last executing test programs: 7m46.204285906s ago: executing program 2 (id=175): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000300)={0x7fffffff, 0x90b}, 0x10) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c00000022008102e00f80ecdb4cb9020a", 0x11}, {0x0}], 0x2, 0x0, 0x0, 0x10}, 0x0) 7m44.021167003s ago: executing program 2 (id=176): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x9c}}, 0x0) 7m43.763291324s ago: executing program 2 (id=178): r0 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='*', 0x1, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x51, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x33, 0x30, 0x37, 0x30, 0x6, 0x30, 0x30, 0x55, 0x30, 0x34, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x8000040}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x8, 0x30, 0x30, 0x39, 0x30, 0x62, 0x30, 0x65, 0x30, 0x31, 0x30, 0x65]}, &(0x7f0000000600)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00020000000000000099aabbccddeeff00112233445566778899aabbccddeef7", 0x3d}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x30, 0x30, 0x38, 0x32, 0x35, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3f}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x32, 0x30, 0x62, 0x67, 0x30, 0x30, 0x0, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3c}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000680)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x33, 0x30, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x36, 0x37, 0x35, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x66, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f00000006c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64, 0x32, 0x30, 0x30, 0x30, 0x30, 0x30, 0x65, 0x62, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa00000000ff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='c', 0x1, r1) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r2, 0x1) 7m43.545706795s ago: executing program 2 (id=182): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 7m42.191210393s ago: executing program 2 (id=184): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0x4296}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2642, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f00000000c0)=0x40) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x4008880) getsockname$packet(r3, 0x0, &(0x7f0000000200)) recvmmsg(0xffffffffffffffff, &(0x7f0000003f40), 0x0, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r4, r4, 0x0, 0x200000) cachestat(r4, &(0x7f0000000000)={0x9}, &(0x7f0000000040), 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'syzkaller0\x00'}) sendmsg$can_raw(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x2, 0x0, 0x0, 0x1}, 0x4040005) 7m36.006632103s ago: executing program 2 (id=199): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0}, &(0x7f0000000540)=0xc) r3 = getegid() keyctl$chown(0x4, 0x0, r2, r3) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0xfffd, 0x0, 0x4, 0x0, @empty, @private}}}}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, 0x49811, 0x49841}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_LINK={0x8, 0x1, r8}]}}}]}, 0x40}}, 0x0) sendto$packet(r6, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r8, 0x1, 0x4, 0x6, @local}, 0x14) mount$fuse(0x0, &(0x7f00000020c0)='./file1\x00', &(0x7f0000002100), 0x2010489, &(0x7f0000000340)=ANY=[]) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}, {0xffef}}, [@qdisc_kind_options=@q_prio={{0x9}, {0xc, 0x2, {0x8}}}]}, 0x48}}, 0x0) 7m19.776735106s ago: executing program 32 (id=199): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0}, &(0x7f0000000540)=0xc) r3 = getegid() keyctl$chown(0x4, 0x0, r2, r3) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0xfffd, 0x0, 0x4, 0x0, @empty, @private}}}}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, 0x49811, 0x49841}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_LINK={0x8, 0x1, r8}]}}}]}, 0x40}}, 0x0) sendto$packet(r6, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r8, 0x1, 0x4, 0x6, @local}, 0x14) mount$fuse(0x0, &(0x7f00000020c0)='./file1\x00', &(0x7f0000002100), 0x2010489, &(0x7f0000000340)=ANY=[]) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}, {0xffef}}, [@qdisc_kind_options=@q_prio={{0x9}, {0xc, 0x2, {0x8}}}]}, 0x48}}, 0x0) 4m27.052306243s ago: executing program 4 (id=761): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x4}}}, {0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x16}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) 4m26.878110843s ago: executing program 4 (id=764): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001000010029fcdbdf2500000000000000", @ANYRES32=0x0, @ANYBLOB="00210400022400001400030062617461647630000000000000000000040014001c001680180001801400"], 0x54}, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f00000018c0), 0x3fffffffffffe83, 0x2, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES8=r0], 0x48}}, 0x2404c054) 4m15.578760563s ago: executing program 4 (id=791): socket$kcm(0x10, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r2, &(0x7f0000000380)="0099", &(0x7f0000000480)=@udp6=r1, 0x2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 4m14.671891231s ago: executing program 4 (id=794): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x1}, 0x1c, 0x0}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) 4m14.22086412s ago: executing program 4 (id=797): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x268, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], [0xffffff7f, 0xfffffefe, 0xff000000, 0xff], 'xfrm0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x2f, 0xb7, 0x0, 0x1}, 0x0, 0xa8, 0xc8, 0x0, {0x0, 0x2000000000000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x6}, {0xffffffffffffffff, 0x8, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2c8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143042, 0xf2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e05816d0c"], 0x7) 4m12.764440866s ago: executing program 4 (id=801): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001000010029fcdbdf2500000000000000", @ANYRES32=0x0, @ANYBLOB="00210400022400001400030062617461647630000000000000000000040014001c001680180001801400"], 0x54}, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f00000018c0), 0x3fffffffffffe83, 0x2, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES8=r0], 0x48}}, 0x2404c054) 3m56.851707198s ago: executing program 33 (id=801): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001000010029fcdbdf2500000000000000", @ANYRES32=0x0, @ANYBLOB="00210400022400001400030062617461647630000000000000000000040014001c001680180001801400"], 0x54}, 0x1, 0x0, 0x0, 0x8}, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f00000018c0), 0x3fffffffffffe83, 0x2, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES8=r0], 0x48}}, 0x2404c054) 14.079721221s ago: executing program 3 (id=1365): io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x2, 0x0, 0xfe) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000100)='.\x00', 0xa4000160) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) read(r2, &(0x7f0000001780)=""/4086, 0xff6) getsockopt$inet6_tcp_int(r1, 0x6, 0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r6 = getpid() syz_open_procfs(r6, 0x0) syz_pidfd_open(r6, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x104000, 0x0) ioctl$OCFS2_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x1, 0x2, 0x3, 0x0, 0xe0000000}) syz_emit_vhci(&(0x7f00000002c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{}, @hci_ev_le_remote_feat_complete={{}, {0xa, 0xc9, "f874c51b196a7717"}}}}, 0x3c) 11.687313632s ago: executing program 0 (id=1368): pipe(0x0) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) 11.628325659s ago: executing program 0 (id=1369): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0xa, 0x1c, 0x1, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @info_request={0xf, 0x0, 0x0, 0x3, 0x3}}}}}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}, 0x1, 0x0, 0x0, 0x84}, 0x8404) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000080)={r1, 0xf, 0x25, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x40) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_vif\x00') socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x20, r8, 0x6a98047402e98331, 0xa1, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x20}}, 0x40010) preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/121, 0x79}], 0x1, 0x5, 0xfffff073) close_range(r0, 0xffffffffffffffff, 0x0) 11.128223284s ago: executing program 3 (id=1370): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f00000005c0)={{}, {0x1, 0x1}, [], {}, [{0x8, 0x2}], {0x10, 0x3}, {0x20, 0x1}}, 0x2c, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fremovexattr(r3, &(0x7f0000000040)=@known='system.posix_acl_default\x00') getxattr(0x0, &(0x7f0000002ac0)=@known='system.posix_acl_access\x00', &(0x7f0000002b00)=""/213, 0xd5) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) 9.004938121s ago: executing program 3 (id=1372): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x900, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1d084, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 8.812156218s ago: executing program 0 (id=1373): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0), 0x40100, 0x0) r1 = openat$dsp(0xffffff9c, &(0x7f00000002c0), 0xc8500, 0x0) ioctl$SNDCTL_DSP_SETDUPLEX(r1, 0x5016, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'team_slave_1\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040005}, 0x24040084) fcntl$notify(r0, 0x402, 0x37) r3 = syz_open_procfs(0x0, &(0x7f0000002900)='sessionid\x00') openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r4, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$rtl8150(r4, 0x0, 0x0) r5 = fsopen(&(0x7f0000000100)='ntfs3\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x2, &(0x7f0000000080)='discard', 0x0, 0x0) r6 = socket(0x2d, 0x80002, 0x0) sendto$inet6(r6, &(0x7f00000001c0)="78c45c15d7e8e8cc5e7408ca236c1325eeafe98d2553ecab089c20184328623d442cdfb3b4da74a23f8c2fc7", 0x2c, 0x20000841, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x1f}, 0x0) r7 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_SMBUS(r7, 0x720, &(0x7f0000000140)={0x0, 0x9, 0x6, &(0x7f0000000000)={0xe, "ee48b71ad5608a40000000ca09b87daf01570d51948976635ea48b3f5b1878e461"}}) syz_usb_control_io$hid(r4, 0x0, 0x0) write$UHID_CREATE2(r3, &(0x7f0000002200)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xba, 0x6b, 0x100, 0x4, 0x4, 0x7, "8baa59911af3be4afd3193a21cbe15b2d3836095d2b9676aa813ddfa0420a873693ba62c7fdeb97dbc6fc202ece09e9c6fecc05be027809e050afc71d0db2a8f706cc90f10c259b9c4c7be945e3d75b59f6771525499c9442232211705d165fb39605750bd806b31d73c08bf19a8174630fdc797239b066d7172a1b08b1c71966a23056fb4ed343f2583c956eeaa7274491192071a325d8960099fdb0bbcfb9be6974ff0e99fbe952dca5c18e888c1a1a151aa577460397ae390"}}, 0x1d2) syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x90, 0x4, "", [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x7, 0x1, 0x2, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x8, 0x5, 0x3}}, [{{0x9, 0x5, 0x82, 0x2, 0x0, 0x9, 0x1, 0x4}}]}}}]}}]}}, &(0x7f0000000c40)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x250, 0xe, 0x5, 0x0, 0x20, 0xf9}, 0x24, &(0x7f0000000280)={0x5, 0xf, 0x24, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x4, 0xd, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x6, 0xf1, 0x9}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x0, 0x8, 0x8, 0xfff, 0x6}]}, 0x9, [{0x36, &(0x7f0000000380)=@string={0x36, 0x3, "7f8bcbfe44a90331fc25e1a223aaea72a8cfacec9d96d18e782675417d8c2dddcb6276e1d03056ecc917644beab49a34990d3e83"}}, {0xf, &(0x7f0000000400)=@string={0xf, 0x3, "5208b61fd5e91ead959b4b96bc"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x1c09}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x1809}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x344a}}, {0x96, &(0x7f0000001040)=@string={0x96, 0x3, "281269b50bec98cf3b982581aabc159f8b064dde077cd4b5aed7fcf83552c1fbba98b4ee63f04a86b84e3e42634f360a6e986102f33bceddbb0fd41cbcee6ce30e16a3d5ea347e9c447eae69f086d1d19404c2ff7fc44c4ac43ea3d7fd32c834b3a9d9ed938ac7d16fee3030ea18a46ff2572727dac468154925307fc9a1fca29839ccf9a9eb3cd157aa16aab3b946021e753e86"}}, {0x9a, &(0x7f0000000a00)=@string={0x9a, 0x3, "38c89336bdfd15283559a11270f1173fcc043c2503c2c09cf158e4d244edb623e76435f44a47172a0497b9bb7a3fc753059fe0ff1abf94285718dad6ba3cf67cc09fddc00856390f70d8e7de0cc9455467ec2166384432370de3453a3d3f31156abc5c4ebb68b0fd5333c0ab9ec102519cd62ce961418fdbe525d966cb69a24feb5bc8c23b336bf2b587025a9d7871b090735c020118c097"}}, {0xc9, &(0x7f0000000ac0)=@string={0xc9, 0x3, "963b670b4e52cd40d0dfc6cdeb2556c36d3b74954af05213981edfb5bef8ce03730e8da2a84a0dda7fcbce5c83b6fea8e46cc2137ec0b05fe7fc52e3590242c9028ccc1752fc87c1d70ea7fda1b5c35316ba03fb64f21b8df09fefc60a4e37ddf59becb2fa39377b6686ce53071b2e75784b52a1e6c878622d655eba0e67b385fb6bad5e66c58d76c94b8f249386b15b7bfad8bcc4e86d245827776e00b31f00e7ce326f13e41f6bcb18043d2c8915ffb75d60a0663348ad6df4f3cfe0fe510e544d47d28244b7"}}, {0x5a, &(0x7f0000000bc0)=@string={0x5a, 0x3, "628dfaac5c9f892ae6af9f56698c3ffd5431f486c862be97eb704a6cc734f8fed9a2469d103f19044cc693fe6f8fc47f39fa172ca7366796beabf3b915039cfa6499f41651f81013a92992e9a710748d30ab703eec90eb82"}}]}) 8.703789062s ago: executing program 1 (id=1375): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd0c, &(0x7f0000000000)="04000000000000000000000038") 8.383034529s ago: executing program 1 (id=1376): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x24, 0x14, 0x1, 0x0, 0x0, {0x2c}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "ad2d1ed3e814f3d0f6"}]}, 0x24}, 0x1, 0x0, 0x0, 0xc004}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001480)={0x1c, 0x2f, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x8, 0x18, 0x0, 0x0, @u32=0xfac09}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4046804}, 0x4000014) socket$kcm(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000019440)=[{&(0x7f0000000340)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed090f0000600000f3a1bc5603ca00", 0x24}], 0x1) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000030c0)=ANY=[@ANYBLOB="f800000016000100000000000000000064010100000000000000000000000000ac1e00010000000000000000000000000000000000000000000040a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e00000010000000000000000000000fdffffffff32000000fe8000000000000000000000000000aa0000000000000000000000000000000000000000000000000025a00000000000ffffffffffff"], 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0xf0, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@rand_addr=0x64010100, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x2, 0x0, 0xee00}, {@in6=@empty, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x6, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe}, {0x0, 0x200000, 0x7}, {0x5, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x40}}, 0xf0}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001c"], 0x104}}, 0x0) 7.607708881s ago: executing program 0 (id=1377): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) r3 = syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, &(0x7f0000002f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.426741643s ago: executing program 5 (id=1378): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[], 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000d35fb3ac5acbef197e5f4da4707dbb00"], 0x50) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32, @ANYBLOB="000052000600050001000000080008"], 0x2c}}, 0x20008000) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)={0x5c, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x34, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) socket$kcm(0x10, 0x2, 0x10) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000000)=0x1, 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x0, @vifc_lcl_ifindex=0x1, @empty}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) write(r4, &(0x7f0000000080)="340000001a000100000000000000000002202000000000000000000008000100e001020308000200ac1414bb0800030001000000", 0x34) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000020000000000000060b4000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014001000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, 0x0, 0x25, 0x0, @void}, 0xf) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000140)=0x1, 0x4) syz_emit_ethernet(0xf5, &(0x7f0000001a80)={@random="bbba6dc53b93", @local, @void, {@llc={0x4, {@llc={0xf4, 0x42, "1ad3", "2dcb99633434f7ce8996b5f721415f8094fd5c2cd763609ac5f7444abfd03817b1122b33b87e6c2d4929a7c80ea8310e774ad740c78a2d06c18d15e6021dd13347ca94e1f4d5f414cfa62c843b1440817b373d9b159384047a7a103c38bddba5b26233cccda670bd04e35162a1b807dc74337c25164546c7694cc0cb0007d02d2b41226a815603bffc6769942503062fe63dc426a1a6fd0ff6bd20861e6151383356d4a628f2ba4978d6e983ef854ed1a9fbb066d8fc61ee4dd1ebaff3f55a66bd74df99c7e7045bb4b6f5770024abe5044ca0f7d1963c4eefd767124160b7fb2b61b9"}}}}}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 7.393522205s ago: executing program 3 (id=1379): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet(0x2, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x8000000000000000, 0x4, 0x100000001, 0x3, 0x24, 0xffffffffffffffff, 0x6, 0x4, 0x100fff}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) syz_emit_ethernet(0x36, &(0x7f0000000000)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x2, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x200000}}}}}, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0xfc, 0x2, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r4, 0xc0405668, 0x0) 5.451964375s ago: executing program 0 (id=1380): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x780, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x754, 0x2, [@TCA_BPF_ACT={0x750, 0x1, [@m_bpf={0xc8, 0x11, 0x0, 0x0, {{0x8}, {0x4}, {0x9d, 0x6, "a41f25d22b1bae1b6bfb4a42ad5ba9db462fca41280c331f630e2c9f0be1093117392575082305ebc27660464ef802792ce06133244235023f0f4882fc0a47f4d5e499a8857cd81b0e6fda422cbc53ad098872214190756df6bbd0e760248aa97e200702fd569bd27d4a70df1d4a123ffc42d2592c81751e15e260622f14aeaaca5dc8acab93651fdd1d5614d98f28fc76d402e1028d910282"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_xt={0x1f4, 