last executing test programs: 6.087244985s ago: executing program 2 (id=1742): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001c00010029bd7000fedbdf2507000000", @ANYRES32=r0, @ANYBLOB="80007e0a0a000200aaaa"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x44801}, 0x840) 5.64972063s ago: executing program 3 (id=1743): capset(0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) memfd_secret(0x80000) ioctl$OCFS2_IOC_MOVE_EXT(r0, 0x40406f06, &(0x7f0000000040)={0xfffffffffffffffa, 0x4, 0x1000, 0x8, 0x3}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x4000000}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x3c}}, 0x0) 5.454286101s ago: executing program 3 (id=1746): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) writev(r0, 0x0, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000300)=ANY=[], 0xfc}}, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8880, 0x85) lseek(r1, 0x3, 0x1) getdents64(r1, 0x0, 0x4f) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) bind$inet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @remote}}}], 0x20}, 0x0) 5.387264561s ago: executing program 2 (id=1748): syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) 5.182536044s ago: executing program 2 (id=1752): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xf, 0x8, 0x2, 0x80000000, 0x6, 0xc, 0x33c, 0x6c7, 0x3}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b92a, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7ff}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05031400d3fc220000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 5.167993619s ago: executing program 1 (id=1753): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) r6 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000004a40)={0x58, 0x0, &(0x7f0000000800)=[@free_buffer={0x40086303, r6}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@fd={0x66642a85, 0x0, r4}, @fda={0x66646185, 0x1, 0x0, 0x3b}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x19}}, &(0x7f0000000380)={0x0, 0x18, 0x38}}, 0x400}], 0x0, 0x0, 0x0}) socket$inet_sctp(0x2, 0x1, 0x84) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) umount2(0x0, 0x1) syz_emit_ethernet(0x62, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800457e00540d8e000072019078ac1414bbac1414bb04009078000000004c010003006500781188000ee000000100000000071bbb0a0101010a010101ac1e00018d3e01007f000001e0"], 0x0) 4.854239795s ago: executing program 2 (id=1756): capset(0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) memfd_secret(0x80000) ioctl$OCFS2_IOC_MOVE_EXT(r0, 0x40406f06, &(0x7f0000000040)={0xfffffffffffffffa, 0x4, 0x1000, 0x8, 0x3}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x4000000}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x3c}}, 0x0) 4.852888617s ago: executing program 3 (id=1757): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f0000000740)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="a0e902519de1f68ea8954ac606ff", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 4.828192349s ago: executing program 0 (id=1759): r0 = fsmount(0xffffffffffffffff, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$AUDIT_TRIM(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x10, 0x3f6, 0x200, 0x70bd2a, 0x25dfdbfc, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8004}, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="a0fdffff050605002abd7000fe070000000000000046689a0d5e3714000006140060002001000000"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0x1b, 0x4e26, 0x10001, @local, 0xb}}}, 0x30) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x1c, 0x0, &(0x7f0000000000)=[@register_looper, @register_looper, @increfs_done={0x40106308, 0x2}], 0x0, 0x0, &(0x7f00000014c0)}) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, 0x0) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x4040844) 4.1207666s ago: executing program 3 (id=1761): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) close(0x3) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r2, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) listen(r2, 0x80) accept$netrom(r2, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x806000) write$cgroup_int(r3, 0x0, 0x0) write$tun(r0, &(0x7f00000018c0)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x10, 0x800}, @mpls={[], @ipv4=@generic={{0x5, 0x4, 0x0, 0x13, 0x14, 0x68, 0x0, 0xb, 0x4, 0x0, @remote, @broadcast}}}}, 0x22) 4.012536016s ago: executing program 2 (id=1762): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) socket$nl_xfrm(0x10, 0x3, 0x6) sendto(r0, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0xa8442, 0x0) 3.702197062s ago: executing program 4 (id=1764): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000001d40)=ANY=[], 0x0) 3.428758672s ago: executing program 4 (id=1765): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xf, 0x8, 0x2, 0x80000000, 0x6, 0xc, 0x33c, 0x6c7, 0x3}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b92a, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7ff}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) 2.728508558s ago: executing program 3 (id=1766): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xf, 0x8, 0x2, 0x80000000, 0x6, 0xc, 0x33c, 0x6c7, 0x3}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b92a, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7ff}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05031400d3fc220000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.632573999s ago: executing program 4 (id=1767): r0 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x3b6}) io_uring_enter(r0, 0x6145, 0x7721, 0x17, 0x0, 0x0) 2.304810241s ago: executing program 4 (id=1768): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) read$msr(0xffffffffffffffff, &(0x7f0000002240)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000300)=ANY=[], 0xfc}}, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8880, 0x85) lseek(r0, 0x3, 0x1) getdents64(r0, 0x0, 0x4f) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) bind$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000500), 0x0, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @remote}}}], 0x20}, 0x0) 2.0148095s ago: executing program 1 (id=1769): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettfilter={0x3c, 0x2e, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xe, 0xf}, {0x8, 0xffff}}, [{0x8, 0xb, 0x3}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xc0e}]}, 0x3c}}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a310000000014000380"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e", 0x23}], 0x1}, 0x0) 2.014229105s ago: executing program 3 (id=1770): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 1.884102166s ago: executing program 1 (id=1771): set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x100000000ff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, 0x0) 1.846402027s ago: executing program 0 (id=1772): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x28, r4, 0x1, 0x0, 0x25dfdbff, {0x7}, [@L2TP_ATTR_IFNAME={0x14}]}, 0x28}}, 0x2) 1.778565405s ago: executing program 1 (id=1773): syz_open_dev$evdev(&(0x7f0000000040), 0x49c, 0x101000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x25) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r1, r3, 0x25, 0x2, @val=@netfilter={0x3, 0x1, 0x0, 0x1}}, 0x20) syz_emit_ethernet(0x2a, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x64, 0x0, 0x24, 0x2, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x24}}, @echo_reply={0x0, 0x0, 0x0, 0x68, 0xbb95}}}}}, 0x0) 995.042406ms ago: executing program 4 (id=1774): r0 = socket(0x10, 0x3, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@ipv6_newnexthop={0x38, 0x68, 0x1, 0x70bd25, 0xfffffffe, {}, [@NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x87, 0x0, 0x4, 0x0, 0x10, 0x8, 0x8}}}}}, @NHA_OIF={0x8, 0x5, r2}]}, 0x38}}, 0x40040d0) 930.510187ms ago: executing program 0 (id=1775): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000001d40)=ANY=[], 0x0) 856.995153ms ago: executing program 1 (id=1776): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) close(0x3) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r2, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) listen(r2, 0x80) accept$netrom(r2, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x806000) write$cgroup_int(r3, 0x0, 0x0) write$tun(r0, &(0x7f00000018c0)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x10, 0x800}, @mpls={[], @ipv4=@generic={{0x5, 0x4, 0x0, 0x13, 0x14, 0x68, 0x0, 0xb, 0x4, 0x0, @remote, @broadcast}}}}, 0x22) 801.10585ms ago: executing program 0 (id=1777): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xf, 0x8, 0x2, 0x80000000, 0x6, 0xc, 0x33c, 0x6c7, 0x3}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b92a, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7ff}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) 698.530261ms ago: executing program 4 (id=1778): socket$inet_udp(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000940)=[{0x6, 0x0, 0x1, 0x7fff8000}]}) syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) r0 = syz_open_dev$dvb_demux(&(0x7f00000002c0), 0x1, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000200)={0x7, {"9db867d09ed91aa9c5c29f2f1e4be6bf", "cc6c2d12e0353c0e42899a29fdefe3bc", "9defe9f49655f386b84e6bb715dac54f"}, 0x445, 0x7}) 408.218835ms ago: executing program 0 (id=1779): r0 = io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x3b6}) io_uring_enter(r0, 0x6145, 0x7721, 0x17, 0x0, 0x0) 204.223441ms ago: executing program 0 (id=1780): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) r6 = mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000004a40)={0x58, 0x0, &(0x7f0000000800)=[@free_buffer={0x40086303, r6}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@fd={0x66642a85, 0x0, r4}, @fda={0x66646185, 0x1, 0x0, 0x3b}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x19}}, &(0x7f0000000380)={0x0, 0x18, 0x38}}, 0x400}], 0x0, 0x0, 0x0}) socket$inet_sctp(0x2, 0x1, 0x84) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) umount2(0x0, 0x1) syz_emit_ethernet(0x62, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800457e00540d8e000072019078ac1414bbac1414bb04009078000000004c010003006500781188000ee000000100000000071bbb0a0101010a010101ac1e00018d3e01007f000001e0"], 0x0) 76.881289ms ago: executing program 1 (id=1781): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettfilter={0x3c, 0x2e, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xe, 0xf}, {0x8, 0xffff}}, [{0x8, 0xb, 0x3}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xc0e}]}, 0x3c}}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a310000000014000380"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e", 0x23}], 0x1}, 0x0) 0s ago: executing program 2 (id=1782): r0 = fsmount(0xffffffffffffffff, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$AUDIT_TRIM(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x10, 0x3f6, 0x200, 0x70bd2a, 0x25dfdbfc, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8004}, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="a0fdffff050605002abd7000fe070000000000000046689a0d5e3714000006140060002001000000"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0x1b, 