last executing test programs: 18m41.655950616s ago: executing program 3 (id=211): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0x9, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280), 0x0) syz_emit_ethernet(0x4e, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x20}}, 0x0) setitimer(0x1, &(0x7f0000000040)={{0x100, 0x5}, {0xb, 0x4}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) setitimer(0x1, &(0x7f0000000000)={{0x77359400}}, 0x0) 18m41.366927233s ago: executing program 3 (id=214): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x40, 0x6, 0x3, 0x8, 0x6, 0xffffff26, 0x2, 0x80, 0x8, 0x7, 0x15, 0x9d, 0x4, 0x5, 0x7, 0xc5f7}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r11, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xc, r4, 0x3a}, 0x80, &(0x7f0000000540)=[{0x0}], 0x1}, 0x400d5) 18m40.182911114s ago: executing program 3 (id=218): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20008080}, 0x20000001) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r4, 0x6, 0x0) fcntl$lock(r4, 0x26, 0x0) fcntl$lock(r4, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) fcntl$lock(r4, 0x26, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) geteuid() unlinkat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x200) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000940)={@fallback=r2, 0x12, 0x1, 0x214, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000880), &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000900), 0x0}, 0x40) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000009c0), 0x4) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000a00)={0x0, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000c00)={@fallback=r0, 0xffffffffffffffff, 0x30, 0x26, 0xffffffffffffffff, @void, @void, @void, @value, r5}, 0x20) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000180)=r6, 0x4) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xffffffffffffffff}}, './file0\x00'}) write$P9_RGETATTR(0xffffffffffffffff, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x381580, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f0000000340)={0x0, 0x24, 0x1, 0x8002, '\x00', '\x00', '\x00', 0x4, 0xfffffffe, 0x100, 0x1, "abd206a1ebd7cedfd17ebd65400ed41b"}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@updpolicy={0x238, 0x19, 0x1, 0x0, 0x3, {{@in=@remote, @in=@dev={0xac, 0x14, 0x14, 0x1e}, 0xffff, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x29, 0x0, 0xffffffffffffffff}, {0xff, 0x9, 0x0, 0x0, 0x0, 0x0, 0xd5}, {}, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x184, 0x5, [{{@in=@multicast2, 0x4d2, 0x33}, 0xa, @in6=@local, 0x0, 0x1, 0x0, 0x3b, 0x2, 0x5, 0x7}, {{@in6=@local, 0x4d6, 0x3c}, 0xa, @in6=@local, 0x34ff, 0x2, 0x0, 0x7, 0x7c, 0x0, 0x4}, {{@in=@multicast1, 0x4d5, 0x6c}, 0x2, @in=@broadcast, 0x3507, 0x4, 0x3, 0x3, 0x4, 0x2, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x4d3, 0x3c}, 0x2, @in6=@local, 0x0, 0x0, 0x0, 0x2, 0xfffffffa, 0x401, 0x81}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d5, 0x33}, 0x2, @in=@private=0xa010100, 0x3502, 0x5, 0x0, 0xd1, 0xe, 0x47b, 0x3}, {{@in=@broadcast, 0x4d4, 0x33}, 0x2, @in=@broadcast, 0x3502, 0x3, 0x0, 0x6, 0x5, 0x4, 0x7f}]}]}, 0x238}}, 0x4000) 18m40.041781447s ago: executing program 3 (id=219): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x803}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffff9]}, 0x0, 0x8) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000000140)=0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) 18m39.072044822s ago: executing program 3 (id=224): userfaultfd(0x80001) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f0000000140)='securityfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r0, r1, r2, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) writev(r6, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, 0x0, 0x0) 18m38.086867997s ago: executing program 3 (id=229): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = socket(0x2, 0x80805, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'lc\x00', 0x0, 0xd, 0x5e}, 0x2c) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@mcast2, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}}}, &(0x7f00000004c0)=0xe8) setreuid(r3, r4) socket(0x2, 0x805, 0x0) syz_open_dev$vbi(&(0x7f00000001c0), 0x0, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@decl_tag={0x2, 0x0, 0x0, 0x11, 0x2, 0x8}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x2c}, 0x28) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x40, 0x14, 0x1, 0x4, 0x0, {0xa}, [@typed={0x4}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x14, 0x2, 0x0, 0x1, [@generic="bf74a7dffdd8f8331b9dd3f2f9834b7f"]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000804}, 0x8018) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0100001000130700000000fcdbdf250000000000000000000000000000000020010000000000000021000000000000000080024e2100020a0000001d00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000000000000fe320000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff090000000000000001000000000000000900000000000000000000000000000043050000200000000400000000000000ffffffffffffff7f000000000000000000000000000000000300000001000000000000002cbd7000003500000200040050000000000000004c001200726663343130362867636d28616573292900"/214], 0x13c}, 0x1, 0x0, 0x0, 0x10810}, 0x48080) r7 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, r7, r7, r7, 0x1) add_key(0x0, 0x0, 0x0, 0xffffffffffffffa6, r7) 18m23.007992951s ago: executing program 32 (id=229): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = socket(0x2, 0x80805, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'lc\x00', 0x0, 0xd, 0x5e}, 0x2c) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0x0) getresuid(&(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@mcast2, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private0}}}, &(0x7f00000004c0)=0xe8) setreuid(r3, r4) socket(0x2, 0x805, 0x0) syz_open_dev$vbi(&(0x7f00000001c0), 0x0, 0x2) syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@decl_tag={0x2, 0x0, 0x0, 0x11, 0x2, 0x8}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x2c}, 0x28) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x40, 0x14, 0x1, 0x4, 0x0, {0xa}, [@typed={0x4}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x14, 0x2, 0x0, 0x1, [@generic="bf74a7dffdd8f8331b9dd3f2f9834b7f"]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000804}, 0x8018) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0100001000130700000000fcdbdf250000000000000000000000000000000020010000000000000021000000000000000080024e2100020a0000001d00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc010000000000000000000000000000000000fe320000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff090000000000000001000000000000000900000000000000000000000000000043050000200000000400000000000000ffffffffffffff7f000000000000000000000000000000000300000001000000000000002cbd7000003500000200040050000000000000004c001200726663343130362867636d28616573292900"/214], 0x13c}, 0x1, 0x0, 0x0, 0x10810}, 0x48080) r7 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, r7, r7, r7, 0x1) add_key(0x0, 0x0, 0x0, 0xffffffffffffffa6, r7) 10.912743094s ago: executing program 0 (id=3096): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$unix(r0, 0x0, 0xc800) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() ioctl$USBDEVFS_GETDRIVER(0xffffffffffffffff, 0x41045508, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000600)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r4, 0x84, 0xa, 0x0, &(0x7f0000001080)) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) write(r5, &(0x7f0000000500)=' 294967 95 2\\000 0000 0\n', 0x18) 8.474493756s ago: executing program 1 (id=3104): bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0x6}, 0x1c) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) socket(0x80000000000000a, 0x2, 0x0) socket(0x80000000000000a, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) flock(0xffffffffffffffff, 0x2) r4 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r4, 0x1) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 8.473794016s ago: executing program 0 (id=3105): r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x0, 0x2, 0x4, 0x3}]}) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000140)={0x18, 0x2, {0x0, @local}}, 0x1e) close(r2) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x86022, &(0x7f0000000040)=ANY=[@ANYBLOB='nr_inodes=5,nr_blhcks']) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0xec}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) setns(0xc9, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002800090026bd7000ffd3df2501000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000811}, 0x480f0) mount(0x0, 0x0, 0x0, 0x44021, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES16], 0x48) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB='nat\x00'/30], 0x44) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000500)={'nat\x00', 0x0, 0x4, 0x97, [0x0, 0x7, 0x2, 0x0, 0x6, 0x5], 0x0, &(0x7f00000002c0), &(0x7f0000000400)=""/151}, &(0x7f0000000580)=0x50) tkill(0x0, 0x18) 8.027863427s ago: executing program 4 (id=3106): openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, 0x0) r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/251}], 0x59) 7.061549931s ago: executing program 0 (id=3108): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0xf0}, 0x1, 0x0, 0x0, 0x10}, 0x0) 6.858525237s ago: executing program 4 (id=3110): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) brk(0x200000ff7fff) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r3, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0xb}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20040000) brk(0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0) pipe2(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000180)={'pcl812\x00', [0x100, 0xf, 0xcd, 0x2, 0x0, 0x100, 0x0, 0x20000000, 0x8, 0xb, 0x0, 0xb51, 0x1, 0x401, 0x3, 0x1, 0x5, 0x3, 0x60000000, 0x401, 0x6, 0x2, 0x7, 0x9, 0x48, 0x9, 0x6, 0x6a77, 0x5, 0x7fffffff, 0xa]}) request_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)='(^\xbb-\x00', 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value={0x0, 0x2}, 0x8) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x74, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}, @IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x74}, 0x1, 0x0, 0x0, 0x840}, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @host}, 0x10) 6.783095788s ago: executing program 0 (id=3112): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file4\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="6d6f64653d6c667304006f757365725f78617474722c646973636172642c6661756c745f696e6a656374696f6e3d30303030303030303030303030303034313136302c6661756c745f747970653d30303030303030303030303030303030303030362c6e6f657874656e745f63616368652c696e6c696e655f646174612c319b7374626f6f742c6673796e635f060000003d7374726963742c6f6f67635f6d657267652c00"], 0x21, 0x5548, &(0x7f00000058c0)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r4 = io_uring_setup(0x136a, &(0x7f0000000080)={0x0, 0x1f8a, 0x2, 0x3, 0x28c}) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101700) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000080)) openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x400000000a0a01, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r6, 0x4112, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) 6.097039676s ago: executing program 1 (id=3114): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) 5.686788746s ago: executing program 1 (id=3115): socket(0x40000000015, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000003f80)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000041000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010400000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$pppl2tp(0x18, 0x1, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x0, 0x800) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) 4.288286812s ago: executing program 2 (id=3117): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a68000000060a0b040000000000000000020000003c000480380001800b00010064796e7365740000280002800800044000000003080003400000000108000940100000000900010073797a31000000000900010073797a30000000000900020073797a32"], 0x90}}, 0x10) 4.167058534s ago: executing program 1 (id=3118): openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x5}) r0 = mq_open(0x0, 0x42, 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/251}], 0x59) 4.119706686s ago: executing program 2 (id=3119): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000140)={[{@enospc_debug}, {@nodatacow}, {@enospc_debug}, {@nossd}, {@nodatasum}, {@notreelog}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x33, 0x70, 0x34, 0x70, 0x36]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000140)='./bus\x00', 0x300000a, &(0x7f0000000080)={[{@nodatacow}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@nodiscard}, {@nodiscard}, {@compress_force}, {@acl}, {@nobarrier}, {@thread_pool={'thread_pool', 0x3d, 0x8}}, {@nodiscard}, {@enospc_debug}, {@ssd_spread}, {@nodatacow}]}, 0x23, 0x55a3, &(0x7f000000e0c0)="$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") syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x19a) creat(&(0x7f00000001c0)='./file1\x00', 0x104) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x68346000) ioctl$FITRIM(r0, 0xc4009420, &(0x7f0000000180)={0x5}) 3.916551021s ago: executing program 1 (id=3120): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000070000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x10}, 0x0) 3.686259587s ago: executing program 4 (id=3121): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)}], 0x3}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0x3, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r3 = syz_open_dev$dri(&(0x7f00000003c0), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r4], &(0x7f0000000140), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 3.661574148s ago: executing program 1 (id=3122): bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0x6}, 0x1c) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) socket(0x80000000000000a, 0x2, 0x0) socket(0x80000000000000a, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) flock(0xffffffffffffffff, 0x2) r4 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r4, 0x1) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 3.146191151s ago: executing program 0 (id=3123): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) 2.271994983s ago: executing program 0 (id=3124): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) unshare(0x20000400) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x7e6b, 0x0, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x800, 0x0, 0x0, 0x0, 0x6a9}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 2.095356527s ago: executing program 4 (id=3125): r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{0x0, 0x2, 0x4, 0x3}]}) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000140)={0x18, 0x2, {0x0, @local}}, 0x1e) close(r2) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x86022, &(0x7f0000000040)=ANY=[@ANYBLOB='nr_inodes=5,nr_blhcks']) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0xec}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) setns(0xc9, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002800090026bd7000ffd3df2501000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000811}, 0x480f0) mount(0x0, 0x0, 0x0, 0x44021, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES16], 0x48) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB='nat\x00'/30], 0x44) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140)=0x0) tkill(r5, 0x18) 1.107497052s ago: executing program 4 (id=3126): socket(0x40000000015, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000003f80)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000041000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010400000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$pppl2tp(0x18, 0x1, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x0, 0x800) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) 859.124768ms ago: executing program 2 (id=3127): socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r1, r1, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)={@cgroup=r0, r1, 0x2f, 0x18, 0x4}, 0x20) 820.39103ms ago: executing program 2 (id=3128): openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f0000000040)={0x9, 0x2, 0x1000, 0x5}) r0 = mq_open(0x0, 0x42, 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/251}], 0x59) 586.713085ms ago: executing program 2 (id=3129): syz_emit_ethernet(0x4e, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@mp_join={0x1e, 0x3, 0x4}]}}}}}}}}, 0x0) 378.84043ms ago: executing program 2 (id=3130): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) brk(0x200000ff7fff) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r3, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0xb}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20040000) brk(0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x80400, 0x0) pipe2(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000180)={'pcl812\x00', [0x100, 0xf, 0xcd, 0x2, 0x0, 0x100, 0x0, 0x20000000, 0x8, 0xb, 0x0, 0xb51, 0x1, 0x401, 0x3, 0x1, 0x5, 0x3, 0x60000000, 0x401, 0x6, 0x2, 0x7, 0x9, 0x48, 0x9, 0x6, 0x6a77, 0x5, 0x7fffffff, 0xa]}) request_key(&(0x7f0000000080)='id_resolver\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)='(^\xbb-\x00', 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value={0x0, 