] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1026.874984][ T5809] usb 5-1: Using ep0 maxpacket: 32 [ 1026.972631][ T5809] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1027.057878][ T5809] usb 5-1: can't read configurations, error -61 [ 1027.153369][ T5809] usb usb5-port1: attempt power cycle [ 1027.678432][ T5809] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1027.797074][ T5809] usb 5-1: Using ep0 maxpacket: 32 [ 1027.871274][ T5809] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1027.947254][ T5809] usb 5-1: can't read configurations, error -61 [ 1028.668368][T21231] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1028.668368][T21231] The task syz.3.5053 (21231) triggered the difference, watch for misbehavior. [ 1028.961936][T19508] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1028.969591][T21188] Bluetooth: hci3: command 0x1003 tx timeout [ 1029.044490][ T5809] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1029.146263][T21229] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5054'. [ 1029.179140][ T5809] usb 5-1: device descriptor read/8, error -71 [ 1029.213059][T21233] netlink: 'syz.2.5056': attribute type 1 has an invalid length. [ 1029.263824][T21236] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1029.277932][T21236] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 1029.292133][T21233] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5056'. [ 1029.308354][T21233] macvlan2: entered promiscuous mode [ 1029.313940][T21233] macvlan2: entered allmulticast mode [ 1029.319712][ T5809] usb usb5-port1: unable to enumerate USB device [ 1029.325885][T21233] bond2: entered promiscuous mode [ 1029.348743][T21233] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1029.390090][T21233] bond2: left promiscuous mode [ 1029.435324][T21246] syzkaller0: entered promiscuous mode [ 1029.440966][T21246] syzkaller0: entered allmulticast mode [ 1029.494264][ T5838] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1029.654764][T21250] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5060'. [ 1029.668861][T21250] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5060'. [ 1029.684288][ T5838] usb 4-1: Using ep0 maxpacket: 16 [ 1029.702525][ T5838] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1029.753318][ T5838] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1029.817783][ T5838] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1029.927607][ T5838] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1029.983789][ T5838] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1030.005094][T21255] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5061'. [ 1030.159882][ T5838] usb 4-1: config 0 descriptor?? [ 1030.798388][ T5838] usbhid 4-1:0.0: can't add hid device: -71 [ 1030.817295][ T5838] usbhid: probe of 4-1:0.0 failed with error -71 [ 1030.837113][ T5838] usb 4-1: USB disconnect, device number 123 [ 1031.345412][T21264] Sensor A: ================= START STATUS ================= [ 1031.363187][T21264] Sensor A: Test Pattern: 75% Colorbar [ 1031.368881][T21264] Sensor A: Show Information: All [ 1031.373982][T21264] Sensor A: Vertical Flip: false [ 1031.384198][T21264] Sensor A: Horizontal Flip: false [ 1031.389381][T21264] Sensor A: Brightness: 128 [ 1031.393885][T21264] Sensor A: Contrast: 0 [ 1031.411762][T21264] Sensor A: Hue: 0 [ 1031.435718][T21264] Sensor A: Saturation: 128 [ 1031.443119][T21264] Sensor A: ================== END STATUS ================== [ 1031.585870][T16235] Bluetooth: hci3: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 1031.712845][T16235] Bluetooth: hci3: Frame reassembly failed (-84) [ 1033.594471][T19508] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1033.997434][T21277] netlink: 'syz.3.5067': attribute type 1 has an invalid length. [ 1034.062609][T21277] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1034.074589][T21277] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 1034.238590][T21275] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5066'. [ 1034.260783][T21283] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5067'. [ 1034.311767][T21290] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5069'. [ 1034.331787][T21286] macvlan3: entered promiscuous mode [ 1034.340667][T21286] macvlan3: entered allmulticast mode [ 1034.351427][T21286] bond4: entered promiscuous mode [ 1034.358931][T21286] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1034.376758][T21286] bond4: left promiscuous mode [ 1034.906474][T21306] Sensor A: ================= START STATUS ================= [ 1034.914836][T21306] Sensor A: Test Pattern: 75% Colorbar [ 1034.921338][T21306] Sensor A: Show Information: All [ 1034.927965][T21306] Sensor A: Vertical Flip: false [ 1034.933078][T21306] Sensor A: Horizontal Flip: false [ 1034.938947][T21306] Sensor A: Brightness: 128 [ 1034.943636][T21306] Sensor A: Contrast: 0 [ 1034.948471][T21306] Sensor A: Hue: 0 [ 1034.952501][T21306] Sensor A: Saturation: 128 [ 1034.960516][T21306] Sensor A: ================== END STATUS ================== [ 1037.114380][T21188] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1037.320455][T21317] netlink: 72 bytes leftover after parsing attributes in process `syz.0.5079'. [ 1037.714473][ T5838] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1037.924213][ T5838] usb 1-1: Using ep0 maxpacket: 16 [ 1037.936218][ T5838] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1037.956635][ T5838] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1037.967104][ T5838] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1037.981318][ T5838] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1037.990725][ T5838] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.008285][ T5838] usb 1-1: config 0 descriptor?? [ 1038.477423][T21188] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 1038.645026][ T5838] usbhid 1-1:0.0: can't add hid device: -71 [ 1038.656400][ T5838] usbhid: probe of 1-1:0.0 failed with error -71 [ 1038.672514][ T5838] usb 1-1: USB disconnect, device number 30 [ 1038.850594][T21346] netlink: 72 bytes leftover after parsing attributes in process `syz.3.5090'. [ 1039.777856][T21188] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 1039.933518][T21370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5099'. [ 1039.943822][T21370] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5099'. [ 1040.063222][T21373] netlink: 'syz.2.5100': attribute type 6 has an invalid length. [ 1040.199207][T21377] syzkaller0: entered promiscuous mode [ 1040.205907][T21377] syzkaller0: entered allmulticast mode [ 1040.511999][T21188] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1041.609196][T21397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5108'. [ 1041.661457][T21397] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5108'. [ 1043.194358][T21188] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1043.293057][T21415] sg_write: data in/out 418780/98 bytes for SCSI command 0x0-- guessing data in; [ 1043.293057][T21415] program syz.2.5112 not setting count and/or reply_len properly [ 1043.682215][T21188] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 1045.879105][T21431] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5117'. [ 1045.940381][T21431] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5117'. [ 1046.036638][T21439] Sensor A: ================= START STATUS ================= [ 1046.044364][T21439] Sensor A: Test Pattern: 75% Colorbar [ 1046.050056][T21439] Sensor A: Show Information: All [ 1046.056604][T21439] Sensor A: Vertical Flip: false [ 1046.061781][T21439] Sensor A: Horizontal Flip: false [ 1046.067752][T21439] Sensor A: Brightness: 128 [ 1046.072475][T21439] Sensor A: Contrast: 0 [ 1046.077725][T21439] Sensor A: Hue: 0 [ 1046.081488][T21439] Sensor A: Saturation: 128 [ 1046.105558][T21439] Sensor A: ================== END STATUS ================== [ 1046.287821][T19439] Bluetooth: hci3: Frame reassembly failed (-84) [ 1048.244455][T21188] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1048.251466][T19508] Bluetooth: hci3: command 0x1003 tx timeout [ 1049.064416][T20657] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1049.274332][T20657] usb 3-1: Using ep0 maxpacket: 16 [ 1049.286322][T20657] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1049.314314][T20657] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1049.336569][T20657] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1049.362098][T20657] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1049.374335][T20657] usb 