last executing test programs: 7m41.423112981s ago: executing program 4 (id=524): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000001200576d10000010fbdb09", @ANYRES32=0x0, @ANYBLOB="00000200000000a108001d00bb"], 0x2c}}, 0x0) 7m40.845284523s ago: executing program 4 (id=528): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, r0) recvmmsg(r0, &(0x7f0000005c40)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000e40)=""/251, 0xfb}, {&(0x7f0000003bc0)=""/4090, 0xffa}, {&(0x7f0000001140)=""/242, 0xf2}, {&(0x7f0000001240)=""/166, 0xa6}], 0x4}, 0x9}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1}], 0x4, 0x2120, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4004088}, 0x0) 7m40.388649082s ago: executing program 4 (id=530): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000200)="12", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000580)='V', 0x1}], 0x1}}], 0x2, 0x44008090) 7m40.255072729s ago: executing program 4 (id=532): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f00000000c0)={0xc8bbf2a48522880d, 0x4, 0x40, 0x0, 0xf}) r4 = syz_pidfd_open(r1, 0x0) setns(r4, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) setns(0xffffffffffffffff, 0x24020000) open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x1101) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'netdevsim0\x00'}) 7m39.751871211s ago: executing program 4 (id=534): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, 0x0, 0x4000000) 7m39.466762946s ago: executing program 4 (id=535): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xb1, &(0x7f0000000140)=""/177, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="090000047c01000400420008000280040018647182bea5a4e3061000000000001e862240e7d924fbb5f94d3e609f53168fcf206b496844d8d5d2930ef7d164bbef33b08dc9e197b7cd41c862a67c74599fd6a1a1f09caaa4da96a0972d2301982e88cca35b3c3119f60a487598f94c4e5afa742943ce64cc404c0248561d16f1e77472eaf3ee3e9a8228a156a82fed3315077b0218f68d6ea71dee3d73364b1cf8d385adf2"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000003600000085000000a000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) set_mempolicy(0x8006, &(0x7f0000000040)=0x200000fff, 0x5) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc044560f, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00fd000000", 0x24) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='ecryptfs\x00', 0x10005, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x3, 0x0, 0x0, r7}) ioctl$XFS_IOC_SET_RESBLKS(0xffffffffffffffff, 0xc0105872, &(0x7f00000000c0)={0x3, 0xff}) 7m23.530175076s ago: executing program 32 (id=535): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xb1, &(0x7f0000000140)=""/177, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="090000047c01000400420008000280040018647182bea5a4e3061000000000001e862240e7d924fbb5f94d3e609f53168fcf206b496844d8d5d2930ef7d164bbef33b08dc9e197b7cd41c862a67c74599fd6a1a1f09caaa4da96a0972d2301982e88cca35b3c3119f60a487598f94c4e5afa742943ce64cc404c0248561d16f1e77472eaf3ee3e9a8228a156a82fed3315077b0218f68d6ea71dee3d73364b1cf8d385adf2"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000feffffff0000000000000000850000003600000085000000a000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) set_mempolicy(0x8006, &(0x7f0000000040)=0x200000fff, 0x5) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) ioctl$vim2m_VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc044560f, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00fd000000", 0x24) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='ecryptfs\x00', 0x10005, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x3, 0x0, 0x0, r7}) ioctl$XFS_IOC_SET_RESBLKS(0xffffffffffffffff, 0xc0105872, &(0x7f00000000c0)={0x3, 0xff}) 2m45.650938709s ago: executing program 3 (id=2127): mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000000)=0x2, 0x7f, 0x3) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000080)=0x4081, 0x4) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000000)=0x4800, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x121000, 0x0) read$FUSE(r1, &(0x7f0000002a80)={0x2020}, 0xfffffffe) bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0xfffffffd}}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) mlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="400000001200050104000000ffdbdf2505001900ff00000028001a000a010102000000000000000000000000ff01000000000000000000000000000102"], 0x40}, 0x1, 0x0, 0x0, 0x4815}, 0x20040840) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r2, &(0x7f0000000180)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}, 0x4}}, 0x10) bind$tipc(r2, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r2, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) write(r4, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe004681000000078a151f75080039000500", 0x27) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x9}, 0x1c) openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f0000004600)={0x2, 0x0, 0x8, 0x7, 0xffffffffffffffe8, 0x401, 0xffffffff}, 0x0, &(0x7f0000004680)={0x9, 0xfff, 0xd3, 0x5, 0x7, 0x400, 0x9, 0xa1}, &(0x7f00000046c0)={0x0, 0x989680}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={r4}) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) 2m43.814806421s ago: executing program 3 (id=2138): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x8000021e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0x47fa, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x0, 0x1}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x13, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x34, 0x0, 0x431, 0x70bd28, 0x259fdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c810}, 0x20000000) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) 2m40.603239894s ago: executing program 3 (id=2151): syz_usb_connect(0x0, 0x2d, &(0x7f0000000400)=ANY=[], 0x0) 2m37.322629523s ago: executing program 3 (id=2171): syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x300) 2m36.987239329s ago: executing program 3 (id=2172): syz_usb_connect(0x6, 0x2d, &(0x7f0000000240)=ANY=[], 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000200)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x2, 0x7, 0xfffffe0001000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$sg(0x0, 0x0, 0x20c02) syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0xc040ff0b, &(0x7f0000000180)) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0xe, 0xf1, 0x5, 0xfd, 0xff, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x80a0000, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xdddd0000, 0xdddd1000, 0x10, 0x3, 0x0, 0x7, 0x4, 0x1, 0x7d, 0x0, 0x6, 0x5}, {0x8000000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x3, 0xd, 0x6, 0x3, 0x4f, 0x1}, {0x100000, 0x4000, 0x9, 0x1, 0x3, 0x9, 0x5, 0x6, 0x5, 0x7f, 0x2e, 0x4b}, {0xa2000, 0x8000000, 0xb, 0x6, 0x3, 0x6e, 0x1, 0xff, 0xc, 0x90, 0x1, 0xfa}, {0x8000000, 0x4000, 0x8, 0x4, 0x3, 0x5, 0x0, 0xa, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x7b, 0x2, 0x7}, {0xeeef0000, 0x5}, {0x4, 0x1}, 0x0, 0x0, 0x4000, 0x300, 0x5, 0x3000, 0xe6e78c00, [0x0, 0x401, 0x7, 0xc5]}) 2m32.76338655s ago: executing program 3 (id=2187): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x3, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0xce7c, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x4, 0xc, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0x2, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0x8, 0x8001, 0x4, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0x7, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0xffff6f3c, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x10, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0x6, 0x9, 0x5, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0x2, 0x0, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x7, 0x9, 0x6, 0x8000, 0x2, 0x1, 0x2, 0x2, 0x5, 0x5, 0xffffff1c, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8f, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x6, 0xcb1, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x6, 0x1, 0x2, 0x3ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d4, 0x3ff, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x90, 0x2, 0x6, 0x3, 0x70, 0x7f, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xfffffffe, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xfff, 0x421, 0x3ff, 0x2, 0xd, 0xfb6, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) 2m17.649863292s ago: executing program 33 (id=2187): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x3, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0xce7c, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x4, 0xc, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0x2, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0x8, 0x8001, 0x4, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0x7, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0xffff6f3c, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x10, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0x6, 0x9, 0x5, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0x2, 0x0, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x7, 0x9, 0x6, 0x8000, 0x2, 0x1, 0x2, 0x2, 0x5, 0x5, 0xffffff1c, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8f, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x6, 0xcb1, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x6, 0x1, 0x2, 0x3ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d4, 0x3ff, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x90, 0x2, 0x6, 0x3, 0x70, 0x7f, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xfffffffe, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xfff, 0x421, 0x3ff, 0x2, 0xd, 0xfb6, 0x5, 0xfffffffd, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) 10.774146507s ago: executing program 5 (id=2747): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) set_mempolicy(0x3, &(0x7f0000000240)=0xbbb, 0x9) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) 9.885416021s ago: executing program 2 (id=2748): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) syz_clone(0x2000480, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) write$cgroup_pid(r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x6, 0x8, 0x8000, 0x0, 0xb3, 0x4, 0xfffffe0000000001, 0x7, 0x2}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="44000000190001090000000024000000021800000002fd010000000008000100ac1414000800050064010100100016800c000100030801080200000006001500", @ANYRES32=r3], 0x44}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20d0}, 0x44000) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 9.236762812s ago: executing program 5 (id=2751): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv4_newroute={0x34, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20, 0x0, 0x0, 0x3, 0xc8, 0x9, 0x1b00}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0x8, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x4}}}}]}, 0x34}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) 8.741884974s ago: executing program 0 (id=2752): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_io_uring_setup(0x867, &(0x7f0000000140)={0x0, 0x9164, 0x1000, 0x1, 0x359}, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000012c0)=""/112, 0x6c}], 0x2, 0x0, 0x0) 8.378894176s ago: executing program 0 (id=2754): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106161154d0000000000010902"], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) openat$audio1(0xffffffffffffff9c, 0x0, 0x129202, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 8.01815627s ago: executing program 5 (id=2755): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8042, 0x40) fcntl$setlease(r0, 0x400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e21, 0x1, @loopback, 0x13}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5991ee20139b401046a89606ffcf92e", "2c5be7c6", "a0ca05c0707e52f4"}, 0x28) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) recvfrom$inet6(r2, &(0x7f00000000c0)=""/3, 0x3, 0x300, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x121301, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000640)=@generic={0x1, 0x5, 0x8000000000000001}) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r0, 0x4068aea3, &(0x7f0000000000)) 6.922486006s ago: executing program 0 (id=2758): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010005"], 0x34}}, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x50, &(0x7f0000000600)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "30b00afe4e79"}}}}}}}, 0x0) 6.837071281s ago: executing program 0 (id=2759): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000003100)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x800) 6.721997338s ago: executing program 1 (id=2760): syz_usb_connect(0x3, 0x36, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) 6.43873784s ago: executing program 2 (id=2761): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 6.219192285s ago: executing program 2 (id=2762): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x100, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5}) 5.847862159s ago: executing program 0 (id=2763): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x80800) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) close(0x3) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)=""/216, 0xd8}], 0x1}) r4 = syz_open_dev$loop(0x0, 0x81, 0x86fc3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_clone(0x6a000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000001280)={r4, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6, 0x0, "fee8a2ab78fc17a29d09f8421ddaac09000000a4b4ffff9603dda1af1ea80000000039cc2bdd000000deff00000000000000fbffffff0014a2648f00", "68bae8db0808038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac006482283b00", "90be8b1c55f96400", [0x800]}}) syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) getpriority(0x1, 0x0) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 5.803678003s ago: executing program 1 (id=2764): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, &(0x7f00000002c0)=ANY=[@ANYBLOB="202401"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000080)={&(0x7f00000000c0)}) 4.780304999s ago: executing program 5 (id=2765): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv4_newroute={0x34, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20, 0x0, 0x0, 0x3, 0xc8, 0x9, 0x1b00}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0x8, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x4}}}}]}, 0x34}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) 3.78543757s ago: executing program 1 (id=2767): r0 = fsopen(&(0x7f0000000000)='udf\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, 0x0, 0x0, 0x0) 3.557688664s ago: executing program 5 (id=2768): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106161154d0000000000010902"], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) openat$audio1(0xffffffffffffff9c, 0x0, 0x129202, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 3.506862903s ago: executing program 1 (id=2769): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x50, &(0x7f0000000600)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "30b00afe4e79"}}}}}}}, 0x0) 3.375034024s ago: executing program 1 (id=2770): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0xbf48ce7, "1803c809800000000800000000000000000000000000d63175876b4c69a600", 0xffffffffffffffff}) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000000)={0x4002, "fa02c80a3a1e9d4b9aaf000000008d674fe69b5b7638dd031dd7504fe5809639", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45b00e4f5b53e0ca34dd02acecdc67c5e3126628168", r1, 0xffffffffffffffff}) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, 0x0) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000180)={"0e337b42cc10d331ff0007000000000000001a00001e000000000000000400", 0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f0000000040)={"130f2672af9ee0452321864922cd3bebd7f9cec5064e58445f1268334b4900", r7}) 3.193195566s ago: executing program 1 (id=2771): r0 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x80, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x12}, 0x8, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0}) connect$unix(r1, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_clone3(&(0x7f0000000600)={0x2000000, &(0x7f0000000140), &(0x7f0000000240), &(0x7f00000002c0), {0x20}, &(0x7f0000000500)=""/94, 0x5e, &(0x7f0000000580)=""/87, &(0x7f0000000300)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x5}, 0x58) ptrace$cont(0x20, r4, 0x40, 0x1) r5 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_connect(0x0, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x3}) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r6, 0x10f, 0x85) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010020bd7000fbdbdf2526000000180001801400020064756d6d7930"], 0x2c}}, 0x20000000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYRES32=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r10 = socket(0x10, 0x80002, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r9, @ANYBLOB="00000000000000001c001a800800028008000200080000003e1200000800"], 