0x2}, 0x8) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x74, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}, @IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x74}, 0x1, 0x0, 0x0, 0x840}, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @host}, 0x10) 0s ago: executing program 4 (id=3131): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800"], 0x48) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = gettid() getpriority(0x2, r1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000544000/0x3000)=nil, 0x3000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a32000000000500040000000000140007800800124000000000050015002200000005000500020000000500010006"], 0x64}}, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) kernel console output (not intermixed with test programs): f length 0, skipping remainder of the config [ 798.508793][T11430] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x1E, skipping [ 798.541865][T11430] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 798.594759][T11430] usb 3-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 798.624794][T11430] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 798.690659][T12777] binder: 12775:12777 ioctl c0306201 200000000080 returned -14 [ 798.701220][T12777] binder: 12775:12777 ioctl c0306201 2000000003c0 returned -14 [ 798.871763][T11430] usb 3-1: Product: syz [ 798.876727][T11430] usb 3-1: Manufacturer: syz [ 798.898072][T11430] sisusb 3-1:1.0: Invalid USB2VGA device [ 798.903914][T11430] sisusb: probe of 3-1:1.0 failed with error -22 [ 799.542252][T11436] usb 3-1: USB disconnect, device number 40 [ 800.417316][T12796] ISOFS: Unable to identify CD-ROM format. [ 802.046280][T12006] Bluetooth: hci0: unexpected event for opcode 0x2042 [ 803.020385][ T8] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 803.181746][ T8] usb 3-1: device descriptor read/64, error -71 [ 803.298480][T12826] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 803.362006][ T2990] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.474669][ T2990] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.493535][ T8] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 803.604325][ T2990] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.665164][ T8] usb 3-1: device descriptor read/64, error -71 [ 803.722756][ T2990] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.797755][ T8] usb usb3-port1: attempt power cycle [ 803.832171][ T28] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 803.905657][ T2990] netdevsim netdevsim4 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.951588][ T2990] netdevsim netdevsim4 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.992072][ T2990] netdevsim netdevsim4 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.028206][ T2990] netdevsim netdevsim4 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.051487][ T28] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 804.096847][ T28] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 804.109299][ T2990] tipc: Left network mode [ 804.130949][ T28] usb 1-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 804.167135][ T28] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.182012][ T28] usb 1-1: config 0 descriptor?? [ 804.230453][ T8] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 804.284661][ T8] usb 3-1: device descriptor read/8, error -71 [ 804.569042][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 804.570746][ T8] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 804.591642][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 804.774067][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 804.788375][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 804.799988][ C1] raw-gadget.1 gadget.0: ignoring, device is not running [ 804.822083][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 804.833516][ C1] raw-gadget.1 gadget.0: ignoring, device is not running [ 804.842357][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 804.868833][ T28] usbhid 1-1:0.0: can't add hid device: -71 [ 805.121414][ T28] usbhid: probe of 1-1:0.0 failed with error -71 [ 805.424607][ T28] usb 1-1: USB disconnect, device number 21 [ 805.517042][ T8] usb 3-1: device descriptor read/8, error -71 [ 805.660647][ T8] usb usb3-port1: unable to enumerate USB device [ 806.837871][T12882] x_tables: duplicate underflow at hook 1 [ 806.845683][T12882] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 806.854072][T12882] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 806.864601][T12882] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 806.872861][T12882] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 806.991012][ T51] Bluetooth: hci2: command tx timeout [ 807.222107][T12843] chnl_net:caif_netlink_parms(): no params data found [ 808.147954][ T2990] hsr_slave_0: left promiscuous mode [ 808.175027][ T2990] hsr_slave_1: left promiscuous mode [ 808.199120][ T2990] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 808.222655][ T2990] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 808.235518][ T2990] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 808.250940][ T51] Bluetooth: Wrong link type (-22) [ 808.253701][ T2990] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 808.284103][ T2990] bridge_slave_1: left allmulticast mode [ 808.298708][ T2990] bridge_slave_1: left promiscuous mode [ 808.310169][ T2990] bridge0: port 2(bridge_slave_1) entered disabled state [ 808.339696][ T2990] bridge_slave_0: left allmulticast mode [ 808.348700][ T2990] bridge_slave_0: left promiscuous mode [ 808.361679][ T2990] bridge0: port 1(bridge_slave_0) entered disabled state [ 808.960064][T12910] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 810.024995][ T51] Bluetooth: hci2: command tx timeout [ 810.034647][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 810.055181][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.098185][ T2990] veth1_macvtap: left promiscuous mode [ 810.121912][ T2990] veth0_macvtap: left promiscuous mode [ 810.140807][ T2990] veth1_vlan: left promiscuous mode [ 810.146213][ T2990] veth0_vlan: left promiscuous mode [ 810.310679][T11430] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 810.581545][T11430] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 810.612228][T11430] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 810.641130][T11430] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 810.671367][T11430] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.703562][T11430] usb 3-1: config 0 descriptor?? [ 811.147767][T11430] usbhid 3-1:0.0: can't add hid device: -71 [ 811.182572][T11430] usbhid: probe of 3-1:0.0 failed with error -71 [ 811.200325][T11430] usb 3-1: USB disconnect, device number 45 [ 811.500145][ T2990] team0 (unregistering): Port device team_slave_1 removed [ 811.555051][ T2990] team0 (unregistering): Port device team_slave_0 removed [ 811.604870][ T2990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 811.661860][ T2990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 812.100451][ T51] Bluetooth: hci2: command tx timeout [ 812.192660][ T2990] bond0 (unregistering): Released all slaves [ 812.554270][T12843] bridge0: port 1(bridge_slave_0) entered blocking state [ 812.561807][T12843] bridge0: port 1(bridge_slave_0) entered disabled state [ 812.569095][T12843] bridge_slave_0: entered allmulticast mode [ 812.577196][T12843] bridge_slave_0: entered promiscuous mode [ 812.604198][T12843] bridge0: port 2(bridge_slave_1) entered blocking state [ 812.617520][T12843] bridge0: port 2(bridge_slave_1) entered disabled state [ 812.641593][T12843] bridge_slave_1: entered allmulticast mode [ 812.649173][T12843] bridge_slave_1: entered promiscuous mode [ 812.759122][T12843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 812.806663][T12934] x_tables: duplicate underflow at hook 1 [ 812.818425][T12934] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 812.826383][T12934] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 812.835035][T12934] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 812.842985][T12934] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 812.856249][T12843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 812.952764][T12843] team0: Port device team_slave_0 added [ 812.964588][T12843] team0: Port device team_slave_1 added [ 813.013607][T12843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 813.051066][T12843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 813.090022][T12843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 813.137902][T12843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 813.159301][T12843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 813.725899][T12943] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 814.805286][ T51] Bluetooth: hci2: command tx timeout [ 814.946621][T12843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 814.970122][ T5836] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 815.270387][ T5836] usb 1-1: Using ep0 maxpacket: 8 [ 815.279627][ T5836] usb 1-1: unable to get BOS descriptor or descriptor too short [ 815.296782][ T5836] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 815.325570][ T5836] usb 1-1: config 1 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 815.349809][T12843] hsr_slave_0: entered promiscuous mode [ 815.378830][T12843] hsr_slave_1: entered promiscuous mode [ 815.389989][ T5836] usb 1-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 815.415954][T12843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 815.427246][ T5836] usb 1-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 815.443323][T12843] Cannot create hsr debugfs directory [ 815.480911][ T5836] usb 1-1: config 1 interface 0 has no altsetting 0 [ 815.488411][ T2990] IPVS: stop unused estimator thread 0... [ 815.508116][ T5836] usb 1-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.40 [ 815.535990][ T5836] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.547667][ T5836] usb 1-1: Product: syz [ 815.569390][ T5836] usb 1-1: Manufacturer: syz [ 815.583748][ T5836] usb 1-1: SerialNumber: syz [ 815.861766][ T5836] usbhid 1-1:1.0: can't add hid device: -71 [ 816.627361][ T5836] usbhid: probe of 1-1:1.0 failed with error -71 [ 816.671827][ T5836] usb 1-1: USB disconnect, device number 22 [ 816.789453][T12843] netdevsim netdevsim4 eth8 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 816.898752][T12843] netdevsim netdevsim4 eth7 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.185921][ T28] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 817.400801][T12843] netdevsim netdevsim4 eth6 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.475642][ T28] usb 2-1: Using ep0 maxpacket: 16 [ 817.577035][ T28] usb 2-1: config 0 has an invalid interface number: 112 but max is 0 [ 817.767865][ T28] usb 2-1: config 0 has no interface number 0 [ 817.947651][ T28] usb 2-1: config 0 interface 112 has no altsetting 0 [ 818.113816][ T28] usb 2-1: New USB device found, idVendor=0421, idProduct=010e, bcdDevice=2c.50 [ 818.130864][ T28] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.139204][ T28] usb 2-1: Product: syz [ 818.144049][ T28] usb 2-1: Manufacturer: syz [ 818.148896][ T28] usb 2-1: SerialNumber: syz [ 818.164379][ T28] usb 2-1: config 0 descriptor?? [ 818.250426][T11442] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 818.276983][T12843] netdevsim netdevsim4 eth5 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 818.390599][ T28] usb 2-1: bad CDC descriptors [ 818.422107][ T28] usb 2-1: bad CDC descriptors [ 818.447261][ T28] usb 2-1: USB disconnect, device number 41 [ 818.476969][T11442] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 818.542324][T11442] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 818.574170][T11442] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 818.611974][T11442] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.633733][T11442] usb 3-1: config 0 descriptor?? [ 818.933408][T12843] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 819.011018][T12843] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 819.063840][T12843] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 819.121887][T12843] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 819.432661][T11442] usbhid 3-1:0.0: can't add hid device: -71 [ 820.331648][T11442] usbhid: probe of 3-1:0.0 failed with error -71 [ 820.401951][T12991] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 820.441106][T11442] usb 3-1: USB disconnect, device number 46 [ 820.678213][T12843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 820.744375][T12843] 8021q: adding VLAN 0 to HW filter on device team0 [ 820.773511][ T6256] bridge0: port 1(bridge_slave_0) entered blocking state [ 820.780766][ T6256] bridge0: port 1(bridge_slave_0) entered forwarding state [ 820.845693][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 820.852954][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 820.993484][T12843] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 822.222723][T12843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 825.160775][T13047] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 825.601140][T12843] veth0_vlan: entered promiscuous mode [ 825.648628][T12843] veth1_vlan: entered promiscuous mode [ 825.696331][T12843] veth0_macvtap: entered promiscuous mode [ 825.708212][T12843] veth1_macvtap: entered promiscuous mode [ 825.735820][T12843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 825.754103][T12843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 825.956538][T12843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 825.996483][T12843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 826.905452][T12843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 826.983219][T12843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 827.070443][T12843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 827.100350][T12843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 827.140301][T12843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 827.171900][T12843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 827.242929][T12843] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.290319][T12843] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.299099][T12843] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.344393][T12843] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 827.883852][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 827.933247][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 828.411467][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 828.480576][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 830.860640][T13098] overlayfs: overlapping lowerdir path [ 833.483950][T13112] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 838.651941][T13151] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 839.727367][T13152] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 841.170357][T11442] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 841.360435][T11442] usb 3-1: Using ep0 maxpacket: 32 [ 841.378549][T11442] usb 3-1: config 0 has an invalid interface number: 119 but max is 0 [ 841.409558][T11442] usb 3-1: config 0 has no interface number 0 [ 841.437158][T11442] usb 3-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 841.454387][T11442] usb 3-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0xE3, skipping [ 841.471058][T11442] usb 3-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 841.505636][T11442] usb 3-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 841.516872][T11442] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.583202][T11442] usb 3-1: Product: syz [ 841.646173][T11442] usb 3-1: Manufacturer: syz [ 841.711027][T11442] usb 3-1: SerialNumber: syz [ 841.851575][T11442] usb 3-1: config 0 descriptor?? [ 841.858601][T13172] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 841.940679][T11442] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.119/input/input11 [ 842.262839][ T5836] usb 3-1: USB disconnect, device number 47 [ 845.328564][T13198] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 845.365329][T13208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2076'. [ 847.097701][ T51] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 847.108712][ T51] CPU: 1 PID: 51 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 847.116126][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 847.126211][ T51] Workqueue: hci3 hci_rx_work [ 847.130915][ T51] Call Trace: [ 847.134201][ T51] [ 847.137143][ T51] dump_stack_lvl+0x18c/0x250 [ 847.141844][ T51] ? show_regs_print_info+0x20/0x20 [ 847.147053][ T51] ? load_image+0x420/0x420 [ 847.151586][ T51] sysfs_create_dir_ns+0x26e/0x2a0 [ 847.156740][ T51] ? __lock_acquire+0x7d80/0x7d80 [ 847.161814][ T51] ? sysfs_warn_dup+0xa0/0xa0 [ 847.166550][ T51] ? do_raw_spin_unlock+0x121/0x230 [ 847.171808][ T51] kobject_add_internal+0x617/0xc90 [ 847.177034][ T51] kobject_add+0x164/0x240 [ 847.181480][ T51] ? kobject_init+0x1d0/0x1d0 [ 847.186187][ T51] ? get_device_parent+0x366/0x390 [ 847.191319][ T51] device_add+0x3fa/0xc40 [ 847.195688][ T51] hci_conn_add_sysfs+0xd5/0x1e0 [ 847.200649][ T51] le_conn_complete_evt+0xe9f/0x1480 [ 847.205955][ T51] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 847.212230][ T51] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 847.217917][ T51] ? mutex_unlock+0x10/0x10 [ 847.222462][ T51] ? skb_pull_data+0xf0/0x1f0 [ 847.227182][ T51] hci_le_conn_complete_evt+0x187/0x440 [ 847.232765][ T51] ? hci_remote_host_features_evt+0x150/0x150 [ 847.238870][ T51] hci_event_packet+0x7b4/0x1280 [ 847.243845][ T51] ? __lock_acquire+0x7d80/0x7d80 [ 847.248905][ T51] ? lock_chain_count+0x20/0x20 [ 847.253785][ T51] ? bis_list+0x290/0x290 [ 847.258167][ T51] ? lockdep_hardirqs_on+0x98/0x150 [ 847.263406][ T51] ? hci_send_to_monitor+0xd7/0x4f0 [ 847.268638][ T51] hci_rx_work+0x43a/0xd60 [ 847.273092][ T51] ? process_scheduled_works+0x975/0x1600 [ 847.278842][ T51] process_scheduled_works+0xa60/0x1600 [ 847.284446][ T51] ? worker_attach_to_pool+0x370/0x370 [ 847.289942][ T51] ? assign_work+0x3cc/0x5d0 [ 847.294580][ T51] worker_thread+0xa5e/0xfe0 [ 847.299229][ T51] kthread+0x2fa/0x390 [ 847.303332][ T51] ? pr_cont_work+0x550/0x550 [ 847.308042][ T51] ? kthread_blkcg+0xd0/0xd0 [ 847.312658][ T51] ret_from_fork+0x48/0x80 [ 847.317130][ T51] ? kthread_blkcg+0xd0/0xd0 [ 847.321768][ T51] ret_from_fork_asm+0x11/0x20 [ 847.326591][ T51] [ 847.330846][ T51] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 847.345019][ T51] Bluetooth: hci3: failed to register connection device [ 848.960654][T13232] overlayfs: failed to clone lowerpath [ 855.450607][ T28] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 855.645146][ T28] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 855.669994][ T28] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.706787][ T28] usb 3-1: Product: syz [ 855.711604][ T28] usb 3-1: Manufacturer: syz [ 855.718849][ T28] usb 3-1: SerialNumber: syz [ 855.740654][ T28] usb 3-1: config 0 descriptor?? [ 855.974753][ T28] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 857.365834][ T28] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 857.378026][ T28] usb 3-1: USB disconnect, device number 48 [ 859.641963][ T51] Bluetooth: Wrong link type (-57) [ 860.610353][ T28] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 860.907683][ T28] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 860.989568][ T28] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 861.011557][ T28] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 861.044309][ T28] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.069350][ T28] usb 3-1: config 0 descriptor?? [ 861.544675][ T28] usbhid 3-1:0.0: can't add hid device: -71 [ 861.558622][ T28] usbhid: probe of 3-1:0.0 failed with error -71 [ 861.576605][ T28] usb 3-1: USB disconnect, device number 49 [ 862.640141][T13383] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2136'. [ 862.690627][T13383] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 862.918480][T13389] 9pnet_fd: Insufficient options for proto=fd [ 865.121551][ T28] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 865.378906][ T28] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 865.445792][ T28] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 865.479018][ T28] usb 5-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 865.513087][ T28] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.635645][ T28] usb 5-1: config 0 descriptor?? [ 866.270670][ T5813] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 866.376191][ T28] usbhid 5-1:0.0: can't add hid device: -71 [ 866.398150][ T28] usbhid: probe of 5-1:0.0 failed with error -71 [ 866.414194][ T28] usb 5-1: USB disconnect, device number 42 [ 866.460844][ T5813] usb 3-1: Using ep0 maxpacket: 32 [ 866.484204][ T5813] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 866.526220][ T5813] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 866.581047][ T5813] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 866.615113][ T5813] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 866.649085][ T5813] usb 3-1: Product: syz [ 866.669230][ T5813] usb 3-1: Manufacturer: syz [ 866.694489][ T5813] usb 3-1: SerialNumber: syz [ 866.759415][ T5813] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input12 [ 866.997939][ T5813] usb 3-1: USB disconnect, device number 50 [ 866.998208][ C1] appletouch 3-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 867.048916][T13424] 9pnet_fd: Insufficient options for proto=fd [ 867.098346][ T5813] appletouch 3-1:1.0: input: appletouch disconnected [ 870.425724][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.432262][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.490849][T13447] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2153'. [ 870.940325][T11442] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 871.192697][T11442] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 871.223974][T11442] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 871.266594][T11442] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 871.322942][T11442] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.377697][T11442] usb 3-1: config 0 descriptor?? [ 871.494315][T13457] 9pnet_fd: Insufficient options for proto=fd [ 871.915484][T11442] usbhid 3-1:0.0: can't add hid device: -71 [ 871.935109][T11442] usbhid: probe of 3-1:0.0 failed with error -71 [ 872.038062][T11442] usb 3-1: USB disconnect, device number 51 [ 873.321509][T13469] x_tables: duplicate underflow at hook 1 [ 873.331828][T13469] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 873.339770][T13469] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 873.348919][T13469] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 873.356963][T13469] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 873.606783][T13470] binder: BINDER_SET_CONTEXT_MGR already set [ 873.621695][T13470] binder: 13465:13470 ioctl 4018620d 200000004a80 returned -16 [ 874.489985][T13478] 9pnet_fd: Insufficient options for proto=fd [ 875.005805][T13486] binder: 13485:13486 ioctl c0306201 200000000080 returned -14 [ 875.060774][T13486] binder: 13485:13486 ioctl c0306201 2000000003c0 returned -14 [ 877.710320][T11436] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 877.936231][T11436] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 877.979879][T11436] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 878.010483][T11436] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 878.025700][T11436] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.075299][T11436] usb 3-1: config 0 descriptor?? [ 878.894221][T11436] usbhid 3-1:0.0: can't add hid device: -71 [ 878.913052][T11436] usbhid: probe of 3-1:0.0 failed with error -71 [ 878.931995][T11436] usb 3-1: USB disconnect, device number 52 [ 879.031515][T13505] 9pnet_fd: Insufficient options for proto=fd [ 879.263920][T13509] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2177'. [ 881.546608][T13535] 9pnet_fd: Insufficient options for proto=fd [ 881.924877][T13543] binder: 13542:13543 ioctl c0306201 200000000080 returned -14 [ 881.964521][T13543] binder: 13542:13543 ioctl c0306201 2000000003c0 returned -14 [ 882.150475][T11442] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 882.362141][T11442] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 882.410328][T11442] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 882.428939][T11442] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 882.470408][T11442] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 882.507270][T11442] usb 3-1: config 0 descriptor?? [ 883.007161][T11442] usbhid 3-1:0.0: can't add hid device: -71 [ 883.032564][T11442] usbhid: probe of 3-1:0.0 failed with error -71 [ 883.071092][T11442] usb 3-1: USB disconnect, device number 53 [ 883.681374][ T5836] kernel write not supported for file /bluetooth/6lowpan_control (pid: 5836 comm: kworker/0:7) [ 883.719868][T13566] binder: 13565:13566 ioctl c0306201 200000000080 returned -14 [ 883.766292][T13566] binder: 13565:13566 ioctl c0306201 2000000003c0 returned -14 [ 884.371978][T13575] x_tables: duplicate underflow at hook 1 [ 884.379066][T13575] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 884.387054][T13575] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 884.396052][T13575] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 884.403962][T13575] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 885.548066][T13581] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 887.140101][T13595] fuse: Bad value for 'fd' [ 887.611380][T11430] kernel write not supported for file /bluetooth/6lowpan_control (pid: 11430 comm: kworker/0:9) [ 890.611115][T13632] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 892.891598][T13651] fuse: Bad value for 'fd' [ 895.763796][ T5836] IPVS: starting estimator thread 0... [ 895.850398][T13679] IPVS: using max 26 ests per chain, 62400 per kthread [ 897.550312][T11436] usb 3-1: new full-speed USB device number 54 using dummy_hcd [ 897.711715][T13697] 9pnet_fd: Insufficient options for proto=fd [ 897.761976][T11436] usb 3-1: not running at top speed; connect to a high speed hub [ 897.790813][T11436] usb 3-1: config 5 has an invalid interface number: 32 but max is 0 [ 897.798919][T11436] usb 3-1: config 5 has no interface number 0 [ 897.826142][T11436] usb 3-1: config 5 interface 32 has no altsetting 0 [ 897.839097][T11436] usb 3-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=a2.76 [ 897.850402][T11436] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.858446][T11436] usb 3-1: Product: syz [ 897.880512][T11436] usb 3-1: Manufacturer: syz [ 897.890471][T11436] usb 3-1: SerialNumber: syz [ 898.115001][T13688] UBIFS error (pid: 13688): cannot open "/dev/sequencer", error -22 [ 898.121678][T11436] usbhid 3-1:5.32: couldn't find an input interrupt endpoint [ 898.173016][T11436] usb 3-1: USB disconnect, device number 54 [ 900.741326][T11430] kernel write not supported for file /bluetooth/6lowpan_control (pid: 11430 comm: kworker/0:9) [ 900.793421][T13718] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 900.903675][T11425] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 901.110326][T11425] usb 3-1: Using ep0 maxpacket: 8 [ 901.117396][T11425] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 901.128863][T11425] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 901.141487][T11425] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.170769][T11425] usb 3-1: Product: syz [ 901.176697][T11425] usb 3-1: Manufacturer: syz [ 901.184422][T11425] usb 3-1: SerialNumber: syz [ 901.194129][T11425] usb 3-1: config 0 descriptor?? [ 901.205213][T11425] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 901.222793][T11425] usb 3-1: setting power ON [ 901.230839][T11425] dvb-usb: bulk message failed: -22 (2/0) [ 901.258273][T11425] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 901.283121][T11425] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 901.310386][T11425] usb 3-1: media controller created [ 901.376113][T11425] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 901.418594][T13722] dvb-usb: bulk message failed: -22 (3/0) [ 901.446382][T13722] dvb-usb: bulk message failed: -22 (4/0) [ 901.468320][T13722] cxusb: i2c read failed [ 901.534103][T11425] usb 3-1: selecting invalid altsetting 6 [ 901.550375][T11425] usb 3-1: digital interface selection failed (-22) [ 901.567375][T11425] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 901.587794][T11425] usb 3-1: setting power OFF [ 901.597983][T11425] dvb-usb: bulk message failed: -22 (2/0) [ 901.648651][T11425] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 901.697072][T11425] (NULL device *): no alternate interface [ 901.753135][T11425] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 901.819858][T11425] usb 3-1: USB disconnect, device number 55 [ 902.785926][T13738] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 903.470818][T13755] 9pnet_fd: Insufficient options for proto=fd [ 906.564261][T13772] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2270'. [ 906.967924][T13772] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 907.118836][T13772] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 907.273809][T13772] bond0 (unregistering): Released all slaves [ 913.124150][T13809] overlayfs: failed to clone lowerpath [ 914.199604][T13812] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 918.030372][T11436] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 918.249348][T11436] usb 3-1: not running at top speed; connect to a high speed hub [ 918.254985][T11436] usb 3-1: config 5 has an invalid interface number: 32 but max is 0 [ 918.255014][T11436] usb 3-1: config 5 has no interface number 0 [ 918.255046][T11436] usb 3-1: config 5 interface 32 has no altsetting 0 [ 918.258425][T11436] usb 3-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=a2.76 [ 918.258461][T11436] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.258488][T11436] usb 3-1: Product: syz [ 918.258507][T11436] usb 3-1: Manufacturer: syz [ 918.258526][T11436] usb 3-1: SerialNumber: syz [ 918.552840][T13825] UBIFS error (pid: 13825): cannot open "/dev/sequencer", error -22 [ 918.639447][T11436] usbhid 3-1:5.32: couldn't find an input interrupt endpoint [ 918.667780][T11436] usb 3-1: USB disconnect, device number 56 [ 928.834295][T12006] Bluetooth: hci2: command 0x0406 tx timeout [ 929.710641][T11442] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 929.940536][T11442] usb 5-1: Using ep0 maxpacket: 32 [ 929.952036][T11442] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 929.963438][T11442] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 929.983194][T11442] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 929.993402][T11442] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 930.001697][T11442] usb 5-1: Product: syz [ 930.006150][T11442] usb 5-1: Manufacturer: syz [ 930.012505][T11442] usb 5-1: SerialNumber: syz [ 930.036270][T11442] usb 5-1: config 0 descriptor?? [ 932.039871][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.046468][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.505446][ T5836] usb 5-1: USB disconnect, device number 43 [ 932.991106][T12006] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 933.001679][T12006] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 933.009602][T12006] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 933.039854][T12006] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 933.057952][T12006] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 933.071551][T12006] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 933.592752][T13939] chnl_net:caif_netlink_parms(): no params data found [ 933.871265][T13939] bridge0: port 1(bridge_slave_0) entered blocking state [ 933.896244][T13939] bridge0: port 1(bridge_slave_0) entered disabled state [ 933.917080][T13939] bridge_slave_0: entered allmulticast mode [ 933.946193][T13939] bridge_slave_0: entered promiscuous mode [ 933.964614][T13939] bridge0: port 2(bridge_slave_1) entered blocking state [ 933.990446][T13939] bridge0: port 2(bridge_slave_1) entered disabled state [ 933.997724][T13939] bridge_slave_1: entered allmulticast mode [ 934.031531][T13939] bridge_slave_1: entered promiscuous mode [ 934.260732][T13939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 934.294939][T13939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 934.376674][T13939] team0: Port device team_slave_0 added [ 934.389044][T13939] team0: Port device team_slave_1 added [ 934.584331][T13964] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2330'. [ 934.895767][T13939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 934.917183][T13939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 935.032278][T13939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 935.140908][T12006] Bluetooth: hci4: command tx timeout [ 935.149502][T13939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 935.177920][T13939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 935.264669][T13939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 935.587737][T13976] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 937.140916][T13939] hsr_slave_0: entered promiscuous mode [ 937.178278][T13939] hsr_slave_1: entered promiscuous mode [ 937.207922][T13939] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 937.220429][T12006] Bluetooth: hci4: command tx timeout [ 937.230992][T13939] Cannot create hsr debugfs directory [ 937.541015][T13990] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2339'. [ 937.886383][T13939] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 937.910783][T12006] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 938.675539][T13939] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 939.252291][T13939] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 939.306605][T12006] Bluetooth: hci4: command tx timeout [ 939.553104][T13939] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 940.161307][T14016] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 941.231129][T14015] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2349'. [ 941.380333][T12006] Bluetooth: hci4: command tx timeout [ 941.806449][T13939] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 941.866397][T13939] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 941.931293][T13939] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 942.114139][T13939] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 942.522188][T13939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 942.606061][T13939] 8021q: adding VLAN 0 to HW filter on device team0 [ 942.659690][ T3483] bridge0: port 1(bridge_slave_0) entered blocking state [ 942.666919][ T3483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 942.794146][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 942.801386][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 944.160255][T14042] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 945.390658][T13939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 