3-1: Product: syz [ 1049.378547][T20657] usb 3-1: Manufacturer: syz [ 1049.383169][T20657] usb 3-1: SerialNumber: syz [ 1049.628178][T20657] usb 3-1: 0:2 : does not exist [ 1049.667748][T20657] usb 3-1: USB disconnect, device number 19 [ 1049.718765][T20629] udevd[20629]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1051.084311][T20657] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1051.289801][T20657] usb 4-1: Using ep0 maxpacket: 32 [ 1051.318559][T20657] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1051.351574][T20657] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1051.394413][T20657] usb 4-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 1051.394444][T20657] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.394463][T20657] usb 4-1: Product: syz [ 1051.394477][T20657] usb 4-1: Manufacturer: syz [ 1051.394491][T20657] usb 4-1: SerialNumber: syz [ 1051.400738][T20657] usb 4-1: config 0 descriptor?? [ 1051.610129][T20657] usb 4-1: USB disconnect, device number 124 [ 1051.988119][T21481] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5134'. [ 1052.017385][T21481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5134'. [ 1054.639165][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.646066][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.707768][T21514] netlink: 'syz.3.5143': attribute type 1 has an invalid length. [ 1054.802376][T21518] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1054.831670][T21518] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 1054.859358][T21514] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5143'. [ 1054.900973][T21514] macvlan3: entered promiscuous mode [ 1054.906744][T21514] macvlan3: entered allmulticast mode [ 1054.914930][T21514] bond5: entered promiscuous mode [ 1054.922899][T21514] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1054.934418][T21514] bond5: left promiscuous mode [ 1055.044540][ T23] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1055.244285][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 1055.264238][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1055.275710][ T23] usb 3-1: config 0 has no interfaces? [ 1055.287558][ T23] usb 3-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 1055.296907][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1055.315376][ T23] usb 3-1: Product: syz [ 1055.324439][ T23] usb 3-1: Manufacturer: syz [ 1055.332119][ T23] usb 3-1: SerialNumber: syz [ 1055.341908][ T23] usb 3-1: config 0 descriptor?? [ 1055.556821][ T23] usb 3-1: USB disconnect, device number 20 [ 1056.459658][T21545] netlink: 'syz.4.5151': attribute type 1 has an invalid length. [ 1056.581322][T21545] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1056.795559][T21556] netlink: 'syz.0.5154': attribute type 1 has an invalid length. [ 1056.899394][T21561] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1056.948513][T21561] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 1056.994339][T21556] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5154'. [ 1057.043258][T21556] macvlan3: entered promiscuous mode [ 1057.048881][T21556] macvlan3: entered allmulticast mode [ 1057.060177][T21556] bond2: entered promiscuous mode [ 1057.069566][T21556] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1057.081996][T21556] bond2: left promiscuous mode [ 1058.763544][T21594] netlink: 'syz.2.5163': attribute type 1 has an invalid length. [ 1058.807516][T21594] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1060.245117][T21631] netlink: 'syz.3.5172': attribute type 6 has an invalid length. [ 1060.349587][T21632] syzkaller0: entered promiscuous mode [ 1060.373491][T21632] syzkaller0: entered allmulticast mode [ 1060.588887][T19508] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 1061.251000][T21188] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 1062.300609][T21664] netlink: 'syz.4.5182': attribute type 6 has an invalid length. [ 1062.554001][T20657] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1062.790857][T20657] usb 4-1: Using ep0 maxpacket: 32 [ 1062.816820][T20657] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1062.943460][T20657] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1062.957147][T20657] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1062.987625][T20657] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1062.997742][T20657] usb 4-1: Product: syz [ 1063.001983][T20657] usb 4-1: Manufacturer: syz [ 1063.008711][ T5809] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1063.017631][T20657] usb 4-1: SerialNumber: syz [ 1063.026262][T20657] usb 4-1: config 0 descriptor?? [ 1063.217108][ T5809] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1063.227348][ T5809] usb 1-1: config 0 has no interfaces? [ 1063.239405][ T5809] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1063.248633][ T5809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.256667][ T5809] usb 1-1: Product: syz [ 1063.260904][ T5809] usb 1-1: Manufacturer: syz [ 1063.265678][ T5809] usb 1-1: SerialNumber: syz [ 1063.274331][ T5809] usb 1-1: config 0 descriptor?? [ 1065.043496][T21704] netlink: 'syz.4.5193': attribute type 6 has an invalid length. [ 1065.334000][ T5809] usb 4-1: USB disconnect, device number 125 [ 1065.350694][T21713] hub 9-0:1.0: USB hub found [ 1065.357169][T21713] hub 9-0:1.0: 1 port detected [ 1065.992299][ T23] usb 1-1: USB disconnect, device number 31 [ 1066.328812][T21188] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 1067.184319][T21739] syzkaller0: entered promiscuous mode [ 1067.190165][T21739] syzkaller0: entered allmulticast mode [ 1067.414250][ T23] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1067.604243][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 1067.617200][ T23] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1067.639116][ T23] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1067.661850][ T23] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1067.671850][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1067.680258][ T23] usb 5-1: Product: syz [ 1067.685008][ T23] usb 5-1: Manufacturer: syz [ 1067.689714][ T23] usb 5-1: SerialNumber: syz [ 1067.697245][ T23] usb 5-1: config 0 descriptor?? [ 1068.299606][T21768] netlink: 'syz.2.5215': attribute type 6 has an invalid length. [ 1068.434681][T21771] syzkaller0: entered promiscuous mode [ 1068.440322][T21771] syzkaller0: entered allmulticast mode [ 1068.655484][ T12] syzkaller0: tun_net_xmit 76 [ 1068.660533][ T12] syzkaller0: tun_net_xmit 48 [ 1068.694518][ T5875] syzkaller0: tun_net_xmit 76 [ 1068.904422][ T23] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1069.099777][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 1069.111946][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1069.123657][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1069.138518][ T23] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1069.152781][ T23] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1069.162035][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1069.179628][ T23] usb 4-1: config 0 descriptor?? [ 1069.611962][ T23] microsoft 0003:045E:07DA.0016: unknown main item tag 0x2 [ 1069.621140][ T23] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 1069.628587][ T23] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 1069.637805][ T23] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 1069.645483][ T23] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 1069.652875][ T23] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 1069.660270][ T23] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 1069.668046][ T23] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 1069.678897][ T23] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 1069.686267][ T23] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 1069.693663][ T23] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 1069.701150][ T23] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 1069.720066][ T23] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 1069.734469][ T23] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 1069.741801][ T23] microsoft 0003:045E:07DA.0016: unknown main item tag 0x0 [ 1069.750363][ T23] microsoft 0003:045E:07DA.0016: No inputs registered, leaving [ 1069.774624][ T23] microsoft 0003:045E:07DA.0016: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 