0x4e26, 0x10001, @local, 0xb}}}, 0x30) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x1c, 0x0, &(0x7f0000000000)=[@register_looper, @register_looper, @increfs_done={0x40106308, 0x2}], 0x0, 0x0, &(0x7f00000014c0)}) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, 0x0) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x4040844) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.124' (ED25519) to the list of known hosts. [ 70.762775][ T5782] cgroup: Unknown subsys name 'net' [ 71.003305][ T5782] cgroup: Unknown subsys name 'cpuset' [ 71.059844][ T5782] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.577524][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.577585][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.642410][ T5782] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 74.807594][ T5807] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 74.821377][ T5807] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.827491][ T5810] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.828464][ T5810] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 74.829809][ T5810] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 74.831143][ T5810] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.832395][ T5810] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 74.836053][ T5810] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.836614][ T5810] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 74.837653][ T5807] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.838231][ T5810] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 74.839408][ T5807] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 74.840392][ T5807] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 74.842568][ T5810] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 74.842981][ T5810] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.844843][ T5810] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 74.845232][ T5810] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.852489][ T5799] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 74.856424][ T5807] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 74.856879][ T5807] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.869277][ T5799] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 74.890049][ T5807] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 74.900261][ T5799] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.904654][ T5799] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 74.919237][ T5803] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.695441][ T5795] chnl_net:caif_netlink_parms(): no params data found [ 75.712488][ T5792] chnl_net:caif_netlink_parms(): no params data found [ 75.830737][ T5796] chnl_net:caif_netlink_parms(): no params data found [ 75.835856][ T5794] chnl_net:caif_netlink_parms(): no params data found [ 75.888183][ T5793] chnl_net:caif_netlink_parms(): no params data found [ 76.069761][ T5795] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.070789][ T5795] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.070928][ T5795] bridge_slave_0: entered allmulticast mode [ 76.072344][ T5795] bridge_slave_0: entered promiscuous mode [ 76.099384][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.099503][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.099715][ T5792] bridge_slave_0: entered allmulticast mode [ 76.102014][ T5792] bridge_slave_0: entered promiscuous mode [ 76.150300][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.150411][ T5795] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.150580][ T5795] bridge_slave_1: entered allmulticast mode [ 76.151899][ T5795] bridge_slave_1: entered promiscuous mode [ 76.171733][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.171846][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.172046][ T5792] bridge_slave_1: entered allmulticast mode [ 76.174282][ T5792] bridge_slave_1: entered promiscuous mode [ 76.264791][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.264916][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.265022][ T5796] bridge_slave_0: entered allmulticast mode [ 76.266394][ T5796] bridge_slave_0: entered promiscuous mode [ 76.296399][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.296474][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.296597][ T5794] bridge_slave_0: entered allmulticast mode [ 76.297995][ T5794] bridge_slave_0: entered promiscuous mode [ 76.333176][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.333290][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.333451][ T5796] bridge_slave_1: entered allmulticast mode [ 76.335193][ T5796] bridge_slave_1: entered promiscuous mode [ 76.336113][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.336214][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.336609][ T5794] bridge_slave_1: entered allmulticast mode [ 76.337938][ T5794] bridge_slave_1: entered promiscuous mode [ 76.352951][ T5795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.357044][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.358443][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.358570][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.358725][ T5793] bridge_slave_0: entered allmulticast mode [ 76.361894][ T5793] bridge_slave_0: entered promiscuous mode [ 76.442070][ T5795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.444115][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.444326][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.444418][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.444528][ T5793] bridge_slave_1: entered allmulticast mode [ 76.445846][ T5793] bridge_slave_1: entered promiscuous mode [ 76.547749][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.552776][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.595580][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.597610][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.618096][ T5795] team0: Port device team_slave_0 added [ 76.621245][ T5792] team0: Port device team_slave_0 added [ 76.626607][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.881970][ T5792] team0: Port device team_slave_1 added [ 76.883920][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.885386][ T5795] team0: Port device team_slave_1 added [ 76.939302][ T5803] Bluetooth: hci4: command tx timeout [ 76.939299][ T5799] Bluetooth: hci2: command tx timeout [ 76.939450][ T5803] Bluetooth: hci3: command tx timeout [ 76.939572][ T60] Bluetooth: hci0: command tx timeout [ 76.982446][ T5796] team0: Port device team_slave_0 added [ 76.984171][ T5794] team0: Port device team_slave_0 added [ 77.009927][ T60] Bluetooth: hci1: command tx timeout [ 77.038704][ T5796] team0: Port device team_slave_1 added [ 77.047024][ T5794] team0: Port device team_slave_1 added [ 77.047824][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.047833][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.047846][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.054030][ T5793] team0: Port device team_slave_0 added [ 77.054756][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.054766][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.054788][ T5795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.093582][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.093597][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.093621][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.094966][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.094977][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.095000][ T5795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.098677][ T5793] team0: Port device team_slave_1 added [ 77.182639][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.182655][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.182679][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.187896][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.187910][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.187933][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.217084][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.217099][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.217124][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.218481][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.218492][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.218515][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.221085][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.221098][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.221121][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.283748][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.283766][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.283790][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.356440][ T5792] hsr_slave_0: entered promiscuous mode [ 77.358602][ T5792] hsr_slave_1: entered promiscuous mode [ 77.409570][ T5795] hsr_slave_0: entered promiscuous mode [ 77.410912][ T5795] hsr_slave_1: entered promiscuous mode [ 77.412220][ T5795] debugfs: 'hsr0' already exists in 'hsr' [ 77.412323][ T5795] Cannot create hsr debugfs directory [ 77.487104][ T5796] hsr_slave_0: entered promiscuous mode [ 77.488488][ T5796] hsr_slave_1: entered promiscuous mode [ 77.490266][ T5796] debugfs: 'hsr0' already exists in 'hsr' [ 77.490290][ T5796] Cannot create hsr debugfs directory [ 77.500531][ T5794] hsr_slave_0: entered promiscuous mode [ 77.501795][ T5794] hsr_slave_1: entered promiscuous mode [ 77.502627][ T5794] debugfs: 'hsr0' already exists in 'hsr' [ 77.502647][ T5794] Cannot create hsr debugfs directory [ 77.556229][ T5793] hsr_slave_0: entered promiscuous mode [ 77.557434][ T5793] hsr_slave_1: entered promiscuous mode [ 77.558298][ T5793] debugfs: 'hsr0' already exists in 'hsr' [ 77.558320][ T5793] Cannot create hsr debugfs directory [ 78.490550][ T5792] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.527619][ T5792] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.545917][ T5792] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.595960][ T5792] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.691647][ T5795] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.727998][ T5795] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.746369][ T5795] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.797159][ T5795] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.906793][ T5794] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 78.949011][ T5794] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 78.997734][ T5794] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.009758][ T60] Bluetooth: hci0: command tx timeout [ 79.009782][ T5804] Bluetooth: hci3: command tx timeout [ 79.009794][ T60] Bluetooth: hci2: command tx timeout [ 79.009805][ T5804] Bluetooth: hci4: command tx timeout [ 79.055070][ T5794] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.089796][ T5803] Bluetooth: hci1: command tx timeout [ 79.177752][ T5793] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.221017][ T5793] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.266930][ T5793] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.295894][ T5793] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.393251][ T5796] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.435968][ T5796] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.482383][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.482781][ T5796] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.542469][ T5796] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.633734][ T5792] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.638452][ T5795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.676881][ T1297] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.677597][ T1297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.724047][ T1297] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.724220][ T1297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.757692][ T5795] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.788110][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.788254][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.812494][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.830158][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.830286][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.898203][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.936722][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.938434][ T1113] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.939004][ T1113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.004049][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.004806][ T1113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.091967][ T5793] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.140647][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.162456][ T1297] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.162590][ T1297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.221517][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.221669][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.277645][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.342997][ T1280] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.343118][ T1280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.384054][ T1297] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.384302][ T1297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.438178][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.645599][ T5795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.723591][ T5792] veth0_vlan: entered promiscuous mode [ 80.811143][ T5792] veth1_vlan: entered promiscuous mode [ 80.867311][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.887252][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.901126][ T5795] veth0_vlan: entered promiscuous mode [ 80.984258][ T5795] veth1_vlan: entered promiscuous mode [ 81.008196][ T5792] veth0_macvtap: entered promiscuous mode [ 81.044377][ T5792] veth1_macvtap: entered promiscuous mode [ 81.089420][ T5803] Bluetooth: hci2: command tx timeout [ 81.089450][ T5803] Bluetooth: hci0: command tx timeout [ 81.089470][ T5803] Bluetooth: hci4: command tx timeout [ 81.089489][ T5803] Bluetooth: hci3: command tx timeout [ 81.146173][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.179199][ T5804] Bluetooth: hci1: command tx timeout [ 81.201451][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.234783][ T5793] veth0_vlan: entered promiscuous mode [ 81.248852][ T5795] veth0_macvtap: entered promiscuous mode [ 81.260779][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.271650][ T102] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.288436][ T102] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.298747][ T102] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.331577][ T5795] veth1_macvtap: entered promiscuous mode [ 81.335057][ T102] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.358158][ T5793] veth1_vlan: entered promiscuous mode [ 81.498650][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.565787][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.612268][ T1113] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.632647][ T1113] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.652600][ T1113] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.673045][ T1113] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.678997][ T5793] veth0_macvtap: entered promiscuous mode [ 81.694000][ T1113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.694019][ T1113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.747048][ T5796] veth0_vlan: entered promiscuous mode [ 81.757133][ T5793] veth1_macvtap: entered promiscuous mode [ 81.774931][ T5794] veth0_vlan: entered promiscuous mode [ 81.812992][ T31] cfg80211: failed to load regulatory.db [ 81.876557][ T102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.876577][ T102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.939929][ T5796] veth1_vlan: entered promiscuous mode [ 81.965802][ T5794] veth1_vlan: entered promiscuous mode [ 82.003652][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.076856][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.094305][ T1113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.094322][ T1113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.156751][ T1113] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.189669][ T1113] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.221790][ T1113] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.237248][ T1113] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.347370][ T102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.347390][ T102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.355031][ T5796] veth0_macvtap: entered promiscuous mode [ 82.392335][ T5794] veth0_macvtap: entered promiscuous mode [ 82.467636][ T5796] veth1_macvtap: entered promiscuous mode [ 82.493349][ T5794] veth1_macvtap: entered promiscuous mode [ 82.723788][ T1280] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.723809][ T1280] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.746934][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.762674][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.833362][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.836926][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.878734][ T5804] Bluetooth: hci3: command tx timeout [ 83.878768][ T5804] Bluetooth: hci4: command tx timeout [ 83.878789][ T5804] Bluetooth: hci0: command tx timeout [ 83.878809][ T5804] Bluetooth: hci2: command tx timeout [ 83.878829][ T5804] Bluetooth: hci1: command tx timeout [ 85.412516][ T1280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.412536][ T1280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.417268][ T102] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.612203][ T102] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.633368][ T102] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.710892][ T102] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.838932][ T1297] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.850611][ T1297] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.632969][ T1297] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.735975][ T1297] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.406882][ T1280] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.406901][ T1280] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.556419][ T5956] process 'syz.3.13' launched './file0' with NULL argv: empty string added [ 94.833616][ T5956] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 96.429553][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.429573][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.791494][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.791515][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.837917][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.837937][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.650661][ T5998] netlink: 32 bytes leftover after parsing attributes in process `syz.2.21'. [ 125.149186][ T37] audit: type=1326 audit(1775866424.814:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6030 comm="syz.1.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcc4bcc819 code=0x7ffc0000 [ 125.149263][ T37] audit: type=1326 audit(1775866424.814:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6030 comm="syz.1.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcc4bcc819 code=0x7ffc0000 [ 125.293193][ T37] audit: type=1326 audit(1775866424.994:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6030 comm="syz.1.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fbcc4bcc819 code=0x7ffc0000 [ 125.293243][ T37] audit: type=1326 audit(1775866424.994:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6030 comm="syz.1.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcc4bcc819 code=0x7ffc0000 [ 125.293282][ T37] audit: type=1326 audit(1775866424.994:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6030 comm="syz.1.30" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbcc4bcc819 code=0x7ffc0000 [ 129.149091][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 129.309052][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 129.704347][ T6069] netlink: 4 bytes leftover after parsing attributes in process `syz.2.39'. [ 129.829854][ T6073] netlink: 796 bytes leftover after parsing attributes in process `syz.3.41'. [ 133.080990][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.081057][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.799053][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 134.839050][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 136.839063][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 137.050055][ T6116] syz.1.52 (6116) used greatest stack depth: 15528 bytes left [ 137.299509][ T6142] Bluetooth: MGMT ver 1.23 [ 138.038673][ T6160] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 138.686541][ T6170] netlink: 4 bytes leftover after parsing attributes in process `syz.1.67'. [ 138.886986][ T6180] wg1: entered promiscuous mode [ 138.887022][ T6180] wg1: entered allmulticast mode [ 140.348778][ T5798] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 140.589165][ T5798] usb 1-1: Using ep0 maxpacket: 32 [ 140.612046][ T5798] usb 1-1: unable to get BOS descriptor or descriptor too short [ 140.655406][ T5798] usb 1-1: config 227 has an invalid interface number: 250 but max is 0 [ 140.655424][ T5798] usb 1-1: config 227 has no interface number 0 [ 140.655451][ T5798] usb 1-1: config 227 interface 250 altsetting 5 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 140.655464][ T5798] usb 1-1: config 227 interface 250 has no altsetting 0 [ 140.702536][ T5798] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=55.47 [ 140.702563][ T5798] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.702573][ T5798] usb 1-1: Product: syz [ 140.702580][ T5798] usb 1-1: Manufacturer: syz [ 140.702587][ T5798] usb 1-1: SerialNumber: syz [ 141.190801][ T5798] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 141.306076][ T5798] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 141.306192][ T5798] dib0700: firmware download failed at 7 with -22 [ 141.366870][ T5798] usb 1-1: USB disconnect, device number 2 [ 143.015709][ T6227] netlink: 8 bytes leftover after parsing attributes in process `syz.3.79'. [ 143.609180][ T5880] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 143.714046][ T6231] serio: Serial port ptm0 [ 143.761050][ T5880] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.761066][ T5880] usb 1-1: config 0 has no interfaces? [ 143.761083][ T5880] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 143.761095][ T5880] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.830875][ T5880] usb 1-1: config 0 descriptor?? [ 144.039966][ T5872] usb 1-1: USB disconnect, device number 3 [ 144.214338][ T6205] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 144.814409][ T6247] syz.2.86 uses obsolete (PF_INET,SOCK_PACKET) [ 146.302085][ T6256] openvswitch: netlink: Multiple metadata blocks provided [ 146.628192][ T6246] capability: warning: `syz.3.85' uses deprecated v2 capabilities in a way that may be insecure [ 146.701594][ T6264] snd_dummy snd_dummy.0: control 2:65278:0:syz0:-259 is already present [ 147.519640][ T5798] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 147.709156][ T5798] usb 1-1: Using ep0 maxpacket: 16 [ 147.713472][ T5798] usb 1-1: unable to get BOS descriptor or descriptor too short [ 147.714830][ T5798] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 147.717451][ T5798] usb 1-1: New USB device found, idVendor=2a39, idProduct=3fd3, bcdDevice= 0.40 [ 147.717477][ T5798] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.717495][ T5798] usb 1-1: Product: syz [ 147.717508][ T5798] usb 1-1: Manufacturer: syz [ 147.717521][ T5798] usb 1-1: SerialNumber: syz [ 148.126135][ T5798] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 148.126201][ T5798] usb 1-1: MIDIStreaming interface descriptor not found [ 148.930265][ T5798] usb 1-1: USB disconnect, device number 4 [ 149.713112][ T6300] warning: `syz.2.103' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 149.766868][ T5953] udevd[5953]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 149.959042][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 150.074529][ T6304] netlink: 20 bytes leftover after parsing attributes in process `syz.4.104'. [ 150.074569][ T6304] netlink: 8 bytes leftover after parsing attributes in process `syz.4.104'. [ 150.075089][ T6304] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 150.172033][ T6308] snd_dummy snd_dummy.0: control 2:65278:0:syz0:-259 is already present [ 151.249068][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 154.555974][ T6355] serio: Serial port ptm0 [ 154.711758][ T6369] netlink: 4 bytes leftover after parsing attributes in process `syz.1.126'. [ 155.429054][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 155.513402][ T6370] netlink: 8 bytes leftover after parsing attributes in process `syz.4.129'. [ 155.700336][ T6389] netlink: 4 bytes leftover after parsing attributes in process `syz.2.135'. [ 157.366266][ T6418] netlink: 8 bytes leftover after parsing attributes in process `syz.4.148'. [ 157.410536][ T6420] netlink: 4 bytes leftover after parsing attributes in process `syz.1.149'. [ 161.724760][ T6469] netlink: 4 bytes leftover after parsing attributes in process `syz.0.164'. [ 161.784300][ T6472] netlink: 8 bytes leftover after parsing attributes in process `syz.4.165'. [ 164.500839][ T5889] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 165.248102][ T6526] snd_dummy snd_dummy.0: control 2:65278:0:syz0:-259 is already present [ 165.289101][ T5889] usb 2-1: Using ep0 maxpacket: 16 [ 165.292385][ T5889] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 165.292414][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 165.294669][ T5889] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 165.294695][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.294715][ T5889] usb 2-1: Product: syz [ 165.294727][ T5889] usb 2-1: Manufacturer: syz [ 165.294741][ T5889] usb 2-1: SerialNumber: syz [ 165.368680][ T5889] usb 2-1: config 0 descriptor?? [ 165.383993][ T5889] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 165.384028][ T5889] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 166.892055][ T5889] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 166.894231][ T5889] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 168.109130][ T5989] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 168.265630][ T5989] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.265656][ T5989] usb 5-1: config 0 has no interfaces? [ 168.265684][ T5989] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 168.265706][ T5989] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.327966][ T5989] usb 5-1: config 0 descriptor?? [ 168.609229][ T5872] usb 5-1: USB disconnect, device number 2 [ 168.704801][ T6571] snd_dummy snd_dummy.0: control 2:65278:0:syz0:-259 is already present [ 169.309174][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 169.310282][ T5889] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 169.310742][ T5889] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 169.311124][ T5889] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 169.311433][ T5889] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 169.311727][ T5889] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 169.312014][ T5889] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 169.369055][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 169.607842][ T5889] usb 2-1: USB disconnect, device number 2 [ 172.570932][ T6609] snd_dummy snd_dummy.0: control 2:65278:0:syz0:-259 is already present [ 173.085156][ T6602] tipc: Started in network mode [ 173.085194][ T6602] tipc: Node identity 7e697cf877c3, cluster identity 4711 [ 173.085966][ T6602] tipc: Enabled bearer , priority 0 [ 173.089160][ T6602] syzkaller0: entered promiscuous mode [ 173.089184][ T6602] syzkaller0: entered allmulticast mode [ 173.833903][ T6623] tipc: Resetting bearer [ 173.879717][ T6596] tipc: Resetting bearer [ 176.784211][ T5802] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 177.751616][ T6596] tipc: Disabling bearer [ 178.527961][ T6663] snd_dummy snd_dummy.0: control 2:65278:0:syz0:-259 is already present [ 178.791479][ T5802] usb 5-1: device descriptor read/all, error -71 [ 179.134602][ T5889] tipc: Node number set to 162168056 [ 179.170473][ T6673] serio: Serial port ptm0 [ 179.471417][ T5802] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 180.319585][ T5802] usb 5-1: Using ep0 maxpacket: 16 [ 180.322896][ T5802] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 180.322927][ T5802] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 180.378649][ T5802] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 180.378679][ T5802] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.378697][ T5802] usb 5-1: Product: syz [ 180.378711][ T5802] usb 5-1: Manufacturer: syz [ 180.378724][ T5802] usb 5-1: SerialNumber: syz [ 180.451992][ T5802] usb 5-1: config 0 descriptor?? [ 180.480853][ T5802] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 180.480886][ T5802] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 183.294589][ T5802] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 183.295568][ T5802] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 183.296027][ T5802] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 183.296041][ T5802] em28xx 5-1:0.0: No AC97 audio processor [ 183.384709][ T5802] usb 5-1: USB disconnect, device number 4 [ 183.389196][ T5989] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 183.451259][ T5802] em28xx 5-1:0.0: Disconnecting em28xx [ 183.524980][ T5802] em28xx 5-1:0.0: Freeing device [ 183.542667][ T5989] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.542704][ T5989] usb 1-1: config 0 has no interfaces? [ 183.542733][ T5989] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 183.542753][ T5989] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.580163][ T5989] usb 1-1: config 0 descriptor?? [ 184.581021][ T5989] usb 1-1: can't set config #0, error -71 [ 184.589963][ T5989] usb 1-1: USB disconnect, device number 5 [ 184.796006][ T6741] serio: Serial port ptm0 [ 185.141861][ T5989] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 185.909123][ T5989] usb 1-1: Using ep0 maxpacket: 16 [ 185.911244][ T5989] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 185.911274][ T5989] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 185.916005][ T5989] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 185.916031][ T5989] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.916050][ T5989] usb 1-1: Product: syz [ 185.916063][ T5989] usb 1-1: Manufacturer: syz [ 185.916076][ T5989] usb 1-1: SerialNumber: syz [ 186.047719][ T5989] usb 1-1: config 0 descriptor?? [ 186.250703][ T5989] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 186.250736][ T5989] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 187.267699][ T5989] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 187.294857][ T5989] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 187.977500][ T5989] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 188.035328][ T5989] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 188.052183][ T5989] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 188.055546][ T5989] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 188.058339][ T5989] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 188.123630][ T5989] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 188.569099][ T5989] usb 1-1: USB disconnect, device number 6 [ 190.794750][ T6829] Zero length message leads to an empty skb [ 191.521626][ T6832] netlink: 8 bytes leftover after parsing attributes in process `syz.1.280'. [ 194.453789][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.453855][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.788814][ T6889] snd_dummy snd_dummy.0: control 2:65278:0:syz0:-259 is already present [ 195.382951][ T6893] netlink: 8 bytes leftover after parsing attributes in process `syz.1.303'. [ 197.466715][ T6932] snd_dummy snd_dummy.0: control 2:65278:0:syz0:-259 is already present [ 201.961530][ T5803] Bluetooth: hci0: command 0x0406 tx timeout [ 201.963838][ T5803] Bluetooth: hci1: command 0x0406 tx timeout [ 201.963871][ T5803] Bluetooth: hci2: command 0x0406 tx timeout [ 201.965164][ T5114] Bluetooth: hci4: command 0x0406 tx timeout [ 201.981680][ T5114] Bluetooth: hci3: command 0x0406 tx timeout [ 213.673014][ T7102] netlink: 4 bytes leftover after parsing attributes in process `syz.2.377'. [ 215.526390][ T7122] snd_dummy snd_dummy.0: control 2:65278:0:syz0:-259 is already present [ 218.463407][ T5872] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 218.829138][ T5872] usb 4-1: Using ep0 maxpacket: 16 [ 218.832494][ T5872] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 218.832520][ T5872] usb 4-1: config 0 has no interface number 0 [ 218.837025][ T5872] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 218.837053][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.837072][ T5872] usb 4-1: Product: syz [ 218.837084][ T5872] usb 4-1: Manufacturer: syz [ 218.837097][ T5872] usb 4-1: SerialNumber: syz [ 218.954543][ T5872] usb 4-1: config 0 descriptor?? [ 218.983297][ T5872] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 219.298748][ T7161] netlink: 4 bytes leftover after parsing attributes in process `syz.2.398'. [ 220.470102][ T5872] gspca_spca1528: reg_w err -110 [ 221.137244][ T5872] spca1528 4-1:0.1: probe with driver spca1528 failed with error -110 [ 221.895227][ T36] usb 4-1: USB disconnect, device number 2 [ 223.602913][ T7205] netlink: 20 bytes leftover after parsing attributes in process `syz.3.418'. [ 228.128868][ T992] IPVS: starting estimator thread 0... [ 228.299318][ T7265] IPVS: using max 8 ests per chain, 19200 per kthread [ 229.142575][ T7291] snd_dummy snd_dummy.0: control 2:65278:0:syz0:-259 is already present [ 230.269919][ T7297] netlink: 24 bytes leftover after parsing attributes in process `syz.0.449'. [ 232.680447][ T7328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.462'. [ 233.369102][ T992] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 233.903009][ T992] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 233.903210][ T992] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.903577][ T992] usb 2-1: Product: syz [ 233.903777][ T992] usb 2-1: Manufacturer: syz [ 233.904135][ T992] usb 2-1: SerialNumber: syz [ 234.742993][ T992] (unnamed net_device) (uninitialized): Assigned a random MAC address: a6:02:f5:51:2a:45 [ 234.894666][ T992] rtl8150 2-1:1.0: eth1: rtl8150 is detected [ 236.633756][ T5872] usb 2-1: USB disconnect, device number 3 [ 237.695038][ T7455] netlink: 12 bytes leftover after parsing attributes in process `syz.0.509'. [ 239.279821][ T7480] Can't find ip_set type has [ 239.541972][ T7495] netlink: 12 bytes leftover after parsing attributes in process `syz.2.522'. [ 239.968884][ T7513] netlink: 'syz.2.529': attribute type 1 has an invalid length. [ 240.054756][ T7513] 8021q: adding VLAN 0 to HW filter on device bond1 [ 240.542396][ T7519] macvlan2: entered promiscuous mode [ 240.542422][ T7519] macvlan2: entered allmulticast mode [ 253.076516][ T7706] overlayfs: failed to clone upperpath [ 256.157973][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.160069][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.099916][ T7786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.619'. [ 261.446922][ T7824] netlink: 8 bytes leftover after parsing attributes in process `syz.3.632'. [ 266.642307][ T7866] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 267.940761][ T7879] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 269.580246][ T7899] netlink: 'syz.0.656': attribute type 10 has an invalid length. [ 269.580290][ T7899] netlink: 40 bytes leftover after parsing attributes in process `syz.0.656'. [ 269.583905][ T7899] batadv0: entered promiscuous mode [ 269.584001][ T7899] batadv0: entered allmulticast mode [ 269.598570][ T7899] bridge0: port 3(batadv0) entered blocking state [ 269.599389][ T7899] bridge0: port 3(batadv0) entered disabled state [ 269.663518][ T7899] bridge0: port 3(batadv0) entered blocking state [ 269.665283][ T7899] bridge0: port 3(batadv0) entered forwarding state [ 270.424263][ T1113] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 270.424285][ T1113] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 270.479083][ T5802] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 270.629163][ T5802] usb 5-1: Using ep0 maxpacket: 8 [ 270.630984][ T5802] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 270.631016][ T5802] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 270.631029][ T5802] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 270.631042][ T5802] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 270.631054][ T5802] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 270.631065][ T5802] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 270.631087][ T5802] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 270.631098][ T5802] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.844213][ T5802] usb 5-1: usb_control_msg returned -32 [ 270.844242][ T5802] usbtmc 5-1:16.0: can't read capabilities [ 270.999262][ T7906] snd_dummy snd_dummy.0: control 2:65278:0:syz0:-259 is already present [ 271.237998][ C0] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 271.241538][ T7911] usbtmc 5-1:16.0: Unable to send data, error -71 [ 271.260241][ T7911] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 271.284242][ T5881] usb 5-1: USB disconnect, device number 5 [ 275.717739][ T7963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.675'. [ 276.209341][ T5881] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 276.419092][ T5881] usb 2-1: Using ep0 maxpacket: 32 [ 276.424871][ T5881] usb 2-1: unable to get BOS descriptor or descriptor too short [ 276.426544][ T5881] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 39, changing to 7 [ 276.426595][ T5881] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 276.468113][ T5881] usb 2-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 0.40 [ 276.468142][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.468160][ T5881] usb 2-1: Product: syz [ 276.468174][ T5881] usb 2-1: Manufacturer: syz [ 276.468188][ T5881] usb 2-1: SerialNumber: syz [ 276.746441][ T5881] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 276.781775][ T5881] usb 2-1: 2:1 : no UAC_FORMAT_TYPE desc [ 276.880921][ T5881] usb 2-1: USB disconnect, device number 4 [ 277.004769][ T6303] udevd[6303]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 277.840666][ T7988] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 277.840725][ T7988] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 279.296122][ T8002] netlink: 8 bytes leftover after parsing attributes in process `syz.4.688'. [ 285.576745][ T8047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.701'. [ 287.322198][ T8086] netlink: 4 bytes leftover after parsing attributes in process `syz.1.708'. [ 289.769523][ T8122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.718'. [ 293.865820][ T8178] netlink: 8 bytes leftover after parsing attributes in process `syz.0.738'. [ 294.251030][ T8179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.737'. [ 297.326701][ T8208] netlink: 8 bytes leftover after parsing attributes in process `syz.4.750'. [ 297.361771][ T8220] netlink: 8 bytes leftover after parsing attributes in process `syz.0.751'. [ 297.853784][ T8226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.755'. [ 297.858392][ T8226] netlink: 12 bytes leftover after parsing attributes in process `syz.1.755'. [ 305.011728][ T8299] netlink: 16 bytes leftover after parsing attributes in process `syz.2.777'. [ 305.577363][ T8305] netlink: 8 bytes leftover after parsing attributes in process `syz.3.778'. [ 306.177119][ T8312] netlink: 8 bytes leftover after parsing attributes in process `syz.2.780'. [ 307.900793][ T8369] netlink: 4 bytes leftover after parsing attributes in process `syz.4.789'. [ 308.123419][ T8374] netlink: 8 bytes leftover after parsing attributes in process `syz.0.792'. [ 310.061813][ T8400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.803'. [ 311.221256][ T8419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.808'. [ 311.649085][ T5872] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 311.799037][ T5872] usb 4-1: Using ep0 maxpacket: 32 [ 311.801902][ T5872] usb 4-1: unable to get BOS descriptor or descriptor too short [ 311.803203][ T5872] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 39, changing to 7 [ 311.803246][ T5872] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 311.805969][ T5872] usb 4-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 0.40 [ 311.805995][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.806013][ T5872] usb 4-1: Product: syz [ 311.806027][ T5872] usb 4-1: Manufacturer: syz [ 311.806041][ T5872] usb 4-1: SerialNumber: syz [ 312.305194][ T5872] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 312.308501][ T5872] usb 4-1: 2:1 : no UAC_FORMAT_TYPE desc [ 312.434674][ T5872] usb 4-1: USB disconnect, device number 3 [ 312.601925][ T8365] udevd[8365]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 317.343986][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.344054][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.369644][ T8561] CIFS: iocharset name too long [ 324.209854][ T8563] netlink: 24 bytes leftover after parsing attributes in process `syz.3.854'. [ 325.625690][ T8577] netlink: 4 bytes leftover after parsing attributes in process `syz.1.855'. [ 327.416493][ T8605] netlink: 24 bytes leftover after parsing attributes in process `syz.3.866'. [ 327.622502][ T8609] ======================================================= [ 327.622502][ T8609] WARNING: The mand mount option has been deprecated and [ 327.622502][ T8609] and is ignored by this kernel. Remove the mand [ 327.622502][ T8609] option from the mount to silence this warning. [ 327.622502][ T8609] ======================================================= [ 328.449302][ T992] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 328.599077][ T992] usb 4-1: Using ep0 maxpacket: 16 [ 328.602491][ T992] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 328.602542][ T992] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.602568][ T992] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.602589][ T992] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 328.602614][ T992] usb 4-1: config 0 interface 0 has no altsetting 0 [ 328.602646][ T992] usb 4-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 328.602668][ T992] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.607847][ T992] usb 4-1: config 0 descriptor?? [ 329.883540][ T992] zeroplus 0003:0C12:0030.0001: unknown main item tag 0x0 [ 329.883582][ T992] zeroplus 0003:0C12:0030.0001: unknown main item tag 0x0 [ 329.883608][ T992] zeroplus 0003:0C12:0030.0001: unknown main item tag 0x0 [ 329.883635][ T992] zeroplus 0003:0C12:0030.0001: unknown main item tag 0x0 [ 329.883661][ T992] zeroplus 0003:0C12:0030.0001: unknown main item tag 0x0 [ 329.883687][ T992] zeroplus 0003:0C12:0030.0001: unknown main item tag 0x0 [ 329.883722][ T992] zeroplus 0003:0C12:0030.0001: unknown main item tag 0x0 [ 329.883748][ T992] zeroplus 0003:0C12:0030.0001: unknown main item tag 0x0 [ 329.883774][ T992] zeroplus 0003:0C12:0030.0001: unknown main item tag 0x0 [ 329.883800][ T992] zeroplus 0003:0C12:0030.0001: unknown main item tag 0x0 [ 330.009279][ T992] zeroplus 0003:0C12:0030.0001: hidraw0: USB HID vea.f1 Device [HID 0c12:0030] on usb-dummy_hcd.3-1/input0 [ 330.009316][ T992] zeroplus 0003:0C12:0030.0001: no inputs found [ 330.154123][ T992] usb 4-1: USB disconnect, device number 4 [ 330.327084][ T8623] fido_id[8623]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 331.187855][ T8638] netlink: 24 bytes leftover after parsing attributes in process `syz.0.878'. [ 331.363812][ T5807] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 331.924154][ T8664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.889'. [ 