0x44}}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)={'#! ', './file0'}, 0xb) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r9, {}, {}, {0xa}}}, 0x24}}, 0x0) 3.042823274s ago: executing program 2 (id=2772): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 2.966976781s ago: executing program 2 (id=2773): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000003100)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x800) 2.172600157s ago: executing program 5 (id=2775): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8042, 0x40) fcntl$setlease(r0, 0x400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e21, 0x1, @loopback, 0x13}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5991ee20139b401046a89606ffcf92e", "2c5be7c6", "a0ca05c0707e52f4"}, 0x28) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) recvfrom$inet6(r2, &(0x7f00000000c0)=""/3, 0x3, 0x300, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x121301, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$sock_SIOCGIFBR(0xffffffffffffffff, 0x8940, &(0x7f0000000640)=@generic={0x1, 0x5, 0x8000000000000001}) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r0, 0x4068aea3, &(0x7f0000000000)) 2.037533484s ago: executing program 6 (id=2776): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x4, 0x804, 0x7, 0xf, 0x7, 0x5, 0x0, 0x8, 0x8000000000000001, 0x2, 0xfffffffffffffffe, 0x101, 0x3, 0x1], 0x8000000, 0x141200}) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0x4044081}, 0x40004010) 1.969027973s ago: executing program 2 (id=2777): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, &(0x7f00000002c0)=ANY=[@ANYBLOB="202401"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000080)={&(0x7f00000000c0)}) 1.700663703s ago: executing program 6 (id=2778): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x28, 0x2, 0xfd, 0x5ae9}, {0x20, 0x7f, 0x4, 0xfffff038}, {0x6, 0x0, 0x7, 0x7}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)='*s', 0x2}], 0x1}}], 0x1, 0x0) 1.650143213s ago: executing program 0 (id=2779): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv4_newroute={0x34, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20, 0x0, 0x0, 0x3, 0xc8, 0x9, 0x1b00}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0x8, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x4}}}}]}, 0x34}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) 636.818627ms ago: executing program 6 (id=2780): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000180)=@multiplanar_fd={0x4, 0xb, 0x4, 0x800, 0x0, {0x0, 0xea60}, {0x5, 0x8, 0xb, 0x53, 0xc0, 0x3, "3b0e3209"}, 0x8, 0x4, {0x0}, 0x4}) 346.456597ms ago: executing program 6 (id=2781): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0xbf48ce7, "1803c809800000000800000000000000000000000000d63175876b4c69a600", 0xffffffffffffffff}) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000000)={0x4002, "fa02c80a3a1e9d4b9aaf000000008d674fe69b5b7638dd031dd7504fe5809639", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45b00e4f5b53e0ca34dd02acecdc67c5e3126628168", r1, 0xffffffffffffffff}) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, 0x0) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000180)={"0e337b42cc10d331ff0007000000000000001a00001e000000000000000400", 0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f0000000040)={"130f2672af9ee0452321864922cd3bebd7f9cec5064e58445f1268334b4900", r7}) 218.380822ms ago: executing program 6 (id=2782): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmmsg$inet(r1, &(0x7f0000000f00)=[{{&(0x7f00000000c0)={0x2, 0xce24, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000880)="22ac9cacaadd980d80cf2d0edccf054782f0fa54bf343367431ca823a40e", 0x1e}, {0x0}, {&(0x7f0000000980)="7ba573d709dc715c886aab2f36607c1ce4496b802b8f90e19efdf97d55a49dd6700a4cb52683de50ec039818a9e4a5dbc1bafe480f7f4ee55ed9f6b2c44f5809e3bae9ccbba228b231df4e4cf6b07c19e4d6cec99f3152ffacbcf13dedc3f1534802788bb68553b6fb7b3b965faa680f3523c05599f3180b3041ad3496e4aacd90ae85aef73687c7b4", 0x89}, {&(0x7f0000000a40)="c3fccf0c4933115a63530aea59b1c2f7902f255442a29128bc6ee009efdd3de22b7156afd65881", 0x27}], 0x4}}, {{0x0, 0x0, 0x0}}], 0x3, 0x2000c044) sendto$inet(r1, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) 0s ago: executing program 6 (id=2783): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x66, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r3, 0x4068aea3, &(0x7f0000000200)={0x74, 0x0, 0x10}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x28, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x54, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000000)=0x20) r7 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r7, 0x47f6, 0x0, 0x2, 0x0, 0x300) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x200000f, 0x11, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000000)=0x4000) kernel console output (not intermixed with test programs): 31.756775][ T5795] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 431.756806][ T5795] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 431.756845][ T5795] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 431.756869][ T5795] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.762826][ T5795] usb 2-1: config 0 descriptor?? [ 432.420943][ T5945] usb 2-1: USB disconnect, device number 29 [ 433.540928][T10040] fuse: Unknown parameter '0x0000000000000003' [ 433.833901][ T5945] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 433.988230][ T5945] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 433.988260][ T5945] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 433.988299][ T5945] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 433.988322][ T5945] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.038679][ T5945] usb 6-1: config 0 descriptor?? [ 435.103169][T10074] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1483'. [ 435.103194][T10074] netlink: 'syz.1.1483': attribute type 7 has an invalid length. [ 435.103202][T10074] netlink: 'syz.1.1483': attribute type 8 has an invalid length. [ 435.103208][T10074] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1483'. [ 435.112374][T10074] ip6gretap0: entered promiscuous mode [ 435.113330][T10074] syz_tun: entered promiscuous mode [ 435.114431][T10074] gretap0: entered promiscuous mode [ 435.115278][T10074] debugfs: 'hsr1' already exists in 'hsr' [ 435.115294][T10074] Cannot create hsr debugfs directory [ 436.557142][ T5795] usb 6-1: USB disconnect, device number 8 [ 437.003196][T10103] syz.5.1494 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 437.063456][ T37] kauditd_printk_skb: 2 callbacks suppressed [ 437.063968][ T37] audit: type=1326 audit(1773473977.192:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10099 comm="syz.5.1494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bc09bc799 code=0x7ffc0000 [ 437.064017][ T37] audit: type=1326 audit(1773473977.192:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10099 comm="syz.5.1494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bc09bc799 code=0x7ffc0000 [ 437.064055][ T37] audit: type=1326 audit(1773473977.192:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10099 comm="syz.5.1494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bc09bc799 code=0x7ffc0000 [ 437.064092][ T37] audit: type=1326 audit(1773473977.192:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10099 comm="syz.5.1494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f9bc09bc799 code=0x7ffc0000 [ 437.064129][ T37] audit: type=1326 audit(1773473977.192:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10099 comm="syz.5.1494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bc09bc799 code=0x7ffc0000 [ 437.064176][ T37] audit: type=1326 audit(1773473977.202:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10099 comm="syz.5.1494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bc09bc799 code=0x7ffc0000 [ 437.064216][ T37] audit: type=1326 audit(1773473977.202:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10099 comm="syz.5.1494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bc09bc799 code=0x7ffc0000 [ 437.064253][ T37] audit: type=1326 audit(1773473977.202:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10099 comm="syz.5.1494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f9bc09bc799 code=0x7ffc0000 [ 437.064290][ T37] audit: type=1326 audit(1773473977.202:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10099 comm="syz.5.1494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bc09bc799 code=0x7ffc0000 [ 437.064327][ T37] audit: type=1326 audit(1773473977.202:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10099 comm="syz.5.1494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bc09bc799 code=0x7ffc0000 [ 438.105102][T10110] netlink: 'syz.1.1496': attribute type 4 has an invalid length. [ 438.109874][T10110] netlink: 'syz.1.1496': attribute type 4 has an invalid length. [ 440.297948][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.298028][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.019983][T10144] netlink: 'syz.5.1513': attribute type 4 has an invalid length. [ 441.024714][T10144] netlink: 'syz.5.1513': attribute type 4 has an invalid length. [ 448.553768][ T8222] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 448.663805][T10272] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1564'. [ 448.744654][ T8222] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 448.744714][ T8222] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 448.744728][ T8222] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.795759][ T8222] usb 2-1: config 0 descriptor?? [ 448.821258][ T8222] pwc: Askey VC010 type 2 USB webcam detected. [ 449.208798][ T8222] pwc: recv_control_msg error -32 req 02 val 2b00 [ 449.221374][ T8222] pwc: recv_control_msg error -32 req 02 val 2700 [ 449.223261][ T8222] pwc: recv_control_msg error -32 req 02 val 2c00 [ 449.236660][ T8222] pwc: recv_control_msg error -32 req 04 val 1000 [ 449.239752][ T8222] pwc: recv_control_msg error -32 req 04 val 1300 [ 449.240426][ T8222] pwc: recv_control_msg error -32 req 04 val 1400 [ 449.263685][ T8222] pwc: recv_control_msg error -71 req 02 val 2000 [ 449.271329][ T8222] pwc: recv_control_msg error -71 req 02 val 2100 [ 449.271868][ T8222] pwc: recv_control_msg error -71 req 04 val 1500 [ 449.272417][ T8222] pwc: recv_control_msg error -71 req 02 val 2500 [ 449.275701][ T8222] pwc: recv_control_msg error -71 req 02 val 2400 [ 449.308318][ T8222] pwc: recv_control_msg error -71 req 02 val 2600 [ 449.308805][ T8222] pwc: recv_control_msg error -71 req 02 val 2900 [ 449.309325][ T8222] pwc: recv_control_msg error -71 req 02 val 2800 [ 449.351458][ T8222] pwc: recv_control_msg error -71 req 04 val 1100 [ 449.362790][ T8222] pwc: recv_control_msg error -71 req 04 val 1200 [ 449.397932][ T8222] pwc: Registered as video103. [ 449.419159][ T8222] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input34 [ 449.447455][ T8222] usb 2-1: USB disconnect, device number 30 [ 450.651722][T10288] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1571'. [ 450.651763][T10288] netlink: 'syz.0.1571': attribute type 7 has an invalid length. [ 450.651778][T10288] netlink: 'syz.0.1571': attribute type 8 has an invalid length. [ 450.651792][T10288] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1571'. [ 452.173511][ T5795] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 452.356886][ T5795] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 452.356926][ T5795] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 452.356939][ T5795] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.362093][ T5795] usb 4-1: config 0 descriptor?? [ 452.429133][ T5795] pwc: Askey VC010 type 2 USB webcam detected. [ 452.905972][ T5795] pwc: recv_control_msg error -32 req 02 val 2b00 [ 452.921084][ T5795] pwc: recv_control_msg error -32 req 02 val 2700 [ 452.973625][ T5795] pwc: recv_control_msg error -32 req 02 val 2c00 [ 453.027524][ T5795] pwc: recv_control_msg error -32 req 04 val 1000 [ 453.029749][ T5795] pwc: recv_control_msg error -32 req 04 val 1300 [ 453.037029][ T5795] pwc: recv_control_msg error -32 req 04 val 1400 [ 453.220584][ T5795] pwc: recv_control_msg error -71 req 02 val 2000 [ 453.221055][ T5795] pwc: recv_control_msg error -71 req 02 val 2100 [ 453.221449][ T5795] pwc: recv_control_msg error -71 req 04 val 1500 [ 453.221819][ T5795] pwc: recv_control_msg error -71 req 02 val 2500 [ 453.222188][ T5795] pwc: recv_control_msg error -71 req 02 val 2400 [ 453.222522][ T5795] pwc: recv_control_msg error -71 req 02 val 2600 [ 453.222849][ T5795] pwc: recv_control_msg error -71 req 02 val 2900 [ 453.223236][ T5795] pwc: recv_control_msg error -71 req 02 val 2800 [ 453.287855][ T5795] pwc: recv_control_msg error -71 req 04 val 1100 [ 453.289489][ T5795] pwc: recv_control_msg error -71 req 04 val 1200 [ 453.307064][ T5795] pwc: Registered as video103. [ 453.310870][ T5795] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input35 [ 453.329005][T10341] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1593'. [ 453.329041][T10341] netlink: 'syz.1.1593': attribute type 7 has an invalid length. [ 453.329062][T10341] netlink: 'syz.1.1593': attribute type 8 has an invalid length. [ 453.329074][T10341] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1593'. [ 453.426546][ T5795] usb 4-1: USB disconnect, device number 8 [ 454.485535][T10363] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1601'. [ 455.422271][T10377] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 456.027216][T10391] netlink: 'syz.3.1599': attribute type 4 has an invalid length. [ 456.033767][T10391] netlink: 'syz.3.1599': attribute type 4 has an invalid length. [ 456.043667][ T5795] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 456.197447][ T5795] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 456.197517][ T5795] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 456.197542][ T5795] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.233684][ T5795] usb 6-1: config 0 descriptor?? [ 456.306970][T10396] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1614'. [ 456.345197][ T5795] pwc: Askey VC010 type 2 USB webcam detected. [ 456.648929][ T5795] pwc: recv_control_msg error -32 req 02 val 2b00 [ 456.651386][ T5795] pwc: recv_control_msg error -32 req 02 val 2700 [ 456.667332][ T5795] pwc: recv_control_msg error -32 req 02 val 2c00 [ 456.670863][ T5795] pwc: recv_control_msg error -32 req 04 val 1000 [ 456.671514][ T5795] pwc: recv_control_msg error -32 req 04 val 1300 [ 456.672882][ T5795] pwc: recv_control_msg error -32 req 04 val 1400 [ 456.965881][ T5795] pwc: recv_control_msg error -71 req 02 val 2000 [ 456.984987][ T5795] pwc: recv_control_msg error -71 req 02 val 2100 [ 456.985377][ T5795] pwc: recv_control_msg error -71 req 04 val 1500 [ 456.985718][ T5795] pwc: recv_control_msg error -71 req 02 val 2500 [ 456.986058][ T5795] pwc: recv_control_msg error -71 req 02 val 2400 [ 456.986410][ T5795] pwc: recv_control_msg error -71 req 02 val 2600 [ 456.987486][ T5795] pwc: recv_control_msg error -71 req 02 val 2900 [ 456.987838][ T5795] pwc: recv_control_msg error -71 req 02 val 2800 [ 456.988273][ T5795] pwc: recv_control_msg error -71 req 04 val 1100 [ 456.988592][ T5795] pwc: recv_control_msg error -71 req 04 val 1200 [ 457.091628][ T5795] pwc: Registered as video103. [ 457.106672][ T5795] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input36 [ 457.135470][ T5795] usb 6-1: USB disconnect, device number 9 [ 458.033706][ T5945] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 458.203757][ T5945] usb 6-1: Using ep0 maxpacket: 16 [ 458.205913][ T5945] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 458.208031][ T5945] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 458.208052][ T5945] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.208063][ T5945] usb 6-1: Product: syz [ 458.208071][ T5945] usb 6-1: Manufacturer: syz [ 458.208079][ T5945] usb 6-1: SerialNumber: syz [ 458.222144][ T5945] usb 6-1: config 0 descriptor?? [ 458.276687][ T5945] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 458.276712][ T5945] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 458.911845][ T5945] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 459.419400][ T5945] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 459.419456][ T5945] em28xx 6-1:0.0: board has no eeprom [ 459.564266][ T5945] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 459.564288][ T5945] em28xx 6-1:0.0: dvb set to bulk mode. [ 459.565136][ T9] em28xx 6-1:0.0: Binding DVB extension [ 459.621644][ T5945] usb 6-1: USB disconnect, device number 10 [ 459.664139][ T5945] em28xx 6-1:0.0: Disconnecting em28xx [ 459.778529][ T9] em28xx 6-1:0.0: Registering input extension [ 459.778673][ T5945] em28xx 6-1:0.0: Closing input extension [ 459.814425][ T5945] em28xx 6-1:0.0: Freeing device [ 460.261438][ T5945] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 460.415008][ T5945] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 460.420394][ T5945] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 460.420427][ T5945] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.467459][ T5945] usb 6-1: config 0 descriptor?? [ 460.491092][ T5945] pwc: Askey VC010 type 2 USB webcam detected. [ 460.750826][T10456] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1640'. [ 460.912653][ T5945] pwc: recv_control_msg error -32 req 02 val 2b00 [ 460.921438][ T5945] pwc: recv_control_msg error -32 req 02 val 2700 [ 460.923285][ T5945] pwc: recv_control_msg error -32 req 02 val 2c00 [ 460.937502][ T5945] pwc: recv_control_msg error -32 req 04 val 1000 [ 460.939514][ T5945] pwc: recv_control_msg error -32 req 04 val 1300 [ 460.940601][ T5945] pwc: recv_control_msg error -32 req 04 val 1400 [ 461.012460][ T5945] pwc: recv_control_msg error -71 req 02 val 2000 [ 461.012927][ T5945] pwc: recv_control_msg error -71 req 02 val 2100 [ 461.018795][ T5945] pwc: recv_control_msg error -71 req 04 val 1500 [ 461.033799][ T5945] pwc: recv_control_msg error -71 req 02 val 2500 [ 461.034326][ T5945] pwc: recv_control_msg error -71 req 02 val 2400 [ 461.034838][ T5945] pwc: recv_control_msg error -71 req 02 val 2600 [ 461.035337][ T5945] pwc: recv_control_msg error -71 req 02 val 2900 [ 461.035921][ T5945] pwc: recv_control_msg error -71 req 02 val 2800 [ 461.036719][ T5945] pwc: recv_control_msg error -71 req 04 val 1100 [ 461.037284][ T5945] pwc: recv_control_msg error -71 req 04 val 1200 [ 461.052426][ T5945] pwc: Registered as video103. [ 461.069380][ T5945] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input38 [ 461.103847][ T5945] usb 6-1: USB disconnect, device number 11 [ 461.833710][ T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 461.987500][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 462.002405][ T9] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 462.002436][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.002455][ T9] usb 1-1: Product: syz [ 462.002463][ T9] usb 1-1: Manufacturer: syz [ 462.002484][ T9] usb 1-1: SerialNumber: syz [ 462.273602][T10470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.274151][T10470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.354311][T10470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.354940][T10470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.734335][ T9] usb 1-1: USB disconnect, device number 16 [ 464.348612][T10509] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1661'. [ 464.348652][T10509] netlink: 'syz.0.1661': attribute type 7 has an invalid length. [ 464.348666][T10509] netlink: 'syz.0.1661': attribute type 8 has an invalid length. [ 464.348679][T10509] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1661'. [ 464.487413][ T5821] udevd[5821]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 464.589120][T10509] syz_tun: entered promiscuous mode [ 464.643559][T10509] syz_tun: left promiscuous mode [ 465.031160][T10526] program syz.0.1669 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 465.103726][ T5944] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 465.277718][ T5944] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 465.277748][ T5944] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 465.277789][ T5944] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 465.277813][ T5944] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.295639][ T5944] usb 4-1: config 0 descriptor?? [ 465.332806][T10527] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1667'. [ 465.508028][ T5944] usb 4-1: USB disconnect, device number 9 [ 465.705169][T10542] tipc: Started in network mode [ 465.705203][T10542] tipc: Node identity 6af3b46982ee, cluster identity 4711 [ 465.705706][T10542] tipc: Enabled bearer , priority 0 [ 465.724932][T10542] syzkaller0: entered promiscuous mode [ 465.724959][T10542] syzkaller0: entered allmulticast mode [ 465.776175][T10542] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 466.025303][T10542] tipc: Resetting bearer [ 467.532680][T10542] tipc: Disabling bearer [ 467.575338][T10557] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1679'. [ 467.765875][ T5789] tipc: Node number set to 3894260841 [ 468.346611][T10575] ptrace attach of "./syz-executor exec"[5803] was attempted by "\x09   Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ /dev/snd/controlC#"[10575] [ 471.083010][T10627] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1708'. [ 471.529413][ T5814] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 471.549471][ T5814] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 471.563727][ T5814] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 471.565646][ T5814] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 471.566982][ T5814] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 472.454759][T10651] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1716'. [ 473.574952][ T5814] Bluetooth: hci3: command tx timeout [ 473.812110][T10633] chnl_net:caif_netlink_parms(): no params data found [ 474.542129][T10633] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.542254][T10633] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.542372][T10633] bridge_slave_0: entered allmulticast mode [ 474.550543][T10633] bridge_slave_0: entered promiscuous mode [ 474.552607][T10633] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.552686][T10633] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.552807][T10633] bridge_slave_1: entered allmulticast mode [ 474.557009][T10633] bridge_slave_1: entered promiscuous mode [ 474.888138][T10633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 474.952982][T10633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.275781][ T5806] syz_tun (unregistering): left promiscuous mode [ 475.660258][ T5814] Bluetooth: hci3: command tx timeout [ 476.146893][T10698] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1728'. [ 476.146936][T10698] netlink: 'syz.0.1728': attribute type 7 has an invalid length. [ 476.146951][T10698] netlink: 'syz.0.1728': attribute type 8 has an invalid length. [ 476.146963][T10698] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1728'. [ 476.434481][T10698] syz_tun: entered promiscuous mode [ 476.491624][T10698] syz_tun: left promiscuous mode [ 476.657307][T10633] team0: Port device team_slave_0 added [ 476.687713][T10633] team0: Port device team_slave_1 added [ 477.219234][T10659] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.481795][T10727] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1737'. [ 477.743877][ T5814] Bluetooth: hci3: command tx timeout [ 478.293299][T10659] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.441205][T10633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 478.441219][T10633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 478.441235][T10633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 478.985843][T10633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 478.985861][T10633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 478.985889][T10633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 479.363427][T10659] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.813584][ T5814] Bluetooth: hci3: command tx timeout [ 479.950272][T10659] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.019714][T10633] hsr_slave_0: entered promiscuous mode [ 480.020615][T10633] hsr_slave_1: entered promiscuous mode [ 480.021170][T10633] debugfs: 'hsr0' already exists in 'hsr' [ 480.021189][T10633] Cannot create hsr debugfs directory [ 484.732980][T10765] syz.5.1750 (10765) used greatest stack depth: 17728 bytes left [ 486.098741][T10659] bridge_slave_1: left allmulticast mode [ 486.098776][T10659] bridge_slave_1: left promiscuous mode [ 486.099084][T10659] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.255450][T10659] bridge_slave_0: left allmulticast mode [ 486.255484][T10659] bridge_slave_0: left promiscuous mode [ 486.257979][T10659] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.454143][T10659] ip6gretap0 (unregistering): left promiscuous mode [ 487.736760][T10659] gretap0 (unregistering): left promiscuous mode [ 488.011903][T10859] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1776'. [ 488.126328][T10659] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 488.257233][T10659] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 488.377099][T10659] bond0 (unregistering): Released all slaves [ 489.243612][ T808] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 489.507187][ T808] usb 2-1: unable to get BOS descriptor or descriptor too short [ 489.508233][ T808] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 489.508274][ T808] usb 2-1: can't read configurations, error -71 [ 490.165230][ T5813] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 490.340007][ T5813] usb 4-1: config index 0 descriptor too short (expected 39, got 27) [ 490.340046][ T5813] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 490.340060][ T5813] usb 4-1: config 0 interface 0 has no altsetting 0 [ 490.345601][ T5813] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 490.345634][ T5813] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 490.345655][ T5813] usb 4-1: Product: syz [ 490.345670][ T5813] usb 4-1: Manufacturer: syz [ 490.345683][ T5813] usb 4-1: SerialNumber: syz [ 490.402632][ T5813] usb 4-1: config 0 descriptor?? [ 490.434754][ T5813] hub 4-1:0.0: bad descriptor, ignoring hub [ 490.434783][ T5813] hub 4-1:0.0: probe with driver hub failed with error -5 [ 490.441570][ T5813] usb 4-1: selecting invalid altsetting 0 [ 490.745751][ T808] usb 4-1: USB disconnect, device number 10 [ 491.476172][T10659] hsr_slave_0: left promiscuous mode [ 491.616460][T10659] hsr_slave_1: left promiscuous mode [ 491.617252][T10659] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 491.619830][T10659] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 491.664990][T10659] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 491.665013][T10659] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 492.316371][T10659] veth1_macvtap: left promiscuous mode [ 492.316482][T10659] veth0_macvtap: left promiscuous mode [ 492.320518][T10659] veth1_vlan: left promiscuous mode [ 492.320809][T10659] veth0_vlan: left promiscuous mode [ 493.165702][ T5789] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 493.293700][ T5789] usb 2-1: device descriptor read/64, error -71 [ 493.536203][ T5789] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 493.663754][ T5789] usb 2-1: device descriptor read/64, error -71 [ 493.773894][ T5789] usb usb2-port1: attempt power cycle [ 494.146908][ T5789] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 494.185891][ T5789] usb 2-1: device descriptor read/8, error -71 [ 494.443982][ T5789] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 494.475484][ T5789] usb 2-1: device descriptor read/8, error -71 [ 494.591257][ T5789] usb usb2-port1: unable to enumerate USB device [ 494.705471][T10633] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 494.772468][T10633] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 494.847966][T10633] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 494.918409][T10633] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 495.536189][T10958] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1805'. [ 495.536226][T10958] netlink: 'syz.3.1805': attribute type 7 has an invalid length. [ 495.536239][T10958] netlink: 'syz.3.1805': attribute type 8 has an invalid length. [ 495.536252][T10958] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1805'. [ 495.819839][T10633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 495.850638][T10935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1802'. [ 495.883348][T10935] bond_slave_0: entered promiscuous mode [ 495.883401][T10935] bond_slave_1: entered promiscuous mode [ 495.896192][T10935] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 495.979635][T10935] bond_slave_0: left promiscuous mode [ 495.982517][T10935] bond_slave_1: left promiscuous mode [ 496.282053][T10633] 8021q: adding VLAN 0 to HW filter on device team0 [ 496.314308][ T1354] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.314732][ T1354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 496.339027][ T1354] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.350775][ T1354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 497.122340][T10633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 497.671436][T10633] veth0_vlan: entered promiscuous mode [ 497.695927][T10633] veth1_vlan: entered promiscuous mode [ 497.804906][T10633] veth0_macvtap: entered promiscuous mode [ 497.826443][T10633] veth1_macvtap: entered promiscuous mode [ 497.891426][T10994] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1818'. [ 497.891466][T10994] netlink: 'syz.3.1818': attribute type 7 has an invalid length. [ 497.891480][T10994] netlink: 'syz.3.1818': attribute type 8 has an invalid length. [ 497.891493][T10994] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1818'. [ 497.897735][ T5944] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 498.023840][ T5944] usb 2-1: device descriptor read/64, error -71 [ 498.029499][T10633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 498.075580][T10633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 498.112089][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.112259][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.112293][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.112314][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.271143][ T5944] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 498.405015][ T5944] usb 2-1: device descriptor read/64, error -71 [ 498.516486][ T5944] usb usb2-port1: attempt power cycle [ 498.637690][T10659] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.637717][T10659] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.802524][ T3628] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.802541][ T3628] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.925100][ T5944] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 498.944647][ T5944] usb 2-1: device descriptor read/8, error -71 [ 499.184626][ T5944] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 499.206039][ T5944] usb 2-1: device descriptor read/8, error -71 [ 499.315507][ T5944] usb usb2-port1: unable to enumerate USB device [ 501.344438][T10998] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 501.506740][T10998] usb 2-1: unable to get BOS descriptor or descriptor too short [ 501.511570][T10998] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 501.511602][T10998] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.511623][T10998] usb 2-1: Product: syz [ 501.511636][T10998] usb 2-1: Manufacturer: syz [ 501.511651][T10998] usb 2-1: SerialNumber: syz [ 501.738234][T11028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 501.738921][T11028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 501.749763][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.749908][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.788199][T11028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.788799][T11028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.791347][T10998] usb 2-1: 1:1: cannot get freq at ep 0x1 [ 502.979690][T11053] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1841'. [ 503.069245][T10998] usb 2-1: USB disconnect, device number 41 [ 503.379975][ T6571] udevd[6571]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 503.503601][ T808] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 503.632212][T11064] tipc: Enabled bearer , priority 0 [ 503.649575][T11064] syzkaller0: entered promiscuous mode [ 503.649605][T11064] syzkaller0: entered allmulticast mode [ 503.702747][T11064] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 503.881078][ T808] usb 4-1: unable to get BOS descriptor or descriptor too short [ 503.900855][ T808] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 503.900899][ T808] usb 4-1: can't read configurations, error -71 [ 504.054155][T11064] tipc: Resetting bearer [ 504.208179][T11064] tipc: Disabling bearer [ 504.538378][T11083] syzkaller0: entered promiscuous mode [ 504.538409][T11083] syzkaller0: entered allmulticast mode [ 505.063600][ T808] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 505.236769][ T808] usb 4-1: unable to get BOS descriptor or descriptor too short [ 505.285797][ T808] usb 4-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 505.285830][ T808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.285842][ T808] usb 4-1: Product: syz [ 505.285851][ T808] usb 4-1: Manufacturer: syz [ 505.285859][ T808] usb 4-1: SerialNumber: syz [ 505.516050][T11089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.517054][T11089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.268403][T11107] tipc: Started in network mode [ 506.268438][T11107] tipc: Node identity 22af9c62edef, cluster identity 4711 [ 506.272414][T11107] tipc: Enabled bearer , priority 0 [ 506.274780][T11107] syzkaller0: entered promiscuous mode [ 506.274805][T11107] syzkaller0: entered allmulticast mode [ 506.300245][T11107] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 506.474348][T11110] tipc: Resetting