last executing test programs: 8.147631085s ago: executing program 2 (id=3172): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000100), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f0000000180)={&(0x7f0000001140)=ANY=[@ANYRES64=r0], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8001) 7.939632619s ago: executing program 2 (id=3176): socket(0x40000000015, 0x5, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10) listen(r0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000200)=0x2, 0x43) shutdown(r0, 0x0) socket(0xf, 0x5, 0x2000000) r1 = socket(0x28, 0x5, 0x0) socket(0x10, 0x3, 0x0) listen(r1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x400000f, 0x4, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 6.487464462s ago: executing program 0 (id=3193): r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) epoll_wait(r0, &(0x7f0000000040), 0x0, 0x400) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="08000000040000000400000007"], 0x48) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x1}) 6.467739959s ago: executing program 2 (id=3194): bpf$PROG_LOAD(0x5, &(0x7f0000003a40)={0x1c, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000001000000000000000400000018110000", @ANYBLOB="0000000000000000b702000014000000b703000000000000850000008300bf0900000000000055090100000000000a432c279500000000000000bf91000000000000b7020000010000008500000084000000b7"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0x5c}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 6.298687519s ago: executing program 0 (id=3195): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000200)='%pi6 \x00'}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001600)=ANY=[@ANYBLOB="2c0000006800010700"/18], 0x2c}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r1}, 0x8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f00000003c0)={'ip6gre0\x00', 0x0, 0x2f, 0x7, 0x80, 0xfffffffc, 0x12, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, 0x40, 0x8, 0x20000, 0x136b819b}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x10, &(0x7f00000005c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r5 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000568000/0x2000)=nil, 0x2000, 0x0, 0x11, r5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000002900)=r4, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x1b}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}}, 0x20004055) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x5c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r7, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3, 0x3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 6.217743685s ago: executing program 2 (id=3196): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x7f) read$char_usb(r1, &(0x7f0000000000)=""/172, 0xac) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x200) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYRESOCT=r2, @ANYBLOB="77223a7160d55a7c9c00205a86cc4518900ed2a87f5d0940de411e9ba9dc58b3f1302d6b0161aad75d1fb201726cbb7179b968f1d248dd08577e825671335f25175e87ece2591140ac25410c74f13a18d636adbcd1dce9156bd604fa690dbbba80b9d3442dca5070b107d085e697f5"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCRMFF(r2, 0x4004550d, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000540)=ANY=[@ANYBLOB="200c62000000d4fea1645079c82bd9dba3345cef118f9c43641d02756be197240e948624b1f6b5223bf01dbdba96eb40605d1837a3d786f74224db5ed5b4d31978a88e79f20900276d6449b6157e9401976f3e13b7e08ebd869f045c66f6f5a7b6aef1b316e5666c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r4, &(0x7f0000000300)=""/227, 0xe3) read$char_usb(r3, &(0x7f0000000400)=""/186, 0x110) syz_usb_disconnect(0xffffffffffffffff) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[], 0x0) syz_usb_disconnect(r5) syz_open_dev$evdev(&(0x7f0000000040), 0x3e, 0x208604) r6 = syz_usb_connect$cdc_ecm(0x0, 0x5e, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_disconnect(r6) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(r6) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$hiddev(&(0x7f00000000c0), 0x7f, 0x2000) syz_usb_disconnect(r0) syz_usb_connect(0x2, 0x36, &(0x7f0000000200)=ANY=[@ANYRESOCT=0x0, @ANYRES8=r0], 0x0) 6.05468483s ago: executing program 0 (id=3197): bpf$PROG_LOAD(0x5, &(0x7f0000003a40)={0x1c, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000001000000000000000400000018110000", @ANYBLOB="0000000000000000b702000014000000b703000000000000850000008300bf0900000000000055090100000000000a432c279500000000000000bf91000000000000b7020000010000008500000084000000b700000000ffff0095"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB="0000000000000000b7080000000000007b", @ANYRES32, @ANYBLOB="0000000000000000b702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 5.97372777s ago: executing program 0 (id=3198): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 5.83019877s ago: executing program 0 (id=3199): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x0, &(0x7f00000001c0)}) bind$bt_hci(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{}, &(0x7f0000000800), &(0x7f0000000840)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet(0x2, 0x3, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002700)={r3, 0x0, &(0x7f0000001700)=""/4096}, 0x20) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @remote, @loopback}, 0xc) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200)={0xffffffffffffffff}, 0x4) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f0000000100)=r6, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x8800) ioctl$BTRFS_IOC_QUOTA_CTL(r6, 0xc0109428, &(0x7f00000000c0)={0x3, 0x6}) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f00000004c0)=@sack_info={0x0, 0x8, 0xa}, &(0x7f0000000540)=0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r6) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r6, 0x84, 0x6b, &(0x7f00000006c0)=[@in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e23, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}, 0x1}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x2, @local, 0x7}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, @in6={0xa, 0x4e20, 0x9, @remote, 0xaf4c}, @in6={0xa, 0x4e20, 0xffffffff, @local, 0xc48}, @in6={0xa, 0x4e22, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, @in={0x2, 0x4e23, @multicast2}], 0xcc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r4, r6}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="e0000002ac1414aa0100"], 0x18) 4.903163047s ago: executing program 0 (id=3205): r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) epoll_wait(r0, &(0x7f0000000040), 0x0, 0x400) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="08000000040000000400000007"], 0x48) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x1}) 3.751925956s ago: executing program 4 (id=3215): r0 = socket(0x400000000010, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r1) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000000c0), 0xf00) close(r3) socket$packet(0x11, 0x3, 0x300) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x8004}, 0x20000090) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000000000008500000017000000850000000700000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f00000001c0)={'ip_vti0\x00', 0x0, 0x8, 0x80, 0x8001, 0x80000000, {{0x5, 0x4, 0x0, 0x3c, 0x14, 0x66, 0x0, 0x0, 0x4, 0x0, @rand_addr=0x64010102, @loopback}}}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYRES16=r1, @ANYRES32=r4, @ANYBLOB="40005200060010"], 0x24}}, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000001100)=0x3fa, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000010400400000011db799dbfe7132", @ANYRES32=0x0, @ANYBLOB="0940000007600000280012800b00010067656e65766500001800028014000700000000"], 0x48}, 0x1, 0x0, 0x0, 0x20004010}, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) 3.208663136s ago: executing program 4 (id=3220): bpf$PROG_LOAD(0x5, &(0x7f0000003a40)={0x1c, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000001000000000000000400000018110000", @ANYBLOB="0000000000000000b702000014000000b703000000000000850000008300bf0900000000000055090100000000000a432c279500000000000000bf91000000000000b7020000010000008500000084000000b700000000ffff0095"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB="0000000000000000b7080000000000007b", @ANYRES32, @ANYBLOB="0000000000000000b702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.966152635s ago: executing program 4 (id=3222): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$netlink(0x10, 0x3, 0xf) r3 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r3, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x18) r4 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x800442d2, &(0x7f00000007c0)={0x3, &(0x7f0000000740)=[{}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @dev}]}) bind(r3, &(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x0, 0x1, 0x1, 0x4, {0xa, 0x4e21, 0x0, @private1}}}, 0x80) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) socket(0x28, 0x1, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x5, 0x7}, @window={0x3, 0xfffb, 0x7}, @mss={0x2, 0x8007}, @window={0x3, 0x0, 0xb}, @mss={0x2, 0x2}, @timestamp, @timestamp, @window={0x3, 0xe40, 0x100}], 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='cdg', 0x3) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) sendto$inet(r0, &(0x7f0000000080)='<', 0xffffffffffffffef, 0x4805, 0x0, 0xfe8d) 2.360330337s ago: executing program 3 (id=3230): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) sendto$inet(r0, &(0x7f00000002c0)="abc715", 0x3, 0x4000805, 0x0, 0x0) recvmmsg(r0, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000d00)=[{0x0}, {&(0x7f0000000080)=""/43, 0x2b}], 0x2}, 0x2}], 0x1, 0x22, 0x0) 2.266124932s ago: executing program 3 (id=3231): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x2404c8c0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000300)={@private2={0xfc, 0x2, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xf32, 0x6, 0x7ff, 0xb1018802593101a1, 0x4, 0x85000300}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 2.206784944s ago: executing program 1 (id=3232): bpf$PROG_LOAD(0x5, &(0x7f0000003a40)={0x1c, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000001000000000000000400000018110000", @ANYBLOB="0000000000000000b702000014000000b703000000000000850000008300bf0900000000000055090100000000000a432c279500000000000000bf91000000000000b7020000010000008500000084000000b700"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0x5c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB="0000000000000000b7080000000000007b", @ANYRES32, @ANYBLOB="0000000000000000b702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)=',8Z', 0x3) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.177025042s ago: executing program 3 (id=3233): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x14, r1, 0x5170c560dce29b81, 0x44, 0x25dfdbfe}, 0x14}, 0x1, 0xffa6, 0x0, 0x8000}, 0x40408c4) pipe(&(0x7f0000000040)={0xffffffffffffffff}) sendmsg$nl_route_sched(r2, &(0x7f0000000a80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)=@getchain={0x34, 0x66, 0x8, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xa, 0x7}, {0x9, 0xa}, {0xe, 0xd}}, [{0x8, 0xb, 0x8}, {0x8, 0xb, 0xe1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$kcm(0x2b, 0x1, 0x0) listen(r4, 0x6) setsockopt$sock_attach_bpf(r4, 0x1, 0xd, &(0x7f0000000080), 0x24) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r5, &(0x7f0000000280)={0x1f, 0xfffe}, 0xe) listen(0xffffffffffffffff, 0x3ff) getsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) close(r4) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000017c0), r7) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r7, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000001800)={0x5c, r8, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x7}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0x555d}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24040040}, 0x20000000) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000003fc0)={0x0, 0x7}, 0x8) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x10000008ebb, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={r2, 0x20, &(0x7f00000001c0)={&(0x7f0000000100)=""/92, 0x5c, 0x0, &(0x7f0000000180)=""/53, 0x35}}, 0x10) 2.050197143s ago: executing program 1 (id=3234): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) r2 = socket(0x2d, 0x2, 0x0) bind$xdp(r2, &(0x7f0000000080)={0x2d, 0x0, r1, 0xc}, 0x10) r3 = socket(0x2d, 0x2, 0x0) bind$xdp(r3, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) close(r3) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x4, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f0000000240)={@private1, @dev={0xfe, 0x80, '\x00', 0x23}, @empty, 0x3, 0x7, 0x1ff, 0x0, 0xffffffffffffff1c, 0x40000, r1}) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000100)={0x1d, r7, 0x0, {0x0, 0x1, 0x4}, 0x2}, 0x18) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0xd, 0x10, 0x0, &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41100}, 0x94) sendmsg$inet(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="25790952e1d7e0a587", 0x9}], 0x1}, 0x4004) readv(r6, &(0x7f0000000480)=[{&(0x7f0000000180)=""/60, 0x3c}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x1c, 0x23, 0x9, 0x70bd25, 0x25dfd3ff, {0x1}, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@loopback}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040811}, 0x8410) 1.996356797s ago: executing program 3 (id=3235): bpf$PROG_LOAD(0x5, &(0x7f0000003a40)={0x1c, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000100000000000000040000001811"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0x5c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB="0000000000000000b7080000000000007b", @ANYRES32, @ANYBLOB="0000000000000000b702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085", 0xcb}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.859900053s ago: executing program 4 (id=3236): socket(0x40000000015, 0x5, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10) listen(r0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000200)=0x2, 0x43) shutdown(r0, 0x0) socket(0xf, 0x5, 0x2000000) r1 = socket(0x28, 0x5, 0x0) socket(0x10, 0x3, 0x0) listen(r1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x400000f, 0x4, 0x0, 0x7fffffff}, 0x0, 0x0) 1.842793736s ago: executing program 2 (id=3237): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000200)='%pi6 \x00'}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x2c}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r1}, 0x8) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'ip6gre0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x10, &(0x7f00000005c0)=ANY=[], &(0x7f0000000080)='GPL\x00'}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r3 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000568000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000002900)=r2, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x1b}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xfe2a}]}}]}, 0x44}}, 0x20004055) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x5c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0xc048) 1.649958411s ago: executing program 3 (id=3238): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) madvise(&(0x7f0000733000/0x4000)=nil, 0x4000, 0x17) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) mlock(&(0x7f0000ffb000/0x3000)=nil, 0x3000) move_pages(0x0, 0x1, &(0x7f0000000400)=[&(0x7f0000ffc000/0x4000)=nil], &(0x7f0000000540)=[0x1], &(0x7f0000001680), 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x129240, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000540)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r2, 0x3b89, &(0x7f00000001c0)={0x28, 0x2, r3, 0x0, 0x0, 0x0, 0xdead, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0, 0x1}) close_range(r0, 0xffffffffffffffff, 0x0) write$sysctl(0xffffffffffffffff, &(0x7f0000000040)='1\x00', 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) setsockopt(0xffffffffffffffff, 0x9, 0x3, &(0x7f0000000080)="b4061f34b1ba427e1f59309360dec1a864895e9408935285c0c142f639028bc1f760c848a45c9f38867f695089d66b7f2742a84e07a0c944e501", 0x3a) socket$tipc(0x1e, 0x2, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000012, 0x10, 0xffffffffffffffff, 0x75430000) userfaultfd(0x80001) 1.531566248s ago: executing program 2 (id=3239): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYRES8=r0], 0x48) r1 = socket$inet_smc(0x2b, 0x1, 0x0) socket(0x1e, 0x4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101042, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_emit_ethernet(0x22, &(0x7f0000000080)=ANY=[], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x4008032, 0xffffffffffffffff, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x60400, 0x0) syz_open_dev$loop(0x0, 0x7, 0x180862) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x40020) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f00000000c0)={0x100000, 0x21d000}) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f00000000c0)=0x8) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) close(0x4) 844.040786ms ago: executing program 1 (id=3240): bpf$PROG_LOAD(0x5, &(0x7f0000003a40)={0x1c, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000001000000000000000400000018110000", @ANYBLOB="0000000000000000b702000014000000b703000000000000850000008300bf0900000000000055090100000000000a432c279500000000000000bf91000000000000b7020000010000008500000084000000b700000000ffff0095"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0x5c}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 