0x5, 0x0, 0x0, {{0x7}, {0xe0, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xd9, 0x6, {0x7, 'raw\x00', 0x7, 0x100, "5922b40f3b9231ba6e0c37dcda932a70335da3c7ed969269be350eede0a5fda559f5cb1d2965da3399446c574f0d7ed3b4810fc3efe0304c7bb1d3ed00a60a15519cae499f11ac626316a075637035e57ffcbd48e9b64edfcef2bcef40dc7e09e080d742bd84c2df1d8326e58c401490153b89d988036ca696f840b6fd058e9831b7d5556fc2ddb3310402db87ab3b0fb053ee9ec6a5623950d5c8c27e52368dee7c43591d3c28005b61db04d1f0e1"}}]}, {0xed, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbc2d2bd3a2d1e27de283017ecf9fca6b2cd8a119dee59702830717b694625f60f5c81f688775c5e292f76a0ffa39e1d2cabd639d1c111c01e0d2f9faa220154db33399242bca9f4fac65c74cb6264c28ac7a50037564c7b417fb61d617d212ab3243c30e0e82d9a12651b74553d539b991a302489af94626e5aac41c53b2"}, {0xc, 0x7, {0x0, 0xeb0757422c733451}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_connmark={0x140, 0x1b, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x58800, 0x3, 0x5, 0x6, 0x7}, 0xc33}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x1, 0x7, 0x4}, 0x1}}]}, {0xd5, 0x6, "f270d82c886adacf5114c5d4956f4c0386b817377052208700569e3e94411f8656731bf43d4ce53f014d54b20522c3d868362a84b835ace8d5781d9502179d3ae2be79b08417ea95f622fbbe392f9a4a239373bb16bf08e1d1a31eb023d2007b6b41cb949b6308ddb142dbe0d846716145c55703fbd8c7a3936b5f2be5c41d959a6ae73d3b986e29a38be71293c21abf0c9e792157a90f9cc665de40a6566ab690253f7096302d89dfe6ecf48b4e79a6b22d951064f151a6ef776fe1ef8b510d561b11fe7475fb5af8fe93bec2dae22e1a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_tunnel_key={0xfc, 0x8, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast1}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private0}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}]}, {0x85, 0x6, "51719d53a2b05eda58a80a40d29b01394b8749d7d9ef9f47cce75187b6f333f4bfe797fa4227bf38cf0b71e1b4888d8d1ed410a788c182ba498076ca9ab3d63a8f29175d44a2e8364296c34ac0cdb8972288ecf6515bec4861a53e1e18e54679f5666b0536d0a008aa9b3be1f5e00c4c72460249c372de16eb2cfc15714543d6f3"}, {0xc}, {0xc, 0x8, {0x3, 0xddc47d017e85c037}}}}, @m_xt={0x254, 0x13, 0x0, 0x0, {{0x7}, {0x104, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x75, 0x6, {0x9, 'raw\x00', 0xef, 0x7, "859b467c76be5255b2d4f6101cf6d6cb72c6b46512ecba82df24523b07075e859fd68154d7171a2ca3415ec79cc8ff85b058dae9f1d49e867787957d80637320c0378f6dd94a52c2fc8509"}}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0x61, 0x6, {0x800, 'security\x00', 0x1, 0x7, "d5e486c3628c9e8c7a111651b758fe819fd071b9b7f85b09d69fe633753b56c91ebb716bda7cbe3f10db8feb7bc1aa6f7814145a0e3654"}}]}, {0x129, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x780}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 5.351166374s ago: executing program 1 (id=1381): syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="51b951ecc850791ffc0000884ac18611cdd14d86544e730b8406408cf7efaf3c1531270cf9ca15f57c3fd66a8ef343651197a68c75b699237d9a6b9da40d8bb1bbb1523130ff74ba4e8afbdbad5be4b8facc21e3f98b1f769de1c339c4afd45d8f9527c9766b1f7ddbeba3925541c28e5e7c507de8fe99eb54de5681ba01414e8378df18d8d77629544885df7e2200bacbe1892455d0dce455702667f977755cce924b7a59c3c43cb2e5fe139e893ff8f8058f549d75feb436376e6df9e4e4141db8af48ff49a638dceec05cb96170f426843bf9d895c81c839fa05341a4fcac1328a73d279a6e4d68072a1b153b492853e200"/256, @ANYRES16=r0, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x4000840}, 0x4c804) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x6, 0xff, 0x5}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000004c0)={'wpan0\x00'}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000008c0), r4) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)={0x14, r5, 0xe2c40cf0776ef37, 0xfffffffd, 0x0, {0x5}}, 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000200)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x2}}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000100)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10) bind$tipc(r7, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r7, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000140)={0x40, 0x3, 0x2}, 0x10) bind$tipc(r6, 0x0, 0x0) close(r6) 5.350329148s ago: executing program 5 (id=1382): syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xddd4, 0x4000, 0x3}, &(0x7f0000000340), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000300), 0x3, r1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000580)={0x400, 0x1, &(0x7f0000000180)=[r1], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r3, r2, r2], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) 5.349589732s ago: executing program 3 (id=1383): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000300), 0x3, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000580)={0x400, 0x0, 0x0, &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r4, r3, r3], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) 5.175980496s ago: executing program 5 (id=1384): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000080)=@newtaction={0x18, 0x76, 0x1, 0x70bd2c, 0x25d7dbfc, {}, [{0x4}]}, 0x18}}, 0x0) 5.094521443s ago: executing program 1 (id=1385): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x5, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet(0x2, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x8000000000000000, 0x4, 0x100000001, 0x3, 0x24, 0xffffffffffffffff, 0x6, 0x4, 0x100fff}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) syz_emit_ethernet(0x36, &(0x7f0000000000)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x2, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x200000}}}}}, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0xfc, 0x2, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r4, 0xc0405668, 0x0) 5.007292259s ago: executing program 3 (id=1386): openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000020000e13daa9decbc2ea000407c4919", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090b00000000007baaf0ff00000000bf8700000000000007080000fffdffffbca4000000000000a7040000f0ffffff740200001d00000018290000", @ANYRES32=r3], &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/gser.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000000380)='dummy_udc.0', 0xb) r5 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r5, &(0x7f0000000400)='\n', 0x1) syz_emit_ethernet(0x36, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYBLOB="dd63e0c6a039aa35f9d85b12f6514cc10a83ccfd367e8502e1569f407fc3143416daca3926dff97acc11d169b837459fa60fccc16905d2291b7cf30f74c4ea2846f6ea98b14a2b04f5ffc013b80ea243d9edca7c1149cde7a9412f05af4234", @ANYRES16=r1, @ANYRES32=r2, @ANYRES32=r4], 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 3.49048308s ago: executing program 1 (id=1387): socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x881, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x2, 0x1}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r4, 0x0, 0x0}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) 2.668136126s ago: executing program 0 (id=1388): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, &(0x7f0000003cc0)='gid=1\x00nk]e') r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x800, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000300)={0x1, @raw_data="26d7c444f211b8972bddf47686906d1978555caa82244e9dc082656d19b527a5193f15b14603c44905fb5daa85be926e554ddb229748c7751bc1a11f02991f8c5f23425349851ea418ffcf7af74c0d7f27ea463e1f43b70e8922b3882036c95f5862493dd45b923cccd2b60b5a0cad268f4783e96738825b733cf60deea364f5686859fb2751f1023e359917c8a5f96306a1a533a89e66f430ad8d0c8b518799925b4d02339d33faecaa4a8b0f24eaa5f615fda560308f205780f52d843a8c07f3abbc5e1ecfd880"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) syz_emit_ethernet(0x56, &(0x7f0000006280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @val={@val, {0x8100, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x18, 0x3a, 0xff, @empty, @mcast2, {[], @mld={0x83, 0x0, 0x0, 0x2, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}}}}, 0x0) 2.656775336s ago: executing program 5 (id=1389): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x5, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet(0x2, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r3, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x8000000000000000, 0x4, 0x100000001, 0x3, 0x24, 0xffffffffffffffff, 0x6, 0x4, 0x100fff}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) syz_emit_ethernet(0x36, &(0x7f0000000000)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x2, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x200000}}}}}, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0xfc, 0x2, 0x4}) ioctl$vim2m_VIDIOC_EXPBUF(r4, 0xc0405668, 0x0) 2.308540449s ago: executing program 1 (id=1390): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000000010000000100000900000001"], 0x48) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r3}, 0x38) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[], 0x64}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000001"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) 787.400225ms ago: executing program 5 (id=1391): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0x15) 0s ago: executing program 5 (id=1392): openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000020000e13daa9decbc2ea000407c4919", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090b00000000007baaf0ff00000000bf8700000000000007080000fffdffffbca4000000000000a7040000f0ffffff740200001d00000018290000", @ANYRES32=r3], &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/gser.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000000380)='dummy_udc.0', 0xb) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000f80200010000000000000000001c140000fe00000100000000140012000a00f5f25237b9639b11374230874419"], 0x30}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000440)=ANY=[@ANYRESHEX=r0, @ANYBLOB="dd63e0c6a039aa35f9d85b12f6514cc10a83ccfd367e8502e1569f407fc3143416daca3926dff97acc11d169b837459fa60fccc16905d2291b7cf30f74c4ea2846f6ea98b14a2b04f5ffc013b80ea243d9edca7c1149cde7a9412f05af4234", @ANYRES16=r1, @ANYRES32=r2, @ANYRES32=r4], 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) kernel console output (not intermixed with test programs): r, ret -38 [ 166.149247][ T31] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 166.303704][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 166.317554][ T5751] usb 1-1: USB disconnect, device number 5 [ 166.330961][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.331001][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.331049][ T31] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 166.331078][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.397153][ T31] usb 2-1: config 0 descriptor?? [ 166.923442][ T31] ft260 0003:0403:6030.0004: unknown main item tag 0x0 [ 166.923488][ T31] ft260 0003:0403:6030.0004: unknown main item tag 0x0 [ 167.008020][ T31] ft260 0003:0403:6030.0004: chip code: 0000 0000 [ 167.212470][ T31] ft260 0003:0403:6030.0004: failed to retrieve system status [ 167.212972][ T31] ft260 0003:0403:6030.0004: probe with driver ft260 failed with error -32 [ 167.311528][ T31] usb 2-1: USB disconnect, device number 6 [ 168.914856][ T5587] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 168.935930][ T48] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 168.936671][ T6284] binder: 6280:6284 ioctl c0306201 0 returned -14 [ 169.055657][ T5587] usb 2-1: device descriptor read/64, error -71 [ 169.094813][ T48] usb 4-1: Using ep0 maxpacket: 8 [ 169.101027][ T48] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 169.101060][ T48] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 169.101116][ T48] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 169.101145][ T48] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 100, changing to 10 [ 169.101174][ T48] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 24936, setting to 1024 [ 169.101225][ T48] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 169.101253][ T48] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.217962][ T48] hub 4-1:1.0: bad descriptor, ignoring hub [ 169.218010][ T48] hub 4-1:1.0: probe with driver hub failed with error -5 [ 169.219181][ T48] cdc_wdm 4-1:1.0: skipping garbage [ 169.219227][ T48] cdc_wdm 4-1:1.0: skipping garbage [ 169.249698][ T48] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 169.345128][ T5587] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 169.430579][ T6276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.431233][ T6276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.520985][ T5587] usb 2-1: device descriptor read/64, error -71 [ 169.566732][ T9] usb 4-1: USB disconnect, device number 8 [ 169.642444][ T5587] usb usb2-port1: attempt power cycle [ 170.814852][ T5587] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 170.835705][ T5587] usb 2-1: device descriptor read/8, error -71 [ 171.164750][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 171.405553][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 171.554925][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 171.557579][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.557604][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.557634][ T10] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 171.557652][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.653219][ T10] usb 5-1: config 0 descriptor?? [ 172.191798][ T6299] netlink: 44 bytes leftover after parsing attributes in process `syz.2.159'. [ 172.724749][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 172.782166][ T10] ft260 0003:0403:6030.0005: unknown main item tag 0x0 [ 172.782209][ T10] ft260 0003:0403:6030.0005: unknown main item tag 0x0 [ 172.883738][ T10] ft260 0003:0403:6030.0005: chip code: 0000 0000 [ 172.891581][ T10] ft260 0003:0403:6030.0005: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 173.308383][ T10] ft260 0003:0403:6030.0005: failed to retrieve status: -32, no wakeup [ 173.320130][ T10] ft260 0003:0403:6030.0005: failed to retrieve status: -32 [ 173.549014][ T6292] ft260 0003:0403:6030.0005: ft260_hid_output_report_check_status: failed to start transfer, ret -38 [ 173.809813][ T822] usb 5-1: USB disconnect, device number 6 [ 176.004760][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 176.834763][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 176.874749][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 177.785691][ T5735] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 177.916307][ T5735] usb 1-1: device descriptor read/64, error -71 [ 178.154941][ T5735] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 178.287826][ T6353] netlink: 44 bytes leftover after parsing attributes in process `syz.1.174'. [ 178.328477][ T5735] usb 1-1: device descriptor read/64, error -71 [ 178.556417][ T5735] usb usb1-port1: attempt power cycle [ 179.907560][ T5735] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 180.009169][ T5735] usb 1-1: device descriptor read/8, error -71 [ 180.914742][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 180.924756][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 182.760030][ T5950] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 182.857578][ T6382] binder: 6379:6382 ioctl 4018620d 0 returned -22 [ 182.928246][ T5950] usb 2-1: config 0 has no interfaces? [ 182.929981][ T5950] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 182.930013][ T5950] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 182.930028][ T5950] usb 2-1: Manufacturer: syz [ 182.930040][ T5950] usb 2-1: SerialNumber: syz [ 182.972130][ T5950] usb 2-1: config 0 descriptor?? [ 183.932230][ T6392] netlink: 44 bytes leftover after parsing attributes in process `syz.4.187'. [ 185.311620][ T10] usb 2-1: USB disconnect, device number 11 [ 185.627300][ T6396] netlink: 4 bytes leftover after parsing attributes in process `syz.0.188'. [ 186.027245][ T6399] netlink: 28 bytes leftover after parsing attributes in process `syz.0.190'. [ 186.060444][ T6399] netlink: 28 bytes leftover after parsing attributes in process `syz.0.190'. [ 186.885000][ T5950] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 187.099217][ T5950] usb 1-1: device descriptor read/64, error -71 [ 188.148867][ T5950] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 188.248725][ T6413] netlink: 8 bytes leftover after parsing attributes in process `syz.3.194'. [ 188.248747][ T6413] netlink: 24 bytes leftover after parsing attributes in process `syz.3.194'. [ 188.249087][ T6413] netlink: 8 bytes leftover after parsing attributes in process `syz.3.194'. [ 188.249114][ T6413] netlink: 24 bytes leftover after parsing attributes in process `syz.3.194'. [ 188.284876][ T5950] usb 1-1: device descriptor read/64, error -71 [ 188.408433][ T5950] usb usb1-port1: attempt power cycle [ 188.774891][ T5950] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 188.799428][ T5950] usb 1-1: device descriptor read/8, error -71 [ 189.144993][ T6424] binder: 6423:6424 ioctl 4018620d 0 returned -22 [ 189.184896][ T5950] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 189.205800][ T5950] usb 1-1: device descriptor read/8, error -71 [ 189.315527][ T5950] usb usb1-port1: unable to enumerate USB device [ 189.362227][ T6432] netlink: 'syz.3.201': attribute type 1 has an invalid length. [ 189.424768][ T6434] netlink: 28 bytes leftover after parsing attributes in process `syz.3.201'. [ 189.809060][ T6440] netlink: 16 bytes leftover after parsing attributes in process `syz.4.202'. [ 192.395394][ T6432] bond1: entered promiscuous mode [ 192.451997][ T6432] 8021q: adding VLAN 0 to HW filter on device bond1 [ 194.261148][ T6454] netlink: 8 bytes leftover after parsing attributes in process `syz.4.207'. [ 194.261178][ T6454] netlink: 24 bytes leftover after parsing attributes in process `syz.4.207'. [ 194.261450][ T6454] netlink: 8 bytes leftover after parsing attributes in process `syz.4.207'. [ 194.261467][ T6454] netlink: 24 bytes leftover after parsing attributes in process `syz.4.207'. [ 194.445728][ T6436] netlink: 12 bytes leftover after parsing attributes in process `syz.2.199'. [ 194.610090][ T6462] binder: 6459:6462 ioctl 4018620d 0 returned -22 [ 196.569244][ T5153] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 196.744901][ T5153] usb 1-1: Using ep0 maxpacket: 8 [ 196.747089][ T5153] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 196.747154][ T5153] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 196.747188][ T5153] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 196.747205][ T5153] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.817494][ T5153] usbtmc 1-1:16.0: bulk endpoints not found [ 198.733318][ T822] usb 1-1: USB disconnect, device number 14 [ 200.135434][ T6486] netlink: 16 bytes leftover after parsing attributes in process `syz.0.217'. [ 201.127859][ T6487] tipc: Started in network mode [ 201.127937][ T6487] tipc: Node identity fe0597e6119f, cluster identity 4711 [ 201.128102][ T6487] tipc: Enabled bearer , priority 0 [ 201.781600][ T6487] tipc: Resetting bearer [ 202.220525][ T6485] tipc: Disabling bearer [ 202.327840][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 202.327914][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 202.533177][ T5735] tipc: Node number set to 4019886054 [ 202.792779][ T6497] netlink: 8 bytes leftover after parsing attributes in process `syz.3.219'. [ 202.792811][ T6497] netlink: 24 bytes leftover after parsing attributes in process `syz.3.219'. [ 202.793144][ T6497] netlink: 8 bytes leftover after parsing attributes in process `syz.3.219'. [ 202.793163][ T6497] netlink: 24 bytes leftover after parsing attributes in process `syz.3.219'. [ 202.941106][ T6502] netlink: 'syz.4.220': attribute type 1 has an invalid length. [ 203.050710][ T6506] netlink: 28 bytes leftover after parsing attributes in process `syz.4.220'. [ 203.253931][ T6511] binder: 6507:6511 ioctl c0306201 0 returned -14 [ 203.374379][ T6502] bond1: entered promiscuous mode [ 203.399803][ T6502] 8021q: adding VLAN 0 to HW filter on device bond1 [ 205.275065][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 205.307801][ T6531] netlink: 16 bytes leftover after parsing attributes in process `syz.0.231'. [ 205.846844][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 206.115493][ T10] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 206.115641][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 206.115831][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 206.115872][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.531809][ T10] usb 5-1: can't set config #16, error -71 [ 207.536162][ T10] usb 5-1: USB disconnect, device number 7 [ 208.742221][ T5153] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 208.918571][ T5153] usb 4-1: Using ep0 maxpacket: 8 [ 208.957823][ T5153] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 208.957864][ T5153] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 208.957883][ T5153] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 208.957901][ T5153] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 208.957935][ T5153] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 208.957952][ T5153] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.063671][ T5618] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 209.142159][ T5618] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 209.173637][ T5618] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 209.247513][ T5618] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 209.256765][ T5618] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 209.451319][ T5153] usb 4-1: GET_CAPABILITIES returned 0 [ 209.451359][ T5153] usbtmc 4-1:16.0: can't read capabilities [ 209.765416][ T5736] usb 4-1: USB disconnect, device number 9 [ 210.166951][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 210.297318][ T6556] netlink: 'syz.1.237': attribute type 1 has an invalid length. [ 210.336053][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 210.338735][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.338773][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.338817][ T10] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 210.338866][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.411079][ T10] usb 5-1: config 0 descriptor?? [ 210.429990][ T6559] netlink: 28 bytes leftover after parsing attributes in process `syz.1.237'. [ 210.673516][ T6556] bond1: entered promiscuous mode [ 210.684114][ T6556] 8021q: adding VLAN 0 to HW filter on device bond1 [ 210.852871][ T10] ft260 0003:0403:6030.0006: unknown main item tag 0x0 [ 210.852917][ T10] ft260 0003:0403:6030.0006: unknown main item tag 0x0 [ 210.940707][ T6565] netlink: 'syz.1.239': attribute type 8 has an invalid length. [ 210.940734][ T6565] netlink: 8 bytes leftover after parsing attributes in process `syz.1.239'. [ 211.025815][ T10] ft260 0003:0403:6030.0006: chip code: 0000 0000 [ 211.230805][ T10] ft260 0003:0403:6030.0006: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 211.432224][ T10] ft260 0003:0403:6030.0006: failed to retrieve status: -32, no wakeup [ 211.433496][ T10] ft260 0003:0403:6030.0006: failed to retrieve status: -32 [ 211.448163][ T5612] Bluetooth: hci5: command tx timeout [ 211.658422][ T10] usb 5-1: USB disconnect, device number 8 [ 211.814863][ T203] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 212.002217][ T203] usb 4-1: Using ep0 maxpacket: 8 [ 212.012737][ T203] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 212.012803][ T203] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 212.012934][ T203] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 212.012971][ T203] usb 4-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 212.013024][ T203] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 212.013053][ T203] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.116907][ T203] usbtmc 4-1:16.0: bulk endpoints not found [ 212.123480][ T1190] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.712459][ T5612] Bluetooth: hci5: command tx timeout [ 214.865910][ T5950] usb 4-1: USB disconnect, device number 10 [ 215.355004][ T6595] netlink: 8 bytes leftover after parsing attributes in process `syz.1.246'. [ 215.355034][ T6595] netlink: 12 bytes leftover after parsing attributes in process `syz.1.246'. [ 215.556290][ T6599] netlink: 'syz.4.248': attribute type 1 has an invalid length. [ 215.620696][ T1190] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.648244][ T6600] netlink: 28 bytes leftover after parsing attributes in process `syz.4.248'. [ 215.760729][ T6595] netlink: 8 bytes leftover after parsing attributes in process `syz.1.246'. [ 215.760758][ T6595] netlink: 12 bytes leftover after parsing attributes in process `syz.1.246'. [ 215.835046][ T6599] bond2: entered promiscuous mode [ 215.835670][ T6599] 8021q: adding VLAN 0 to HW filter on device bond2 [ 216.084840][ T5612] Bluetooth: hci5: command tx timeout [ 216.435505][ T1190] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.865181][ T5751] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 217.235114][ T5751] usb 4-1: Using ep0 maxpacket: 32 [ 217.375820][ T5751] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.375870][ T5751] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.376023][ T5751] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 217.376051][ T5751] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.757374][ T5751] usb 4-1: config 0 descriptor?? [ 218.164865][ T5612] Bluetooth: hci5: command tx timeout [ 218.995437][ T5751] ft260 0003:0403:6030.0007: unknown main item tag 0x0 [ 218.995479][ T5751] ft260 0003:0403:6030.0007: unknown main item tag 0x0 [ 219.188173][ T5751] ft260 0003:0403:6030.0007: chip code: 0000 0000 [ 219.389330][ T5751] ft260 0003:0403:6030.0007: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 219.599353][ T5751] ft260 0003:0403:6030.0007: failed to retrieve status: -32, no wakeup [ 219.600606][ T5751] ft260 0003:0403:6030.0007: failed to retrieve status: -32 [ 219.834104][ T6612] ft260 0003:0403:6030.0007: ft260_hid_output_report_check_status: failed to start transfer, ret -38 [ 219.897245][ T6603] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.950669][ T6603] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.984854][ T5751] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 220.144937][ T5751] usb 2-1: Using ep0 maxpacket: 32 [ 220.149707][ T5751] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.149746][ T5751] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.149792][ T5751] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 220.149817][ T5751] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.213948][ T5751] usb 2-1: config 0 descriptor?? [ 220.677858][ T5751] ft260 0003:0403:6030.0008: unknown main item tag 0x0 [ 220.677903][ T5751] ft260 0003:0403:6030.0008: unknown main item tag 0x0 [ 220.949223][ T5751] ft260 0003:0403:6030.0008: chip code: 0000 0000 [ 221.040486][ T5836] usb 4-1: USB disconnect, device number 11 [ 221.072367][ T6603] veth0_to_batadv: left promiscuous mode [ 221.072397][ T6603] veth0_to_batadv: left allmulticast mode [ 221.098722][ T6603] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.124485][ T6603] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.148263][ T5751] ft260 0003:0403:6030.0008: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 221.353367][ T5751] ft260 0003:0403:6030.0008: failed to retrieve status: -32, no wakeup [ 221.366839][ T5751] ft260 0003:0403:6030.0008: failed to retrieve status: -32 [ 221.795690][ T5836] usb 4-1: new low-speed USB device number 12 using dummy_hcd [ 221.924923][ T5751] usb 2-1: reset high-speed USB device number 12 using dummy_hcd [ 221.948579][ T5836] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 221.948690][ T5836] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 221.948713][ T5836] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 221.948733][ T5836] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 221.948753][ T5836] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 221.950056][ T5836] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 221.950112][ T5836] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 221.950206][ T5836] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 221.950238][ T5836] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 221.950269][ T5836] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 221.951611][ T5836] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 221.951672][ T5836] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 221.951737][ T5836] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 221.951757][ T5836] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 221.951784][ T5836] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 222.151087][ T5836] usb 4-1: string descriptor 0 read error: -22 [ 222.151267][ T5836] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 222.151287][ T5836] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.279292][ T5836] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 222.511436][ T5836] usb 4-1: USB disconnect, device number 12 [ 222.810166][ T6603] bond1: left promiscuous mode [ 222.864960][ T6603] bond2: left promiscuous mode [ 223.023126][ T6626] tipc: Enabled bearer , priority 0 [ 223.023937][ T6629] syzkaller0: entered promiscuous mode [ 223.023965][ T6629] syzkaller0: entered allmulticast mode [ 223.062771][ T6634] tipc: Resetting bearer [ 223.162107][ T6648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.262'. [ 223.162136][ T6648] netlink: 20 bytes leftover after parsing attributes in process `syz.1.262'. [ 223.402815][ T1190] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.475630][ T6623] tipc: Resetting bearer [ 223.617526][ T6623] tipc: Disabling bearer [ 223.757346][ T6648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.262'. [ 223.757377][ T6648] netlink: 20 bytes leftover after parsing attributes in process `syz.1.262'. [ 223.833606][ T5153] usb 2-1: USB disconnect, device number 12 [ 223.865697][ T6655] netlink: 8 bytes leftover after parsing attributes in process `syz.4.265'. [ 223.865730][ T6655] netlink: 12 bytes leftover after parsing attributes in process `syz.4.265'. [ 224.012850][ T6655] netlink: 8 bytes leftover after parsing attributes in process `syz.4.265'. [ 224.012879][ T6655] netlink: 12 bytes leftover after parsing attributes in process `syz.4.265'. [ 224.610841][ T5153] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 224.650561][ T1170] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.650620][ T1170] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.650772][ T1170] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.650801][ T1170] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.650884][ T1170] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.650914][ T1170] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.650955][ T1170] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.650984][ T1170] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.651028][ T1170] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.651069][ T1170] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.651128][ T1170] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.651168][ T1170] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.785476][ T6664] netlink: 'syz.4.268': attribute type 4 has an invalid length. [ 224.835285][ T6663] netlink: 'syz.4.268': attribute type 4 has an invalid length. [ 224.855185][ T5153] usb 2-1: Using ep0 maxpacket: 32 [ 224.861947][ T5153] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.861993][ T5153] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.862037][ T5153] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 224.862065][ T5153] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.004127][ T5153] usb 2-1: config 0 descriptor?? [ 225.610502][ T5153] ft260 0003:0403:6030.0009: unknown main item tag 0x0 [ 225.610534][ T5153] ft260 0003:0403:6030.0009: unknown main item tag 0x0 [ 225.717805][ T5153] ft260 0003:0403:6030.0009: chip code: 0000 0000 [ 225.921871][ T5153] ft260 0003:0403:6030.0009: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 226.124310][ T5153] ft260 0003:0403:6030.0009: failed to retrieve status: -32, no wakeup [ 226.133826][ T5153] ft260 0003:0403:6030.0009: failed to retrieve status: -32 [ 226.370388][ T6659] ft260 0003:0403:6030.0009: ft260_hid_output_report_check_status: failed to start transfer, ret -38 [ 227.118878][ T6686] 9pnet_fd: p9_fd_create_tcp (6686): problem binding to privport [ 228.357538][ T5751] usb 2-1: USB disconnect, device number 13 [ 228.441316][ T6693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.276'. [ 228.441350][ T6693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.276'. [ 229.192813][ T1190] bridge_slave_1: left allmulticast mode [ 229.241642][ T1190] bridge_slave_1: left promiscuous mode [ 229.254901][ T1190] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.483591][ T1190] bridge_slave_0: left allmulticast mode [ 229.495540][ T1190] bridge_slave_0: left promiscuous mode [ 229.495852][ T1190] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.088877][ T5607] Bluetooth: hci2: command 0x0406 tx timeout [ 230.171882][ T5607] Bluetooth: hci3: command 0x0406 tx timeout [ 230.171938][ T5607] Bluetooth: hci1: command 0x0406 tx timeout [ 230.190192][ T5606] Bluetooth: hci0: command 0x0406 tx timeout [ 231.815831][ T1190] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.866144][ T1190] bond0 (unregistering): Released all slaves [ 231.925445][ T6691] tipc: Enabled bearer , priority 0 [ 231.929831][ T6712] tipc: Resetting bearer [ 231.931759][ T6700] syzkaller0: entered promiscuous mode [ 231.931778][ T6700] syzkaller0: entered allmulticast mode [ 232.006596][ T6689] tipc: Resetting bearer [ 232.265745][ T6689] tipc: Disabling bearer [ 232.538498][ T5260] 8021q: adding VLAN 0 to HW filter on device eth1 [ 232.716663][ T1190] tipc: Left network mode [ 233.374287][ T6761] netlink: 'syz.0.285': attribute type 4 has an invalid length. [ 233.455380][ T6762] netlink: 'syz.0.285': attribute type 4 has an invalid length. [ 233.763402][ T6546] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.763831][ T6546] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.764292][ T6546] bridge_slave_0: entered allmulticast mode [ 233.791326][ T6546] bridge_slave_0: entered promiscuous mode [ 234.023676][ T6546] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.023821][ T6546] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.024163][ T6546] bridge_slave_1: entered allmulticast mode [ 234.076533][ T6546] bridge_slave_1: entered promiscuous mode [ 234.720863][ T6780] netlink: 83 bytes leftover after parsing attributes in process `syz.1.288'. [ 235.413916][ T6546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.415271][ T5751] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 235.466910][ T6546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.596728][ T5751] usb 5-1: Using ep0 maxpacket: 8 [ 235.600560][ T5751] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 235.600604][ T5751] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 235.600625][ T5751] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 235.600643][ T5751] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 235.600677][ T5751] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 235.600701][ T5751] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.934864][ T5751] usb 5-1: GET_CAPABILITIES returned 0 [ 235.934925][ T5751] usbtmc 5-1:16.0: can't read capabilities [ 236.024879][ T5950] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 236.174932][ T5950] usb 2-1: Using ep0 maxpacket: 8 [ 236.183433][ T5950] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 236.183467][ T5950] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 236.183523][ T5950] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 236.183572][ T5950] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 236.183599][ T5950] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.502215][ T5751] usb 5-1: USB disconnect, device number 9 [ 236.534500][ T5950] hub 2-1:1.0: bad descriptor, ignoring hub [ 236.534549][ T5950] hub 2-1:1.0: probe with driver hub failed with error -5 [ 236.555302][ T5950] cdc_wdm 