last executing test programs: 24.610069099s ago: executing program 3 (id=547): r0 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0) move_mount(r1, &(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) 21.443753813s ago: executing program 3 (id=554): socket$nl_rdma(0x10, 0x3, 0x14) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$vim2m(0x0, 0x3fe, 0x2) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000356ffc)=0xffbfff40, 0x4) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) 18.306537491s ago: executing program 1 (id=562): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(0x0, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000008840), 0x0, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) socket$inet6_sctp(0xa, 0x1, 0x84) openat$comedi(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TCFLSH(r0, 0x540b, 0x2) 13.968648331s ago: executing program 3 (id=571): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000003, 0xfa11, 0xffffffff}, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="240000001a005f0400f9f407000904018020200000000000000000000800010000000000", 0x24) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r5 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000100)=0x2) ioctl$SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045017, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_DRAIN(r6, 0x4144, 0x0) 13.368822306s ago: executing program 1 (id=573): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_vs\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) ioctl$HIDIOCSREPORT(0xffffffffffffffff, 0x400c4808, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x10) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x1ff, 0x0, 0xfffffe0000000001, 0xfa11}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x200301, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0xf400000000000000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x14, 0x0, 0x1, 0x8, 0xfffffffe, {0x1e}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x90) sendmsg$key(r2, 0x0, 0x40408c0) r6 = syz_open_dev$video(&(0x7f0000000040), 0x7f, 0x0) ioctl$VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x3, 0x40000043, 0x3234564e, 0x8, 0x0, 0xfffffff3, 0xc, 0xfeedcafe, 0x2, 0x6, 0x2, 0x1}}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) preadv(r0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/181, 0xb5}], 0x1, 0x6, 0x1) 13.177832442s ago: executing program 2 (id=574): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'vlan1\x00'}}, 0x1e) sendmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 12.446735535s ago: executing program 2 (id=575): socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r4, 0x0, 0x0, 0x1000000000) syz_usb_connect(0x2, 0x36, &(0x7f00000008c0)=ANY=[@ANYBLOB="120100001b767f2051045251b9c0010203030902240001000000000904000002526f590009050d00000000000009050a02"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r5], 0x20}}, 0x0) 9.946819212s ago: executing program 1 (id=581): socket$nl_rdma(0x10, 0x3, 0x14) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$vim2m(0x0, 0x3fe, 0x2) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000356ffc)=0xffbfff40, 0x4) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) 9.501150066s ago: executing program 3 (id=583): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(0x0, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000008840), 0x0, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) socket$inet6_sctp(0xa, 0x1, 0x84) openat$comedi(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TCFLSH(r0, 0x540b, 0x2) 9.059763548s ago: executing program 3 (id=584): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000a0000004200"], 0x50) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socket(0x23, 0x6, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)=0x0) sched_setattr(r2, &(0x7f0000000300)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4009, 0x100000001, 0xffffffff, 0x108, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(&(0x7f0000000200)='./file1/file3\x00', &(0x7f00000002c0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) clock_gettime(0x8, &(0x7f0000001ac0)) mknod(&(0x7f00000000c0)='./file1/file3\x00', 0xc000, 0x81b) prctl$PR_SCHED_CORE(0x41, 0x3, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x9e5c1000) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0}}]}}, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000bfe000/0x400000)=nil) openat$fuse(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/oss_mixer\x00', 0x101001, 0x0) 7.156586673s ago: executing program 2 (id=589): socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') pipe(&(0x7f0000000040)) socket(0x10, 0x3, 0x0) pipe(&(0x7f0000000100)) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r2, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 6.511559829s ago: executing program 2 (id=592): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f0000000200)={0x0, 0x54, {0x51, 0x0, 0xf, {0xfff5, 0x4}, {0xffc0, 0x5}, @const={0xfff, {0xd85d, 0x7, 0x1, 0x2}}}, {0x56, 0x0, 0xb0a6, {0x0, 0x91}, {0xfff, 0x9}, @cond=[{0x40, 0x5, 0x1, 0x9, 0x8, 0x2}, {0x2, 0x5, 0x7, 0x10, 0x8, 0x7801}]}}) 5.476934486s ago: executing program 2 (id=595): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c6572"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x211}, @TCA_NETEM_SLOT={0x2c, 0xc, {0xfffffffffffffff4, 0x2, 0x2, 0x0, 0x5, 0x7}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x19}, {0xb, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000050}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.414109211s ago: executing program 1 (id=599): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$unix(0x1, 0x1, 0x0) r3 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) prlimit64(0x0, 0xe, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2140, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x106f) socket(0x26, 0x6, 0xffff6d9a) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a18010000060a0b0400000000000000000200000034000480300001800a0001006d617463680000002000028008000240000000030b000100736f636b"], 0x140}, 0x1, 0x0, 0x0, 0x40480e0}, 0x4008014) syz_usb_connect(0x0, 0x59, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r3, 0x40146f2c, &(0x7f0000000100)={0x102, 0x1, 0x3, 0x11, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r3, 0x40026f33, 0x0) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r3, 0x40146f2c, 0x0) socket$nl_route(0x10, 0x3, 0x0) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='affs\x00', 0x200000, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00'}) 4.176173222s ago: executing program 2 (id=600): socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x1, 0x6, 0xfa11, 0xffefffff}, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r4, 0x0, 0x0, 0x1000000000) syz_usb_connect(0x2, 0x36, &(0x7f00000008c0)=ANY=[@ANYBLOB="120100001b767f2051045251b9c0010203030902240001000000000904000002526f590009050d00000000000009050a02"], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r5], 0x20}}, 0x0) 3.728978373s ago: executing program 3 (id=602): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0xfffbfffd, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x400}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @SEG6_LOCAL_BPF={0x10, 0x8, 0x0, 0x1, @SEG6_LOCAL_BPF_PROG_NAME={0xa, 0x2, '*/^\\^\x00'}}}]}, 0x38}}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000240)={0x2, {{0x2, 0x4, @remote}}}, 0x88) open_tree(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x9002) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYRESOCT, @ANYBLOB, @ANYRES64=r3, @ANYRESOCT, @ANYRES8], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x4008800) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f0000000040)=""/185) 2.684332185s ago: executing program 0 (id=604): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$restrict_keyring(0xa, 0x0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000380)='dx\xeb\xf4\xd8&w\xef\xcd1w\xfd2\x19x\xcc\x8d\xabN\xea\xd1\xea\xfa\xc3u\xcdMB\xb2m\xe5Bq\xe3\x9a~\xbe3\xd7\xb1\x16\x8b\xb9\xb6\xc6u\x0f9S\x05\x83n\x01\xa1\x1c\x82\\fsa<\xcd\x18}=A{\x17\xd0\x95\xbd25N\b^\x8eFsTvd)\xad') sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$keyring(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r5, 0x5603, &(0x7f0000000100)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r6, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) sendfile(r4, r6, 0x0, 0x2000000e3aa6ea) ioctl$VIDIOC_SUBDEV_G_FMT(r6, 0xc0585604, &(0x7f0000000400)={0x1, 0x0, {0x4, 0x9, 0x2011, 0x2, 0xb, 0x3, 0x0, 0x3}}) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, r3) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r7, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r7, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x81}]}, 0x10) sendto(r7, &(0x7f0000000900)="50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3ae52a6b2cdb77ef9af2a603a3e78e0355c09f3bdec242443011f0101251bcef800000000000000006dd50205000000a335445845ad1eaedbe2a424", 0x54, 0x4008044, 0x0, 0x0) write$binfmt_misc(r7, &(0x7f0000000000), 0x0) sendto$inet(r7, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) 2.318410311s ago: executing program 0 (id=606): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(0x0, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000008840), 0x0, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) socket$inet6_sctp(0xa, 0x1, 0x84) openat$comedi(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TCFLSH(r0, 0x540b, 0x2) 2.295815173s ago: executing program 1 (id=607): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x400d1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000540)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$binfmt_format(0xffffff9c, 0x0, 0x2, 0x0) clock_gettime(0xfffffffffffffffb, 0x0) mmap(&(0x7f0000a82000/0x3000)=nil, 0x3000, 0x300000a, 0x810, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_usb_connect$uac1(0x1, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) 2.121351164s ago: executing program 4 (id=608): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x1000, 0x40}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0}) 1.398808259s ago: executing program 4 (id=609): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)) close_range(r0, 0xffffffffffffffff, 0x0) 1.388217982s ago: executing program 0 (id=610): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c6572"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x211}, @TCA_NETEM_SLOT={0x2c, 0xc, {0xfffffffffffffff4, 0x2, 0x2, 0x0, 0x5, 0x7}}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x19}, {0xb, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000050}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 709.091607ms ago: executing program 4 (id=611): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) dup2(r1, r1) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) lsm_get_self_attr(0x64, &(0x7f0000000240)={0x0, 0x0, 0xe9, 0xc9, ""/201}, 0x0, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x679, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x1}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000005400)=[{{&(0x7f0000000040)={0xa, 0x4e27, 0xfff, @remote, 0x2}, 0x1c, 0x0}}], 0x40000000000016d, 0x1000) 557.386024ms ago: executing program 0 (id=612): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000a0000004200"], 0x50) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socket(0x23, 0x6, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)=0x0) sched_setattr(r2, &(0x7f0000000300)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4009, 0x100000001, 0xffffffff, 0x108, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(&(0x7f0000000200)='./file1/file3\x00', &(0x7f00000002c0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) clock_gettime(0x8, &(0x7f0000001ac0)) mknod(&(0x7f00000000c0)='./file1/file3\x00', 0xc000, 0x81b) prctl$PR_SCHED_CORE(0x41, 0x3, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x9e5c1000) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0}}]}}, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000bfe000/0x400000)=nil) openat$fuse(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/oss_mixer\x00', 0x101001, 0x0) 394.114789ms ago: executing program 4 (id=613): socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1008, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000140)='wg0\x00', 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffefff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r9, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r11, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r11}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x138, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x3}, {}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}, 0x1, 0x0, 0x0, 0x480d8}, 0x4000000) 235.779905ms ago: executing program 0 (id=614): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0x202) r6 = syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79af, 0x3180, 0x1, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000200)=0xffa, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x48, 0x4007, @fd=r5, 0x87, 0x0, 0x0, 0x16}) io_uring_enter(r6, 0x627, 0x4c1, 0x63, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb00000800030003", @ANYRES32=r2], 0x68}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) 234.068639ms ago: executing program 1 (id=615): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) syz_usb_connect(0x6, 0xffffffffffffff0d, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x21800, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000140)=""/4078, 0xfee}], 0x1, 0xf2, 0x207fff) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r7 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r7, 0x40146f2c, &(0x7f00000000c0)={0x40, 0x1, 0x2, 0xb, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r7, 0x40146f2c, &(0x7f0000000040)={0x4, 0x0, 0x0, 0xb, 0x4}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000012c0)=ANY=[@ANYBLOB="480000006800010003001000fdffff7f00000000000000001c00020002000000ff0000000100000000000000fdffffff080000000c000c8006000e00d43f0000060003"], 0x48}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) 145.068528ms ago: executing