332.963600][ T8683] 9p: Bad value for 'rfdno' [ 335.068726][ T8703] netlink: 8 bytes leftover after parsing attributes in process `syz.4.901'. [ 335.523455][ T8712] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.137112][ T8735] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.911'. [ 336.144787][ T8737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.913'. [ 336.847224][ T8755] 9p: Bad value for 'rfdno' [ 337.172079][ T992] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 337.339044][ T992] usb 5-1: Using ep0 maxpacket: 32 [ 337.341700][ T992] usb 5-1: unable to get BOS descriptor or descriptor too short [ 337.343661][ T992] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 39, changing to 7 [ 337.343705][ T992] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 337.387627][ T992] usb 5-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 0.40 [ 337.387656][ T992] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.387675][ T992] usb 5-1: Product: syz [ 337.387689][ T992] usb 5-1: Manufacturer: syz [ 337.387702][ T992] usb 5-1: SerialNumber: syz [ 337.695738][ T992] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 337.696473][ T992] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 337.781663][ T992] usb 5-1: USB disconnect, device number 6 [ 337.873523][ T8444] udevd[8444]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 338.062881][ T8770] netlink: 24 bytes leftover after parsing attributes in process `syz.1.926'. [ 338.527888][ T8779] netlink: 4 bytes leftover after parsing attributes in process `syz.3.929'. [ 340.462386][ T992] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 340.609035][ T992] usb 4-1: Using ep0 maxpacket: 32 [ 340.611748][ T992] usb 4-1: unable to get BOS descriptor or descriptor too short [ 340.613286][ T992] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 39, changing to 7 [ 340.613329][ T992] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 340.616138][ T992] usb 4-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 0.40 [ 340.616165][ T992] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.616183][ T992] usb 4-1: Product: syz [ 340.616197][ T992] usb 4-1: Manufacturer: syz [ 340.616210][ T992] usb 4-1: SerialNumber: syz [ 340.979656][ T992] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 340.981357][ T992] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 341.453513][ T992] usb 4-1: USB disconnect, device number 5 [ 341.593046][ T8444] udevd[8444]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 343.212292][ T8859] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.799081][ T992] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 343.949309][ T992] usb 4-1: Using ep0 maxpacket: 8 [ 343.951785][ T992] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 343.951841][ T992] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 343.951863][ T992] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 343.951885][ T992] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 343.951907][ T992] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 343.951947][ T992] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 343.951969][ T992] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.924097][ T8870] io-wq is not configured for unbound workers [ 344.938810][ T992] usb 4-1: usb_control_msg returned -71 [ 344.938858][ T992] usbtmc 4-1:16.0: can't read capabilities [ 344.996325][ T992] usb 4-1: USB disconnect, device number 6 [ 345.326991][ T37] audit: type=1326 audit(1775866645.144:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8896 comm="syz.2.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41c55fc819 code=0x7ffc0000 [ 345.358902][ T8894] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.361620][ T37] audit: type=1326 audit(1775866645.144:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8896 comm="syz.2.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41c55fc819 code=0x7ffc0000 [ 345.361913][ T37] audit: type=1326 audit(1775866645.184:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8896 comm="syz.2.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f41c55fc819 code=0x7ffc0000 [ 345.362252][ T37] audit: type=1326 audit(1775866645.184:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8896 comm="syz.2.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41c55fc819 code=0x7ffc0000 [ 345.362752][ T37] audit: type=1326 audit(1775866645.184:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8896 comm="syz.2.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41c55fc819 code=0x7ffc0000 [ 345.362993][ T37] audit: type=1326 audit(1775866645.184:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8896 comm="syz.2.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f41c55fc819 code=0x7ffc0000 [ 345.363478][ T37] audit: type=1326 audit(1775866645.184:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8896 comm="syz.2.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41c55fc819 code=0x7ffc0000 [ 345.363877][ T37] audit: type=1326 audit(1775866645.184:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8896 comm="syz.2.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41c55fc819 code=0x7ffc0000 [ 345.364163][ T37] audit: type=1326 audit(1775866645.184:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8896 comm="syz.2.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f41c55fc819 code=0x7ffc0000 [ 345.364412][ T37] audit: type=1326 audit(1775866645.184:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8896 comm="syz.2.977" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41c55fc819 code=0x7ffc0000 [ 348.706879][ T8934] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 359.270424][ T9049] CIFS: iocharset name too long [ 361.955746][ T9074] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1038'. [ 364.987362][ T9114] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1052'. [ 365.553131][ T9131] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1057'. [ 366.753861][ T9153] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1068'. [ 368.274476][ T9155] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1067'. [ 368.642421][ T9169] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1071'. [ 369.519265][ T9186] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1077'. [ 370.567158][ T9195] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1080'. [ 370.890883][ T9204] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1084'. [ 372.311886][ T9231] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1090'. [ 372.947420][ T9240] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1095'. [ 374.438157][ T9267] CIFS: iocharset name too long [ 375.633899][ T9270] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1105'. [ 376.305491][ T9279] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1108'. [ 378.773784][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.773853][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.972771][ T5989] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 380.009102][ T5989] usb 4-1: Using ep0 maxpacket: 8 [ 380.011304][ T5989] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 380.011357][ T5989] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 380.011378][ T5989] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 380.011401][ T5989] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 380.011422][ T5989] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 380.011475][ T5989] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 380.011496][ T5989] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.022114][ T9311] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.1119'. [ 380.336423][ T5989] usb 4-1: usb_control_msg returned -71 [ 380.336528][ T5989] usbtmc 4-1:16.0: can't read capabilities [ 380.348081][ T5989] usb 4-1: USB disconnect, device number 7 [ 382.149048][ T9343] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1129'. [ 382.789620][ T9350] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.1131'. [ 383.396845][ T5881] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 384.241653][ T5881] usb 4-1: Using ep0 maxpacket: 8 [ 384.244477][ T5881] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 384.244518][ T5881] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 384.244529][ T5881] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 384.244542][ T5881] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 384.244553][ T5881] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 384.244575][ T5881] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 384.244587][ T5881] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.577526][ T5881] usb 4-1: usb_control_msg returned -71 [ 384.577574][ T5881] usbtmc 4-1:16.0: can't read capabilities [ 384.629522][ T5881] usb 4-1: USB disconnect, device number 8 [ 387.610438][ T9403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1150'. [ 389.379039][ T6046] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 389.509042][ T6046] usb 4-1: device descriptor read/64, error -71 [ 389.769174][ T6046] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 389.909069][ T6046] usb 4-1: device descriptor read/64, error -71 [ 390.020121][ T6046] usb usb4-port1: attempt power cycle [ 390.399110][ T6046] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 390.419795][ T6046] usb 4-1: device descriptor read/8, error -71 [ 390.523630][ T9439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1164'. [ 390.670671][ T6046] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 390.695227][ T6046] usb 4-1: device descriptor read/8, error -71 [ 390.804620][ T6046] usb usb4-port1: unable to enumerate USB device [ 393.514988][ T9473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1176'. [ 393.979067][ T808] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 394.130646][ T808] usb 4-1: Using ep0 maxpacket: 8 [ 394.138650][ T808] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 394.138685][ T808] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 394.138705][ T808] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 394.138717][ T808] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 394.138728][ T808] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 394.138751][ T808] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 394.138762][ T808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.177615][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 395.198288][ T808] usb 4-1: usb_control_msg returned -32 [ 395.198318][ T808] usbtmc 4-1:16.0: can't read capabilities [ 395.228246][ T9485] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1181'. [ 395.399829][ T808] usb 4-1: USB disconnect, device number 13 [ 397.063071][ T9497] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1187'. [ 398.789400][ T9518] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1192'. [ 401.615125][ T9537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1199'. [ 403.871444][ T9556] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1204'. [ 404.973082][ T9562] netlink: 'syz.4.1207': attribute type 10 has an invalid length. [ 404.973158][ T9562] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1207'. [ 404.976291][ T9562] batadv0: entered promiscuous mode [ 404.976412][ T9562] batadv0: entered allmulticast mode [ 404.983632][ T9562] bridge0: port 3(batadv0) entered blocking state [ 404.986520][ T9562] bridge0: port 3(batadv0) entered disabled state [ 405.029577][ T9562] bridge0: port 3(batadv0) entered blocking state [ 405.030934][ T9562] bridge0: port 3(batadv0) entered forwarding state [ 405.899895][ T102] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 405.899908][ T102] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 406.089954][ T9566] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1210'. [ 406.891988][ T9584] fuse: Bad value for 'fd' [ 406.903831][ T9584] binder: BINDER_SET_CONTEXT_MGR already set [ 406.903854][ T9584] binder: 9579:9584 ioctl 4018620d 200000004a80 returned -16 [ 407.155907][ T992] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 408.295827][ T992] usb 2-1: Using ep0 maxpacket: 8 [ 408.298545][ T992] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 408.298599][ T992] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 408.298622][ T992] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 408.298645][ T992] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 408.298664][ T992] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 408.298685][ T992] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 408.298724][ T992] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 408.298746][ T992] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.353823][ T9593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1218'. [ 408.416391][ T992] usbtmc 2-1:16.0: probe with driver usbtmc failed with error -22 [ 409.622903][ T9620] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1222'. [ 410.485434][ T5802] usb 2-1: USB disconnect, device number 5 [ 411.955278][ T9663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1234'. [ 416.856619][ T9729] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1247'. [ 418.949770][ T9763] netlink: 'syz.2.1256': attribute type 10 has an invalid length. [ 418.949798][ T9763] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1256'. [ 418.949975][ T9763] batadv0: entered promiscuous mode [ 418.950082][ T9763] batadv0: entered allmulticast mode [ 418.954479][ T9763] bridge0: port 3(batadv0) entered blocking state [ 418.955129][ T9763] bridge0: port 3(batadv0) entered disabled state [ 418.984362][ T9763] bridge0: port 3(batadv0) entered blocking state [ 418.984996][ T9763] bridge0: port 3(batadv0) entered forwarding state [ 419.717063][ T6346] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 419.717089][ T6346] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 419.989783][ T9769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1262'. [ 420.187899][ T9778] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1261'. [ 421.724088][ T9794] netlink: 'syz.3.1271': attribute type 10 has an invalid length. [ 421.724147][ T9794] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1271'. [ 421.724197][ T9794] batadv0: entered promiscuous mode [ 421.724221][ T9794] batadv0: entered allmulticast mode [ 421.729220][ T9794] bridge0: port 3(batadv0) entered blocking state [ 421.729880][ T9794] bridge0: port 3(batadv0) entered disabled state [ 421.757887][ T9794] bridge0: port 3(batadv0) entered blocking state [ 421.759637][ T9794] bridge0: port 3(batadv0) entered forwarding state [ 422.685446][ T5982] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 422.685467][ T5982] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 422.790098][ T9803] fuse: Bad value for 'fd' [ 424.170037][ T9828] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1281'. [ 424.226786][ T9829] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1283'. [ 427.229490][ T9864] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1294'. [ 427.395896][ T9872] netlink: 'syz.3.1295': attribute type 10 has an invalid length. [ 427.395955][ T9872] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1295'. [ 429.117701][ T9888] fuse: Bad value for 'fd' [ 432.079228][ T9928] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1307'. [ 432.929185][ T9939] dummy0: entered promiscuous mode [ 432.929417][ T9939] macsec1: entered allmulticast mode [ 432.929433][ T9939] dummy0: entered allmulticast mode [ 433.169410][ T9939] dummy0: left allmulticast mode [ 433.169513][ T9939] dummy0: left promiscuous mode [ 435.654653][ T9967] comedi comedi0: bad chanlist[0]=0x00000009 chan=9 range length=1 [ 436.409052][ T5889] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 436.450508][ T9995] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1324'. [ 436.569044][ T5889] usb 2-1: Using ep0 maxpacket: 8 [ 436.572432][ T5889] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 436.572488][ T5889] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 436.572509][ T5889] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 436.572532][ T5889] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 436.572554][ T5889] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 436.572595][ T5889] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 436.572616][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.799120][ T5889] usb 2-1: usb_control_msg returned -71 [ 436.799168][ T5889] usbtmc 2-1:16.0: can't read capabilities [ 436.964416][ T5889] usb 2-1: USB disconnect, device number 6 [ 437.499644][ T5802] kernel read not supported for file bpf-prog (pid: 5802 comm: kworker/0:3) [ 439.191195][T10033] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1337'. [ 440.216355][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.216447][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.995462][T10053] 9pnet_fd: Insufficient options for proto=fd [ 442.009498][T10083] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1351'. [ 442.819003][T10102] netlink: 'syz.1.1353': attribute type 10 has an invalid length. [ 442.819054][T10102] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1353'. [ 443.624090][T10102] batadv0: entered promiscuous mode [ 443.624116][T10102] batadv0: entered allmulticast mode [ 443.625050][T10102] bridge0: port 3(batadv0) entered blocking state [ 443.625182][T10102] bridge0: port 3(batadv0) entered disabled state [ 443.628694][T10102] bridge0: port 3(batadv0) entered blocking state [ 443.628831][T10102] bridge0: port 3(batadv0) entered forwarding state [ 444.123480][ T1278] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 444.123516][ T1278] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 444.128548][T10114] 9pnet_fd: Insufficient options for proto=fd [ 445.272516][T10132] netlink: 'syz.1.1365': attribute type 10 has an invalid length. [ 445.272583][T10132] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1365'. [ 446.173473][T10136] pim6reg: entered allmulticast mode [ 446.180249][T10136] pim6reg: left allmulticast mode [ 446.360982][T10144] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1369'. [ 451.454555][T10224] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1388'. [ 454.317419][T10257] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1403'. [ 455.525853][T10284] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1412'. [ 455.525898][T10284] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1412'. [ 455.565674][T10283] 9pnet_fd: Insufficient options for proto=fd [ 455.836727][T10285] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 458.849867][ T5802] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 459.384804][ T5802] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 459.384841][ T5802] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 459.428577][ T5802] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 459.428596][ T5802] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.428606][ T5802] usb 2-1: Product: syz [ 459.428613][ T5802] usb 2-1: Manufacturer: syz [ 459.428620][ T5802] usb 2-1: SerialNumber: syz [ 459.577033][ T5802] cdc_mbim 2-1:1.0: skipping garbage [ 459.747768][T10325] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 460.374559][ T5802] cdc_mbim 2-1:1.0: failed GET_NTB_PARAMETERS [ 460.374728][ T5802] cdc_mbim 2-1:1.0: bind() failure [ 460.403318][ T5802] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 460.403346][ T5802] cdc_ncm 2-1:1.1: bind() failure [ 460.436718][T10345] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1424'. [ 460.566593][T10349] netlink: 'syz.0.1425': attribute type 1 has an invalid length. [ 463.167769][ T9] usb 2-1: USB disconnect, device number 7 [ 463.207941][T10370] fuse: Bad value for 'fd' [ 465.611974][T10410] netlink: 'syz.2.1440': attribute type 1 has an invalid length. [ 465.642993][T10406] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.809976][T10454] netlink: 'syz.1.1453': attribute type 1 has an invalid length. [ 471.430630][T10491] fuse: Bad value for 'fd' [ 471.435138][T10491] binder: BINDER_SET_CONTEXT_MGR already set [ 471.435151][T10491] binder: 10486:10491 ioctl 4018620d 200000004a80 returned -16 [ 479.407952][ T992] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 479.558983][ T992] usb 2-1: Using ep0 maxpacket: 8 [ 479.561094][ T992] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 479.561121][ T992] usb 2-1: config 16 has an invalid descriptor of length 102, skipping remainder of the config [ 479.561168][ T992] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 479.561193][ T992] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 479.561214][ T992] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 479.561254][ T992] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 479.561274][ T992] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.674848][ T992] usbtmc 2-1:16.0: bulk endpoints not found [ 481.783116][ T5872] usb 2-1: USB disconnect, device number 8 [ 482.826189][T10648] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1503'. [ 484.285175][T10659] netlink: 'syz.1.1506': attribute type 10 has an invalid length. [ 484.285195][T10659] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1506'. [ 484.738418][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 484.869111][ T9] usb 4-1: device descriptor read/64, error -71 [ 485.576459][T10670] netlink: zone id is out of range [ 485.576539][T10670] netlink: zone id is out of range [ 485.576547][T10670] netlink: zone id is out of range [ 485.576555][T10670] netlink: zone id is out of range [ 485.576562][T10670] netlink: zone id is out of range [ 485.576570][T10670] netlink: zone id is out of range [ 485.576577][T10670] netlink: zone id is out of range [ 485.576584][T10670] netlink: zone id is out of range [ 485.576591][T10670] netlink: zone id is out of range [ 485.576600][T10670] netlink: zone id is out of range [ 486.149022][ T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 486.278993][ T9] usb 4-1: device descriptor read/64, error -71 [ 487.289044][ T9] usb usb4-port1: attempt power cycle [ 488.498176][T10698] 9p: Could not find request transport: fd00000000000000000010 [ 489.932690][T10720] netlink: 'syz.4.1528': attribute type 1 has an invalid