2-1:1.0: skipping garbage [ 236.555330][ T5950] cdc_wdm 2-1:1.0: skipping garbage [ 236.555344][ T5950] cdc_wdm 2-1:1.0: skipping garbage [ 236.555394][ T5950] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 236.575699][ T5836] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 236.746358][ T5836] usb 4-1: Using ep0 maxpacket: 32 [ 236.763612][ T5836] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.763652][ T5836] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.763696][ T5836] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 236.763722][ T5836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.845301][ T5836] usb 4-1: config 0 descriptor?? [ 236.966030][ T6796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.003064][ T6796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.155601][ T5950] usb 2-1: USB disconnect, device number 14 [ 237.194294][ T6546] team0: Port device team_slave_0 added [ 237.212765][ T5260] 8021q: adding VLAN 0 to HW filter on device eth2 [ 237.233731][ T6546] team0: Port device team_slave_1 added [ 237.283685][ T5836] ft260 0003:0403:6030.000A: unknown main item tag 0x0 [ 237.283728][ T5836] ft260 0003:0403:6030.000A: unknown main item tag 0x0 [ 237.445070][ T1190] hsr_slave_0: left promiscuous mode [ 237.471117][ T5836] ft260 0003:0403:6030.000A: chip code: 0000 0000 [ 237.485861][ T1190] hsr_slave_1: left promiscuous mode [ 237.501088][ T1190] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.504202][ T1190] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.579728][ T1190] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.579767][ T1190] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.673190][ T5836] ft260 0003:0403:6030.000A: failed to retrieve system status [ 237.673593][ T5836] ft260 0003:0403:6030.000A: probe with driver ft260 failed with error -32 [ 237.743733][ T1190] veth1_macvtap: left promiscuous mode [ 237.757119][ T1190] veth0_macvtap: left promiscuous mode [ 237.757613][ T1190] veth1_vlan: left promiscuous mode [ 237.758203][ T1190] veth0_vlan: left promiscuous mode [ 238.017594][ T6811] netlink: 92 bytes leftover after parsing attributes in process `syz.1.296'. [ 238.830858][ T6822] 9pnet_fd: p9_fd_create_tcp (6822): problem binding to privport [ 239.938848][ T5736] usb 4-1: USB disconnect, device number 13 [ 240.035749][ T6828] netlink: 'syz.3.302': attribute type 1 has an invalid length. [ 240.091648][ T6830] netlink: 28 bytes leftover after parsing attributes in process `syz.3.302'. [ 240.460240][ T1190] team0 (unregistering): Port device team_slave_1 removed [ 240.515588][ T1190] team0 (unregistering): Port device team_slave_0 removed [ 241.052345][ T6828] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 241.267003][ T6841] netlink: 8 bytes leftover after parsing attributes in process `syz.4.307'. [ 241.267034][ T6841] netlink: 12 bytes leftover after parsing attributes in process `syz.4.307'. [ 241.316681][ T6546] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.316704][ T6546] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 241.316734][ T6546] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.318938][ T6842] netlink: 12 bytes leftover after parsing attributes in process `syz.1.306'. [ 241.323916][ T6841] netlink: 8 bytes leftover after parsing attributes in process `syz.4.307'. [ 241.323941][ T6841] netlink: 12 bytes leftover after parsing attributes in process `syz.4.307'. [ 241.405736][ T6546] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.405757][ T6546] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 241.405800][ T6546] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.858399][ T6855] netlink: 'syz.4.311': attribute type 4 has an invalid length. [ 241.907026][ T6852] netlink: 'syz.4.311': attribute type 4 has an invalid length. [ 242.055252][ T6546] hsr_slave_0: entered promiscuous mode [ 242.091273][ T6546] hsr_slave_1: entered promiscuous mode [ 242.092510][ T6546] debugfs: 'hsr0' already exists in 'hsr' [ 242.092539][ T6546] Cannot create hsr debugfs directory [ 243.042528][ T6878] 9pnet_fd: p9_fd_create_tcp (6878): problem binding to privport [ 243.919924][ T5751] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 244.221490][ T6880] Bluetooth: MGMT ver 1.23 [ 244.273023][ T5751] usb 2-1: Using ep0 maxpacket: 8 [ 244.286331][ T5751] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 244.286365][ T5751] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 244.286421][ T5751] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 244.286450][ T5751] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 100, changing to 10 [ 244.286500][ T5751] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 24936, setting to 1024 [ 244.286551][ T5751] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 244.286577][ T5751] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.497765][ T5751] hub 2-1:1.0: bad descriptor, ignoring hub [ 244.497812][ T5751] hub 2-1:1.0: probe with driver hub failed with error -5 [ 244.498812][ T5751] cdc_wdm 2-1:1.0: skipping garbage [ 244.498840][ T5751] cdc_wdm 2-1:1.0: skipping garbage [ 244.498947][ T5751] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 244.937524][ T6871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.937974][ T6871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.131251][ T5153] usb 2-1: USB disconnect, device number 15 [ 245.153927][ T6885] netlink: 'syz.3.318': attribute type 1 has an invalid length. [ 245.252090][ T6887] netlink: 28 bytes leftover after parsing attributes in process `syz.3.318'. [ 245.453094][ T6885] bond2: entered promiscuous mode [ 245.460203][ T6885] 8021q: adding VLAN 0 to HW filter on device bond2 [ 245.552875][ T5260] 8021q: adding VLAN 0 to HW filter on device eth3 [ 246.763253][ T6918] veth1_to_bond: entered allmulticast mode [ 246.774382][ T6918] netlink: 4 bytes leftover after parsing attributes in process `syz.0.326'. [ 246.947690][ T6918] veth1_to_bond (unregistering): left allmulticast mode [ 247.166468][ T6918] bond0: (slave bond_slave_1): Releasing backup interface [ 247.375025][ T5736] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 247.488903][ T5260] 8021q: adding VLAN 0 to HW filter on device eth4 [ 247.525471][ T5736] usb 4-1: Using ep0 maxpacket: 32 [ 247.534151][ T5736] usb 4-1: unable to get BOS descriptor or descriptor too short [ 247.550316][ T5736] usb 4-1: config 8 has an invalid interface number: 220 but max is 1 [ 247.550350][ T5736] usb 4-1: config 8 has an invalid descriptor of length 102, skipping remainder of the config [ 247.550372][ T5736] usb 4-1: config 8 has no interface number 0 [ 247.550436][ T5736] usb 4-1: config 8 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 247.550467][ T5736] usb 4-1: config 8 interface 220 has no altsetting 0 [ 247.550489][ T5736] usb 4-1: config 8 interface 1 has no altsetting 0 [ 247.607936][ T5736] usb 4-1: New USB device found, idVendor=04e2, idProduct=1401, bcdDevice=34.ae [ 247.607984][ T5736] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.608008][ T5736] usb 4-1: Product: syz [ 247.608025][ T5736] usb 4-1: Manufacturer: syz [ 247.608042][ T5736] usb 4-1: SerialNumber: syz [ 247.780486][ T6931] netlink: 68 bytes leftover after parsing attributes in process `syz.0.329'. [ 247.936530][ T6923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.937166][ T6923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.974809][ T6923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.997000][ T6923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.034128][ T6923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.046234][ T6923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.064590][ T6923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.075543][ T6923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.183402][ T6928] netlink: 1363 bytes leftover after parsing attributes in process `syz.1.328'. [ 248.282903][ T5736] xr_serial 4-1:8.220: xr_serial converter detected [ 248.326547][ T6546] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 248.358766][ T5736] xr_serial ttyUSB0: Failed to set reg 0x81: -71 [ 248.358834][ T5736] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 248.479869][ T5736] usb 4-1: USB disconnect, device number 14 [ 248.600863][ T5736] xr_serial 4-1:8.220: device disconnected [ 248.770920][ T6546] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 248.794165][ T6546] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 249.383727][ T6546] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 249.403962][ T6546] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 249.547370][ T6546] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 249.582620][ T6546] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 249.801122][ T6546] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 249.893229][ T6983] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 250.323607][ T6996] syzkaller0: entered promiscuous mode [ 250.323641][ T6996] syzkaller0: entered allmulticast mode [ 250.477922][ T6996] tipc: Enabled bearer , priority 0 [ 250.533037][ T6996] tipc: Resetting bearer [ 250.855848][ T6995] tipc: Resetting bearer [ 257.376437][ T6995] tipc: Disabling bearer [ 257.701825][ T5153] tipc: Node number set to 2921096678 [ 258.013049][ T7029] netlink: 'syz.0.349': attribute type 4 has an invalid length. [ 258.075326][ T7031] netlink: 'syz.0.349': attribute type 4 has an invalid length. [ 258.245061][ T5153] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 258.251472][ T6546] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.397713][ T5153] usb 2-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 258.397757][ T5153] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 4 [ 258.397790][ T5153] usb 2-1: config 0 interface 0 has no altsetting 0 [ 258.403254][ T5153] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 258.403303][ T5153] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 258.403326][ T5153] usb 2-1: Product: syz [ 258.403342][ T5153] usb 2-1: Manufacturer: syz [ 258.403380][ T5153] usb 2-1: SerialNumber: syz [ 258.431588][ T7034] netlink: 1319 bytes leftover after parsing attributes in process `syz.4.350'. [ 258.485914][ T5153] usb 2-1: config 0 descriptor?? [ 258.531234][ T5153] usb 2-1: selecting invalid altsetting 0 [ 258.621911][ T6546] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.751957][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.759663][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.134846][ T7042] Bluetooth: MGMT ver 1.23 [ 259.214567][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.239800][ T5153] usb 2-1: USB disconnect, device number 16 [ 259.277728][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.692290][ T7052] udevd[7052]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 260.791161][ T7073] netlink: 1363 bytes leftover after parsing attributes in process `syz.0.364'. [ 261.146028][ T7094] netlink: 'syz.3.369': attribute type 4 has an invalid length. [ 261.192657][ T7094] netlink: 'syz.3.369': attribute type 4 has an invalid length. [ 261.464987][ T5736] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 261.604934][ T5751] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 261.605428][ T5736] usb 2-1: device descriptor read/64, error -71 [ 261.754858][ T5751] usb 4-1: Using ep0 maxpacket: 8 [ 261.758976][ T5751] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 261.759018][ T5751] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 261.759047][ T5751] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 261.759075][ T5751] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 261.759121][ T5751] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 261.759146][ T5751] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.855182][ T5736] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 261.984877][ T5736] usb 2-1: device descriptor read/64, error -71 [ 262.049613][ T5751] usb 4-1: GET_CAPABILITIES returned 0 [ 262.049673][ T5751] usbtmc 4-1:16.0: can't read capabilities [ 262.096153][ T5736] usb usb2-port1: attempt power cycle [ 262.133248][ T6546] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.268766][ C1] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 262.268915][ C1] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 262.268994][ C1] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 262.396599][ T48] usb 4-1: USB disconnect, device number 15 [ 262.494837][ T5736] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 262.515932][ T5736] usb 2-1: device descriptor read/8, error -71 [ 262.592589][ T7120] veth1_to_bond: entered allmulticast mode [ 262.606005][ T7120] veth1_to_bond: entered promiscuous mode [ 262.616850][ T7118] veth1_to_bond: left promiscuous mode [ 262.781684][ T7118] veth1_to_bond: left allmulticast mode [ 262.795212][ T5736] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 262.815961][ T5736] usb 2-1: device descriptor read/8, error -71 [ 262.925399][ T5736] usb usb2-port1: unable to enumerate USB device [ 263.098359][ T7130] tipc: Enabled bearer , priority 0 [ 263.121670][ T7130] tipc: Resetting bearer [ 263.349120][ T7129] tipc: Disabling bearer [ 263.794988][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 263.795067][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.893218][ T60] Bluetooth: hci5: link tx timeout [ 263.912638][ T60] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 264.152418][ T7158] netlink: 12 bytes leftover after parsing attributes in process `syz.0.375'. [ 264.239271][ T6546] veth0_vlan: entered promiscuous mode [ 264.353410][ T6546] veth1_vlan: entered promiscuous mode [ 264.549585][ T6546] veth0_macvtap: entered promiscuous mode [ 264.586423][ T6546] veth1_macvtap: entered promiscuous mode [ 264.787031][ T6546] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.878064][ T6546] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.027407][ T1031] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.027712][ T1031] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.027755][ T1031] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.027787][ T1031] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.090765][ T7175] netlink: 240 bytes leftover after parsing attributes in process `syz.3.382'. [ 266.007740][ T60] Bluetooth: hci5: command 0x0406 tx timeout [ 267.093434][ T60] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 267.140604][ T60] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 267.177864][ T60] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 267.194926][ T60] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 267.199936][ T60] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 269.370066][ T5612] Bluetooth: hci4: command tx timeout [ 271.445971][ T5612] Bluetooth: hci4: command tx timeout [ 271.464823][ T5950] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 271.658200][ T5950] usb 5-1: Using ep0 maxpacket: 32 [ 271.660907][ T5950] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.660946][ T5950] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.660991][ T5950] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 271.661017][ T5950] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.729865][ T5950] usb 5-1: config 0 descriptor?? [ 272.180679][ T5950] ft260 0003:0403:6030.000B: unknown main item tag 0x0 [ 272.180723][ T5950] ft260 0003:0403:6030.000B: unknown main item tag 0x0 [ 272.382667][ T5950] ft260 0003:0403:6030.000B: chip code: 0000 0000 [ 272.591751][ T5950] ft260 0003:0403:6030.000B: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 272.805879][ T5950] ft260 0003:0403:6030.000B: failed to retrieve status: -32, no wakeup [ 272.807313][ T5950] ft260 0003:0403:6030.000B: failed to retrieve status: -32 [ 272.924954][ T6644] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.030117][ T7238] ft260 0003:0403:6030.000B: ft260_hid_output_report_check_status: failed to start transfer, ret -38 [ 273.196728][ T7269] netlink: 8 bytes leftover after parsing attributes in process `syz.1.403'. [ 273.196758][ T7269] netlink: 12 bytes leftover after parsing attributes in process `syz.1.403'. [ 273.468554][ T7269] netlink: 8 bytes leftover after parsing attributes in process `syz.1.403'. [ 273.468610][ T7269] netlink: 12 bytes leftover after parsing attributes in process `syz.1.403'. [ 273.529840][ T5612] Bluetooth: hci4: command tx timeout [ 274.704086][ T5736] usb 5-1: USB disconnect, device number 10 [ 275.719314][ T5612] Bluetooth: hci4: command tx timeout [ 276.519589][ T6644] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.897703][ T7291] syzkaller0: entered promiscuous mode [ 276.897737][ T7291] syzkaller0: entered allmulticast mode [ 288.563272][ T6644] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.474855][ T5736] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 289.627522][ T5736] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 289.627579][ T5736] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.627610][ T5736] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.627636][ T5736] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 289.627696][ T5736] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 289.627722][ T5736] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.722928][ T5736] usb 1-1: config 0 descriptor?? [ 290.201344][ T5736] holtek_kbd 0003:04D9:A055.000C: unbalanced delimiter at end of report description [ 290.202171][ T5736] holtek_kbd 0003:04D9:A055.000C: probe with driver holtek_kbd failed with error -22 [ 290.261192][ T7334] netlink: 240 bytes leftover after parsing attributes in process `syz.4.418'. [ 290.451627][ T6644] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.587893][ T7333] netlink: 1319 bytes leftover after parsing attributes in process `syz.1.419'. [ 291.285520][ T5153] usb 1-1: USB disconnect, device number 15 [ 291.363846][ T7361] netlink: 240 bytes leftover after parsing attributes in process `syz.3.424'. [ 292.772556][ T7377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.431'. [ 292.772586][ T7377] netlink: 12 bytes leftover after parsing attributes in process `syz.0.431'. [ 292.942549][ T7377] netlink: 8 bytes