last executing test programs: 12.557532441s ago: executing program 1 (id=6321): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYBLOB="a5fdad88000000001c0012800b0001006272696467650000"], 0x3c}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8001}, 0x8) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x2c) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r5, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000080)=0xf7e) read$dsp(r6, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r4, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, 0x0) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001a40)=@raw={'raw\x00', 0x8, 0x3, 0x224, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x278, 0x358, 0x358, 0x278, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'netdevsim0\x00', 'veth0_to_bond\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24, '\x00', 0x4}}}}, 0x280) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000300)=@generic={0x3, 0x1, 0x3}) r9 = dup(r8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r9, 0x2000) 8.93673711s ago: executing program 0 (id=6330): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000500)='task\x00') getdents64(r2, &(0x7f0000000000)=""/77, 0x4d) 8.231464478s ago: executing program 3 (id=6335): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) r1 = fsopen(&(0x7f00000000c0)='zonefs\x00', 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000500)=ANY=[], 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="06000000040000005b0000008a"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r1}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000005000000a281a64eaa000000000900"/28, @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000aa000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x7d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$6lowpan_control(r5, 0x0, 0x0) syz_usb_connect$hid(0x4, 0x36, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) 8.172142007s ago: executing program 0 (id=6336): openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$rds(0x15, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = gettid() sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r1], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 7.775905354s ago: executing program 1 (id=6337): syz_open_dev$tty1(0xc, 0x4, 0x3) mkdirat(0xffffffffffffff9c, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8100, 0x9}) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) prctl$PR_SET_IO_FLUSHER(0x34, 0x2) 7.728643739s ago: executing program 1 (id=6338): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000b00)=""/82, 0x52}], 0x1}, 0x40000002) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r2 = socket$netlink(0x10, 0x3, 0x0) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000280)=""/162}, {&(0x7f0000000000)=""/33}, {&(0x7f0000000140)=""/44, 0x4}], 0x4e, 0x300, 0x8000) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r3 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r3, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r5 = syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a00000924030101010505"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000000000000046}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000690000004300000001"], 0x50) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000140)={r6, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) syz_usb_control_io$cdc_ecm(r5, 0x0, &(0x7f00000003c0)={0x10, &(0x7f0000000240)={0x0, 0xe, 0x1, "c5"}, 0x0, 0x0}) syz_usb_control_io(r5, 0x0, &(0x7f0000000c80)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="400702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.57590141s ago: executing program 2 (id=6339): socket$inet6(0xa, 0x3, 0xff) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x5, 0xffffffff}, 0x0) syz_open_dev$video(&(0x7f0000000140), 0x1d24, 0x23635de98487b93e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) r5 = syz_open_dev$media(&(0x7f0000000040), 0x5, 0x141800) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, &(0x7f0000000100)) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES8=r4], 0xd0}}, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) ioctl$sock_inet_SIOCGARP(r0, 0x89a3, &(0x7f00000001c0)={{0x3a, 0x0, @empty}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x0, {0x2, 0x4e1d, @remote}}) shmget(0x3, 0x2000, 0x540020c4, &(0x7f0000002000/0x2000)=nil) r7 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2400000003000100000355c95213031791436fac60db5c8e41d3f1febb4b2ae5d3a9944b64796431eca4c327858fc82ab4b26e68bf01dbef1877bcb18b3e77e2560cb6daa03d80f32076b131fbcea547a173801308dc03e4a99195f1f58b58578df7ac3161f7536e6a6ab74f80fa6522223f5bcb13b644cc85e86708ccd714391dc5424f4f42fe950870a31e53600ca28cf409a900923774466eb1405597619b0afc46a19ea3d1b6351c1d70d3e178e22fa5c690300baa4363e11f"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000824) write$UHID_CREATE2(r8, 0x0, 0x118) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x6, 0x4) ioctl$VIDIOC_CREATE_BUFS(r7, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x4, {0x9, @pix_mp={0x12, 0x5be7, 0xb5315258, 0x6, 0xb, [{0x80000004, 0x7}, {0x7ff, 0x5}, {0x10000001, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x7, 0x489aa92e}, {0x5}, {0xff, 0x7}], 0x1, 0xc, 0x2, 0x0, 0x3}}, 0xfffffffd}) socket$inet_tcp(0x2, 0x1, 0x0) 7.408270247s ago: executing program 0 (id=6340): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0x9, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8054) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) socket$kcm(0x2, 0x3, 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x2}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x2009, 0x5, 0x10000000, 0x1, 0x32ba}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) 5.914177436s ago: executing program 2 (id=6341): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x7}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x135, &(0x7f0000000340)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x127, 0x8064, 0x0, 0x2, 0x6, 0x0, @remote, @multicast2}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x14, 0x10, 0x6071, 0x0, 0xe7, {[@timestamp={0x8, 0xa, 0xdf5d, 0x7bd9}, @mptcp=@mp_join={0x1e, 0x3, 0x6}, @fastopen={0x22, 0x10, "053a7b5fe7a76ccc09f35831bba4"}, @eol, @sack={0x5, 0xa, [0xffffffff, 0x9]}, @sack_perm={0x4, 0x2}, @md5sig={0x13, 0x12, "e5942ea0beb42f8bf832c45ad4a82191"}]}}, {"577fb1301867123a52a321938cba9d644bb055cfa340f7f80347c07dde5c3d6c01972ec0c3f42e38d72f8441dfab6e95d9b9da78d37eaa0386e86d8a3e2be49e2fc3869a05ef08ea537ea41414d37810c7d74837b864e692bcfb7d795b21d4d4ca6dd898954bd21ff71cb58ce7259852eb758fbfdac27c06e94e69febd1c43d72c34852c9a03644d869ef29969e99257eafa02d0cc97f2f789e96204957e1038727018f7692a313dfbfc47ad79fa5fa8ce4f3167dd306c31ef6d0b4aee3188371102bf"}}}}}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r3 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000000)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) setsockopt$inet6_tcp_buf(r1, 0x6, 0x1a, &(0x7f0000000100)="90a70a27a34a821e28f077e2ac4723b029ff2b1e6aee37ab507c8d3b10e4676b8e28215adfbbe5c9e5c4dee4a02b5a8b731741174be559aecca5ea1be8426afb17af088f3680099b5a415aca59a402829ede16614a7ca32247a5050ec86ba9793123c7ace73eabd5e77c7a2b88d2fa427f59dde90bb1fae5f161cc80f941babc57a225ed52c54e37c30b106722b40acded81499fb81a1e28e6a5b78268f3cd203b3ee23910259cb9f15e9d807ae8a85fbd2fc33f845b7bf6112aa7c2d10d4a71231b33d4c7be82663872a0c1bb3d766407074c0f13fd50022fcb98f2882351e0449dbdca103215370e35abaa", 0xec) ioctl$KVM_CHECK_EXTENSION_VM(r2, 0xae03, 0x6) keyctl$chown(0x4, r3, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc048aeca, &(0x7f0000000080)={0x7, 0x0, [{0x295, 0x0, 0x4}, {0x9fa, 0x0, 0x7}, {0x991, 0x0, 0x20298ced}, {0x3f2, 0x0, 0x7fffffffffffffff}, {0x94c, 0x0, 0x101}, {0xbc5, 0x0, 0x20000000001}, {0x2a8, 0x0, 0x8}]}) 5.878651818s ago: executing program 0 (id=6342): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x400c80) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000280)={{0xc}, 0x0, [0x40000000, 0x0, 0x7, 0x3, 0x10001, 0xfffffffd, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x2, 0x3, 0x4, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x4829d, 0x0, 0x0, 0x0, 0x0, 0x1000008000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc, 0x0, 0x9, 0x0, 0xfffffffffffffffc, 0x4, 0x0, 0x10000, 0x4, 0xfdfffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20040000000, 0x0, 0x8, 0x80000000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x100003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x40000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1075, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x3, 0x7, 0x0, 0x20, 0x6, 0xffffffff80000001, 