length. [ 490.056097][T10720] 8021q: adding VLAN 0 to HW filter on device bond1 [ 490.179418][T10723] gretap1: entered promiscuous mode [ 490.201669][T10723] bond1: (slave gretap1): making interface the new active one [ 490.205797][T10723] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 492.259354][ T5798] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 492.468760][ T5798] usb 2-1: device descriptor read/64, error -71 [ 493.554143][ T5798] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 493.689022][ T5798] usb 2-1: device descriptor read/64, error -71 [ 493.818176][ T5798] usb usb2-port1: attempt power cycle [ 494.329033][ T5798] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 494.359850][ T5798] usb 2-1: device descriptor read/8, error -71 [ 494.708998][ T5798] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 494.729653][ T5798] usb 2-1: device descriptor read/8, error -71 [ 494.839508][ T5798] usb usb2-port1: unable to enumerate USB device [ 496.773792][T10817] net_ratelimit: 1 callbacks suppressed [ 496.773814][T10817] netlink: zone id is out of range [ 497.279675][T10824] fuse: Bad value for 'fd' [ 497.284178][T10824] binder: BINDER_SET_CONTEXT_MGR already set [ 497.284203][T10824] binder: 10813:10824 ioctl 4018620d 200000004a80 returned -16 [ 497.301270][T10829] 9pnet_fd: Insufficient options for proto=fd [ 497.950373][T10845] smb3: Unknown parameter 'rdma' [ 498.986903][T10866] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1566'. [ 499.299236][T10871] netlink: zone id is out of range [ 501.653339][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.653424][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.439953][T10929] 9pnet_fd: Insufficient options for proto=fd [ 504.799678][T10953] fuse: Bad value for 'fd' [ 505.486547][T10964] CIFS: iocharset name too long [ 508.658002][T11029] CIFS: iocharset name too long [ 513.109040][ T6046] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 513.269451][ T6046] usb 2-1: Using ep0 maxpacket: 8 [ 514.137379][ T6046] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 514.137452][ T6046] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 514.137483][ T6046] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 514.137596][ T6046] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 26232, setting to 64 [ 514.137625][ T6046] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 514.137667][ T6046] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 514.137689][ T6046] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.271441][ T6046] usbtmc 2-1:16.0: bulk endpoints not found [ 515.606260][ T31] kernel read not supported for file bpf-prog (pid: 31 comm: kworker/1:0) [ 515.876463][ T992] usb 2-1: USB disconnect, device number 13 [ 516.502062][T11148] tap0: tun_chr_ioctl cmd 1074025677 [ 516.502289][T11148] tap0: linktype set to 825 [ 516.981279][T11148] tap0: tun_chr_ioctl cmd 1074025680 [ 518.273278][ T6046] kernel read not supported for file bpf-prog (pid: 6046 comm: kworker/1:8) [ 520.170491][T11184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1652'. [ 520.540571][ T36] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 520.778957][ T36] usb 5-1: Using ep0 maxpacket: 8 [ 521.685521][ T36] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 521.685675][ T36] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 521.685701][ T36] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 521.685724][ T36] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 521.685749][ T36] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 521.685771][ T36] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 521.685811][ T36] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 521.685832][ T36] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.935189][ T6046] kernel write not supported for file bpf-prog (pid: 6046 comm: kworker/1:8) [ 522.016456][ T36] usb 5-1: usb_control_msg returned -32 [ 522.016484][ T36] usbtmc 5-1:16.0: can't read capabilities [ 523.609874][T11218] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1664'. [ 523.653082][ T6046] usb 5-1: USB disconnect, device number 7 [ 526.235178][T11265] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1679'. [ 527.200886][ T6046] libceph: connect (1)[c::]:6789 error -101 [ 527.201604][ T6046] libceph: mon0 (1)[c::]:6789 connect error [ 527.285761][T11277] ceph: No mds server is up or the cluster is laggy [ 527.708242][ T6046] libceph: connect (1)[c::]:6789 error -101 [ 527.708441][ T6046] libceph: mon0 (1)[c::]:6789 connect error [ 528.220144][T11304] fuse: Bad value for 'fd' [ 528.402182][T11301] faux_driver vgem: [drm] Unknown color mode 262325; guessing buffer size. [ 528.433744][T11307] netlink: zone id is out of range [ 528.433764][T11307] netlink: zone id is out of range [ 528.433772][T11307] netlink: zone id is out of range [ 528.433779][T11307] netlink: del zone limit has 4 unknown bytes [ 529.013314][T11316] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1693'. [ 530.148765][T11336] netlink: zone id is out of range [ 530.148786][T11336] netlink: zone id is out of range [ 530.148794][T11336] netlink: zone id is out of range [ 530.148802][T11336] netlink: del zone limit has 4 unknown bytes [ 530.437967][T11342] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1704'. [ 530.537486][T11347] fuse: Bad value for 'fd' [ 530.551780][T11347] binder: BINDER_SET_CONTEXT_MGR already set [ 530.551796][T11347] binder: 11340:11347 ioctl 4018620d 200000004a80 returned -16 [ 532.009051][T11378] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1719'. [ 532.062718][T11382] fuse: Bad value for 'fd' [ 532.081196][T11382] binder: BINDER_SET_CONTEXT_MGR already set [ 532.081242][T11382] binder: 11372:11382 ioctl 4018620d 200000004a80 returned -16 [ 534.421509][T11406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1729'. [ 534.492682][T11409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1730'. [ 535.263934][T11428] snd_dummy snd_dummy.0: control 2:65278:0:syz0:-259 is already present [ 536.698219][T11444] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1743'. [ 536.722547][T11448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1742'. [ 537.314935][T11475] fuse: Bad value for 'fd' [ 537.937813][T11484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1756'. [ 538.150686][T11496] netlink: 'syz.0.1759': attribute type 10 has an invalid length. [ 538.150699][T11496] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1759'. [ 539.800362][T11514] syzkaller0: entered promiscuous mode [ 539.800378][T11514] syzkaller0: entered allmulticast mode [ 540.551341][ T9] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 540.921041][ T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 540.921175][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.921246][ T9] usb 4-1: Product: syz [ 540.921345][ T9] usb 4-1: Manufacturer: syz [ 540.921383][ T9] usb 4-1: SerialNumber: syz [ 541.166867][ T9] usb 4-1: config 0 descriptor?? [ 541.460638][ T9] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 541.879010][ T5989] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 542.028954][ T5989] usb 5-1: Using ep0 maxpacket: 32 [ 542.037014][ T5989] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 542.037042][ T5989] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.075235][ T5989] usb 5-1: config 0 descriptor?? [ 542.160114][ T5989] as10x_usb: device has been detected [ 542.181420][ T5989] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 542.304995][T11552] fuse: Bad value for 'fd' [ 542.326227][ T5989] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 542.357378][T11543] INFO: trying to register non-static key. [ 542.357391][T11543] The code is fine but needs lockdep annotation, or maybe [ 542.357399][T11543] you didn't initialize this object before use? [ 542.357406][T11543] turning off the locking correctness validator. [ 542.357438][T11543] CPU: 0 UID: 0 PID: 11543 Comm: syz.4.1778 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 542.357465][T11543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 542.357492][T11543] Call Trace: [ 542.357500][T11543] [ 542.357508][T11543] dump_stack_lvl+0xe8/0x150 [ 542.357540][T11543] assign_lock_key+0x133/0x150 [ 542.357562][T11543] register_lock_class+0xcc/0x2e0 [ 542.357581][T11543] __lock_acquire+0xad/0x2cf0 [ 542.357598][T11543] ? __lock_acquire+0x6b5/0x2cf0 [ 542.357620][T11543] ? do_raw_spin_lock+0x12b/0x2f0 [ 542.357648][T11543] lock_acquire+0xf0/0x2e0 [ 542.357665][T11543] ? as102_dvb_dmx_start_feed+0x70/0x290 [ 542.357689][T11543] ? as102_dvb_dmx_start_feed+0x70/0x290 [ 542.357713][T11543] ? as102_dvb_dmx_start_feed+0x70/0x290 [ 542.357735][T11543] mutex_lock_interruptible_nested+0x5a/0x1d0 [ 542.357764][T11543] ? as102_dvb_dmx_start_feed+0x70/0x290 [ 542.357786][T11543] ? lockdep_hardirqs_on+0x7a/0x110 [ 542.357809][T11543] as102_dvb_dmx_start_feed+0x70/0x290 [ 542.357834][T11543] dmx_section_feed_start_filtering+0x518/0x6c0 [ 542.357857][T11543] dvb_dmxdev_filter_start+0xcf4/0x10e0 [ 542.357885][T11543] ? dvb_dmxdev_filter_set+0x2d1/0x580 [ 542.357911][T11543] dvb_demux_do_ioctl+0x473/0x540 [ 542.357938][T11543] dvb_usercopy+0x199/0x2e0 [ 542.357962][T11543] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 542.357988][T11543] ? __pfx_dvb_usercopy+0x10/0x10 [ 542.358016][T11543] ? __fget_files+0x3a6/0x420 [ 542.358040][T11543] ? __fget_files+0x2a/0x420 [ 542.358065][T11543] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 542.358091][T11543] dvb_demux_ioctl+0x29/0x40 [ 542.358117][T11543] __se_sys_ioctl+0xff/0x170 [ 542.358136][T11543] do_syscall_64+0x14d/0xf80 [ 542.358157][T11543] ? trace_irq_disable+0x3b/0x150 [ 542.358180][T11543] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.358199][T11543] ? clear_bhb_loop+0x40/0x90 [ 542.358220][T11543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.358236][T11543] RIP: 0033:0x7ff31dcbc819 [ 542.358261][T11543] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 542.358277][T11543] RSP: 002b:00007ff31bf16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 542.358305][T11543] RAX: ffffffffffffffda RBX: 00007ff31df35fa0 RCX: 00007ff31dcbc819 [ 542.358320][T11543] RDX: 0000200000000200 RSI: 00000000403c6f2b RDI: 0000000000000006 [ 542.358333][T11543] RBP: 00007ff31dd52c91 R08: 0000000000000000 R09: 0000000000000000 [ 542.358345][T11543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 542.358356][T11543] R13: 00007ff31df36038 R14: 00007ff31df35fa0 R15: 00007ffceeab2dc8 [ 542.358377][T11543] [ 542.434723][ T5989] as10x_usb: error during firmware upload part1 [ 542.435188][ T5989] Registered device nBox DVB-T Dongle [ 542.449663][ T5989] usb 5-1: USB disconnect, device number 8 [ 542.501474][ T5989] Unregistered device nBox DVB-T Dongle [ 542.517230][ T5989] as10x_usb: device has been disconnected [ 542.723968][ T9] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 542.725348][ T9] usb 4-1: USB disconnect, device number 17 [ 542.790486][T11561] netlink: 'syz.2.1782': attribute type 10 has an invalid length. [ 542.790508][T11561] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1782'.