945.575803][T13939] veth0_vlan: entered promiscuous mode [ 945.603399][T13939] veth1_vlan: entered promiscuous mode [ 945.723256][T13939] veth0_macvtap: entered promiscuous mode [ 945.754132][T13939] veth1_macvtap: entered promiscuous mode [ 945.852882][T13939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 945.900256][T13939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.920556][T13939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 945.950816][T13939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 945.980257][T13939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 946.020752][T13939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 946.042064][T13939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 946.141680][T13939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 946.180839][T13939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 946.220231][T13939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 946.250565][T13939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 946.280255][T13939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 946.310395][T13939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 946.344028][T13939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 946.395054][T13939] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.421263][T13939] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.430029][T13939] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.480567][T13939] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.690521][T14052] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2350'. [ 946.854554][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 946.910412][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 947.025544][T12730] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 947.090782][T12730] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 947.801233][T14065] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2358'. [ 950.308633][T14071] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 950.610797][T14075] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 951.380362][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 952.478276][T14079] block device autoloading is deprecated and will be removed. [ 953.041657][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 953.061338][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 953.070469][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 953.080111][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 953.087899][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 953.110514][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 953.891810][T14096] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000009' [ 954.470676][T14099] block device autoloading is deprecated and will be removed. [ 955.169358][T12730] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 955.190600][T12730] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.224140][ T51] Bluetooth: hci1: command tx timeout [ 955.233781][T14100] netlink: 'syz.4.2371': attribute type 21 has an invalid length. [ 955.579172][T14107] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 956.711595][T12730] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 956.993148][T14111] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 957.910256][ T51] Bluetooth: hci1: command tx timeout [ 957.970575][T12730] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.286679][T12730] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 958.340244][T12730] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.425234][T14086] chnl_net:caif_netlink_parms(): no params data found [ 958.623558][T12730] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 958.671655][T12730] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.902888][T12730] netdevsim netdevsim0 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.043819][T14086] bridge0: port 1(bridge_slave_0) entered blocking state [ 959.066449][T14086] bridge0: port 1(bridge_slave_0) entered disabled state [ 959.080454][T14086] bridge_slave_0: entered allmulticast mode [ 959.088809][T14086] bridge_slave_0: entered promiscuous mode [ 959.126843][T12730] netdevsim netdevsim0 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.168282][T12730] netdevsim netdevsim0 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.210748][T14086] bridge0: port 2(bridge_slave_1) entered blocking state [ 959.218398][T14086] bridge0: port 2(bridge_slave_1) entered disabled state [ 959.236720][T14086] bridge_slave_1: entered allmulticast mode [ 959.251767][T14086] bridge_slave_1: entered promiscuous mode [ 959.315113][T12730] netdevsim netdevsim0 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.387158][T12730] tipc: Left network mode [ 959.405688][T14086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 959.435572][T14086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 959.639714][T14086] team0: Port device team_slave_0 added [ 959.726669][T14086] team0: Port device team_slave_1 added [ 959.859362][T14086] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 959.879433][T14086] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 959.936340][T14086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 959.950657][ T51] Bluetooth: hci1: command tx timeout [ 960.016074][T14086] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 960.032447][T14086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 960.063332][T14086] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 960.210607][ T5836] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 960.354787][T14086] hsr_slave_0: entered promiscuous mode [ 960.366869][T14086] hsr_slave_1: entered promiscuous mode [ 960.376668][T14086] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 960.386707][T14086] Cannot create hsr debugfs directory [ 960.395322][ T5836] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 960.405078][ T5836] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 960.416333][ T5836] usb 3-1: config 220 has an invalid descriptor of length 116, skipping remainder of the config [ 960.427585][ T5836] usb 3-1: config 220 has no interface number 2 [ 960.434420][ T5836] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 960.479451][ T5836] usb 3-1: config 220 interface 0 has no altsetting 0 [ 960.560268][T11430] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 960.624708][ T5836] usb 3-1: config 220 interface 76 has no altsetting 0 [ 960.743968][ T5836] usb 3-1: config 220 interface 1 has no altsetting 0 [ 961.036977][T11430] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 961.095390][ T5836] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 961.112189][T11430] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 961.128098][ T5836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 961.137256][T11430] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 961.146434][ T5836] usb 3-1: Product: syz [ 961.153448][ T5836] usb 3-1: Manufacturer: syz [ 961.159562][ T5836] usb 3-1: SerialNumber: syz [ 961.165998][T11430] usb 2-1: config 0 descriptor?? [ 961.429795][ T5836] usb 3-1: selecting invalid altsetting 0 [ 961.462165][ T5836] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 961.468699][ T5836] usb 3-1: No valid video chain found. [ 961.525092][ T5836] usb 3-1: selecting invalid altsetting 0 [ 961.542649][ T5836] usbtest: probe of 3-1:220.1 failed with error -22 [ 961.561093][ T5836] usb 3-1: USB disconnect, device number 57 [ 961.627792][T11430] ath6kl: Unsupported hardware version: 0x0 [ 961.661680][T11430] ath6kl: Failed to init ath6kl core: -22 [ 961.677974][T14161] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000009' [ 961.748404][T11430] ath6kl_usb: probe of 2-1:0.0 failed with error -22 [ 961.852611][T14161] netlink: 'syz.4.2381': attribute type 21 has an invalid length. [ 962.030944][ T51] Bluetooth: hci1: command tx timeout [ 962.074770][T11430] usb 2-1: USB disconnect, device number 42 [ 962.932786][T14166] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 964.386596][T14086] netdevsim netdevsim0 eth8 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 964.514895][T12730] hsr_slave_0: left promiscuous mode [ 964.524657][T12730] hsr_slave_1: left promiscuous mode [ 964.537861][T12730] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 964.550456][ T28] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 964.560643][T12730] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 964.591255][T12730] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 964.598740][T12730] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 964.620813][T12730] bridge_slave_1: left allmulticast mode [ 964.626519][T12730] bridge_slave_1: left promiscuous mode [ 964.640660][T12730] bridge0: port 2(bridge_slave_1) entered disabled state [ 964.660656][T12730] bridge_slave_0: left allmulticast mode [ 964.666369][T12730] bridge_slave_0: left promiscuous mode [ 964.690581][T12730] bridge0: port 1(bridge_slave_0) entered disabled state [ 964.763099][ T28] usb 3-1: unable to get BOS descriptor or descriptor too short [ 964.782324][ T28] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 964.794116][T12730] veth1_macvtap: left promiscuous mode [ 964.799821][T12730] veth0_macvtap: left promiscuous mode [ 964.809328][T12730] veth1_vlan: left promiscuous mode [ 964.810650][ T28] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 964.822544][T12730] veth0_vlan: left promiscuous mode [ 964.846822][ T28] usb 3-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 964.876151][ T28] usb 3-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 964.910516][ T28] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 964.940653][ T28] usb 3-1: config 1 interface 1 has no altsetting 0 [ 964.957434][ T28] usb 3-1: string descriptor 0 read error: -22 [ 964.970434][ T28] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 964.991243][ T28] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 965.450373][ T28] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 965.650046][T14189] binder: 14188:14189 ioctl c0306201 2000000003c0 returned -14 [ 965.937933][ T28] usb 3-1: 2:0: failed to get current value for ch 1 (-71) [ 965.985196][ T28] usb 3-1: USB disconnect, device number 58 [ 966.592073][T12730] team0 (unregistering): Port device team_slave_1 removed [ 966.841176][T12730] team0 (unregistering): Port device team_slave_0 removed [ 966.899974][T12730] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 967.117725][T12730] bond_slave_1 (unregistering): left allmulticast mode [ 967.678440][T12730] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 967.707309][T12730] bond_slave_0 (unregistering): left allmulticast mode [ 968.689920][T12730] bond0 (unregistering): Released all slaves [ 968.861915][T14086] netdevsim netdevsim0 eth7 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.925734][T14197] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 969.296854][T14217] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000009' [ 970.757606][T14086] netdevsim netdevsim0 eth6 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.932560][T14220] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2394'. [ 971.059649][T14086] netdevsim netdevsim0 eth5 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 971.109062][T14217] netlink: 'syz.1.2392': attribute type 21 has an invalid length. [ 971.741836][T14226] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 973.189389][T14086] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 973.250893][T14086] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 973.293640][T14086] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 973.375614][T14086] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 974.216420][T12730] IPVS: stop unused estimator thread 0... [ 974.527582][T14086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 974.591735][T14086] 8021q: adding VLAN 0 to HW filter on device team0 [ 974.669093][ T6357] bridge0: port 1(bridge_slave_0) entered blocking state [ 974.676487][ T6357] bridge0: port 1(bridge_slave_0) entered forwarding state [ 974.684729][T14246] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2400'. [ 974.717802][ T6357] bridge0: port 2(bridge_slave_1) entered blocking state [ 974.725051][ T6357] bridge0: port 2(bridge_slave_1) entered forwarding state [ 974.852917][T14086] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 975.537351][T14258] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 976.883113][T14265] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 976.981395][T14265] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 977.094767][T14086] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 977.252509][T14086] veth0_vlan: entered promiscuous mode [ 978.019657][T14086] veth1_vlan: entered promiscuous mode [ 978.191568][T14086] veth0_macvtap: entered promiscuous mode [ 978.223300][T14086] veth1_macvtap: entered promiscuous mode [ 978.301534][T14086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 978.330460][T14086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 978.374670][T14086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 978.405580][T14086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 978.460240][T14086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 978.500831][T14086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 978.537530][T14086] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 978.585119][T14086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 978.647499][T14086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 978.688119][T14086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 978.720184][T14086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 978.730066][T14086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 978.800213][T14086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 978.831962][T14086] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 978.901553][T14086] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.936252][T14086] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.970248][T14086] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.979050][T14086] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.307107][T14289] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 979.357452][ T6357] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 979.407587][ T6357] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 979.521413][ T2900] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 979.576365][ T2900] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 979.591832][T14300] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000009' [ 979.619333][T14300] netlink: 'syz.4.2404': attribute type 21 has an invalid length. [ 983.299659][T14318] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 986.651862][T14338] x_tables: duplicate underflow at hook 1 [ 986.814001][T14343] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 986.870383][T14343] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 986.908072][T14343] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 986.970994][T14343] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 987.361105][T12006] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 987.377207][T12006] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 987.386159][T12006] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 987.400416][T12006] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 987.420530][T12006] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 987.429312][T12006] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 988.334088][T14347] chnl_net:caif_netlink_parms(): no params data found [ 988.427154][T14364] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000009' [ 988.591836][T14364] netlink: 'syz.1.2417': attribute type 21 has an invalid length. [ 989.540589][T12006] Bluetooth: hci0: command tx timeout [ 989.622746][T14347] bridge0: port 1(bridge_slave_0) entered blocking state [ 989.661023][T14347] bridge0: port 1(bridge_slave_0) entered disabled state [ 989.699824][T14347] bridge_slave_0: entered allmulticast mode [ 989.712324][T14347] bridge_slave_0: entered promiscuous mode [ 989.742755][T14347] bridge0: port 2(bridge_slave_1) entered blocking state [ 989.749962][T14347] bridge0: port 2(bridge_slave_1) entered disabled state [ 989.820947][T14347] bridge_slave_1: entered allmulticast mode [ 989.909474][T14347] bridge_slave_1: entered promiscuous mode [ 990.734504][T14347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 990.769166][T14347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 990.867834][T14381] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 990.892754][T14347] team0: Port device team_slave_0 added [ 990.907382][T14347] team0: Port device team_slave_1 added [ 990.973553][T14347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 990.991849][T14347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 991.174754][T14347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 991.992757][T12006] Bluetooth: hci0: command tx timeout [ 992.023032][T14347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 992.070514][T14347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 992.190342][T14347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 992.351692][T14397] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000009' [ 993.304380][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.310774][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.020621][T12006] Bluetooth: hci0: command tx timeout [ 994.720700][T14397] netlink: 'syz.0.2427': attribute type 21 has an invalid length. [ 994.960014][T14347] hsr_slave_0: entered promiscuous mode [ 995.000566][T14347] hsr_slave_1: entered promiscuous mode [ 996.115589][T12006] Bluetooth: hci0: command tx timeout [ 996.600266][ T28] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 996.791064][T14429] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000009' [ 996.800293][ T28] usb 2-1: Using ep0 maxpacket: 16 [ 996.866311][ T28] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 996.985436][ T28] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 996.996485][T14429] netlink: 'syz.4.2436': attribute type 21 has an invalid length. [ 997.156552][ T28] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 997.313758][ T28] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.432342][ T28] usb 2-1: Product: syz [ 997.494020][ T28] usb 2-1: Manufacturer: syz [ 997.560303][ T28] usb 2-1: SerialNumber: syz [ 1000.010874][ T28] usb 2-1: 0:2 : does not exist [ 1000.040797][ T28] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1000.082153][ T28] usb 2-1: USB disconnect, device number 43 [ 1000.137643][T14347] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1000.185076][T14347] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1000.213504][T14404] udevd[14404]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1000.281665][T14347] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1000.391262][T14347] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1001.461032][T14444] overlayfs: overlapping lowerdir path [ 1002.336494][T14347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1003.054779][T14347] 8021q: adding VLAN 0 to HW filter on device team0 [ 1003.078507][ T2900] bridge0: port 1(bridge_slave_0) entered blocking state [ 1003.085682][ T2900] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1003.236556][ T2900] bridge0: port 2(bridge_slave_1) entered blocking state [ 1003.243958][ T2900] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1004.130382][ T59] hsr_slave_0: left promiscuous mode [ 1004.157101][ T59] hsr_slave_1: left promiscuous mode [ 1004.170652][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1004.187756][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1004.211291][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1004.236018][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1004.257347][T14468] tipc: Failed to remove unknown binding: 66,0,0/0:4077259728/4077259730 [ 1004.266593][ T59] bridge_slave_1: left allmulticast mode [ 1004.268306][T14468] tipc: Failed to remove unknown binding: 66,0,0/0:4077259728/4077259729 [ 1004.280384][ T59] bridge_slave_1: left promiscuous mode [ 1004.299240][T14468] tipc: Failed to remove unknown binding: 66,0,0/0:4077259728/4077259730 [ 1004.300828][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 1004.319325][T14468] tipc: Failed to remove unknown binding: 66,0,0/0:4077259728/4077259729 [ 1004.348987][ T59] bridge_slave_0: left allmulticast mode [ 1004.354962][ T59] bridge_slave_0: left promiscuous mode [ 1004.360733][T11442] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 1004.378954][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 1004.445126][ T59] veth1_macvtap: left promiscuous mode [ 1004.452722][ T59] veth0_macvtap: left promiscuous mode [ 1004.458445][ T59] veth1_vlan: left promiscuous mode [ 1004.464370][ T59] veth0_vlan: left promiscuous mode [ 1004.542383][T11442] usb 2-1: not running at top speed; connect to a high speed hub [ 1004.567489][T11442] usb 2-1: config 5 has an invalid interface number: 32 but max is 0 [ 1004.603215][T11442] usb 2-1: config 5 has no interface number 0 [ 1004.640548][T14476] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000009' [ 1004.675206][T11442] usb 2-1: config 5 interface 32 has no altsetting 0 [ 1004.776136][T11442] usb 2-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=a2.76 [ 1004.916296][T11442] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.112944][T11442] usb 2-1: Product: syz [ 1005.186724][T11442] usb 2-1: Manufacturer: syz [ 1005.266458][T11442] usb 2-1: SerialNumber: syz [ 1005.597261][T14461] UBIFS error (pid: 14461): cannot open "/dev/sequencer", error -22 [ 1005.608282][T11442] usbhid 2-1:5.32: couldn't find an input interrupt endpoint [ 1005.655601][T11442] usb 2-1: USB disconnect, device number 44 [ 1008.644586][ T59] team0 (unregistering): Port device team_slave_1 removed [ 1008.791786][ T59] team0 (unregistering): Port device team_slave_0 removed [ 1012.654084][T14522] x_tables: duplicate underflow at hook 1 [ 1012.661176][T14522] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1012.669099][T14522] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 1012.677818][T14522] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1012.687910][T14522] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 1012.703585][T14476] netlink: 'syz.4.2446': attribute type 21 has an invalid length. [ 1012.815761][T14347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1013.029913][T14347] veth0_vlan: entered promiscuous mode [ 1013.108541][T14347] veth1_vlan: entered promiscuous mode [ 1013.277763][T14347] veth0_macvtap: entered promiscuous mode [ 1013.458141][T14347] veth1_macvtap: entered promiscuous mode [ 1013.478522][T14347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1013.489348][T14347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1013.499796][T14347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1013.516976][ T59] IPVS: stop unused estimator thread 0... [ 1013.521888][T14347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1013.560928][T14347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1013.585777][T14347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1013.616706][T14347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1013.654850][T14347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1013.665745][T14347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1013.676463][T14347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1013.687451][T14347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1013.800238][T14347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1013.820282][T14347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1013.841967][T14347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1013.864279][T14347] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.893778][T14347] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.930392][T14347] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.960536][T14347] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1014.738484][ T6254] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1014.755993][T14542] binder: 14540:14542 ioctl c0306201 200000000080 returned -14 [ 1014.766243][ T6254] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1014.886752][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1014.915729][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1015.921069][T14550] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000009' [ 1016.284250][T14550] netlink: 'syz.1.2471': attribute type 21 has an invalid length. [ 1020.085186][T14556] hub 8-0:1.0: USB hub found [ 1020.091705][T14556] hub 8-0:1.0: 1 port detected [ 1020.970466][ T5813] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 1021.187921][ T5813] usb 3-1: not running at top speed; connect to a high speed hub [ 1021.269896][ T5813] usb 3-1: config 5 has an invalid interface number: 32 but max is 0 [ 1021.344319][ T5813] usb 3-1: config 5 has no interface number 0 [ 1021.411709][ T5813] usb 3-1: config 5 interface 32 has no altsetting 0 [ 1021.562014][ T5813] usb 3-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=a2.76 [ 1021.652690][ T5813] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1021.728687][ T5813] usb 3-1: Product: syz [ 1021.781560][ T5813] usb 3-1: Manufacturer: syz [ 1021.853502][ T5813] usb 3-1: SerialNumber: syz [ 1022.161973][T14574] UBIFS error (pid: 14574): cannot open "/dev/sequencer", error -22 [ 1022.176370][ T5813] usbhid 3-1:5.32: couldn't find an input interrupt endpoint [ 1022.270560][T14597] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000009' [ 1022.286106][T14597] netlink: 'syz.0.2483': attribute type 21 has an invalid length. [ 1023.020515][ T5813] usb 3-1: USB disconnect, device number 59 [ 1025.910625][T14639] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000009' [ 1025.928508][T14639] netlink: 'syz.0.2495': attribute type 21 has an invalid length. [ 1026.970298][ T28] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 1027.151680][ T28] usb 5-1: not running at top speed; connect to a high speed hub [ 1027.161643][ T28] usb 5-1: config 5 has an invalid interface number: 32 but max is 0 [ 1027.169801][ T28] usb 5-1: config 5 has no interface number 0 [ 1027.185249][ T28] usb 5-1: config 5 interface 32 has no altsetting 0 [ 1027.214219][ T28] usb 5-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=a2.76 [ 1027.239647][ T28] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.260444][ T28] usb 5-1: Product: syz [ 1027.264686][ T28] usb 5-1: Manufacturer: syz [ 1027.269324][ T28] usb 5-1: SerialNumber: syz [ 1027.508122][T14629] UBIFS error (pid: 14629): cannot open "/dev/sequencer", error -22 [ 1027.522644][ T28] usbhid 5-1:5.32: couldn't find an input interrupt endpoint [ 1027.578664][ T28] usb 5-1: USB disconnect, device number 44 [ 1030.346676][T14682] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000009' [ 1030.364354][T14682] netlink: 'syz.1.2507': attribute type 21 has an invalid length. [ 1031.618069][T14700] overlayfs: failed to resolve './file0': -2 [ 1031.634508][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801b765000: rx timeout, send abort [ 1032.135318][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801b766400: rx timeout, send abort [ 1032.144662][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801b765000: abort rx timeout. Force session deactivation [ 1032.643703][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801b766400: abort rx timeout. Force session deactivation [ 1034.138299][T14727] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000009' [ 1034.156327][T14727] netlink: 'syz.1.2521': attribute type 21 has an invalid length. [ 1035.814021][T11433] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1036.010504][T11433] usb 1-1: Using ep0 maxpacket: 16 [ 1036.048204][T11433] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 1036.117982][T11433] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.229213][T11433] usb 1-1: Product: syz [ 1036.298041][T11433] usb 1-1: Manufacturer: syz [ 1036.344241][T11433] usb 1-1: SerialNumber: syz [ 1036.479457][T11433] usb 1-1: config 0 descriptor?? [ 1036.560564][T11433] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 1036.707572][T11433] usb 1-1: Detected FT-X [ 1036.862854][T14734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2523'. [ 1036.932079][T11433] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1036.957422][T11433] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1036.982241][T11433] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 1037.014990][T11433] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1037.074130][T11433] usb 1-1: USB disconnect, device number 23 [ 1037.120621][T11433] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1037.143769][T11433] ftdi_sio 1-1:0.0: device disconnected [ 1037.359720][T14756] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000009' [ 1037.377730][T14756] netlink: 'syz.1.2530': attribute type 21 has an invalid length. [ 1039.397782][T14775] x_tables: duplicate underflow at hook 1 [ 1039.409525][T14775] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1039.417521][T14775] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 1039.427586][T14775] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1039.435544][T14775] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 1040.583228][T14782] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2538'. [ 1040.625454][T11433] IPVS: starting estimator thread 0... [ 1040.784359][T14783] IPVS: using max 26 ests per chain, 62400 per kthread [ 1040.850318][ T5836] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1040.860303][ T5813] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1040.940326][T11439] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1041.164562][T11439] usb 1-1: Using ep0 maxpacket: 32 [ 1041.175290][T11439] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 1041.183515][T11439] usb 1-1: config 0 has an invalid descriptor of length 10, skipping remainder of the config [ 1041.194017][T11439] usb 1-1: config 0 has no interface number 0 [ 1041.200207][T11439] usb 1-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1041.231476][ T5813] usb 2-1: Using ep0 maxpacket: 32 [ 1041.278804][T14790] comedi comedi1: pcl812: I/O port conflict (0x100,16) [ 1041.319000][ T5813] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1041.531994][ T5836] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1041.605411][ T5813] usb 2-1: config 0 has no interface number 0 [ 1041.652113][ T5836] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1041.712153][ T5813] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1041.952189][T11439] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1041.961364][T11439] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1041.969494][T11439] usb 1-1: Product: syz [ 1041.973759][T11439] usb 1-1: Manufacturer: syz [ 1041.978387][T11439] usb 1-1: SerialNumber: syz [ 1041.995617][ T5836] usb 5-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1042.005555][ T5813] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1042.013828][ T5836] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1042.021937][ T5813] usb 2-1: Product: syz [ 1042.026175][ T5813] usb 2-1: Manufacturer: syz [ 1042.040714][ T5813] usb 2-1: SerialNumber: syz [ 1042.072223][ T5836] usb 5-1: config 0 descriptor?? [ 1042.089097][ T5813] usb 2-1: config 0 descriptor?? [ 1042.124264][ T5813] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1042.161307][T11439] usb 1-1: config 0 descriptor?? [ 1042.169367][T11439] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1043.111871][T14794] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1044.338187][ T5836] usbhid 5-1:0.0: can't add hid device: -71 [ 1044.344787][ T5836] usbhid: probe of 5-1:0.0 failed with error -71 [ 1044.363823][ T5836] usb 5-1: USB disconnect, device number 45 [ 1044.455730][T11439] usb 1-1: qt2_attach - failed to power on unit: -71 [ 1044.468575][T11439] quatech2: probe of 1-1:0.51 failed with error -71 [ 1044.501995][ T5813] usb 2-1: qt2_attach - failed to power on unit: -71 [ 1044.509038][ T5813] quatech2: probe of 2-1:0.51 failed with error -71 [ 1044.525394][T11439] usb 1-1: USB disconnect, device number 24 [ 1044.580411][ T5813] usb 2-1: USB disconnect, device number 45 [ 1045.624272][T14811] x_tables: duplicate underflow at hook 1 [ 1045.631084][T14811] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1045.638923][T14811] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 1045.647410][T14811] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1045.655270][T14811] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 1045.672039][T14809] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000009' [ 1045.860859][T14809] netlink: 'syz.4.2543': attribute type 21 has an invalid length. [ 1050.330455][ T28] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1050.366506][T14843] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000009' [ 1050.385847][T14843] netlink: 'syz.1.2555': attribute type 21 has an invalid length. [ 1050.530205][ T5813] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1050.550346][ T28] usb 3-1: Using ep0 maxpacket: 16 [ 1050.644235][ T28] usb 3-1: config 0 interface 0 altsetting 239 endpoint 0x81 has an invalid bInterval 248, changing to 11 [ 1050.832219][ T28] usb 3-1: config 0 interface 0 altsetting 239 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1051.085654][ T28] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1051.178053][ T28] usb 3-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 1051.220257][ T28] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1051.263839][ T28] usb 3-1: config 0 descriptor?? [ 1051.344836][ T5813] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1051.370844][ T5813] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1051.400324][ T5813] usb 1-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 1051.431078][ T5813] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1051.458185][ T5813] usb 1-1: config 0 descriptor?? [ 1051.757023][T14851] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2552'. [ 1051.846861][ T28] lenovo 0003:17EF:60A3.0005: unknown main item tag 0x4 [ 1051.863282][ T28] lenovo 0003:17EF:60A3.0005: unknown main item tag 0x0 [ 1051.870663][ T28] lenovo 0003:17EF:60A3.0005: unknown main item tag 0x0 [ 1051.877695][ T28] lenovo 0003:17EF:60A3.0005: item fetching failed at offset 37/40 [ 1051.886719][ T28] lenovo 0003:17EF:60A3.0005: hid_parse failed [ 1051.893108][ T28] lenovo: probe of 0003:17EF:60A3.0005 failed with error -22 [ 1051.926306][ T5813] usbhid 1-1:0.0: can't add hid device: -71 [ 1051.937603][ T5813] usbhid: probe of 1-1:0.0 failed with error -71 [ 1051.947956][ T5813] usb 1-1: USB disconnect, device number 25 [ 1052.060311][ T8] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1052.094647][T11439] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1052.097601][ T5836] usb 3-1: USB disconnect, device number 60 [ 1052.270384][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 1052.280457][ T8] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 1052.283141][T11439] usb 2-1: Using ep0 maxpacket: 16 [ 1052.288571][ T8] usb 5-1: config 0 has an invalid descriptor of length 10, skipping remainder of the config [ 1052.288596][ T8] usb 5-1: config 0 has no interface number 0 [ 1052.310064][T11439] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 1052.318584][ T8] usb 5-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1052.339897][ T8] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1052.340781][T11439] usb 2-1: config 0 has an invalid descriptor of length 118, skipping remainder of the config [ 1052.359602][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1052.359629][ T8] usb 5-1: Product: syz [ 1052.380405][T11439] usb 2-1: config 0 has no interface number 0 [ 1052.384075][ T8] usb 5-1: Manufacturer: syz [ 1052.389842][T11439] usb 2-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1052.393363][ T8] usb 5-1: SerialNumber: syz [ 1052.412010][ T8] usb 5-1: config 0 descriptor?? [ 1052.422017][ T8] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1052.422825][T11439] usb 2-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 1052.451809][T11439] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1052.459860][T11439] usb 2-1: Product: syz [ 1052.469736][T11439] usb 2-1: Manufacturer: syz [ 1052.474589][T11439] usb 2-1: SerialNumber: syz [ 1052.511823][T11439] usb 2-1: config 0 descriptor?? [ 1052.675054][ T8] usb 5-1: qt2_attach - failed to power on unit: -71 [ 1053.189625][T11439] cypress_m8 2-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 1053.385342][T11439] nokiaca42v2 ttyUSB0: required endpoint is missing [ 1053.424576][ T8] quatech2: probe of 5-1:0.51 failed with error -71 [ 1053.434537][ T8] usb 5-1: USB disconnect, device number 46 [ 1053.533113][T11439] usb 2-1: USB disconnect, device number 46 [ 1053.559904][T11439] cypress_m8 2-1:0.35: device disconnected [ 1055.977753][T14874] x_tables: duplicate underflow at hook 1 [ 1055.984847][T14874] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1055.992794][T14874] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 1056.001327][T14874] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1056.009200][T14874] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 1056.076472][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1056.098955][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.508056][T14885] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000009' [ 1056.524517][T14885] netlink: 'syz.1.2564': attribute type 21 has an invalid length. [ 1059.041010][T14875] Bluetooth: hci4: command 0x0406 tx timeout [ 1059.281376][T14893] netlink: 4560 bytes leftover after parsing attributes in process `syz.4.2568'. [ 1059.318961][T14897] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2569'. [ 1059.557450][ T8] IPVS: starting estimator thread 0... [ 1059.641878][T14908] comedi comedi1: pcl812: I/O port conflict (0x100,16) [ 1059.890548][T14907] IPVS: using max 16 ests per chain, 38400 per kthread [ 1061.581334][ T5813] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1062.538256][T14926] usb usb8: usbfs: process 14926 (syz.2.2577) did not claim interface 0 before use [ 1063.030431][ T5813] usb 2-1: Using ep0 maxpacket: 32 [ 1063.114550][ T5813] usb 2-1: device descriptor read/all, error -71 [ 1063.340057][T14940] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000009' [ 1063.361620][T14940] netlink: 'syz.4.2578': attribute type 21 has an invalid length. [ 1064.559192][T14952] x_tables: duplicate underflow at hook 1 [ 1064.566391][T14952] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1064.574366][T14952] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 1064.583284][T14952] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1064.591229][T14952] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 1064.665238][T14953] comedi comedi1: pcl812: I/O port conflict (0x100,16) [ 1066.536008][T14964] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2587'. [ 1066.864624][T14306] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1067.090546][T14306] usb 2-1: Using ep0 maxpacket: 32 [ 1067.101814][T14306] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1067.120484][T14306] usb 2-1: config 0 has an invalid descriptor of length 10, skipping remainder of the config [ 1067.150659][T14306] usb 2-1: config 0 has no interface number 0 [ 1067.216369][T14979] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000009' [ 1067.232606][T14979] netlink: 'syz.4.2591': attribute type 21 has an invalid length. [ 1067.939062][T14306] usb 2-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1067.955920][T14306] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1067.965466][T14306] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1067.973816][T14306] usb 2-1: Product: syz [ 1067.978029][T14306] usb 2-1: Manufacturer: syz [ 1067.983488][T14306] usb 2-1: SerialNumber: syz [ 1067.994704][T14306] usb 2-1: config 0 descriptor?? [ 1068.031453][T14306] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1068.238575][T14306] usb 2-1: qt2_attach - failed to power on unit: -71 [ 1068.270375][T14306] quatech2: probe of 2-1:0.51 failed with error -71 [ 1068.283962][T14306] usb 2-1: USB disconnect, device number 49 [ 1068.932803][T14990] x_tables: duplicate underflow at hook 1 [ 1068.943096][T14990] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1068.951066][T14990] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 1068.960213][T14990] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1068.968114][T14990] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 1070.826078][T15002] binder: 15001:15002 ioctl c0306201 200000000080 returned -14 [ 1070.854733][T15002] binder: 15001:15002 ioctl c0306201 2000000003c0 returned -14 [ 1072.790934][T15015] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2603'. [ 1072.824995][T15018] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000009' [ 1072.845034][T15018] netlink: 'syz.2.2602': attribute type 21 has an invalid length. [ 1073.460682][ T5813] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1073.647679][T15023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1073.780498][ T5813] usb 1-1: Using ep0 maxpacket: 32 [ 1073.791551][ T5813] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 1073.799800][ T5813] usb 1-1: config 0 has an invalid descriptor of length 10, skipping remainder of the config [ 1073.840256][ T5813] usb 1-1: config 0 has no interface number 0 [ 1073.846475][ T5813] usb 1-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1073.883200][ T5813] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1073.892539][ T5813] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.910596][ T5813] usb 1-1: Product: syz [ 1073.914802][ T5813] usb 1-1: Manufacturer: syz [ 1073.919424][ T5813] usb 1-1: SerialNumber: syz [ 1073.951766][ T5813] usb 1-1: config 0 descriptor?? [ 1073.964427][ T5813] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1074.167616][ T5813] usb 1-1: qt2_attach - failed to power on unit: -71 [ 1074.196413][ T5813] quatech2: probe of 1-1:0.51 failed with error -71 [ 1074.243228][ T5813] usb 1-1: USB disconnect, device number 26 [ 1075.521051][T15050] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 1075.560450][T15050] CPU: 0 PID: 15050 Comm: syz.1.2610 Not tainted syzkaller #0 [ 1075.568019][T15050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1075.578143][T15050] Call Trace: [ 1075.581509][T15050] [ 1075.584479][T15050] dump_stack_lvl+0x18c/0x250 [ 1075.589221][T15050] ? show_regs_print_info+0x20/0x20 [ 1075.594477][T15050] ? load_image+0x420/0x420 [ 1075.599056][T15050] sysfs_create_dir_ns+0x26e/0x2a0 [ 1075.604216][T15050] ? __lock_acquire+0x7d80/0x7d80 [ 1075.609324][T15050] ? sysfs_warn_dup+0xa0/0xa0 [ 1075.614047][T15050] ? rcu_is_watching+0x15/0xb0 [ 1075.618866][T15050] ? do_raw_spin_unlock+0x121/0x230 [ 1075.624211][T15050] kobject_add_internal+0x617/0xc90 [ 1075.629478][T15050] kobject_add+0x164/0x240 [ 1075.633963][T15050] ? kobject_init+0x1d0/0x1d0 [ 1075.638709][T15050] ? get_device_parent+0x366/0x390 [ 1075.643879][T15050] device_add+0x3fa/0xc40 [ 1075.648270][T15050] tty_register_device_attr+0x425/0x950 [ 1075.653936][T15050] ? tty_register_device+0x30/0x30 [ 1075.659091][T15050] ? tty_port_init+0x132/0x1a0 [ 1075.663881][T15050] ? gsm_dlci_alloc+0x32a/0x630 [ 1075.668785][T15050] ? __might_fault+0xaa/0x120 [ 1075.673496][T15050] gsm_activate_mux+0x110/0x2a0 [ 1075.678391][T15050] gsmld_ioctl+0xcec/0x1900 [ 1075.682942][T15050] ? gsmld_write+0x120/0x120 [ 1075.687568][T15050] ? __init_ldsem+0x150/0x150 [ 1075.692282][T15050] ? __fget_files+0x28/0x460 [ 1075.696944][T15050] ? gsmld_write+0x120/0x120 [ 1075.701566][T15050] tty_ioctl+0x9b5/0xdc0 [ 1075.705855][T15050] ? tty_get_icount+0xb0/0xb0 [ 1075.710562][T15050] __se_sys_ioctl+0xfd/0x170 [ 1075.715204][T15050] do_syscall_64+0x55/0xb0 [ 1075.719650][T15050] ? clear_bhb_loop+0x40/0x90 [ 1075.724361][T15050] ? clear_bhb_loop+0x40/0x90 [ 1075.729071][T15050] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1075.735018][T15050] RIP: 0033:0x7efcc059e019 [ 1075.739486][T15050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1075.759127][T15050] RSP: 002b:00007efcc13d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1075.767572][T15050] RAX: ffffffffffffffda RBX: 00007efcc0826090 RCX: 00007efcc059e019 [ 1075.775583][T15050] RDX: 00002000000000c0 RSI: 0000000040204706 RDI: 0000000000000003 [ 1075.783585][T15050] RBP: 00007efcc063500c R08: 0000000000000000 R09: 0000000000000000 [ 1075.791588][T15050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1075.799581][T15050] R13: 00007efcc0826128 R14: 00007efcc0826090 R15: 00007ffe67993328 [ 1075.807593][T15050] [ 1075.831692][T15050] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 1076.016278][T15054] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000009' [ 1076.033233][T15054] netlink: 'syz.0.2613': attribute type 21 has an invalid length. [ 1077.382657][T12006] Bluetooth: hci1: command 0x0406 tx timeout [ 1077.515837][T15066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2617'. [ 1077.534482][T15070] tipc: Failed to remove unknown binding: 66,0,0/0:3089455889/3089455890 [ 1077.579069][T15070] tipc: Failed to remove unknown binding: 66,0,0/0:3089455889/3089455890 [ 1077.627234][T15070] netlink: 'syz.2.2616': attribute type 1 has an invalid length. [ 1077.648571][T15070] netlink: 'syz.2.2616': attribute type 2 has an invalid length. [ 1077.766923][T15075] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2617'. [ 1078.070766][T15084] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2621'. [ 1078.306576][T15089] x_tables: duplicate underflow at hook 1 [ 1078.318941][T15089] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1078.326955][T15089] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 1078.337023][T15089] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1078.345262][T15089] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 1079.542389][ T5836] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1079.580626][T15098] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000009' [ 1079.598749][T15098] netlink: 'syz.0.2625': attribute type 21 has an invalid length. [ 1079.760316][ T5836] usb 5-1: Using ep0 maxpacket: 32 [ 1079.836420][ T5836] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 1079.938320][ T5836] usb 5-1: config 0 has an invalid descriptor of length 10, skipping remainder of the config [ 1080.070640][ T5836] usb 5-1: config 0 has no interface number 0 [ 1080.160477][ T5836] usb 5-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1080.390978][T15103] tipc: Started in network mode [ 1080.395984][T15103] tipc: Node identity 4, cluster identity 4711 [ 1080.402378][T15103] tipc: Node number set to 4 [ 1080.414098][ T5836] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1080.430417][ T5836] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1080.439001][ T5836] usb 5-1: Product: syz [ 1080.443297][ T5836] usb 5-1: Manufacturer: syz [ 1080.447943][ T5836] usb 5-1: SerialNumber: syz [ 1080.462840][ T5836] usb 5-1: config 0 descriptor?? [ 1080.472262][ T5836] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1080.686986][ T5836] usb 5-1: qt2_attach - failed to power on unit: -71 [ 1080.728882][ T5836] quatech2: probe of 5-1:0.51 failed with error -71 [ 1080.775069][ T5836] usb 5-1: USB disconnect, device number 47 [ 1081.011249][T15118] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2631'. [ 1081.409352][T15136] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000009' [ 1081.431305][T15136] netlink: 'syz.0.2636': attribute type 21 has an invalid length. [ 1083.562212][T15158] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2646'. [ 1084.224991][ T5836] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1084.333151][T15175] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0xffffffffffffffff' [ 1084.372647][T15174] netlink: 'syz.4.2649': attribute type 21 has an invalid length. [ 1084.570359][ T5836] usb 1-1: Using ep0 maxpacket: 32 [ 1085.010392][ T5836] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 1085.030378][ T5836] usb 1-1: config 0 has an invalid descriptor of length 10, skipping remainder of the config [ 1085.050441][ T5836] usb 1-1: config 0 has no interface number 0 [ 1085.056681][ T5836] usb 1-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1085.074059][ T5836] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1085.083352][ T5836] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1085.097607][ T5836] usb 1-1: Product: syz [ 1085.102367][ T5836] usb 1-1: Manufacturer: syz [ 1085.107022][ T5836] usb 1-1: SerialNumber: syz [ 1085.121471][ T5836] usb 1-1: config 0 descriptor?? [ 1085.129327][ T5836] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1085.345187][ T5836] usb 1-1: qt2_attach - failed to power on unit: -71 [ 1085.363188][ T5836] quatech2: probe of 1-1:0.51 failed with error -71 [ 1085.402338][ T5836] usb 1-1: USB disconnect, device number 27 [ 1085.977292][T15202] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2663'. [ 1086.364479][T15212] comedi comedi1: pcl812: I/O port conflict (0x100,16) [ 1087.179872][T15220] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2671'. [ 1087.262269][T15225] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2673'. [ 1087.470449][ T5836] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1087.690615][ T5836] usb 5-1: Using ep0 maxpacket: 32 [ 1087.748666][ T5836] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 1087.803399][ T5836] usb 5-1: config 0 has an invalid descriptor of length 10, skipping remainder of the config [ 1087.903086][ T5836] usb 5-1: config 0 has no interface number 0 [ 1087.998056][ T5836] usb 5-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1088.259774][ T5836] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1088.350543][ T5836] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1088.374015][ T5836] usb 5-1: Product: syz [ 1088.378263][ T5836] usb 5-1: Manufacturer: syz [ 1088.425734][ T5836] usb 5-1: SerialNumber: syz [ 1088.464300][ T5836] usb 5-1: config 0 descriptor?? [ 1088.507034][ T5836] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1088.685484][ T5836] usb 5-1: qt2_attach - failed to power on unit: -71 [ 1088.702034][ T5836] quatech2: probe of 5-1:0.51 failed with error -71 [ 1088.718604][ T5836] usb 5-1: USB disconnect, device number 48 [ 1088.737492][T15057] udevd[15057]: setting mode of /dev/bus/usb/005/048 to 020664 failed: No such file or directory [ 1088.756733][T15245] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2679'. [ 1088.770424][T15057] udevd[15057]: setting owner of /dev/bus/usb/005/048 to uid=0, gid=0 failed: No such file or directory [ 1089.420469][T15252] comedi comedi1: pcl812: I/O port conflict (0x100,16) [ 1091.041101][T15250] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1091.471368][T15256] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2683'. [ 1091.530966][T15256] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2683'. [ 1092.570639][ T5836] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 1092.847897][ T5836] usb 3-1: not running at top speed; connect to a high speed hub [ 1092.950840][ T5836] usb 3-1: config 0 has no interfaces? [ 1093.030870][ T5836] usb 3-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 1093.140567][ T5836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1093.216274][ T5836] usb 3-1: Product: syz [ 1093.240716][ T5836] usb 3-1: Manufacturer: syz [ 1093.279033][ T5836] usb 3-1: config 0 descriptor?? [ 1095.085346][T14306] usb 3-1: USB disconnect, device number 61 [ 1095.560989][T15288] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2696'. [ 1095.571249][T15288] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2696'. [ 1096.317272][T15296] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2697'. [ 1096.357865][T15296] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1096.366937][T15296] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1096.375762][T15296] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1096.384695][T15296] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1096.433941][T15296] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1096.443401][T15296] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1096.452553][T15296] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1096.464606][T15296] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1096.972791][T15296] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2697'. [ 