0x2, 0x0, 0xfffffffffffffffc, 0x4]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000002c0)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe, 0x8000ffa1}, {0xfffffff9, 0x80000}]}}) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}, {0x9, 0xfff3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20000000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000400)={{0x80}, 'port0\x00', 0xee, 0x1a1c17, 0x6, 0x0, 0x100000, 0xffffffff, 0x8}) r7 = socket$can_bcm(0x1d, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000003702000020febfff7a0af0fff8ff00f869a4f0ff00000000b70600001218d1fe2d6405000000000075040000f1ffffffdc04000040000000b704000010000020720700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fca868f0399d909a63396c113940c19aab9d607000000cb3924b6b14809000000253730e711f5969f62c28b22edf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa8a23f1740637c48468766af54043000000ec44631ac2622cdcae18c3d14b00006dd87235b44174f7c034318508f49f09781dc7a2cfbb9a0f119e31975f551558055dc2dc2739e2e735d0ab961dac07f4f6d8aa1c3f16765d427c0e01000000f74c16737d50d2a44eacf2b734b0289c7a3a16eeca71296746681dd1046a36bf61af491e4fa734318e0d72b8dbbc2b2b869af2f87903000000b6ecc7de09a2257e908cd92e664fa7aba7f07474863333fba3eadd8efbd5dae6c024585d972b1bf8c4e872bba38160be9e9217b50876b5708e64e70f7d8225da90ce9bc019084873ed07c0c59c4ba053fe77e0d37ccc3318da2e9fefaf025527e734ed1de5d12b4c56ca3b03dc121086071d1f26821a428d28eefa22ead6a3dab9388da53263b81ebe6be197a48a63440000a356240c4e2df57457000100000000000000000000008d2516510b29804b4ac034c19cef0c773f01064709edd63a185cbab8456c25283b9514b220fe401503ff536478088eb9fd932a0703a7bf9ea4ff03000000000000a4662fb577824f210a69f8e5227fd32e7d5a2c7ecf57ac64509224b52e746d631637e596e5a55d2c805bf725b9d14756c8cfa292aae0872866cf9fe063317741a0db9081d4393a7f9bcc0917d60a11b4a9ece831660ce625de441cef915eba31255d163f7033045ceb97f8ea006efc5b84f75ca1fb74c9faef444eb12f46b435de87feb2f7f2d7fb659395e4b38178b5c67e6ac100000000000000001b0e77bd5de136fa1bec1a26c622bb9662d9ee70147acc5605aa2318855cb8b918000000c5f265dcb5dce05f94ea051c4e8dcdf37d01ad7aff64f84ce32b841c799f47c2949725285fc50f1dd3f5e264023082eec752704c1f598151aa7d29e0d79522df196278acf327a74777d1f658f50c27b60198770ff8ebef9df1b750d56d4d195ad7a267c46b3348b0e03ed33b5bca13cafc304dc6da78d20f029742d8d2f36acfdd331081ca00c1d5c8b7bed2ef603d6e7f1764246aab2d7d531559a971939a038055ac28625ec837f824ff537cd67993a3589be73a18680da50287b9e962b1a0235c290346a21ca5de55c49c78e411c791617000ef8df75411a5d300000000000000e0ffffff004deb8d49806823655735bd6deb49edb2e42f4ed9e6e9080366660b847bf0f29e9a6c808459e82cbb0000000000000000000000000000000000006b5530865aaa7aa6171f66f2bca87fff201588427bb65ed3d5e7a74e9b5ece44067d4a9875a210bc1fe72b844b9eb3c9083560ef5c92b8a01188d61573bebb74efbf70893d2eaf76517e5020a71023bca1194ad87cade480ba3dce8f3244d716d1cba50a8165e2b6d18ff2c58293c2e314a7447ed3a1c870908aa8e3b33e6a94c7381bce9fa71dcbb758451f247e38d80d66e03d7564a5cddfaf06574b05cefb2670f30c2d501ee625ce3ffc08f15b53d224527a1ce3afbff66f06098a0e5517068aa48f2a82496fe83ee85218fe7f52b48742c7055f2a144c13e9"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x55) sendmsg$can_bcm(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000f"], 0x20000078}}, 0x0) sendmsg$can_bcm(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0300"/12, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x77359400, @ANYRES32=0x0, @ANYBLOB="000000000700000000000000000200008bc7570000000000"], 0x48}}, 0x0) r8 = epoll_create(0x101) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x40000014}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) socket$nl_route(0x10, 0x3, 0x0) 5.81890021s ago: executing program 1 (id=6343): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) request_key(&(0x7f0000000180)='keyring\x00', &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000240)='/proc/stat\x00', 0xfffffffffffffffa) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4800) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000006a0083130000000000000000000000010000000008000e0000000000080005"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x40040c0) r4 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0xf7fa, 0x3180, 0x2, 0x1d8, 0x0, r2}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r2, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2}) io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x30) 5.671758879s ago: executing program 4 (id=6344): syz_open_dev$media(0x0, 0x200, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x237, &(0x7f0000000280)={0x0, 0x275, 0x1000, 0x0, 0x155}, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r3, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newlink={0x60, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, r3, 0x42024, 0x8d85}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x7103b}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4c014}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) madvise(&(0x7f0000a30000/0x3000)=nil, 0x3000, 0x10) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r5, &(0x7f0000002140)={0x2020}, 0x2020) 4.884995742s ago: executing program 2 (id=6345): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = msgget$private(0x0, 0x0) msgsnd(r1, 0x0, 0x8, 0x800) msgrcv(r1, 0x0, 0x0, 0x2, 0x3800) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000001440)={'syzkaller1\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4c, 0x2, 0x7, 0xe, 0xe, 0x8, 0x82, 0x5, 0x4, 0x4, [0x5, 0x5, 0x8, 0x55, 0x20008000, 0xe7, 0x1, 0x2]}}) syz_pidfd_open(0x0, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r6, &(0x7f0000005c80), 0x0, 0x10122, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r7, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r8, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x7ffffffe, 0x4}, {}, {}, @result={0x1f00}}], 0x1c) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f00000002c0)=""/99) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800621060090390000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000140)=0x5, 0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000480)={0x98, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xfffffffc}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x6}, @IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x39}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x98}, 0x1, 0x0, 0x0, 0xc040}, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) keyctl$set_reqkey_keyring(0xe, 0x4) request_key(&(0x7f0000000400)='asymmetric\x00', 0x0, &(0x7f0000000340)=')\x00', 0x0) 4.649393572s ago: executing program 1 (id=6346): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mq_open(&(0x7f0000000b40)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xdf\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\x8d\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x3, 0x42, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r2, 0x11c, 0x4, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2, {0x40, 0x80000000}}, './file1\x00'}) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000200)=0x4, 0x4) socket$nl_route(0x10, 0x3, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) syz_io_uring_setup(0x128, &(0x7f00000000c0)={0x0, 0x588a, 0x8, 0x0, 0x20017b}, &(0x7f0000000340), 0x0) r4 = syz_open_dev$dri(0x0, 0x1, 0x800) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r4, 0xc02064b6, &(0x7f00000001c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r4, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r6}) ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000580)={0x401, 0x1, &(0x7f0000000180)=[r6], &(0x7f00000000c0), &(0x7f0000000640)=[r8, r7, r7], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x4043, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r9 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r9) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) prctl$PR_SET_MM_AUXV(0x48, 0xc, 0x0, 0x29) read$FUSE(0xffffffffffffffff, 0x0, 0x0) execve(0x0, 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000380), 0x1, 0x2) 3.904755571s ago: executing program 3 (id=6347): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0xbfb, 0x2) dup2(r0, r0) r1 = syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) io_setup(0x8, &(0x7f0000004200)=0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r4 = openat$dir(0xffffff9c, &(0x7f0000000140)='./file0\x00', 0x802, 0x184) mkdirat(r4, &(0x7f0000000440)='./file0\x00', 0x2) io_submit(r2, 0x1, &(0x7f0000004540)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0xfffc, r1, 0x0}]) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, &(0x7f0000000480)={0x50000, 0x6000, 0x1000, 0x1}) syz_open_dev$midi(&(0x7f0000000000), 0x2, 0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x20, 0x10, 0x1, 0x70bd2c, 