786.398994ms ago: executing program 4 (id=3241): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10) sendto$inet(r0, &(0x7f00000002c0)="abc715", 0x3, 0x4000805, 0x0, 0x0) recvmmsg(r0, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000d00)=[{0x0}, {&(0x7f0000000080)=""/43, 0x2b}], 0x2}, 0x2}], 0x1, 0x22, 0x0) 721.084699ms ago: executing program 4 (id=3242): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000"], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb01005ffc"], 0x0, 0xfc5f}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r2 = socket(0x840000000002, 0x3, 0x100) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_buf(r2, 0x0, 0x30, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) close(0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x0) setsockopt$sock_int(r6, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r6, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xffffffa9}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94"}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd"}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0"}], 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r3, 0x0) 511.556998ms ago: executing program 1 (id=3243): bpf$PROG_LOAD(0x5, &(0x7f0000003a40)={0x1c, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000001000000000000000400000018110000", @ANYBLOB="0000000000000000b702000014000000b703000000000000850000008300bf0900000000000055090100000000000a432c279500000000000000bf91000000000000b7020000010000008500000084000000b700"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0x5c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB="0000000000000000b7080000000000007b", @ANYRES32, @ANYBLOB="0000000000000000b702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)=',8Z', 0x3) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 201.739645ms ago: executing program 1 (id=3244): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e1e, 0x80000, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES8=r0], 0x18}, 0x0) 91.660298ms ago: executing program 1 (id=3245): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000004980), 0x0, 0x20008000) socket$nl_generic(0x10, 0x3, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) epoll_create(0x5) socket$inet6_sctp(0xa, 0x1, 0x84) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9380, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfffffffffffffffd, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x80000001}, 0x0, 0x0) shutdown(r0, 0x1) 0s ago: executing program 3 (id=3246): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000300)=0xcf99, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x18, &(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006a0000009500000000000000"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) poll(&(0x7f0000000180)=[{r1, 0xe203}, {r0, 0x8000}, {r0, 0x2400}, {r0, 0x10100}, {r1, 0xc030}, {r0, 0x24}, {r0, 0x290}, {r2, 0x40}], 0x8, 0x40) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1}]}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000faffffff00000000030000008500000036000000670000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r4, r6, 0x25, 0x0, @val=@tcx}, 0x1c) syz_emit_ethernet(0x14d1, &(0x7f0000002fc0)=ANY=[], 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000002300)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000001540)=[{&(0x7f0000001400)="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", 0x113}, {&(0x7f0000002a00)="1c393502dda1a67d93b1ceccbe972c4fef9c33ecf2d824f3a33513f45f47", 0x1e}], 0x2}, 0x9cdc2384056f0939) bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r8) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x95c5c52c0427a77b}, 0x2400c8c0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r9, 0x400448ca, 0x0) kernel console output (not intermixed with test programs): c: Disabling bearer [ 304.890969][T10514] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1774'. [ 305.044469][ T9439] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 305.044885][T10516] bond0: entered allmulticast mode [ 305.067698][T10516] ip6tnl2: entered allmulticast mode [ 305.069084][T10516] vxlan0: entered allmulticast mode [ 305.154824][ T1000] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 305.154874][ T1000] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 305.154906][ T1000] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 305.154938][ T1000] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 305.214545][ T9439] usb 3-1: Using ep0 maxpacket: 16 [ 305.216716][ T9439] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.216748][ T9439] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.216770][ T9439] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 305.216818][ T9439] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 305.216841][ T9439] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.288727][ T9439] usb 3-1: config 0 descriptor?? [ 306.299072][ T9439] usbhid 3-1:0.0: can't add hid device: -71 [ 306.299192][ T9439] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 306.311714][ T9439] usb 3-1: USB disconnect, device number 13 [ 306.384544][T10541] Set syz1 is full, maxelem 1029 reached [ 306.392095][T10524] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 306.466512][T10538] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 306.654476][ T5608] Bluetooth: hci2: command 0x0406 tx timeout [ 306.656029][ T5616] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 306.833911][T10545] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1786'. [ 307.172489][T10561] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1792'. [ 307.307271][T10567] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 307.307284][T10567] IPv6: NLM_F_CREATE should be set when creating new route [ 307.754981][T10567] bond0: entered allmulticast mode [ 307.784481][ T5330] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 307.935051][ T5330] usb 4-1: Using ep0 maxpacket: 32 [ 307.942676][ T5330] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 307.961592][ T5330] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 307.961621][ T5330] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 307.961641][ T5330] usb 4-1: Product: syz [ 307.961655][ T5330] usb 4-1: Manufacturer: syz [ 307.961669][ T5330] usb 4-1: SerialNumber: syz [ 307.997331][ T5330] usb 4-1: config 0 descriptor?? [ 308.000174][T10573] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 308.002307][ T5330] hub 4-1:0.0: bad descriptor, ignoring hub [ 308.002348][ T5330] hub 4-1:0.0: probe with driver hub failed with error -5 [ 308.172736][T10567] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.190563][T10567] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.634738][T10573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.637027][T10573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.956231][T10577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.956876][T10577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.159714][T10577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.160254][T10577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.250782][T10567] : entered allmulticast mode [ 309.264551][T10567] ipip0: entered allmulticast mode [ 309.265800][T10567] vxlan0: entered allmulticast mode [ 309.285298][T10567] mac80211_hwsim hwsim6 netpci0: entered allmulticast mode [ 309.371217][T10579] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1798'. [ 309.378407][ T38] raw-gadget.0 gadget.3: failed to queue suspend event [ 309.444567][T10573] raw-gadget.0 gadget.3: failed to queue resume event [ 309.466377][ T1000] raw-gadget.0 gadget.3: failed to queue suspend event [ 309.535357][T10576] raw-gadget.0 gadget.3: failed to queue resume event [ 309.556075][ T1000] raw-gadget.0 gadget.3: failed to queue suspend event [ 309.594559][ T1000] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.594593][ T1000] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.594632][ T1000] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.594656][ T1000] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.594690][ T1000] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.594714][ T1000] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.634648][T10573] raw-gadget.0 gadget.3: failed to queue resume event [ 309.757595][ T12] raw-gadget.0 gadget.3: failed to queue suspend event [ 309.834591][T10576] raw-gadget.0 gadget.3: failed to queue resume event [ 309.876100][ T3166] raw-gadget.0 gadget.3: failed to queue suspend event [ 309.944791][T10576] raw-gadget.0 gadget.3: failed to queue resume event [ 310.010863][ T1000] raw-gadget.0 gadget.3: failed to queue suspend event [ 310.011815][T10577] raw-gadget.0 gadget.3: failed to queue disconnect event [ 310.057522][ T43] usb 4-1: USB disconnect, device number 14 [ 310.288652][T10600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1807'. [ 310.523968][T10600] bond0: left allmulticast mode [ 310.552402][T10600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.694491][ T43] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 310.752633][T10611] netlink: zone id is out of range [ 310.752650][T10611] netlink: zone id is out of range [ 310.752658][T10611] netlink: set zone limit has 4 unknown bytes [ 310.891525][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 310.907356][ T43] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 310.907385][ T43] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 310.907403][ T43] usb 4-1: Product: syz [ 310.907417][ T43] usb 4-1: Manufacturer: syz [ 310.907429][ T43] usb 4-1: SerialNumber: syz [ 310.949593][ T43] usb 4-1: config 0 descriptor?? [ 310.952914][T10577] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 310.973322][ T43] hub 4-1:0.0: bad descriptor, ignoring hub [ 310.973361][ T43] hub 4-1:0.0: probe with driver hub failed with error -5 [ 311.035644][ T43] usb 4-1: USB disconnect, device number 15 [ 311.092435][T10620] netlink: 'syz.4.1813': attribute type 11 has an invalid length. [ 311.092457][T10620] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1813'. [ 311.224505][ T43] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 311.434694][T10628] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1816'. [ 312.375764][T10660] netlink: 'syz.0.1824': attribute type 11 has an invalid length. [ 312.375784][T10660] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1824'. [ 312.770499][T10662] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 312.770519][T10662] IPv6: NLM_F_CREATE should be set when creating new route [ 312.935443][T10667] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1828'. [ 312.967733][T10671] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1830'. [ 313.210611][T10684] tipc: New replicast peer: 127.0.0.2 [ 313.211015][T10684] tipc: Enabled bearer , priority 10 [ 313.226165][T10684] tipc: Disabling bearer [ 314.153443][T10707] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1843'. [ 314.444560][T10716] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1847'. [ 314.801665][T10728] netlink: 'syz.1.1851': attribute type 11 has an invalid length. [ 314.801688][T10728] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1851'. [ 316.297966][T10780] netlink: zone id is out of range [ 316.297982][T10780] netlink: zone id is out of range [ 316.297989][T10780] netlink: zone id is out of range [ 316.297997][T10780] netlink: zone id is out of range [ 316.298005][T10780] netlink: set zone limit has 4 unknown bytes [ 316.439745][T10782] netlink: 'syz.2.1877': attribute type 11 has an invalid length. [ 316.439765][T10782] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1877'. [ 317.321632][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.537844][T10808] netlink: 'syz.2.1888': attribute type 11 has an invalid length. [ 317.537867][T10808] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1888'. [ 317.563662][T10811] netlink: zone id is out of range [ 317.563683][T10811] netlink: zone id is out of range [ 317.563691][T10811] netlink: zone id is out of range [ 317.563699][T10811] netlink: zone id is out of range [ 317.563706][T10811] netlink: set zone limit has 4 unknown bytes [ 318.120798][T10822] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1893'. [ 318.120835][T10822] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1893'. [ 318.124456][T10822] netlink: 'syz.2.1893': attribute type 1 has an invalid length. [ 318.124477][T10822] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1893'. [ 319.028344][T10839] netlink: 'syz.2.1900': attribute type 11 has an invalid length. [ 319.028364][T10839] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1900'. [ 319.752061][T10854] tipc: Started in network mode [ 319.752085][T10854] tipc: Node identity 1, cluster identity 4711 [ 319.752098][T10854] tipc: Node number set to 1 [ 319.753830][T10854] tipc: New replicast peer: 127.0.0.2 [ 319.789913][T10854] tipc: Enabled bearer , priority 10 [ 319.797518][T10854] tipc: Disabling bearer [ 320.064491][ T9440] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 320.249080][ T9440] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 320.249117][ T9440] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 320.249241][ T9440] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 320.249266][ T9440] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.264631][T10858] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 320.299066][ T9440] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 321.093290][ T9440] usb 3-1: USB disconnect, device number 14 [ 322.254472][ T43] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 322.404395][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 322.408475][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.408509][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 322.408531][ T43] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 322.408573][ T43] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 322.408596][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.481720][ T43] usb 3-1: config 0 descriptor?? [ 322.753391][T10921] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1929'. [ 323.221699][ T43] usbhid 3-1:0.0: can't add hid device: -71 [ 323.221816][ T43] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 323.245656][ T43] usb 3-1: USB disconnect, device number 15 [ 323.534573][ T9439] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 323.684430][ T5809] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 323.691300][ T9439] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 323.691336][ T9439] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 323.691376][ T9439] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 323.691399][ T9439] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.732238][T10931] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 323.758224][ T9439] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 323.884435][ T5809] usb 5-1: Using ep0 maxpacket: 8 [ 323.889461][ T5809] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 323.889490][ T5809] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 323.928744][ T5809] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 323.928773][ T5809] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.928791][ T5809] usb 5-1: Product: syz [ 323.928805][ T5809] usb 5-1: Manufacturer: syz [ 323.928817][ T5809] usb 5-1: SerialNumber: syz [ 324.380006][T10944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1939'. [ 324.380083][T10944] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1939'. [ 324.445834][T10944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1939'. [ 324.445858][T10944] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1939'. [ 324.583809][T10950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.585103][T10950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.657493][ T9439] usb 2-1: USB disconnect, device number 8 [ 324.842551][ T5809] usb 5-1: unit 5 not found! [ 324.842631][ T5809] usb 5-1: unit 4 not found! [ 324.915499][T10952] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1940'. [ 324.980259][ T5809] usb 5-1: USB disconnect, device number 22 [ 325.082357][ T7019] udevd[7019]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 325.187728][T10956] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1943'. [ 325.722568][T10983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1950'. [ 325.722591][T10983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1950'. [ 325.921336][T10983] netlink: 'syz.1.1950': attribute type 13 has an invalid length. [ 325.921359][T10983] netlink: 'syz.1.1950': attribute type 17 has an invalid length. [ 325.929123][T10989] tipc: New replicast peer: 127.0.0.2 [ 325.929876][T10989] tipc: Enabled bearer , priority 10 [ 325.930091][T10983] lo: left allmulticast mode [ 325.942616][T10983] tunl0: left allmulticast mode [ 325.963151][T10983] gre0: left allmulticast mode [ 325.978907][T10983] gretap0: left allmulticast mode [ 326.028629][T10983] erspan0: left allmulticast mode [ 326.070891][T10983] ip_vti0: left allmulticast mode [ 326.073279][T10983] ip6_vti0: left allmulticast mode [ 326.087263][T10983] sit0: left allmulticast mode [ 326.108523][T10983] ip6tnl0: left allmulticast mode [ 326.117159][T10983] ip6gre0: left allmulticast mode [ 326.129604][T10983] syz_tun: left allmulticast mode [ 326.281392][T10983] ip6gretap0: left allmulticast mode [ 326.420120][T10983] bridge0: left allmulticast mode [ 326.486405][T10983] vcan0: left allmulticast mode [ 326.490755][T10983] team0: left allmulticast mode [ 326.492128][T10983] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.535828][T10983] dummy0: left allmulticast mode [ 326.537819][T10983] nlmon0: left allmulticast mode [ 326.538962][T10983] batadv0: left allmulticast mode [ 326.540168][T10983] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 326.540989][T10983] vxcan0: left allmulticast mode [ 326.595345][T10983] vxcan1: left allmulticast mode [ 326.596995][T10983] veth0: left allmulticast mode [ 326.635233][T10983] veth1: left allmulticast mode [ 326.699405][T10983] wg0: left allmulticast mode [ 326.738778][T10983] wg1: left allmulticast mode [ 326.794109][T11005] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1957'. [ 326.804120][T10983] wg2: left allmulticast mode [ 326.813127][T10983] veth0_to_bridge: left allmulticast mode [ 326.856838][T10983] veth1_to_bridge: left allmulticast mode [ 326.897963][T10983] veth0_to_bond: left allmulticast mode [ 326.915039][T10983] bond_slave_0: left allmulticast mode [ 326.916004][T10983] veth1_to_bond: left allmulticast mode [ 326.966027][T10983] bond_slave_1: left allmulticast mode [ 326.967067][T10983] veth0_to_team: left allmulticast mode [ 326.987314][T10983] team_slave_0: left allmulticast mode [ 326.988406][T10983] veth1_to_team: left allmulticast mode [ 327.035077][T10983] team_slave_1: left allmulticast mode [ 327.036168][T10983] veth0_to_batadv: left allmulticast mode [ 327.065124][T10983] batadv_slave_0: left allmulticast mode [ 327.065798][T10983] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 327.066473][T10983] veth1_to_batadv: left allmulticast mode [ 327.115160][T10983] batadv_slave_1: left allmulticast mode [ 327.115942][T10983] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 327.116414][T10983] xfrm0: left allmulticast mode [ 327.117919][T10983] veth0_to_hsr: left allmulticast mode [ 327.151389][T10983] veth1_to_hsr: left allmulticast mode [ 327.186361][T10983] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 327.186378][T10983] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 327.186421][T10983] hsr0: left allmulticast mode [ 327.186428][T10983] hsr_slave_0: left allmulticast mode [ 327.186439][T10983] hsr_slave_1: left allmulticast mode [ 327.226688][T10983] veth1_virt_wifi: left allmulticast mode [ 327.265024][T10983] veth0_virt_wifi: left allmulticast mode [ 327.266560][T10983] virt_wifi0: left allmulticast mode [ 327.297004][T10983] veth1_vlan: left promiscuous mode [ 327.297025][T10983] veth1_vlan: left allmulticast mode [ 327.325148][T10983] veth0_vlan: left promiscuous mode [ 327.326884][T10983] veth0_vlan: entered promiscuous mode [ 327.326933][T10983] vlan0: left allmulticast mode [ 327.328217][T10983] vlan1: left allmulticast mode [ 327.329306][T10983] veth1_vlan: entered promiscuous mode [ 327.329318][T10983] veth1_vlan: entered allmulticast mode [ 327.329360][T10983] macvlan0: left allmulticast mode [ 327.329367][T10983] veth1_vlan: left allmulticast mode [ 327.345232][T10983] veth1_vlan: entered allmulticast mode [ 327.345315][T10983] macvlan1: left allmulticast mode [ 327.345327][T10983] veth1_vlan: left allmulticast mode [ 327.388884][T10983] ipvlan0: left allmulticast mode [ 327.395738][T10983] ipvlan1: left allmulticast mode [ 327.395760][T10983] veth0_vlan: left allmulticast mode [ 327.408416][T10983] veth1_macvtap: left promiscuous mode [ 327.408435][T10983] veth1_macvtap: left allmulticast mode [ 327.436455][T10983] veth0_macvtap: left promiscuous mode [ 327.436487][T10983] veth0_macvtap: left allmulticast mode [ 327.437905][T10983] veth0_macvtap: entered promiscuous mode [ 327.437918][T10983] veth0_macvtap: entered allmulticast mode [ 327.437964][T10983] macvtap0: left allmulticast mode [ 327.437971][T10983] veth0_macvtap: left allmulticast mode [ 327.470022][T10983] veth1_macvtap: entered promiscuous mode [ 327.470045][T10983] veth1_macvtap: entered allmulticast mode [ 327.470162][T10983] macsec0: left allmulticast mode [ 327.470283][T10983] veth1_macvtap: left allmulticast mode [ 327.480468][T10983] geneve0: left allmulticast mode [ 327.486138][T10983] geneve1: left allmulticast mode [ 327.489400][T10983] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 327.522695][T10983] netdevsim netdevsim1 netdevsim1: left allmulticast mode [ 327.523327][T10983] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 327.566149][T10983] netdevsim netdevsim1 netdevsim2: left allmulticast mode [ 327.566608][T10983] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 327.603593][T10983] netdevsim netdevsim1 netdevsim3: left allmulticast mode [ 327.604043][T10983] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 327.653786][T10983] mac80211_hwsim hwsim12 wlan0: left allmulticast mode [ 327.685508][T10983] mac80211_hwsim hwsim13 wlan1: left allmulticast mode [ 327.739177][ T1000] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.798513][ T1000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.825859][ T1000] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.825932][ T1000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.007813][T10992] tipc: Disabling bearer [ 328.229045][ T3410] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.229079][ T3410] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.230634][ T3410] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.230669][ T3410] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.248408][ T3166] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.248443][ T3166] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.248482][ T3166] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.248505][ T3166] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.485847][T11022] net_ratelimit: 10 callbacks suppressed [ 328.485861][T11022] Set syz1 is full, maxelem 1029 reached [ 328.759944][T11036] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1971'. [ 328.978108][T11036] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1971'. [ 329.421485][T11047] tipc: New replicast peer: 127.0.0.2 [ 329.422128][T11047] tipc: Enabled bearer , priority 10 [ 329.442312][T11050] tipc: Disabling bearer [ 329.757756][T11049] bond0: (slave netdevsim0): Error: Device is in use and cannot be enslaved [ 330.044051][T11065] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1981'. [ 330.421612][T11077] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1986'. [ 330.422152][T11077] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1986'. [ 330.618010][T11083] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1989'. [ 330.623312][T11084] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1988'. [ 331.514220][T11108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1996'. [ 331.514241][T11108] bond0: option lp_interval: invalid value (0) [ 331.514251][T11108] bond0: option lp_interval: allowed values 1 - 2147483647 [ 331.782816][T11116] openvswitch: netlink: Missing valid actions attribute. [ 331.782862][T11116] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 331.828104][T11119] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2002'. [ 332.052042][T11126] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2005'. [ 333.186304][T11131] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 333.189296][T11151] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 333.201646][T11157] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 333.201663][T11157] IPv6: NLM_F_CREATE should be set when creating new route [ 333.203366][T11157] lo: entered allmulticast mode [ 333.218213][T11157] tunl0: entered allmulticast mode [ 333.223147][T11157] gre0: entered allmulticast mode [ 333.305841][T11157] gretap0: entered allmulticast mode [ 333.355266][T11157] erspan0: entered allmulticast mode [ 333.363695][T11157] ip_vti0: entered allmulticast mode [ 333.379872][T11157] ip6_vti0: entered allmulticast mode [ 333.392033][T11157] sit0: entered allmulticast mode [ 333.403866][T11157] ip6tnl0: entered allmulticast mode [ 333.418329][T11157] ip6gre0: entered allmulticast mode [ 333.456691][T11157] syz_tun: entered allmulticast mode [ 333.519107][T11157] ip6gretap0: entered allmulticast mode [ 333.530575][T11157] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.531989][T11157] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.557130][T11157] bridge0: entered allmulticast mode [ 333.579386][T11157] vcan0: entered allmulticast mode [ 333.615546][T11157] bond0: entered allmulticast mode [ 333.615563][T11157] bond_slave_1: entered allmulticast mode [ 333.635907][T11157] team0: entered allmulticast mode [ 333.635930][T11157] team_slave_0: entered allmulticast mode [ 333.635953][T11157] team_slave_1: entered allmulticast mode [ 333.661947][T11157] dummy0: entered allmulticast mode [ 333.716933][T11157] nlmon0: entered allmulticast mode [ 333.721184][T11157] batadv0: entered allmulticast mode [ 333.752684][T11157] vxcan0: entered allmulticast mode [ 333.755477][T11157] vxcan1: entered allmulticast mode [ 333.757801][T11157] veth0: entered allmulticast mode [ 333.762675][T11157] veth1: entered allmulticast mode [ 333.810583][T11157] wg0: entered allmulticast mode [ 333.848884][T11157] wg1: entered allmulticast mode [ 333.885358][T11157] wg2: entered allmulticast mode [ 333.887698][T11157] veth0_to_bridge: entered allmulticast mode [ 333.907940][T11157] veth1_to_bridge: entered allmulticast mode [ 333.918159][T11157] veth0_to_bond: entered allmulticast mode [ 333.923807][T11157] veth1_to_bond: entered allmulticast mode [ 333.932466][T11157] veth0_to_team: entered allmulticast mode [ 333.968313][T11157] veth1_to_team: entered allmulticast mode [ 333.987656][T11157] veth0_to_batadv: entered allmulticast mode [ 334.000455][T11157] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 334.000542][T11157] batadv_slave_0: entered allmulticast mode [ 334.005007][T11157] veth1_to_batadv: entered allmulticast mode [ 334.008754][T11157] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 334.008839][T11157] batadv_slave_1: entered allmulticast mode [ 334.012639][T11157] xfrm0: entered allmulticast mode [ 334.022848][T11157] veth0_to_hsr: entered allmulticast mode [ 334.041932][T11157] hsr_slave_0: entered allmulticast mode [ 334.046305][T11157] veth1_to_hsr: entered allmulticast mode [ 334.051144][T11157] hsr_slave_1: entered allmulticast mode [ 334.059654][T11157] hsr0: entered allmulticast mode [ 334.075963][T11157] veth1_virt_wifi: entered allmulticast mode [ 334.078661][T11157] veth0_virt_wifi: entered allmulticast mode [ 334.107988][T11157] virt_wifi0: entered allmulticast mode [ 334.109961][T11157] veth1_vlan: entered allmulticast mode [ 334.112496][T11157] veth0_vlan: entered allmulticast mode [ 334.121505][T11157] vlan0: entered allmulticast mode [ 334.140880][T11157] vlan1: entered allmulticast mode [ 334.164541][T11157] macvlan0: entered allmulticast mode [ 334.204457][T11157] macvlan1: entered allmulticast mode [ 334.207496][T11157] ipvlan0: entered allmulticast mode [ 334.210278][T11157] ipvlan1: entered allmulticast mode [ 334.212751][T11157] veth1_macvtap: entered allmulticast mode [ 334.216461][T11157] veth0_macvtap: entered allmulticast mode [ 334.305155][T11157] macvtap0: entered allmulticast mode [ 334.308548][T11157] macsec0: entered allmulticast mode [ 334.311242][T11157] geneve0: entered allmulticast mode [ 334.314191][T11157] geneve1: entered allmulticast mode [ 334.417397][T11157] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 334.494718][T11157] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 334.575080][T11157] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 334.644868][T11157] netdevsim netdevsim4 netdevsim3: entered allmulticast mode [ 334.769514][T11157] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 334.895610][T11157] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 334.964721][T11157] bond1: entered allmulticast mode [ 334.966034][T11157] ip6tnl1: entered allmulticast mode [ 334.995411][T11157] ipip0: entered allmulticast mode [ 334.996691][T11157] vxlan0: entered allmulticast mode [ 335.047936][ T1000] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.047958][ T1000] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.047981][ T1000] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.048071][ T1000] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.048102][ T1000] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 335.048123][ T1000] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.301507][T11178] __nla_validate_parse: 1 callbacks suppressed [ 335.301527][T11178] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2021'. [ 335.654668][T11190] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 336.030946][T11200] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2030'. [ 336.916229][T11186] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 337.026705][T11218] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 337.216962][T11231] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2036'. [ 337.561810][T11242] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 338.166046][T11263] tipc: New replicast peer: 127.0.0.2 [ 338.185321][T11263] tipc: Enabled bearer , priority 10 [ 338.196509][T11259] tipc: Disabling bearer [ 338.504836][T11277] netlink: 199556 bytes leftover after parsing attributes in process `syz.4.2049'. [ 338.653625][T11279] syzkaller0: entered promiscuous mode [ 338.653650][T11279] syzkaller0: entered allmulticast mode [ 338.745260][ T197] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 338.904529][ T197] usb 3-1: Using ep0 maxpacket: 16 [ 338.906683][ T197] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.906717][ T197] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.906739][ T197] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 338.906781][ T197] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 338.906805][ T197] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.978953][ T197] usb 3-1: config 0 descriptor?? [ 339.253657][T11296] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2053'. [ 339.764583][ T9439] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 339.832734][ T197] usbhid 3-1:0.0: can't add hid device: -71 [ 339.832856][ T197] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 339.856499][ T197] usb 3-1: USB disconnect, device number 16 [ 339.941366][T11315] netlink: 199556 bytes leftover after parsing attributes in process `syz.0.2061'. [ 339.955882][ T9439] usb 4-1: Using ep0 maxpacket: 16 [ 339.958288][ T9439] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.958322][ T9439] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.958345][ T9439] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 339.958387][ T9439] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 339.958411][ T9439] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.026304][ T9439] usb 4-1: config 0 descriptor?? [ 340.456407][T11326] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2066'. [ 340.740203][ T9439] usbhid 4-1:0.0: can't add hid device: -71 [ 340.740327][ T9439] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 340.768275][ T9439] usb 4-1: USB disconnect, device number 17 [ 340.864537][ T5330] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 340.906840][T11341] netlink: 199556 bytes leftover after parsing attributes in process `syz.1.2073'. [ 341.013891][T11343] tipc: Enabling of bearer rejected, failed to enable media [ 341.014476][ T5330] usb 3-1: Using ep0 maxpacket: 32 [ 341.029501][ T5330] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 341.031632][ T5330] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 341.031662][ T5330] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 341.031678][ T5330] usb 3-1: Product: syz [ 341.031686][ T5330] usb 3-1: Manufacturer: syz [ 341.031694][ T5330] usb 3-1: SerialNumber: syz [ 341.048540][ T5330] usb 3-1: config 0 descriptor?? [ 341.074994][T11333] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 341.084796][ T5330] hub 3-1:0.0: bad descriptor, ignoring hub [ 341.084835][ T5330] hub 3-1:0.0: probe with driver hub failed with error -5 [ 341.747148][T11333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.750141][T11333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.124209][T11366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.146026][T11366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.350143][T11366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.388396][T11366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.671186][ T3429] raw-gadget.0 gadget.2: failed to queue suspend event [ 342.814644][T11333] raw-gadget.0 gadget.2: failed to queue resume event [ 342.839047][ T67] raw-gadget.0 gadget.2: failed to queue suspend event [ 342.914809][T11365] raw-gadget.0 gadget.2: failed to queue resume event [ 342.921776][T11384] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2088'. [ 342.941898][ T67] raw-gadget.0 gadget.2: failed to queue suspend event [ 343.004576][T11333] raw-gadget.0 gadget.2: failed to queue resume event [ 343.097258][ T1000] raw-gadget.0 gadget.2: failed to queue suspend event [ 343.131354][T11389] tipc: New replicast peer: 127.0.0.2 [ 343.131603][T11389] tipc: Enabled bearer , priority 10 [ 343.144379][T11389] tipc: Disabling bearer [ 343.166104][T11365] raw-gadget.0 gadget.2: failed to queue resume event [ 343.192160][ T67] raw-gadget.0 gadget.2: failed to queue suspend event [ 343.257000][T11365] raw-gadget.0 gadget.2: failed to queue resume event [ 343.275885][ T3429] raw-gadget.0 gadget.2: failed to queue suspend event [ 343.310694][T11390] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 