bearer [ 506.533841][T11104] tipc: Resetting bearer [ 506.592807][T11089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.593412][T11089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.609858][ T808] usb 4-1: 1:1: cannot get freq at ep 0x1 [ 506.714949][ T808] usb 4-1: USB disconnect, device number 13 [ 506.821074][T11104] tipc: Disabling bearer [ 506.853130][ T5807] udevd[5807]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 507.894368][T11144] ptrace attach of "./syz-executor exec"[5802] was attempted by "\x09   Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ"[11144] [ 509.188031][T11157] usb usb8: usbfs: interface 0 claimed by hub while 'syz.0.1880' sets config #2 [ 509.593660][ T5789] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 509.749748][ T5789] usb 2-1: unable to get BOS descriptor or descriptor too short [ 509.766783][ T5789] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 509.766818][ T5789] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.766839][ T5789] usb 2-1: Product: syz [ 509.766853][ T5789] usb 2-1: Manufacturer: syz [ 509.766868][ T5789] usb 2-1: SerialNumber: syz [ 510.014481][T11172] ptrace attach of "./syz-executor exec"[5802] was attempted by "\x09   Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ"[11172] [ 510.057985][T11161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.061590][T11161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.363637][ T5813] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 510.516052][ T5813] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 510.516111][ T5813] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 510.516134][ T5813] usb 6-1: config 0 interface 0 has no altsetting 0 [ 510.520857][ T5813] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 510.520889][ T5813] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 510.520920][ T5813] usb 6-1: Product: syz [ 510.520934][ T5813] usb 6-1: Manufacturer: syz [ 510.520948][ T5813] usb 6-1: SerialNumber: syz [ 510.528356][ T5813] usb 6-1: config 0 descriptor?? [ 510.567732][ T5813] hub 6-1:0.0: bad descriptor, ignoring hub [ 510.567777][ T5813] hub 6-1:0.0: probe with driver hub failed with error -5 [ 511.082007][T11161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.084691][T11161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.102428][ T5789] usb 2-1: 1:1: cannot get freq at ep 0x1 [ 511.107539][ T5813] usb 6-1: selecting invalid altsetting 0 [ 511.361194][T11190] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1895'. [ 511.374808][ T5813] usb 6-1: USB disconnect, device number 12 [ 511.622661][ T5789] usb 2-1: USB disconnect, device number 42 [ 511.846910][T11195] syzkaller0: entered promiscuous mode [ 511.846939][T11195] syzkaller0: entered allmulticast mode [ 512.282904][T11203] ptrace attach of "./syz-executor exec"[5801] was attempted by "\x09   Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ"[11203] [ 512.371117][ T5821] udevd[5821]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 513.593599][T10998] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 513.723680][T10998] usb 1-1: device descriptor read/64, error -71 [ 514.053000][T10998] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 514.313625][T10998] usb 1-1: device descriptor read/64, error -71 [ 514.424068][T10998] usb usb1-port1: attempt power cycle [ 514.494556][T11245] ptrace attach of "./syz-executor exec"[5803] was attempted by "\x09   Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ"[11245] [ 514.806178][T10998] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 514.833656][T10998] usb 1-1: device descriptor read/8, error -71 [ 514.887869][T11248] tipc: Started in network mode [ 514.887891][T11248] tipc: Node identity be20ba75dee2, cluster identity 4711 [ 514.888008][T11248] tipc: Enabled bearer , priority 0 [ 514.890431][T11248] syzkaller0: entered promiscuous mode [ 514.890458][T11248] syzkaller0: entered allmulticast mode [ 514.934812][T11248] tipc: Resetting bearer [ 514.984928][T11247] tipc: Resetting bearer [ 515.073657][T10998] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 515.097503][T10998] usb 1-1: device descriptor read/8, error -71 [ 515.164576][T11247] tipc: Disabling bearer [ 515.203929][T10998] usb usb1-port1: unable to enumerate USB device [ 518.289606][T11278] ptrace attach of "./syz-executor exec"[7673] was attempted by "\x09   Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ"[11278] [ 519.932683][T11295] tipc: Started in network mode [ 519.932704][T11295] tipc: Node identity 8e21c0a456d6, cluster identity 4711 [ 519.932825][T11295] tipc: Enabled bearer , priority 0 [ 519.933351][T11295] syzkaller0: entered promiscuous mode [ 519.933365][T11295] syzkaller0: entered allmulticast mode [ 519.945344][T11295] tipc: Resetting bearer [ 520.013093][T11294] tipc: Resetting bearer [ 520.316956][T11294] tipc: Disabling bearer [ 522.503583][ T31] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 522.635491][ T31] usb 4-1: device descriptor read/64, error -71 [ 522.883730][ T31] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 523.013597][ T31] usb 4-1: device descriptor read/64, error -71 [ 523.123896][ T31] usb usb4-port1: attempt power cycle [ 523.484449][ T31] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 523.504456][ T31] usb 4-1: device descriptor read/8, error -71 [ 523.667786][T11369] syzkaller0: entered promiscuous mode [ 523.667826][T11369] syzkaller0: entered allmulticast mode [ 523.743586][ T31] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 523.764638][ T31] usb 4-1: device descriptor read/8, error -71 [ 523.874088][ T31] usb usb4-port1: unable to enumerate USB device [ 523.953624][ T5944] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 524.103705][ T5944] usb 1-1: Using ep0 maxpacket: 16 [ 524.105451][ T5944] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 524.105469][ T5944] usb 1-1: config 0 has no interfaces? [ 524.105487][ T5944] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 524.105501][ T5944] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.109077][ T5944] usb 1-1: config 0 descriptor?? [ 524.421443][T10998] usb 1-1: USB disconnect, device number 21 [ 525.847712][T11403] syzkaller0: entered promiscuous mode [ 525.847731][T11403] syzkaller0: entered allmulticast mode [ 526.447974][T11419] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.1977' sets config #2 [ 527.943917][T11458] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1992'. [ 530.033649][ T5813] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 530.187047][ T5813] usb 1-1: unable to get BOS descriptor or descriptor too short [ 530.207418][ T5813] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 530.207452][ T5813] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.207575][ T5813] usb 1-1: Product: syz [ 530.207592][ T5813] usb 1-1: Manufacturer: syz [ 530.207607][ T5813] usb 1-1: SerialNumber: syz [ 530.498767][T11488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 530.501873][T11488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 532.496713][T11488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 532.497338][T11488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.615307][ T5813] usb 1-1: 1:1: cannot get freq at ep 0x1 [ 534.669096][ T5813] usb 1-1: USB disconnect, device number 22 [ 534.843664][T10998] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 534.881804][ T5807] udevd[5807]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 535.007455][T10998] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 535.007534][T10998] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 535.007560][T10998] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 535.007587][T10998] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 535.007610][T10998] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 535.007656][T10998] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 535.007678][T10998] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.024463][T10998] usb 2-1: config 0 descriptor?? [ 535.924600][T10998] plantronics 0003:047F:FFFF.0008: reserved main item tag 0xd [ 535.985994][T10998] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 536.063930][T10998] usb 2-1: USB disconnect, device number 43 [ 536.205649][T11549] fido_id[11549]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 537.244104][T11565] ptrace attach of "./syz-executor exec"[5803] was attempted by "./syz-executor exec"[11565] [ 540.995121][ T5885] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 541.293944][ T5885] usb 1-1: device descriptor read/64, error -71 [ 541.643852][ T5885] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 541.864886][ T5885] usb 1-1: device descriptor read/64, error -71 [ 542.001741][ T5885] usb usb1-port1: attempt power cycle [ 542.211439][T11584] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 542.226484][T11584] team0 (unregistering): Port device team_slave_0 removed [ 542.374306][T11584] team0 (unregistering): Failed to send options change via netlink (err -105) [ 542.374645][T11584] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 542.374943][T11584] team0 (unregistering): Port device team_slave_1 removed [ 542.482537][T11601] ptrace attach of "./syz-executor exec"[5803] was attempted by "./syz-executor exec"[11601] [ 543.504010][ T5944] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 543.645892][ T5944] usb 3-1: device descriptor read/64, error -71 [ 543.883712][ T5944] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 544.232522][T11642] ptrace attach of "./syz-executor exec"[5801] was attempted by "./syz-executor exec"[11642] [ 544.257309][ T5944] usb 3-1: device descriptor read/64, error -71 [ 544.370027][ T5944] usb usb3-port1: attempt power cycle [ 544.833672][ T5944] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 544.854475][ T5944] usb 3-1: device descriptor read/8, error -71 [ 545.117011][ T5944] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 545.137987][ T5944] usb 3-1: device descriptor read/8, error -71 [ 545.244558][ T5944] usb usb3-port1: unable to enumerate USB device [ 545.451829][T11669] ptrace attach of "./syz-executor exec"[5802] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ"[11669] [ 545.965275][ T808] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 546.155656][ T808] usb 4-1: unable to get BOS descriptor or descriptor too short [ 546.156762][ T808] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 546.156799][ T808] usb 4-1: can't read configurations, error -71 [ 546.395682][T11694] ptrace attach of "./syz-executor exec"[10633] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ"[11694] [ 546.517258][T11699] tipc: Enabled bearer , priority 0 [ 546.518123][T11699] syzkaller0: entered promiscuous mode [ 546.518147][T11699] syzkaller0: entered allmulticast mode [ 546.545392][T11699] tipc: Resetting bearer [ 546.580786][T11696] tipc: Resetting bearer [ 546.735339][T11696] tipc: Disabling bearer [ 547.209213][T11724] ptrace attach of "./syz-executor exec"[5801] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ"[11724] [ 547.633561][ T5885] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 547.778583][T11749] tipc: Enabled bearer , priority 0 [ 547.779456][T11749] syzkaller0: entered promiscuous mode [ 547.779478][T11749] syzkaller0: entered allmulticast mode [ 547.799561][T11749] tipc: Resetting bearer [ 547.803562][ T31] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 547.854717][T11748] tipc: Resetting bearer [ 547.905842][ T5885] usb 3-1: unable to get BOS descriptor or descriptor too short [ 547.906864][ T5885] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 547.906895][ T5885] usb 3-1: can't read configurations, error -71 [ 547.963558][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 547.986879][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 548.005399][ T31] usb 4-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 548.005431][ T31] usb 4-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 548.005452][ T31] usb 4-1: Manufacturer: syz [ 548.011208][ T31] usb 4-1: config 0 descriptor?? [ 548.056061][T11748] tipc: Disabling bearer [ 548.363789][T11757] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2109'. [ 548.364227][T11757] netlink: 'syz.0.2109': attribute type 7 has an invalid length. [ 548.364244][T11757] netlink: 'syz.0.2109': attribute type 8 has an invalid length. [ 548.364257][T11757] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2109'. [ 548.421292][ T31] usbhid 4-1:0.0: can't add hid device: -71 [ 548.421434][ T31] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 548.443043][T11757] syz_tun: entered promiscuous mode [ 548.461245][ T31] usb 4-1: USB disconnect, device number 20 [ 548.503592][T11757] syz_tun: left promiscuous mode [ 549.702761][T11800] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2125'. [ 549.702801][T11800] netlink: 'syz.0.2125': attribute type 7 has an invalid length. [ 549.702814][T11800] netlink: 'syz.0.2125': attribute type 8 has an invalid length. [ 549.702827][T11800] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2125'. [ 549.882548][T11800] syz_tun: entered promiscuous mode [ 549.913675][T11800] syz_tun: left promiscuous mode [ 549.973734][ T5789] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 550.014326][T11797] tipc: Enabled bearer , priority 0 [ 550.015525][T11804] syzkaller0: entered promiscuous mode [ 550.015557][T11804] syzkaller0: entered allmulticast mode [ 550.022875][T11797] tipc: Resetting bearer [ 550.072294][T11795] tipc: Resetting bearer [ 550.103601][ T5789] usb 2-1: device descriptor read/64, error -71 [ 550.246900][T11795] tipc: Disabling bearer [ 550.353195][ T5789] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 550.483669][ T5789] usb 2-1: device descriptor read/64, error -71 [ 550.601184][ T5789] usb usb2-port1: attempt power cycle [ 550.975047][ T5789] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 550.996397][ T5789] usb 2-1: device descriptor read/8, error -71 [ 551.236656][ T5789] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 551.275203][ T5789] usb 2-1: device descriptor read/8, error -71 [ 551.378623][T10998] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 551.432107][ T5789] usb usb2-port1: unable to enumerate USB device [ 551.597715][T10998] usb 3-1: Using ep0 maxpacket: 16 [ 551.601696][T10998] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 551.602994][T10998] usb 3-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 551.603022][T10998] usb 3-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 551.603043][T10998] usb 3-1: Manufacturer: syz [ 551.658088][T10998] usb 3-1: config 0 descriptor?? [ 552.136304][T10998] usbhid 3-1:0.0: can't add hid device: -71 [ 552.136433][T10998] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 552.157302][T10998] usb 3-1: USB disconnect, device number 13 [ 553.143586][ T5813] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 553.319645][ T5813] usb 1-1: unable to get BOS descriptor or descriptor too short [ 553.370517][ T5813] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 553.370551][ T5813] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.370572][ T5813] usb 1-1: Product: syz [ 553.370587][ T5813] usb 1-1: Manufacturer: syz [ 553.370602][ T5813] usb 1-1: SerialNumber: syz [ 553.689077][T11840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.704721][T11840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.729992][T11840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.730535][T11840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.954113][ T5813] usb 1-1: USB disconnect, device number 26 [ 555.077545][T11866] usb usb8: usbfs: interface 0 claimed by hub while 'syz.5.2152' sets config #2 [ 555.277548][ T5821] udevd[5821]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 555.365082][ T31] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 555.503565][ T31] usb 4-1: device descriptor read/64, error -71 [ 555.783812][ T31] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 555.933583][ T31] usb 4-1: device descriptor read/64, error -71 [ 556.044097][ T31] usb usb4-port1: attempt power cycle [ 556.273555][ T808] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 556.416313][ T31] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 556.437368][ T808] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 556.437402][ T808] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 556.444299][ T808] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 556.444329][ T808] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 556.444347][ T808] usb 1-1: Manufacturer: syz [ 556.452476][ T808] usb 1-1: config 0 descriptor?? [ 556.466861][ T31] usb 4-1: device descriptor read/8, error -71 [ 556.703611][ T31] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 556.726737][ T31] usb 4-1: device descriptor read/8, error -71 [ 556.834055][ T31] usb usb4-port1: unable to enumerate USB device [ 556.867397][ T808] usbhid 1-1:0.0: can't add hid device: -71 [ 556.867538][ T808] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 