0x20, {0x0, 0x0, 0x0, 0x0, 0xdf15003157970008, 0x20c0}}, 0x20}, 0x1, 0x0, 0x0, 0x200080c5}, 0x20000010) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x15) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r3, 0xc0305720, &(0x7f0000000080)) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r8, &(0x7f0000000140), &(0x7f0000000240)=""/154}, 0x20) ioctl$EXT4_IOC_GETFSUUID(r8, 0x8008662c, &(0x7f0000000180)) ioctl$KVM_SET_CPUID(r7, 0x4008ae8a, &(0x7f0000000000)={0x1, 0x0, [{0x1, 0x7, 0xa1f3, 0x68, 0x800}]}) ioctl$KVM_GET_MSRS_cpu(r7, 0xc008ae88, &(0x7f0000000400)={0x1, 0x0, [{0x480, 0x0, 0x5e}]}) ioctl$KVM_GET_XCRS(r7, 0x8188aea6, &(0x7f0000000200)) r9 = openat$vim2m(0xffffff9c, &(0x7f0000000b00), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r9, 0xc0f8565c, &(0x7f0000000000)={0x0, 0xbd5, 0x2, {0x2, @raw_data="f91fd2868ba3d9189024fc40809db9e19479c0b5fce2c721330d5771dbf9dbfa9e2ad24622489141b4803cfeb0b70909e75715a13fada32fef53473eb9ce014fbe3929ea41fdeb0ff177dfb9d3227f213a6451b667d35b03b25618d20cea1f072990b86d463a0de7513744a2bb3bf4fb6049e30f7c533837beba9566c9fd8721c48fad424a5fb17bc1419fb85e5e7dce382ba5a1ce182b419becd67c18f0ba055b8d72225df5a5e7917f8a87a52b8c2516745c462e944b0c22a7e71ecf492a0ef916598abba0e732"}}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380000001000030400"/20, @ANYBLOB="7e52c73c754dc8bf419d87272f87ce9d9e8fe01734350ff1865ed6f717dddc873b7d1ff079de964e0bde564e557675644985537e9af0271a0954127b9864edd8066596357239e11879ae9827d2bae5edd238eeb861018ee93c7244ee4c8197", @ANYBLOB="06130000010000001800128008000100707070000c0002800afe0100", @ANYRES32, @ANYBLOB="3218b2a9ddb7d2466f02bf25fab74533860cbec46498148e8ec3b700a742a9ef16e828178b824e9c3e7dd35663336b1b8d182bacacb2e9a9893123e61a23700e835b66c4163f75832fa2ac8f9a5ae5972a8958ad233c669a6212900b36fd6d592cdec40c56171f7be6bf89823e7cfc8a4af0f095a5819a486f38d8c815efd4062be8cd8c1aa666a0e9c74815f29fae3c577f4e61dc4d1316e9345a20"], 0x38}, 0x1, 0xba01, 0x0, 0xb0be6a4b946c7b09}, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00') preadv(r10, &(0x7f0000000380)=[{0x0}, {&(0x7f00000003c0)=""/114, 0x72}], 0x2, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dd30800140600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0) 3.662723966s ago: executing program 2 (id=6348): r0 = fcntl$getown(0xffffffffffffffff, 0x9) capset(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000040)={0x4, 0x80008000, 0x9, 0xe5, 0x2, 0x9}) r1 = openat$cgroup_root(0xffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f00000000c0), 0x2, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x1d, 0x11, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x0, 0xffff}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f00000001c0)='GPL\x00', 0x7, 0x19, &(0x7f0000000200)=""/25, 0x41000, 0x18, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xa, 0x2, 0x47}, 0x10, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff], 0x0, 0x10, 0x1}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0x7, 0x0}, 0x8) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={r3, 0xffffffffffffffff, 0x7, 0x0, @val=@target_btf_id=r4}, 0x14) r5 = accept4$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000480)=0x14, 0x80800) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000500)={0x1, &(0x7f00000004c0)=[{0xa, 0x6, 0x80, 0x4}]}, 0x8) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xc9c}, @NFULA_CFG_MODE={0xa, 0x2, {0x7fffffff}}, @NFULA_CFG_MODE={0xa, 0x2, {0x8, 0x2}}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x8}, @NFULA_CFG_MODE={0xa, 0x2, {0x38}}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x1ff}, @NFULA_CFG_MODE={0xa, 0x2, {0x9, 0x1}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) accept4$packet(r5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000006c0)=0x14, 0x81800) r6 = openat$cgroup_procs(r1, &(0x7f0000000700)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000740)=r0, 0x12) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000006640)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000006600)={&(0x7f00000007c0)={0x5e2c, 0xd, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x51bc, 0x3, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7fff}, @NFTA_SET_ELEM_EXPRESSIONS={0x84, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0x50, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_FWD_NFPROTO={0x8}, @NFTA_FWD_SREG_ADDR={0x8}, @NFTA_FWD_SREG_DEV={0x8}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}]}}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0x15bc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x28c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf1, 0x1, "aa7a5b8801cab3b34d2b5d193ae3ea0c8944b6b18304d3c688dc624f075388bb117d1031aa1ed1e2d7603716bb3426c5554b8cae7ba33a96269150a8c2557dc32cac03f4726645ccfb16229f7daa10f532a1b0ecdd770ed668a1ac5f259402a9ec8419d3831b24b227f4cc889bfc7a99f9138e6a0ab2edffb1eb46562bdca0020bbbc1e8ea8d28b311ae27312aba3bd3e2c9ac4fd650c06ce576161ad8a564087b074bb4edb3252f7a411866c4cfae4d19db7e4c2867b95c20e2a86809601957f4fa41e5e0e505b5a7b06860cde6687dea4182d79ff6c1f92b3756ffb86aefd9aee1698cca5ad3e490db00a410"}, @NFTA_DATA_VALUE={0x36, 0x1, "a5ca1f46fc1267a6b29562f0f09cdb41b1438b658e824f5297415732e3853c1fe49c137ba123c1e7ae816afd393e30936147"}, @NFTA_DATA_VALUE={0x7a, 0x1, "02e2f402d03dff0aaeb45e9181045935f63015addc51e9a75f4e67d21a3069773de894f41ac7955e49323ea9f35d0db59db4cdcd6b8f0e8a028b4a0e347e3d460f5c4f5fe2eae93c8a8c988c103b96e56f51dc10f849d8cda495997991b4077c8fa245bd18e2e0bd1f75af8c6cd81238c23eade4e0ed"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x7b, 0x1, "26aed7c7b951002efa858bbef46db10ce07c8826feb43b1804552e76f6dc37f619a76915f2624d00872071e8f020f7488b01050dbc186660b57e6cb4016063b6567fc012c48adde335f81620331d7902187ba30b8bce96bf5c1891e15f645611a186e6753561e5819f94231e6013e6f1f61fbb26ef819e"}]}, @NFTA_SET_ELEM_KEY={0x1018, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_SET_ELEM_USERDATA={0xe7, 0x6, 0x1, 0x0, "acf99f959e4e8afce92cd527009deca9bd205d20af0008c72b9fe64489f8e389cfcbb56a9fb464b9016abb9b7365f13f56743034cd954d05f4b315775b2077b6d58cfad6cb488b63bf288b5e9a70eb481ba30950b5956450f8af9299d5eaec22a1d2ef550231b4fc1d2724540d7c8acdd1c2ab6278ef6f2c14e3eced56d63a2b7d2033b8ea5856698ca6f98b71c7b562ac0c716037123f5ddbd268a1497a564df1a39008c46c20fa03df5841ffd9c3aefcd930db2f5b69f4b6c3b99ed023b6ab40133a3959e70a81ebfcbd95081861da80d39f380a8233fca379da407b4ab732c0b888"}, @NFTA_SET_ELEM_USERDATA={0x8b, 0x6, 0x1, 0x0, "d93ad2e81912ad947d712303577e3b4de95cfd29cfb11c93d39f84252a77ff84f3bc4c779f02ea9a91e88136f4fb69d237c1dbcbb54594260d92b1e0f6753cd949e0907bad69d9507628d00683806e96ce251cd012dd5baa9dd9dc1a54bce51332455b8ad75c86b7ce82d50ad5d4b432cd8572ce2fe724441f5672300ef9f687c0fe9b5a658e89"}, @NFTA_SET_ELEM_KEY_END={0x14c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xa0, 0x1, "fe1fc2d49de7fd8eac031e32723d51c11a70498789abf1d3565db69f289f128e28e12ef8673120d5cebaef50e4a37d36147f88bb3d7ae05a6e8446a8e8dc70016e7c014ddaf856146b96c210258f50a387ab6d769f1014fc0b26ff4d09ff20c26bf81e2baecf1b93590a1fba03daaf953a0df79b0dc7ad44cae88446f7c4887ab254af098455254c6dd05f07bf00895ace225f77ed078265cf567af8"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x187320a6f42db2a}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_EXPR={0x38, 0x7, 0x0, 0x1, @fwd={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}]}}}]}, {0x15b0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x720d}, @NFTA_SET_ELEM_KEY={0x2b4, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x2}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xca, 0x1, "cc6c3581709daa1f0b60e3dac530d387147d1217e74fc32a554fbd186bd7833764efa9cb1ef55bf85001549538248f675e03d36a77396514d9e7c3f83152a222eb615fef80ddbe265ff06504b9780e6e92ccb7864839b5d4ed090bfd856b35eeb628829825cc5b7bc3ca3c45923d203cfc056084016759ec4c282beeae8a8a52004254013bc24d7862f9191c47a6ad46417387d78b1b1f1a2399fb09d20e98fbd8b67d26c1c876ceaa4a3353a491b3eaeac135c0f6a31077b52110203b15fd56ef55d54eb57a"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xd2, 0x1, "8e3606c5f12406d5f85f4c9d8a455eda0a06d32d3976b58570d9d65ab5e2bd891ad3831cdc6ba9a2495819499f5ca4e1460c9d771209be1536fc2a67511c7ac709949f7853b494ef5c794778868e9c6c24d433d2e81f08250cbf85d1b56679d4593bd394361ae78ad7340aa95ce61c09a0ee4975c56337fa4c6a8d4d0395e717089d2d7d1c87b096b293d9ceb19e478ca1f49f48905ef9f2dd241c280204d6b82d81a2f86b18c8fed3188822c2b02c3b2c59f796e203e1a042b9c4f51e456b8bb5ef9e8f8e0fc04f1c6ad7b3af60"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_SET_ELEM_DATA={0x1fc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x23, 0x1, "63d34e5a9284eeea70652fadbf2eb64078a1109160ce28813bb54f47d10a20"}, @NFTA_DATA_VALUE={0xec, 