leftover after parsing attributes in process `syz.0.431'. [ 292.942581][ T7377] netlink: 12 bytes leftover after parsing attributes in process `syz.0.431'. [ 292.984875][ T5735] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 293.136345][ T5735] usb 4-1: Using ep0 maxpacket: 8 [ 293.138712][ T5735] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 293.138742][ T5735] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 293.138797][ T5735] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 293.138829][ T5735] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 293.138877][ T5735] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 293.138905][ T5735] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.242236][ T5735] hub 4-1:1.0: bad descriptor, ignoring hub [ 293.242286][ T5735] hub 4-1:1.0: probe with driver hub failed with error -5 [ 293.243345][ T5735] cdc_wdm 4-1:1.0: skipping garbage [ 293.243364][ T5735] cdc_wdm 4-1:1.0: skipping garbage [ 293.297425][ T5735] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 293.297473][ T5735] cdc_wdm 4-1:1.0: Unknown control protocol [ 294.049647][ T7400] netlink: 240 bytes leftover after parsing attributes in process `syz.0.432'. [ 294.206837][ T6644] bridge_slave_1: left allmulticast mode [ 294.206872][ T6644] bridge_slave_1: left promiscuous mode [ 294.207124][ T6644] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.381854][ T6633] usb 4-1: USB disconnect, device number 16 [ 294.410343][ T7376] cdc_wdm 4-1:1.0: Error autopm - -16 [ 294.603395][ T6644] bridge_slave_0: left allmulticast mode [ 294.603439][ T6644] bridge_slave_0: left promiscuous mode [ 294.603719][ T6644] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.227260][ T6644] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 296.285502][ T6644] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 296.329236][ T6644] bond0 (unregistering): Released all slaves [ 296.415136][ T5260] 8021q: adding VLAN 0 to HW filter on device eth5 [ 296.712744][ T7200] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.712974][ T7200] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.713256][ T7200] bridge_slave_0: entered allmulticast mode [ 296.750396][ T7200] bridge_slave_0: entered promiscuous mode [ 296.803745][ T7200] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.803917][ T7200] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.804363][ T7200] bridge_slave_1: entered allmulticast mode [ 296.879093][ T7200] bridge_slave_1: entered promiscuous mode [ 297.505534][ T6644] hsr_slave_0: left promiscuous mode [ 297.547963][ T6644] hsr_slave_1: left promiscuous mode [ 297.549252][ T6644] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 297.549283][ T6644] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 297.663748][ T6644] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.663775][ T6644] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 297.704998][ T7444] netlink: 1363 bytes leftover after parsing attributes in process `syz.0.439'. [ 297.941507][ T6644] veth1_macvtap: left promiscuous mode [ 297.941620][ T6644] veth0_macvtap: left promiscuous mode [ 297.941858][ T6644] veth1_vlan: left promiscuous mode [ 297.942030][ T6644] veth0_vlan: left promiscuous mode [ 298.947045][ T6644] team0 (unregistering): Port device team_slave_1 removed [ 299.005934][ T6644] team0 (unregistering): Port device team_slave_0 removed [ 299.269762][ T7200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.273380][ T7426] syzkaller0: entered promiscuous mode [ 299.273422][ T7426] syzkaller0: entered allmulticast mode [ 299.714024][ T7200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.398496][ T7200] team0: Port device team_slave_0 added [ 300.407798][ T7200] team0: Port device team_slave_1 added [ 300.843661][ T7200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.843681][ T7200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 300.843704][ T7200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.885252][ T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 300.935912][ T7200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 300.935934][ T7200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 300.935965][ T7200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.014882][ T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.015335][ T2285] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.015403][ T2285] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.411188][ T7200] hsr_slave_0: entered promiscuous mode [ 301.490600][ T7200] hsr_slave_1: entered promiscuous mode [ 301.495767][ T7200] debugfs: 'hsr0' already exists in 'hsr' [ 301.495848][ T7200] Cannot create hsr debugfs directory [ 301.667018][ T7495] syzkaller0: entered promiscuous mode [ 301.667053][ T7495] syzkaller0: entered allmulticast mode [ 305.602462][ T7519] 9pnet_fd: p9_fd_create_tcp (7519): problem connecting socket to 127.0.0.1 [ 306.587079][ T5260] 8021q: adding VLAN 0 to HW filter on device eth6 [ 307.863244][ T6633] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 308.295733][ T6633] usb 5-1: Using ep0 maxpacket: 32 [ 308.298800][ T6633] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.298837][ T6633] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.298902][ T6633] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 308.298930][ T6633] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.374524][ T6633] usb 5-1: config 0 descriptor?? [ 308.866564][ T6633] ft260 0003:0403:6030.000D: unknown main item tag 0x0 [ 308.866605][ T6633] ft260 0003:0403:6030.000D: unknown main item tag 0x0 [ 309.000771][ T6633] ft260 0003:0403:6030.000D: chip code: 0000 0000 [ 309.023216][ T7558] netlink: 'syz.3.470': attribute type 4 has an invalid length. [ 309.054875][ T5736] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 309.114772][ T7560] netlink: 'syz.3.470': attribute type 4 has an invalid length. [ 309.202946][ T6633] ft260 0003:0403:6030.000D: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 309.211504][ T5736] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 309.211537][ T5736] usb 2-1: config 0 has no interface number 0 [ 309.211659][ T5736] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.211692][ T5736] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.212065][ T5736] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 309.212139][ T5736] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.364340][ T5736] usb 2-1: config 0 descriptor?? [ 309.405989][ T6633] ft260 0003:0403:6030.000D: failed to retrieve status: -32, no wakeup [ 309.407817][ T6633] ft260 0003:0403:6030.000D: failed to retrieve status: -32 [ 309.656836][ T7524] ft260 0003:0403:6030.000D: ft260_hid_output_report_check_status: failed to start transfer, ret -38 [ 309.829181][ T5736] prodikeys 0003:041E:2801.000E: reserved main item tag 0xd [ 309.829230][ T5736] prodikeys 0003:041E:2801.000E: item fetching failed at offset 5/7 [ 309.831623][ T5736] prodikeys 0003:041E:2801.000E: hid parse failed [ 309.831745][ T5736] prodikeys 0003:041E:2801.000E: probe with driver prodikeys failed with error -22 [ 310.069721][ T5153] usb 2-1: USB disconnect, device number 21 [ 310.759197][ T5836] usb 5-1: USB disconnect, device number 11 [ 311.205499][ T7597] syz.4.477 uses obsolete (PF_INET,SOCK_PACKET) [ 311.263620][ T7597] block nbd0: not configured, cannot reconfigure [ 311.974855][ T5736] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 312.206122][ T5736] usb 2-1: Using ep0 maxpacket: 32 [ 312.208595][ T5736] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.208636][ T5736] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.208681][ T5736] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 312.208728][ T5736] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.352542][ T5736] usb 2-1: config 0 descriptor?? [ 312.908263][ T5736] ft260 0003:0403:6030.000F: unknown main item tag 0x0 [ 312.908308][ T5736] ft260 0003:0403:6030.000F: unknown main item tag 0x0 [ 312.971536][ T5736] ft260 0003:0403:6030.000F: chip code: 0000 0000 [ 313.153244][ T7650] netlink: 44 bytes leftover after parsing attributes in process `syz.4.492'. [ 313.174358][ T5736] ft260 0003:0403:6030.000F: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 313.450837][ T7656] 9pnet_fd: p9_fd_create_tcp (7656): problem connecting socket to 127.0.0.1 [ 313.997504][ T5736] ft260 0003:0403:6030.000F: failed to retrieve status: -32, no wakeup [ 314.382064][ T5736] ft260 0003:0403:6030.000F: failed to retrieve status: -32 [ 314.436267][ T7656] syz.0.493 (7656) used greatest stack depth: 19808 bytes left [ 314.658817][ T7607] ft260 0003:0403:6030.000F: ft260_hid_output_report_check_status: failed to start transfer, ret -38 [ 314.681293][ T5735] usb 2-1: reset high-speed USB device number 22 using dummy_hcd [ 314.829166][ T7664] tipc: Enabled bearer , priority 0 [ 314.918609][ T7664] tipc: Resetting bearer [ 315.273848][ T7662] tipc: Disabling bearer [ 315.564018][ T7679] tipc: Enabled bearer , priority 0 [ 315.661145][ T7672] tipc: Resetting bearer [ 315.943522][ T7671] tipc: Disabling bearer [ 317.037649][ T7200] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 317.163994][ T7200] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 317.178811][ T7200] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 317.320013][ T7200] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 317.370406][ T7721] lo: entered allmulticast mode [ 317.432010][ T7200] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 317.513639][ T7200] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 317.624830][ T203] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 317.640589][ T7200] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 317.749963][ T7200] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 317.786768][ T203] usb 4-1: Using ep0 maxpacket: 8 [ 317.791870][ T203] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 317.791913][ T203] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 317.791943][ T203] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 317.791989][ T203] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 317.792037][ T203] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 317.792067][ T203] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.935749][ T7712] lo: left allmulticast mode [ 318.176313][ T203] usb 4-1: GET_CAPABILITIES returned 0 [ 318.176378][ T203] usbtmc 4-1:16.0: can't read capabilities [ 318.390789][ T203] usb 4-1: USB disconnect, device number 17 [ 318.948672][ T7200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.017439][ T7200] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.050387][ T1190] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.050623][ T1190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.079100][ T1190] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.079432][ T1190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.460947][ T7756] netlink: 12 bytes leftover after parsing attributes in process `syz.0.511'. [ 321.274085][ T7607] ft260 0003:0403:6030.000F: failed to reset I2C controller: -110 [ 322.269547][ T5735] usb 2-1: device descriptor read/64, error -32 [ 323.307244][ T48] usb 2-1: USB disconnect, device number 22 [ 324.335381][ T5735] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 324.507412][ T5735] usb 4-1: Using ep0 maxpacket: 8 [ 324.512201][ T5735] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 324.512241][ T5735] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 324.512271][ T5735] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 324.512296][ T5735] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 324.512341][ T5735] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 324.512369][ T5735] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.797854][ T5735] usb 4-1: GET_CAPABILITIES returned 0 [ 324.797912][ T5735] usbtmc 4-1:16.0: can't read capabilities [ 325.018492][ C1] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 325.018606][ C1] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 325.144489][ T6633] usb 4-1: USB disconnect, device number 18 [ 325.350752][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 325.350832][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 325.352891][ T7200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 327.820396][ T60] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 327.858637][ T60] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 327.866014][ T60] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 327.867658][ T60] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 327.869663][ T60] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 328.659810][ T7866] netlink: 16 bytes leftover after parsing attributes in process `syz.0.536'. [ 328.800602][ T7870] netlink: 'syz.4.538': attribute type 27 has an invalid length. [ 328.800794][ T7870] netlink: 8 bytes leftover after parsing attributes in process `syz.4.538'. [ 328.800832][ T7870] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 330.037187][ T5612] Bluetooth: hci5: command tx timeout [ 330.673663][ T7900] netlink: 'syz.0.545': attribute type 4 has an invalid length. [ 330.986519][ T7888] kthread_run failed with err -4 [ 331.225268][ T7911] netlink: 16 bytes leftover after parsing attributes in process `syz.4.549'. [ 331.448253][ T7921] netlink: 'syz.0.551': attribute type 4 has an invalid length. [ 331.498417][ T7923] netlink: 'syz.0.551': attribute type 4 has an invalid length. [ 332.086002][ T5612] Bluetooth: hci5: command tx timeout [ 332.223471][ T7941] netlink: 'syz.1.559': attribute type 4 has an invalid length. [ 332.281374][ T7940] netlink: 'syz.1.559': attribute type 4 has an invalid length. [ 332.337964][ T7945] netlink: 60 bytes leftover after parsing attributes in process `syz.3.561'. [ 332.749062][ T7958] syz.0.563 (7958) used greatest stack depth: 19064 bytes left [ 333.021745][ T7955] netlink: 'syz.4.562': attribute type 5 has an invalid length. [ 333.021769][ T7955] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.562'. [ 334.168227][ T5612] Bluetooth: hci5: command tx timeout [ 336.236443][ T8058] netlink: 'syz.0.581': attribute type 4 has an invalid length. [ 336.244856][ T5612] Bluetooth: hci5: command tx timeout [ 336.634983][ T69] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.635050][ T69] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.635079][ T69] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 336.635106][ T69] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.072985][ T8063] syzkaller0: entered promiscuous mode [ 337.073012][ T8063] syzkaller0: entered allmulticast mode [ 337.100455][ T8067] netlink: 48 bytes leftover after parsing attributes in process `syz.4.584'. [ 337.155098][ T8063] tipc: Enabled bearer , priority 0 [ 337.155677][ T8067] netlink: 48 bytes leftover after parsing attributes in process `syz.4.584'. [ 337.346159][ T8071] tipc: Resetting bearer [ 337.504007][ T8062] tipc: Resetting bearer [ 337.756482][ T8062] tipc: Disabling bearer [ 337.889047][ T8084] netlink: 240 bytes leftover after parsing attributes in process `syz.4.588'. [ 337.939923][ T7852] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.940156][ T7852] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.941037][ T7852] bridge_slave_0: entered allmulticast mode [ 337.944549][ T7852] bridge_slave_0: entered promiscuous mode [ 338.124033][ T7852] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.124189][ T7852] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.124518][ T7852] bridge_slave_1: entered allmulticast mode [ 338.183914][ T7852] bridge_slave_1: entered promiscuous mode [ 338.468078][ T8098] netlink: 240 bytes leftover after parsing attributes in process `syz.0.593'. [ 338.786964][ T7852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.862632][ T7852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 339.357269][ T7852] team0: Port device team_slave_0 added [ 339.443152][ T7852] team0: Port device team_slave_1 added [ 339.674213][ T56] bridge_slave_1: left allmulticast mode [ 339.674256][ T56] bridge_slave_1: left promiscuous mode [ 339.698554][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.888159][ T56] bridge_slave_0: left allmulticast mode [ 339.888204][ T56] bridge_slave_0: left promiscuous mode [ 339.888480][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.965783][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 342.045745][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 342.067608][ T56] bond0 (unregistering): Released all slaves [ 342.613914][ T8127] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.634935][ T8127] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.947142][ T8127] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 342.963517][ T8127] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 343.587328][ T8174] 9pnet_virtio: no channels available for device 127.0.0.1 [ 344.865262][ T8127] bond1: left promiscuous mode [ 346.168859][ T5260] 8021q: adding VLAN 0 to HW filter on device eth5 [ 346.220441][ T7852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.220462][ T7852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.220493][ T7852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.224302][ T7852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.224320][ T7852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.224351][ T7852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.559006][ T162] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 346.559048][ T162] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.561336][ T162] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 346.561372][ T162] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.561413][ T162] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 346.561440][ T162] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.576077][ T154] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 346.576166][ T154] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.651063][ T7852] hsr_slave_0: entered promiscuous mode [ 346.652509][ T7852] hsr_slave_1: entered promiscuous mode [ 346.669480][ T7852] debugfs: 'hsr0' already exists