1069.794019][ T23] microsoft 0003:045E:07DA.0016: no inputs found [ 1069.815560][ T23] microsoft 0003:045E:07DA.0016: could not initialize ff, continuing anyway [ 1069.830228][ T23] usb 4-1: USB disconnect, device number 126 [ 1069.884861][T21783] fido_id[21783]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1070.192619][ T5809] usb 5-1: USB disconnect, device number 30 [ 1072.257850][T21798] netlink: 'syz.3.5224': attribute type 6 has an invalid length. [ 1073.814691][T20657] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1074.021569][T20657] usb 1-1: Using ep0 maxpacket: 32 [ 1074.038109][T20657] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1074.059291][T20657] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1074.081536][T20657] usb 1-1: Product: syz [ 1074.094195][T20657] usb 1-1: Manufacturer: syz [ 1074.107825][T20657] usb 1-1: SerialNumber: syz [ 1074.175874][T20657] usb 1-1: config 0 descriptor?? [ 1074.615324][T20657] airspy 1-1:0.0: usb_control_msg() failed -32 request 0a [ 1074.627093][T20657] airspy 1-1:0.0: Could not detect board [ 1074.636939][T20657] airspy: probe of 1-1:0.0 failed with error -32 [ 1076.585269][T20657] usb 1-1: USB disconnect, device number 32 [ 1077.931279][T21881] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5245'. [ 1079.012971][T21846] netlink: 'syz.2.5238': attribute type 6 has an invalid length. [ 1080.932994][T21915] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5254'. [ 1081.990788][ T2932] syzkaller0: tun_net_xmit 76 [ 1082.021359][ T2932] syzkaller0: tun_net_xmit 48 [ 1082.026840][ T5875] syzkaller0: tun_net_xmit 76 [ 1084.605320][T20759] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1084.827460][T20759] usb 5-1: Using ep0 maxpacket: 32 [ 1084.851605][T20759] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 1084.861259][T20759] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1084.877480][T20759] usb 5-1: config 0 has no interface number 0 [ 1084.883829][T20759] usb 5-1: config 0 interface 188 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1084.901261][T20759] usb 5-1: config 0 interface 188 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1084.923480][T20759] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1084.932937][T20759] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1084.941026][T20759] usb 5-1: Product: syz [ 1084.945459][T20759] usb 5-1: Manufacturer: syz [ 1084.950115][T20759] usb 5-1: SerialNumber: syz [ 1085.021618][T20759] usb 5-1: config 0 descriptor?? [ 1085.039791][T20759] asix: probe of 5-1:0.188 failed with error -22 [ 1085.417509][T21929] syzkaller0: entered promiscuous mode [ 1085.423020][T21929] syzkaller0: entered allmulticast mode [ 1085.437054][T21933] netlink: 'syz.2.5259': attribute type 6 has an invalid length. [ 1085.534748][T21944] Sensor A: ================= START STATUS ================= [ 1085.545618][T21944] Sensor A: Test Pattern: 75% Colorbar [ 1085.551149][T21944] Sensor A: Show Information: All [ 1085.556475][T21944] Sensor A: Vertical Flip: false [ 1085.561447][T21944] Sensor A: Horizontal Flip: false [ 1085.567152][T21944] Sensor A: Brightness: 128 [ 1085.571677][T21944] Sensor A: Contrast: 0 [ 1085.576283][T21944] Sensor A: Hue: 0 [ 1085.580169][T21944] Sensor A: Saturation: 128 [ 1085.584833][T21944] Sensor A: ================== END STATUS ================== [ 1085.702514][T18700] Bluetooth: hci3: Frame reassembly failed (-84) [ 1085.759348][T18700] Bluetooth: hci3: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1085.834460][ T5838] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1086.064433][ T5838] usb 3-1: Using ep0 maxpacket: 32 [ 1086.145134][ T5838] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1086.216215][ T5838] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.272261][ T5838] usb 3-1: Product: syz [ 1086.303678][ T5838] usb 3-1: Manufacturer: syz [ 1086.347878][ T5838] usb 3-1: SerialNumber: syz [ 1086.459115][ T5838] usb 3-1: config 0 descriptor?? [ 1087.087400][ T5838] airspy 3-1:0.0: Board ID: 00 [ 1087.147692][ T5838] airspy 3-1:0.0: Firmware version: [ 1087.288243][ T5838] airspy 3-1:0.0: usb_control_msg() failed -32 request 11 [ 1087.441706][ T5838] airspy 3-1:0.0: Registered as swradio24 [ 1087.523355][ T5838] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1087.754284][T21188] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1087.754379][T19508] Bluetooth: hci3: command 0x1003 tx timeout [ 1088.111898][T20759] usb 5-1: USB disconnect, device number 31 [ 1088.280879][T19508] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 1088.624816][T20759] usb 3-1: USB disconnect, device number 21 [ 1089.250938][T21979] netlink: 'syz.3.5272': attribute type 6 has an invalid length. [ 1089.674208][ T5809] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1089.904290][ T5809] usb 4-1: Using ep0 maxpacket: 16 [ 1089.912553][ T5809] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1089.923455][ T5809] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1089.943307][ T5809] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1089.962866][ T5809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.977381][ T5809] usb 4-1: Product: syz [ 1089.982037][ T5809] usb 4-1: Manufacturer: syz [ 1089.990335][ T5809] usb 4-1: SerialNumber: syz [ 1090.233807][ T5809] usb 4-1: 0:2 : does not exist [ 1090.243574][ T5809] usb 4-1: unit 6 not found! [ 1090.291679][ T5809] usb 4-1: USB disconnect, device number 127 [ 1090.352512][T20629] udevd[20629]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1090.772491][T21991] Sensor A: ================= START STATUS ================= [ 1090.804333][T21991] Sensor A: Test Pattern: 75% Colorbar [ 1090.810010][T21991] Sensor A: Show Information: All [ 1090.833000][T21991] Sensor A: Vertical Flip: false [ 1090.884379][T21991] Sensor A: Horizontal Flip: false [ 1090.890945][T21991] Sensor A: Brightness: 128 [ 1090.896518][T21991] Sensor A: Contrast: 0 [ 1090.901298][T21991] Sensor A: Hue: 0 [ 1090.905291][T21991] Sensor A: Saturation: 128 [ 1090.909902][T21991] Sensor A: ================== END STATUS ================== [ 1091.030522][T19439] Bluetooth: hci3: Frame reassembly failed (-84) [ 1091.075867][T19439] Bluetooth: hci3: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1093.034401][T19508] Bluetooth: hci3: command 0x1003 tx timeout [ 1093.045303][T21188] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1095.044261][T21996] netlink: 'syz.4.5278': attribute type 1 has an invalid length. [ 1095.057814][T21996] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1095.059049][T21997] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5278'. [ 1095.076948][T21997] team0: entered promiscuous mode [ 1095.115633][T21997] team_slave_0: entered promiscuous mode [ 1095.121605][T21997] team_slave_1: entered promiscuous mode [ 1095.143240][T21997] team0: entered allmulticast mode [ 1095.160231][T21997] team_slave_0: entered allmulticast mode [ 1095.176154][T21997] team_slave_1: entered allmulticast mode [ 1095.302643][T21188] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1095.507028][ T5875] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1095.735137][ T5875] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1095.769243][ T5875] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1095.786205][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.824154][ T5875] usb 4-1: Product: syz [ 1095.828377][ T5875] usb 4-1: Manufacturer: syz [ 1095.833356][ T5875] usb 4-1: SerialNumber: syz [ 1095.874877][ T5875] usb 4-1: config 0 descriptor?? [ 1097.177463][ T2964] syzkaller0: tun_net_xmit 76 [ 1097.182429][ T2964] syzkaller0: tun_net_xmit 48 [ 1097.187704][T22044] netlink: 'syz.4.5291': attribute type 1 has an invalid length. [ 1097.207123][ T9] syzkaller0: tun_net_xmit 76 [ 1097.242245][T22044] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1097.420501][T22047] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5291'. [ 1097.737756][T22056] sg_write: data in/out 25820/46 bytes for SCSI command 0x8-- guessing data in; [ 1097.737756][T22056] program syz.0.5293 not setting count and/or reply_len properly [ 1098.261081][ T5875] usb 4-1: USB disconnect, device number 2 [ 1099.634520][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1099.853933][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1099.863843][ T9] usb 4-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 