0x1, "6e77224ad9b3eb4553d36ecf1e299d16ad97bc7759d9a2b6f83f8727f5a2d97901a510144747b379aace47bff52fe56400c4f72abd00e3d60c24cbe5630d5606ad4d671233686e2c85b044646b4bdaec0150f23988227ff0919e6a6686baf242de79b26127943e1631550d70a47ddcd8badc815314524e268eb8e716bfc207ff321ec9af9653da1e81a625d8c8c4943c2576d4391b954f8c55630ae154081a670eb9886b8f61aa4d6de9d953bbec459170fa3c216f96b7766f71c9eb2def3f0dc2af21ad763319f13ace183507d2faea9a4697a053cdef3ccc88150c5492e763134a99fffde2f5a3"}, @NFTA_DATA_VALUE={0xe7, 0x1, "c610b3950f258662869c140304f6f391634a39e752f34d8545c56f646e96bb094ddc69e9bc02b2a842224b19c593d5f322fc634a2202d534e3a98a2679fedc7a13b34f5b5bf2d1d16187fdc6abb36997783d7e4a6353cf9f47ef748436d4a479445230159f848cfb7102cbfe03f8f95ba7543379d680d5f54653236386896eabc6b1c7af2e18dafbed79eac58c27572e5510e2643868701ef23c70047e4b4dba0f718d80225e96ae5c784bfec2ac885f772816f3277381a737442c9df469db46e53f8436bb8c42478f2cef6655f11bb9c05e1a92bded4eaac2106e0554cccccd32f8d2"}]}, @NFTA_SET_ELEM_EXPR={0x18, 0x7, 0x0, 0x1, @flow_offload={{0x11}, @void}}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x10c8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x72, 0x1, "303f575ccc52eb27c4972f0022f277abf5184f5cc6b9b4e7c07b904967bcc80748e3117ce472233701281ce8ce128800d6dfb600fd260e4a667c609d758d5e67dea8eb6c03fef876c876cbd923a8ea201bad7278c94dc143f053683ead8d372b0c4b84b8de13735e699dc4bafb9a"}, @NFTA_DATA_VALUE={0x8, 0x1, "bd68e3bd"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0x2508, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x3dc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x28, 0x1, "fd24d2e5fceb1e02ccf4c8620048152e6fa880a797adf9724008f2250c2caa2424187e6f"}, @NFTA_DATA_VALUE={0xe8, 0x1, "d214b0f4ed842df0e91070390261dc4c80e234bce77504fb9143f99d35839c2442e611e06293ade0214955368c5d3ff832243ed48bac7b521bfd5c3c86c239388a4705868c82589f23cd65eeee3fc41bab8ac1b116a2f95ef341a3aa57185eac5b590f4cb39f3bb98fb2890b652624de06277a46fe68d562c1cec267741f56f40794fbafe760a35fcdc19618fb4ad77a66e2d0981a1cb41da85f299d6bdc86345671670d57ad323a3508b5349b3caebf7415704dc8907f6b7dc552b4bc7f9f6b86fcf87d2d2fcc96ad132d3f3f39ff43332b3b84157053246a38eaad89895e3e0b9a870a"}, @NFTA_DATA_VALUE={0x58, 0x1, "f8b9551d792f5ecf97201d1fecc0ab9258d2ca474cc9d578f7b4f26e056df146a89d543df3a87857d48dd7df883a97ef3c3860401ee122ea37a1120b71096d792eecd7ab9ecdc6c378982b791cad234a929f0ab4"}, @NFTA_DATA_VALUE={0xc9, 0x1, "332c1cd3af90e374ed7d56bb7a1dd1139914bb9b0937eedc660200d7b1e69124e1952bae09b9e669f7b46cf034e6f67802192710d8a069704b5c2b88bbbe41a7a458ca8db14cf6df847950324bf189ed763acfd39e251d636ae7719c1295e3f38a92c8a935f7bcef5620c447b0e6bacfca1fb57b1d46859aa6be73b0e891fe3f605190564b33c54fdbcac905e7e69a6d0b8b97aa3f987f313d37b0c8baff045f2d00916fd2ddb1b3fb4bcd4f9173d93598ed8638f2bf0cd6ccc97ce2cd238992ba3c82696c"}, @NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xb1, 0x1, "f0976128d02b12be97c704a5ab7970f13d424e80b9e6a27899e591bdf202571bed93d9aed646c6590cb0fa485a2dd7f5ce8a545eadfa92cd5420aae68b0e887da2beb2db7950781670cfd9f3a104130ca22e031d26d347fa9584f0bcebd9a21408b5cd1fa0c0336e6f05d9442ea652eac1cb9d7ad762d8fca736b351240d9a3a6e31bed199e39682ceaeea656bd5b07b7b15b217ab8b971f7ce21d39cffc7a1d90818024c0f98130e2cb27bc41"}, @NFTA_DATA_VALUE={0x8c, 0x1, "f1f73d7151233aa8ff2fbf5f5395db198b297ff30f0aa9a6e5db943b9ef8b6148e14d77f7589a96444a0376c908ba3d4d6c468ba043cf1b66b98e623ba6a68d3ff37c7e729acb45bcd2fad8dc2d35d13936a18975bc3efc536e1eb511aebe440d980a5b8ea9d1f029c94e7b1d0315b24716bf087b4840aeefe3720ee2ec78c61a0714edef2d2295d"}]}, @NFTA_SET_ELEM_EXPR={0x38, 0x7, 0x0, 0x1, @fib={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x1e}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, @NFTA_SET_ELEM_DATA={0x10b8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x42, 0x1, "54c8310a7ac84b5097464403c6439b66862b7083f67dd1a3b390f333f50e3a1e5ee00072c4ecfe9aa153e57d5bc678d6a97ece8e1836ad751b18372151eb"}, @NFTA_DATA_VALUE={0x4d, 0x1, "9e9d53f1c32aa82ba4bdef84e64aa022c059a2652e1dc878c7c3c96fd88a9a084cf2746bfbb72c3240aa08eb46ccdbd3dfbe0e2977874f5b9be9f666fc850521bad14dc3b54fdd689b"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_SET_ELEM_KEY_END={0x1038, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}]}, {0x98, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x94, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x9a0, 0x3, 0x0, 0x1, [{0x5b4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6000000000000}, @NFTA_SET_ELEM_DATA={0x31c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xab, 0x1, "49768b3e30f9250dcab865d2801671a39de7842f72daa29a95e2f9b4edf7119266a974c7772afc0a482f2a16b55949ab7828443ab2aa8df43435fbf2ce7d771c72e801833db65e84f55415db74a3244b0a6450a810bdbd3b8b887fbb3d527f6ade3773cadfd4e5b630935918324d6110acae08b498b0255c0d0925800a12900c3993f66f618ebeff7fc3c1060ff79ecc786b6bb1157f79ec80632bf9c784035edda0d039755f1f"}, @NFTA_DATA_VALUE={0xcb, 0x1, "add36a1d08c06319c393303c709ab5aeb544072023d7cbcf1952bf8299b49bd4e9b50388aa4d6550862ed1e5f84a788dd05b87403f0f035ce9b8217aae60949bc93c64dee6d2f4d7dcd884be78f6f0c8867e221def1402ac447a84861a520c6723ea6485e66e632f41495816182a41e2aa4c0ef2562cfa910a7de42577f15270c7a68a7d95f6b7e2abad93f88c8098a4e211d3bb2da8ca5941857791aa16ed2c8f31b61f0f18072611009070a64df03d4347e47110c0aa7c7a5ad7bb736e5a151d2da1c5d082ad"}, @NFTA_DATA_VALUE={0xe3, 0x1, "4d0c44fbbc249f9eec6a75078e21048b09c6e1492166b60b9feed6d7fd0b185fcd5fd4b9d789c94f1c9e61f4ed740fa6ff8b524b65bcf4c2b158c60ea34d0c19d6146c61554d248a05a8762d55d18c040b5f93d7498a208d460004c3a0bdad2d8cfbffad2320bcd34d5e2646a38554b5613bcd692f4d445639a81e05eb6df642ebec5563e0ea333b106cacbb1ad3bc26a0276b7e226d7a50c44b433f56435989e7a9a816ac843fc7b511bba80f7dd05ac6ecc5a3d6d9dbbf067f6dedc1d93d34d80749b609567dd3d3ddf98a061fa9e2bc84e5953a2e9368f0d1222055c771"}, @NFTA_DATA_VALUE={0x3a, 0x1, "7b2daa4e48014b1eca48d578cd07aee6e5cbf53f33841e14efb9b4275c5227b0944b3a97fad8c8cc3b283cf603658da7354de3d99f15"}]}, @NFTA_SET_ELEM_KEY_END={0x148, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x10c, 0xb, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_CONNLIMIT_COUNT={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CONNLIMIT_FLAGS={0x8}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_CONNLIMIT_FLAGS={0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x28, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_RT_KEY={0x8}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xa}]}}}, {0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x44, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x6}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x3}]}}}, {0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x12}]}}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x34, 0xb, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}]}, {0x3e8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x2e0, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5f, 0x1, "cc13a930d803ac5340f47a88acb5a2a8158e6abcbdbfc425da511e99a909db7f2e0aba91d1005bab145ee3d42305874511d02b26e9d3296a81255c309b03827e6bdee799844e85f2731fc796f4b2e2e6ec2ae06627920aaa58becd"}, @NFTA_DATA_VALUE={0xd7, 0x1, "1b3905fdc2e45308fe8cdfcaf47f5f584d5800167085f95d84fd029c1fd4f04d1392262448a6b06341c277ebb5522be923c588a4ed89706184c4755843da44bd0d8b86013c21ae152eb01d45b3a08c3d9062fd1bff2a6546835ba4e082ce3b64de36b383d568158a7ec9a8d8bc13703ea57a09381ee777c49c35efdd6df91244afeee7e3c40c5953d93d6f3a0ba6415282ba6df179e2466ba05c031e4a96f50d5aa5abea334f38caffa72616747ce52374e943164f630eb637a2ad68472f2f15827b152333cf49c94110d3874dcfa718db2832"}, @NFTA_DATA_VALUE={0xc6, 0x1, "22577cdafb73317cb9a282f546a57ff83bb484baa7593199515d9ea34196925cb77b3cdb7070d4d0a347c5ba1da43a14c3a2ff6fb3f6a521e9405bc7e9293eb0c572369609c22a41585a743cfd41c9fcf254c047aa4da5de35123a14c0993a5bddd7cf70c7cb8638d934afcc28304039d7e4cc5e9687492717b0f0b8b9f8b6921a056a80226e3614e602ba076e9ad29a163c0d3515d3bbd768558b3646b638d73a3e0eac61df5b776db90c66ef1a20a690e3ca494df7780e1ccdef5daaaedd6b8606"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xa2, 0x1, "a91ae70b99dfbec1240c79baf2d1d594bdde4a29564e58844c863ecfa46beb3780ab124544f4408d95045b2b6929d5a415746ddbca29604af6828b0de46431de8485fe3f8d60078adff7f558ae6cacdaeee1005fb3bb41b672fd872285e977bedb1b925568422d9ea67e67252d8d5742c6162c8d78ba60bf0634b901f1d189b156b3f6679e01c7b97680ee0eb9b9c9e78569a2822c1473d40bc2f64372e4"}]}, @NFTA_SET_ELEM_USERDATA={0xf7, 0x6, 0x1, 0x0, "01cc1ed09cb35ce22563e64dfe8d9e31e7a9f7fa4e26f361d84a03210012a796d7519ee41ce927a58d0b0504941e0a110bc0dd8e88ccba365f11ab32f8fd9796a4edfe3b52f83c90598ab49aff91cb622d0cfd0370f64e3e33582708b1dac35badbaf40ff8dde0fab1eec9d6f37da4ca1b78e6b62a2cdc7bd50f60049648c73bcbb7269bd3c2b6812d8d06b8f12e278fc6600402527f9e518a39e9561ee079c359adb92dba4dab600e99087a54b193d6d3a939062c36ba7c8206bd2991cad71f8810c0aa7a01c373310c984bf8ea3773432677a2d9b248ff9bf8b07dea165da1569990707c2dacf9222b8499ae64bbe45eb195"}, @NFTA_SET_ELEM_EXPIRATION={0xc}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x268, 