program 4 (id=616): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg$inet(r0, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000580)}], 0x1}}], 0x1, 0x20008000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="05000000d8000001118006b05c6a8ce2", @ANYRES64=r1, @ANYRES64=r3, @ANYRES64=0x0, @ANYBLOB="00000080"], 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x5, 0x802, 0x0, {}, {0x77359400}, {0x0, 0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "cb7d302847bb1a28e8a4004b789607ed47df355645f2178a039ed508ff76df3536741848cc6cb65c6e77aad714472cb8856fcdd536f9d9655dcf800549436e96"}}, 0x80}}, 0x800) close_range(r2, 0xffffffffffffffff, 0x0) 71.536848ms ago: executing program 4 (id=617): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$restrict_keyring(0xa, 0x0, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000380)='dx\xeb\xf4\xd8&w\xef\xcd1w\xfd2\x19x\xcc\x8d\xabN\xea\xd1\xea\xfa\xc3u\xcdMB\xb2m\xe5Bq\xe3\x9a~\xbe3\xd7\xb1\x16\x8b\xb9\xb6\xc6u\x0f9S\x05\x83n\x01\xa1\x1c\x82\\fsa<\xcd\x18}=A{\x17\xd0\x95\xbd25N\b^\x8eFsTvd)\xad') sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$keyring(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r5, 0x5603, &(0x7f0000000100)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r6, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) sendfile(r4, r6, 0x0, 0x2000000e3aa6ea) ioctl$VIDIOC_SUBDEV_G_FMT(r6, 0xc0585604, &(0x7f0000000400)={0x1, 0x0, {0x4, 0x9, 0x2011, 0x2, 0xb, 0x3, 0x0, 0x3}}) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, r3) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r7, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r7, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x81}]}, 0x10) sendto(r7, &(0x7f0000000900)="50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3ae52a6b2cdb77ef9af2a603a3e78e0355c09f3bdec242443011f0101251bcef800000000000000006dd50205000000a335445845ad1eaedbe2a424", 0x54, 0x4008044, 0x0, 0x0) write$binfmt_misc(r7, &(0x7f0000000000), 0x0) sendto$inet(r7, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=618): io_uring_setup(0xdac, &(0x7f0000000180)) socket$alg(0x26, 0x5, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x400448ca, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.41' (ED25519) to the list of known hosts. [ 73.841330][ T5784] cgroup: Unknown subsys name 'net' [ 74.082959][ T5784] cgroup: Unknown subsys name 'cpuset' [ 74.158391][ T5784] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.743516][ T5784] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.860522][ T5801] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.861873][ T5801] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.865523][ T5801] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.866180][ T5801] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.877596][ T5803] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.890697][ T5803] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.891739][ T5803] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.892473][ T5803] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.899161][ T5803] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.909614][ T60] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.911380][ T60] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.912029][ T60] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.928882][ T5805] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.932592][ T5805] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.935992][ T5805] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.938625][ T5805] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.949999][ T5807] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.958873][ T5807] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.975038][ T5805] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.975683][ T5805] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.009499][ T5803] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.013376][ T5803] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 78.018156][ T5803] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.021739][ T5803] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 78.022487][ T5803] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.777442][ T5809] chnl_net:caif_netlink_parms(): no params data found [ 78.839093][ T5796] chnl_net:caif_netlink_parms(): no params data found [ 78.844806][ T5799] chnl_net:caif_netlink_parms(): no params data found [ 78.923178][ T5797] chnl_net:caif_netlink_parms(): no params data found [ 78.940794][ T5811] chnl_net:caif_netlink_parms(): no params data found [ 79.155264][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.156512][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.156834][ T5809] bridge_slave_0: entered allmulticast mode [ 79.159083][ T5809] bridge_slave_0: entered promiscuous mode [ 79.224338][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.224417][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.224683][ T5809] bridge_slave_1: entered allmulticast mode [ 79.225956][ T5809] bridge_slave_1: entered promiscuous mode [ 79.254453][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.254550][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.254656][ T5796] bridge_slave_0: entered allmulticast mode [ 79.256034][ T5796] bridge_slave_0: entered promiscuous mode [ 79.280045][ T5799] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.280157][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.280297][ T5799] bridge_slave_0: entered allmulticast mode [ 79.282887][ T5799] bridge_slave_0: entered promiscuous mode [ 79.319065][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.319157][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.319253][ T5796] bridge_slave_1: entered allmulticast mode [ 79.320598][ T5796] bridge_slave_1: entered promiscuous mode [ 79.335058][ T5799] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.335167][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.335718][ T5799] bridge_slave_1: entered allmulticast mode [ 79.339001][ T5799] bridge_slave_1: entered promiscuous mode [ 79.395380][ T5797] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.395482][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.395585][ T5797] bridge_slave_0: entered allmulticast mode [ 79.396906][ T5797] bridge_slave_0: entered promiscuous mode [ 79.417897][ T5811] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.418007][ T5811] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.418150][ T5811] bridge_slave_0: entered allmulticast mode [ 79.421570][ T5811] bridge_slave_0: entered promiscuous mode [ 79.434086][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.455049][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.455161][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.455301][ T5797] bridge_slave_1: entered allmulticast mode [ 79.457723][ T5797] bridge_slave_1: entered promiscuous mode [ 79.481062][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.481173][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.481684][ T5811] bridge_slave_1: entered allmulticast mode [ 79.484927][ T5811] bridge_slave_1: entered promiscuous mode [ 79.492802][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.496921][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.524308][ T5799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.553707][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.572192][ T5799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.619314][ T5797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.636053][ T5811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.640164][ T5809] team0: Port device team_slave_0 added [ 79.660748][ T5797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.675813][ T5809] team0: Port device team_slave_1 added [ 79.680240][ T5811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.683257][ T5796] team0: Port device team_slave_0 added [ 79.980005][ T5803] Bluetooth: hci0: command tx timeout [ 79.980151][ T5803] Bluetooth: hci2: command tx timeout [ 80.012121][ T5799] team0: Port device team_slave_0 added [ 80.041027][ T5796] team0: Port device team_slave_1 added [ 80.056788][ T5799] team0: Port device team_slave_1 added [ 80.058013][ T5116] Bluetooth: hci4: command tx timeout [ 80.058221][ T5116] Bluetooth: hci3: command tx timeout [ 80.068940][ T5803] Bluetooth: hci1: command tx timeout [ 80.101280][ T5797] team0: Port device team_slave_0 added [ 80.119599][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.119609][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.119622][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.122982][ T5811] team0: Port device team_slave_0 added [ 80.142493][ T5797] team0: Port device team_slave_1 added [ 80.161853][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.161867][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.161898][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.166623][ T5811] team0: Port device team_slave_1 added [ 80.167561][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.167573][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.167594][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.190196][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.190211][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.190233][ T5799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.223080][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.223102][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.223125][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.243674][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.243689][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.243710][ T5799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.292305][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.292320][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.292342][ T5797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.293455][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.293465][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.293486][ T5811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.319457][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.319472][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.319495][ T5811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.321802][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.321814][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.321836][ T5797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.395165][ T5809] hsr_slave_0: entered promiscuous mode [ 80.396577][ T5809] hsr_slave_1: entered promiscuous mode [ 80.512892][ T5796] hsr_slave_0: entered promiscuous mode [ 80.514229][ T5796] hsr_slave_1: entered promiscuous mode [ 80.515231][ T5796] debugfs: 'hsr0' already exists in 'hsr' [ 80.515348][ T5796] Cannot create hsr debugfs directory [ 80.527383][ T5799] hsr_slave_0: entered promiscuous mode [ 80.530076][ T5799] hsr_slave_1: entered promiscuous mode [ 80.530932][ T5799] debugfs: 'hsr0' already exists in 'hsr' [ 80.530953][ T5799] Cannot create hsr debugfs directory [ 80.601127][ T5811] hsr_slave_0: entered promiscuous mode [ 80.602281][ T5811] hsr_slave_1: entered promiscuous mode [ 80.603216][ T5811] debugfs: 'hsr0' already exists in 'hsr' [ 80.603236][ T5811] Cannot create hsr debugfs directory [ 80.627109][ T5797] hsr_slave_0: entered promiscuous mode [ 80.629679][ T5797] hsr_slave_1: entered promiscuous mode [ 80.630515][ T5797] debugfs: 'hsr0' already exists in 'hsr' [ 80.630536][ T5797] Cannot create hsr debugfs directory [ 81.539844][ T5809] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.590431][ T1626] cfg80211: failed to load regulatory.db [ 81.608684][ T5809] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.666207][ T5809] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.719147][ T5809] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.848540][ T5799] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.883309][ T5799] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.904149][ T5799] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.956347][ T5799] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.067859][ T5803] Bluetooth: hci2: command tx timeout [ 82.067893][ T5803] Bluetooth: hci0: command tx timeout [ 82.093682][ T5796] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.129969][ T5796] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.138076][ T5116] Bluetooth: hci3: command tx timeout [ 82.138094][ T5803] Bluetooth: hci1: command tx timeout [ 82.138104][ T5116] Bluetooth: hci4: command tx timeout [ 82.183154][ T5796] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.236704][ T5796] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.352901][ T5797] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 82.392122][ T5797] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 82.427125][ T5797] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 82.480270][ T5797] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 82.519941][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.597500][ T5811] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.636396][ T5811] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.679438][ T5809] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.679658][ T5811] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.724773][ T5811] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.764755][ T3244] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.765721][ T3244] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.804901][ T3244] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.805017][ T3244] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.835620][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.911093][ T5799] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.944099][ T3244] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.944218][ T3244] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.964782][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.982246][ T3244] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.982763][ T3244] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.061411][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.096940][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.109732][ T3244] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.109966][ T3244] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.136671][ T3244] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.137594][ T3244] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.204476][ T5797] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.224571][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.252347][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.253232][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.295482][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.308424][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.379837][ T5811] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.415043][ T1170] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.425036][ T1170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.480029][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.480165][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.526839][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.722626][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.794052][ T5809] veth0_vlan: entered promiscuous mode [ 83.854985][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.856725][ T5809] veth1_vlan: entered promiscuous mode [ 83.971998][ T5799] veth0_vlan: entered promiscuous mode [ 84.024292][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.027095][ T5799] veth1_vlan: entered promiscuous mode [ 84.096836][ T5809] veth0_macvtap: entered promiscuous mode [ 84.127577][ T5796] veth0_vlan: entered promiscuous mode [ 84.132109][ T5809] veth1_macvtap: entered promiscuous mode [ 84.144987][ T5803] Bluetooth: hci2: command tx timeout [ 84.144995][ T5807] Bluetooth: hci0: command tx timeout [ 84.187444][ T5796] veth1_vlan: entered promiscuous mode [ 84.219176][ T5807] Bluetooth: hci3: command tx timeout [ 84.219191][ T5803] Bluetooth: hci4: command tx timeout [ 84.219205][ T5807] Bluetooth: hci1: command tx timeout [ 84.235936][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.254797][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.269966][ T5799] veth0_macvtap: entered promiscuous mode [ 84.281433][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.314195][ T5799] veth1_macvtap: entered promiscuous mode [ 84.339624][ T3014] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.368318][ T3014] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.388232][ T3014] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.403924][ T3014] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.489965][ T5796] veth0_macvtap: entered promiscuous mode [ 84.492429][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.560593][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.561346][ T5796] veth1_macvtap: entered promiscuous mode [ 84.662722][ T3014] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.677581][ T3014] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.701491][ T3014] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.718556][ T3014] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.721921][ T5811] veth0_vlan: entered promiscuous mode [ 84.743933][ T2310] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.743952][ T2310] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.791255][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.867377][ T5811] veth1_vlan: entered promiscuous mode [ 84.877763][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.954953][ T2310] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.954973][ T2310] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.983580][ T1170] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.996871][ T1170] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.997118][ T5797] veth0_vlan: entered promiscuous mode [ 85.022019][ T1170] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.037890][ T1170] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.112476][ T5797] veth1_vlan: entered promiscuous mode [ 85.124409][ T3014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.124427][ T3014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.290151][ T5811] veth0_macvtap: entered promiscuous mode [ 85.319926][ T5811] veth1_macvtap: entered promiscuous mode [ 85.321349][ T3244] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.321364][ T3244] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.410892][ T3244] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.410910][ T3244] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.414302][ T5797] veth0_macvtap: entered promiscuous mode [ 85.469849][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.470361][ T5797] veth1_macvtap: entered promiscuous mode [ 85.521187][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.603503][ T3014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.603522][ T3014] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.606267][ T2310] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.637112][ T2310] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.653834][ T2310] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.694791][ T2310] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.696274][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.777774][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.026107][ T3014] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.047153][ T3014] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.059542][ T3014] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.115298][ T3014] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.220252][ T5803] Bluetooth: hci2: command tx timeout [ 86.220286][ T5803] Bluetooth: hci0: command tx timeout [ 86.298222][ T5116] Bluetooth: hci4: command tx timeout [ 86.308340][ T5116] Bluetooth: hci1: command tx timeout [ 86.308418][ T5116] Bluetooth: hci3: command tx timeout [ 86.876080][ T1170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.876097][ T1170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.211455][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.211473][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.349480][ T1170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.349499][ T1170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.595466][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.595486][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.632077][ T5937] tipc: Started in network mode [ 87.632107][ T5937] tipc: Node identity ac14140f, cluster identity 4711 [ 87.632930][ T5937] tipc: New replicast peer: 255.255.255.255 [ 87.634017][ T5937] tipc: Enabled bearer , priority 10 [ 88.228964][ T5812] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 88.390036][ T5812] usb 1-1: Using ep0 maxpacket: 32 [ 88.414934][ T5812] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.414952][ T5812] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.414975][ T5812] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 88.414986][ T5812] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.503115][ T5812] usb 1-1: config 0 descriptor?? [ 88.547986][ T5916] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 88.595751][ T5812] hub 1-1:0.0: USB hub found [ 88.630129][ T5849] tipc: Node number set to 2886997007 [ 88.713871][ T5916] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 88.749518][ T5916] usb 5-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 88.749536][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.749546][ T5916] usb 5-1: Product: syz [ 88.749553][ T5916] usb 5-1: Manufacturer: syz [ 88.749560][ T5916] usb 5-1: SerialNumber: syz [ 88.755377][ T5812] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 88.816627][ T5916] usb 5-1: config 0 descriptor?? [ 88.915549][ T5916] usbtouchscreen 5-1:0.0: probe with driver usbtouchscreen failed with error -12 [ 89.170832][ T5812] hid-generic 0003:046D:C31C.0001: unknown main item tag 0x0 [ 89.449004][ T5812] hid-generic 0003:046D:C31C.0001: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.0-1/input0 [ 89.555500][ T5965] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12'. [ 89.555599][ T5965] netlink: 'syz.1.12': attribute type 7 has an invalid length. [ 89.555613][ T5965] netlink: 'syz.1.12': attribute type 8 has an invalid length. [ 89.555623][ T5965] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12'. [ 89.624154][ T5965] bond0: entered promiscuous mode [ 89.624168][ T5965] bond_slave_0: entered promiscuous mode [ 89.624428][ T5965] bond_slave_1: entered promiscuous mode [ 89.696814][ T5965] bond0: left promiscuous mode [ 89.696837][ T5965] bond_slave_0: left promiscuous mode [ 89.697247][ T5965] bond_slave_1: left promiscuous mode [ 90.388322][ T5939] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 90.797741][ T5970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.798941][ T5970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.832280][ T5916] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 92.616982][ T5993] netlink: 20 bytes leftover after parsing attributes in process `syz.2.18'. [ 94.101523][ T10] usb 5-1: USB disconnect, device number 2 [ 96.301224][ T5939] usbhid 1-1:0.0: reset_resume error -32 [ 96.366227][ T5916] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [syz1] on syz0 [ 96.414784][ T6017] dvmrp0: entered allmulticast mode [ 96.497982][ T5916] usb 1-1: USB disconnect, device number 2 [ 96.741448][ T6019] fido_id[6019]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 96.828069][ T809] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 96.978096][ T809] usb 2-1: Using ep0 maxpacket: 32 [ 96.994714][ T809] usb 2-1: config 250 has an invalid interface number: 230 but max is 0 [ 96.994740][ T809] usb 2-1: config 250 has no interface number 0 [ 96.994786][ T809] usb 2-1: config 250 interface 230 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 96.994806][ T809] usb 2-1: config 250 interface 230 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 96.994827][ T809] usb 2-1: config 250 interface 230 has no altsetting 0 [ 97.018114][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 97.025188][ T809] usb 2-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 97.025215][ T809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.025232][ T809] usb 2-1: Product: syz [ 97.025245][ T809] usb 2-1: Manufacturer: syz [ 97.025258][ T809] usb 2-1: SerialNumber: syz [ 97.167977][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 97.171003][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.171036][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.171064][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 97.171102][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 97.171121][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.197657][ T10] usb 4-1: config 0 descriptor?? [ 97.401156][ T809] ums-usbat 2-1:250.230: USB Mass Storage device detected [ 97.488991][ T809] ums-usbat 2-1:250.230: Quirks match for vid 0781 pid 0005: 1 [ 97.605838][ T809] ums-usbat 2-1:250.230: probe with driver ums-usbat failed with error -5 [ 97.641537][ T809] usb 2-1: USB disconnect, device number 2 [ 97.706761][ T10] appleir 0003:05AC:8241.0003: unknown main item tag 0x0 [ 97.706796][ T10] appleir 0003:05AC:8241.0003: unknown main item tag 0x0 [ 97.706821][ T10] appleir 0003:05AC:8241.0003: unknown main item tag 0x0 [ 97.782665][ T10] appleir 0003:05AC:8241.0003: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.3-1/input0 [ 97.899184][ T10] usb 4-1: USB disconnect, device number 2 [ 98.178920][ T6054] fido_id[6054]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 98.197867][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 98.227870][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 98.237866][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 98.247860][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 98.257852][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 98.267858][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 98.277864][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 98.287860][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 98.297861][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 98.307854][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 98.639593][ T6063] dvmrp0: entered allmulticast mode [ 99.358214][ T809] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 99.658059][ T809] usb 4-1: Using ep0 maxpacket: 32 [ 99.660561][ T809] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.660589][ T809] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.660624][ T809] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 99.660644][ T809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.666935][ T809] usb 4-1: config 0 descriptor?? [ 99.714641][ T809] hub 4-1:0.0: USB hub found [ 99.888399][ T809] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 100.290656][ T809] hid-generic 0003:046D:C31C.0004: unknown main item tag 0x0 [ 100.294303][ T809] hid-generic 0003:046D:C31C.0004: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.3-1/input0 [ 101.314373][ T6070] usb 4-1: reset high-speed USB device number 3 using dummy_hcd [ 105.128954][ T6160] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 106.543859][ T6070] usbhid 4-1:0.0: reset_resume error -32 [ 106.637943][ T5950] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 106.707472][ T809] usb 4-1: USB disconnect, device number 3 [ 106.799161][ T5950] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.799190][ T5950] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.799224][ T5950] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 106.799242][ T5950] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.864400][ T5950] usb 1-1: config 0 descriptor?? [ 108.233370][ T6191] netlink: 4 bytes leftover after parsing attributes in process `syz.1.71'. [ 108.450556][ T10] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 108.476734][ T5950] usb 1-1: string descriptor 0 read error: -71 [ 108.482382][ T5950] uclogic 0003:256C:006D.0005: failed retrieving string descriptor #200: -71 [ 108.482447][ T5950] uclogic 0003:256C:006D.0005: failed retrieving pen parameters: -71 [ 108.482463][ T5950] uclogic 0003:256C:006D.0005: failed probing pen v2 parameters: -71 [ 108.482512][ T5950] uclogic 0003:256C:006D.0005: failed probing parameters: -71 [ 108.482609][ T5950] uclogic 0003:256C:006D.0005: probe with driver uclogic failed with error -71 [ 108.532793][ T10] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 108.536131][ T5950] usb 1-1: USB disconnect, device number 3 [ 109.180375][ T6198] fido_id[6198]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 109.278773][ T6191] team0: Port device team_slave_0 removed [ 109.745780][ T6213] syz.2.78 uses obsolete (PF_INET,SOCK_PACKET) [ 110.118664][ T6209] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.150410][ T6209] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.383411][ T6223] binder: 6222:6223 ioctl c0306201 200000000540 returned -22 [ 111.521571][ T6209] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.526421][ T6209] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.084872][ T6234] mmap: syz.3.82 (6234) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 112.987954][ T5916] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 113.141042][ T5916] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 113.141070][ T5916] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.144068][ T5916] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 113.144094][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 113.144110][ T5916] usb 5-1: Product: syz [ 113.144124][ T5916] usb 5-1: Manufacturer: syz [ 113.144137][ T5916] usb 5-1: SerialNumber: syz [ 113.207632][ T5916] usb 5-1: config 0 descriptor?? [ 113.229909][ T5916] hub 5-1:0.0: bad descriptor, ignoring hub [ 113.229946][ T5916] hub 5-1:0.0: probe with driver hub failed with error -5 [ 113.461094][ T1160] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.551590][ T6249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.584574][ T6249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.653784][ T5916] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 113.680745][ T6252] netlink: 28 bytes leftover after parsing attributes in process `syz.0.86'. [ 113.680788][ T6252] netlink: 'syz.0.86': attribute type 7 has an invalid length. [ 113.680801][ T6252] netlink: 'syz.0.86': attribute type 8 has an invalid length. [ 113.680812][ T6252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.86'. [ 113.785026][ T5848] udevd[5848]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 113.908088][ T1160] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.057590][ T6252] bond0: entered promiscuous mode [ 114.057606][ T6252] bond_slave_0: entered promiscuous mode [ 114.057739][ T6252] bond_slave_1: entered promiscuous mode [ 114.109897][ T6252] bond0: left promiscuous mode [ 114.109913][ T6252] bond_slave_0: left promiscuous mode [ 114.110064][ T6252] bond_slave_1: left promiscuous mode [ 114.200829][ T1160] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.207207][ T1160] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.508312][ T6266] syzkaller0: entered promiscuous mode [ 114.508337][ T6266] syzkaller0: entered allmulticast mode [ 116.958059][ T5916] usb 5-1: reset high-speed USB device number 3 using dummy_hcd [ 117.082753][ T6302] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 117.152625][ T6304] netlink: 28 bytes leftover after parsing attributes in process `syz.2.101'. [ 117.152650][ T6304] netlink: 'syz.2.101': attribute type 7 has an invalid length. [ 117.152656][ T6304] netlink: 'syz.2.101': attribute type 8 has an invalid length. [ 117.152662][ T6304] netlink: 4 bytes leftover after parsing attributes in process `syz.2.101'. [ 117.158951][ T5916] usb 5-1: device firmware changed [ 117.215231][ T5916] usb 5-1: USB disconnect, device number 3 [ 117.227628][ T6302] netlink: 'syz.3.100': attribute type 1 has an invalid length. [ 117.282107][ T6304] bond0: entered promiscuous mode [ 117.282122][ T6304] bond_slave_0: entered promiscuous mode [ 117.282250][ T6304] bond_slave_1: entered promiscuous mode [ 117.340645][ T6304] bond0: left promiscuous mode [ 117.340661][ T6304] bond_slave_0: left promiscuous mode [ 117.340807][ T6304] bond_slave_1: left promiscuous mode [ 117.627777][ T5916] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 117.759476][ T809] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 117.789430][ T5916] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.789465][ T5916] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 117.789477][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.864221][ T5916] usb 5-1: config 0 descriptor?? [ 117.881289][ T5916] pwc: Askey VC010 type 2 USB webcam detected. [ 117.917662][ T809] usb 4-1: config 8 has an invalid interface number: 223 but max is 0 [ 117.917687][ T809] usb 4-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 117.917703][ T809] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 117.917896][ T809] usb 4-1: config 8 has no interface number 0 [ 117.918650][ T809] usb 4-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 117.932593][ T809] usb 4-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 117.932619][ T809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.932637][ T809] usb 4-1: Product: syz [ 117.932650][ T809] usb 4-1: Manufacturer: syz [ 117.932662][ T809] usb 4-1: SerialNumber: syz [ 118.275527][ T5916] pwc: recv_control_msg error -32 req 02 val 2b00 [ 118.276817][ T5916] pwc: recv_control_msg error -32 req 02 val 2700 [ 118.277421][ T5916] pwc: recv_control_msg error -32 req 02 val 2c00 [ 118.278836][ T5916] pwc: recv_control_msg error -32 req 04 val 1000 [ 118.279805][ T5916] pwc: recv_control_msg error -32 req 04 val 1300 [ 118.280872][ T5916] pwc: recv_control_msg error -32 req 04 val 1400 [ 118.282002][ T5916] pwc: recv_control_msg error -32 req 02 val 2000 [ 118.371777][ T6318] netlink: 4 bytes leftover after parsing attributes in process `syz.2.105'. [ 118.657223][ T5916] pwc: recv_control_msg error -71 req 04 val 1500 [ 118.658132][ T5916] pwc: recv_control_msg error -71 req 02 val 2500 [ 118.662944][ T5916] pwc: recv_control_msg error -71 req 02 val 2400 [ 118.664797][ T5916] pwc: recv_control_msg error -71 req 02 val 2600 [ 118.665387][ T5916] pwc: recv_control_msg error -71 req 02 val 2900 [ 118.665834][ T5916] pwc: recv_control_msg error -71 req 02 val 2800 [ 118.666462][ T5916] pwc: recv_control_msg error -71 req 04 val 1100 [ 118.668550][ T5916] pwc: recv_control_msg error -71 req 04 val 1200 [ 118.690903][ T5916] pwc: Registered as video103. [ 118.694491][ T5916] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input6 [ 118.855928][ T5916] usb 5-1: USB disconnect, device number 4 [ 119.325329][ T6318] team0: Port device team_slave_0 removed [ 120.120099][ T36] audit: type=1326 audit(1774320861.792:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6322 comm="syz.4.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ba7e2c799 code=0x7ffc0000 [ 120.120150][ T36] audit: type=1326 audit(1774320861.792:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6322 comm="syz.4.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ba7e2c799 code=0x7ffc0000 [ 120.120189][ T36] audit: type=1326 audit(1774320861.802:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6322 comm="syz.4.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0ba7e2c799 code=0x7ffc0000 [ 120.120220][ T36] audit: type=1326 audit(1774320861.802:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6322 comm="syz.4.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ba7e2c799 code=0x7ffc0000 [ 120.120240][ T36] audit: type=1326 audit(1774320861.802:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6322 comm="syz.4.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ba7e2c799 code=0x7ffc0000 [ 120.120262][ T36] audit: type=1326 audit(1774320861.802:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6322 comm="syz.4.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f0ba7e2c799 code=0x7ffc0000 [ 120.120297][ T36] audit: type=1326 audit(1774320861.802:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6322 comm="syz.4.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ba7e2c799 code=0x7ffc0000 [ 120.120340][ T36] audit: type=1326 audit(1774320861.812:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6322 comm="syz.4.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ba7e2c799 code=0x7ffc0000 [ 120.120376][ T36] audit: type=1326 audit(1774320861.832:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6322 comm="syz.4.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f0ba7e2c799 code=0x7ffc0000 [ 120.120399][ T36] audit: type=1326 audit(1774320861.902:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6322 comm="syz.4.106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ba7e2c799 code=0x7ffc0000 [ 120.360758][ T5916] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 120.577987][ T5916] usb 5-1: Using ep0 maxpacket: 32 [ 120.604373][ T5916] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.604428][ T5916] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 120.604449][ T5916] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.660044][ T5916] usb 5-1: config 0 descriptor?? [ 120.734266][ T5916] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 122.550016][ T809] usb 4-1: USB disconnect, device number 4 [ 123.100190][ T5916] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 123.113833][ T5916] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 123.825972][ T6339] fido_id[6339]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 126.271816][ T31] usb 5-1: USB disconnect, device number 5 [ 126.568736][ T6374] netlink: 'syz.4.119': attribute type 1 has an invalid length. [ 127.077995][ T9] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 127.263663][ T9] usb 5-1: config 8 has an invalid interface number: 223 but max is 0 [ 127.263683][ T9] usb 5-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 127.263693][ T9] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 127.263702][ T9] usb 5-1: config 8 has no interface number 0 [ 127.263729][ T9] usb 5-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 127.496472][ T9] usb 5-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 127.496489][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.496499][ T9] usb 5-1: Product: syz [ 127.496505][ T9] usb 5-1: Manufacturer: syz [ 127.496512][ T9] usb 5-1: SerialNumber: syz [ 127.679746][ T5950] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 127.828003][ T5950] usb 1-1: Using ep0 maxpacket: 16 [ 127.833343][ T5950] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.833432][ T5950] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.833453][ T5950] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 127.833493][ T5950] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 127.833512][ T5950] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.923934][ T5950] usb 1-1: config 0 descriptor?? [ 128.789969][ T6397] process 'syz.3.126' launched './file0' with NULL argv: empty string added [ 129.181904][ T5950] input: HID 05ac:8241 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:05AC:8241.0008/input/input7 [ 129.755711][ T5950] appleir 0003:05AC:8241.0008: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.0-1/input0 [ 129.856764][ T5950] usb 1-1: USB disconnect, device number 4 [ 130.159956][ T6409] fido_id[6409]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 130.798454][ T6415] 9p: Bad value for 'rfdno' [ 132.763879][ T31] usb 5-1: USB disconnect, device number 6 [ 132.789644][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.789733][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.400081][ T6438] netlink: 28 bytes leftover after parsing attributes in process `syz.3.142'. [ 133.400116][ T6438] netlink: 'syz.3.142': attribute type 7 has an invalid length. [ 133.400128][ T6438] netlink: 'syz.3.142': attribute type 8 has an invalid length. [ 133.400139][ T6438] netlink: 4 bytes leftover after parsing attributes in process `syz.3.142'. [ 133.412448][ T6438] bond0: entered promiscuous mode [ 133.412468][ T6438] bond_slave_0: entered promiscuous mode [ 133.412683][ T6438] bond_slave_1: entered promiscuous mode [ 133.500103][ T6438] bond0: left promiscuous mode [ 133.500125][ T6438] bond_slave_0: left promiscuous mode [ 133.500332][ T6438] bond_slave_1: left promiscuous mode [ 133.708075][ T31] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 133.709155][ T6443] 9p: Bad value for 'rfdno' [ 133.858010][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 133.860288][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.860316][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.860336][ T31] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 133.860375][ T31] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 133.860395][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.874935][ T31] usb 5-1: config 0 descriptor?? [ 134.449204][ T31] input: HID 05ac:8241 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:05AC:8241.0009/input/input8 [ 134.572946][ T31] appleir 0003:05AC:8241.0009: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.4-1/input0 [ 134.610699][ T31] usb 5-1: USB disconnect, device number 7 [ 134.854615][ T6464] fido_id[6464]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 135.227485][ T6478] netlink: 12 bytes leftover after parsing attributes in process `syz.2.155'. [ 135.274567][ T6480] netlink: 28 bytes leftover after parsing attributes in process `syz.4.156'. [ 135.274658][ T6480] netlink: 'syz.4.156': attribute type 7 has an invalid length. [ 135.274665][ T6480] netlink: 'syz.4.156': attribute type 8 has an invalid length. [ 135.274671][ T6480] netlink: 4 bytes leftover after parsing attributes in process `syz.4.156'. [ 135.335884][ T6480] bond0: entered promiscuous mode [ 135.335907][ T6480] bond_slave_0: entered promiscuous mode [ 135.336146][ T6480] bond_slave_1: entered promiscuous mode [ 135.379878][ T6480] bond0: left promiscuous mode [ 135.379901][ T6480] bond_slave_0: left promiscuous mode [ 135.380125][ T6480] bond_slave_1: left promiscuous mode [ 135.942909][ T6491] netlink: 28 bytes leftover after parsing attributes in process `syz.4.160'. [ 136.114824][ T6492] 9p: Bad value for 'rfdno' [ 137.447926][ T31] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 137.611458][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 137.616837][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.616866][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.616885][ T31] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 137.616922][ T31] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 137.616941][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.633076][ T31] usb 5-1: config 0 descriptor?? [ 137.766850][ T6519] netlink: 4 bytes leftover after parsing attributes in process `syz.2.168'. [ 137.999989][ T6523] netlink: 12 bytes leftover after parsing attributes in process `syz.0.169'. [ 138.217267][ T31] input: HID 05ac:8241 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:05AC:8241.000A/input/input9 [ 138.348160][ T31] appleir 0003:05AC:8241.000A: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.4-1/input0 [ 138.417907][ T31] usb 5-1: USB disconnect, device number 8 [ 139.022310][ T6528] fido_id[6528]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 140.409341][ T6547] netlink: 28 bytes leftover after parsing attributes in process `syz.0.176'. [ 140.598669][ T6530] delete_channel: no stack [ 141.537354][ T6562] netlink: 12 bytes leftover after parsing attributes in process `syz.0.181'. [ 141.667965][ T5950] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 141.818174][ T5950] usb 3-1: Using ep0 maxpacket: 16 [ 141.820651][ T5950] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.820669][ T5950] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.820680][ T5950] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 141.820701][ T5950] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 141.820713][ T5950] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.880655][ T5950] usb 3-1: config 0 descriptor?? [ 142.169910][ T6572] tipc: Started in network mode [ 142.169939][ T6572] tipc: Node identity ac14140f, cluster identity 4711 [ 142.170277][ T6572] tipc: New replicast peer: 255.255.255.255 [ 142.175577][ T6572] tipc: Enabled bearer , priority 10 [ 142.327292][ T5950] input: HID 05ac:8241 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:05AC:8241.000B/input/input10 [ 142.465833][ T5950] appleir 0003:05AC:8241.000B: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.2-1/input0 [ 142.670647][ T9] usb 3-1: USB disconnect, device number 2 [ 142.691914][ T6578] 9p: Bad value for 'rfdno' [ 143.218014][ T31] tipc: Node number set to 2886997007 [ 143.230148][ T6580] fido_id[6580]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 144.070196][ T6595] netlink: 28 bytes leftover after parsing attributes in process `syz.2.192'. [ 144.388237][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 144.888103][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 144.893484][ T9] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 144.893501][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.893511][ T9] usb 1-1: Product: syz [ 144.893518][ T9] usb 1-1: Manufacturer: syz [ 144.893524][ T9] usb 1-1: SerialNumber: syz [ 144.940039][ T9] usb 1-1: config 0 descriptor?? [ 145.204814][ T9] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: version d4.15 found at bus 001 address 005 [ 145.257071][ T6601] input: syz0 as /devices/virtual/input/input11 [ 146.663993][ T5950] usb 1-1: USB disconnect, device number 5 [ 150.067424][ T5950] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 150.298605][ T5950] usb 2-1: Using ep0 maxpacket: 16 [ 150.444570][ T5950] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.444602][ T5950] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.444621][ T5950] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 150.444661][ T5950] usb 2-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 150.444680][ T5950] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.509760][ T5950] usb 2-1: config 0 descriptor?? [ 150.637787][ T6634] tipc: Started in network mode [ 150.638101][ T6634] tipc: Node identity 3a205cc19d48, cluster identity 4711 [ 150.638448][ T6634] tipc: Enabled bearer , priority 0 [ 150.640142][ T6634] syzkaller0: entered promiscuous mode [ 150.640162][ T6634] syzkaller0: entered allmulticast mode [ 150.687302][ T6634] netlink: 44 bytes leftover after parsing attributes in process `syz.0.204'. [ 150.707725][ T6634] tipc: Resetting bearer [ 150.806412][ T6633] tipc: Resetting bearer [ 150.939944][ T5950] input: HID 05ac:8241 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:05AC:8241.000C/input/input12 [ 150.941325][ T6633] tipc: Disabling bearer [ 151.064253][ T5950] appleir 0003:05AC:8241.000C: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.1-1/input0 [ 151.150736][ T809] usb 2-1: USB disconnect, device number 3 [ 151.189170][ T6643] fido_id[6643]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 151.584819][ T5950] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 151.738062][ T5950] usb 3-1: Using ep0 maxpacket: 32 [ 151.755960][ T5950] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 151.755977][ T5950] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.755987][ T5950] usb 3-1: Product: syz [ 151.755994][ T5950] usb 3-1: Manufacturer: syz [ 151.756000][ T5950] usb 3-1: SerialNumber: syz [ 151.759803][ T5950] usb 3-1: config 0 descriptor?? [ 151.858409][ T6656] netlink: 'syz.1.211': attribute type 1 has an invalid length. [ 152.022536][ T5950] RobotFuzz Open Source InterFace, OSIF 3-1:0.0: version d4.15 found at bus 003 address 003 [ 152.462687][ T6656] 8021q: adding VLAN 0 to HW filter on device bond1 [ 152.535779][ T6658] bond1: (slave dummy0): making interface the new active one [ 152.537283][ T6658] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 153.272124][ T6671] i2c i2c-1: failure reading status [ 153.277190][ T43] usb 3-1: USB disconnect, device number 3 [ 154.628018][ T809] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 154.698530][ T5906] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 154.778248][ T809] usb 5-1: Using ep0 maxpacket: 32 [ 154.780387][ T809] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.780416][ T809] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.780450][ T809] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 154.780461][ T809] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.783537][ T809] usb 5-1: config 0 descriptor?? [ 154.847980][ T5906] usb 3-1: Using ep0 maxpacket: 16 [ 154.851141][ T5906] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.851169][ T5906] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.851195][ T5906] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 154.851219][ T5906] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 154.851230][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.863468][ T5906] usb 3-1: config 0 descriptor?? [ 155.028814][ T809] hub 5-1:0.0: USB hub found [ 155.029764][ T809] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 155.987538][ T5906] input: HID 05ac:8241 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:05AC:8241.000D/input/input13 [ 156.953258][ T5906] appleir 0003:05AC:8241.000D: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.2-1/input0 [ 158.793742][ T809] hid-generic 0003:046D:C31C.000E: unknown main item tag 0x0 [ 158.805816][ T809] hid-generic 0003:046D:C31C.000E: hidraw1: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.4-1/input0 [ 158.838157][ T5906] usb 3-1: USB disconnect, device number 4 [ 159.647584][ T6702] fido_id[6702]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 160.600516][ T809] usb 5-1: USB disconnect, device number 9 [ 160.831714][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 160.978001][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 160.985612][ T10] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 160.985638][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.985655][ T10] usb 1-1: Product: syz [ 160.985666][ T10] usb 1-1: Manufacturer: syz [ 160.985679][ T10] usb 1-1: SerialNumber: syz [ 161.109717][ T10] usb 1-1: config 0 descriptor?? [ 161.165423][ T6728] netlink: 28 bytes leftover after parsing attributes in process `syz.1.232'. [ 161.165459][ T6728] netlink: 'syz.1.232': attribute type 7 has an invalid length. [ 161.165471][ T6728] netlink: 'syz.1.232': attribute type 8 has an invalid length. [ 161.165482][ T6728] netlink: 4 bytes leftover after parsing attributes in process `syz.1.232'. [ 161.201318][ T6728] bond0: entered promiscuous mode [ 161.201340][ T6728] bond_slave_0: entered promiscuous mode [ 161.201944][ T6728] bond_slave_1: entered promiscuous mode [ 161.248424][ T6728] bond0: left promiscuous mode [ 161.248446][ T6728] bond_slave_0: left promiscuous mode [ 161.248677][ T6728] bond_slave_1: left promiscuous mode [ 161.336855][ T10] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: version d4.15 found at bus 001 address 006 [ 162.090549][ T809] usb 1-1: USB disconnect, device number 6 [ 162.127728][ T6742] tipc: Started in network mode [ 162.127758][ T6742] tipc: Node identity ac14140f, cluster identity 4711 [ 162.227125][ T6742] tipc: New replicast peer: 255.255.255.255 [ 162.248381][ T6742] tipc: Enabled bearer , priority 10 [ 162.813412][ T6759] tipc: Enabled bearer , priority 0 [ 162.825616][ T6759] syzkaller0: entered promiscuous mode [ 162.825640][ T6759] syzkaller0: entered allmulticast mode [ 162.843161][ T6759] netlink: 44 bytes leftover after parsing attributes in process `syz.4.242'. [ 162.845297][ T6759] tipc: Resetting bearer [ 162.919330][ T6758] tipc: Resetting bearer [ 163.078550][ T6758] tipc: Disabling bearer [ 163.309602][ T5906] tipc: Node number set to 2886997007 [ 163.698259][ T6770] netlink: 28 bytes leftover after parsing attributes in process `syz.0.247'. [ 163.698292][ T6770] netlink: 'syz.0.247': attribute type 7 has an invalid length. [ 163.698303][ T6770] netlink: 'syz.0.247': attribute type 8 has an invalid length. [ 163.698312][ T6770] netlink: 4 bytes leftover after parsing attributes in process `syz.0.247'. [ 163.755180][ T6770] bond0: entered promiscuous mode [ 163.755202][ T6770] bond_slave_0: entered promiscuous mode [ 163.755446][ T6770] bond_slave_1: entered promiscuous mode [ 163.797100][ T6773] netlink: 12 bytes leftover after parsing attributes in process `syz.4.248'. [ 163.816632][ T6770] bond0: left promiscuous mode [ 163.816647][ T6770] bond_slave_0: left promiscuous mode [ 163.816788][ T6770] bond_slave_1: left promiscuous mode [ 164.070507][ T6777] tipc: Started in network mode [ 164.142175][ T6777] tipc: Node identity ac14140f, cluster identity 4711 [ 164.142516][ T6777] tipc: New replicast peer: 255.255.255.255 [ 164.143191][ T6777] tipc: Enabled bearer , priority 10 [ 164.686384][ T6786] input: syz0 as /devices/virtual/input/input14 [ 165.007960][ T10] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 165.179928][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 165.179945][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 165.180903][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 165.180917][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 165.181913][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 165.181927][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 165.186219][ T10] usb 5-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 165.186233][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.186247][ T10] usb 5-1: Product: syz [ 165.186254][ T10] usb 5-1: Manufacturer: syz [ 165.186261][ T10] usb 5-1: SerialNumber: syz [ 165.190003][ T10] usb 5-1: config 0 descriptor?? [ 165.201867][ T10] ti_usb_3410_5052 5-1:0.0: TI USB 5052 2 port adapter converter detected [ 165.202251][ T10] ti_usb_3410_5052 5-1:0.0: missing endpoints [ 165.300383][ T43] tipc: Node number set to 2886997007 [ 166.668035][ T43] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 167.853831][ T43] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 167.855022][ T43] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.100070][ T43] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 171.100087][ T43] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 171.100097][ T43] usb 2-1: Product: syz [ 171.100104][ T43] usb 2-1: Manufacturer: syz [ 171.107753][ T10] usb 5-1: USB disconnect, device number 10 [ 171.241976][ T43] usb 2-1: config 0 descriptor?? [ 171.244297][ T43] usb 2-1: can't set config #0, error -71 [ 171.260237][ T43] usb 2-1: USB disconnect, device number 4 [ 171.331227][ T6812] netlink: 12 bytes leftover after parsing attributes in process `syz.4.261'. [ 171.409326][ T6809] tipc: Enabled bearer , priority 0 [ 171.410175][ T6809] syzkaller0: entered promiscuous mode [ 171.410195][ T6809] syzkaller0: entered allmulticast mode [ 171.434354][ T6809] netlink: 44 bytes leftover after parsing attributes in process `syz.1.259'. [ 171.455102][ T6809] tipc: Resetting bearer [ 171.488135][ T6807] tipc: Resetting bearer [ 171.670767][ T6807] tipc: Disabling bearer [ 171.911003][ T6819] tipc: Enabling of bearer rejected, already enabled [ 172.835022][ T6836] 9p: Bad value for 'rfdno' [ 173.647928][ T43] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 173.812373][ T43] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 173.812399][ T43] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.814860][ T43] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 173.814886][ T43] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 173.814903][ T43] usb 2-1: Product: syz [ 173.814914][ T43] usb 2-1: Manufacturer: syz [ 173.814921][ T43] usb 2-1: SerialNumber: syz [ 173.902413][ T43] usb 2-1: config 0 descriptor?? [ 173.942337][ T43] hub 2-1:0.0: bad descriptor, ignoring hub [ 173.942370][ T43] hub 2-1:0.0: probe with driver hub failed with error -5 [ 174.087912][ T5906] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 174.243889][ T43] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 174.259779][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 174.259806][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 174.264364][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 174.264380][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 174.375626][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 174.375643][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 