in 'hsr' [ 346.669513][ T7852] Cannot create hsr debugfs directory [ 347.090607][ T8192] netlink: 240 bytes leftover after parsing attributes in process `syz.4.619'. [ 347.588937][ T8199] tipc: Failed to remove unknown binding: 66,0,0/0:2777915552/2777915553 [ 347.756258][ T56] hsr_slave_0: left promiscuous mode [ 347.798784][ T56] hsr_slave_1: left promiscuous mode [ 347.800134][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 347.912968][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.205895][ T56] team0 (unregistering): Port device team_slave_1 removed [ 350.258600][ T56] team0 (unregistering): Port device team_slave_0 removed [ 350.835282][ T8222] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.889437][ T8222] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.416779][ T8222] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 351.434239][ T8222] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 352.734542][ T5260] 8021q: adding VLAN 0 to HW filter on device eth6 [ 352.765742][ T8275] netlink: 12 bytes leftover after parsing attributes in process `syz.4.649'. [ 352.904832][ T69] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 352.904875][ T69] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.904919][ T69] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 352.904947][ T69] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.904986][ T69] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 352.905015][ T69] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.905054][ T69] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 352.905084][ T69] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.333333][ T8294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.656'. [ 354.501788][ T8310] tipc: Failed to remove unknown binding: 66,0,0/0:1792401148/1792401150 [ 354.501832][ T8310] tipc: Failed to remove unknown binding: 66,0,0/0:1792401148/1792401149 [ 354.502387][ T8310] tipc: Failed to remove unknown binding: 66,0,0/0:1792401148/1792401150 [ 354.502421][ T8310] tipc: Failed to remove unknown binding: 66,0,0/0:1792401148/1792401149 [ 354.568726][ T5260] 8021q: adding VLAN 0 to HW filter on device eth7 [ 354.599832][ T8315] lo: entered allmulticast mode [ 354.639179][ T8314] lo: left allmulticast mode [ 355.070229][ T8330] netlink: 240 bytes leftover after parsing attributes in process `syz.3.662'. [ 357.192597][ T8349] 9pnet_fd: p9_fd_create_tcp (8349): problem connecting socket to 127.0.0.1 [ 357.492278][ T8342] netlink: 8 bytes leftover after parsing attributes in process `syz.3.668'. [ 359.416224][ T8376] netlink: 36 bytes leftover after parsing attributes in process `syz.3.675'. [ 359.462025][ T8370] 9pnet_fd: p9_fd_create_tcp (8370): problem connecting socket to 127.0.0.1 [ 360.954831][ T6633] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 361.125266][ T6633] usb 4-1: Using ep0 maxpacket: 32 [ 361.127529][ T6633] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.127565][ T6633] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.127602][ T6633] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 361.127625][ T6633] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.179692][ T6633] usb 4-1: config 0 descriptor?? [ 361.613384][ T6633] ft260 0003:0403:6030.0010: unknown main item tag 0x0 [ 361.613426][ T6633] ft260 0003:0403:6030.0010: unknown main item tag 0x0 [ 361.801022][ T6633] ft260 0003:0403:6030.0010: chip code: 0000 0000 [ 362.002676][ T6633] ft260 0003:0403:6030.0010: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.3-1/input0 [ 362.206016][ T6633] ft260 0003:0403:6030.0010: failed to retrieve status: -32, no wakeup [ 362.206965][ T6633] ft260 0003:0403:6030.0010: failed to retrieve status: -32 [ 362.444104][ T8405] ft260 0003:0403:6030.0010: ft260_hid_output_report_check_status: failed to start transfer, ret -38 [ 362.644055][ T8443] syzkaller0: entered promiscuous mode [ 362.644090][ T8443] syzkaller0: entered allmulticast mode [ 362.736652][ T5950] usb 4-1: USB disconnect, device number 19 [ 363.947352][ T8477] tipc: Started in network mode [ 363.947404][ T8477] tipc: Node identity 7ac21c336f05, cluster identity 4711 [ 363.947625][ T8477] tipc: Enabled bearer , priority 0 [ 363.949326][ T8472] syzkaller0: entered promiscuous mode [ 363.949356][ T8472] syzkaller0: entered allmulticast mode [ 364.162864][ T7852] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 364.253212][ T7852] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 364.346642][ T8472] tipc: Resetting bearer [ 364.711810][ T8472] tipc: Disabling bearer [ 364.854126][ T8507] netlink: 240 bytes leftover after parsing attributes in process `syz.0.702'. [ 364.875610][ T7852] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 365.081299][ T7852] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 366.351897][ T8517] 9pnet_fd: p9_fd_create_tcp (8517): problem connecting socket to 127.0.0.1 [ 366.441002][ T7852] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 366.525192][ T7852] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 367.103365][ T8544] 9pnet_fd: p9_fd_create_tcp (8544): problem binding to privport [ 369.043304][ T7852] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 369.243964][ T7852] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 369.426776][ T8576] netlink: 16 bytes leftover after parsing attributes in process `syz.1.721'. [ 369.825421][ T8589] 9pnet_virtio: no channels available for device 127.0.0.1 [ 370.973261][ T8579] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.974139][ T8579] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.422539][ T8579] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 371.432021][ T8579] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 372.045913][ T8579] bond1: left promiscuous mode [ 372.086496][ T8579] bond2: left promiscuous mode [ 372.359067][ T8610] tipc: Enabling of bearer rejected, failed to enable media [ 372.359701][ T8604] syzkaller0: entered promiscuous mode [ 372.359729][ T8604] syzkaller0: entered allmulticast mode [ 372.391925][ T8622] netlink: 20 bytes leftover after parsing attributes in process `syz.0.729'. [ 372.577808][ T8639] netlink: 44 bytes leftover after parsing attributes in process `syz.0.731'. [ 373.025073][ T5854] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.025132][ T5854] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.025175][ T5854] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.025216][ T5854] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.332974][ T7852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.464284][ T7852] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.502428][ T7992] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.502573][ T7992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.572821][ T8658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.739'. [ 373.611674][ T8651] tipc: Failed to remove unknown binding: 66,0,0/2921096678:2014235654/2014235656 [ 373.611717][ T8651] tipc: Failed to remove unknown binding: 66,0,0/2921096678:2014235654/2014235655 [ 373.613966][ T8651] tipc: Failed to remove unknown binding: 66,0,0/2921096678:2014235654/2014235656 [ 373.614004][ T8651] tipc: Failed to remove unknown binding: 66,0,0/2921096678:2014235654/2014235655 [ 373.770732][ T7992] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.773503][ T7992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.142251][ T8672] syzkaller0: entered promiscuous mode [ 374.142285][ T8672] syzkaller0: entered allmulticast mode [ 374.254467][ T8678] Illegal XDP return value 4294967274 on prog (id 36) dev syz_tun, expect packet loss! [ 374.298902][ T8672] tipc: Enabling of bearer rejected, failed to enable media [ 374.552341][ T8684] tipc: Failed to remove unknown binding: 66,0,0/0:2316393700/2316393702 [ 374.552392][ T8684] tipc: Failed to remove unknown binding: 66,0,0/0:2316393700/2316393701 [ 374.553340][ T8681] tipc: Failed to remove unknown binding: 66,0,0/0:2316393700/2316393702 [ 374.553378][ T8681] tipc: Failed to remove unknown binding: 66,0,0/0:2316393700/2316393701 [ 378.437568][ T8741] netlink: 36 bytes leftover after parsing attributes in process `syz.3.767'. [ 378.439351][ T7852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.440501][ T8742] netlink: 'syz.1.768': attribute type 4 has an invalid length. [ 378.477294][ T8742] netlink: 'syz.1.768': attribute type 4 has an invalid length. [ 380.213886][ T8768] netlink: 12 bytes leftover after parsing attributes in process `syz.3.774'. [ 381.106840][ T7852] veth0_vlan: entered promiscuous mode [ 381.221840][ T7852] veth1_vlan: entered promiscuous mode [ 381.432743][ T7852] veth0_macvtap: entered promiscuous mode [ 381.453199][ T7852] veth1_macvtap: entered promiscuous mode [ 381.572810][ T7852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 381.719924][ T7852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 382.189485][ T1400] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.335909][ T56] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.336317][ T56] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.779614][ T7992] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.784411][ T162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.784443][ T162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.490051][ T1400] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.490109][ T1400] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.553065][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 387.553143][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 391.721346][ T5612] Bluetooth: hci3: unexpected event for opcode 0x0c6d [ 392.178742][ T8863] netlink: 8 bytes leftover after parsing attributes in process `syz.0.800'. [ 392.526621][ T8875] Bluetooth: hci0: unsupported parameter 255 [ 392.526657][ T8875] Bluetooth: hci0: unsupported parameter 255 [ 396.113457][ T8903] netlink: 232 bytes leftover after parsing attributes in process `syz.3.814'. [ 401.333730][ T8927] netlink: 'syz.1.819': attribute type 27 has an invalid length. [ 401.333756][ T8927] netlink: 8 bytes leftover after parsing attributes in process `syz.1.819'. [ 401.333787][ T8927] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 401.561097][ T8935] 9pnet_fd: p9_fd_create_tcp (8935): problem binding to privport [ 402.769505][ T8924] process 'syz.3.818' launched '/dev/fd/4' with NULL argv: empty string added [ 403.340820][ T8953] netlink: 8 bytes leftover after parsing attributes in process `syz.3.829'. [ 404.534871][ T6633] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 404.684902][ T6633] usb 1-1: Using ep0 maxpacket: 32 [ 404.689582][ T6633] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 404.689622][ T6633] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 404.689666][ T6633] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 404.689696][ T6633] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.733182][ T6633] usb 1-1: config 0 descriptor?? [ 406.439504][ T6633] ft260 0003:0403:6030.0011: unknown main item tag 0x0 [ 406.439550][ T6633] ft260 0003:0403:6030.0011: unknown main item tag 0x0 [ 406.570160][ T6633] ft260 0003:0403:6030.0011: chip code: 0000 0000 [ 406.758719][ T8974] 9pnet_fd: p9_fd_create_tcp (8974): problem binding to privport [ 407.893243][ T6633] ft260 0003:0403:6030.0011: failed to retrieve system status [ 407.893580][ T6633] ft260 0003:0403:6030.0011: probe with driver ft260 failed with error -71 [ 409.745930][ T6633] usb 1-1: USB disconnect, device number 16 [ 409.895481][ T8996] netlink: 12 bytes leftover after parsing attributes in process `syz.1.843'. [ 410.011799][ T8996] netlink: 12 bytes leftover after parsing attributes in process `syz.1.843'. [ 410.137485][ T60] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 410.275684][ T60] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 410.278778][ T60] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 410.287363][ T60] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 410.293002][ T60] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 411.698814][ T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 411.865086][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 411.870375][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.870416][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 411.870465][ T9] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 411.870495][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.936384][ T9] usb 4-1: config 0 descriptor?? [ 413.365613][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 413.365760][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 413.420882][ T9] usb 4-1: USB disconnect, device number 20 [ 413.682113][ T9029] netlink: 'syz.5.849': attribute type 5 has an invalid length. [ 413.682250][ T9029] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.849'. [ 413.690185][ T60] Bluetooth: hci4: command tx timeout [ 415.767477][ T60] Bluetooth: hci4: command tx timeout [ 417.845148][ T60] Bluetooth: hci4: command tx timeout [ 419.464818][ T203] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 419.747388][ T203] usb 1-1: Using ep0 maxpacket: 32 [ 419.756628][ T203] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 419.756669][ T203] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 419.756717][ T203] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 419.756874][ T203] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.835373][ T203] usb 1-1: config 0 descriptor?? [ 420.355966][ T60] Bluetooth: hci4: command tx timeout [ 420.634461][ T203] ft260 0003:0403:6030.0012: unknown main item tag 0x0 [ 420.634508][ T203] ft260 0003:0403:6030.0012: unknown main item tag 0x0 [ 420.780975][ T203] ft260 0003:0403:6030.0012: chip code: 0000 0000 [ 420.996408][ T203] ft260 0003:0403:6030.0012: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 421.197328][ T203] ft260 0003:0403:6030.0012: failed to retrieve status: -32, no wakeup [ 421.198585][ T203] ft260 0003:0403:6030.0012: failed to retrieve status: -32 [ 421.439435][ T9092] 9pnet_fd: p9_fd_create_tcp (9092): problem binding to privport [ 422.445166][ T31] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 422.580164][ T203] usb 1-1: USB disconnect, device number 17 [ 422.626818][ T31] usb 6-1: Using ep0 maxpacket: 32 [ 422.629243][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 422.629281][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 422.629328][ T31] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 422.629357][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.689225][ T31] usb 6-1: config 0 descriptor?? [ 423.193089][ T31] ft260 0003:0403:6030.0013: unknown main item tag 0x0 [ 423.193162][ T31] ft260 0003:0403:6030.0013: unknown main item tag 0x0 [ 424.082612][ T31] ft260 0003:0403:6030.0013: chip code: 0000 0000 [ 424.284153][ T31] ft260 0003:0403:6030.0013: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.5-1/input0 [ 424.497685][ T31] ft260 0003:0403:6030.0013: failed to retrieve status: -32, no wakeup [ 424.498646][ T31] ft260 0003:0403:6030.0013: failed to retrieve status: -32 [ 424.702173][ T9085] ft260 0003:0403:6030.0013: ft260_hid_output_report_check_status: failed to start transfer, ret -38 [ 424.734918][ T5735] usb 6-1: reset high-speed USB device number 2 using dummy_hcd [ 426.866424][ T48] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 426.889816][ T9137] netlink: 'syz.1.880': attribute type 10 has an invalid length. [ 427.086727][ T48] usb 1-1: Using ep0 maxpacket: 32 [ 427.101560][ T48] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 427.101601][ T48] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 427.101647][ T48] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 427.101679][ T48] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.195683][ T48] usb 1-1: config 0 descriptor?? [ 427.617065][ T48] ft260 0003:0403:6030.0014: unknown main item tag 0x0 [ 427.617111][ T48] ft260 0003:0403:6030.0014: unknown main item tag 0x0 [ 427.807081][ T48] ft260 0003:0403:6030.0014: chip code: 0000 0000 [ 428.008059][ T48] ft260 0003:0403:6030.0014: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 428.209548][ T48] ft260 0003:0403:6030.0014: failed to retrieve status: -32, no wakeup [ 428.210385][ T48] ft260 0003:0403:6030.0014: failed to retrieve status: -32 [ 428.864974][ T48] usb 1-1: reset high-speed USB device number 18 using dummy_hcd [ 429.279886][ T8998] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.300253][ T8998] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.301580][ T8998] bridge_slave_0: entered allmulticast mode [ 429.344497][ T8998] bridge_slave_0: entered promiscuous mode [ 429.415432][ T8998] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.417193][ T8998] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.417713][ T8998] bridge_slave_1: entered allmulticast mode [ 429.450240][ T8998] bridge_slave_1: entered promiscuous mode [ 429.776479][ T9085] ft260 0003:0403:6030.0013: failed to reset I2C controller: -110 [ 429.784416][ T9135] ft260 0003:0403:6030.0013: ft260_hid_output_report_check_status: failed to start transfer, ret -38 [ 429.825502][ T9135] ft260 0003:0403:6030.0013: failed to reset I2C controller: -32 [ 430.418602][ T9180] syz.5.886 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 431.297992][ T8998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 431.428514][ T31] usb 6-1: USB disconnect, device number 2 [ 431.578604][ T8998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 431.614060][ T9194] netlink: 'syz.5.888': attribute type 4 has an invalid length. [ 431.638217][ T5736] usb 1-1: USB disconnect, device number 18 [ 432.636960][ T8998] team0: Port device team_slave_0 added [ 433.496784][ T8998] team0: Port device team_slave_1 added [ 438.588267][ T8998] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 438.588291][ T8998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 438.588324][ T8998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 440.193125][ T8998] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 440.193143][ T8998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 440.193166][ T8998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 