0x3, 0x0, 0x1, [{0x264, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x4c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x1f4, 0xb, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8}, @NFTA_NG_DREG={0x8}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_NG_OFFSET={0x8}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x81}, @NFTA_NG_MODULUS={0x8}]}}}, {0x3c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_REDIR_FLAGS={0x8}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_REDIR_FLAGS={0x8}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}}}, {0x2c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}]}}}, {0xd8, 0x1, 0x0, 0x1, @match={{0xa}, @val={0xc8, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_MATCH_INFO={0xb9, 0x3, "26443092d0cd27cf5960312959e1850004c4dc8ddd2d5761253b90a7f206d24f4724c8d34153b54a6260aa8ebcafbb1060325e34e17cfb22afcfa86853180314b27d6e1a68b439f72f9004adf3e50e56866c3877f75ec143d7044033992d5cb4e6b63691253a670c2bd9a5794d74b50b02991ae4bc7510fb209265beecc4290f43af9680b79d4344cb981efddd8d30c9038e57b47d9f87bbd0c75c3f251adacc62b327cce667d126fd420b67c73d2d7da1a35f6a01"}]}}}, {0x5c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0xa0}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_TYPE={0x8}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_HASH_TYPE={0x8}, @NFTA_HASH_SEED={0x8, 0x5, 0x1, 0x0, 0x5}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x608}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}]}]}]}, 0x5e2c}, 0x1, 0x0, 0x0, 0x20008001}, 0x2000010) r7 = dup3(r2, r2, 0x80000) ioctl$SNDCTL_SEQ_PANIC(r7, 0x5111) r8 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r8, &(0x7f0000006740)={&(0x7f0000006680)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000006700)={&(0x7f00000066c0)={0x10, 0x3f2, 0x106, 0x70bd2a, 0x25dfdbfe, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r7, 0x40186417, &(0x7f0000006780)={0x100, 0x921, 0x5, 0xb848, 0x1, 0xffffffb5}) r9 = syz_open_dev$rtc(&(0x7f00000067c0), 0x5, 0x210000) ioctl$RTC_WKALM_SET(r9, 0x4028700f, &(0x7f0000006800)={0x0, 0x0, {0x1b, 0x3a, 0x5, 0xf, 0x0, 0x7, 0x2, 0xe4, 0xffffffffffffffff}}) ioctl$VHOST_VSOCK_SET_RUNNING(r7, 0x4004af61, &(0x7f0000006840)=0x1) fstat(r7, &(0x7f0000006880)={0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r7, &(0x7f0000006900)={0xa0, 0x19, 0x2, {0x2000, {0x0, 0x4, 0x6}, 0x5, r10, 0x0, 0x4, 0x1, 0xfff, 0x40, 0x7f, 0xe7d1, 0xd03, 0x1ff, 0x3, 0x1000, 0x7, 0x2, 0x62b5, 0xffffffffffff0000, 0x3}}, 0xa0) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000069c0)={0xaa, 0x122}) fcntl$setlease(r5, 0x400, 0x1) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r7, 0x84, 0x1e, &(0x7f0000006a00), &(0x7f0000006a40)=0x4) getpeername$unix(r7, &(0x7f0000006a80), &(0x7f0000006b00)=0x6e) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000006b40)={'dvmrp1\x00', 0x2}) syz_genetlink_get_family_id$batadv(&(0x7f0000006b80), r7) 3.582574835s ago: executing program 2 (id=6349): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) r1 = epoll_create1(0x0) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x400) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="08000000040000000400000007"], 0x48) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)={0x1}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="2000000069000b00000021000000020000000000000000200800016c13b01f1320a050b792000020"], 0x20}}, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x4443a, &(0x7f00000002c0)={0x0, 0x7738, 0x2, 0x0, 0x2c}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents(r6, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, &(0x7f00000001c0)='\x00\x00\x00\x00#\x00z|\xf0\xe2\xb4\x13\x0e\x04G\xb1\xc80[\xfb\x1f\n>') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000000340)='cbc(cast6)\x00') mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x44004}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) getsockopt(0xffffffffffffffff, 0x182f2, 0xfffffffd, &(0x7f0000000380)=""/186, 0x0) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r6, 0x3ba0, &(0x7f0000000540)={0x48, 0x3, 0x0, 0x0, 0x6, 0x9, &(0x7f0000000500)="a85d93a331cef6c9f0"}) 3.463019268s ago: executing program 0 (id=6350): socket$nl_route(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r1 = socket(0x10, 0x3, 0x0) (async) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) io_setup(0xc, &(0x7f0000000180)=0x0) (async) r4 = openat$random(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) io_submit(r3, 0x2, &(0x7f0000000200)=[&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8, 0x3, r4, 0x0, 0x0, 0x8000, 0x0, 0x2}]) (async) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYRESDEC=0x0, @ANYRES8=r1], 0x50}, 0x1, 0x0, 0x0, 0x804}, 0x40) socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newlink={0x50, 0x10, 0x421, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x60e1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x400}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x2) 3.442349007s ago: executing program 2 (id=6351): r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$sock_int(r3, 0x1, 0x47, 0x0, &(0x7f0000000080)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYRESOCT=r0, @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000240012800b0001006272696467650000140002810540190006000000050018000100000026ee13c49d826694f6fe9a7f0a0a730c0db79d8dac2327f7af388d1907a85d2b14cf21145f866e51febceba158505dfa0d84e092e3f83408eb4b5fcfbfc070599d8f627ad0abf9d68fa506671b426aff1f8b9123d5a538b5a9588a332a01c8e1b3c6164733b83e95f28a5e39a88bda97c7c5fc3219b703bd4d1bbd83114a78ebe92e9f"], 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000200)={r6}) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) preadv(r7, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/38, 0x26}, {&(0x7f0000000280)=""/24, 0x18}, {&(0x7f00000002c0)}, {&(0x7f0000000340)=""/23, 0x17}, {&(0x7f0000000380)=""/105, 0x69}, {&(0x7f0000000540)=""/121, 0x79}, {&(0x7f0000000440)=""/6, 0x6}, {&(0x7f0000000740)=""/202, 0xca}, {&(0x7f0000000840)=""/204, 0xcc}], 0x9, 0x75, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="240000001a0001000000000000000000020000fd000000000038000008000100ac1414bb335ad0327172116ae465f27627806ee806ea0ffff3078f8b53652f47381941e902088ceecaa354cf2bfcb86b6860d79c46b7effb53464124844e5adf0813ac8e1965c176d35a425236f78bc6a8891b344657a74539ea2a6c1dabdf725898fae9d6eeb77777f5247980ae29d0077355a2af76e57b79d0b37b8649fc378f5c8368cc6b328a43b564ca1c80fe960ee2ec1fc9"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) dup(r9) open_by_handle_at(r7, 0x0, 0x10000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r8, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 3.38890627s ago: executing program 3 (id=6352): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0x9, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8054) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) socket$kcm(0x2, 0x3, 0x2) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x2}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x2009, 0x5, 0x10000000, 0x1, 0x32ba}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) 2.917064262s ago: executing program 0 (id=6353): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) (fail_nth: 3) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x44004}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00'}) getsockopt(0xffffffffffffffff, 0x182f2, 0xfffffffd, &(0x7f0000000380)=""/186, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000005d0d3087d07aa04d85b0102030109021b000f000000"], 0x0) 2.914659133s ago: executing program 1 (id=6354): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000380)=0x10) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000140)="01000000", 0x4) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000001bc0)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x100) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8, 0xffff}) flock(r1, 0x5) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r2, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) membarrier(0x2, 0x0) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) ptrace$ARCH_SHSTK_ENABLE(0x1e, r4, 0x0, 0x5001) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00220d000000776f1e"], 0x0}, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') preadv(r5, &(0x7f0000000280)=[{&(0x7f0000000180)=""/193, 0xc1}, {&(0x7f0000000480)=""/169, 0xa9}, {&(0x7f0000000540)=""/4096, 0x1000}], 0x3, 0x6, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r5, 0x4008af23, &(0x7f0000000040)={0x0, 