174.405318][ T5906] usb 4-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 174.405335][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.405345][ T5906] usb 4-1: Product: syz [ 174.405352][ T5906] usb 4-1: Manufacturer: syz [ 174.405358][ T5906] usb 4-1: SerialNumber: syz [ 174.441267][ T5906] usb 4-1: config 0 descriptor?? [ 174.461671][ T43] usb 2-1: reset high-speed USB device number 5 using dummy_hcd [ 174.520273][ T5906] ti_usb_3410_5052 4-1:0.0: TI USB 5052 2 port adapter converter detected [ 174.520398][ T5906] ti_usb_3410_5052 4-1:0.0: missing endpoints [ 174.618468][ T43] usb 2-1: device descriptor read/64, error -71 [ 174.832336][ T6856] netlink: 12 bytes leftover after parsing attributes in process `syz.4.275'. [ 174.871525][ T43] usb 2-1: reset high-speed USB device number 5 using dummy_hcd [ 174.997950][ T43] usb 2-1: device descriptor read/64, error -71 [ 175.617996][ T43] usb 2-1: reset high-speed USB device number 5 using dummy_hcd [ 175.641249][ T43] usb 2-1: device descriptor read/8, error -71 [ 176.098339][ T43] usb 2-1: reset high-speed USB device number 5 using dummy_hcd [ 176.240659][ T43] usb 2-1: device descriptor read/8, error -71 [ 176.350645][ T43] usb 2-1: USB disconnect, device number 5 [ 176.373734][ T5848] udevd[5848]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 176.614166][ T6875] 9p: Bad value for 'rfdno' [ 176.916233][ T31] usb 4-1: USB disconnect, device number 5 [ 178.727650][ T6907] netlink: 'syz.1.291': attribute type 1 has an invalid length. [ 178.869187][ T6907] 8021q: adding VLAN 0 to HW filter on device bond2 [ 178.994496][ T6911] bond1: (slave dummy0): Releasing active interface [ 179.431767][ T6911] bond2: (slave dummy0): making interface the new active one [ 179.448029][ T6911] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 182.087502][ T6959] netlink: 'syz.1.307': attribute type 1 has an invalid length. [ 182.556181][ T5906] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 182.576575][ T5906] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 182.695486][ T6959] 8021q: adding VLAN 0 to HW filter on device bond3 [ 182.735810][ T6969] Zero length message leads to an empty skb [ 182.768681][ T6965] bond2: (slave dummy0): Releasing active interface [ 182.832275][ T6965] bond3: (slave dummy0): making interface the new active one [ 182.869407][ T6965] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 182.920561][ T6967] fido_id[6967]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 186.013482][ T7007] 9p: Bad value for 'rfdno' [ 186.429396][ T7017] tipc: Enabled bearer , priority 0 [ 186.431432][ T7017] syzkaller0: entered promiscuous mode [ 186.431446][ T7017] syzkaller0: entered allmulticast mode [ 186.458001][ T5906] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 186.536493][ T7017] netlink: 44 bytes leftover after parsing attributes in process `syz.3.325'. [ 186.560862][ T7017] tipc: Resetting bearer [ 186.598115][ T7016] tipc: Resetting bearer [ 186.607928][ T5906] usb 5-1: Using ep0 maxpacket: 32 [ 186.625364][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.625382][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.625404][ T5906] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 186.625416][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.688082][ T5906] usb 5-1: config 0 descriptor?? [ 186.736261][ T5906] hub 5-1:0.0: USB hub found [ 186.884121][ T7016] tipc: Disabling bearer [ 186.905468][ T5906] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 187.613363][ T5906] hid-generic 0003:046D:C31C.0010: unknown main item tag 0x0 [ 187.681922][ T5906] hid-generic 0003:046D:C31C.0010: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.4-1/input0 [ 189.710922][ T7013] usb 5-1: reset high-speed USB device number 11 using dummy_hcd [ 190.717994][ T809] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 191.592170][ T809] usb 1-1: Using ep0 maxpacket: 32 [ 191.612626][ T809] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 191.612651][ T809] usb 1-1: config 250 has 0 interfaces, different from the descriptor's value: 1 [ 191.620074][ T809] usb 1-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 191.620090][ T809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.620099][ T809] usb 1-1: Product: syz [ 191.620106][ T809] usb 1-1: Manufacturer: syz [ 191.620112][ T809] usb 1-1: SerialNumber: syz [ 191.930145][ T809] usb 1-1: USB disconnect, device number 7 [ 194.237729][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.245844][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.053281][ T7013] usb 5-1: device descriptor read/all, error -110 [ 195.198001][ T7013] usb 5-1: reset high-speed USB device number 11 using dummy_hcd [ 195.359192][ T7013] usb 5-1: device descriptor read/64, error -32 [ 195.598014][ T7013] usb 5-1: reset high-speed USB device number 11 using dummy_hcd [ 195.632820][ T7013] usb 5-1: device descriptor read/8, error -32 [ 195.867959][ T7013] usb 5-1: reset high-speed USB device number 11 using dummy_hcd [ 195.893351][ T7013] usb 5-1: device descriptor read/8, error -32 [ 196.025137][ T5906] usb 5-1: USB disconnect, device number 11 [ 199.483934][ T5906] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 199.488965][ T5906] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 199.528066][ T5849] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 199.666632][ T7163] fido_id[7163]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 199.681847][ T5849] usb 2-1: Using ep0 maxpacket: 32 [ 199.684274][ T5849] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.684302][ T5849] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.684337][ T5849] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 199.684358][ T5849] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.740714][ T5849] usb 2-1: config 0 descriptor?? [ 199.762183][ T5849] hub 2-1:0.0: USB hub found [ 200.013199][ T5849] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 200.419673][ T5849] hid-generic 0003:046D:C31C.0012: unknown main item tag 0x0 [ 200.458950][ T5849] hid-generic 0003:046D:C31C.0012: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0 [ 201.582891][ T7160] Bluetooth: hci2: command 0x0406 tx timeout [ 201.583083][ T7160] Bluetooth: hci0: command 0x0406 tx timeout [ 201.583106][ T7160] Bluetooth: hci1: command 0x0406 tx timeout [ 201.583128][ T7160] Bluetooth: hci4: command 0x0406 tx timeout [ 201.583798][ T7160] Bluetooth: hci3: command 0x0406 tx timeout [ 201.940574][ T7158] usb 2-1: reset high-speed USB device number 6 using dummy_hcd [ 203.127981][ T5849] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 203.306109][ T5849] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 203.306136][ T5849] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.332938][ T5849] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 203.332964][ T5849] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 203.332982][ T5849] usb 1-1: Product: syz [ 203.332995][ T5849] usb 1-1: Manufacturer: syz [ 203.333007][ T5849] usb 1-1: SerialNumber: syz [ 203.357376][ T5849] usb 1-1: config 0 descriptor?? [ 203.384825][ T5849] hub 1-1:0.0: bad descriptor, ignoring hub [ 203.384860][ T5849] hub 1-1:0.0: probe with driver hub failed with error -5 [ 203.758277][ T5849] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 203.980045][ T5849] usb 1-1: USB disconnect, device number 8 [ 204.349374][ T5848] udevd[5848]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 205.824019][ T7232] tipc: Enabled bearer , priority 0 [ 205.835489][ T7232] syzkaller0: entered promiscuous mode [ 205.835879][ T7232] syzkaller0: entered allmulticast mode [ 206.390381][ T7236] tipc: Resetting bearer [ 206.423721][ T7231] tipc: Resetting bearer [ 206.569085][ T7231] tipc: Disabling bearer [ 207.181013][ T7158] usbhid 2-1:0.0: reset_resume error -32 [ 207.258414][ T5950] usb 2-1: USB disconnect, device number 6 [ 207.336327][ T7252] binder: 7251:7252 ioctl 4018620d 0 returned -22 [ 207.337277][ T7252] binder: 7251:7252 ioctl c0306201 200000000540 returned -22 [ 207.457923][ T5906] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 207.622317][ T5906] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 207.622343][ T5906] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 207.638149][ T5906] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 207.638166][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 207.638176][ T5906] usb 3-1: Product: syz [ 207.638183][ T5906] usb 3-1: Manufacturer: syz [ 207.638190][ T5906] usb 3-1: SerialNumber: syz [ 207.711684][ T5906] usb 3-1: config 0 descriptor?? [ 207.715414][ T5906] hub 3-1:0.0: bad descriptor, ignoring hub [ 207.715447][ T5906] hub 3-1:0.0: probe with driver hub failed with error -5 [ 207.807123][ T5906] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 208.394403][ T5848] udevd[5848]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 208.718077][ T9] usb 3-1: reset high-speed USB device number 5 using dummy_hcd [ 208.718858][ T9] usb 3-1: device reset changed ep0 maxpacket size! [ 208.725340][ T9] usb 3-1: USB disconnect, device number 5 [ 208.779434][ T7282] netlink: 'syz.0.408': attribute type 1 has an invalid length. [ 208.882626][ T7282] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 208.969717][ T5906] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 209.127920][ T5906] usb 2-1: device descriptor read/64, error -71 [ 209.128016][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 209.185445][ T7292] syzkaller0: entered promiscuous mode [ 209.185468][ T7292] syzkaller0: entered allmulticast mode [ 209.281685][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 209.282593][ T9] usb 3-1: no configurations [ 209.282608][ T9] usb 3-1: can't read configurations, error -22 [ 209.367945][ T5906] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 209.407995][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 209.500720][ T5906] usb 2-1: device descriptor read/64, error -71 [ 209.557991][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 209.558917][ T9] usb 3-1: no configurations [ 209.558932][ T9] usb 3-1: can't read configurations, error -22 [ 209.559406][ T9] usb usb3-port1: attempt power cycle [ 209.622560][ T5906] usb usb2-port1: attempt power cycle [ 210.096808][ T5906] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 210.221776][ T5906] usb 2-1: device descriptor read/8, error -71 [ 210.244142][ T5950] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 210.250490][ T5950] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 210.267950][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 210.458466][ T5906] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 210.477982][ T9] usb 3-1: device not accepting address 8, error -71 [ 210.480473][ T5906] usb 2-1: device descriptor read/8, error -71 [ 210.592387][ T5906] usb usb2-port1: unable to enumerate USB device [ 211.410069][ T5906] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 211.426904][ T5906] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 214.408353][ T9] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 214.468076][ T5906] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 214.599332][ T5906] usb 5-1: device descriptor read/64, error -71 [ 214.605094][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 214.605110][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 214.636055][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 214.636072][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 214.678508][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 214.678537][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 214.738054][ T9] usb 4-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 214.738080][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.738097][ T9] usb 4-1: Product: syz [ 214.738109][ T9] usb 4-1: Manufacturer: syz [ 214.738120][ T9] usb 4-1: SerialNumber: syz [ 214.751571][ T9] usb 4-1: config 0 descriptor?? [ 214.755247][ T9] ti_usb_3410_5052 4-1:0.0: TI USB 5052 2 port adapter converter detected [ 214.755368][ T9] ti_usb_3410_5052 4-1:0.0: missing endpoints [ 214.908031][ T5906] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 215.357927][ T5906] usb 5-1: device descriptor read/64, error -71 [ 215.468681][ T5906] usb usb5-port1: attempt power cycle [ 216.162336][ T5906] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 216.178728][ T5906] usb 5-1: device descriptor read/8, error -71 [ 216.708248][ T5906] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 216.729929][ T5906] usb 5-1: device descriptor read/8, error -71 [ 217.078265][ T5906] usb usb5-port1: unable to enumerate USB device [ 217.131589][ T5906] usb 4-1: USB disconnect, device number 6 [ 218.973166][ T809] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 219.400529][ T809] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 219.400556][ T809] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.404729][ T809] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 219.404754][ T809] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 219.404771][ T809] usb 5-1: Product: syz [ 219.404781][ T809] usb 5-1: Manufacturer: syz [ 219.404793][ T809] usb 5-1: SerialNumber: syz [ 219.475476][ T809] usb 5-1: config 0 descriptor?? [ 219.477562][ T809] hub 5-1:0.0: bad descriptor, ignoring hub [ 219.477586][ T809] hub 5-1:0.0: probe with driver hub failed with error -5 [ 220.590556][ T809] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 220.911617][ T809] usb 5-1: reset high-speed USB device number 17 using dummy_hcd [ 220.912388][ T809] usb 5-1: device reset changed ep0 maxpacket size! [ 220.914827][ T809] usb 5-1: USB disconnect, device number 17 [ 220.961605][ T5848] udevd[5848]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 221.037964][ T5906] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 221.476631][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 221.476658][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 221.478023][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 221.478046][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 221.479641][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 221.479663][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 