343.312958][T11390] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 343.332338][T11366] raw-gadget.0 gadget.2: failed to queue disconnect event [ 343.448760][T11396] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2093'. [ 343.703122][ T9439] usb 3-1: USB disconnect, device number 17 [ 343.830380][T11408] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2099'. [ 343.888647][ T9439] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 344.008274][T11412] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2101'. [ 344.008635][T11412] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2101'. [ 344.049602][ T9439] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 344.067848][ T9439] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 344.067876][ T9439] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 344.067896][ T9439] usb 3-1: Product: syz [ 344.067910][ T9439] usb 3-1: Manufacturer: syz [ 344.067925][ T9439] usb 3-1: SerialNumber: syz [ 344.110205][ T9439] usb 3-1: config 0 descriptor?? [ 344.111082][T11366] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 344.120998][ T9439] hub 3-1:0.0: bad descriptor, ignoring hub [ 344.121037][ T9439] hub 3-1:0.0: probe with driver hub failed with error -5 [ 344.307238][T11415] lo: entered allmulticast mode [ 344.310412][T11415] tunl0: entered allmulticast mode [ 344.328105][T11415] gre0: entered allmulticast mode [ 344.426705][T11415] gretap0: entered allmulticast mode [ 344.464534][T11415] erspan0: entered allmulticast mode [ 344.485344][T11415] ip_vti0: entered allmulticast mode [ 344.493824][T11415] ip6_vti0: entered allmulticast mode [ 344.517982][ T5706] usb 3-1: USB disconnect, device number 18 [ 344.520595][T11415] sit0: entered allmulticast mode [ 344.571663][T11415] ip6tnl0: entered allmulticast mode [ 344.584885][T11415] ip6gre0: entered allmulticast mode [ 344.626842][T11415] syz_tun: entered allmulticast mode [ 344.665396][T11415] ip6gretap0: entered allmulticast mode [ 344.671633][T11415] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.672798][T11415] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.674257][T11415] bridge0: entered allmulticast mode [ 344.680584][T11415] vcan0: entered allmulticast mode [ 344.731512][T11422] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2104'. [ 344.756158][T11415] bond0: entered allmulticast mode [ 344.756175][T11415] bond_slave_0: entered allmulticast mode [ 344.756189][T11415] bond_slave_1: entered allmulticast mode [ 344.756205][T11415] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 344.759532][T11415] team0: entered allmulticast mode [ 344.759546][T11415] team_slave_0: entered allmulticast mode [ 344.759558][T11415] team_slave_1: entered allmulticast mode [ 344.762075][T11415] dummy0: entered allmulticast mode [ 344.844596][T11415] nlmon0: entered allmulticast mode [ 344.846948][T11415] batadv0: entered allmulticast mode [ 344.854141][T11415] vxcan0: entered allmulticast mode [ 344.866706][T11415] vxcan1: entered allmulticast mode [ 344.874988][T11415] veth0: entered allmulticast mode [ 344.884921][T11415] veth1: entered allmulticast mode [ 344.924875][T11415] wg0: entered allmulticast mode [ 344.984817][T11415] wg1: entered allmulticast mode [ 345.024985][T11415] wg2: entered allmulticast mode [ 345.026869][T11415] veth0_to_bridge: entered allmulticast mode [ 345.032154][T11415] veth1_to_bridge: entered allmulticast mode [ 345.057243][T11415] veth0_to_bond: entered allmulticast mode [ 345.060699][T11415] veth1_to_bond: entered allmulticast mode [ 345.064239][T11415] veth0_to_team: entered allmulticast mode [ 345.088172][T11415] veth1_to_team: entered allmulticast mode [ 345.092607][T11415] veth0_to_batadv: entered allmulticast mode [ 345.096294][T11415] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 345.096380][T11415] batadv_slave_0: entered allmulticast mode [ 345.102054][T11415] veth1_to_batadv: entered allmulticast mode [ 345.107702][T11415] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 345.107786][T11415] batadv_slave_1: entered allmulticast mode [ 345.112230][T11415] xfrm0: entered allmulticast mode [ 345.117469][T11415] veth0_to_hsr: entered allmulticast mode [ 345.122014][T11415] hsr_slave_0: entered allmulticast mode [ 345.134870][T11415] veth1_to_hsr: entered allmulticast mode [ 345.138938][T11415] hsr_slave_1: entered allmulticast mode [ 345.147646][T11415] hsr0: entered allmulticast mode [ 345.151729][T11415] veth1_virt_wifi: entered allmulticast mode [ 345.157237][T11415] veth0_virt_wifi: entered allmulticast mode [ 345.195015][T11415] virt_wifi0: entered allmulticast mode [ 345.197072][T11415] veth1_vlan: entered allmulticast mode [ 345.199684][T11415] veth0_vlan: entered allmulticast mode [ 345.202556][T11415] vlan0: entered allmulticast mode [ 345.230687][T11415] vlan1: entered allmulticast mode [ 345.244651][T11415] macvlan0: entered allmulticast mode [ 345.286757][T11415] macvlan1: entered allmulticast mode [ 345.289455][T11415] ipvlan0: entered allmulticast mode [ 345.303515][T11415] ipvlan1: entered allmulticast mode [ 345.308774][T11415] veth1_macvtap: entered allmulticast mode [ 345.312137][T11415] veth0_macvtap: entered allmulticast mode [ 345.384489][T11415] macvtap0: entered allmulticast mode [ 345.387264][T11415] macsec0: entered allmulticast mode [ 345.389545][T11415] geneve0: entered allmulticast mode [ 345.393965][T11415] geneve1: entered allmulticast mode [ 345.554859][T11415] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 345.638468][T11415] netdevsim netdevsim1 netdevsim2: entered allmulticast mode [ 345.694677][T11415] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 345.787118][T11415] mac80211_hwsim hwsim12 wlan0: entered allmulticast mode [ 345.907600][T11415] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode [ 345.908853][T11415] ipip0: entered allmulticast mode [ 345.909946][T11415] ipip1: entered allmulticast mode [ 345.911255][T11415] vxlan0: entered allmulticast mode [ 345.974776][ T3429] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.974812][ T3429] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.974984][ T3429] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.975009][ T3429] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.975118][ T3429] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.975144][ T3429] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.975247][ T3429] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.975270][ T3429] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.175155][T11437] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2109'. [ 346.175187][T11437] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 347.562526][T11438] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 347.989158][T11467] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2123'. [ 348.489238][T11481] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2128'. [ 348.489262][T11481] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2128'. [ 348.731430][T11488] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2132'. [ 348.967659][T11481] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2128'. [ 348.967684][T11481] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2128'. [ 348.986904][T11480] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 349.031247][T11480] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 349.226620][T11502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2138'. [ 349.226645][T11502] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2138'. [ 349.226996][T11502] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2138'. [ 349.389430][T11500] netlink: 'syz.4.2135': attribute type 1 has an invalid length. [ 350.454446][ T9439] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 350.604522][ T9439] usb 2-1: Using ep0 maxpacket: 16 [ 350.606357][ T9439] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.606390][ T9439] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.606411][ T9439] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 350.606453][ T9439] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 350.606476][ T9439] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.623254][ T9439] usb 2-1: config 0 descriptor?? [ 351.351409][ T9439] usbhid 2-1:0.0: can't add hid device: -71 [ 351.351527][ T9439] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 351.393541][ T9439] usb 2-1: USB disconnect, device number 9 [ 351.608218][T11544] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 351.629087][T11544] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 351.796101][T11573] tipc: Cannot configure node identity twice [ 351.797028][T11573] tipc: New replicast peer: 127.0.0.2 [ 351.800571][T11573] tipc: Enabled bearer , priority 10 [ 352.496739][T11597] lo: entered allmulticast mode [ 352.504233][T11597] tunl0: entered allmulticast mode [ 352.507871][T11597] gre0: entered allmulticast mode [ 352.570005][T11597] gretap0: entered allmulticast mode [ 352.624772][T11597] erspan0: entered allmulticast mode [ 352.629888][T11597] ip_vti0: entered allmulticast mode [ 352.633766][T11597] ip6_vti0: entered allmulticast mode [ 352.668087][T11597] sit0: entered allmulticast mode [ 352.693626][T11597] ip6tnl0: entered allmulticast mode [ 352.713710][T11597] ip6gre0: entered allmulticast mode [ 352.837630][T11597] ip6gretap0: entered allmulticast mode [ 352.866281][T11597] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.866874][T11597] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.902890][T11597] bridge0: entered allmulticast mode [ 352.922207][T11597] vcan0: entered allmulticast mode [ 352.958028][T11597] bond0: entered allmulticast mode [ 352.958051][T11597] bond_slave_0: entered allmulticast mode [ 352.958074][T11597] bond_slave_1: entered allmulticast mode [ 353.031097][T11597] dummy0: entered allmulticast mode [ 353.104651][T11597] nlmon0: entered allmulticast mode [ 353.108460][T11597] batadv0: entered allmulticast mode [ 353.116585][T11597] vxcan0: entered allmulticast mode [ 353.125101][T11597] vxcan1: entered allmulticast mode [ 353.130390][T11597] veth0: entered allmulticast mode [ 353.151375][T11597] veth1: entered allmulticast mode [ 353.255316][T11597] wg0: entered allmulticast mode [ 353.294837][T11597] wg1: entered allmulticast mode [ 353.335146][T11597] wg2: entered allmulticast mode [ 353.342726][T11597] veth0_to_bridge: entered allmulticast mode [ 353.403950][T11597] veth1_to_bridge: entered allmulticast mode [ 353.421781][T11597] veth0_to_bond: entered allmulticast mode [ 353.435005][T11597] veth1_to_bond: entered allmulticast mode [ 353.447497][T11597] veth0_to_team: entered allmulticast mode [ 353.463033][T11597] team_slave_0: entered allmulticast mode [ 353.469467][T11597] veth1_to_team: entered allmulticast mode [ 353.480234][T11597] team_slave_1: entered allmulticast mode [ 353.488506][T11597] veth0_to_batadv: entered allmulticast mode [ 353.498710][T11597] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 353.498795][T11597] batadv_slave_0: entered allmulticast mode [ 353.510907][T11597] veth1_to_batadv: entered allmulticast mode [ 353.543102][T11597] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 353.543159][T11597] batadv_slave_1: entered allmulticast mode [ 353.556628][T11597] xfrm0: entered allmulticast mode [ 353.564285][T11597] veth0_to_hsr: entered allmulticast mode [ 353.580112][T11597] hsr_slave_0: entered allmulticast mode [ 353.590037][T11597] veth1_to_hsr: entered allmulticast mode [ 353.603129][T11597] hsr_slave_1: entered allmulticast mode [ 353.614269][T11597] hsr0: entered allmulticast mode [ 353.639435][T11597] veth1_virt_wifi: entered allmulticast mode [ 353.645752][T11597] veth0_virt_wifi: entered allmulticast mode [ 353.712914][T11624] __nla_validate_parse: 10 callbacks suppressed [ 353.712928][T11624] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2178'. [ 353.747854][T11597] virt_wifi0: entered allmulticast mode [ 353.758601][T11597] veth1_vlan: entered allmulticast mode [ 353.769070][T11597] vlan0: entered allmulticast mode [ 353.769086][T11597] veth0_vlan: entered allmulticast mode [ 353.794843][T11597] veth0_vlan: left promiscuous mode [ 353.794887][T11597] vlan1: entered allmulticast mode [ 353.837481][T11597] macvlan0: entered allmulticast mode [ 353.875728][T11597] macvlan1: entered allmulticast mode [ 353.882198][T11597] ipvlan0: entered allmulticast mode [ 353.892370][T11597] ipvlan1: entered allmulticast mode [ 353.902362][T11597] veth1_macvtap: entered allmulticast mode [ 353.914855][T11597] veth0_macvtap: entered allmulticast mode [ 353.994512][T11597] macvtap0: entered allmulticast mode [ 354.002076][T11597] macsec0: entered allmulticast mode [ 354.031348][T11597] geneve0: entered allmulticast mode [ 354.050590][T11597] geneve1: entered allmulticast mode [ 354.116093][T11597] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 354.194970][T11597] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 354.264509][T11597] netdevsim netdevsim3 netdevsim2: entered allmulticast mode [ 354.354851][T11597] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 354.480505][T11597] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 354.582547][T11597] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 354.622720][T11597] vlan2: entered allmulticast mode [ 354.628717][T11597] : entered allmulticast mode [ 354.632883][T11597] ipip0: entered allmulticast mode [ 354.636407][T11597] vxlan0: entered allmulticast mode [ 354.639374][T11597] ipip1: entered allmulticast mode [ 354.786136][T11604] tipc: Node number set to 460766624 [ 354.796890][T11630] netlink: 'syz.3.2181': attribute type 12 has an invalid length. [ 354.796909][T11630] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2181'. [ 354.797267][T11630] bond0: left allmulticast mode [ 354.837411][T11630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.084570][ T67] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.084604][ T67] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.084973][ T67] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.084999][ T67] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.085033][ T67] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.085057][ T67] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.716229][T11659] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2189'. [ 355.963602][T11673] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2193'. [ 355.963623][T11673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2193'. [ 355.976390][T11673] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2193'. [ 355.976426][T11673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2193'. [ 356.910081][T11706] netlink: 200 bytes leftover after parsing attributes in process `syz.3.2204'. [ 356.913320][T11707] tipc: New replicast peer: 127.0.0.2 [ 356.913706][T11707] tipc: Enabled bearer , priority 10 [ 356.916496][T11712] tipc: Disabling bearer [ 357.072662][T11707] bond0: (slave netdevsim0): Error: Device is in use and cannot be enslaved [ 357.374581][ T5608] Bluetooth: hci2: command 0x0406 tx timeout [ 357.374675][ T5616] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 357.919593][T11746] tipc: New replicast peer: 127.0.0.2 [ 357.919989][T11746] tipc: Enabled bearer , priority 10 [ 358.120969][T11753] netlink: 200 bytes leftover after parsing attributes in process `syz.0.2216'. [ 358.265959][T11755] openvswitch: netlink: Missing valid actions attribute. [ 358.266001][T11755] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 359.324731][T11775] tipc: Enabling of bearer rejected, already enabled [ 359.763207][T11786] netlink: 'syz.3.2230': attribute type 12 has an invalid length. [ 359.763221][T11786] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2230'. [ 359.997350][T11792] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2235'. [ 359.998755][T11792] bond0: left allmulticast mode [ 360.038437][T11792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.224460][T11604] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 360.384543][T11604] usb 2-1: Using ep0 maxpacket: 32 [ 360.386178][T11604] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 360.388516][T11604] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 360.388533][T11604] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 360.388544][T11604] usb 2-1: Product: syz [ 360.388551][T11604] usb 2-1: Manufacturer: syz [ 360.388559][T11604] usb 2-1: SerialNumber: syz [ 360.445880][T11604] usb 2-1: config 0 descriptor?? [ 360.449258][T11793] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 360.450960][T11604] hub 2-1:0.0: bad descriptor, ignoring hub [ 360.450992][T11604] hub 2-1:0.0: probe with driver hub failed with error -5 [ 360.654587][ T5608] Bluetooth: hci2: command 0x0406 tx timeout [ 360.654660][ T5616] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 361.076576][T11793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.077159][T11793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.407014][T11820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.409564][T11820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.618749][T11820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.619291][T11820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.730875][T11814] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 361.875624][ T3410] raw-gadget.0 gadget.1: failed to queue suspend event [ 361.893494][T11827] netlink: 'syz.4.2245': attribute type 12 has an invalid length. [ 361.893508][T11827] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2245'. [ 