0x9}) syz_emit_ethernet(0x52, &(0x7f0000000440)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x1c, 0xa, 0x1, 0x0, [{}, {@dev}, {@dev}]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 2.817793527s ago: executing program 4 (id=6355): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, 0x0, 0x60046, 0x600}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_ACTIVE={0x5, 0x1d, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 2.352282287s ago: executing program 4 (id=6356): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000500)='task\x00') getdents64(r1, &(0x7f0000000000)=""/77, 0x4d) 2.084428896s ago: executing program 4 (id=6357): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000b00)=""/82, 0x52}], 0x1}, 0x40000002) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r2 = socket$netlink(0x10, 0x3, 0x0) preadv(r1, &(0x7f0000000340)=[{&(0x7f0000000280)=""/162}, {&(0x7f0000000000)=""/33}, {&(0x7f0000000140)=""/44, 0x4}], 0x4e, 0x300, 0x8000) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r3 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r3, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r5 = syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a00000924030101010505"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000000000000046}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000690000004300000001"], 0x50) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000140)={r6, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) syz_usb_control_io(r5, 0x0, &(0x7f0000000c80)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="400702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r5, 0x0, &(0x7f0000000280)={0x1c, &(0x7f00000006c0)={0x40, 0x12, 0x2, "00a3"}, 0x0, 0x0}) 1.953068844s ago: executing program 3 (id=6358): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x400c80) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f0000000280)={{0xc}, 0x0, [0x40000000, 0x0, 0x7, 0x3, 0x10001, 0xfffffffd, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x2, 0x3, 0x4, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x4829d, 0x0, 0x0, 0x0, 0x0, 0x1000008000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc, 0x0, 0x9, 0x0, 0xfffffffffffffffc, 0x4, 0x0, 0x10000, 0x4, 0xfdfffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20040000000, 0x0, 0x8, 0x80000000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x100003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x40000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1075, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x3, 0x7, 0x0, 0x20, 0x6, 0xffffffff80000001, 0x2, 0x0, 0xfffffffffffffffc, 0x4]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000002c0)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe, 0x8000ffa1}, {0xfffffff9, 0x80000}]}}) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}, {0x9, 0xfff3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20000000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000400)={{0x80}, 'port0\x00', 0xee, 0x1a1c17, 0x6, 0x0, 0x100000, 0xffffffff, 0x8}) r8 = socket$can_bcm(0x1d, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000003702000020febfff7a0af0fff8ff00f869a4f0ff00000000b70600001218d1fe2d6405000000000075040000f1ffffffdc04000040000000b704000010000020720700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fca868f0399d909a63396c113940c19aab9d607000000cb3924b6b14809000000253730e711f5969f62c28b22edf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa8a23f1740637c48468766af54043000000ec44631ac2622cdcae18c3d14b00006dd87235b44174f7c034318508f49f09781dc7a2cfbb9a0f119e31975f551558055dc2dc2739e2e735d0ab961dac07f4f6d8aa1c3f16765d427c0e01000000f74c16737d50d2a44eacf2b734b0289c7a3a16eeca71296746681dd1046a36bf61af491e4fa734318e0d72b8dbbc2b2b869af2f87903000000b6ecc7de09a2257e908cd92e664fa7aba7f07474863333fba3eadd8efbd5dae6c024585d972b1bf8c4e872bba38160be9e9217b50876b5708e64e70f7d8225da90ce9bc019084873ed07c0c59c4ba053fe77e0d37ccc3318da2e9fefaf025527e734ed1de5d12b4c56ca3b03dc121086071d1f26821a428d28eefa22ead6a3dab9388da53263b81ebe6be197a48a63440000a356240c4e2df57457000100000000000000000000008d2516510b29804b4ac034c19cef0c773f01064709edd63a185cbab8456c25283b9514b220fe401503ff536478088eb9fd932a0703a7bf9ea4ff03000000000000a4662fb577824f210a69f8e5227fd32e7d5a2c7ecf57ac64509224b52e746d631637e596e5a55d2c805bf725b9d14756c8cfa292aae0872866cf9fe063317741a0db9081d4393a7f9bcc0917d60a11b4a9ece831660ce625de441cef915eba31255d163f7033045ceb97f8ea006efc5b84f75ca1fb74c9faef444eb12f46b435de87feb2f7f2d7fb659395e4b38178b5c67e6ac100000000000000001b0e77bd5de136fa1bec1a26c622bb9662d9ee70147acc5605aa2318855cb8b918000000c5f265dcb5dce05f94ea051c4e8dcdf37d01ad7aff64f84ce32b841c799f47c2949725285fc50f1dd3f5e264023082eec752704c1f598151aa7d29e0d79522df196278acf327a74777d1f658f50c27b60198770ff8ebef9df1b750d56d4d195ad7a267c46b3348b0e03ed33b5bca13cafc304dc6da78d20f029742d8d2f36acfdd331081ca00c1d5c8b7bed2ef603d6e7f1764246aab2d7d531559a971939a038055ac28625ec837f824ff537cd67993a3589be73a18680da50287b9e962b1a0235c290346a21ca5de55c49c78e411c791617000ef8df75411a5d300000000000000e0ffffff004deb8d49806823655735bd6deb49edb2e42f4ed9e6e9080366660b847bf0f29e9a6c808459e82cbb0000000000000000000000000000000000006b5530865aaa7aa6171f66f2bca87fff201588427bb65ed3d5e7a74e9b5ece44067d4a9875a210bc1fe72b844b9eb3c9083560ef5c92b8a01188d61573bebb74efbf70893d2eaf76517e5020a71023bca1194ad87cade480ba3dce8f3244d716d1cba50a8165e2b6d18ff2c58293c2e314a7447ed3a1c870908aa8e3b33e6a94c7381bce9fa71dcbb758451f247e38d80d66e03d7564a5cddfaf06574b05cefb2670f30c2d501ee625ce3ffc08f15b53d224527a1ce3afbff66f06098a0e5517068aa48f2a82496fe83ee85218fe7f52b48742c7055f2a144c13e9"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x55) sendmsg$can_bcm(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000f"], 0x20000078}}, 0x0) sendmsg$can_bcm(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0300"/12, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x77359400, @ANYRES32=0x0, @ANYBLOB="000000000700000000000000000200008bc7570000000000"], 0x48}}, 0x0) r9 = epoll_create(0x101) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x40000014}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) socket$nl_route(0x10, 0x3, 0x0) 870.909587ms ago: executing program 4 (id=6359): openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$rds(0x15, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = gettid() sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYRES32=r0, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r2], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 851.357591ms ago: executing program 3 (id=6360): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000a40), 0x5d, 0x4000000) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x4a38, 0x201) ioctl$SG_IO(r2, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffffffffffe, 0x6, 0xb4, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000340)="a6823ac6aeb3", 0x0, 0x2, 0x10023, 0xfffffffd, 0x0}) 712.621479ms ago: executing program 3 (id=6361): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x400c80) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x9, 0x8, 0x80000001, 0x3}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000280)={{0xc}, 0x0, [0x40000000, 0x0, 0x7, 0x3, 0x10001, 0xfffffffd, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x2, 0x3, 0x4, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x4829d, 0x0, 0x0, 0x0, 0x0, 0x1000008000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc, 0x0, 0x9, 0x0, 0xfffffffffffffffc, 0x4, 0x0, 0x10000, 0x4, 0xfdfffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20040000000, 0x0, 0x8, 0x80000000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x100003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x40000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1075, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x3, 0x7, 0x0, 0x20, 0x6, 0xffffffff80000001, 0x2, 0x0, 0xfffffffffffffffc, 0x4]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000002c0)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe, 0x8000ffa1}, {0xfffffff9, 0x80000}]}}) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}, {0x9, 0xfff3}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20000000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000400)={{0x80}, 'port0\x00', 0xee, 0x1a1c17, 0x6, 0x0, 0x100000, 0xffffffff, 0x8}) r7 = socket$can_bcm(0x1d, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x55) sendmsg$can_bcm(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000f"], 0x20000078}}, 0x0) sendmsg$can_bcm(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0300"/12, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x77359400, @ANYRES32=0x0, @ANYBLOB="000000000700000000000000000200008bc7570000000000"], 0x48}}, 