1097.002505][T15296] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1097.011396][T15296] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1097.020199][T15296] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1097.028930][T15296] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1097.064130][T15296] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1097.074665][T15296] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1097.083846][T15296] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1097.093064][T15296] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1099.560285][T15315] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2703'. [ 1099.716072][T15319] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2706'. [ 1099.741548][T15319] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2706'. [ 1099.839143][T15323] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2694'. [ 1100.300278][ T5836] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1100.500863][ T5836] usb 5-1: Using ep0 maxpacket: 32 [ 1100.513893][ T5836] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 1100.542536][ T5836] usb 5-1: config 0 has an invalid descriptor of length 10, skipping remainder of the config [ 1100.592632][ T5836] usb 5-1: config 0 has no interface number 0 [ 1100.615490][ T5836] usb 5-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1100.732591][ T5836] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1100.791642][ T5836] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1100.799681][ T5836] usb 5-1: Product: syz [ 1100.806145][ T5836] usb 5-1: Manufacturer: syz [ 1100.811196][ T5836] usb 5-1: SerialNumber: syz [ 1100.870043][ T5836] usb 5-1: config 0 descriptor?? [ 1101.021630][ T5836] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1101.256665][ T5836] usb 5-1: qt2_attach - failed to power on unit: -71 [ 1101.300414][ T5836] quatech2: probe of 5-1:0.51 failed with error -71 [ 1101.390393][ T5836] usb 5-1: USB disconnect, device number 49 [ 1105.759736][T15379] overlayfs: overlapping lowerdir path [ 1106.970490][T15385] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2724'. [ 1107.050712][T15384] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2726'. [ 1107.310556][ T5836] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1107.465999][T15394] syz_tun: entered allmulticast mode [ 1107.498761][T15394] syz_tun: left allmulticast mode [ 1107.520858][ T5836] usb 1-1: Using ep0 maxpacket: 32 [ 1107.547333][ T5836] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 1107.584127][ T5836] usb 1-1: config 0 has an invalid descriptor of length 10, skipping remainder of the config [ 1107.671870][ T5836] usb 1-1: config 0 has no interface number 0 [ 1107.746735][ T5836] usb 1-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1107.849873][ T5836] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1107.859200][ T5836] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1107.867999][ T5836] usb 1-1: Product: syz [ 1107.897177][ T5836] usb 1-1: Manufacturer: syz [ 1107.910148][ T5836] usb 1-1: SerialNumber: syz [ 1107.928723][ T5836] usb 1-1: config 0 descriptor?? [ 1107.981829][ T5836] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1108.352509][ T5836] usb 1-1: qt2_attach - failed to power on unit: -71 [ 1108.445098][ T5836] quatech2: probe of 1-1:0.51 failed with error -71 [ 1108.534196][ T5836] usb 1-1: USB disconnect, device number 28 [ 1109.241454][T15413] overlayfs: overlapping lowerdir path [ 1110.677349][T15422] comedi comedi1: pcl812: I/O port conflict (0x100,16) [ 1113.573496][T14888] Bluetooth: hci0: command 0x0406 tx timeout [ 1114.515931][T15447] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2745'. [ 1115.100162][T15453] overlayfs: overlapping lowerdir path [ 1116.218768][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.270220][T11433] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1116.650163][T11433] usb 2-1: Using ep0 maxpacket: 32 [ 1116.657634][T11433] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1116.680176][T11433] usb 2-1: config 0 has an invalid descriptor of length 10, skipping remainder of the config [ 1116.691620][T15467] comedi comedi1: pcl812: I/O port conflict (0x100,16) [ 1116.710159][T11433] usb 2-1: config 0 has no interface number 0 [ 1116.716373][T11433] usb 2-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1116.753150][T11433] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1116.770300][T11433] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1116.778379][T11433] usb 2-1: Product: syz [ 1116.790382][T11433] usb 2-1: Manufacturer: syz [ 1116.795061][T11433] usb 2-1: SerialNumber: syz [ 1116.821478][T11433] usb 2-1: config 0 descriptor?? [ 1116.837620][T11433] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1117.048425][T11433] usb 2-1: qt2_attach - failed to power on unit: -71 [ 1117.066647][T11433] quatech2: probe of 2-1:0.51 failed with error -71 [ 1117.101118][T11433] usb 2-1: USB disconnect, device number 50 [ 1118.740923][T15489] overlayfs: overlapping lowerdir path [ 1120.573162][T11425] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1120.760790][T11425] usb 5-1: Using ep0 maxpacket: 8 [ 1120.776844][T11425] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1120.794397][T11425] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1120.810583][T11425] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1120.848955][T11425] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1120.858353][T11425] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1120.866999][T11425] usb 5-1: Product: syz [ 1120.871453][T11425] usb 5-1: Manufacturer: syz [ 1120.924249][T11425] usb 5-1: SerialNumber: syz [ 1121.122024][T15501] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2760'. [ 1121.221931][T11425] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 1121.229048][T11425] cdc_ncm 5-1:1.0: bind() failure [ 1121.280408][T11425] usb 5-1: USB disconnect, device number 50 [ 1121.313458][T15497] udevd[15497]: setting mode of /dev/bus/usb/005/050 to 020664 failed: No such file or directory [ 1121.346205][T15497] udevd[15497]: setting owner of /dev/bus/usb/005/050 to uid=0, gid=0 failed: No such file or directory [ 1121.428180][T15509] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2763'. [ 1121.454862][ T5836] IPVS: starting estimator thread 0... [ 1121.558909][T15510] IPVS: using max 17 ests per chain, 40800 per kthread [ 1121.730536][ T5836] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1122.440039][T15519] overlayfs: overlapping lowerdir path [ 1123.493523][ T5836] usb 3-1: Using ep0 maxpacket: 32 [ 1123.503120][ T5836] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 1123.513532][ T5836] usb 3-1: config 0 has an invalid descriptor of length 10, skipping remainder of the config [ 1123.524866][ T5836] usb 3-1: config 0 has no interface number 0 [ 1123.534891][ T5836] usb 3-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1123.588639][ T5836] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1123.614791][ T5836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1123.643442][ T5836] usb 3-1: Product: syz [ 1123.647688][ T5836] usb 3-1: Manufacturer: syz [ 1123.674410][ T5836] usb 3-1: SerialNumber: syz [ 1123.688371][ T5836] usb 3-1: config 0 descriptor?? [ 1123.705808][ T5836] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1124.527454][ T5836] usb 3-1: qt2_attach - failed to power on unit: -71 [ 1124.555938][ T5836] quatech2: probe of 3-1:0.51 failed with error -71 [ 1124.582549][ T5836] usb 3-1: USB disconnect, device number 62 [ 1124.910403][T15531] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1126.782683][T15549] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2775'. [ 1127.769998][T15561] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2778'. [ 1128.126068][T15566] comedi comedi1: pcl812: I/O port conflict (0x100,16) [ 1128.214236][T15569] syz.2.2779: attempt to access beyond end of device [ 1128.214236][T15569] nbd2: rw=0, sector=2, nr_sectors = 1 limit=0 [ 1128.250614][T11427] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1128.533334][T11427] usb 5-1: Using ep0 maxpacket: 32 [ 1128.551603][T11427] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 1128.586134][T11427] usb 5-1: config 0 has an invalid descriptor of length 10, skipping remainder of the config [ 1128.809725][T11427] usb 5-1: config 0 has no interface number 0 [ 1128.819895][T11427] usb 5-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1128.882664][T11427] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1128.915141][T11427] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1128.947333][T11427] usb 5-1: Product: syz [ 1129.038961][T11427] usb 5-1: Manufacturer: syz [ 1129.050589][T11427] usb 5-1: SerialNumber: syz [ 1129.066634][T11427] usb 5-1: config 0 descriptor?? [ 1129.781272][T11427] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1130.059127][T11427] usb 5-1: qt2_attach - failed to power on unit: -71 [ 1130.154619][T11427] quatech2: probe of 5-1:0.51 failed with error -71 [ 1130.186057][T11427] usb 5-1: USB disconnect, device number 51 [ 1130.408005][T15583] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2785'. [ 1130.684846][T15587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2786'. [ 1131.283134][T15589] overlayfs: missing 'lowerdir' [ 1134.612257][T15607] netlink: 'syz.2.2791': attribute type 1 has an invalid length. [ 1134.677210][T15607] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1134.696664][T15609] bond1: (slave geneve2): making interface the new active one [ 1134.709766][T15609] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1135.781044][T15628] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2795'. [ 1137.640468][T14306] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1137.860776][T14306] usb 1-1: Using ep0 maxpacket: 32 [ 1137.888334][T14306] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 1137.900257][T14306] usb 1-1: config 0 has an invalid descriptor of length 10, skipping remainder of the config [ 1137.930213][T14306] usb 1-1: config 0 has no interface number 0 [ 1137.937255][T14306] usb 1-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1137.993862][T14306] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1138.020423][T14306] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1138.028475][T14306] usb 1-1: Product: syz [ 1138.060206][T14306] usb 1-1: Manufacturer: syz [ 1138.064873][T14306] usb 1-1: SerialNumber: syz [ 1138.092218][T14306] usb 1-1: config 0 descriptor?? [ 1138.105313][T14306] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1138.277013][ T27] audit: type=1326 audit(1785793627.372:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15636 comm="syz.4.2789" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37699e019 code=0x7ffc0000 [ 1138.316906][T14306] usb 1-1: qt2_attach - failed to power on unit: -71 [ 1138.322896][ T27] audit: type=1326 audit(1785793627.372:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15636 comm="syz.4.2789" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37699e019 code=0x7ffc0000 [ 1138.358560][ T27] audit: type=1326 audit(1785793627.372:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15636 comm="syz.4.2789" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37699e019 code=0x7ffc0000 [ 1138.387046][T14306] quatech2: probe of 1-1:0.51 failed with error -71 [ 1138.438898][T14306] usb 1-1: USB disconnect, device number 29 [ 1138.477437][ T27] audit: type=1326 audit(1785793627.372:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15636 comm="syz.4.2789" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37699e019 code=0x7ffc0000 [ 1138.544662][ T27] audit: type=1326 audit(1785793627.372:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15636 comm="syz.4.2789" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa37699e019 code=0x7ffc0000 [ 1138.581699][ T27] audit: type=1326 audit(1785793627.372:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15636 comm="syz.4.2789" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37699e019 code=0x7ffc0000 [ 1138.611785][ T27] audit: type=1326 audit(1785793627.372:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15636 comm="syz.4.2789" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37699e019 code=0x7ffc0000 [ 1138.645307][T15643] nfs4: Unknown parameter 'por' [ 1138.655392][ T27] audit: type=1326 audit(1785793627.412:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15636 comm="syz.4.2789" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37699e019 code=0x7ffc0000 [ 1139.409909][ T27] audit: type=1326 audit(1785793627.412:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15636 comm="syz.4.2789" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa37699e019 code=0x7ffc0000 [ 1139.439960][ T27] audit: type=1326 audit(1785793627.432:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15636 comm="syz.4.2789" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa37699e019 code=0x7ffc0000 [ 1140.427418][T15660] overlayfs: missing 'lowerdir' [ 1142.060546][T15671] nfs4: Unknown parameter 'por' [ 1143.935059][T15679] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2810'. [ 1144.719365][T15687] overlay: Unknown parameter '/' [ 1145.810395][ T8] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1146.030702][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 1146.103397][T15696] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000009' [ 1146.119113][T15696] netlink: 'syz.2.2805': attribute type 21 has an invalid length. [ 1146.162153][ T8] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 1147.070297][ T8] usb 1-1: config 0 has an invalid descriptor of length 10, skipping remainder of the config [ 1147.081475][ T8] usb 1-1: config 0 has no interface number 0 [ 1147.087661][ T8] usb 1-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1147.181905][ T8] usb 1-1: string descriptor 0 read error: -71 [ 1147.275641][ T8] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1147.431273][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1147.499577][ T8] usb 1-1: config 0 descriptor?? [ 1147.537067][ T8] usb 1-1: can't set config #0, error -71 [ 1147.565589][ T8] usb 1-1: USB disconnect, device number 30 [ 1149.201824][T15716] overlay: Unknown parameter '/' [ 1150.459436][T15723] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2824'. [ 1150.605403][T15729] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000009' [ 1150.623798][T15729] netlink: 'syz.0.2825': attribute type 21 has an invalid length. [ 1150.770267][ T5836] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1151.541083][ T5836] usb 5-1: Using ep0 maxpacket: 32 [ 1151.552932][ T5836] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 1151.569643][ T5836] usb 5-1: config 0 has an invalid descriptor of length 10, skipping remainder of the config [ 1151.595600][ T5836] usb 5-1: config 0 has no interface number 0 [ 1151.610496][ T5836] usb 5-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1151.635907][T15733] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 1151.642488][T15733] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1151.643052][ T5836] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1151.680367][ T5836] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1151.700525][ T5836] usb 5-1: Product: syz [ 1151.704754][ T5836] usb 5-1: Manufacturer: syz [ 1151.709387][ T5836] usb 5-1: SerialNumber: syz [ 1151.712051][T15733] vhci_hcd vhci_hcd.0: Device attached [ 1151.736576][ T5836] usb 5-1: config 0 descriptor?? [ 1151.763691][ T5836] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1151.992058][T11425] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 1152.015823][ T5836] usb 5-1: qt2_attach - failed to power on unit: -71 [ 1152.028204][T11427] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1152.150736][ T5836] quatech2: probe of 5-1:0.51 failed with error -71 [ 1152.273578][T11427] usb 1-1: Using ep0 maxpacket: 16 [ 1152.348952][ T5836] usb 5-1: USB disconnect, device number 52 [ 1152.514861][T15734] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 1152.566131][T11427] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1152.665000][T15735] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 1152.690764][T11427] usb 1-1: no configurations [ 1152.700572][ T6357] vhci_hcd: stop threads [ 1152.704880][ T6357] vhci_hcd: release socket [ 1152.719503][T11427] usb 1-1: can't read configurations, error -22 [ 1152.738638][ T6357] vhci_hcd: disconnect device [ 1154.922491][T15752] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2830'. [ 1155.499283][T15755] overlay: Unknown parameter '/' [ 1156.949866][T15768] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000009' [ 1156.969982][T15768] netlink: 'syz.0.2834': attribute type 21 has an invalid length. [ 1157.790775][T11425] vhci_hcd: vhci_device speed not set [ 1158.566287][T15784] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2839'. [ 1164.339706][T15811] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000009' [ 1164.357986][T15811] netlink: 'syz.2.2845': attribute type 21 has an invalid length. [ 1165.412330][T15824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2849'. [ 