361.944597][T11793] raw-gadget.0 gadget.1: failed to queue resume event [ 361.965934][ T3166] raw-gadget.0 gadget.1: failed to queue suspend event [ 362.013640][T11831] tipc: New replicast peer: 127.0.0.2 [ 362.014074][T11831] tipc: Enabled bearer , priority 10 [ 362.028103][T11831] tipc: Disabling bearer [ 362.034568][T11817] raw-gadget.0 gadget.1: failed to queue resume event [ 362.067716][ T3410] raw-gadget.0 gadget.1: failed to queue suspend event [ 362.165009][T11817] raw-gadget.0 gadget.1: failed to queue resume event [ 362.196230][ T3429] raw-gadget.0 gadget.1: failed to queue suspend event [ 362.284633][T11793] raw-gadget.0 gadget.1: failed to queue resume event [ 362.323975][ T3410] raw-gadget.0 gadget.1: failed to queue suspend event [ 362.384571][T11793] raw-gadget.0 gadget.1: failed to queue resume event [ 362.427222][ T3410] raw-gadget.0 gadget.1: failed to queue suspend event [ 362.475147][T11837] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2248'. [ 362.475172][T11837] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2248'. [ 362.477340][T11837] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2248'. [ 362.477363][T11837] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2248'. [ 362.503485][T11820] raw-gadget.0 gadget.1: failed to queue disconnect event [ 362.912074][ T9440] usb 2-1: USB disconnect, device number 10 [ 363.084517][ T9440] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 363.236653][ T9440] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 363.245323][ T9440] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 363.245355][ T9440] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 363.245375][ T9440] usb 2-1: Product: syz [ 363.245388][ T9440] usb 2-1: Manufacturer: syz [ 363.245402][ T9440] usb 2-1: SerialNumber: syz [ 363.325318][ T9440] usb 2-1: config 0 descriptor?? [ 363.326455][T11820] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 363.331439][ T9440] hub 2-1:0.0: bad descriptor, ignoring hub [ 363.331477][ T9440] hub 2-1:0.0: probe with driver hub failed with error -5 [ 363.684806][ T5330] usb 2-1: USB disconnect, device number 11 [ 363.780477][T11859] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2256'. [ 365.063562][T11887] netlink: 200 bytes leftover after parsing attributes in process `syz.0.2263'. [ 365.204870][T11892] netlink: 'syz.0.2266': attribute type 12 has an invalid length. [ 365.204891][T11892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2266'. [ 365.205377][T11892] bond0: left allmulticast mode [ 365.281484][T11892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.684625][T11905] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2270'. [ 366.684640][T11905] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2270'. [ 366.685089][T11905] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2270'. [ 366.685099][T11905] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2270'. [ 367.403947][T11919] netlink: 200 bytes leftover after parsing attributes in process `syz.2.2276'. [ 367.776597][T11934] tipc: New replicast peer: 127.0.0.2 [ 367.776988][T11934] tipc: Enabled bearer , priority 10 [ 368.157421][T11947] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2288'. [ 368.163049][T11947] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2288'. [ 368.236458][T11950] netlink: 200 bytes leftover after parsing attributes in process `syz.4.2289'. [ 368.386983][T11955] netlink: zone id is out of range [ 368.386999][T11955] netlink: zone id is out of range [ 368.387008][T11955] netlink: zone id is out of range [ 368.387015][T11955] netlink: zone id is out of range [ 368.387023][T11955] netlink: zone id is out of range [ 368.387030][T11955] netlink: zone id is out of range [ 368.387038][T11955] netlink: zone id is out of range [ 368.387046][T11955] netlink: zone id is out of range [ 368.387054][T11955] netlink: zone id is out of range [ 368.387061][T11955] netlink: set zone limit has 4 unknown bytes [ 368.831905][T11966] netlink: 'syz.4.2296': attribute type 12 has an invalid length. [ 368.874438][ T9440] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 369.039264][ T9440] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 369.039323][ T9440] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 369.054517][ T9440] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 369.054548][ T9440] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 369.054567][ T9440] usb 3-1: Manufacturer: syz [ 369.111878][ T9440] usb 3-1: config 0 descriptor?? [ 369.385329][ T9440] rc_core: IR keymap rc-hauppauge not found [ 369.385349][ T9440] Registered IR keymap rc-empty [ 369.407466][ T9440] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 369.437302][ T9440] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input10 [ 369.528868][ T9440] usb 3-1: USB disconnect, device number 19 [ 369.704500][ T5606] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 369.854588][ T5606] usb 4-1: Using ep0 maxpacket: 16 [ 369.859272][ T5606] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.859306][ T5606] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 369.859327][ T5606] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 369.859369][ T5606] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 369.859392][ T5606] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.923502][ T5606] usb 4-1: config 0 descriptor?? [ 369.980912][T12000] netlink: 'syz.1.2309': attribute type 12 has an invalid length. [ 370.165123][T12005] __nla_validate_parse: 11 callbacks suppressed [ 370.165145][T12005] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2311'. [ 370.304921][T12000] bond0: left allmulticast mode [ 370.348007][T12000] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.790338][ T5606] usbhid 4-1:0.0: can't add hid device: -71 [ 370.790463][ T5606] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 370.794571][ T5606] usb 4-1: USB disconnect, device number 18 [ 371.604430][ T5606] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 371.756206][ T5606] usb 3-1: Using ep0 maxpacket: 16 [ 371.758927][ T5606] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.758959][ T5606] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.758981][ T5606] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 371.759022][ T5606] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 371.759044][ T5606] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.822031][ T5606] usb 3-1: config 0 descriptor?? [ 372.671730][ T5606] usbhid 3-1:0.0: can't add hid device: -71 [ 372.671817][ T5606] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 372.697285][ T5606] usb 3-1: USB disconnect, device number 20 [ 372.858228][T12050] netlink: 200 bytes leftover after parsing attributes in process `syz.3.2328'. [ 373.374896][T12063] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2332'. [ 373.378531][T12063] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2332'. [ 374.304173][T12076] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2338'. [ 374.461652][T12079] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2339'. [ 374.461666][T12079] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2339'. [ 374.489769][T12079] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2339'. [ 374.489792][T12079] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2339'. [ 374.608721][T12081] netlink: 'syz.2.2340': attribute type 12 has an invalid length. [ 374.608734][T12081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2340'. [ 375.849458][T12111] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2350'. [ 376.573333][T12120] netlink: 'syz.4.2352': attribute type 12 has an invalid length. [ 376.573355][T12120] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2352'. [ 376.846229][T12122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2353'. [ 376.846254][T12122] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2353'. [ 376.879937][T12122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2353'. [ 376.879952][T12122] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2353'. [ 378.173023][T12146] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2359'. [ 378.404569][T12152] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2361'. [ 378.676705][T12155] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2362'. [ 378.676730][T12155] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2362'. [ 378.740559][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.959899][T12199] netlink: 'syz.0.2367': attribute type 1 has an invalid length. [ 380.732509][T12221] bond0: entered allmulticast mode [ 380.870461][ T5616] Bluetooth: hci5: link tx timeout [ 380.930327][ T5616] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 381.008390][T12232] __nla_validate_parse: 16 callbacks suppressed [ 381.008411][T12232] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2380'. [ 381.008426][T12232] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2380'. [ 381.013700][T12232] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2380'. [ 381.013722][T12232] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2380'. [ 381.099252][T12234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2381'. [ 381.099277][T12234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2381'. [ 381.112071][T12234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2381'. [ 381.112092][T12234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2381'. [ 381.817048][T12249] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2387'. [ 382.402260][T12258] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2391'. [ 382.982903][ T5616] Bluetooth: hci5: command 0x0406 tx timeout [ 383.369803][T12280] bond0: entered allmulticast mode [ 383.392663][T12280] : entered allmulticast mode [ 383.874876][ T5606] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 384.024516][ T5606] usb 4-1: Using ep0 maxpacket: 16 [ 384.026697][ T5606] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.026730][ T5606] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 384.026753][ T5606] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 384.026802][ T5606] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 384.026824][ T5606] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.063729][ T5606] usb 4-1: config 0 descriptor?? [ 384.440882][T12306] netlink: 'syz.1.2413': attribute type 14 has an invalid length. [ 384.886685][ T5606] usbhid 4-1:0.0: can't add hid device: -71 [ 384.886807][ T5606] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 384.902979][ T5606] usb 4-1: USB disconnect, device number 19 [ 386.337720][T12338] __nla_validate_parse: 10 callbacks suppressed [ 386.337743][T12338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2428'. [ 386.337758][T12338] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2428'. [ 386.339851][T12338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2428'. [ 386.339872][T12338] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2428'. [ 386.976846][T12347] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2432'. [ 387.614628][ T5606] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 387.764603][ T5606] usb 2-1: Using ep0 maxpacket: 16 [ 387.767016][ T5606] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.767049][ T5606] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 387.767072][ T5606] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 387.767115][ T5606] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 387.767139][ T5606] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.779205][ T5606] usb 2-1: config 0 descriptor?? [ 388.304624][T12365] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2437'. [ 388.422256][ T5606] usbhid 2-1:0.0: can't add hid device: -71 [ 388.422377][ T5606] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 388.453662][ T5606] usb 2-1: USB disconnect, device number 12 [ 388.894513][ T5606] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 388.894691][ T5616] Bluetooth: hci2: command 0x0406 tx timeout [ 388.895093][ T5608] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 389.044459][ T5606] usb 5-1: Using ep0 maxpacket: 8 [ 389.046930][ T5606] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 389.046957][ T5606] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 389.085193][ T5606] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 389.085220][ T5606] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.085240][ T5606] usb 5-1: Product: syz [ 389.085253][ T5606] usb 5-1: Manufacturer: syz [ 389.085266][ T5606] usb 5-1: SerialNumber: syz [ 389.522507][T12383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.540255][T12383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.843451][T12386] netlink: 'syz.0.2443': attribute type 12 has an invalid length. [ 389.843472][T12386] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2443'. [ 389.854790][T12386] bond0: left allmulticast mode [ 389.858078][T12386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 390.000886][ T5606] usb 5-1: unit 5 not found! [ 390.000911][ T5606] usb 5-1: unit 4 not found! [ 390.101172][T12390] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2444'. [ 390.262446][T12393] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2447'. [ 390.262471][T12393] netlink: 'syz.3.2447': attribute type 1 has an invalid length. [ 390.443625][ T5606] usb 5-1: USB disconnect, device number 23 [ 390.903228][T12412] tipc: Enabling of bearer rejected, already enabled [ 390.916197][T12412] tipc: Disabling bearer [ 391.188385][T12412] bond0: (slave netdevsim0): Error: Device is in use and cannot be enslaved [ 391.580663][T12419] tipc: Enabling of bearer rejected, already enabled [ 391.588958][T12419] tipc: Disabling bearer [ 391.603839][T12421] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2456'. [ 392.082367][T12433] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2461'. [ 392.436923][T12438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2463'. [ 392.436945][T12438] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2463'. [ 392.439411][T12438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2463'. [ 392.439432][T12438] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2463'. [ 392.741831][T12444] net_ratelimit: 12 callbacks suppressed [ 392.741852][T12444] netlink: zone id is out of range [ 392.741860][T12444] netlink: zone id is out of range [ 392.741867][T12444] netlink: zone id is out of range [ 392.741874][T12444] netlink: zone id is out of range [ 392.741881][T12444] netlink: zone id is out of range [ 392.741887][T12444] netlink: zone id is out of range [ 392.741894][T12444] netlink: zone id is out of range [ 392.741901][T12444] netlink: zone id is out of range [ 392.741908][T12444] netlink: zone id is out of range [ 392.741915][T12444] netlink: set zone limit has 4 unknown bytes [ 393.354584][ T5606] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 393.504453][ T5606] usb 3-1: Using ep0 maxpacket: 32 [ 393.506742][ T5606] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 393.512173][ T5606] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 393.512205][ T5606] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 393.512226][ T5606] usb 3-1: Product: syz [ 393.512240][ T5606] usb 3-1: Manufacturer: syz [ 393.512255][ T5606] usb 3-1: SerialNumber: syz [ 393.522827][ T5606] usb 3-1: config 0 descriptor?? [ 393.526270][T12452] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 393.531465][ T5606] hub 3-1:0.0: bad descriptor, ignoring hub [ 393.531502][ T5606] hub 3-1:0.0: probe with driver hub failed with error -5 [ 393.698551][T12459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2472'. [ 393.698574][T12459] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2472'. [ 393.700041][T12459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2472'. [ 393.700058][T12459] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2472'. [ 394.182638][T12452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.183212][T12452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.523807][T12472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.533169][T12472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.750780][T12472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.751367][T12472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.038734][T12486] netlink: 'syz.0.2483': attribute type 12 has an invalid length. [ 395.103723][ T55] raw-gadget.0 gadget.2: failed to queue suspend event [ 395.196097][T12471] raw-gadget.0 gadget.2: failed to queue resume event [ 395.235851][ T55] raw-gadget.0 gadget.2: failed to queue suspend event [ 395.304527][T12452] raw-gadget.0 gadget.2: failed to queue resume event [ 395.344538][T12177] raw-gadget.0 gadget.2: failed to queue suspend event [ 395.384868][T12491] vlan2: entered promiscuous mode [ 395.384885][T12491] gretap0: entered promiscuous mode [ 395.425453][T12452] raw-gadget.0 gadget.2: failed to queue resume event [ 395.453989][T12186] raw-gadget.0 gadget.2: failed to queue suspend event [ 395.514535][T12471] raw-gadget.0 gadget.2: failed to queue resume event [ 395.540673][T12186] raw-gadget.0 gadget.2: failed to queue suspend event [ 395.604569][T12471] raw-gadget.0 gadget.2: failed to queue resume event [ 395.627474][T12186] raw-gadget.0 gadget.2: failed to queue suspend event [ 395.671356][T12472] raw-gadget.0 gadget.2: failed to queue disconnect event [ 396.055738][ T9456] usb 3-1: USB disconnect, device number 21 [ 396.179581][T12510] netlink: 'syz.0.2495': attribute type 12 has an invalid length. [ 396.214497][ T9456] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 396.377475][ T9456] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 396.383033][ T9456] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 396.383062][ T9456] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 396.383078][ T9456] usb 3-1: Product: syz [ 396.383089][ T9456] usb 3-1: Manufacturer: syz [ 396.383101][ T9456] usb 3-1: SerialNumber: syz [ 396.446624][ T9456] usb 3-1: config 0 descriptor?? [ 396.449627][T12472] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 396.464723][ T9456] hub 3-1:0.0: bad descriptor, ignoring hub [ 396.464762][ T9456] hub 3-1:0.0: probe with driver hub failed with error -5 [ 396.765441][T12522] __nla_validate_parse: 12 callbacks suppressed [ 396.765455][T12522] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2499'. [ 396.765464][T12522] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2499'. [ 396.766058][T12522] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2499'. [ 396.766068][T12522] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2499'. [ 396.828252][ T9456] usb 3-1: USB disconnect, device number 22 [ 396.870403][T12525] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2500'. [ 397.546836][T12515] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 397.551246][T12541] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2507'. [ 397.551270][T12541] netlink: 'syz.0.2507': attribute type 1 has an invalid length. [ 397.599781][T12515] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 397.691710][T12545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2509'. [ 397.691733][T12545] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2509'. [ 397.692514][T12545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2509'. [ 397.692532][T12545] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2509'. [ 397.892890][T12551] netlink: 'syz.2.2512': attribute type 1 has an invalid length. [ 398.263155][T12560] tipc: New replicast peer: 127.0.0.2 [ 398.263553][T12560] tipc: Enabled bearer , priority 10 [ 398.283288][T12560] tipc: Disabling bearer [ 400.074965][T12598] net_ratelimit: 11 callbacks suppressed [ 400.074986][T12598] netlink: zone id is out of range [ 400.074994][T12598] netlink: zone id is out of range [ 400.075000][T12598] netlink: zone id is out of range [ 400.075008][T12598] netlink: zone id is out of range [ 400.075014][T12598] netlink: zone id is out of range [ 400.075021][T12598] netlink: zone id is out of range [ 400.075028][T12598] netlink: zone id is out of range [ 400.075036][T12598] netlink: zone id is out of range [ 400.075043][T12598] netlink: zone id is out of range [ 400.075050][T12598] netlink: set zone limit has 4 unknown bytes [ 402.506147][T12638] __nla_validate_parse: 22 callbacks suppressed [ 402.506167][T12638] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2545'. [ 402.506182][T12638] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2545'. [ 402.513264][T12638] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2545'. [ 402.513285][T12638] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2545'. [ 402.708017][T12644] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2548'. [ 402.824260][T12647] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2549'. [ 402.826343][T12647] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2549'. [ 403.709653][T12669] vlan2: entered promiscuous mode [ 403.709675][T12669] gretap0: entered promiscuous mode [ 403.868558][T12673] tipc: Enabling of bearer rejected, already enabled [ 403.870808][T12671] tipc: Disabling bearer [ 403.910960][T12675] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2560'. [ 403.910983][T12675] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2560'. [ 403.911932][T12675] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2560'. [ 404.654616][ T9456] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 404.814502][ T9456] usb 3-1: Using ep0 maxpacket: 32 [ 404.846941][ T9456] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 404.853839][ T9456] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 404.853871][ T9456] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 404.853892][ T9456] usb 3-1: Product: syz [ 404.853906][ T9456] usb 3-1: Manufacturer: syz [ 404.853921][ T9456] usb 3-1: SerialNumber: syz [ 404.924267][ T9456] usb 3-1: config 0 descriptor?? [ 404.930852][T12681] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 404.976856][ T9456] hub 3-1:0.0: bad descriptor, ignoring hub [ 404.976897][ T9456] hub 3-1:0.0: probe with driver hub failed with error -5 [ 405.579337][T12681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.579898][T12681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.936013][T12704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.936328][T12704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.105726][T12711] net_ratelimit: 1 callbacks suppressed [ 406.105741][T12711] netlink: zone id is out of range [ 406.105746][T12711] netlink: zone id is out of range [ 406.105750][T12711] netlink: zone id is out of range [ 406.105754][T12711] netlink: zone id is out of range [ 406.105758][T12711] netlink: zone id is out of range [ 406.105762][T12711] netlink: zone id is out of range [ 406.105766][T12711] netlink: zone id is out of range [ 406.105770][T12711] netlink: zone id is out of range [ 406.105774][T12711] netlink: zone id is out of range [ 406.105778][T12711] netlink: set zone limit has 4 unknown bytes [ 406.182136][T12704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.219484][T12704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.541226][T12186] raw-gadget.0 gadget.2: failed to queue suspend event [ 406.562380][T12718] netlink: 'syz.0.2576': attribute type 14 has an invalid length. [ 406.605080][T12703] raw-gadget.0 gadget.2: failed to queue resume event [ 406.638277][T12186] raw-gadget.0 gadget.2: failed to queue suspend event [ 406.704498][T12703] raw-gadget.0 gadget.2: failed to queue resume event [ 406.800752][T12186] raw-gadget.0 gadget.2: failed to queue suspend event [ 406.874545][T12703] raw-gadget.0 gadget.2: failed to queue resume event [ 406.896789][ T55] raw-gadget.0 gadget.2: failed to queue suspend event [ 406.966162][T12681] raw-gadget.0 gadget.2: failed to queue resume event [ 406.991383][ T55] raw-gadget.0 gadget.2: failed to queue suspend event [ 407.053328][T12704] raw-gadget.0 gadget.2: failed to queue disconnect event [ 407.435754][ T9456] usb 3-1: USB disconnect, device number 23 [ 407.566722][T12736] netlink: 'syz.0.2585': attribute type 12 has an invalid length. [ 407.566742][T12736] __nla_validate_parse: 7 callbacks suppressed [ 407.566753][T12736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2585'. [ 407.604469][ T9456] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 407.764552][ T9456] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 407.767695][ T9456] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 407.767725][ T9456] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 407.767746][ T9456] usb 3-1: Product: syz [ 407.767760][ T9456] usb 3-1: Manufacturer: syz [ 407.767775][ T9456] usb 3-1: SerialNumber: syz [ 407.822129][ T9456] usb 3-1: config 0 descriptor?? [ 407.835566][T12704] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 407.866296][ T9456] hub 3-1:0.0: bad descriptor, ignoring hub [ 407.866333][ T9456] hub 3-1:0.0: probe with driver hub failed with error -5 [ 408.234933][ T9456] usb 3-1: USB disconnect, device number 24 [ 408.384710][T12748] bond0: entered allmulticast mode [ 409.371932][T12770] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2601'. [ 409.371970][T12770] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2601'. [ 409.412203][T12770] netlink: 'syz.3.2601': attribute type 1 has an invalid length. [ 409.412223][T12770] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2601'. [ 410.087684][T12784] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 410.096167][T12787] bond0: entered allmulticast mode [ 410.123920][T12787] ipip1: entered allmulticast mode [ 410.187663][T12784] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 410.668944][T12807] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2614'. [ 410.669332][T12807] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2614'. [ 410.696168][T12806] netlink: 'syz.1.2613': attribute type 1 has an invalid length. [ 410.696189][T12806] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2613'. [ 410.696204][T12806] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2613'. [ 411.607764][T12833] bond0: entered allmulticast mode [ 411.668929][T12833] syztnl0: entered allmulticast mode [ 412.173225][T12845] netlink: 'syz.3.2627': attribute type 1 has an invalid length. [ 412.173239][T12845] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2627'. [ 412.173248][T12845] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2627'. [ 412.754491][ T9456] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 412.889672][T12870] netlink: 'syz.4.2638': attribute type 1 has an invalid length. [ 412.889693][T12870] __nla_validate_parse: 4 callbacks suppressed [ 412.889703][T12870] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2638'. [ 412.889719][T12870] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2638'. [ 412.904409][ T9456] usb 1-1: Using ep0 maxpacket: 32 [ 412.935281][ T9456] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 412.937834][ T9456] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 412.937863][ T9456] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 412.937884][ T9456] usb 1-1: Product: syz [ 412.937898][ T9456] usb 1-1: Manufacturer: syz [ 412.937913][ T9456] usb 1-1: SerialNumber: syz [ 412.993350][ T9456] usb 1-1: config 0 descriptor?? [ 413.004126][T12859] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 413.011029][T12872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2639'. [ 413.011053][T12872] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2639'. [ 413.011766][T12872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2639'. [ 413.011784][T12872] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2639'. [ 413.058961][ T9456] hub 1-1:0.0: bad descriptor, ignoring hub [ 413.059003][ T9456] hub 1-1:0.0: probe with driver hub failed with error -5 [ 413.627268][T12899] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2651'. [ 413.649223][T12900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2653'. [ 413.649247][T12900] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2653'. [ 413.649939][T12900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2653'. [ 413.671812][T12859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.672391][T12859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.032906][ T9456] usb 1-1: USB disconnect, device number 17 [ 415.822422][T12983] netlink: 'syz.4.2689': attribute type 12 has an invalid length. [ 415.828285][T12983] bond0: left allmulticast mode [ 415.872109][T12983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.248296][T13020] net_ratelimit: 1 callbacks suppressed [ 417.248317][T13020] netlink: zone id is out of range [ 417.248326][T13020] netlink: zone id is out of range [ 417.248334][T13020] netlink: zone id is out of range [ 417.248341][T13020] netlink: zone id is out of range [ 417.248348][T13020] netlink: zone id is out of range [ 417.248356][T13020] netlink: zone id is out of range [ 417.248363][T13020] netlink: zone id is out of range [ 417.248370][T13020] netlink: zone id is out of range [ 417.248378][T13020] netlink: zone id is out of range [ 417.248385][T13020] netlink: set zone limit has 4 unknown bytes [ 417.702827][T13035] tipc: New replicast peer: 127.0.0.2 [ 417.703157][T13035] tipc: Enabled bearer , priority 10 [ 417.703472][T13031] syzkaller0: entered promiscuous mode [ 417.703494][T13031] syzkaller0: entered allmulticast mode [ 417.884617][T13035] tipc: Disabling bearer [ 418.323758][T13035] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 418.325536][T13035] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 418.759285][T13047] __nla_validate_parse: 38 callbacks suppressed [ 418.759305][T13047] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2717'. [ 419.934533][ T5616] Bluetooth: hci2: command 0x0406 tx timeout [ 419.934609][ T5608] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 420.628010][T13065] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 420.676555][T13065] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 421.161578][T13092] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2737'. [ 421.161614][T13092] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2737'. [ 421.186183][T13092] netlink: 'syz.4.2737': attribute type 1 has an invalid length. [ 421.186204][T13092] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2737'. [ 421.252319][T13094] ipip1: entered allmulticast mode [ 421.506646][T13102] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2742'. [ 421.692319][T13108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2745'. [ 421.692343][T13108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2745'. [ 421.892224][T13108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2745'. [ 421.892249][T13108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2745'. [ 422.279184][T13126] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2753'. [ 422.824861][T13138] net_ratelimit: 2 callbacks suppressed [ 422.824882][T13138] netlink: zone id is out of range [ 422.824893][T13138] netlink: zone id is out of range [ 422.824901][T13138] netlink: zone id is out of range [ 422.824908][T13138] netlink: zone id is out of range [ 422.824916][T13138] netlink: zone id is out of range [ 422.824924][T13138] netlink: zone id is out of range [ 422.824932][T13138] netlink: zone id is out of range [ 422.824939][T13138] netlink: zone id is out of range [ 422.824947][T13138] netlink: zone id is out of range [ 422.824955][T13138] netlink: set zone limit has 4 unknown bytes [ 423.474785][ T5330] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 423.634542][ T5330] usb 1-1: Using ep0 maxpacket: 16 [ 423.636970][ T5330] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 423.637004][ T5330] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 423.637028][ T5330] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 423.637075][ T5330] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 423.637098][ T5330] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.651878][ T5330] usb 1-1: config 0 descriptor?? [ 424.497410][ T5330] usbhid 1-1:0.0: can't add hid device: -71 [ 424.497545][ T5330] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 424.528239][ T5330] usb 1-1: USB disconnect, device number 18 [ 424.723939][T13185] __nla_validate_parse: 1 callbacks suppressed [ 424.723956][T13185] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2776'. [ 424.746311][T13186] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2778'. [ 426.062794][T13211] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2789'. [ 426.199715][T13214] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2790'. [ 426.815833][ T5606] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 426.974630][ T9456] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 426.975049][ T5606] usb 4-1: Using ep0 maxpacket: 8 [ 426.978999][ T5606] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 426.979024][ T5606] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 426.981195][ T5606] usb 4-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 426.981222][ T5606] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.981241][ T5606] usb 4-1: Product: syz [ 426.981264][ T5606] usb 4-1: Manufacturer: syz [ 426.981290][ T5606] usb 4-1: SerialNumber: syz [ 427.124495][ T9456] usb 5-1: Using ep0 maxpacket: 16 [ 427.126398][ T9456] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 427.126430][ T9456] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 427.126488][ T9456] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 427.126514][ T9456] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 427.126529][ T9456] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.131820][ T9456] usb 5-1: config 0 descriptor?? [ 427.298380][T13224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.303085][T13224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.425655][ T5606] usb 4-1: unit 5 not found! [ 427.425671][ T5606] usb 4-1: unit 4 not found! [ 427.809789][ T9456] usbhid 5-1:0.0: can't add hid device: -71 [ 427.809915][ T9456] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 427.823669][ T9456] usb 5-1: USB disconnect, device number 24 [ 427.904165][T13239] net_ratelimit: 12 callbacks suppressed [ 427.904187][T13239] netlink: zone id is out of range [ 427.904196][T13239] netlink: zone id is out of range [ 427.904204][T13239] netlink: zone id is out of range [ 427.904212][T13239] netlink: zone id is out of range [ 427.904219][T13239] netlink: zone id is out of range [ 427.904227][T13239] netlink: zone id is out of range [ 427.904234][T13239] netlink: zone id is out of range [ 427.904242][T13239] netlink: zone id is out of range [ 427.904249][T13239] netlink: zone id is out of range [ 427.904257][T13239] netlink: set zone limit has 4 unknown bytes [ 428.039369][ T5606] usb 4-1: USB disconnect, device number 20 [ 428.164245][T13244] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2801'. [ 428.213802][ T7019] udevd[7019]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 428.376084][T13247] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2802'. [ 428.894540][ T5606] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 428.978520][T13265] netlink: 'syz.3.2812': attribute type 14 has an invalid length. [ 428.978541][T13265] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2812'. [ 428.978788][T13265] bond0: left allmulticast mode [ 428.988300][T13265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.013092][T13268] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2813'. [ 429.044464][ T5606] usb 1-1: Using ep0 maxpacket: 8 [ 429.046558][ T5606] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 429.046584][ T5606] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 429.049063][ T5606] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 429.049093][ T5606] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.049112][ T5606] usb 1-1: Product: syz [ 429.049127][ T5606] usb 1-1: Manufacturer: syz [ 429.049141][ T5606] usb 1-1: SerialNumber: syz [ 429.423294][T13257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.435007][T13257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.468135][ T5606] usb 1-1: unit 5 not found! [ 429.468159][ T5606] usb 1-1: unit 4 not found! [ 429.562271][ T5606] usb 1-1: USB disconnect, device number 19 [ 429.692251][ T7019] udevd[7019]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 430.112317][T13282] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2816'. [ 430.630341][T13288] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2821'. [ 430.644068][T13288] bond0: left allmulticast mode [ 430.661368][T13288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 430.737081][T13294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2823'. [ 430.737103][T13294] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2823'. [ 430.738068][T13294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2823'. [ 430.738086][T13294] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2823'. [ 430.766962][T13292] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2822'. [ 430.766986][T13292] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2822'. [ 430.770894][T13292] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2822'. [ 430.770915][T13292] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2822'. [ 431.612746][T13325] netlink: 'syz.2.2836': attribute type 1 has an invalid length. [ 432.194495][ T5606] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 432.344543][ T5606] usb 5-1: Using ep0 maxpacket: 16 [ 432.346582][ T5606] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.346614][ T5606] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.346633][ T5606] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 432.346658][ T5606] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 432.346670][ T5606] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.351408][ T5606] usb 5-1: config 0 descriptor?? [ 432.474404][ T9456] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 432.644616][ T9456] usb 2-1: Using ep0 maxpacket: 16 [ 432.647223][ T9456] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.647474][ T9456] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.647499][ T9456] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 432.647542][ T9456] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 432.647564][ T9456] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.728937][ T9456] usb 2-1: config 0 descriptor?? [ 432.958213][ T5606] usbhid 5-1:0.0: can't add hid device: -71 [ 432.958575][ T5606] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 432.993149][ T5606] usb 5-1: USB disconnect, device number 25 [ 433.485417][ T9456] usbhid 2-1:0.0: can't add hid device: -71 [ 433.485550][ T9456] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 433.491868][T13366] tipc: New replicast peer: 127.0.0.2 [ 433.524849][ T9456] usb 2-1: USB disconnect, device number 13 [ 433.557372][T13366] tipc: Enabled bearer , priority 10 [ 433.652714][T13369] tipc: New replicast peer: 127.0.0.2 [ 433.654262][T13369] tipc: Enabled bearer , priority 10 [ 433.665778][T13369] tipc: Disabling bearer [ 433.858231][T13369] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 433.878337][T13369] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 434.414503][ T5616] Bluetooth: hci2: command 0x0406 tx timeout [ 434.414571][ T5608] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 434.885426][T13406] bond0: entered allmulticast mode [ 434.901779][T13406] : entered allmulticast mode [ 434.903436][T13408] tipc: Enabling of bearer rejected, already enabled [ 434.908533][T13408] tipc: Disabling bearer [ 435.176082][T13419] __nla_validate_parse: 8 callbacks suppressed [ 435.176104][T13419] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2878'. [ 435.510103][T13431] tipc: New replicast peer: 127.0.0.2 [ 435.529341][T13431] tipc: Enabled bearer , priority 10 [ 435.542278][T13431] tipc: Disabling bearer [ 435.724393][T13436] bond0: (slave netdevsim0): Error: Device is in use and cannot be enslaved [ 435.982671][T13447] net_ratelimit: 43 callbacks suppressed [ 435.982690][T13447] netlink: zone id is out of range [ 435.982699][T13447] netlink: zone id is out of range [ 435.982706][T13447] netlink: zone id is out of range [ 435.982714][T13447] netlink: zone id is out of range [ 435.982722][T13447] netlink: zone id is out of range [ 435.982729][T13447] netlink: zone id is out of range [ 435.982736][T13447] netlink: zone id is out of range [ 435.982744][T13447] netlink: zone id is out of range [ 435.982751][T13447] netlink: zone id is out of range [ 435.982758][T13447] netlink: set zone limit has 4 unknown bytes [ 437.051674][T13470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2901'. [ 437.051698][T13470] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2901'. [ 437.057255][T13470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2901'. [ 437.057281][T13470] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2901'. [ 437.494489][ T9456] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 437.644575][ T9456] usb 1-1: Using ep0 maxpacket: 16 [ 437.688288][ T9456] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 437.688323][ T9456] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 437.688346][ T9456] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 437.688389][ T9456] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 437.688412][ T9456] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.761452][ T9456] usb 1-1: config 0 descriptor?? [ 438.349828][ T9456] usbhid 1-1:0.0: can't add hid device: -71 [ 438.349934][ T9456] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 438.397181][ T9456] usb 1-1: USB disconnect, device number 20 [ 438.757766][T13478] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 438.804603][T13478] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 439.233830][T13512] tipc: New replicast peer: 127.0.0.2 [ 439.234277][T13512] tipc: Enabled bearer , priority 10 [ 439.237793][T13512] tipc: Disabling bearer [ 440.029471][T13526] syzkaller0: entered promiscuous mode [ 440.029497][T13526] syzkaller0: entered allmulticast mode [ 440.037687][T13529] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2924'. [ 440.182933][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.218744][T13535] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2927'. [ 440.416480][ T5616] Bluetooth: hci2: command 0x0406 tx timeout [ 440.416547][ T5608] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 441.759684][T13568] tipc: Cannot configure node identity twice [ 442.466167][T13578] net_ratelimit: 11 callbacks suppressed [ 442.466189][T13578] netlink: zone id is out of range [ 442.466198][T13578] netlink: zone id is out of range [ 442.466206][T13578] netlink: zone id is out of range [ 442.466213][T13578] netlink: zone id is out of range [ 442.466222][T13578] netlink: zone id is out of range [ 442.466229][T13578] netlink: zone id is out of range [ 442.466237][T13578] netlink: zone id is out of range [ 442.466244][T13578] netlink: zone id is out of range [ 442.466252][T13578] netlink: zone id is out of range [ 442.466260][T13578] netlink: set zone limit has 4 unknown bytes [ 444.701073][T13597] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 444.851985][T13631] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2965'. [ 444.852107][T13631] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2965'. [ 444.853310][T13631] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2965'. [ 444.853336][T13631] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2965'. [ 444.917973][T13597] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 445.382410][T13645] tipc: Cannot configure node identity twice [ 446.095781][T13678] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2972'. [ 446.974043][T13701] warning: `syz.3.2980' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 448.179188][T13703] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 448.198495][T13723] net_ratelimit: 12 callbacks suppressed [ 448.198513][T13723] netlink: zone id is out of range [ 448.198521][T13723] netlink: zone id is out of range [ 448.198529][T13723] netlink: zone id is out of range [ 448.198536][T13723] netlink: zone id is out of range [ 448.198543][T13723] netlink: zone id is out of range [ 448.198551][T13723] netlink: zone id is out of range [ 448.198558][T13723] netlink: zone id is out of range [ 448.198566][T13723] netlink: zone id is out of range [ 448.198573][T13723] netlink: zone id is out of range [ 448.198591][T13723] netlink: set zone limit has 4 unknown bytes [ 448.327806][T13703] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 448.974989][ T5330] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 449.124765][ T5330] usb 2-1: Using ep0 maxpacket: 8 [ 449.128101][ T5330] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 449.128129][ T5330] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 449.130671][ T5330] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 449.130701][ T5330] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.130722][ T5330] usb 2-1: Product: syz [ 449.130737][ T5330] usb 2-1: Manufacturer: syz [ 449.130751][ T5330] usb 2-1: SerialNumber: syz [ 449.521646][T13750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.537929][T13750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.592899][ T5330] usb 2-1: unit 5 not found! [ 449.592924][ T5330] usb 2-1: unit 4 not found! [ 449.900696][ T5330] usb 2-1: USB disconnect, device number 14 [ 450.053015][ T7019] udevd[7019]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 450.523773][T13773] Illegal XDP return value 4294965632 on prog (id 186) dev syz_tun, expect packet loss! [ 451.131095][T13777] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3010'. [ 451.131120][T13777] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3010'. [ 451.131859][T13777] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3010'. [ 451.131876][T13777] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3010'. [ 452.288830][T13801] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3021'. [ 452.339556][T13801] bond0: entered allmulticast mode [ 452.684437][ T5330] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 452.705817][ T5606] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 452.834417][ T5330] usb 4-1: Using ep0 maxpacket: 16 [ 452.837572][ T5330] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 452.837603][ T5330] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 452.837615][ T5330] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 452.837639][ T5330] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 452.837652][ T5330] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.844867][ T5330] usb 4-1: config 0 descriptor?? [ 452.872259][ T5606] usb 3-1: Using ep0 maxpacket: 16 [ 452.914681][ T5606] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 452.914715][ T5606] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 452.914734][ T5606] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 452.914777][ T5606] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 452.914799][ T5606] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.982944][ T5606] usb 3-1: config 0 descriptor?? [ 453.467568][ T5330] usbhid 4-1:0.0: can't add hid device: -71 [ 453.467690][ T5330] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 453.480739][ T5330] usb 4-1: USB disconnect, device number 21 [ 453.537557][ T5606] usbhid 3-1:0.0: can't add hid device: -71 [ 453.537686][ T5606] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 453.560648][ T5606] usb 3-1: USB disconnect, device number 25 [ 453.969813][T13826] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3033'. [ 453.969837][T13826] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3033'. [ 453.970748][T13826] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3033'. [ 453.970766][T13826] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3033'. [ 454.014522][ T5616] Bluetooth: hci2: command 0x0406 tx timeout [ 454.014589][ T5608] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 454.121401][T13833] tipc: New replicast peer: 127.0.0.2 [ 454.121818][T13833] tipc: Enabled bearer , priority 10 [ 454.123042][T13833] tipc: Disabling bearer [ 454.304246][T13833] bond0: (slave netdevsim0): Error: Device is in use and cannot be enslaved [ 454.498007][T13848] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3042'. [ 455.904477][T11604] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 456.054436][T11604] usb 2-1: Using ep0 maxpacket: 8 [ 456.066347][T11604] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 456.066373][T11604] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 456.091549][T11604] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 456.091580][T11604] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.091600][T11604] usb 2-1: Product: syz [ 456.091699][T11604] usb 2-1: Manufacturer: syz [ 456.091714][T11604] usb 2-1: SerialNumber: syz [ 456.327261][T13885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.327844][T13885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.372458][T11604] usb 2-1: unit 5 not found! [ 456.372474][T11604] usb 2-1: unit 4 not found! [ 456.414649][ T5616] Bluetooth: hci2: command 0x0406 tx timeout [ 456.414717][ T5608] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 456.427511][T11604] usb 2-1: USB disconnect, device number 15 [ 456.673937][ T7019] udevd[7019]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 456.852412][T13906] __nla_validate_parse: 4 callbacks suppressed [ 456.852432][T13906] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3067'. [ 456.994648][T13912] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3070'. [ 457.118864][T13918] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3073'. [ 457.333814][ T5330] hid-generic 0005:15C2:5505.0001: collection stack underflow [ 457.333857][ T5330] hid-generic 0005:15C2:5505.0001: item 0 2 0 12 parsing failed [ 457.336611][T11604] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 457.341628][ T5330] hid-generic 0005:15C2:5505.0001: probe with driver hid-generic failed with error -22 [ 457.484573][T11604] usb 5-1: Using ep0 maxpacket: 16 [ 457.488467][T11604] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 457.488500][T11604] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 457.488512][T11604] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 457.488536][T11604] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 457.488548][T11604] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.492184][T11604] usb 5-1: config 0 descriptor?? [ 458.067657][ T5606] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 458.120795][T11604] usbhid 5-1:0.0: can't add hid device: -71 [ 458.120904][T11604] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 458.142403][T11604] usb 5-1: USB disconnect, device number 26 [ 458.224525][ T5606] usb 1-1: Using ep0 maxpacket: 8 [ 458.227403][ T5606] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 458.227429][ T5606] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 458.230032][ T5606] usb 1-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 458.230060][ T5606] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.230080][ T5606] usb 1-1: Product: syz [ 458.230094][ T5606] usb 1-1: Manufacturer: syz [ 458.230108][ T5606] usb 1-1: SerialNumber: syz [ 458.460617][T13945] net_ratelimit: 1 callbacks suppressed [ 458.460638][T13945] netlink: zone id is out of range [ 458.460646][T13945] netlink: zone id is out of range [ 458.460654][T13945] netlink: zone id is out of range [ 458.460661][T13945] netlink: zone id is out of range [ 458.460668][T13945] netlink: zone id is out of range [ 458.460676][T13945] netlink: zone id is out of range [ 458.460736][T13945] netlink: zone id is out of range [ 458.460744][T13945] netlink: zone id is out of range [ 458.460751][T13945] netlink: zone id is out of range [ 458.460759][T13945] netlink: set zone limit has 4 unknown bytes [ 458.623529][T13937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 458.637306][T13937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 458.675340][ T5606] usb 1-1: unit 5 not found! [ 458.675363][ T5606] usb 1-1: unit 4 not found! [ 458.770120][ T5606] usb 1-1: USB disconnect, device number 21 [ 458.852191][ T7019] udevd[7019]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 459.923440][T13989] tipc: New replicast peer: 127.0.0.2 [ 459.923780][T13989] tipc: Enabled bearer , priority 10 [ 459.941164][T13989] tipc: Disabling bearer [ 460.198257][T13989] bond0: (slave netdevsim0): Error: Device is in use and cannot be enslaved [ 