221.482066][ T5906] usb 2-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 221.482079][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.482089][ T5906] usb 2-1: Product: syz [ 221.482095][ T5906] usb 2-1: Manufacturer: syz [ 221.482102][ T5906] usb 2-1: SerialNumber: syz [ 221.489867][ T5906] usb 2-1: config 0 descriptor?? [ 221.492568][ T5906] ti_usb_3410_5052 2-1:0.0: TI USB 5052 2 port adapter converter detected [ 221.492703][ T5906] ti_usb_3410_5052 2-1:0.0: missing endpoints [ 221.747952][ T5950] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 221.881237][ T5950] usb 1-1: device descriptor read/64, error -71 [ 222.139679][ T5950] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 222.567927][ T5950] usb 1-1: device descriptor read/64, error -71 [ 222.678213][ T5950] usb usb1-port1: attempt power cycle [ 223.117922][ T5950] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 223.172464][ T5950] usb 1-1: device descriptor read/8, error -71 [ 223.237907][ T5906] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 223.244296][ T5906] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 223.407959][ T5950] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 223.429472][ T5950] usb 1-1: device descriptor read/8, error -71 [ 223.545023][ T5950] usb usb1-port1: unable to enumerate USB device [ 223.781524][ T5950] usb 2-1: USB disconnect, device number 11 [ 226.589262][ T5880] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 226.699771][ T7478] 9p: Bad value for 'rfdno' [ 226.948442][ T5880] usb 3-1: Using ep0 maxpacket: 32 [ 226.950183][ T5880] usb 3-1: config 250 has an invalid interface number: 230 but max is 0 [ 226.950205][ T5880] usb 3-1: config 250 has no interface number 0 [ 226.950247][ T5880] usb 3-1: config 250 interface 230 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 226.950271][ T5880] usb 3-1: config 250 interface 230 has no altsetting 0 [ 226.952531][ T5880] usb 3-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 226.952554][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.952572][ T5880] usb 3-1: Product: syz [ 226.952584][ T5880] usb 3-1: Manufacturer: syz [ 226.952597][ T5880] usb 3-1: SerialNumber: syz [ 227.200116][ T5880] ums-usbat 3-1:250.230: USB Mass Storage device detected [ 227.230346][ T5880] ums-usbat 3-1:250.230: Quirks match for vid 0781 pid 0005: 1 [ 227.339298][ T5880] usb 3-1: USB disconnect, device number 10 [ 228.367767][ T9] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 228.390268][ T9] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 229.099952][ T7502] netlink: 28 bytes leftover after parsing attributes in process `syz.4.479'. [ 229.099986][ T7502] netlink: 'syz.4.479': attribute type 7 has an invalid length. [ 229.099998][ T7502] netlink: 'syz.4.479': attribute type 8 has an invalid length. [ 229.100008][ T7502] netlink: 4 bytes leftover after parsing attributes in process `syz.4.479'. [ 229.109285][ T7502] bond0: entered promiscuous mode [ 229.109304][ T7502] bond_slave_0: entered promiscuous mode [ 229.109507][ T7502] bond_slave_1: entered promiscuous mode [ 229.137913][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 229.178988][ T7502] bond0: left promiscuous mode [ 229.179009][ T7502] bond_slave_0: left promiscuous mode [ 229.179275][ T7502] bond_slave_1: left promiscuous mode [ 229.589704][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 229.594684][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.594707][ T9] usb 3-1: config 0 has no interfaces? [ 229.620530][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 229.620556][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.620572][ T9] usb 3-1: Product: syz [ 229.620584][ T9] usb 3-1: Manufacturer: syz [ 229.620596][ T9] usb 3-1: SerialNumber: syz [ 229.660518][ T9] usb 3-1: config 0 descriptor?? [ 230.119480][ T5849] usb 3-1: USB disconnect, device number 11 [ 230.319404][ T7517] netlink: 'syz.0.483': attribute type 1 has an invalid length. [ 230.829708][ T7517] 8021q: adding VLAN 0 to HW filter on device bond1 [ 230.911331][ T7523] tipc: Enabled bearer , priority 0 [ 230.911935][ T7523] syzkaller0: entered promiscuous mode [ 230.911948][ T7523] syzkaller0: entered allmulticast mode [ 231.611147][ T7532] tipc: Resetting bearer [ 231.636535][ T9] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 231.652227][ T9] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 232.492232][ T7522] tipc: Resetting bearer [ 232.593110][ T7540] fido_id[7540]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 232.740008][ T7522] tipc: Disabling bearer [ 234.025502][ T9] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 234.035904][ T9] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 235.396999][ T7567] binder: 7566:7567 ioctl c0306201 200000000540 returned -22 [ 236.459520][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 236.617922][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 236.621449][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.621462][ T9] usb 1-1: config 0 has no interfaces? [ 236.624354][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 236.624369][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.624379][ T9] usb 1-1: Product: syz [ 236.624385][ T9] usb 1-1: Manufacturer: syz [ 236.624392][ T9] usb 1-1: SerialNumber: syz [ 236.685491][ T9] usb 1-1: config 0 descriptor?? [ 236.808865][ T7581] tipc: Enabling of bearer rejected, already enabled [ 236.914808][ T809] usb 1-1: USB disconnect, device number 13 [ 237.556191][ T7588] 9p: Bad value for 'rfdno' [ 238.543280][ T7599] netlink: 28 bytes leftover after parsing attributes in process `syz.0.509'. [ 238.543316][ T7599] netlink: 'syz.0.509': attribute type 7 has an invalid length. [ 238.543329][ T7599] netlink: 'syz.0.509': attribute type 8 has an invalid length. [ 238.543340][ T7599] netlink: 4 bytes leftover after parsing attributes in process `syz.0.509'. [ 238.598578][ T7599] bond0: entered promiscuous mode [ 238.598599][ T7599] bond_slave_0: entered promiscuous mode [ 238.598824][ T7599] bond_slave_1: entered promiscuous mode [ 238.657966][ T7599] bond0: left promiscuous mode [ 238.657987][ T7599] bond_slave_0: left promiscuous mode [ 238.658289][ T7599] bond_slave_1: left promiscuous mode [ 239.790488][ T809] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 240.260317][ T809] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 240.260344][ T809] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 240.265084][ T809] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 240.265111][ T809] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 240.265129][ T809] usb 1-1: Product: syz [ 240.265141][ T809] usb 1-1: Manufacturer: syz [ 240.265153][ T809] usb 1-1: SerialNumber: syz [ 240.307648][ T809] usb 1-1: config 0 descriptor?? [ 240.357336][ T809] hub 1-1:0.0: bad descriptor, ignoring hub [ 240.357372][ T809] hub 1-1:0.0: probe with driver hub failed with error -5 [ 240.407279][ T7620] tipc: Enabling of bearer rejected, already enabled [ 240.601544][ T809] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 240.710435][ T5848] udevd[5848]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 240.714061][ T7623] tipc: Enabling of bearer rejected, failed to enable media [ 240.714877][ T7623] syzkaller0: entered promiscuous mode [ 240.714895][ T7623] syzkaller0: entered allmulticast mode [ 240.791491][ T809] usb 1-1: USB disconnect, device number 14 [ 243.145474][ T7648] netlink: 28 bytes leftover after parsing attributes in process `syz.0.523'. [ 243.145507][ T7648] netlink: 'syz.0.523': attribute type 7 has an invalid length. [ 243.145520][ T7648] netlink: 'syz.0.523': attribute type 8 has an invalid length. [ 243.145530][ T7648] netlink: 4 bytes leftover after parsing attributes in process `syz.0.523'. [ 243.189374][ T7648] bond0: entered promiscuous mode [ 243.189393][ T7648] bond_slave_0: entered promiscuous mode [ 243.189610][ T7648] bond_slave_1: entered promiscuous mode [ 243.638946][ T7648] bond0: left promiscuous mode [ 243.638967][ T7648] bond_slave_0: left promiscuous mode [ 243.639205][ T7648] bond_slave_1: left promiscuous mode [ 244.337998][ T5906] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 244.468044][ T5849] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 244.553240][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 244.553267][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 244.556545][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 244.556570][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 244.604852][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 244.604873][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 244.620350][ T5849] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 244.620383][ T5849] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 244.623388][ T5849] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 244.623493][ T5849] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 244.623513][ T5849] usb 1-1: Product: syz [ 244.623524][ T5849] usb 1-1: Manufacturer: syz [ 244.623536][ T5849] usb 1-1: SerialNumber: syz [ 244.691603][ T5849] usb 1-1: config 0 descriptor?? [ 244.706102][ T5906] usb 2-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 244.706128][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.706146][ T5906] usb 2-1: Product: syz [ 244.706158][ T5906] usb 2-1: Manufacturer: syz [ 244.706170][ T5906] usb 2-1: SerialNumber: syz [ 244.741023][ T5906] usb 2-1: config 0 descriptor?? [ 244.749617][ T5849] hub 1-1:0.0: bad descriptor, ignoring hub [ 244.749651][ T5849] hub 1-1:0.0: probe with driver hub failed with error -5 [ 244.774758][ T5906] ti_usb_3410_5052 2-1:0.0: TI USB 5052 2 port adapter converter detected [ 244.775480][ T5906] ti_usb_3410_5052 2-1:0.0: missing endpoints [ 245.168377][ T5849] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 245.230249][ T5849] usb 1-1: USB disconnect, device number 15 [ 245.262790][ T5848] udevd[5848]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 246.077957][ T5849] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 246.241376][ T5849] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 246.241392][ T5849] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 246.241471][ T5849] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 30062, setting to 8 [ 246.241494][ T5849] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 246.241504][ T5849] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.245182][ T7682] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 246.247169][ T5849] hub 4-1:1.0: bad descriptor, ignoring hub [ 246.247188][ T5849] hub 4-1:1.0: probe with driver hub failed with error -5 [ 246.249293][ T5849] cdc_wdm 4-1:1.0: skipping garbage [ 246.249308][ T5849] cdc_wdm 4-1:1.0: skipping garbage [ 246.400699][ T5849] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 246.400724][ T5849] cdc_wdm 4-1:1.0: Unknown control protocol [ 246.999048][ T5849] usb 4-1: USB disconnect, device number 7 [ 248.474298][ T5906] usb 2-1: USB disconnect, device number 12 [ 249.898373][ T5906] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 250.460408][ T5906] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 250.460435][ T5906] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 250.467127][ T5906] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 250.467153][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 250.467168][ T5906] usb 1-1: Product: syz [ 250.467175][ T5906] usb 1-1: Manufacturer: syz [ 250.467182][ T5906] usb 1-1: SerialNumber: syz [ 250.472985][ T5906] usb 1-1: config 0 descriptor?? [ 250.549920][ T5906] hub 1-1:0.0: bad descriptor, ignoring hub [ 250.549955][ T5906] hub 1-1:0.0: probe with driver hub failed with error -5 [ 251.840242][ T5906] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 252.010606][ T5848] udevd[5848]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 252.088227][ T5849] usb 1-1: USB disconnect, device number 16 [ 252.580611][ T7736] tipc: Enabling of bearer rejected, failed to enable media [ 252.591041][ T7736] syzkaller0: entered promiscuous mode [ 252.591066][ T7736] syzkaller0: entered allmulticast mode [ 253.150721][ T7739] 9p: Bad value for 'rfdno' [ 254.267928][ T5849] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 254.433700][ T5849] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 254.433726][ T5849] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 254.435712][ T5849] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 254.435736][ T5849] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 254.438196][ T5849] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 254.438219][ T5849] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 254.442672][ T5849] usb 3-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 254.442695][ T5849] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.442712][ T5849] usb 3-1: Product: syz [ 254.442724][ T5849] usb 3-1: Manufacturer: syz [ 254.442736][ T5849] usb 3-1: SerialNumber: syz [ 254.447684][ T5849] usb 3-1: config 0 descriptor?? [ 254.509004][ T5849] ti_usb_3410_5052 3-1:0.0: TI USB 5052 2 port adapter converter detected [ 254.509143][ T5849] ti_usb_3410_5052 3-1:0.0: missing endpoints [ 255.666771][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.666815][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.225645][ T7774] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 256.246782][ T36] kauditd_printk_skb: 6 callbacks suppressed [ 256.246799][ T36] audit: type=1800 audit(1774320998.272:18): pid=7775 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.556" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 258.769336][ T7786] netlink: 28 bytes leftover after parsing attributes in process `syz.4.561'. [ 258.769371][ T7786] netlink: 'syz.4.561': attribute type 7 has an invalid length. [ 258.769383][ T7786] netlink: 'syz.4.561': attribute type 8 has an invalid length. [ 258.769394][ T7786] netlink: 4 bytes leftover after parsing attributes in process `syz.4.561'. [ 258.835668][ T7786] bond0: entered promiscuous mode [ 258.835689][ T7786] bond_slave_0: entered promiscuous mode [ 258.835894][ T7786] bond_slave_1: entered promiscuous mode [ 258.909581][ T7786] bond0: left promiscuous