1170.888676][T15847] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000009' [ 1170.906790][T15847] netlink: 'syz.1.2857': attribute type 21 has an invalid length. [ 1176.246791][T15885] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000009' [ 1176.264210][T15885] netlink: 'syz.2.2868': attribute type 21 has an invalid length. [ 1177.450667][T15889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2863'. [ 1177.624319][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1181.297957][T15905] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1184.271439][T15925] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000009' [ 1184.285994][T15925] netlink: 'syz.1.2878': attribute type 21 has an invalid length. [ 1185.596373][T15933] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1186.740291][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1187.067389][T15941] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1190.349103][T15975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2883'. [ 1192.814062][T15978] tmpfs: Unknown parameter 'nr_blhcks' [ 1194.429227][T15983] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1198.111613][T12006] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 1198.279580][T16010] Bluetooth: MGMT ver 1.22 [ 1200.667174][T16023] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1201.749009][T14888] Bluetooth: hci0: command 0x0406 tx timeout [ 1202.180489][T14888] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1202.189456][T14888] Bluetooth: hci0: Injecting HCI hardware error event [ 1202.199573][T14888] Bluetooth: hci0: hardware error 0x00 [ 1203.850738][T16032] lo: entered allmulticast mode [ 1203.902289][T16032] tunl0: entered allmulticast mode [ 1204.125109][T16032] gre0: entered allmulticast mode [ 1204.340300][T14888] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1204.992457][T16032] gretap0: entered allmulticast mode [ 1205.155725][T16032] erspan0: entered allmulticast mode [ 1205.209777][T16032] ip_vti0: entered allmulticast mode [ 1205.257980][T16032] ip6_vti0: entered allmulticast mode [ 1206.401361][T16054] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1209.602825][ T6256] bond0: (slave bond_slave_0): interface is now down [ 1209.621550][ T6256] bond0: (slave bond_slave_1): interface is now down [ 1209.644035][ T6256] bond0: now running without any active interface! [ 1209.667119][T16084] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1210.903937][T11436] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1211.121782][T11436] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1211.133805][T11436] usb 1-1: config 0 has no interfaces? [ 1211.147327][T11436] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1211.272465][T11436] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1211.466066][T11436] usb 1-1: config 0 descriptor?? [ 1213.350511][T11427] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1213.540806][T11427] usb 3-1: Using ep0 maxpacket: 8 [ 1213.559435][T11427] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1213.577160][T11427] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1213.589581][T11427] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1214.137719][T16150] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1215.209387][T11427] usb 3-1: config 0 descriptor?? [ 1215.211045][T16120] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1215.370368][T11436] usb 1-1: USB disconnect, device number 33 [ 1215.460697][T11427] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1215.810524][T16158] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2949'. [ 1216.574634][ T5813] usb 3-1: USB disconnect, device number 63 [ 1219.430916][ T5813] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 1220.080222][T16180] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1221.365385][ T5813] usb 3-1: device descriptor read/all, error -71 [ 1221.620710][T16187] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2958'. [ 1224.165876][T16218] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2968'. [ 1228.130516][T16253] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2979'. [ 1229.353883][T16268] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2983'. [ 1230.824713][T16288] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2990'. [ 1231.768822][T16296] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2993'. [ 1234.021118][T16318] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3000'. [ 1237.328637][T16348] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3011'. [ 1238.200404][ T28] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1238.451960][ T28] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1238.464080][ T28] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1238.474006][ T28] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1238.485506][ T28] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1238.495284][ T28] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1238.635567][ T28] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 1238.914997][ T28] snd-usb-audio: probe of 2-1:27.0 failed with error -12 [ 1239.064008][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.687772][ T28] usb 2-1: USB disconnect, device number 51 [ 1240.386420][T16374] udevd[16374]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1240.664987][T16385] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3022'. [ 1241.882172][T16408] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3031'. [ 1246.038782][T16449] comedi comedi1: pcl812: I/O port conflict (0x100,16) [ 1247.189963][T16467] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3047'. [ 1251.079263][T16482] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3054'. [ 1253.637998][T16515] tmpfs: Unknown parameter 'nr_blhcks' [ 1258.095689][T16551] tmpfs: Unknown parameter 'nr_blhcks' [ 1261.651969][T16588] tmpfs: Unknown parameter 'nr_blhcks' [ 1265.548926][T16615] tmpfs: Unknown parameter 'nr_blhcks' [ 1268.857719][T16650] tmpfs: Unknown parameter 'nr_blhcks' [ 1271.880311][T16686] tmpfs: Unknown parameter 'nr_blhcks' [ 1272.524033][T16689] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3117'. [ 1272.994188][T16698] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3120'. [ 1274.817462][T16717] tmpfs: Unknown parameter 'nr_blhcks' [ 1274.823971][T11439] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1275.780343][T11439] usb 1-1: Using ep0 maxpacket: 8 [ 1275.787806][T11439] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1276.209647][T11439] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1276.483915][T11439] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1276.507369][T11439] usb 1-1: config 0 descriptor?? [ 1276.723750][T11439] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1276.925901][ C1] ================================================================== [ 1276.934033][ C1] BUG: KASAN: slab-out-of-bounds in dummy_timer+0xca7/0x34e0 [ 1276.941567][ C1] Read of size 1 at addr ffff8880607e5532 by task syz.0.3124/16712 [ 1276.949535][ C1] [ 1276.951912][ C1] CPU: 1 PID: 16712 Comm: syz.0.3124 Not tainted syzkaller #0 [ 1276.959379][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1276.969473][ C1] Call Trace: [ 1276.972768][ C1] [ 1276.975734][ C1] dump_stack_lvl+0x18c/0x250 [ 1276.980471][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 1276.985555][ C1] ? show_regs_print_info+0x20/0x20 [ 1276.990793][ C1] ? load_image+0x420/0x420 [ 1276.995361][ C1] ? __virt_addr_valid+0x10c/0x380 [ 1277.000517][ C1] ? __virt_addr_valid+0x10c/0x380 [ 1277.005644][ C1] ? __virt_addr_valid+0x10c/0x380 [ 1277.010779][ C1] print_report+0xa8/0x210 [ 1277.015202][ C1] ? dummy_timer+0xca7/0x34e0 [ 1277.019892][ C1] kasan_report+0x117/0x150 [ 1277.024413][ C1] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 1277.029935][ C1] ? dummy_timer+0xca7/0x34e0 [ 1277.034646][ C1] dummy_timer+0xca7/0x34e0 [ 1277.039177][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 1277.044215][ C1] ? lock_chain_count+0x20/0x20 [ 1277.049088][ C1] ? dummy_free_streams+0x520/0x520 [ 1277.054296][ C1] ? dummy_free_streams+0x520/0x520 [ 1277.059529][ C1] __hrtimer_run_queues+0x525/0xc10 [ 1277.064749][ C1] ? hrtimer_interrupt+0x980/0x980 [ 1277.069872][ C1] ? read_tsc+0x9/0x20 [ 1277.073957][ C1] hrtimer_run_softirq+0x177/0x290 [ 1277.079086][ C1] handle_softirqs+0x27d/0x820 [ 1277.083883][ C1] ? read_tsc+0x9/0x20 [ 1277.087965][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 1277.092755][ C1] ? do_softirq+0x1a0/0x1a0 [ 1277.097296][ C1] __irq_exit_rcu+0xd3/0x190 [ 1277.101925][ C1] ? irq_exit_rcu+0x20/0x20 [ 1277.106458][ C1] irq_exit_rcu+0x9/0x20 [ 1277.110709][ C1] sysvec_apic_timer_interrupt+0x56/0xc0 [ 1277.116356][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1277.122355][ C1] RIP: 0033:0x7ff53b4517c3 [ 1277.126783][ C1] Code: 00 00 00 0f 1f 40 00 41 89 fb 44 8d 56 04 4c 8d 0d 52 08 3c 00 89 f0 4c 8d 05 49 e8 3b 00 89 c2 81 e2 ff 1f 00 00 49 8b 0c d1 <48> 39 f1 74 28 48 85 c9 74 29 45 38 1c 10 75 23 83 c0 01 44 39 d0 [ 1277.146408][ C1] RSP: 002b:00007ffc84439a18 EFLAGS: 00000202 [ 1277.152487][ C1] RAX: 0000000081ef8ab5 RBX: ffffffff81ef8ab5 RCX: ffffffff81796ab5 [ 1277.160490][ C1] RDX: 0000000000000ab5 RSI: ffffffff81ef8ab5 RDI: 0000000000000002 [ 1277.168464][ C1] RBP: 0000000000000000 R08: 00007ff53b810000 R09: 00007ff53b812000 [ 1277.176443][ C1] R10: 0000000081ef8ab9 R11: 0000000000000002 R12: 00007ff53b826038 [ 1277.184418][ C1] R13: 0000000000001012 R14: ffffffff81ef8061 R15: 00007ff53c355720 [ 1277.192488][ C1] ? init_file+0x21/0x1f0 [ 1277.196847][ C1] ? alloc_file+0x2b5/0x600 [ 1277.201357][ C1] ? do_timer_create+0x155/0x1300 [ 1277.206384][ C1] ? alloc_file+0x2b5/0x600 [ 1277.210904][ C1] [ 1277.213935][ C1] [ 1277.216258][ C1] Allocated by task 12843: [ 1277.220746][ C1] kasan_set_track+0x4e/0x70 [ 1277.225369][ C1] __kasan_kmalloc+0x8f/0xa0 [ 1277.229997][ C1] device_add+0xb6/0xc40 [ 1277.234277][ C1] netdev_register_kobject+0x188/0x320 [ 1277.239853][ C1] register_netdevice+0x12aa/0x1ba0 [ 1277.245099][ C1] veth_newlink+0x5cb/0xc70 [ 1277.249632][ C1] rtnl_newlink+0x15a0/0x2170 [ 1277.254349][ C1] rtnetlink_rcv_msg+0x843/0xf90 [ 1277.259290][ C1] netlink_rcv_skb+0x235/0x4c0 [ 1277.264110][ C1] netlink_unicast+0x7b1/0x930 [ 1277.268922][ C1] netlink_sendmsg+0x8d0/0xbf0 [ 1277.273686][ C1] __sys_sendto+0x4a9/0x6b0 [ 1277.278243][ C1] __x64_sys_sendto+0xde/0xf0 [ 1277.282963][ C1] do_syscall_64+0x55/0xb0 [ 1277.287394][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1277.293296][ C1] [ 1277.295624][ C1] Last potentially related work creation: [ 1277.301339][ C1] kasan_save_stack+0x3e/0x60 [ 1277.306024][ C1] __kasan_record_aux_stack+0xaf/0xc0 [ 1277.311406][ C1] call_rcu+0x153/0x900 [ 1277.315574][ C1] ip6_route_info_create+0xa0d/0x1260 [ 1277.321035][ C1] ip6_route_add+0x28/0x160 [ 1277.325544][ C1] addrconf_prefix_route+0x24d/0x330 [ 1277.330870][ C1] inet6_addr_add+0x62f/0xb30 [ 1277.335551][ C1] inet6_rtm_newaddr+0x6fd/0x9d0 [ 1277.340502][ C1] rtnetlink_rcv_msg+0x843/0xf90 [ 1277.345451][ C1] netlink_rcv_skb+0x235/0x4c0 [ 1277.350220][ C1] netlink_unicast+0x7b1/0x930 [ 1277.355012][ C1] netlink_sendmsg+0x8d0/0xbf0 [ 1277.359783][ C1] __sys_sendto+0x4a9/0x6b0 [ 1277.364298][ C1] __x64_sys_sendto+0xde/0xf0 [ 1277.368993][ C1] do_syscall_64+0x55/0xb0 [ 1277.373413][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1277.379309][ C1] [ 1277.381635][ C1] The buggy address belongs to the object at ffff8880607e5400 [ 1277.381635][ C1] which belongs to the cache kmalloc-512 of size 512 [ 1277.395717][ C1] The buggy address is located 34 bytes to the right of [ 1277.395717][ C1] allocated 272-byte region [ffff8880607e5400, ffff8880607e5510) [ 1277.410308][ C1] [ 1277.412698][ C1] The buggy address belongs to the physical page: [ 1277.419174][ C1] page:ffffea000181f900 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x607e4 [ 1277.429324][ C1] head:ffffea000181f900 order:2 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1277.438271][ C1] anon flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1277.446684][ C1] page_type: 0xffffffff() [ 1277.451015][ C1] raw: 00fff00000000840 ffff888017c41c80 0000000000000000 dead000000000001 [ 1277.459595][ C1] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 1277.468175][ C1] page dumped because: kasan: bad access detected [ 1277.474583][ C1] page_owner tracks the page as allocated [ 1277.480298][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 11, tgid 11 (kworker/u4:0), ts 86262827127, free_ts 29886264282 [ 1277.499236][ C1] post_alloc_hook+0x1c1/0x200 [ 1277.504054][ C1] get_page_from_freelist+0x2181/0x22a0 [ 1277.509609][ C1] __alloc_pages+0x1f0/0x460 [ 1277.514208][ C1] alloc_slab_page+0x5d/0x180 [ 1277.518890][ C1] new_slab+0x87/0x2d0 [ 1277.522958][ C1] ___slab_alloc+0xc5c/0x12f0 [ 1277.527638][ C1] __kmem_cache_alloc_node+0x11f/0x250 [ 1277.533109][ C1] __kmalloc+0xa7/0x240 [ 1277.537271][ C1] fib6_info_alloc+0x30/0xf0 [ 1277.541928][ C1] ip6_route_info_create+0x455/0x1260 [ 1277.547309][ C1] ip6_route_add+0x28/0x160 [ 1277.551819][ C1] addrconf_add_linklocal+0x44d/0x6d0 [ 1277.557201][ C1] addrconf_addr_gen+0x50e/0x620 [ 1277.562140][ C1] addrconf_init_auto_addrs+0x720/0xac0 [ 1277.567685][ C1] addrconf_notify+0xb62/0x1010 [ 1277.572541][ C1] notifier_call_chain+0x18f/0x380 [ 1277.577658][ C1] page last free stack trace: [ 1277.582327][ C1] free_unref_page_prepare+0x7d7/0x8f0 [ 1277.587813][ C1] free_unref_page+0x32/0x2e0 [ 1277.592490][ C1] free_contig_range+0xa1/0x150 [ 1277.597341][ C1] destroy_args+0x7d/0x840 [ 1277.601849][ C1] debug_vm_pgtable+0x411/0x440 [ 1277.606732][ C1] do_one_initcall+0x242/0x790 [ 1277.611509][ C1] do_initcall_level+0x13d/0x1f0 [ 1277.616524][ C1] do_initcalls+0x69/0xd0 [ 1277.620871][ C1] kernel_init_freeable+0x3d9/0x560 [ 1277.626100][ C1] kernel_init+0x1d/0x1c0 [ 1277.630454][ C1] ret_from_fork+0x48/0x80 [ 1277.634893][ C1] ret_from_fork_asm+0x11/0x20 [ 1277.639665][ C1] [ 1277.641990][ C1] Memory state around the buggy address: [ 1277.647642][ C1] ffff8880607e5400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1277.655738][ C1] ffff8880607e5480: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1277.663808][ C1] >ffff8880607e5500: 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1277.671872][ C1] ^ [ 1277.677539][ C1] ffff8880607e5580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1277.685611][ C1] ffff8880607e5600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1277.693676][ C1] ================================================================== [ 1277.701769][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1277.709010][ C1] CPU: 1 PID: 16712 Comm: syz.0.3124 Not tainted syzkaller #0 [ 1277.716470][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1277.726531][ C1] Call Trace: [ 1277.729831][ C1] [ 1277.732792][ C1] dump_stack_lvl+0x18c/0x250 [ 1277.737487][ C1] ? show_regs_print_info+0x20/0x20 [ 1277.742714][ C1] ? load_image+0x420/0x420 [ 1277.747271][ C1] panic+0x2ca/0x720 [ 1277.751206][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 1277.755730][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1277.761643][ C1] ? _raw_spin_unlock+0x40/0x40 [ 1277.766505][ C1] ? print_memory_metadata+0x314/0x400 [ 1277.771997][ C1] ? dummy_timer+0xca7/0x34e0 [ 1277.776705][ C1] check_panic_on_warn+0x84/0xa0 [ 1277.781652][ C1] ? dummy_timer+0xca7/0x34e0 [ 1277.786335][ C1] end_report+0x6f/0x130 [ 1277.790596][ C1] kasan_report+0x128/0x150 [ 1277.795119][ C1] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 1277.800590][ C1] ? dummy_timer+0xca7/0x34e0 [ 1277.805274][ C1] dummy_timer+0xca7/0x34e0 [ 1277.809814][ C1] ? __lock_acquire+0x7d80/0x7d80 [ 1277.814871][ C1] ? lock_chain_count+0x20/0x20 [ 1277.819730][ C1] ? dummy_free_streams+0x520/0x520 [ 1277.824953][ C1] ? dummy_free_streams+0x520/0x520 [ 1277.830165][ C1] __hrtimer_run_queues+0x525/0xc10 [ 1277.835417][ C1] ? hrtimer_interrupt+0x980/0x980 [ 1277.840556][ C1] ? read_tsc+0x9/0x20 [ 1277.844653][ C1] hrtimer_run_softirq+0x177/0x290 [ 1277.849772][ C1] handle_softirqs+0x27d/0x820 [ 1277.854550][ C1] ? read_tsc+0x9/0x20 [ 1277.858628][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 1277.863405][ C1] ? do_softirq+0x1a0/0x1a0 [ 1277.867932][ C1] __irq_exit_rcu+0xd3/0x190 [ 1277.872530][ C1] ? irq_exit_rcu+0x20/0x20 [ 1277.877056][ C1] irq_exit_rcu+0x9/0x20 [ 1277.881305][ C1] sysvec_apic_timer_interrupt+0x56/0xc0 [ 1277.886946][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1277.892940][ C1] RIP: 0033:0x7ff53b4517c3 [ 1277.897365][ C1] Code: 00 00 00 0f 1f 40 00 41 89 fb 44 8d 56 04 4c 8d 0d 52 08 3c 00 89 f0 4c 8d 05 49 e8 3b 00 89 c2 81 e2 ff 1f 00 00 49 8b 0c d1 <48> 39 f1 74 28 48 85 c9 74 29 45 38 1c 10 75 23 83 c0 01 44 39 d0 [ 1277.916989][ C1] RSP: 002b:00007ffc84439a18 EFLAGS: 00000202 [ 1277.923078][ C1] RAX: 0000000081ef8ab5 RBX: ffffffff81ef8ab5 RCX: ffffffff81796ab5 [ 1277.931058][ C1] RDX: 0000000000000ab5 RSI: ffffffff81ef8ab5 RDI: 0000000000000002 [ 1277.939032][ C1] RBP: 0000000000000000 R08: 00007ff53b810000 R09: 00007ff53b812000 [ 1277.947009][ C1] R10: 0000000081ef8ab9 R11: 0000000000000002 R12: 00007ff53b826038 [ 1277.954990][ C1] R13: 0000000000001012 R14: ffffffff81ef8061 R15: 00007ff53c355720 [ 1277.962972][ C1] ? init_file+0x21/0x1f0 [ 1277.967312][ C1] ? alloc_file+0x2b5/0x600 [ 1277.971820][ C1] ? do_timer_create+0x155/0x1300 [ 1277.976852][ C1] ? alloc_file+0x2b5/0x600 [ 1277.981373][ C1] [ 1277.984982][ C1] Kernel Offset: disabled [ 1277.989312][ C1] Rebooting in 86400 seconds..