460.366072][T14000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3107'. [ 460.366097][T14000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3107'. [ 460.373375][T14000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3107'. [ 460.373398][T14000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3107'. [ 461.164489][ T5330] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 461.314465][ T5330] usb 4-1: Using ep0 maxpacket: 16 [ 461.316710][ T5330] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.316743][ T5330] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 461.316765][ T5330] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 461.316805][ T5330] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 461.316828][ T5330] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.329602][ T5330] usb 4-1: config 0 descriptor?? [ 461.415445][T14030] tipc: New replicast peer: 127.0.0.2 [ 461.425413][T14030] tipc: Enabled bearer , priority 10 [ 461.427689][T14030] tipc: Disabling bearer [ 461.721943][T14030] bond0: (slave netdevsim0): Error: Device is in use and cannot be enslaved [ 461.885402][T11604] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 461.914036][ T5330] usbhid 4-1:0.0: can't add hid device: -71 [ 461.914150][ T5330] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 461.961291][ T5330] usb 4-1: USB disconnect, device number 22 [ 462.035463][T11604] usb 2-1: Using ep0 maxpacket: 32 [ 462.044540][T11604] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 462.064769][T11604] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 462.064799][T11604] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 462.064819][T11604] usb 2-1: Product: syz [ 462.064832][T11604] usb 2-1: Manufacturer: syz [ 462.064846][T11604] usb 2-1: SerialNumber: syz [ 462.107000][T11604] usb 2-1: config 0 descriptor?? [ 462.109854][T14033] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 462.124911][T11604] hub 2-1:0.0: bad descriptor, ignoring hub [ 462.124950][T11604] hub 2-1:0.0: probe with driver hub failed with error -5 [ 462.487424][T14061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3132'. [ 462.749016][T14033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.749628][T14033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.864222][T14079] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3139'. [ 462.866469][T14079] bond0: left allmulticast mode [ 462.874194][T14079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 463.107475][T14081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.108047][T14081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.322691][T14081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.323415][T14081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.617382][T14104] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3150'. [ 463.712644][T12189] raw-gadget.1 gadget.1: failed to queue suspend event [ 463.775390][T14077] raw-gadget.1 gadget.1: failed to queue resume event [ 463.781738][T14108] tipc: Enabled bearer , priority 0 [ 463.782678][T14108] syzkaller0: entered promiscuous mode [ 463.782693][T14108] syzkaller0: entered allmulticast mode [ 463.797016][ T38] raw-gadget.1 gadget.1: failed to queue suspend event [ 463.807631][T14108] tipc: Resetting bearer [ 463.904763][T14107] tipc: Resetting bearer [ 463.914583][T14033] raw-gadget.1 gadget.1: failed to queue resume event [ 463.936561][ T66] raw-gadget.1 gadget.1: failed to queue suspend event [ 464.032095][T14033] raw-gadget.1 gadget.1: failed to queue resume event [ 464.055511][ T67] raw-gadget.1 gadget.1: failed to queue suspend event [ 464.126233][T14107] tipc: Disabling bearer [ 464.134683][T14033] raw-gadget.1 gadget.1: failed to queue resume event [ 464.155417][ T38] raw-gadget.1 gadget.1: failed to queue suspend event [ 464.233074][T14081] raw-gadget.1 gadget.1: failed to queue disconnect event [ 464.605810][ T5809] usb 2-1: USB disconnect, device number 16 [ 464.784473][ T5809] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 464.937677][ T5809] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 464.943526][ T5809] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 464.943544][ T5809] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 464.943555][ T5809] usb 2-1: Product: syz [ 464.943563][ T5809] usb 2-1: Manufacturer: syz [ 464.943576][ T5809] usb 2-1: SerialNumber: syz [ 464.989273][ T5809] usb 2-1: config 0 descriptor?? [ 464.990540][T14081] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 465.009342][ T5809] hub 2-1:0.0: bad descriptor, ignoring hub [ 465.009367][ T5809] hub 2-1:0.0: probe with driver hub failed with error -5 [ 465.454850][ T5809] usb 2-1: USB disconnect, device number 17 [ 465.746158][T14148] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3169'. [ 466.525542][T14177] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3181'. [ 466.525567][T14177] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3181'. [ 466.528980][T14177] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3181'. [ 466.529001][T14177] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3181'. [ 467.887621][T14219] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3195'. [ 467.924285][T14219] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3195'. [ 467.924356][T14219] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3195'. [ 467.930470][T14219] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3195'. [ 467.930493][T14219] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3195'. [ 468.214495][ T5606] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 468.367262][ T5606] usb 3-1: Using ep0 maxpacket: 32 [ 468.369351][ T5606] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 468.386093][ T5606] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 468.386122][ T5606] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 468.386140][ T5606] usb 3-1: Product: syz [ 468.386153][ T5606] usb 3-1: Manufacturer: syz [ 468.386166][ T5606] usb 3-1: SerialNumber: syz [ 468.434859][ T5606] usb 3-1: config 0 descriptor?? [ 468.440753][T14221] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 468.443006][ T5606] hub 3-1:0.0: bad descriptor, ignoring hub [ 468.443046][ T5606] hub 3-1:0.0: probe with driver hub failed with error -5 [ 469.073229][T14221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.125184][T14221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.255879][T14258] tipc: Enabled bearer , priority 0 [ 469.257874][T14258] syzkaller0: entered promiscuous mode [ 469.257903][T14258] syzkaller0: entered allmulticast mode [ 469.305017][T14258] tipc: Resetting bearer [ 469.356896][T14255] tipc: Resetting bearer [ 469.462373][T14259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.462986][T14259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.670011][T14255] tipc: Disabling bearer [ 469.685247][T14259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.685821][T14259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.022410][ T66] raw-gadget.0 gadget.2: failed to queue suspend event [ 470.055753][T14270] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3211'. [ 470.055776][T14270] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3211'. [ 470.060368][T14270] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3211'. [ 470.060388][T14270] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3211'. [ 470.069144][ T5616] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 470.084592][T14254] raw-gadget.0 gadget.2: failed to queue resume event [ 470.122865][ T771] raw-gadget.0 gadget.2: failed to queue suspend event [ 470.134788][ T5616] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 470.171499][ T5616] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 470.183878][ T5616] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 470.193943][ T5616] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 470.215580][T14221] raw-gadget.0 gadget.2: failed to queue resume event [ 470.286738][ T66] raw-gadget.0 gadget.2: failed to queue suspend event [ 470.435380][T14221] raw-gadget.0 gadget.2: failed to queue resume event [ 470.455835][ T66] raw-gadget.0 gadget.2: failed to queue suspend event [ 470.527270][ T9456] hid-generic 0005:15C2:5505.0002: collection stack underflow [ 470.527302][ T9456] hid-generic 0005:15C2:5505.0002: item 0 2 0 12 parsing failed [ 470.527906][ T9456] hid-generic 0005:15C2:5505.0002: probe with driver hid-generic failed with error -22 [ 470.541316][T14259] raw-gadget.0 gadget.2: failed to queue disconnect event [ 470.976360][ T9456] usb 3-1: USB disconnect, device number 26 [ 471.124448][ T9456] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 471.303063][ T9456] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 471.308570][ T9456] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 471.308599][ T9456] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 471.308619][ T9456] usb 3-1: Product: syz [ 471.308633][ T9456] usb 3-1: Manufacturer: syz [ 471.308646][ T9456] usb 3-1: SerialNumber: syz [ 471.324455][ T9456] usb 3-1: config 0 descriptor?? [ 471.325289][T14259] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 471.334696][ T9456] hub 3-1:0.0: bad descriptor, ignoring hub [ 471.334735][ T9456] hub 3-1:0.0: probe with driver hub failed with error -5 [ 471.399427][T14313] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3225'. [ 471.745431][ T5809] usb 3-1: USB disconnect, device number 27 [ 472.334462][ T5616] Bluetooth: hci0: command tx timeout [ 472.636921][T14268] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.642063][T14268] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.642270][T14268] bridge_slave_0: entered allmulticast mode [ 472.643878][T14268] bridge_slave_0: entered promiscuous mode [ 472.685065][T14268] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.686793][T14268] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.687029][T14268] bridge_slave_1: entered allmulticast mode [ 472.689581][T14268] bridge_slave_1: entered promiscuous mode [ 472.764272][T14268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 472.789389][T14268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 472.842816][T14268] team0: Port device team_slave_0 added [ 472.852660][T14268] team0: Port device team_slave_1 added [ 472.904699][T14268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 472.904713][T14268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 472.904737][T14268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 472.911331][T14268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 472.911347][T14268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 472.911372][T14268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 473.504720][T14268] hsr_slave_0: entered promiscuous mode [ 473.509661][T14268] hsr_slave_1: entered promiscuous mode [ 473.536181][T14268] debugfs: 'hsr0' already exists in 'hsr' [ 473.536831][T14268] Cannot create hsr debugfs directory [ 473.866053][T14352] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 473.923888][T14352] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 474.415146][ C0] ------------[ cut here ]------------ [ 474.415160][ C0] workqueue: cannot queue hci_cmd_timeout on wq hci0 [ 474.415362][ C0] WARNING: kernel/workqueue.c:2306 at __queue_work+0xd91/0x10f0, CPU#0: ktimers/0/16 [ 474.415498][ C0] Modules linked in: [ 474.415535][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 474.415589][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 474.415603][ C0] RIP: 0010:__queue_work+0xdae/0x10f0 [ 474.415655][ C0] Code: 81 c3 68 01 00 00 4c 8d 35 af c8 24 0e 48 89 f8 48 c1 e8 03 42 80 3c 20 00 74 05 e8 1c 73 a1 00 49 8b 77 18 4c 89 f7 48 89 da <67> 48 0f b9 3a 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff [ 474.415667][ C0] RSP: 0018:ffffc90000157990 EFLAGS: 00010046 [ 474.415711][ C0] RAX: 1ffff1100c27a153 RBX: ffff888033edb168 RCX: ffff88801cae8000 [ 474.415722][ C0] RDX: ffff888033edb168 RSI: ffffffff8a35bb60 RDI: ffffffff8fb2a270 [ 474.415732][ C0] RBP: 0000000000000100 R08: 0000000000000000 R09: 0000000000000100 [ 474.415741][ C0] R10: dffffc0000000000 R11: ffffffff818de0f0 R12: dffffc0000000000 [ 474.415752][ C0] R13: 0000000000000008 R14: ffffffff8fb2a270 R15: ffff8880613d0a80 [ 474.415762][ C0] FS: 0000000000000000(0000) GS:ffff888125c3e000(0000) knlGS:0000000000000000 [ 474.415774][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 474.415785][ C0] CR2: 00007f70e2f68e9c CR3: 0000000039ea2000 CR4: 00000000003526f0 [ 474.415799][ C0] Call Trace: [ 474.415841][ C0] [ 474.415907][ C0] ? call_timer_fn+0xd4/0x5e0 [ 474.416068][ C0] call_timer_fn+0x192/0x5e0 [ 474.416086][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 474.416103][ C0] ? call_timer_fn+0xd4/0x5e0 [ 474.416119][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 474.416141][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 474.416159][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 474.416222][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 474.416242][ C0] __run_timer_base+0x73c/0x9b0 [ 474.416273][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 474.416293][ C0] ? __local_bh_disable_ip+0x3c/0x420 [ 474.416356][ C0] ? __local_bh_disable_ip+0x3c/0x420 [ 474.416377][ C0] run_timer_softirq+0xb7/0x170 [ 474.416393][ C0] handle_softirqs+0x1d9/0x6c0 [ 474.416418][ C0] run_ktimerd+0x69/0x100 [ 474.416440][ C0] smpboot_thread_fn+0x57c/0xa80 [ 474.416494][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 474.416517][ C0] kthread+0x388/0x470 [ 474.416589][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 474.416605][ C0] ? __pfx_kthread+0x10/0x10 [ 474.416624][ C0] ret_from_fork+0x514/0xb70 [ 474.416692][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 474.416714][ C0] ? __switch_to+0xc89/0x1420 [ 474.416763][ C0] ? __pfx_kthread+0x10/0x10 [ 474.416789][ C0] ret_from_fork_asm+0x1a/0x30 [ 474.416862][ C0] [ 474.416875][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 474.416887][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 474.416903][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 474.416912][ C0] Call Trace: [ 474.416918][ C0] [ 474.416924][ C0] vpanic+0x56c/0xa60 [ 474.416944][ C0] ? __pfx__printk+0x10/0x10 [ 474.416961][ C0] ? __pfx_vpanic+0x10/0x10 [ 474.416974][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 474.417060][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 474.417082][ C0] panic+0xc5/0xd0 [ 474.417096][ C0] ? __pfx_panic+0x10/0x10 [ 474.417117][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 474.417136][ C0] __warn+0x315/0x4c0 [ 474.417150][ C0] ? __queue_work+0xd91/0x10f0 [ 474.417173][ C0] ? __queue_work+0xd91/0x10f0 [ 474.417192][ C0] __report_bug+0x276/0x570 [ 474.417316][ C0] ? __queue_work+0xd91/0x10f0 [ 474.417336][ C0] ? __pfx___report_bug+0x10/0x10 [ 474.417356][ C0] ? __lock_acquire+0x683/0x2ce0 [ 474.417376][ C0] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 474.417397][ C0] ? look_up_lock_class+0x57/0x110 [ 474.417451][ C0] ? register_lock_class+0x31/0x2e0 [ 474.417471][ C0] report_bug_entry+0x19a/0x290 [ 474.417490][ C0] ? __queue_work+0xdae/0x10f0 [ 474.417505][ C0] ? __queue_work+0xdb3/0x10f0 [ 474.417521][ C0] handle_bug+0xce/0x200 [ 474.417570][ C0] exc_invalid_op+0x1a/0x50 [ 474.417592][ C0] asm_exc_invalid_op+0x1a/0x20 [ 474.417626][ C0] RIP: 0010:__queue_work+0xdae/0x10f0 [ 474.417664][ C0] Code: 81 c3 68 01 00 00 4c 8d 35 af c8 24 0e 48 89 f8 48 c1 e8 03 42 80 3c 20 00 74 05 e8 1c 73 a1 00 49 8b 77 18 4c 89 f7 48 89 da <67> 48 0f b9 3a 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff [ 474.417678][ C0] RSP: 0018:ffffc90000157990 EFLAGS: 00010046 [ 474.417693][ C0] RAX: 1ffff1100c27a153 RBX: ffff888033edb168 RCX: ffff88801cae8000 [ 474.417706][ C0] RDX: ffff888033edb168 RSI: ffffffff8a35bb60 RDI: ffffffff8fb2a270 [ 474.417718][ C0] RBP: 0000000000000100 R08: 0000000000000000 R09: 0000000000000100 [ 474.417726][ C0] R10: dffffc0000000000 R11: ffffffff818de0f0 R12: dffffc0000000000 [ 474.417736][ C0] R13: 0000000000000008 R14: ffffffff8fb2a270 R15: ffff8880613d0a80 [ 474.417749][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 474.417769][ C0] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 474.417789][ C0] ? call_timer_fn+0xd4/0x5e0 [ 474.417817][ C0] call_timer_fn+0x192/0x5e0 [ 474.417834][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 474.417850][ C0] ? call_timer_fn+0xd4/0x5e0 [ 474.417865][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 474.417888][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 474.417906][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 474.417926][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 474.417943][ C0] __run_timer_base+0x73c/0x9b0 [ 474.417972][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 474.417991][ C0] ? __local_bh_disable_ip+0x3c/0x420 [ 474.418011][ C0] ? __local_bh_disable_ip+0x3c/0x420 [ 474.418033][ C0] run_timer_softirq+0xb7/0x170 [ 474.418061][ C0] handle_softirqs+0x1d9/0x6c0 [ 474.418092][ C0] run_ktimerd+0x69/0x100 [ 474.418110][ C0] smpboot_thread_fn+0x57c/0xa80 [ 474.418132][ C0] ? smpboot_thread_fn+0x4e/0xa80 [ 474.418156][ C0] kthread+0x388/0x470 [ 474.418178][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 474.418216][ C0] ? __pfx_kthread+0x10/0x10 [ 474.418236][ C0] ret_from_fork+0x514/0xb70 [ 474.418263][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 474.418285][ C0] ? __switch_to+0xc89/0x1420 [ 474.418310][ C0] ? __pfx_kthread+0x10/0x10 [ 474.418333][ C0] ret_from_fork_asm+0x1a/0x30 [ 474.418370][ C0] [ 474.418698][ C0] Kernel Offset: disabled