1099.873182][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1099.902523][ T9] usb 4-1: config 0 descriptor?? [ 1100.351628][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x0 [ 1100.368301][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x0 [ 1100.386567][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x0 [ 1100.393678][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x0 [ 1100.401061][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x0 [ 1100.417944][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x0 [ 1100.425623][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x6 [ 1100.432713][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1100.442034][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1100.449367][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1100.456522][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1100.463593][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1100.470893][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1100.484222][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1100.491323][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x3 [ 1100.499729][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1100.507215][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x6 [ 1100.514544][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1100.521628][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1100.529212][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1100.536822][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1100.545637][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1100.552896][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1100.560076][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1100.572740][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1100.579948][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1100.587364][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x3 [ 1100.597499][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1100.606685][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x6 [ 1100.613889][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1100.623192][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1100.632935][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1100.643894][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1100.653249][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1100.660620][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1100.667929][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1100.679935][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1100.687165][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1100.710291][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x3 [ 1100.720905][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1100.732562][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1100.739878][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1100.754732][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1100.761852][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1100.773491][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1100.780701][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1100.789265][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1100.796537][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1100.803651][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1100.810794][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1100.818080][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1100.825240][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x3 [ 1100.832485][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1100.840031][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1100.848295][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1100.861777][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1100.869099][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1100.876558][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1100.883668][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1100.890787][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1100.899138][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1100.911267][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1100.918491][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1100.930086][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1100.937426][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1100.944770][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1100.953317][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1100.960820][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1100.968504][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1100.975905][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1100.987701][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1100.995171][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1101.002267][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x3 [ 1101.009702][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1101.022041][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x7 [ 1101.029429][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1101.037057][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1101.050189][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1101.058366][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1101.071373][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1101.079048][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1101.086605][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1101.094808][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1101.102146][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1101.109717][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1101.118988][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1101.136941][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1101.148858][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x3 [ 1101.159690][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1101.170345][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x6 [ 1101.180816][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1101.188496][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1101.213101][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1101.220558][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1101.232355][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1101.253492][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1101.262833][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1101.271346][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x3 [ 1101.281843][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1101.291222][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x7 [ 1101.298875][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x7 [ 1101.306553][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1101.313649][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1101.321142][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1101.328513][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1101.335995][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1101.343116][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1101.351215][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x3 [ 1101.361050][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1101.368771][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x7 [ 1101.382088][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x7 [ 1101.389793][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1101.402364][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1101.410210][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1101.422858][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1101.431721][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1101.443640][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1101.451261][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1101.465898][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x3 [ 1101.473138][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1101.486233][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x6 [ 1101.493549][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x6 [ 