0x0) r8 = epoll_create(0x101) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x40000014}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) socket$nl_route(0x10, 0x3, 0x0) 0s ago: executing program 4 (id=6362): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x4, 0x7f, 0x2, 0xfffffffd, 0x24, @mcast2, @dev={0xfe, 0x80, '\x00', 0x16}, 0x8, 0x40, 0x8, 0x3}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'gre0\x00', &(0x7f0000000240)={'ip_vti0\x00', 0x0, 0x1, 0x8759, 0xd5, 0x0, {{0x13, 0x4, 0x0, 0x9, 0x4c, 0x67, 0x0, 0x7f, 0x29, 0x0, @loopback, @remote, {[@ssrr={0x89, 0x3, 0x3e}, @cipso={0x86, 0xb, 0x3, [{0x1, 0x5, "b182b1"}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x24, 0x11, 0x3, 0x3, [{@dev={0xac, 0x14, 0x14, 0xd}, 0x7}, {@multicast1, 0xe2}, {@remote, 0x7fff}, {@rand_addr=0x64010100, 0x1b9}]}]}}}}}) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xd, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x10001}]}}]}, 0x38}}, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040), 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xf, 0xffff}, {0xd, 0xfff2}}}, 0x24}}, 0x0) kernel console output (not intermixed with test programs): n: entered allmulticast mode [ 1347.662760][T26305] dvmrp8: entered allmulticast mode [ 1347.744822][T26304] syz_tun: left allmulticast mode [ 1347.910041][T26316] batman_adv: batadv0: Adding interface: gretap1 [ 1347.951349][T26316] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1348.011570][T26316] batman_adv: batadv0: Interface activated: gretap1 [ 1348.259301][ T5925] usb 5-1: USB disconnect, device number 86 [ 1348.352378][T26333] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5639'. [ 1348.450242][ T5820] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 1348.600418][ T5820] usb 2-1: device descriptor read/64, error -71 [ 1348.841781][ T5820] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 1348.946880][T26329] delete_channel: no stack [ 1348.980250][ T5820] usb 2-1: device descriptor read/64, error -71 [ 1349.210938][ T5820] usb usb2-port1: attempt power cycle [ 1349.470515][T26346] netlink: 'syz.4.5642': attribute type 2 has an invalid length. [ 1349.623588][ T5820] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 1349.650924][ T5820] usb 2-1: device descriptor read/8, error -71 [ 1349.890202][ T5820] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 1349.920823][ T5820] usb 2-1: device descriptor read/8, error -71 [ 1350.040607][ T5820] usb usb2-port1: unable to enumerate USB device [ 1350.171831][T26356] netlink: 'syz.4.5646': attribute type 16 has an invalid length. [ 1350.173286][T26355] netlink: 'syz.4.5646': attribute type 16 has an invalid length. [ 1350.179914][T26356] netlink: 'syz.4.5646': attribute type 17 has an invalid length. [ 1350.254461][T26355] netlink: 'syz.4.5646': attribute type 17 has an invalid length. [ 1350.299162][T26355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1350.308306][T26355] 8021q: adding VLAN 0 to HW filter on device team0 [ 1350.424072][T26362] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5648'. [ 1350.444393][T26355] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1350.482637][T26356] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1350.531573][T26362] vlan0: entered promiscuous mode [ 1350.536652][T26362] veth0: entered promiscuous mode [ 1350.830406][ T5820] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1350.979147][T26377] syz.3.5653 (26377): drop_caches: 4 [ 1350.990918][ T5820] usb 5-1: Using ep0 maxpacket: 8 [ 1351.004725][ T5820] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1351.035375][ T5820] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1351.061106][ T5820] usb 5-1: Product: syz [ 1351.067391][ T5820] usb 5-1: Manufacturer: syz [ 1351.083899][ T5820] usb 5-1: SerialNumber: syz [ 1351.111891][ T5820] usb 5-1: config 0 descriptor?? [ 1351.398802][ T5820] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1351.776042][T26387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5654'. [ 1352.765780][T26370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1352.908440][T26370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1352.997869][T26370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1353.008374][T26370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1353.150599][T26400] netlink: 'syz.2.5657': attribute type 2 has an invalid length. [ 1353.243244][ T5820] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1353.265693][ T5820] usb 5-1: USB disconnect, device number 87 [ 1353.558716][ T5823] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1353.573678][ T5823] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1353.583828][ T5823] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1353.592530][ T5823] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1353.600617][ T5823] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1354.175141][T26405] chnl_net:caif_netlink_parms(): no params data found [ 1354.552309][ T754] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1354.764602][ T754] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1354.909323][T26405] bridge0: port 1(bridge_slave_0) entered blocking state [ 1354.925406][T26405] bridge0: port 1(bridge_slave_0) entered disabled state [ 1354.939939][T26405] bridge_slave_0: entered allmulticast mode [ 1354.959630][T26405] bridge_slave_0: entered promiscuous mode [ 1355.016120][ T754] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1355.060826][T26405] bridge0: port 2(bridge_slave_1) entered blocking state [ 1355.083721][T26405] bridge0: port 2(bridge_slave_1) entered disabled state [ 1355.104647][T26405] bridge_slave_1: entered allmulticast mode [ 1355.163021][T26405] bridge_slave_1: entered promiscuous mode [ 1355.321342][T26405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1355.349069][T26405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1355.485767][T26405] team0: Port device team_slave_0 added [ 1355.560403][ T1217] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 1355.576964][T26405] team0: Port device team_slave_1 added [ 1355.641293][ T5823] Bluetooth: hci3: command tx timeout [ 1355.659039][T26405] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1355.680034][T26405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1355.700331][ T1217] usb 2-1: device descriptor read/64, error -71 [ 1356.058152][T26405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1356.110492][ T1217] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 1356.126421][T26405] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1356.145700][T26405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1356.215032][T26405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1356.240474][ T1217] usb 2-1: device descriptor read/64, error -71 [ 1356.251545][ T754] bridge_slave_1: left allmulticast mode [ 1356.258026][ T754] bridge_slave_1: left promiscuous mode [ 1356.270575][ T754] bridge0: port 2(bridge_slave_1) entered disabled state [ 1356.287188][ T754] bridge_slave_0: left allmulticast mode [ 1356.298787][ T754] bridge_slave_0: left promiscuous mode [ 1356.311721][ T754] bridge0: port 1(bridge_slave_0) entered disabled state [ 1356.380527][ T1217] usb usb2-port1: attempt power cycle [ 1356.535333][ T754] bond2 (unregistering): (slave ip6gretap1): Releasing active interface [ 1356.751043][ T1217] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 1356.790993][ T1217] usb 2-1: device descriptor read/8, error -71 [ 1356.855398][ T754] gretap0 (unregistering): left promiscuous mode [ 1357.002121][ T754] bridge0 (unregistering): left allmulticast mode [ 1357.030407][ T1217] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 1357.075414][ T1217] usb 2-1: device descriptor read/8, error -71 [ 1357.084776][ T754] bond0 (unregistering): left promiscuous mode [ 1357.091060][ T754] bond_slave_0: left promiscuous mode [ 1357.097731][ T754] bond_slave_1: left promiscuous mode [ 1357.108750][ T754] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1357.118719][ T754] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1357.131558][ T754] bond0 (unregistering): Released all slaves [ 1357.142174][ T754] bond1 (unregistering): Released all slaves [ 1357.191907][ T1217] usb usb2-port1: unable to enumerate USB device [ 1357.325617][ T754] bond2 (unregistering): Released all slaves [ 1357.367333][T26440] tipc: Resetting bearer [ 1357.485084][ T754] !: left promiscuous mode [ 1357.504193][T26448] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5669'. [ 1357.531050][T26448] netlink: 200 bytes leftover after parsing attributes in process `syz.4.5669'. [ 1357.552856][T26405] hsr_slave_0: entered promiscuous mode [ 1357.559434][T26448] netlink: 200 