556.879693][ T808] usb 1-1: USB disconnect, device number 27 [ 557.002787][T11896] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.2163' sets config #2 [ 559.314581][T11927] syzkaller0: entered promiscuous mode [ 559.314599][T11927] syzkaller0: entered allmulticast mode [ 561.062220][T11933] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2176'. [ 561.128444][ T8222] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 561.356941][ T8222] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 561.357053][ T8222] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 561.358051][ T8222] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 561.358069][ T8222] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 561.358165][ T8222] usb 1-1: Manufacturer: syz [ 561.361846][ T8222] usb 1-1: config 0 descriptor?? [ 561.578233][T11935] input: syz1 as /devices/virtual/input/input40 [ 561.680783][T11939] syz.5.2178 uses obsolete (PF_INET,SOCK_PACKET) [ 562.073763][ T8222] usbhid 1-1:0.0: can't add hid device: -71 [ 562.073850][ T8222] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 562.117011][ T8222] usb 1-1: USB disconnect, device number 28 [ 563.036476][T11958] syzkaller0: entered promiscuous mode [ 563.036510][T11958] syzkaller0: entered allmulticast mode [ 563.183915][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.183993][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.701411][T12023] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2208'. [ 565.701442][T12023] openvswitch: netlink: Flow actions attr not present in new flow. [ 566.840196][T12045] usb usb8: usbfs: interface 0 claimed by hub while 'syz.0.2217' sets config #2 [ 567.307167][T12056] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2220'. [ 567.307197][T12056] openvswitch: netlink: Flow actions attr not present in new flow. [ 569.692914][T12085] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2231'. [ 569.692953][T12085] netlink: 'syz.1.2231': attribute type 7 has an invalid length. [ 569.692967][T12085] netlink: 'syz.1.2231': attribute type 8 has an invalid length. [ 569.692980][T12085] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2231'. [ 577.672475][T12000] tipc: Enabled bearer , priority 0 [ 577.684071][T12003] syzkaller0: entered promiscuous mode [ 577.684100][T12003] syzkaller0: entered allmulticast mode [ 577.916925][T11994] tipc: Resetting bearer [ 577.935616][T12090] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.2233' sets config #2 [ 578.156664][T12097] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 578.178974][T12097] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 578.180679][T12097] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 578.207949][T12097] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 578.209787][T12097] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 578.220091][T11994] tipc: Disabling bearer [ 578.403948][T12092] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2233'. [ 579.196587][T12119] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.2243' sets config #2 [ 579.374659][T12123] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2244'. [ 579.374698][T12123] netlink: 'syz.1.2244': attribute type 7 has an invalid length. [ 579.374712][T12123] netlink: 'syz.1.2244': attribute type 8 has an invalid length. [ 579.374725][T12123] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2244'. [ 579.684038][T12094] chnl_net:caif_netlink_parms(): no params data found [ 580.079034][T12136] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.2247' sets config #2 [ 580.182165][T12136] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2247'. [ 580.182711][T12094] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.184198][T12094] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.184423][T12094] bridge_slave_0: entered allmulticast mode [ 580.195835][T12094] bridge_slave_0: entered promiscuous mode [ 580.213158][T12094] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.213371][T12094] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.213647][T12094] bridge_slave_1: entered allmulticast mode [ 580.222034][T12094] bridge_slave_1: entered promiscuous mode [ 580.226624][T12140] tipc: Enabled bearer , priority 0 [ 580.294843][ T5814] Bluetooth: hci4: command tx timeout [ 580.295922][T12140] syzkaller0: entered promiscuous mode [ 580.295944][T12140] syzkaller0: entered allmulticast mode [ 580.512897][T12140] tipc: Resetting bearer [ 580.672386][T12140] tipc: Disabling bearer [ 581.069067][T12094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 581.155539][T12168] usb usb8: usbfs: interface 0 claimed by hub while 'syz.0.2257' sets config #2 [ 581.461517][ T5803] syz_tun (unregistering): left promiscuous mode [ 581.938735][T12094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 581.977762][T12182] usb usb8: usbfs: interface 0 claimed by hub while 'syz.1.2260' sets config #2 [ 582.373875][ T5814] Bluetooth: hci4: command tx timeout [ 582.803687][ T5813] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 582.987594][ T5813] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 582.987631][ T5813] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 582.991670][ T5813] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 582.991700][ T5813] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 582.991719][ T5813] usb 2-1: Manufacturer: syz [ 583.002741][ T5813] usb 2-1: config 0 descriptor?? [ 583.067940][T10659] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.259917][T12094] team0: Port device team_slave_0 added [ 583.293593][ T808] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 583.353359][T12094] team0: Port device team_slave_1 added [ 583.435727][T12200] input: syz1 as /devices/virtual/input/input41 [ 583.464121][ T808] usb 6-1: Using ep0 maxpacket: 16 [ 583.470307][ T808] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 583.472377][ T808] usb 6-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 583.472466][ T808] usb 6-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 583.472497][ T808] usb 6-1: Manufacturer: syz [ 583.529361][T12216] usb usb8: usbfs: interface 0 claimed by hub while 'syz.0.2271' sets config #2 [ 583.577555][ T808] usb 6-1: config 0 descriptor?? [ 583.726659][ T5813] usbhid 2-1:0.0: can't add hid device: -71 [ 583.730825][ T5813] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 583.808772][ T5813] usb 2-1: USB disconnect, device number 48 [ 584.028529][ T808] input: syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:041E:3100.0009/input/input42 [ 584.088649][T10659] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.161535][T12094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 584.161554][T12094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 584.161583][T12094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 584.214032][T12094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 584.214050][T12094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 584.214079][T12094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 584.451127][ T808] creative-sb0540 0003:041E:3100.0009: input,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 584.453885][ T5814] Bluetooth: hci4: command tx timeout [ 584.950261][T12236] binder: 12230:12236 ioctl c0306201 0 returned -14 [ 584.951373][T10659] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.464435][T12094] hsr_slave_0: entered promiscuous mode [ 585.465764][T12094] hsr_slave_1: entered promiscuous mode [ 585.466675][T12094] debugfs: 'hsr0' already exists in 'hsr' [ 585.466700][T12094] Cannot create hsr debugfs directory [ 585.659256][T12245] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.2280' sets config #2 [ 585.714608][T10659] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.917731][ T5945] usb 6-1: USB disconnect, device number 13 [ 586.153662][T12254] tipc: Enabling of bearer rejected, failed to enable media [ 586.534711][ T5814] Bluetooth: hci4: command tx timeout [ 587.731342][T12275] binder: 12273:12275 ioctl c0306201 0 returned -14 [ 587.910304][T12287] usb usb8: usbfs: interface 0 claimed by hub while 'syz.0.2292' sets config #2 [ 587.983673][T10659] bridge_slave_1: left allmulticast mode [ 587.983705][T10659] bridge_slave_1: left promiscuous mode [ 587.983996][T10659] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.079698][T10659] bridge_slave_0: left allmulticast mode [ 588.079720][T10659] bridge_slave_0: left promiscuous mode [ 588.079905][T10659] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.826066][T10659] ip6gretap0 (unregistering): left promiscuous mode [ 589.454240][T10659] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 589.535811][T10659] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 589.606081][T10659] bond0 (unregistering): Released all slaves [ 589.685561][T12296] tipc: Enabling of bearer rejected, failed to enable media [ 590.503781][T10659] tipc: Left network mode [ 590.586785][T12094] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 590.651422][T12094] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 591.189019][T12094] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 591.313606][T10998] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 591.357207][T12094] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 591.463585][T10998] usb 6-1: Using ep0 maxpacket: 16 [ 591.466000][T10998] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 591.467140][T10998] usb 6-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 591.467163][T10998] usb 6-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 591.467175][T10998] usb 6-1: Manufacturer: syz [ 591.518528][T10998] usb 6-1: config 0 descriptor?? [ 591.989811][ T31] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 592.044159][T10998] input: syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:041E:3100.000A/input/input43 [ 592.136749][ T31] usb 2-1: config 0 has no interfaces? [ 592.140733][ T31] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 592.140765][ T31] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 592.140786][ T31] usb 2-1: Product: syz [ 592.140800][ T31] usb 2-1: Manufacturer: syz [ 592.140815][ T31] usb 2-1: SerialNumber: syz [ 592.219384][ T31] usb 2-1: config 0 descriptor?? [ 592.272208][T10998] creative-sb0540 0003:041E:3100.000A: input,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 592.366690][T10659] hsr_slave_0: left promiscuous mode [ 592.404664][T10659] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 592.404696][T10659] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 592.460756][ T808] usb 2-1: USB disconnect, device number 49 [ 592.468334][T10659] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 592.468361][T10659] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 592.675877][T10659] veth1_macvtap: left promiscuous mode [ 592.675996][T10659] veth0_macvtap: left promiscuous mode [ 594.053214][ T808] usb 6-1: USB disconnect, device number 14 [ 594.192615][T12373] usb usb8: usbfs: interface 0 claimed by hub while 'syz.5.2313' sets config #2 [ 594.981356][T12364] tipc: Enabling of bearer rejected, failed to enable media [ 594.981430][T12373] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2313'. [ 595.321927][T12094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 595.336965][T12094] 8021q: adding VLAN 0 to HW filter on device team0 [ 595.379122][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 595.379260][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 595.392929][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 595.393125][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 595.484799][ T8222] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 595.667948][ T8222] usb 1-1: Using ep0 maxpacket: 16 [ 595.678419][ T8222] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 595.678439][ T8222] usb 1-1: config 0 has no interfaces? [ 595.678457][ T8222] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 595.678471][ T8222] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.715522][ T8222] usb 1-1: config 0 descriptor?? [ 596.001123][T12097] Bluetooth: hci3: command 0x0406 tx timeout [ 596.187765][T10998] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 596.303230][ T5813] usb 1-1: USB disconnect, device number 29 [ 596.457276][T10998] usb 2-1: config 0 has no interfaces? [ 596.459148][T10998] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 596.459166][T10998] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 596.459178][T10998] usb 2-1: Product: syz [ 596.459186][T10998] usb 2-1: Manufacturer: syz [ 596.459194][T10998] usb 2-1: SerialNumber: syz [ 596.470628][T10998] usb 2-1: config 0 descriptor?? [ 596.751185][ T808] usb 2-1: USB disconnect, device number 50 [ 600.242156][T12408] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2322'. [ 600.242195][T12408] netlink: 'syz.1.2322': attribute type 7 has an invalid length. [ 600.242209][T12408] netlink: 'syz.1.2322': attribute type 8 has an invalid length. [ 600.242222][T12408] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2322'. [ 601.005354][T12094] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 601.280992][T12430] usb usb8: usbfs: interface 0 claimed by hub while 'syz.1.2328' sets config #2 [ 601.281755][T12430] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2328'. [ 602.292031][ T5789] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 602.412013][T12094] veth0_vlan: entered promiscuous mode [ 602.435380][T12094] veth1_vlan: entered promiscuous mode [ 602.470687][ T5789] usb 3-1: Using ep0 maxpacket: 16 [ 602.474030][ T5789] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 602.474055][ T5789] usb 3-1: config 0 has no interfaces? [ 602.474084][ T5789] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 602.474104][ T5789] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.480714][ T5789] usb 3-1: config 0 descriptor?? [ 602.544239][T12094] veth0_macvtap: entered promiscuous mode [ 602.547445][T12094] veth1_macvtap: entered promiscuous mode [ 602.561824][T12094] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 602.576085][T12094] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 602.583207][ T1015] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.589036][ T1015] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.598278][ T1015] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.600008][ T1015] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.754156][T12457] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2336'. [ 602.754183][T12457] netlink: 'syz.0.2336': attribute type 7 has an invalid length. [ 602.754191][T12457] netlink: 'syz.0.2336': attribute type 8 has an invalid length. [ 602.754198][T12457] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2336'. [ 602.808842][ T5944] usb 3-1: USB disconnect, device number 14 [ 603.719520][T12457] syz_tun: entered promiscuous mode [ 603.768722][T12457] syz_tun: left promiscuous mode [ 604.062274][T12475] hub 1-0:1.0: USB hub found [ 604.076378][T12475] hub 1-0:1.0: 1 port detected [ 604.416267][ T2399] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 604.416290][ T2399] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 604.536127][ T1354] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 604.536143][ T1354] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 605.366732][ T5945] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 605.465055][T12513] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2232'. [ 605.523543][ T5945] usb 2-1: Using ep0 maxpacket: 16 [ 605.525664][ T5945] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 605.525680][ T5945] usb 2-1: config 0 has no interfaces? [ 605.525699][ T5945] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 605.525712][ T5945] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.529048][ T5945] usb 2-1: config 0 descriptor?? [ 605.766501][T10998] usb 2-1: USB disconnect, device number 51 [ 605.970064][T12518] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2352'. [ 605.970091][T12518] netlink: 'syz.0.2352': attribute type 7 has an invalid length. [ 605.970099][T12518] netlink: 'syz.0.2352': attribute type 8 has an invalid length. [ 605.970105][T12518] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2352'. [ 606.020774][T12518] syz_tun: entered promiscuous mode [ 606.056476][T12518] syz_tun: left promiscuous mode [ 607.185907][T12097] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 607.209560][T12097] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 607.227347][T12097] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 607.228339][T12097] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 607.228971][T12097] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 608.633570][ T31] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 609.054670][ T31] usb 6-1: Using ep0 maxpacket: 16 [ 609.180568][ T31] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 609.200731][ T31] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 609.200766][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.200787][ T31] usb 