mode [ 258.909604][ T7786] bond_slave_0: left promiscuous mode [ 258.909833][ T7786] bond_slave_1: left promiscuous mode [ 258.966687][ T5906] usb 3-1: USB disconnect, device number 12 [ 260.770449][ T7796] syz.2.564 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 260.773552][ T7796] netlink: 20 bytes leftover after parsing attributes in process `syz.2.564'. [ 262.943893][ T7809] tipc: Enabling of bearer rejected, failed to enable media [ 262.946293][ T7809] syzkaller0: entered promiscuous mode [ 262.946314][ T7809] syzkaller0: entered allmulticast mode [ 265.161164][ T10] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 265.931299][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 265.931326][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 265.933653][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 265.933677][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 265.936284][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 265.936306][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 265.942678][ T10] usb 3-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 265.942703][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.942720][ T10] usb 3-1: Product: syz [ 265.942740][ T10] usb 3-1: Manufacturer: syz [ 265.942752][ T10] usb 3-1: SerialNumber: syz [ 265.956038][ T10] usb 3-1: config 0 descriptor?? [ 265.968392][ T10] ti_usb_3410_5052 3-1:0.0: TI USB 5052 2 port adapter converter detected [ 265.991849][ T10] ti_usb_3410_5052 3-1:0.0: missing endpoints [ 267.200828][ T7846] tipc: New replicast peer: 255.255.255.255 [ 267.225702][ T7846] tipc: Enabled bearer , priority 10 [ 267.441823][ T7849] tipc: Enabling of bearer rejected, failed to enable media [ 267.442294][ T7849] syzkaller0: entered promiscuous mode [ 267.442306][ T7849] syzkaller0: entered allmulticast mode [ 268.208153][ T809] tipc: Node number set to 2808634561 [ 268.325844][ T7862] tipc: Enabled bearer , priority 0 [ 268.327724][ T7862] syzkaller0: entered promiscuous mode [ 268.327746][ T7862] syzkaller0: entered allmulticast mode [ 268.379543][ T36] audit: type=1326 audit(1774321010.412:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7856 comm="syz.3.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90ed56c799 code=0x7ffc0000 [ 268.379589][ T36] audit: type=1326 audit(1774321010.412:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7856 comm="syz.3.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90ed56c799 code=0x7ffc0000 [ 268.379616][ T36] audit: type=1326 audit(1774321010.412:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7856 comm="syz.3.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f90ed56c799 code=0x7ffc0000 [ 268.379637][ T36] audit: type=1326 audit(1774321010.412:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7856 comm="syz.3.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90ed56c799 code=0x7ffc0000 [ 268.412486][ T36] audit: type=1326 audit(1774321010.412:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7856 comm="syz.3.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f90ed56c799 code=0x7ffc0000 [ 268.414042][ T36] audit: type=1326 audit(1774321010.442:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7856 comm="syz.3.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90ed56c799 code=0x7ffc0000 [ 268.419560][ T36] audit: type=1326 audit(1774321010.452:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7856 comm="syz.3.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f90ed56c799 code=0x7ffc0000 [ 268.470335][ T36] audit: type=1326 audit(1774321010.452:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7856 comm="syz.3.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90ed56c799 code=0x7ffc0000 [ 268.470387][ T36] audit: type=1326 audit(1774321010.492:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7856 comm="syz.3.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f90ed56c799 code=0x7ffc0000 [ 268.598742][ T7866] netlink: 4 bytes leftover after parsing attributes in process `syz.4.586'. [ 268.800623][ T7862] tipc: Resetting bearer [ 268.893038][ T36] audit: type=1326 audit(1774321010.872:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7856 comm="syz.3.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90ed56c799 code=0x7ffc0000 [ 268.951535][ T809] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 269.374994][ T809] usb 4-1: Using ep0 maxpacket: 32 [ 269.438561][ T809] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 269.438614][ T809] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 269.438634][ T809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.493067][ T809] usb 4-1: config 0 descriptor?? [ 269.503788][ T7862] tipc: Disabling bearer [ 269.516771][ T809] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 269.742653][ T7869] netlink: 124 bytes leftover after parsing attributes in process `syz.4.587'. [ 269.781304][ T10] usb 3-1: USB disconnect, device number 13 [ 272.060675][ T5906] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 272.076977][ T5906] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz1] on syz0 [ 272.186719][ T7896] tipc: Enabling of bearer rejected, failed to enable media [ 272.196022][ T7896] syzkaller0: entered promiscuous mode [ 272.196045][ T7896] syzkaller0: entered allmulticast mode [ 272.963285][ T7906] syzkaller0: entered promiscuous mode [ 272.963310][ T7906] syzkaller0: entered allmulticast mode [ 273.002950][ T7905] affs: No valid root block on device nullb0 [ 273.125098][ T7903] syz.4.598 (7903) used greatest stack depth: 18272 bytes left [ 273.251687][ T10] usb 4-1: USB disconnect, device number 8 [ 273.368281][ T809] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 273.772160][ T809] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 273.772178][ T809] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 273.848586][ T809] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 273.848667][ T809] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 273.850133][ T809] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 273.850148][ T809] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 273.916214][ T809] usb 3-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 273.916232][ T809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.916241][ T809] usb 3-1: Product: syz [ 273.916248][ T809] usb 3-1: Manufacturer: syz [ 273.916255][ T809] usb 3-1: SerialNumber: syz [ 273.926302][ T809] usb 3-1: config 0 descriptor?? [ 273.986855][ T809] ti_usb_3410_5052 3-1:0.0: TI USB 5052 2 port adapter converter detected [ 273.986980][ T809] ti_usb_3410_5052 3-1:0.0: missing endpoints [ 274.108866][ T31] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 274.259950][ T31] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 274.259984][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.261214][ T31] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 274.261230][ T31] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 274.261239][ T31] usb 4-1: Manufacturer: syz [ 274.270243][ T31] usb 4-1: config 0 descriptor?? [ 274.438023][ T31] rc_core: IR keymap rc-hauppauge not found [ 274.438035][ T31] Registered IR keymap rc-empty [ 274.449137][ T31] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 274.467159][ T31] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input19 [ 276.574783][ T10] usb 4-1: USB disconnect, device number 9 [ 277.089539][ T7912] ------------[ cut here ]------------ [ 277.089550][ T7912] kcov->t != t [ 277.089563][ T7912] WARNING: kernel/kcov.c:483 at kcov_task_exit+0xf5/0x160, CPU#0: syz.3.602/7912 [ 277.089607][ T7912] Modules linked in: [ 277.089642][ T7912] CPU: 0 UID: 0 PID: 7912 Comm: syz.3.602 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 277.089661][ T7912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 277.089671][ T7912] RIP: 0010:kcov_task_exit+0xf5/0x160 [ 277.089692][ T7912] Code: 10 00 00 48 8b bb 90 00 00 00 e8 16 5b 54 00 48 89 df 5b 41 5e 41 5f e9 d9 32 5a 00 7c 1c 5b 41 5e 41 5f e9 8d 91 62 09 cc 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 eb 2a 61 09 48 89 df be 03 00 [ 277.089712][ T7912] RSP: 0018:ffffc90007ed7d20 EFLAGS: 00010287 [ 277.089728][ T7912] RAX: 005860c447c9dd00 RBX: ffff88802b22b500 RCX: 0000000000000000 [ 277.089742][ T7912] RDX: 000000009c6ac396 RSI: ffffffff8ba671e0 RDI: 00000000ffffffff [ 277.089754][ T7912] RBP: ffffc90007ed7e78 R08: ffffffff8b25a1d0 R09: ffffffff8ddcba80 [ 277.089767][ T7912] R10: dffffc0000000000 R11: fffffbfff1ed4bb7 R12: dffffc0000000000 [ 277.089780][ T7912] R13: 0000000000000000 R14: ffff88802b22b508 R15: ffff888065208000 [ 277.089792][ T7912] FS: 000055557a815500(0000) GS:ffff888126339000(0000) knlGS:0000000000000000 [ 277.089807][ T7912] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 277.089819][ T7912] CR2: 00007f0ba7e964f0 CR3: 00000000392f8000 CR4: 00000000003526f0 [ 277.089839][ T7912] Call Trace: [ 277.089846][ T7912] [ 277.089856][ T7912] do_exit+0x150/0x23c0 [ 277.089877][ T7912] ? lockdep_hardirqs_on+0x7a/0x110 [ 277.089905][ T7912] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 277.089941][ T7912] ? reacquire_held_locks+0x104/0x190 [ 277.089960][ T7912] ? rt_spin_lock+0x1e0/0x400 [ 277.089981][ T7912] ? __pfx_do_exit+0x10/0x10 [ 277.089997][ T7912] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 277.090026][ T7912] ? rt_spin_unlock+0x160/0x200 [ 277.090052][ T7912] do_group_exit+0x21b/0x2d0 [ 277.090076][ T7912] __x64_sys_exit_group+0x3f/0x40 [ 277.090095][ T7912] x64_sys_call+0x221a/0x2240 [ 277.090112][ T7912] do_syscall_64+0x14d/0xf80 [ 277.090129][ T7912] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.090146][ T7912] ? clear_bhb_loop+0x40/0x90 [ 277.090167][ T7912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.090185][ T7912] RIP: 0033:0x7f90ed56c799 [ 277.090209][ T7912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.090224][ T7912] RSP: 002b:00007ffc136500b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 277.090243][ T7912] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f90ed56c799 [ 277.090255][ T7912] RDX: 00007f90ec7c9000 RSI: 0000000000000000 RDI: 0000000000000000 [ 277.090267][ T7912] RBP: 00007ffc1365011c R08: 0000000000000000 R09: 000055557a8289f0 [ 277.090279][ T7912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000054 [ 277.090290][ T7912] R13: 000055557a8289f0 R14: 0000000000042026 R15: 00007ffc13650170 [ 277.090321][ T7912] [ 277.090334][ T7912] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 277.090349][ T7912] CPU: 0 UID: 0 PID: 7912 Comm: syz.3.602 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 277.090369][ T7912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 277.090379][ T7912] Call Trace: [ 277.090386][ T7912] [ 277.090394][ T7912] vpanic+0x56c/0xa60 [ 277.090419][ T7912] ? __pfx__printk+0x10/0x10 [ 277.090438][ T7912] ? __pfx_vpanic+0x10/0x10 [ 277.090459][ T7912] ? is_bpf_text_address+0x292/0x2b0 [ 277.090482][ T7912] ? is_bpf_text_address+0x26/0x2b0 [ 277.090513][ T7912] panic+0xc5/0xd0 [ 277.090536][ T7912] ? __pfx_panic+0x10/0x10 [ 277.090580][ T7912] __warn+0x315/0x4f0 [ 277.090602][ T7912] ? kcov_task_exit+0xf5/0x160 [ 277.090624][ T7912] ? kcov_task_exit+0xf5/0x160 [ 277.090645][ T7912] __report_bug+0x29a/0x540 [ 277.090676][ T7912] ? kcov_task_exit+0xf5/0x160 [ 277.090696][ T7912] ? __pfx___report_bug+0x10/0x10 [ 277.090717][ T7912] ? __pfx_min_vruntime_cb_rotate+0x10/0x10 [ 277.090738][ T7912] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 277.090762][ T7912] ? do_raw_spin_lock+0x12b/0x2f0 [ 277.090793][ T7912] ? kcov_task_exit+0xf5/0x160 [ 277.090813][ T7912] report_bug+0x16a/0x220 [ 277.090838][ T7912] ? kcov_task_exit+0xf5/0x160 [ 277.090856][ T7912] ? kcov_task_exit+0xf7/0x160 [ 277.090875][ T7912] handle_bug+0x9c/0x200 [ 277.090895][ T7912] exc_invalid_op+0x1a/0x50 [ 277.090922][ T7912] asm_exc_invalid_op+0x1a/0x20 [ 277.090940][ T7912] RIP: 0010:kcov_task_exit+0xf5/0x160 [ 277.090961][ T7912] Code: 10 00 00 48 8b bb 90 00 00 00 e8 16 5b 54 00 48 89 df 5b 41 5e 41 5f e9 d9 32 5a 00 7c 1c 5b 41 5e 41 5f e9 8d 91 62 09 cc 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 eb 2a 61 09 48 89 df be 03 00 [ 277.090976][ T7912] RSP: 0018:ffffc90007ed7d20 EFLAGS: 00010287 [ 277.090993][ T7912] RAX: 005860c447c9dd00 RBX: ffff88802b22b500 RCX: 0000000000000000 [ 277.091006][ T7912] RDX: 000000009c6ac396 RSI: ffffffff8ba671e0 RDI: 00000000ffffffff [ 277.091019][ T7912] RBP: ffffc90007ed7e78 R08: ffffffff8b25a1d0 R09: ffffffff8ddcba80 [ 277.091033][ T7912] R10: dffffc0000000000 R11: fffffbfff1ed4bb7 R12: dffffc0000000000 [ 277.091046][ T7912] R13: 0000000000000000 R14: ffff88802b22b508 R15: ffff888065208000 [ 277.091066][ T7912] ? rt_spin_lock+0x1e0/0x400 [ 277.091098][ T7912] do_exit+0x150/0x23c0 [ 277.091116][ T7912] ? lockdep_hardirqs_on+0x7a/0x110 [ 277.091141][ T7912] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 277.091168][ T7912] ? reacquire_held_locks+0x104/0x190 [ 277.091188][ T7912] ? rt_spin_lock+0x1e0/0x400 [ 277.091209][ T7912] ? __pfx_do_exit+0x10/0x10 [ 277.091228][ T7912] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 277.091259][ T7912] ? rt_spin_unlock+0x160/0x200 [ 277.091283][ T7912] do_group_exit+0x21b/0x2d0 [ 277.091308][ T7912] __x64_sys_exit_group+0x3f/0x40 [ 277.091328][ T7912] x64_sys_call+0x221a/0x2240 [ 277.091345][ T7912] do_syscall_64+0x14d/0xf80 [ 277.091362][ T7912] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.091381][ T7912] ? clear_bhb_loop+0x40/0x90 [ 277.091403][ T7912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.091420][ T7912] RIP: 0033:0x7f90ed56c799 [ 277.091435][ T7912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.091448][ T7912] RSP: 002b:00007ffc136500b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 277.091465][ T7912] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f90ed56c799 [ 277.091478][ T7912] RDX: 00007f90ec7c9000 RSI: 0000000000000000 RDI: 0000000000000000 [ 277.091489][ T7912] RBP: 00007ffc1365011c R08: 0000000000000000 R09: 000055557a8289f0 [ 277.091502][ T7912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000054 [ 277.091513][ T7912] R13: 000055557a8289f0 R14: 0000000000042026 R15: 00007ffc13650170 [ 277.091542][ T7912] [ 277.091803][ T7912] Kernel Offset: disabled