1101.506971][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1101.527564][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1101.536234][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1101.543413][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1101.555371][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1101.562612][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1101.591837][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1101.602002][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x3 [ 1101.612762][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1101.622374][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x6 [ 1101.633147][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x6 [ 1101.642751][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1101.653753][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1101.662913][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1101.681690][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1101.690169][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1101.710756][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1101.717937][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x3 [ 1101.725203][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1101.732441][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x6 [ 1101.739766][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1101.747969][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1101.755148][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1101.762344][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1101.773026][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1101.780360][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1101.789752][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1101.797792][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1101.806798][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1101.816986][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1101.824667][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1101.832142][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1101.839598][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1101.848245][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1101.870805][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1101.895774][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1101.903049][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x3 [ 1101.932237][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1101.940208][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x6 [ 1101.978125][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x5 [ 1102.022087][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x7 [ 1102.032935][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1102.062343][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1102.073977][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1102.110209][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1102.118326][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1102.154667][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1102.173673][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1102.183054][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1102.190427][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1102.227956][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1102.235317][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1102.242411][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1102.249864][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1102.257347][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x3 [ 1102.264685][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1102.271763][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x6 [ 1102.279027][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1102.292951][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1102.300331][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1102.307628][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1102.720715][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1102.781299][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1102.803921][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1102.815551][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1102.822656][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1102.836357][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1102.853725][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1102.863187][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1102.884948][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1102.892000][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1102.903287][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1102.910649][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1102.922390][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x3 [ 1102.929606][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1102.936782][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x5 [ 1102.943956][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1102.951351][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1102.958576][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1102.970360][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1102.977752][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1102.985130][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1102.992334][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1103.000901][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1103.025397][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1103.032855][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1103.060664][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1103.068733][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x3 [ 1103.081227][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1103.101064][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x7 [ 1103.108404][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1103.141657][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1103.164209][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1103.171322][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1103.190900][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x7 [ 1103.198960][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x6 [ 1103.207507][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x6 [ 1103.215033][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x3 [ 1103.222144][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x6 [ 1103.230148][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x3 [ 1103.242426][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x3 [ 1103.255721][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x3 [ 1103.262831][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x3 [ 1103.270529][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1103.278531][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x7 [ 1103.286078][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x7 [ 1103.293169][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x3 [ 1103.300828][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x3 [ 1103.309843][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x3 [ 1103.317494][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x3 [ 1103.324904][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x3 [ 1103.344481][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x2 [ 1103.353353][ T9] chicony 0003:04F2:1421.0017: unknown main item tag 0x3 [ 1103.374514][ T9] chicony 0003:04F2:1421.0017: hidraw0: USB HID v77.fd Device [HID 04f2:1421] on usb-dummy_hcd.3-1/input0 [ 1103.386250][T22060] netlink: 'syz.4.5295': attribute type 1 has an invalid length. [ 1103.398985][T22060] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 1103.422011][ T9] usb 4-1: USB disconnect, device number 3 [ 1103.442538][T22079] netlink: 'syz.0.5300': attribute type 1 has an invalid length. [ 1103.472098][T22079] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1103.473599][T22080] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5300'. [ 1103.511711][T22097] fido_id[22097]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 1103.532012][T22080] team0: entered promiscuous mode [ 1103.538633][T22080] team_slave_0: entered promiscuous mode [ 1103.544590][T22080] team_slave_1: entered promiscuous mode [ 1103.569113][T22080] 8021q: adding VLAN 0 to HW filter on device team0 [ 1103.727833][T22107] Sensor A: ================= START STATUS ================= [ 1103.738296][T22107] Sensor A: Test Pattern: 75% Colorbar [ 1103.743813][T22107] Sensor A: Show Information: All [ 1103.749525][T22107] Sensor A: Vertical Flip: false [ 1103.763015][T22107] Sensor A: Horizontal Flip: false [ 1103.768816][T22107] Sensor A: Brightness: 128 [ 1103.773460][T22107] Sensor A: Contrast: 0 [ 1103.779502][T22107] Sensor A: Hue: 0 [ 1103.783276][T22107] Sensor A: Saturation: 128 [ 1103.789527][T22107] Sensor A: ================== END STATUS ================== [ 1104.728383][T19439] Bluetooth: hci3: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 1105.654539][ T9] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 1106.018767][ T9] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1106.060442][T22123] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5311'. [ 1106.100445][ T9] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1106.146832][T22123] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1106.197870][ T9] usb 5-1: Product: syz [ 1106.241447][ T9] usb 5-1: Manufacturer: syz [ 1106.295126][ T9] usb 5-1: SerialNumber: syz [ 1106.406006][ T9] usb 5-1: config 0 descriptor?? [ 1106.717330][T21188] Bluetooth: hci3: command 0x1003 tx timeout [ 1106.725030][T19508] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1106.827108][ T2964] syzkaller0: tun_net_xmit 76 [ 1106.832170][ T2964] syzkaller0: tun_net_xmit 48 [ 1106.855398][ T5838] syzkaller0: tun_net_xmit 76 [ 1106.913426][ T9] usb 5-1: USB disconnect, device number 32 [ 1111.742426][T22129] lo: entered allmulticast mode [ 1111.749672][T22135] netlink: 'syz.2.5315': attribute type 1 has an invalid length. [ 1111.758224][T22135] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1113.481779][T22203] netlink: 'syz.0.5335': attribute type 1 has an invalid length. [ 1113.552978][T18700] syzkaller0: tun_net_xmit 76 [ 1113.558060][T18700] syzkaller0: tun_net_xmit 48 [ 1113.574596][T20759] syzkaller0: tun_net_xmit 76 [ 1113.855957][T20759] syzkaller0: tun_net_xmit 76 [ 1114.549252][T22223] Sensor A: ================= START STATUS ================= [ 1114.561162][T22223] Sensor A: Test Pattern: 75% Colorbar [ 1114.567257][T22223] Sensor A: Show Information: All [ 1114.573037][T22223] Sensor A: Vertical Flip: false [ 1114.580648][T22223] Sensor A: Horizontal Flip: false [ 1114.586381][T22223] Sensor A: Brightness: 128 [ 1114.590956][T22223] Sensor A: Contrast: 0 [ 1114.597991][T22223] Sensor A: Hue: 0 [ 1114.601801][T22223] Sensor A: Saturation: 128 [ 1114.607015][T22223] Sensor A: ================== END STATUS ================== [ 1114.753367][T19439] Bluetooth: hci3: Frame reassembly failed (-84) [ 1114.794016][T19439] Bluetooth: hci3: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1116.095266][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.101856][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.815306][T19508] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1116.826965][T21188] Bluetooth: hci3: command 0x1003 tx timeout [ 1119.899150][T22205] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1119.910273][T22205] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 1119.954561][T22207] bond3: (slave gretap2): making interface the new active one [ 1119.963198][T22207] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 1120.146163][T22249] netlink: 284 bytes leftover after parsing attributes in process `syz.3.5348'. [ 1122.004321][ T23] IPVS: starting estimator thread 0... [ 1122.017818][T22276] netlink: 'syz.3.5355': attribute type 1 has an invalid length. [ 1122.021330][T22280] Sensor A: ================= START STATUS ================= [ 1122.033862][T22280] Sensor A: Test Pattern: 75% Colorbar [ 1122.042378][T22280] Sensor A: Show Information: All [ 1122.050154][T22280] Sensor A: Vertical Flip: false [ 1122.069169][T22280] Sensor A: Horizontal Flip: false [ 1122.104413][T22277] IPVS: using max 22 ests per chain, 52800 per kthread [ 1122.124663][T22280] Sensor A: Brightness: 128 [ 1122.247036][T22280] Sensor A: Contrast: 0 [ 1122.252578][T22288] netlink: 284 bytes leftover after parsing attributes in process `syz.2.5358'. [ 1122.262501][T22280] Sensor A: Hue: 0 [ 1122.266599][T22280] Sensor A: Saturation: 128 [ 1122.284210][T22280] Sensor A: ================== END STATUS ================== [ 1122.295464][ T11] Bluetooth: hci3: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 1122.297785][T22282] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1122.315535][ T2932] Bluetooth: hci3: Frame reassembly failed (-84) [ 1122.378971][T22282] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 1122.578242][T22294] netlink: 'syz.3.5362': attribute type 1 has an invalid length. [ 1122.660100][T22294] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1122.707687][T22296] syzkaller0: entered promiscuous mode [ 1122.715314][T22296] syzkaller0: entered allmulticast mode [ 1122.727453][T22294] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5362'. [ 1123.494566][T22319] netlink: 284 bytes leftover after parsing attributes in process `syz.0.5368'. [ 1123.611669][T22323] netlink: 'syz.3.5371': attribute type 1 has an invalid length. [ 1123.699259][T22330] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1123.715572][T22330] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 1123.934473][T20759] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1124.126900][T20759] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1124.136105][T20759] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1124.147050][T22342] random: crng reseeded on system resumption [ 1124.153704][T20759] usb 1-1: Product: syz [ 1124.158124][T20759] usb 1-1: Manufacturer: syz [ 1124.164879][T20759] usb 1-1: SerialNumber: syz [ 1124.314403][T21188] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1124.807109][T22346] syzkaller0: entered promiscuous mode [ 1124.817045][T22346] syzkaller0: entered allmulticast mode [ 1124.880396][T20759] rtl8150 1-1:1.0: eth1: rtl8150 is detected [ 1124.964230][ T5809] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1125.075473][ T5875] usb 1-1: USB disconnect, device number 33 [ 1125.214255][ T5809] usb 5-1: Using ep0 maxpacket: 16 [ 1125.247754][ T5809] usb 5-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7 [ 1125.273658][ T5809] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1125.301648][ T5809] usb 5-1: Product: syz [ 1125.317149][ T5809] usb 5-1: Manufacturer: syz [ 1125.326673][ T5809] usb 5-1: SerialNumber: syz [ 1125.345662][ T5809] usb 5-1: config 0 descriptor?? [ 1125.733036][ T5809] hub 5-1:0.0: bad descriptor, ignoring hub [ 1125.818404][ T5809] hub: probe of 5-1:0.0 failed with error -5 [ 1126.024453][ T5809] usb 5-1: USB disconnect, device number 33 [ 1126.131259][T22372] Sensor A: ================= START STATUS ================= [ 1126.168753][T22372] Sensor A: Test Pattern: 75% Colorbar [ 1126.180560][T22372] Sensor A: Show Information: All [ 1126.193178][T22372] Sensor A: Vertical Flip: false [ 1126.209576][T22372] Sensor A: Horizontal Flip: false [ 1126.228527][T22372] Sensor A: Brightness: 128 [ 1126.240719][T22372] Sensor A: Contrast: 0 [ 1126.247155][T22372] Sensor A: Hue: 0 [ 1126.250969][T22372] Sensor A: Saturation: 128 [ 1126.262997][T22372] Sensor A: ================== END STATUS ================== [ 1126.263319][ T12] Bluetooth: hci3: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1126.288732][ T12] Bluetooth: hci3: Frame reassembly failed (-84) [ 1128.324276][T19508] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1129.415184][T22421] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.5394'. [ 1129.581722][T22429] fuse: Bad value for 'fd' [ 1129.836167][T22437] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5399'. [ 1131.958250][T22447] Sensor A: ================= START STATUS ================= [ 1131.989435][T22447] Sensor A: Test Pattern: 75% Colorbar [ 1132.047602][T22447] Sensor A: Show Information: All [ 1132.131580][T22447] Sensor A: Vertical Flip: false [ 1132.238513][T12363] Bluetooth: hci3: Frame reassembly failed (-84) [ 1132.247628][ T71] Bluetooth: hci3: received HCILL_GO_TO_SLEEP_ACK in state 0 [ 1132.275244][T22447] Sensor A: Horizontal Flip: false [ 1132.280437][T22447] Sensor A: Brightness: 128 [ 1132.287216][T22447] Sensor A: Contrast: 0 [ 1132.295830][T22447] Sensor A: Hue: 0 [ 1132.305888][T22447] Sensor A: Saturation: 128 [ 1132.313660][T22447] Sensor A: ================== END STATUS ================== [ 