6-1: Product: syz [ 609.200802][ T31] usb 6-1: Manufacturer: syz [ 609.200817][ T31] usb 6-1: SerialNumber: syz [ 609.265083][ T5814] Bluetooth: hci1: command tx timeout [ 609.356220][ T31] usb 6-1: config 0 descriptor?? [ 609.561160][T12534] chnl_net:caif_netlink_parms(): no params data found [ 611.333659][ T5814] Bluetooth: hci1: command tx timeout [ 611.452874][ T5813] usb 6-1: USB disconnect, device number 15 [ 611.632210][T12534] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.634528][T12534] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.634864][T12534] bridge_slave_0: entered allmulticast mode [ 611.705974][T12534] bridge_slave_0: entered promiscuous mode [ 612.314006][T12606] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2373'. [ 612.338822][ T5801] syz_tun (unregistering): left promiscuous mode [ 612.433977][T12534] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.435204][T12534] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.435377][T12534] bridge_slave_1: entered allmulticast mode [ 612.437044][T12534] bridge_slave_1: entered promiscuous mode [ 613.359487][T12534] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 613.413827][ T5814] Bluetooth: hci1: command tx timeout [ 613.660649][T10659] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.767735][T12534] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 614.147056][T12644] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2387'. [ 614.147085][T12644] netlink: 'syz.0.2387': attribute type 7 has an invalid length. [ 614.147093][T12644] netlink: 'syz.0.2387': attribute type 8 has an invalid length. [ 614.147099][T12644] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2387'. [ 614.977180][T10659] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.642020][ T5814] Bluetooth: hci1: command tx timeout [ 617.843110][T12534] team0: Port device team_slave_0 added [ 617.852086][T12644] syz_tun: entered promiscuous mode [ 617.906439][T12644] syz_tun: left promiscuous mode [ 618.139525][T12534] team0: Port device team_slave_1 added [ 618.525806][T10659] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.050108][T10659] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.186073][T12703] binder: 12692:12703 ioctl c0306201 0 returned -14 [ 619.258438][T12705] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2404'. [ 619.258477][T12705] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2404'. [ 619.288147][T12534] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 619.288167][T12534] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 619.288195][T12534] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 619.351775][T12705] ip6gretap0: entered promiscuous mode [ 619.353369][T12705] syz_tun: entered promiscuous mode [ 619.416013][T12534] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 619.416032][T12534] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 619.416060][T12534] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 619.849982][T12534] hsr_slave_0: entered promiscuous mode [ 619.851402][T12534] hsr_slave_1: entered promiscuous mode [ 619.852385][T12534] debugfs: 'hsr0' already exists in 'hsr' [ 619.852410][T12534] Cannot create hsr debugfs directory [ 621.782616][T10659] bridge_slave_1: left allmulticast mode [ 621.782640][T10659] bridge_slave_1: left promiscuous mode [ 621.782804][T10659] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.912006][T10659] bridge_slave_0: left allmulticast mode [ 621.912028][T10659] bridge_slave_0: left promiscuous mode [ 621.912207][T10659] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.825290][T10659] ip6gretap0 (unregistering): left promiscuous mode [ 623.023746][T10659] gretap0 (unregistering): left promiscuous mode [ 623.204267][T10659] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 623.255768][T10659] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 623.297288][T10659] bond0 (unregistering): Released all slaves [ 623.336279][T12746] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2415'. [ 623.532181][T10659] tipc: Left network mode [ 624.499035][ T5789] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 624.637067][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.637115][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.653560][ T5789] usb 7-1: Using ep0 maxpacket: 16 [ 624.656166][ T5789] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 624.658970][ T5789] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 624.658999][ T5789] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.659019][ T5789] usb 7-1: Product: syz [ 624.659031][ T5789] usb 7-1: Manufacturer: syz [ 624.659045][ T5789] usb 7-1: SerialNumber: syz [ 624.695177][ T5789] usb 7-1: config 0 descriptor?? [ 624.719264][ T5789] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 624.719288][ T5789] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 625.376150][ T5789] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 625.797942][ T5789] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 625.797963][ T5789] em28xx 7-1:0.0: board has no eeprom [ 626.890718][T12772] em28xx 7-1:0.0: reading from i2c device at 0xfffe failed (error=-5) [ 626.923633][ T5789] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 626.923666][ T5789] em28xx 7-1:0.0: dvb set to bulk mode. [ 626.937869][ T5944] em28xx 7-1:0.0: Binding DVB extension [ 626.965854][ T5789] usb 7-1: USB disconnect, device number 2 [ 626.968538][ T5789] em28xx 7-1:0.0: Disconnecting em28xx [ 627.297093][ T5944] em28xx 7-1:0.0: Registering input extension [ 627.309029][ T5789] em28xx 7-1:0.0: Closing input extension [ 627.360992][ T5789] em28xx 7-1:0.0: Freeing device [ 627.700037][T10659] hsr_slave_0: left promiscuous mode [ 627.761747][T10659] hsr_slave_1: left promiscuous mode [ 627.762424][T10659] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 627.762440][T10659] batadv0: mtu less than device minimum [ 627.810138][T10659] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 627.834020][T10659] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 627.838676][T10659] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 627.843300][T10659] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 627.941344][T10659] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 627.968672][T10659] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 628.001282][T10659] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 628.030987][T10659] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 628.076972][T10659] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 628.297779][T10659] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 628.349269][T10659] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 629.106348][T10659] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 629.144329][T10659] batman_adv: batadv0: Interface deactivated: dummy0 [ 629.144350][T10659] batman_adv: batadv0: Removing interface: dummy0 [ 629.214774][T10659] veth1_macvtap: left promiscuous mode [ 629.214843][T10659] veth0_macvtap: left promiscuous mode [ 629.214998][T10659] veth1_vlan: left promiscuous mode [ 629.215103][T10659] veth0_vlan: left promiscuous mode [ 629.553682][ T808] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 629.693513][ T808] usb 6-1: device descriptor read/64, error -71 [ 629.943613][ T808] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 630.073514][ T808] usb 6-1: device descriptor read/64, error -71 [ 630.184232][ T808] usb usb6-port1: attempt power cycle [ 630.564252][ T808] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 630.588094][ T808] usb 6-1: device descriptor read/8, error -71 [ 630.823534][ T808] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 630.844667][ T808] usb 6-1: device descriptor read/8, error -71 [ 630.966834][ T808] usb usb6-port1: unable to enumerate USB device [ 632.244765][T12534] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 632.387576][T12534] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 632.477824][T12534] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 632.563105][T12534] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 633.985483][T12534] 8021q: adding VLAN 0 to HW filter on device bond0 [ 634.047950][T12534] 8021q: adding VLAN 0 to HW filter on device team0 [ 634.500136][ T2399] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.500381][ T2399] bridge0: port 1(bridge_slave_0) entered forwarding state [ 634.512673][ T2399] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.512880][ T2399] bridge0: port 2(bridge_slave_1) entered forwarding state [ 635.318018][T12897] binder: 12894:12897 ioctl c0306201 0 returned -14 [ 635.950524][T12534] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 636.403594][ T5944] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 636.533775][ T5944] usb 7-1: device descriptor read/64, error -71 [ 636.774580][ T5944] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 636.859520][T12534] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 636.933907][ T5944] usb 7-1: device descriptor read/64, error -71 [ 637.033608][ T5885] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 637.044133][ T5944] usb usb7-port1: attempt power cycle [ 637.201863][ T5885] usb 1-1: unable to get BOS descriptor or descriptor too short [ 637.240307][ T5885] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 637.240342][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.240362][ T5885] usb 1-1: Product: syz [ 637.240377][ T5885] usb 1-1: Manufacturer: syz [ 637.240391][ T5885] usb 1-1: SerialNumber: syz [ 637.317349][T12534] veth0_vlan: entered promiscuous mode [ 637.393567][ T5944] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 637.416322][ T5944] usb 7-1: device descriptor read/8, error -71 [ 637.490952][T12934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 637.492893][T12934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 637.554548][T12534] veth1_vlan: entered promiscuous mode [ 637.654950][ T5944] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 637.674354][ T5944] usb 7-1: device descriptor read/8, error -71 [ 637.787372][ T5944] usb usb7-port1: unable to enumerate USB device [ 638.284406][T12534] veth0_macvtap: entered promiscuous mode [ 638.308443][ T5885] usb 1-1: 1:1: cannot set freq 48000 to ep 0x1 [ 638.312311][T12534] veth1_macvtap: entered promiscuous mode [ 638.468454][T12534] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 638.509971][T12534] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 638.628982][ T57] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.630680][ T57] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.640490][ T57] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.645753][ T57] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.786155][ T5885] usb 1-1: USB disconnect, device number 30 [ 639.103741][T12210] udevd[12210]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 639.359322][ T3628] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 639.359348][ T3628] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 639.571857][ T1015] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 639.571881][ T1015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 640.228168][T10998] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 640.445782][T10998] usb 3-1: Using ep0 maxpacket: 16 [ 640.448446][T10998] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 640.449960][T10998] usb 3-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 640.449988][T10998] usb 3-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 640.450009][T10998] usb 3-1: Manufacturer: syz [ 640.491879][T10998] usb 3-1: config 0 descriptor?? [ 640.957109][T10998] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:041E:3100.000B/input/input45 [ 641.059304][T10998] creative-sb0540 0003:041E:3100.000B: input,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 641.126034][T10998] usb 3-1: USB disconnect, device number 15 [ 641.184106][ T5944] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 641.369205][ T5944] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 641.369237][ T5944] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 641.369277][ T5944] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 641.369300][ T5944] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.491384][T13002] fido_id[13002]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 641.688072][ T5813] usb 2-1: USB disconnect, device number 52 [ 641.883591][ T5944] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 642.046745][ T5944] usb 1-1: unable to get BOS descriptor or descriptor too short [ 642.107789][ T5944] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 642.107812][ T5944] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.107824][ T5944] usb 1-1: Product: syz [ 642.107832][ T5944] usb 1-1: Manufacturer: syz [ 642.107840][ T5944] usb 1-1: SerialNumber: syz [ 642.390900][T13007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 642.404422][T13007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 642.520339][T13015] usb usb8: usbfs: interface 0 claimed by hub while 'syz.5.2478' sets config #2 [ 643.455355][T13007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 643.456051][T13007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 643.820584][ T5944] usb 1-1: USB disconnect, device number 31 [ 644.050392][T12210] udevd[12210]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 645.146286][T13070] usb usb8: usbfs: interface 0 claimed by hub while 'syz.0.2492' sets config #2 [ 645.153618][ T5945] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 645.312917][ T5945] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 645.312937][ T5945] usb 6-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 645.312959][ T5945] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 645.312973][ T5945] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.684056][ T31] usb 6-1: USB disconnect, device number 20 [ 646.303633][ T5944] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 646.477002][ T5944] usb 1-1: unable to get BOS descriptor or descriptor too short [ 646.482771][ T5944] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 646.482794][ T5944] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.482805][ T5944] usb 1-1: Product: syz [ 646.482813][ T5944] usb 1-1: Manufacturer: syz [ 646.482821][ T5944] usb 1-1: SerialNumber: syz [ 646.766569][T13090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 646.772657][T13090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 647.923886][T13090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 647.943882][T13090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 648.172243][ T5945] usb 1-1: USB disconnect, device number 32 [ 648.419154][T12210] udevd[12210]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 649.683599][ T5945] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 649.849876][ T5945] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 649.849904][ T5945] usb 7-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 649.849927][ T5945] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 649.849941][ T5945] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.200992][ T5945] usb 7-1: USB disconnect, device number 7 [ 650.393535][T10998] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 650.546674][T10998] usb 2-1: unable to get BOS descriptor or descriptor too short [ 650.550293][T10998] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 650.550314][T10998] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.550325][T10998] usb 2-1: Product: syz [ 650.550333][T10998] usb 2-1: Manufacturer: syz [ 650.550341][T10998] usb 2-1: SerialNumber: syz [ 650.607419][ T808] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 650.822832][T13144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 650.832501][T13144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 650.987954][T13159] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 651.174501][ T808] usb 1-1: unable to get BOS descriptor or descriptor too short [ 651.175560][ T808] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 651.175598][ T808] usb 1-1: can't read configurations, error -71 [ 651.891237][T13144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 651.891816][T13144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 652.126872][ T5885] usb 2-1: USB disconnect, device number 53 [ 652.337736][T12210] udevd[12210]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 653.613548][ T5813] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 653.733684][ T5885] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 653.785490][ T5813] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 653.785521][ T5813] usb 6-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 653.785553][ T5813] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 653.785568][ T5813] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.927262][ T5885] usb 1-1: unable to get BOS descriptor or descriptor too short [ 653.928335][ T5885] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 