440.422023][ T67] bridge_slave_1: left allmulticast mode [ 440.422068][ T67] bridge_slave_1: left promiscuous mode [ 440.422334][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.643544][ T67] bridge_slave_0: left allmulticast mode [ 440.643587][ T67] bridge_slave_0: left promiscuous mode [ 440.643898][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.128155][ T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 441.946472][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 441.948885][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 441.948923][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.948969][ T9] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 441.948997][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.070849][ T9] usb 2-1: config 0 descriptor?? [ 443.198625][ T9] ft260 0003:0403:6030.0015: unknown main item tag 0x0 [ 443.198673][ T9] ft260 0003:0403:6030.0015: unknown main item tag 0x0 [ 443.305646][ T9] ft260 0003:0403:6030.0015: chip code: 0000 0000 [ 443.557555][ T9] ft260 0003:0403:6030.0015: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 443.759344][ T9] ft260 0003:0403:6030.0015: failed to retrieve status: -32, no wakeup [ 443.760549][ T9] ft260 0003:0403:6030.0015: failed to retrieve status: -32 [ 444.025141][ T9283] ft260 0003:0403:6030.0015: ft260_hid_output_report_check_status: failed to start transfer, ret -38 [ 445.010653][ T9324] Bluetooth: hci0: invalid len left 7, exp >= 50 [ 446.574730][ T6633] usb 2-1: reset high-speed USB device number 23 using dummy_hcd [ 446.620944][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 446.695877][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 446.716347][ T67] bond0 (unregistering): Released all slaves [ 446.732771][ T67] bond1 (unregistering): Released all slaves [ 446.778315][ T67] bond2 (unregistering): Released all slaves [ 447.391836][ T8998] hsr_slave_0: entered promiscuous mode [ 447.394955][ T8998] hsr_slave_1: entered promiscuous mode [ 447.407049][ T8998] debugfs: 'hsr0' already exists in 'hsr' [ 447.407083][ T8998] Cannot create hsr debugfs directory [ 447.415826][ T67] tipc: Left network mode [ 448.048667][ T5153] usb 2-1: USB disconnect, device number 23 [ 449.282903][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 449.283018][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 450.321296][ T9365] Bluetooth: hci0: invalid len left 7, exp >= 50 [ 450.630020][ T9370] netlink: 28 bytes leftover after parsing attributes in process `syz.5.927'. [ 454.775482][ T6633] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 454.914682][ T6633] usb 4-1: Using ep0 maxpacket: 32 [ 454.917936][ T6633] usb 4-1: unable to get BOS descriptor or descriptor too short [ 454.919474][ T6633] usb 4-1: config 8 has an invalid interface number: 220 but max is 1 [ 454.919505][ T6633] usb 4-1: config 8 has an invalid descriptor of length 55, skipping remainder of the config [ 454.919530][ T6633] usb 4-1: config 8 has no interface number 0 [ 454.919592][ T6633] usb 4-1: config 8 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 454.919625][ T6633] usb 4-1: config 8 interface 220 has no altsetting 0 [ 454.919647][ T6633] usb 4-1: config 8 interface 1 has no altsetting 0 [ 455.037704][ T6633] usb 4-1: New USB device found, idVendor=04e2, idProduct=1401, bcdDevice=34.ae [ 455.037744][ T6633] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.037767][ T6633] usb 4-1: Product: syz [ 455.037784][ T6633] usb 4-1: Manufacturer: syz [ 455.037801][ T6633] usb 4-1: SerialNumber: syz [ 455.111348][ T9414] Bluetooth: hci0: invalid len left 7, exp >= 50 [ 455.341985][ T9405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.374265][ T9405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.461570][ T9405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.487668][ T9405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.530096][ T9405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.605262][ T9405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.652923][ T9405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.725361][ T9405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.873206][ T6633] xr_serial 4-1:8.220: xr_serial converter detected [ 455.882413][ T6633] xr_serial ttyUSB0: Failed to set reg 0x81: -71 [ 455.882483][ T6633] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 455.967207][ T6633] usb 4-1: USB disconnect, device number 21 [ 455.994916][ T6633] xr_serial 4-1:8.220: device disconnected [ 456.837254][ T9434] netlink: 1363 bytes leftover after parsing attributes in process `syz.1.943'. [ 457.014993][ T5260] 8021q: adding VLAN 0 to HW filter on device eth5 [ 457.176196][ T9437] capability: warning: `syz.5.945' uses 32-bit capabilities (legacy support in use) [ 457.916823][ T9447] Bluetooth: hci0: unsupported parameter 255 [ 457.916850][ T9447] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 459.551593][ T9470] netlink: 36 bytes leftover after parsing attributes in process `syz.5.954'. [ 459.551629][ T9470] netlink: 12 bytes leftover after parsing attributes in process `syz.5.954'. [ 462.618612][ T9499] Bluetooth: hci0: unsupported parameter 255 [ 462.618641][ T9499] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 465.360946][ T5260] 8021q: adding VLAN 0 to HW filter on device eth6 [ 465.494506][ T9538] Bluetooth: hci0: unsupported parameter 255 [ 465.494535][ T9538] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 467.608916][ T9562] netlink: 240 bytes leftover after parsing attributes in process `syz.0.978'. [ 467.958200][ T9570] Bluetooth: hci0: unsupported parameter 255 [ 467.958229][ T9570] Bluetooth: hci0: unsupported parameter 255 [ 470.542188][ T60] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 470.584206][ T60] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 470.625258][ T60] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 470.630811][ T60] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 470.631661][ T60] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 472.937616][ T5612] Bluetooth: hci3: command tx timeout [ 473.913701][ T9615] Bluetooth: hci0: unsupported parameter 255 [ 473.913730][ T9615] Bluetooth: hci0: unsupported parameter 255 [ 475.103396][ T5612] Bluetooth: hci3: command tx timeout [ 477.013645][ T9651] Bluetooth: hci0: unsupported parameter 255 [ 477.013673][ T9651] Bluetooth: hci0: unsupported parameter 255 [ 477.379840][ T5612] Bluetooth: hci3: command tx timeout [ 477.397484][ T5260] 8021q: adding VLAN 0 to HW filter on device eth7 [ 479.454744][ T5612] Bluetooth: hci3: command tx timeout [ 480.096239][ T5153] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 480.121304][ T9689] Bluetooth: hci0: unsupported parameter 255 [ 480.121334][ T9689] Bluetooth: hci0: unsupported parameter 255 [ 480.247525][ T5153] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 480.247563][ T5153] usb 4-1: config 0 has no interface number 0 [ 480.247652][ T5153] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 480.247687][ T5153] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 480.247745][ T5153] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 480.247769][ T5153] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.375606][ T5153] usb 4-1: config 0 descriptor?? [ 480.857314][ T5153] prodikeys 0003:041E:2801.0016: reserved main item tag 0xd [ 480.857371][ T5153] prodikeys 0003:041E:2801.0016: item fetching failed at offset 5/7 [ 480.858359][ T5153] prodikeys 0003:041E:2801.0016: hid parse failed [ 480.858478][ T5153] prodikeys 0003:041E:2801.0016: probe with driver prodikeys failed with error -22 [ 481.341416][ T31] usb 4-1: USB disconnect, device number 22 [ 482.899457][ T5260] 8021q: adding VLAN 0 to HW filter on device eth8 [ 484.960881][ T9745] Bluetooth: MGMT ver 1.23 [ 485.147094][ T9751] Bluetooth: hci0: unsupported parameter 255 [ 485.147132][ T9751] Bluetooth: hci0: unsupported parameter 255 [ 485.405633][ T5736] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 486.417456][ T5736] usb 1-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 486.417502][ T5736] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 4 [ 486.417534][ T5736] usb 1-1: config 0 interface 0 has no altsetting 0 [ 486.477406][ T5736] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 486.477447][ T5736] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 486.477471][ T5736] usb 1-1: Product: syz [ 486.477488][ T5736] usb 1-1: Manufacturer: syz [ 486.477505][ T5736] usb 1-1: SerialNumber: syz [ 486.525620][ T5736] usb 1-1: config 0 descriptor?? [ 486.579230][ T5736] usb 1-1: selecting invalid altsetting 0 [ 487.004206][ T5736] usb 1-1: USB disconnect, device number 19 [ 487.206161][ T9012] udevd[9012]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 487.294903][ T67] hsr_slave_0: left promiscuous mode [ 487.335434][ T67] hsr_slave_1: left promiscuous mode [ 487.363102][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 487.399272][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 488.236963][ T67] team0 (unregistering): Port device team_slave_1 removed [ 488.285942][ T67] team0 (unregistering): Port device team_slave_0 removed [ 488.900592][ T9792] Bluetooth: hci0: unsupported parameter 255 [ 488.900617][ T9792] Bluetooth: hci0: unsupported parameter 255 [ 490.589237][ T9803] tipc: Failed to remove unknown binding: 66,0,0/0:775558661/775558663 [ 490.589279][ T9803] tipc: Failed to remove unknown binding: 66,0,0/0:775558661/775558662 [ 490.590822][ T9803] tipc: Failed to remove unknown binding: 66,0,0/0:775558661/775558663 [ 490.590859][ T9803] tipc: Failed to remove unknown binding: 66,0,0/0:775558661/775558662 [ 491.014899][ T9] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 491.778788][ T9] usb 4-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 491.778836][ T9] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 4 [ 491.778871][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 491.789602][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 491.789642][ T9] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 491.789672][ T9] usb 4-1: Product: syz [ 491.789687][ T9] usb 4-1: Manufacturer: syz [ 491.789721][ T9] usb 4-1: SerialNumber: syz [ 492.013765][ T9] usb 4-1: config 0 descriptor?? [ 492.309584][ T9] usb 4-1: selecting invalid altsetting 0 [ 492.467968][ T9827] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1051'. [ 492.731423][ T9578] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.732337][ T9578] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.732675][ T9578] bridge_slave_0: entered allmulticast mode [ 492.772108][ T9578] bridge_slave_0: entered promiscuous mode [ 492.801336][ T9578] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.801466][ T9578] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.801805][ T9578] bridge_slave_1: entered allmulticast mode [ 492.841713][ T9578] bridge_slave_1: entered promiscuous mode [ 492.863489][ T9] usb 4-1: USB disconnect, device number 23 [ 494.585236][ T9578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 494.782871][ T9578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 495.051361][ T9578] team0: Port device team_slave_0 added [ 495.073605][ T9578] team0: Port device team_slave_1 added [ 495.262140][ T9578] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 495.262165][ T9578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 495.262197][ T9578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 495.320831][ T9578] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 495.320853][ T9578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 495.320884][ T9578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 495.449272][ T9578] hsr_slave_0: entered promiscuous mode [ 495.450885][ T9578] hsr_slave_1: entered promiscuous mode [ 495.726511][ T9853] random: crng reseeded on system resumption [ 505.934614][ C0] sched: DL replenish lagged too much [ 509.531421][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 509.531511][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 512.158756][ T9961] tipc: Failed to remove unknown binding: 66,0,0/0:2639157994/2639157996 [ 512.158806][ T9961] tipc: Failed to remove unknown binding: 66,0,0/0:2639157994/2639157995 [ 512.159456][ T9961] tipc: Failed to remove unknown binding: 66,0,0/0:2639157994/2639157996 [ 512.159504][ T9961] tipc: Failed to remove unknown binding: 66,0,0/0:2639157994/2639157995 [ 514.982100][ T9994] netlink: 'syz.5.1099': attribute type 5 has an invalid length. [ 514.982129][ T9994] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.1099'. [ 516.783242][ T5612] Bluetooth: hci5: command 0x0406 tx timeout [ 519.414608][ T67] bridge_slave_1: left allmulticast mode [ 519.414650][ T67] bridge_slave_1: left promiscuous mode [ 519.414920][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.653997][ T67] bridge_slave_0: left allmulticast mode [ 519.654045][ T67] bridge_slave_0: left promiscuous mode [ 519.666520][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.922276][T10086] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1121'. [ 519.988689][T10089] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 520.738105][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 520.855910][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 520.937151][ T67] bond0 (unregistering): Released all slaves [ 523.550619][T10120] 9pnet_fd: p9_fd_create_tcp (10120): problem binding to privport [ 526.088741][ T67] hsr_slave_0: left promiscuous mode [ 527.103490][ T67] hsr_slave_1: left promiscuous mode [ 527.104755][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 527.384763][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 528.762648][T10165] 9pnet_fd: p9_fd_create_tcp (10165): problem binding to privport [ 530.916162][T10174] tipc: Failed to remove unknown binding: 66,0,0/0:286368280/286368282 [ 530.916231][T10174] tipc: Failed to remove unknown binding: 66,0,0/0:286368280/286368281 [ 530.917189][T10174] tipc: Failed to remove unknown binding: 66,0,0/0:286368280/286368282 [ 530.917227][T10174] tipc: Failed to remove unknown binding: 66,0,0/0:286368280/286368281 [ 532.840995][ T5612] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 532.885980][ T5612] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 532.890499][ T5612] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 532.902193][ T5612] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 532.904670][ T5612] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 532.955412][ T67] team0 (unregistering): Port device team_slave_1 removed [ 533.088906][ T67] team0 (unregistering): Port device team_slave_0 removed [ 535.409496][ T60] Bluetooth: hci4: command tx timeout [ 536.939665][T10229] lo: entered allmulticast mode [ 537.034104][T10227] lo: left allmulticast mode [ 537.325981][T10235] netlink: 'syz.5.1158': attribute type 5 has an invalid length. [ 537.326013][T10235] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.1158'. [ 538.555112][ T60] Bluetooth: hci4: command tx timeout [ 540.301669][T10280] netlink: 388 bytes leftover after parsing attributes in process `syz.3.1169'. [ 541.576173][ T60] Bluetooth: hci4: command tx timeout [ 543.679715][ T60] Bluetooth: hci4: command tx timeout [ 548.169528][ T13] bridge_slave_1: left allmulticast mode [ 548.169575][ T13] bridge_slave_1: left promiscuous mode [ 548.170292][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.207163][T10343] netlink: 388 bytes leftover after parsing attributes in process `syz.1.1182'. [ 548.381628][ T13] bridge_slave_0: left allmulticast mode [ 548.381671][ T13] bridge_slave_0: left promiscuous mode [ 548.428642][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.311312][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 553.907197][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 553.993799][ T13] bond0 (unregistering): Released all slaves [ 554.208230][T10384] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1193'. [ 556.584060][T10181] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.584289][T10181] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.860441][T10181] bridge_slave_0: entered allmulticast mode [ 556.863444][T10181] bridge_slave_0: entered promiscuous mode [ 557.315116][T10181] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.315278][T10181] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.315631][T10181] bridge_slave_1: entered allmulticast mode [ 557.321199][T10181] bridge_slave_1: entered promiscuous mode [ 558.412410][ T13] hsr_slave_0: left promiscuous mode [ 558.451526][ T13] hsr_slave_1: left promiscuous mode [ 558.452834][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 558.506019][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 558.803732][T10436] 9pnet_fd: p9_fd_create_tcp (10436): problem binding to privport [ 559.967355][ T13] team0 (unregistering): Port device team_slave_1 removed [ 560.028538][ T13] team0 (unregistering): Port device team_slave_0 removed [ 560.513944][T10181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 560.556688][T10181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 561.430041][T10181] team0: Port device team_slave_0 added [ 561.434323][T10181] team0: Port device team_slave_1 added [ 561.496330][T10181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 561.496352][T10181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 561.496385][T10181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 561.499364][T10181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 561.499382][T10181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 561.499417][T10181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 561.670825][T10181] hsr_slave_0: entered promiscuous mode [ 561.672682][T10181] hsr_slave_1: entered promiscuous mode [ 562.154791][ T31] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 562.361618][ T31] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 562.361655][ T31] usb 6-1: config 0 has no interface number 0 [ 562.361707][ T31] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 562.361738][ T31] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 562.361784][ T31] usb 