1132.864193][ T23] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1133.793033][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1133.814705][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1133.825402][ T23] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1133.838913][ T23] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1133.864181][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1133.893803][ T23] usb 3-1: config 0 descriptor?? [ 1134.314552][T21188] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1134.317550][T19508] Bluetooth: hci3: command 0x1003 tx timeout [ 1134.336954][ T23] plantronics 0003:047F:FFFF.0018: unbalanced collection at end of report description [ 1134.366109][ T23] plantronics 0003:047F:FFFF.0018: parse failed [ 1134.372907][ T23] plantronics: probe of 0003:047F:FFFF.0018 failed with error -22 [ 1134.572087][ T23] usb 3-1: USB disconnect, device number 22 [ 1136.508823][T22520] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5431'. [ 1138.818158][T22545] syzkaller0: entered promiscuous mode [ 1138.829114][T22545] syzkaller0: entered allmulticast mode [ 1139.220720][T22556] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5443'. [ 1140.576998][ T5809] libceph: connect (1)[c::]:6789 error -101 [ 1140.705366][ T5809] libceph: mon0 (1)[c::]:6789 connect error [ 1140.972436][T12748] libceph: connect (1)[c::]:6789 error -101 [ 1141.048722][T12748] libceph: mon0 (1)[c::]:6789 connect error [ 1141.164306][T22561] ceph: No mds server is up or the cluster is laggy [ 1141.464476][T22578] syzkaller0: entered promiscuous mode [ 1141.478401][T22578] syzkaller0: entered allmulticast mode [ 1143.885531][ T23] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1144.006152][T22614] syzkaller0: entered promiscuous mode [ 1144.011922][T22614] syzkaller0: entered allmulticast mode [ 1144.074577][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 1144.092079][ T23] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1144.101780][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1144.131610][ T23] usb 3-1: Product: syz [ 1144.146039][ T23] usb 3-1: Manufacturer: syz [ 1144.154162][ T23] usb 3-1: SerialNumber: syz [ 1144.172146][ T23] usb 3-1: config 0 descriptor?? [ 1144.593830][ T23] airspy 3-1:0.0: Board ID: 00 [ 1144.599193][ T23] airspy 3-1:0.0: Firmware version: [ 1145.505083][ T23] airspy 3-1:0.0: usb_control_msg() failed -32 request 0e [ 1145.534830][ T23] airspy 3-1:0.0: Registered as swradio24 [ 1145.540874][ T23] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1145.577314][ T23] usb 3-1: USB disconnect, device number 23 [ 1146.181199][T22648] syzkaller0: entered promiscuous mode [ 1146.204469][T22648] syzkaller0: entered allmulticast mode [ 1146.784248][ T5838] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1147.491890][ T5838] usb 1-1: Using ep0 maxpacket: 32 [ 1147.668481][ T5838] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 1147.799348][ T5838] usb 1-1: config 0 has no interface number 0 [ 1147.839392][ T5838] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1147.981677][ T5838] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1147.991498][ T5838] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1148.014176][ T5838] usb 1-1: Product: syz [ 1148.018796][ T5838] usb 1-1: Manufacturer: syz [ 1148.031328][ T5838] usb 1-1: SerialNumber: syz [ 1148.061131][ T5838] usb 1-1: config 0 descriptor?? [ 1148.091620][T22668] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1148.304674][T22691] syzkaller0: entered promiscuous mode [ 1148.308433][T22668] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1148.310215][T22691] syzkaller0: entered allmulticast mode [ 1148.544688][ T5838] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1148.587136][ T5838] asix: probe of 1-1:0.188 failed with error -32 [ 1148.684172][ T23] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1148.874145][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 1149.139210][ T23] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1149.164732][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1149.173943][ T23] usb 5-1: Product: syz [ 1149.182970][ T23] usb 5-1: Manufacturer: syz [ 1149.192101][ T23] usb 5-1: SerialNumber: syz [ 1149.206768][ T23] usb 5-1: config 0 descriptor?? [ 1150.654680][ T23] airspy 5-1:0.0: usb_control_msg() failed -110 request 0a [ 1150.661969][ T23] airspy 5-1:0.0: Could not detect board [ 1150.755754][ T5838] usb 1-1: USB disconnect, device number 34 [ 1150.761373][ T23] airspy: probe of 5-1:0.0 failed with error -110 [ 1151.192573][ T5838] usb 5-1: USB disconnect, device number 34 [ 1151.478042][T22719] syzkaller0: entered promiscuous mode [ 1151.483731][T22719] syzkaller0: entered allmulticast mode [ 1153.724186][ T5809] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1153.844267][ T5838] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1153.984193][ T5809] usb 4-1: Using ep0 maxpacket: 32 [ 1154.022424][ T5809] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 1154.044416][ T5809] usb 4-1: config 0 has no interface number 0 [ 1154.051459][ T5838] usb 3-1: Using ep0 maxpacket: 32 [ 1154.058960][ T5809] usb 4-1: config 0 interface 12 has no altsetting 0 [ 1154.070237][ T5838] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 1154.081236][ T5838] usb 3-1: config 0 has no interface number 0 [ 1154.087661][ T5809] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1154.098108][ T5838] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1154.108307][ T5809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1154.116544][ T5809] usb 4-1: Product: syz [ 1154.121009][ T5809] usb 4-1: Manufacturer: syz [ 1154.126340][ T5809] usb 4-1: SerialNumber: syz [ 1154.132489][ T5838] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1154.143147][ T5838] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1154.151602][ T5838] usb 3-1: Product: syz [ 1154.157643][ T5809] usb 4-1: config 0 descriptor?? [ 1154.163409][ T5838] usb 3-1: Manufacturer: syz [ 1154.169766][ T5838] usb 3-1: SerialNumber: syz [ 1154.187906][ T5838] usb 3-1: config 0 descriptor?? [ 1154.196506][T22743] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1154.838140][T22743] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1155.033631][ T5809] f81534 4-1:0.12: f81534_set_register: reg: 1003 data: 28 failed: -71 [ 1155.055324][ T5838] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1155.105178][ T5809] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 1155.112536][ T5809] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1155.128763][ T5838] asix: probe of 3-1:0.188 failed with error -32 [ 1155.139053][ T5809] f81534: probe of 4-1:0.12 failed with error -71 [ 1155.166255][ T5809] usb 4-1: USB disconnect, device number 4 [ 1155.776470][T19508] Bluetooth: hci4: command 0x0c1a tx timeout [ 1156.105259][T19508] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1156.276041][T22778] sg_write: data in/out 414684/82 bytes for SCSI command 0x0-- guessing data in; [ 1156.276041][T22778] program syz.4.5513 not setting count and/or reply_len properly [ 1157.402904][ T5838] usb 3-1: USB disconnect, device number 24 [ 1158.675212][T22806] sg_write: data in/out 414684/82 bytes for SCSI command 0x0-- guessing data in; [ 1158.675212][T22806] program syz.4.5524 not setting count and/or reply_len properly [ 1159.123495][T22815] netlink: 'syz.2.5527': attribute type 1 has an invalid length. [ 1159.277302][T22818] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1159.306225][T22818] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 1159.370424][T22815] bond4: (slave gretap1): making interface the new active one [ 1159.411312][T22815] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 1161.369159][T22842] tipc: Enabled bearer , priority 0 [ 1161.388448][T22842] tipc: Resetting bearer [ 1161.500411][T22841] tipc: Disabling bearer [ 1162.155107][ C1] ------------[ cut here ]------------ [ 1162.161323][ C1] ODEBUG: free active (active state 0) object: ffff88801e275490 object type: timer_list hint: rose_t0timer_expiry+0x0/0x350 [ 1162.174962][ C1] WARNING: CPU: 1 PID: 0 at lib/debugobjects.c:518 debug_check_no_obj_freed+0x446/0x540 [ 1162.184822][ C1] Modules linked in: [ 1162.188772][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 1162.195857][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1162.205984][ C1] RIP: 0010:debug_check_no_obj_freed+0x446/0x540 [ 1162.212451][ C1] Code: 4c 8b 4d 00 48 c7 c7 60 8f 1c 8b 48 c7 c6 c0 8b 1c 8b 48 c7 c2 e0 90 1c 8b 8b 0c 24 4d 89 f8 41 55 e8 5e fe 1f fd 48 83 c4 08 <0f> 0b 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc ff df ff 05 73 4b 5a [ 1162.232137][ C1] RSP: 0018:ffffc900001f0a50 EFLAGS: 00010296 [ 1162.238281][ C1] RAX: ba6416f02c895100 RBX: ffffffff9757c690 RCX: ffff88801c243c00 [ 1162.246296][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 1162.254290][ C1] RBP: ffffffff8accab80 R08: ffffc900001f0647 R09: 1ffff9200003e0c8 [ 1162.262268][ C1] R10: dffffc0000000000 R11: fffff5200003e0c9 R12: ffff88801e275600 [ 1162.270246][ C1] R13: ffffffff8979eb80 R14: ffff88801e275000 R15: ffff88801e275490 [ 1162.278219][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1162.287169][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1162.293761][ C1] CR2: 00007ff46b9b2ff0 CR3: 0000000069851000 CR4: 00000000003506e0 [ 1162.301840][ C1] DR0: 0000000000000000 DR1: 00000000000000ac DR2: 0000000000000000 [ 1162.309836][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1162.317827][ C1] Call Trace: [ 1162.321200][ C1] [ 1162.324046][ C1] slab_free_freelist_hook+0xd2/0x1a0 [ 1162.329583][ C1] ? rose_timer_expiry+0x4c6/0x5f0 [ 1162.334710][ C1] __kmem_cache_free+0xba/0x1e0 [ 1162.339557][ C1] rose_timer_expiry+0x4c6/0x5f0 [ 1162.344503][ C1] ? call_timer_fn+0x171/0x540 [ 1162.349290][ C1] call_timer_fn+0x189/0x540 [ 1162.353869][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 1162.358907][ C1] ? call_timer_fn+0xd2/0x540 [ 1162.363579][ C1] ? __run_timers+0x800/0x800 [ 1162.368264][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1162.373635][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1162.378911][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 1162.383934][ C1] __run_timers+0x542/0x800 [ 1162.388454][ C1] ? detach_timer+0x2b0/0x2b0 [ 1162.393142][ C1] ? lock_chain_count+0x20/0x20 [ 1162.398011][ C1] run_timer_softirq+0x67/0xf0 [ 1162.402771][ C1] handle_softirqs+0x280/0x820 [ 1162.407577][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 1162.412334][ C1] ? do_softirq+0x1a0/0x1a0 [ 1162.416861][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 1162.422059][ C1] __irq_exit_rcu+0xd3/0x190 [ 1162.426654][ C1] ? irq_exit_rcu+0x20/0x20 [ 1162.431180][ C1] irq_exit_rcu+0x9/0x20 [ 1162.435460][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1162.441116][ C1] [ 1162.444143][ C1] [ 1162.447069][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1162.453144][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 1162.458789][ C1] Code: 40 22 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d c3 29 43 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2e 41 89 de 80 [ 1162.478416][ C1] RSP: 0018:ffffc90000187de0 EFLAGS: 000002c6 [ 1162.484492][ C1] RAX: ba6416f02c895100 RBX: ffffffff8162ac40 RCX: ba6416f02c895100 [ 1162.492466][ C1] RDX: 0000000000000001 RSI: ffffffff8acac960 RDI: ffffffff8b1c85a0 [ 1162.500470][ C1] RBP: ffffc90000187f20 R08: ffff8880b8f36b2b R09: 1ffff110171e6d65 [ 1162.508470][ C1] R10: dffffc0000000000 R11: ffffed10171e6d66 R12: 1ffff11003848780 [ 1162.516459][ C1] R13: 1ffff92000030fc8 R14: 0000000000000001 R15: dffffc0000000000 [ 1162.524649][ C1] ? do_idle+0x1f0/0x4e0 [ 1162.528895][ C1] default_idle+0x13/0x20 [ 1162.533224][ C1] default_idle_call+0x6c/0xa0 [ 1162.537999][ C1] do_idle+0x1f0/0x4e0 [ 1162.542089][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 1162.547313][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1162.552531][ C1] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1162.558829][ C1] cpu_startup_entry+0x43/0x60 [ 1162.563610][ C1] start_secondary+0xee/0xf0 [ 1162.568253][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 1162.574387][ C1] [ 1162.577395][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1162.584657][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 1162.591661][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1162.601711][ C1] Call Trace: [ 1162.605173][ C1] [ 1162.608020][ C1] dump_stack_lvl+0x18c/0x250 [ 1162.612755][ C1] ? show_regs_print_info+0x20/0x20 [ 1162.617953][ C1] ? load_image+0x400/0x400 [ 1162.622486][ C1] panic+0x2dc/0x730 [ 1162.626374][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 1162.630866][ C1] ? secondary_startup_64_no_verify+0x179/0x17b [ 1162.637199][ C1] __warn+0x2e0/0x470 [ 1162.641173][ C1] ? debug_check_no_obj_freed+0x446/0x540 [ 1162.646910][ C1] ? debug_check_no_obj_freed+0x446/0x540 [ 1162.652620][ C1] report_bug+0x2be/0x4f0 [ 1162.656967][ C1] ? debug_check_no_obj_freed+0x446/0x540 [ 1162.662677][ C1] ? debug_check_no_obj_freed+0x446/0x540 [ 1162.668386][ C1] ? debug_check_no_obj_freed+0x448/0x540 [ 1162.674109][ C1] handle_bug+0xcf/0x120 [ 1162.678359][ C1] exc_invalid_op+0x1a/0x50 [ 1162.682859][ C1] asm_exc_invalid_op+0x1a/0x20 [ 1162.687730][ C1] RIP: 0010:debug_check_no_obj_freed+0x446/0x540 [ 1162.694087][ C1] Code: 4c 8b 4d 00 48 c7 c7 60 8f 1c 8b 48 c7 c6 c0 8b 1c 8b 48 c7 c2 e0 90 1c 8b 8b 0c 24 4d 89 f8 41 55 e8 5e fe 1f fd 48 83 c4 08 <0f> 0b 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc ff df ff 05 73 4b 5a [ 1162.713706][ C1] RSP: 0018:ffffc900001f0a50 EFLAGS: 00010296 [ 1162.719771][ C1] RAX: ba6416f02c895100 RBX: ffffffff9757c690 RCX: ffff88801c243c00 [ 1162.727761][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 1162.735749][ C1] RBP: ffffffff8accab80 R08: ffffc900001f0647 R09: 1ffff9200003e0c8 [ 1162.743718][ C1] R10: dffffc0000000000 R11: fffff5200003e0c9 R12: ffff88801e275600 [ 1162.751680][ C1] R13: ffffffff8979eb80 R14: ffff88801e275000 R15: ffff88801e275490 [ 1162.759655][ C1] ? rose_transmit_link+0x740/0x740 [ 1162.764882][ C1] slab_free_freelist_hook+0xd2/0x1a0 [ 1162.770250][ C1] ? rose_timer_expiry+0x4c6/0x5f0 [ 1162.775352][ C1] __kmem_cache_free+0xba/0x1e0 [ 1162.780191][ C1] rose_timer_expiry+0x4c6/0x5f0 [ 1162.785115][ C1] ? call_timer_fn+0x171/0x540 [ 1162.789881][ C1] call_timer_fn+0x189/0x540 [ 1162.794478][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 1162.799499][ C1] ? call_timer_fn+0xd2/0x540 [ 1162.804181][ C1] ? __run_timers+0x800/0x800 [ 1162.808861][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1162.814070][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1162.819366][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 1162.824425][ C1] __run_timers+0x542/0x800 [ 1162.828930][ C1] ? detach_timer+0x2b0/0x2b0 [ 1162.833594][ C1] ? lock_chain_count+0x20/0x20 [ 1162.838460][ C1] run_timer_softirq+0x67/0xf0 [ 1162.843209][ C1] handle_softirqs+0x280/0x820 [ 1162.847959][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 1162.852708][ C1] ? do_softirq+0x1a0/0x1a0 [ 1162.857197][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 1162.862382][ C1] __irq_exit_rcu+0xd3/0x190 [ 1162.866955][ C1] ? irq_exit_rcu+0x20/0x20 [ 1162.871443][ C1] irq_exit_rcu+0x9/0x20 [ 1162.875668][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1162.881291][ C1] [ 1162.884250][ C1] [ 1162.887166][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1162.893136][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 1162.898751][ C1] Code: 40 22 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d c3 29 43 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2e 41 89 de 80 [ 1162.918348][ C1] RSP: 0018:ffffc90000187de0 EFLAGS: 000002c6 [ 1162.924401][ C1] RAX: ba6416f02c895100 RBX: ffffffff8162ac40 RCX: ba6416f02c895100 [ 1162.932371][ C1] RDX: 0000000000000001 RSI: ffffffff8acac960 RDI: ffffffff8b1c85a0 [ 1162.940372][ C1] RBP: ffffc90000187f20 R08: ffff8880b8f36b2b R09: 1ffff110171e6d65 [ 1162.948422][ C1] R10: dffffc0000000000 R11: ffffed10171e6d66 R12: 1ffff11003848780 [ 1162.956380][ C1] R13: 1ffff92000030fc8 R14: 0000000000000001 R15: dffffc0000000000 [ 1162.964369][ C1] ? do_idle+0x1f0/0x4e0 [ 1162.968608][ C1] default_idle+0x13/0x20 [ 1162.972924][ C1] default_idle_call+0x6c/0xa0 [ 1162.977676][ C1] do_idle+0x1f0/0x4e0 [ 1162.981753][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 1162.986950][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 1162.992147][ C1] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1162.998298][ C1] cpu_startup_entry+0x43/0x60 [ 1163.003052][ C1] start_secondary+0xee/0xf0 [ 1163.007633][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 1163.013695][ C1] [ 1163.017091][ C1] Kernel Offset: disabled [ 1163.021509][ C1] Rebooting in 86400 seconds..