653.928375][ T5885] usb 1-1: can't read configurations, error -71 [ 654.104190][ T5945] usb 6-1: USB disconnect, device number 21 [ 654.214480][ T5813] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 654.381982][ T5813] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 654.382051][ T5813] usb 3-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 654.382072][ T5813] usb 3-1: config 0 interface 0 has no altsetting 0 [ 654.413502][ T5813] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 654.413536][ T5813] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 654.413556][ T5813] usb 3-1: Product: syz [ 654.413571][ T5813] usb 3-1: Manufacturer: syz [ 654.413585][ T5813] usb 3-1: SerialNumber: syz [ 654.447554][ T5813] usb 3-1: config 0 descriptor?? [ 654.457586][ T5813] hub 3-1:0.0: bad descriptor, ignoring hub [ 654.457626][ T5813] hub 3-1:0.0: probe with driver hub failed with error -5 [ 654.626499][ T5813] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 654.674743][ T5813] usb 3-1: USB disconnect, device number 16 [ 654.695759][T12202] udevd[12202]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 655.303535][ T5885] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 655.466139][ T5885] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 655.466203][ T5885] usb 6-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 655.466232][ T5885] usb 6-1: config 0 interface 0 has no altsetting 0 [ 655.469390][ T5885] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 655.469419][ T5885] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 655.469441][ T5885] usb 6-1: Product: syz [ 655.469454][ T5885] usb 6-1: Manufacturer: syz [ 655.469468][ T5885] usb 6-1: SerialNumber: syz [ 655.535592][ T5885] usb 6-1: config 0 descriptor?? [ 655.565756][ T5885] hub 6-1:0.0: bad descriptor, ignoring hub [ 655.565820][ T5885] hub 6-1:0.0: probe with driver hub failed with error -5 [ 655.694863][ T5885] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 655.777795][T12202] udevd[12202]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 655.803596][ T10] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 656.113277][ T5885] usb 6-1: USB disconnect, device number 22 [ 656.250911][ T10] usb 7-1: unable to get BOS descriptor or descriptor too short [ 656.251983][ T10] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 656.252022][ T10] usb 7-1: can't read configurations, error -71 [ 656.723685][ T5945] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 656.833709][T10998] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 656.873501][ T5945] usb 3-1: Using ep0 maxpacket: 16 [ 656.875558][ T5945] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 656.876775][ T5945] usb 3-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 656.876794][ T5945] usb 3-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 656.876809][ T5945] usb 3-1: Manufacturer: syz [ 656.883216][ T5945] usb 3-1: config 0 descriptor?? [ 656.985644][T10998] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 656.985806][T10998] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 656.985823][T10998] usb 1-1: config 0 interface 0 has no altsetting 0 [ 657.022417][T10998] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 657.022627][T10998] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 657.022641][T10998] usb 1-1: Product: syz [ 657.022650][T10998] usb 1-1: Manufacturer: syz [ 657.022658][T10998] usb 1-1: SerialNumber: syz [ 657.112235][T10998] usb 1-1: config 0 descriptor?? [ 657.163102][T10998] hub 1-1:0.0: bad descriptor, ignoring hub [ 657.163215][T10998] hub 1-1:0.0: probe with driver hub failed with error -5 [ 657.243980][T10998] usb 1-1: selecting invalid altsetting 0 [ 657.401640][ T5945] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:041E:3100.000C/input/input46 [ 657.546450][ T5945] creative-sb0540 0003:041E:3100.000C: input,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 657.616028][ T5945] usb 3-1: USB disconnect, device number 17 [ 657.826874][T10998] usb 1-1: USB disconnect, device number 37 [ 657.991752][T12969] udevd[12969]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 658.068369][T13265] fido_id[13265]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 658.384656][ T5945] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 658.513761][T10998] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 658.536471][ T5945] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 658.536533][ T5945] usb 7-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 658.536556][ T5945] usb 7-1: config 0 interface 0 has no altsetting 0 [ 658.539885][ T5945] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 658.539912][ T5945] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 658.539934][ T5945] usb 7-1: Product: syz [ 658.539948][ T5945] usb 7-1: Manufacturer: syz [ 658.539960][ T5945] usb 7-1: SerialNumber: syz [ 658.575727][ T5945] usb 7-1: config 0 descriptor?? [ 658.600462][ T5945] hub 7-1:0.0: bad descriptor, ignoring hub [ 658.600501][ T5945] hub 7-1:0.0: probe with driver hub failed with error -5 [ 658.706918][T10998] usb 2-1: unable to get BOS descriptor or descriptor too short [ 658.709559][T10998] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 658.709599][T10998] usb 2-1: can't read configurations, error -71 [ 658.944259][ T5945] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 658.978302][ T5945] usb 7-1: USB disconnect, device number 10 [ 659.010150][T12202] udevd[12202]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 659.563552][ T808] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 659.907884][ T808] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 659.907949][ T808] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 659.907975][ T808] usb 1-1: config 0 interface 0 has no altsetting 0 [ 659.940642][ T808] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 659.940675][ T808] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 659.940697][ T808] usb 1-1: Product: syz [ 659.940712][ T808] usb 1-1: Manufacturer: syz [ 659.940726][ T808] usb 1-1: SerialNumber: syz [ 660.008367][ T808] usb 1-1: config 0 descriptor?? [ 660.020409][ T808] hub 1-1:0.0: bad descriptor, ignoring hub [ 660.020451][ T808] hub 1-1:0.0: probe with driver hub failed with error -5 [ 660.046422][ T808] usb 1-1: selecting invalid altsetting 0 [ 660.245447][ T808] usb 1-1: USB disconnect, device number 38 [ 660.406006][T12153] udevd[12153]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 661.317621][ T808] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 661.487909][ T808] usb 7-1: unable to get BOS descriptor or descriptor too short [ 661.493225][ T808] usb 7-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 661.493247][ T808] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.493259][ T808] usb 7-1: Product: syz [ 661.493267][ T808] usb 7-1: Manufacturer: syz [ 661.493276][ T808] usb 7-1: SerialNumber: syz [ 661.797682][T13322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 661.821099][T13322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 661.913608][ T5945] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 662.127082][ T5945] usb 6-1: unable to get BOS descriptor or descriptor too short [ 662.128165][ T5945] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 662.128205][ T5945] usb 6-1: can't read configurations, error -71 [ 662.233893][ T5885] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 662.476556][ T5885] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 662.478762][ T5885] usb 1-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 662.478991][ T5885] usb 1-1: config 0 interface 0 has no altsetting 0 [ 662.534509][ T5885] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 662.534544][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 662.534565][ T5885] usb 1-1: Product: syz [ 662.534580][ T5885] usb 1-1: Manufacturer: syz [ 662.534594][ T5885] usb 1-1: SerialNumber: syz [ 663.242633][T13322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 663.538673][T13322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 663.921555][ T5885] usb 1-1: config 0 descriptor?? [ 664.613324][ T5885] hub 1-1:0.0: bad descriptor, ignoring hub [ 664.613754][ T5885] hub 1-1:0.0: probe with driver hub failed with error -5 [ 666.626900][ T808] usb 7-1: 1:1: cannot get freq at ep 0x1 [ 666.764447][ T5885] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 666.857026][ T5885] usb 1-1: USB disconnect, device number 39 [ 667.036865][T12087] udevd[12087]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 667.103652][ T5945] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 667.136213][ T808] usb 7-1: USB disconnect, device number 11 [ 667.214987][T13360] input: syz1 as /devices/virtual/input/input47 [ 667.274105][ T5945] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 667.274144][ T5945] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 667.274158][ T5945] usb 6-1: config 0 interface 0 has no altsetting 0 [ 667.277293][ T5945] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 667.277312][ T5945] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 667.277324][ T5945] usb 6-1: Product: syz [ 667.277332][ T5945] usb 6-1: Manufacturer: syz [ 667.277341][ T5945] usb 6-1: SerialNumber: syz [ 667.368189][ T5945] usb 6-1: config 0 descriptor?? [ 667.381811][ T5945] hub 6-1:0.0: bad descriptor, ignoring hub [ 667.381837][ T5945] hub 6-1:0.0: probe with driver hub failed with error -5 [ 667.401828][ T5945] usb 6-1: selecting invalid altsetting 0 [ 667.438173][T12153] udevd[12153]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 667.900996][ T5945] usb 6-1: USB disconnect, device number 25 [ 668.064129][T12153] udevd[12153]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 669.233539][T10998] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 669.709688][T10998] usb 1-1: unable to get BOS descriptor or descriptor too short [ 669.710561][T10998] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 669.710584][T10998] usb 1-1: can't read configurations, error -71 [ 670.153530][ T31] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 670.336325][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 670.340279][ T31] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 670.340305][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.340317][ T31] usb 2-1: Product: syz [ 670.340325][ T31] usb 2-1: Manufacturer: syz [ 670.340333][ T31] usb 2-1: SerialNumber: syz [ 670.393563][ T5944] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 670.559897][ T5944] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 670.559958][ T5944] usb 3-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 670.559974][ T5944] usb 3-1: config 0 interface 0 has no altsetting 0 [ 670.607807][ T5944] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 670.607841][ T5944] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 670.607863][ T5944] usb 3-1: Product: syz [ 670.607877][ T5944] usb 3-1: Manufacturer: syz [ 670.607891][ T5944] usb 3-1: SerialNumber: syz [ 670.646703][T13389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 670.672206][T13389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 670.688400][ T5944] usb 3-1: config 0 descriptor?? [ 670.728845][ T5944] hub 3-1:0.0: bad descriptor, ignoring hub [ 670.728889][ T5944] hub 3-1:0.0: probe with driver hub failed with error -5 [ 670.857821][ T5944] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 671.028888][T13403] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 671.120045][ T808] usb 3-1: USB disconnect, device number 18 [ 671.167192][T12087] udevd[12087]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 671.392279][T13406] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2611'. [ 671.392319][T13406] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2611'. [ 671.439701][T13406] ip6gretap0: entered promiscuous mode [ 671.454166][T13406] syz_tun: entered promiscuous mode [ 671.457101][T13406] debugfs: 'hsr1' already exists in 'hsr' [ 671.541337][T13406] Cannot create hsr debugfs directory [ 671.725262][T13389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 671.725773][T13389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 672.024114][ T31] usb 2-1: USB disconnect, device number 56 [ 672.482405][T12153] udevd[12153]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 672.989074][T13428] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2619'. [ 673.014832][ T10] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 673.021422][T13429] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 673.167566][ T10] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 673.167607][ T10] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 673.167623][ T10] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 673.167657][ T10] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 673.167670][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.237620][T13428] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2619'. [ 673.242620][T13428] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.244604][ T10] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 673.274452][ T10] usb 6-1: invalid MIDI out EP 0 [ 673.569619][T12210] udevd[12210]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 673.604167][ T10] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 673.626612][ T10] usb 6-1: USB disconnect, device number 26 [ 675.043598][T10998] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 675.195807][T10998] usb 3-1: unable to get BOS descriptor or descriptor too short [ 675.198968][T10998] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 675.198988][T10998] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.198999][T10998] usb 3-1: Product: syz [ 675.199007][T10998] usb 3-1: Manufacturer: syz [ 675.199015][T10998] usb 3-1: SerialNumber: syz [ 675.489997][T13455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 675.490633][T13455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 680.568049][T10998] usb 3-1: 1:1: cannot get freq at ep 0x1 [ 681.014137][T10998] usb 3-1: USB disconnect, device number 19 [ 681.295698][T13493] input: syz1 as /devices/virtual/input/input48 [ 681.334743][T13495] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2646'. [ 681.334783][T13495] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2646'. [ 681.363515][ T808] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 681.366792][T12969] udevd[12969]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 681.432838][T13495] ip6gretap0: entered promiscuous mode [ 681.473792][T13495] syz_tun: entered promiscuous mode [ 681.486685][T13495] debugfs: 'hsr1' already exists in 'hsr' [ 681.486714][T13495] Cannot create hsr debugfs directory [ 681.525069][ T808] usb 1-1: Using ep0 maxpacket: 32 [ 681.787455][ T808] usb 1-1: unable to get BOS descriptor or descriptor too short [ 681.789568][ T808] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 681.789622][ T808] usb 1-1: can't read configurations, error -71 [ 682.369851][T13514] binder: 13512:13514 ioctl c0306201 0 returned -14 [ 686.059945][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.060026][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.805284][ T5934] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 686.969247][ T5934] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 686.969311][ T5934] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 686.969338][ T5934] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 686.969381][ T5934] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 686.969405][ T5934] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.085106][ T5934] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 687.085727][ T5934] usb 1-1: invalid MIDI out EP 0 [ 691.278737][ T5934] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 691.316712][T13583] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 691.331090][ T5934] usb 1-1: USB disconnect, device number 44 [ 691.871309][T13604] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 692.365713][T13622] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2688'. [ 692.365739][T13622] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2688'. [ 694.863544][ T5945] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 695.095600][ T5945] usb 1-1: unable to get BOS descriptor or descriptor too short [ 695.096736][ T5945] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 695.096772][ T5945] usb 1-1: can't read configurations, error -71 [ 695.525451][T13654] binder: 13649:13654 ioctl c0306201 0 returned -14 [ 696.189149][T13662] netlink: 'syz.5.2697': attribute type 3 has an invalid length. [ 698.163537][ T808] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 698.369448][ T808] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 698.369509][ T808] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 698.369537][ T808] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 698.369580][ T808] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 698.369604][ T808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.393264][ T808] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 698.394241][ T808] usb 3-1: invalid MIDI out EP 0 [ 698.930711][ T808] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 698.988966][ T808] usb 3-1: USB disconnect, device number 20 [ 699.830303][T13718] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 699.848675][T13719] netlink: 'syz.0.2719': attribute type 3 has an invalid length. [ 700.643532][ T808] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 700.803508][ T808] usb 7-1: Using ep0 maxpacket: 16 [ 700.805288][ T808] usb 7-1: config 0 has an invalid interface number: 132 but max is 0 [ 700.805317][ T808] usb 7-1: config 0 has no interface number 0 [ 700.844657][ T808] usb 7-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 700.844688][ T808] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.844700][ T808] usb 7-1: Product: syz [ 700.844708][ T808] usb 7-1: Manufacturer: syz [ 700.844716][ T808] usb 7-1: SerialNumber: syz [ 700.866559][ T808] usb 7-1: config 0 descriptor?? [ 700.912077][ T808] hub 7-1:0.132: bad descriptor, ignoring hub [ 700.912117][ T808] hub 7-1:0.132: probe with driver hub failed with error -5 [ 700.961171][ T808] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.132/input/input49 [ 702.843547][ T5945] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 703.001050][ T5945] usb 6-1: Using ep0 maxpacket: 16 [ 703.002985][ T5945] usb 6-1: config 0 has no interfaces? [ 703.003009][ T5945] usb 6-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 703.003024][ T5945] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.043167][ T5945] usb 6-1: config 0 descriptor?? [ 703.492536][ T10] usb 6-1: USB disconnect, device number 27 [ 703.494559][T12097] Bluetooth: hci4: command 0x0406 tx timeout [ 704.161545][T13787] netlink: 766 bytes leftover after parsing attributes in process `syz.1.2742'. [ 704.377855][ T5154] usb 7-1: reset high-speed USB device number 12 using dummy_hcd [ 704.423936][ T5154] usb 7-1: device reset changed ep0 maxpacket size! [ 704.466891][T10998] usb 7-1: USB disconnect, device number 12 [ 704.895142][T10998] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 705.585100][T10998] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 705.585131][T10998] usb 7-1: config 0 has no interfaces? [ 705.585157][T10998] usb 7-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 705.585171][T10998] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.604075][T10998] usb 7-1: config 0 descriptor?? [ 706.370459][T13813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2748'. [ 706.370533][T13813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2748'. [ 706.370585][T13813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2748'. [ 706.370634][T13813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2748'. [ 706.370685][T13813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2748'. [ 706.370734][T13813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2748'. [ 706.370784][T13813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2748'. [ 706.370853][T13813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2748'. [ 706.370904][T13813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2748'. [ 707.064594][ T31] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 707.236190][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 707.238128][ T31] usb 2-1: config 0 has an invalid interface number: 122 but max is 0 [ 707.238157][ T31] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 707.238177][ T31] usb 2-1: config 0 has no interface number 0 [ 707.238223][ T31] usb 2-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 707.238239][ T31] usb 2-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 707.238253][ T31] usb 2-1: config 0 interface 122 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1023 [ 707.238266][ T31] usb 2-1: config 0 interface 122 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 707.238279][ T31] usb 2-1: config 0 interface 122 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 707.238291][ T31] usb 2-1: config 0 interface 122 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 8 [ 707.240651][ T31] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 707.240677][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.240695][ T31] usb 2-1: Product: syz [ 707.240704][ T31] usb 2-1: Manufacturer: syz [ 707.240711][ T31] usb 2-1: SerialNumber: syz [ 707.447482][ T31] usb 2-1: config 0 descriptor?? [ 707.449307][T13818] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 707.449442][T13818] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 707.463534][T10998] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 707.659311][T10998] usb 1-1: Using ep0 maxpacket: 16 [ 707.660964][T10998] usb 1-1: config 0 has no interfaces? [ 707.660987][T10998] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 707.661001][T10998] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.665842][T10998] usb 1-1: config 0 descriptor?? [ 707.716246][ T31] usb 2-1: NFC: intf ffff88803a7f7000 id ffffffff8e755020 [ 707.913766][T10998] usb 1-1: USB disconnect, device number 47 [ 707.947305][ T31] nfcmrvl 2-1:0.122: NFC: registered with nci successfully [ 708.030723][ T31] usb 2-1: USB disconnect, device number 57 [ 708.060931][ T31] usb 2-1: NFC: intf ffff88803a7f7000 [ 708.193650][ T10] usb 7-1: USB disconnect, device number 13 [ 708.782019][ T37] kauditd_printk_skb: 107 callbacks suppressed [ 708.782043][ T37] audit: type=1326 audit(1773474248.942:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13831 comm="syz.6.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa60ff0c799 code=0x7ffc0000 [ 708.782091][ T37] audit: type=1326 audit(1773474248.942:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13831 comm="syz.6.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa60ff0c799 code=0x7ffc0000 [ 708.782138][ T37] audit: type=1326 audit(1773474248.942:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13831 comm="syz.6.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fa60ff0c799 code=0x7ffc0000 [ 708.782183][ T37] audit: type=1326 audit(1773474248.942:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13831 comm="syz.6.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa60ff0c799 code=0x7ffc0000 [ 708.782227][ T37] audit: type=1326 audit(1773474248.942:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13831 comm="syz.6.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa60ff0c799 code=0x7ffc0000 [ 708.782272][ T37] audit: type=1326 audit(1773474248.942:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13831 comm="syz.6.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fa60ff0c799 code=0x7ffc0000 [ 708.782318][ T37] audit: type=1326 audit(1773474248.942:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13831 comm="syz.6.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa60ff0c799 code=0x7ffc0000 [ 708.782363][ T37] audit: type=1326 audit(1773474248.942:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13831 comm="syz.6.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa60ff0c799 code=0x7ffc0000 [ 708.782409][ T37] audit: type=1326 audit(1773474248.942:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13831 comm="syz.6.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa60ff0c799 code=0x7ffc0000 [ 708.782454][ T37] audit: type=1326 audit(1773474248.952:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13831 comm="syz.6.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa60ff0c799 code=0x7ffc0000 [ 709.915135][T10998] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 709.983621][ T31] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 710.063551][T10998] usb 2-1: Using ep0 maxpacket: 16 [ 710.068958][T10998] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 710.072549][T10998] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 710.072582][T10998] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.072602][T10998] usb 2-1: Product: syz [ 710.072615][T10998] usb 2-1: Manufacturer: syz [ 710.072629][T10998] usb 2-1: SerialNumber: syz [ 710.079135][T10998] usb 2-1: config 0 descriptor?? [ 710.089336][T10998] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 710.089379][T10998] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 710.143588][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 710.154067][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 710.154102][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 710.154159][ T31] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 710.154182][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.160170][ T31] usb 1-1: config 0 descriptor?? [ 710.714908][T10998] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 710.764476][ T31] savu 0003:1E7D:2D5A.000D: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 710.963325][ T10] usb 1-1: USB disconnect, device number 48 [ 711.140677][T10998] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 711.140700][T10998] em28xx 2-1:0.0: board has no eeprom [ 711.203578][T10998] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 711.203612][T10998] em28xx 2-1:0.0: dvb set to bulk mode. [ 711.208009][ T5945] em28xx 2-1:0.0: Binding DVB extension [ 711.259964][T10998] usb 2-1: USB disconnect, device number 58 [ 711.271311][T10998] em28xx 2-1:0.0: Disconnecting em28xx [ 711.515629][ T5945] em28xx 2-1:0.0: Registering input extension [ 711.523640][T10998] em28xx 2-1:0.0: Closing input extension [ 711.543805][T10998] em28xx 2-1:0.0: Freeing device [ 712.013528][ T5885] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 712.211677][T13863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 712.223698][T13863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 712.231807][ T5885] usb 7-1: unable to get BOS descriptor or descriptor too short [ 712.233066][ T5885] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 712.233105][ T5885] usb 7-1: can't read configurations, error -71 [ 712.284008][ T10] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 712.444133][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 712.502052][ T10] usb 6-1: config 0 has no interfaces? [ 712.502079][ T10] usb 6-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 712.502092][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.516383][ T10] usb 6-1: config 0 descriptor?? [ 712.737054][ T5934] usb 6-1: USB disconnect, device number 28 [ 712.744380][T13878] __nla_validate_parse: 44 callbacks suppressed [ 712.744400][T13878] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2771'. [ 712.744774][T13878] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.866360][T13878] bridge_slave_0: left allmulticast mode [ 712.866392][T13878] bridge_slave_0: left promiscuous mode [ 712.885376][T13878] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.683813][ T5802] syz_tun (unregistering): left promiscuous mode [ 713.746179][T13891] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2776'. [ 713.816533][ T8222] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 714.137489][ T8222] usb 3-1: Using ep0 maxpacket: 16 [ 714.139594][ T8222] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 714.142626][ T8222] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 714.142844][ T8222] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.142863][ T8222] usb 3-1: Product: syz [ 714.142875][ T8222] usb 3-1: Manufacturer: syz [ 714.142885][ T8222] usb 3-1: SerialNumber: syz [ 714.197133][ T8222] usb 3-1: config 0 descriptor?? [ 714.220902][ T8222] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 714.220939][ T8222] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 714.639646][ T1354] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 714.813053][ T8222] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 715.233145][ T8222] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 715.233182][ T8222] em28xx 3-1:0.0: board has no eeprom [ 715.333039][ T1354] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.343454][ T8222] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 715.343486][ T8222] em28xx 3-1:0.0: dvb set to bulk mode. [ 715.364467][ T5885] em28xx 3-1:0.0: Binding DVB extension [ 715.411362][ T8222] usb 3-1: USB disconnect, device number 21 [ 715.441198][ T8222] em28xx 3-1:0.0: Disconnecting em28xx [ 715.578567][ T5885] em28xx 3-1:0.0: Registering input extension [ 715.578869][ T8222] em28xx 3-1:0.0: Closing input extension [ 715.637303][ T8222] em28xx 3-1:0.0: Freeing device [ 715.819398][T12097] ================================================================== [ 715.819416][T12097] BUG: KASAN: vmalloc-out-of-bounds in __list_del_entry_valid_or_report+0xb5/0x190 [ 715.819598][T12097] Read of size 8 at addr ffffc900065ca008 by task kworker/u9:0/12097 [ 715.819628][T12097] [ 715.819643][T12097] CPU: 0 UID: 0 PID: 12097 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 715.819670][T12097] Tainted: [L]=SOFTLOCKUP [ 715.819678][T12097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 715.819691][T12097] Workqueue: hci0 hci_rx_work [ 715.819836][T12097] Call Trace: [ 715.819845][T12097] [ 715.819854][T12097] dump_stack_lvl+0xe8/0x150 [ 715.819923][T12097] print_report+0xba/0x230 [ 715.819954][T12097] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 715.819974][T12097] kasan_report+0x117/0x150 [ 715.820055][T12097] ? rt_spin_lock+0x20e/0x400 [ 715.820142][T12097] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 715.820168][T12097] __list_del_entry_valid_or_report+0xb5/0x190 [ 715.820192][T12097] kcov_remote_start+0x2af/0x710 [ 715.820242][T12097] hci_rx_work+0x10f/0x1030 [ 715.820271][T12097] ? process_scheduled_works+0xa8d/0x18c0 [ 715.820319][T12097] process_scheduled_works+0xb6e/0x18c0 [ 715.820360][T12097] ? __pfx_process_scheduled_works+0x10/0x10 [ 715.820385][T12097] ? assign_work+0x3d5/0x5e0 [ 715.820407][T12097] worker_thread+0xa53/0xfc0 [ 715.820440][T12097] kthread+0x388/0x470 [ 715.820460][T12097] ? __pfx_worker_thread+0x10/0x10 [ 715.820487][T12097] ? __pfx_kthread+0x10/0x10 [ 715.820508][T12097] ret_from_fork+0x51e/0xb90 [ 715.820558][T12097] ? __pfx_ret_from_fork+0x10/0x10 [ 715.820584][T12097] ? __switch_to+0xc7d/0x1450 [ 715.820633][T12097] ? __pfx_kthread+0x10/0x10 [ 715.820652][T12097] ret_from_fork_asm+0x1a/0x30 [ 715.820678][T12097] [ 715.820685][T12097] [ 715.820690][T12097] The buggy address belongs to a vmalloc virtual mapping [ 715.820709][T12097] Memory state around the buggy address: [ 715.820721][T12097] ffffc900065c9f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 715.820735][T12097] ffffc900065c9f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 715.820748][T12097] >ffffc900065ca000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 715.820758][T12097] ^ [ 715.820767][T12097] ffffc900065ca080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 715.820777][T12097] ffffc900065ca100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 715.820786][T12097] ================================================================== [ 715.820799][T12097] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 715.820817][T12097] CPU: 0 UID: 0 PID: 12097 Comm: kworker/u9:0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 715.820843][T12097] Tainted: [L]=SOFTLOCKUP [ 715.820850][T12097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 715.820862][T12097] Workqueue: hci0 hci_rx_work [ 715.820888][T12097] Call Trace: [ 715.820896][T12097] [ 715.820904][T12097] vpanic+0x56c/0xa60 [ 715.820933][T12097] ? __pfx_vpanic+0x10/0x10 [ 715.820966][T12097] panic+0xc5/0xd0 [ 715.820997][T12097] ? __pfx_panic+0x10/0x10 [ 715.821026][T12097] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 715.821052][T12097] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 715.821074][T12097] check_panic_on_warn+0x89/0xb0 [ 715.821115][T12097] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 715.821136][T12097] end_report+0x73/0x180 [ 715.821154][T12097] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 715.821175][T12097] kasan_report+0x128/0x150 [ 715.821192][T12097] ? rt_spin_lock+0x20e/0x400 [ 715.821216][T12097] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 715.821243][T12097] __list_del_entry_valid_or_report+0xb5/0x190 [ 715.821267][T12097] kcov_remote_start+0x2af/0x710 [ 715.821290][T12097] hci_rx_work+0x10f/0x1030 [ 715.821319][T12097] ? process_scheduled_works+0xa8d/0x18c0 [ 715.821343][T12097] process_scheduled_works+0xb6e/0x18c0 [ 715.821380][T12097] ? __pfx_process_scheduled_works+0x10/0x10 [ 715.821408][T12097] ? assign_work+0x3d5/0x5e0 [ 715.821436][T12097] worker_thread+0xa53/0xfc0 [ 715.821474][T12097] kthread+0x388/0x470 [ 715.821492][T12097] ? __pfx_worker_thread+0x10/0x10 [ 715.821516][T12097] ? __pfx_kthread+0x10/0x10 [ 715.821536][T12097] ret_from_fork+0x51e/0xb90 [ 715.821565][T12097] ? __pfx_ret_from_fork+0x10/0x10 [ 715.821590][T12097] ? __switch_to+0xc7d/0x1450 [ 715.821623][T12097] ? __pfx_kthread+0x10/0x10 [ 715.821644][T12097] ret_from_fork_asm+0x1a/0x30 [ 715.821668][T12097] [ 715.822279][T12097] Kernel Offset: disabled