6-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 562.361810][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.391654][ T31] usb 6-1: config 0 descriptor?? [ 563.039301][ T31] prodikeys 0003:041E:2801.0017: reserved main item tag 0xd [ 563.039358][ T31] prodikeys 0003:041E:2801.0017: item fetching failed at offset 5/7 [ 563.042748][ T31] prodikeys 0003:041E:2801.0017: hid parse failed [ 563.042874][ T31] prodikeys 0003:041E:2801.0017: probe with driver prodikeys failed with error -22 [ 563.276910][ T31] usb 6-1: USB disconnect, device number 3 [ 563.600589][T10487] warning: `syz.1.1223' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 564.004034][T10181] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 564.299796][T10181] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 565.445242][T10181] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 566.158499][T10516] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1231'. [ 567.150909][T10181] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 568.914069][T10530] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1234'. [ 569.682909][T10181] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 569.776349][T10181] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 569.947901][T10181] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 570.822486][T10545] Need at least one configuration in g1. [ 570.833481][T10545] udc dummy_udc.0: failed to start g1: -22 [ 570.833618][T10545] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 570.894930][T10545] UDC core: g1: couldn't find an available UDC or it's busy [ 571.487358][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 571.515933][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 573.191272][T10181] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 575.630529][T10580] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1249'. [ 575.951307][T10181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 575.983267][T10181] 8021q: adding VLAN 0 to HW filter on device team0 [ 576.012782][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.013006][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 576.057877][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.058019][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 578.018966][T10609] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1261'. [ 579.129753][ T60] Bluetooth: hci5: unexpected subevent 0x04 length: 56 > 11 [ 581.345699][T10181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 582.924934][T10634] netlink: 'syz.0.1267': attribute type 10 has an invalid length. [ 585.795632][ T822] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 586.742300][T10660] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1271'. [ 586.891221][ T822] usb 1-1: Dual-Role OTG device on HNP port [ 586.892810][ T822] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 586.892844][ T822] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.966425][ T822] gspca_main: spca501-2.14.0 probing 0000:0000 [ 586.968520][ T822] gspca_spca501: reg write: error -32 [ 586.968539][ T822] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 586.968639][ T822] spca501 1-1:1.0: probe with driver spca501 failed with error -22 [ 587.412215][ T60] Bluetooth: hci2: unexpected subevent 0x04 length: 56 > 11 [ 588.306545][T10181] veth0_vlan: entered promiscuous mode [ 588.532446][T10181] veth1_vlan: entered promiscuous mode [ 588.712338][T10181] veth0_macvtap: entered promiscuous mode [ 588.789098][T10181] veth1_macvtap: entered promiscuous mode [ 588.827192][T10181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 588.860811][T10181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 590.728039][ C0] [drm:vkms_crtc_handle_vblank_timeout] *ERROR* vkms failure on handling vblank [ 592.086963][ T154] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.171780][ T154] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.224798][ T154] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.224860][ T154] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.503236][ T5612] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 592.547070][ T5612] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 592.550210][ T5612] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 592.563083][ T5612] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 592.564150][ T5612] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 593.712510][T10719] 9pnet_fd: p9_fd_create_tcp (10719): problem binding to privport [ 595.044879][ T5612] Bluetooth: hci3: command tx timeout [ 597.006412][ T162] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.164922][ T5612] Bluetooth: hci3: command tx timeout [ 598.689591][ T162] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.204937][ T5612] Bluetooth: hci3: command tx timeout [ 600.290570][ T162] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.772779][T10787] tipc: Failed to remove unknown binding: 66,0,0/0:2654892935/2654892937 [ 600.772830][T10787] tipc: Failed to remove unknown binding: 66,0,0/0:2654892935/2654892936 [ 600.827052][T10787] tipc: Failed to remove unknown binding: 66,0,0/0:2654892935/2654892937 [ 600.827102][T10787] tipc: Failed to remove unknown binding: 66,0,0/0:2654892935/2654892936 [ 601.359822][ T5612] Bluetooth: hci3: command tx timeout [ 602.963427][ T162] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.832656][T10833] syzkaller0: entered promiscuous mode [ 604.832688][T10833] syzkaller0: entered allmulticast mode [ 609.423838][T10695] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.423985][T10695] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.424343][T10695] bridge_slave_0: entered allmulticast mode [ 609.463130][T10695] bridge_slave_0: entered promiscuous mode [ 609.522645][T10695] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.522783][T10695] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.523153][T10695] bridge_slave_1: entered allmulticast mode [ 609.613495][T10695] bridge_slave_1: entered promiscuous mode [ 612.560127][T10695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 612.838657][ T162] bridge_slave_1: left allmulticast mode [ 612.838702][ T162] bridge_slave_1: left promiscuous mode [ 612.839011][ T162] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.238187][ T162] bridge_slave_0: left allmulticast mode [ 613.238231][ T162] bridge_slave_0: left promiscuous mode [ 613.238564][ T162] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.361211][T10900] 9pnet_fd: p9_fd_create_tcp (10900): problem binding to privport [ 615.135088][ T203] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 615.387512][ T203] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 615.387567][ T203] usb 4-1: config 0 has no interface number 0 [ 615.387621][ T203] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 615.387651][ T203] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 615.387706][ T203] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 615.387734][ T203] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.403128][ T203] usb 4-1: config 0 descriptor?? [ 616.806821][ T203] prodikeys 0003:041E:2801.0018: reserved main item tag 0xd [ 616.806868][ T203] prodikeys 0003:041E:2801.0018: item fetching failed at offset 5/7 [ 616.853716][ T203] prodikeys 0003:041E:2801.0018: hid parse failed [ 616.853842][ T203] prodikeys 0003:041E:2801.0018: probe with driver prodikeys failed with error -22 [ 616.957424][ T31] usb 4-1: USB disconnect, device number 24 [ 617.035759][ T162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 617.075833][ T162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 617.097568][ T162] bond0 (unregistering): Released all slaves [ 617.124900][T10695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 617.250572][T10695] team0: Port device team_slave_0 added [ 617.269801][T10695] team0: Port device team_slave_1 added [ 617.394179][T10695] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 617.394202][T10695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 617.394232][T10695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 617.441872][T10695] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 617.441899][T10695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 617.441927][T10695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 617.819377][T10923] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1340'. [ 621.191105][T10695] hsr_slave_0: entered promiscuous mode [ 621.205461][T10695] hsr_slave_1: entered promiscuous mode [ 621.210612][T10695] debugfs: 'hsr0' already exists in 'hsr' [ 621.210651][T10695] Cannot create hsr debugfs directory [ 621.874918][ T162] hsr_slave_0: left promiscuous mode [ 621.914944][ T162] hsr_slave_1: left promiscuous mode [ 621.917941][ T162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 621.917976][ T162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 621.977106][ T162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 621.977141][ T162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 622.094862][ T162] veth1_macvtap: left promiscuous mode [ 622.095939][ T162] veth0_macvtap: left promiscuous mode [ 622.099350][ T162] veth1_vlan: left promiscuous mode [ 622.099577][ T162] veth0_vlan: left promiscuous mode [ 623.177052][ T162] team0 (unregistering): Port device team_slave_1 removed [ 623.237215][ T162] team0 (unregistering): Port device team_slave_0 removed [ 623.882250][ T5260] 8021q: adding VLAN 0 to HW filter on device eth9 [ 626.134794][ T48] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 626.284673][ T48] usb 2-1: Using ep0 maxpacket: 32 [ 626.287546][ T48] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 626.287586][ T48] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 626.287631][ T48] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 626.287659][ T48] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.441485][ T48] usb 2-1: config 0 descriptor?? [ 626.878162][ T48] usbhid 2-1:0.0: can't add hid device: -32 [ 626.921227][ T48] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 627.786605][T11008] random: crng reseeded on system resumption [ 630.527779][ T203] usb 2-1: USB disconnect, device number 24 [ 631.369407][ T5612] Bluetooth: hci0: unexpected subevent 0x04 length: 56 > 11 [ 632.500440][T11035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 632.501121][T11035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 633.601970][ T5260] 8021q: adding VLAN 0 to HW filter on device eth10 [ 633.792081][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 633.792667][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 636.130205][T11059] device-mapper: ioctl: Invalid data size in the ioctl structure: 56 [ 636.208493][T11056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 636.209333][T11056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 637.024391][T11053] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 637.114761][T11062] netlink: 240 bytes leftover after parsing attributes in process `syz.1.1376'. [ 639.525996][T11083] tipc: Failed to remove unknown binding: 66,0,0/0:569515563/569515565 [ 639.526045][T11083] tipc: Failed to remove unknown binding: 66,0,0/0:569515563/569515564 [ 639.526725][T11083] tipc: Failed to remove unknown binding: 66,0,0/0:569515563/569515565 [ 639.526763][T11083] tipc: Failed to remove unknown binding: 66,0,0/0:569515563/569515564 [ 647.367992][ T5736] ------------[ cut here ]------------ [ 647.368012][ T5736] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 647.368134][ T5736] WARNING: drivers/gpu/drm/drm_vblank.c:1329 at drm_crtc_wait_one_vblank+0x3bc/0x560, CPU#1: kworker/1:6/5736 [ 647.368225][ T5736] Modules linked in: [ 647.368364][ T5736] CPU: 1 UID: 0 PID: 5736 Comm: kworker/1:6 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 647.368426][ T5736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 647.368443][ T5736] Workqueue: events drm_fb_helper_damage_work [ 647.368504][ T5736] RIP: 0010:drm_crtc_wait_one_vblank+0x51a/0x560 [ 647.368537][ T5736] Code: c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 e5 e7 b2 fc 4d 8b 7d 00 4c 89 f7 4c 89 e6 4c 89 fa 89 d9 <67> 48 0f b9 3a 48 8b 3c 24 89 de e8 36 f4 ff ff b8 92 ff ff ff 49 [ 647.368563][ T5736] RSP: 0018:ffffc9000560f7e0 EFLAGS: 00010246 [ 647.368594][ T5736] RAX: 1ffff11004c87e00 RBX: 0000000000000000 RCX: 0000000000000000 [ 647.368611][ T5736] RDX: ffffffff8be26d60 RSI: ffffffff8be44020 RDI: ffffffff8fbb2550 [ 647.368629][ T5736] RBP: ffffc9000560f8c8 R08: 0000000000000000 R09: 0000000000000000 [ 647.368644][ T5736] R10: dffffc0000000000 R11: fffffbfff1f5f467 R12: ffffffff8be44020 [ 647.368663][ T5736] R13: ffff88802643f000 R14: ffffffff8fbb2550 R15: ffffffff8be26d60 [ 647.368682][ T5736] FS: 0000000000000000(0000) GS:ffff888125d3e000(0000) knlGS:0000000000000000 [ 647.368709][ T5736] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 647.368725][ T5736] CR2: 00007f433af7dc18 CR3: 0000000034a2c000 CR4: 00000000003526f0 [ 647.368745][ T5736] Call Trace: [ 647.368762][ T5736] [ 647.368787][ T5736] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 647.368827][ T5736] ? rt_spin_unlock+0x157/0x200 [ 647.368861][ T5736] ? __pfx_autoremove_wake_function+0x10/0x10 [ 647.368928][ T5736] ? rt_spin_unlock+0x163/0x200 [ 647.368958][ T5736] ? drm_vblank_get+0x147/0x280 [ 647.369000][ T5736] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 647.369031][ T5736] drm_fb_helper_damage_work+0x6cf/0xf00 [ 647.369077][ T5736] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 647.369131][ T5736] ? process_scheduled_works+0xa20/0x14e0 [ 647.369196][ T5736] ? rcu_is_watching+0x15/0xb0 [ 647.369249][ T5736] ? process_scheduled_works+0xa20/0x14e0 [ 647.369278][ T5736] process_scheduled_works+0xa8e/0x14e0 [ 647.369342][ T5736] ? __pfx_process_scheduled_works+0x10/0x10 [ 647.369380][ T5736] ? assign_work+0x3cf/0x5d0 [ 647.369415][ T5736] worker_thread+0xa47/0xfb0 [ 647.369463][ T5736] ? __kthread_parkme+0x71/0x1f0 [ 647.369508][ T5736] kthread+0x388/0x470 [ 647.369545][ T5736] ? __pfx_worker_thread+0x10/0x10 [ 647.373570][ T5736] ? __pfx_kthread+0x10/0x10 [ 647.373630][ T5736] ret_from_fork+0x514/0xb70 [ 647.373737][ T5736] ? __pfx_ret_from_fork+0x10/0x10 [ 647.373774][ T5736] ? __switch_to+0xc89/0x1420 [ 647.373829][ T5736] ? __pfx_kthread+0x10/0x10 [ 647.373868][ T5736] ret_from_fork_asm+0x1a/0x30 [ 647.373942][ T5736] [ 647.374006][ T5736] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 647.374036][ T5736] CPU: 1 UID: 0 PID: 5736 Comm: kworker/1:6 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 647.374065][ T5736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 647.374082][ T5736] Workqueue: events drm_fb_helper_damage_work [ 647.374121][ T5736] Call Trace: [ 647.374132][ T5736] [ 647.374143][ T5736] vpanic+0x56c/0xa60 [ 647.374187][ T5736] ? __pfx__printk+0x10/0x10 [ 647.374218][ T5736] ? __pfx_vpanic+0x10/0x10 [ 647.374239][ T5736] ? is_bpf_text_address+0x292/0x2b0 [ 647.374288][ T5736] ? is_bpf_text_address+0x26/0x2b0 [ 647.374328][ T5736] panic+0xc5/0xd0 [ 647.374350][ T5736] ? __pfx_panic+0x10/0x10 [ 647.374386][ T5736] ? ret_from_fork_asm+0x1a/0x30 [ 647.374416][ T5736] __warn+0x315/0x4c0 [ 647.374439][ T5736] ? drm_crtc_wait_one_vblank+0x3bc/0x560 [ 647.374477][ T5736] ? drm_crtc_wait_one_vblank+0x3bc/0x560 [ 647.374503][ T5736] __report_bug+0x276/0x570 [ 647.374546][ T5736] ? drm_crtc_wait_one_vblank+0x3bc/0x560 [ 647.374581][ T5736] ? __pfx___report_bug+0x10/0x10 [ 647.374626][ T5736] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 647.374660][ T5736] ? lockdep_hardirqs_on+0x7a/0x110 [ 647.374701][ T5736] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 647.374739][ T5736] report_bug_entry+0x19a/0x290 [ 647.374775][ T5736] ? drm_crtc_wait_one_vblank+0x51a/0x560 [ 647.374803][ T5736] ? drm_crtc_wait_one_vblank+0x51f/0x560 [ 647.374839][ T5736] handle_bug+0xce/0x200 [ 647.374879][ T5736] exc_invalid_op+0x1a/0x50 [ 647.374916][ T5736] asm_exc_invalid_op+0x1a/0x20 [ 647.374943][ T5736] RIP: 0010:drm_crtc_wait_one_vblank+0x51a/0x560 [ 647.374975][ T5736] Code: c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 e5 e7 b2 fc 4d 8b 7d 00 4c 89 f7 4c 89 e6 4c 89 fa 89 d9 <67> 48 0f b9 3a 48 8b 3c 24 89 de e8 36 f4 ff ff b8 92 ff ff ff 49 [ 647.374997][ T5736] RSP: 0018:ffffc9000560f7e0 EFLAGS: 00010246 [ 647.375017][ T5736] RAX: 1ffff11004c87e00 RBX: 0000000000000000 RCX: 0000000000000000 [ 647.375033][ T5736] RDX: ffffffff8be26d60 RSI: ffffffff8be44020 RDI: ffffffff8fbb2550 [ 647.375052][ T5736] RBP: ffffc9000560f8c8 R08: 0000000000000000 R09: 0000000000000000 [ 647.375068][ T5736] R10: dffffc0000000000 R11: fffffbfff1f5f467 R12: ffffffff8be44020 [ 647.375086][ T5736] R13: ffff88802643f000 R14: ffffffff8fbb2550 R15: ffffffff8be26d60 [ 647.375130][ T5736] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 647.375160][ T5736] ? rt_spin_unlock+0x157/0x200 [ 647.375185][ T5736] ? __pfx_autoremove_wake_function+0x10/0x10 [ 647.375226][ T5736] ? rt_spin_unlock+0x163/0x200 [ 647.375256][ T5736] ? drm_vblank_get+0x147/0x280 [ 647.375288][ T5736] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 647.375319][ T5736] drm_fb_helper_damage_work+0x6cf/0xf00 [ 647.375363][ T5736] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 647.375418][ T5736] ? process_scheduled_works+0xa20/0x14e0 [ 647.375455][ T5736] ? rcu_is_watching+0x15/0xb0 [ 647.375490][ T5736] ? process_scheduled_works+0xa20/0x14e0 [ 647.375519][ T5736] process_scheduled_works+0xa8e/0x14e0 [ 647.375583][ T5736] ? __pfx_process_scheduled_works+0x10/0x10 [ 647.375620][ T5736] ? assign_work+0x3cf/0x5d0 [ 647.375656][ T5736] worker_thread+0xa47/0xfb0 [ 647.375710][ T5736] ? __kthread_parkme+0x71/0x1f0 [ 647.375755][ T5736] kthread+0x388/0x470 [ 647.375793][ T5736] ? __pfx_worker_thread+0x10/0x10 [ 647.375821][ T5736] ? __pfx_kthread+0x10/0x10 [ 647.375860][ T5736] ret_from_fork+0x514/0xb70 [ 647.375901][ T5736] ? __pfx_ret_from_fork+0x10/0x10 [ 647.375940][ T5736] ? __switch_to+0xc89/0x1420 [ 647.375976][ T5736] ? __pfx_kthread+0x10/0x10 [ 647.376014][ T5736] ret_from_fork_asm+0x1a/0x30 [ 647.376058][ T5736] [ 647.376844][ T5736] Kernel Offset: disabled