bytes leftover after parsing attributes in process `syz.4.5669'. [ 1357.569242][T26405] hsr_slave_1: entered promiscuous mode [ 1357.579902][T26405] debugfs: 'hsr0' already exists in 'hsr' [ 1357.589267][T26405] Cannot create hsr debugfs directory [ 1357.632019][ T754] tipc: Left network mode [ 1357.721859][ T5823] Bluetooth: hci3: command tx timeout [ 1357.917282][T26457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5672'. [ 1358.106841][T26462] netlink: 'syz.4.5671': attribute type 2 has an invalid length. [ 1358.657498][ T754] hsr_slave_0: left promiscuous mode [ 1358.683939][ T754] hsr_slave_1: left promiscuous mode [ 1358.708228][ T754] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1359.356726][T26487] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1359.806787][ T5823] Bluetooth: hci3: command tx timeout [ 1360.385510][T26512] netlink: 'syz.1.5680': attribute type 2 has an invalid length. [ 1361.422910][T26521] FAULT_INJECTION: forcing a failure. [ 1361.422910][T26521] name failslab, interval 1, probability 0, space 0, times 0 [ 1361.877551][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.890481][ T5823] Bluetooth: hci3: command tx timeout [ 1361.893525][T26405] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1361.895996][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.905063][T26521] CPU: 0 UID: 0 PID: 26521 Comm: syz.1.5681 Tainted: G L syzkaller #0 PREEMPT(full) [ 1361.905092][T26521] Tainted: [L]=SOFTLOCKUP [ 1361.905098][T26521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1361.905108][T26521] Call Trace: [ 1361.905115][T26521] [ 1361.905123][T26521] dump_stack_lvl+0xe8/0x150 [ 1361.905149][T26521] should_fail_ex+0x412/0x560 [ 1361.905174][T26521] should_failslab+0xa8/0x100 [ 1361.905194][T26521] kmem_cache_alloc_noprof+0x87/0x6e0 [ 1361.905219][T26521] ? fuse_get_req+0x7da/0x10d0 [ 1361.905238][T26521] ? is_bpf_text_address+0x26/0x2b0 [ 1361.905260][T26521] fuse_get_req+0x7da/0x10d0 [ 1361.905281][T26521] ? __kernel_text_address+0xd/0x30 [ 1361.905301][T26521] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1361.905320][T26521] ? arch_stack_walk+0xfb/0x150 [ 1361.905340][T26521] ? look_up_lock_class+0x57/0x110 [ 1361.905358][T26521] ? __pfx_fuse_get_req+0x10/0x10 [ 1361.905381][T26521] ? __lock_acquire+0x6b5/0x2cf0 [ 1361.905405][T26521] ? ima_match_policy+0x112/0x21e0 [ 1361.905425][T26521] __fuse_simple_request+0x2cc/0x1c60 [ 1361.905457][T26521] ? __pfx___fuse_simple_request+0x10/0x10 [ 1361.905479][T26521] ? process_measurement+0x452/0x1cb0 [ 1361.905512][T26521] ? process_measurement+0x7d4/0x1cb0 [ 1361.905545][T26521] fuse_do_getattr+0x375/0x6a0 [ 1361.905568][T26521] ? __pfx_fuse_do_getattr+0x10/0x10 [ 1361.905597][T26521] ? __pfx_from_kuid+0x10/0x10 [ 1361.905629][T26521] ? generic_permission+0x358/0x690 [ 1361.905655][T26521] fuse_permission+0x984/0xe30 [ 1361.905680][T26521] ? __pfx_fuse_permission+0x10/0x10 [ 1361.905697][T26521] ? do_raw_spin_lock+0x12b/0x2f0 [ 1361.905730][T26521] ? try_to_unlazy+0x6ad/0xc50 [ 1361.905751][T26521] ? try_to_unlazy+0x705/0xc50 [ 1361.905770][T26521] ? __pfx_fuse_permission+0x10/0x10 [ 1361.905788][T26521] inode_permission+0x41f/0x5f0 [ 1361.905810][T26521] link_path_walk+0x1149/0x18d0 [ 1361.905851][T26521] __filename_parentat+0x27f/0x6f0 [ 1361.905876][T26521] ? __pfx___filename_parentat+0x10/0x10 [ 1361.905927][T26521] do_renameat2+0x1e9/0x900 [ 1361.905955][T26521] ? __pfx_do_renameat2+0x10/0x10 [ 1361.905977][T26521] ? getname_flags+0x3f7/0x540 [ 1361.905999][T26521] ? getname_flags+0x3f7/0x540 [ 1361.906019][T26521] __ia32_sys_renameat2+0xce/0xe0 [ 1361.906040][T26521] __do_fast_syscall_32+0x1d2/0x540 [ 1361.906059][T26521] ? lockdep_hardirqs_on+0x7a/0x110 [ 1361.906073][T26521] ? do_fast_syscall_32+0x33/0x70 [ 1361.906090][T26521] ? asm_int80_emulation+0x1a/0x20 [ 1361.906105][T26521] ? do_int80_emulation+0x20e/0x400 [ 1361.906126][T26521] do_fast_syscall_32+0x33/0x70 [ 1361.906144][T26521] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1361.906162][T26521] RIP: 0023:0xf746d539 [ 1361.906178][T26521] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1361.906191][T26521] RSP: 002b:00000000f549650c EFLAGS: 00000206 ORIG_RAX: 0000000000000161 [ 1361.906210][T26521] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000180 [ 1361.906222][T26521] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: 0000000000000000 [ 1361.906233][T26521] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1361.906244][T26521] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1361.906254][T26521] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1361.906279][T26521] [ 1362.351904][T26405] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1362.453897][T26405] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1362.498133][T26405] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1362.535478][T26542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1362.619868][T26542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1362.909672][T26557] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5686'. [ 1362.920441][ T5892] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1363.136712][T26405] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1363.144489][ T5892] usb 5-1: Using ep0 maxpacket: 16 [ 1363.152192][ T5892] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1363.158964][ T5892] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1363.170057][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1363.190068][ T5892] usb 5-1: config 0 descriptor?? [ 1363.274346][T26405] 8021q: adding VLAN 0 to HW filter on device team0 [ 1363.304215][ T3523] bridge0: port 1(bridge_slave_0) entered blocking state [ 1363.311406][ T3523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1363.348343][ T3469] bridge0: port 2(bridge_slave_1) entered blocking state [ 1363.355586][ T3469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1363.470062][T26541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1363.478927][T26541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1363.613176][T26405] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1363.692046][ T5892] hid (null): invalid report_size 42092 [ 1363.697912][ T5892] hid (null): invalid report_count 46726 [ 1363.704105][T26405] veth0_vlan: entered promiscuous mode [ 1363.712825][ T5892] hid (null): invalid report_size 1082919595 [ 1363.719488][T26405] veth1_vlan: entered promiscuous mode [ 1363.743582][ T5892] hid (null): unknown global tag 0xc [ 1363.768239][ T5892] hid (null): unknown global tag 0xe [ 1363.779926][ T5892] hid (null): unknown global tag 0xd [ 1363.796686][ T5892] hid (null): unknown global tag 0xe [ 1363.800444][T26405] veth0_macvtap: entered promiscuous mode [ 1363.808858][ T5892] hid (null): nested delimiters [ 1363.939458][ T5892] hid (null): unknown global tag 0xd [ 1363.945266][ T5892] hid (null): unknown global tag 0x68 [ 1363.951132][ T5892] hid (null): invalid report_size 269021923 [ 1363.958199][ T5892] hid (null): bogus close delimiter [ 1363.969317][ T5892] hid (null): invalid report_size 2093438354 [ 1364.020656][T26405] veth1_macvtap: entered promiscuous mode [ 1364.063439][T26405] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1364.081881][T26405] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1364.089466][ T5892] hid (null): unknown global tag 0xd [ 1364.104776][ T3523] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1364.132763][ T5892] usb 5-1: USB disconnect, device number 88 [ 1364.155178][ T3523] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1364.229493][ T3523] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1364.262333][ T3523] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1364.296031][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1364.434439][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1364.802647][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1364.812438][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1365.337236][T26580] netlink: 'syz.0.5691': attribute type 2 has an invalid length. [ 1365.499958][T26585] FAULT_INJECTION: forcing a failure. [ 1365.499958][T26585] name failslab, interval 1, probability 0, space 0, times 0 [ 1365.528730][T26585] CPU: 0 UID: 0 PID: 26585 Comm: syz.1.5692 Tainted: G L syzkaller #0 PREEMPT(full) [ 1365.528760][T26585] Tainted: [L]=SOFTLOCKUP [ 1365.528765][T26585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1365.528776][T26585] Call Trace: [ 1365.528784][T26585] [ 1365.528792][T26585] dump_stack_lvl+0xe8/0x150 [ 1365.528816][T26585] should_fail_ex+0x412/0x560 [ 1365.528841][T26585] should_failslab+0xa8/0x100 [ 1365.528863][T26585] __kmalloc_noprof+0xde/0x7e0 [ 1365.528880][T26585] ? nla_strdup+0x9d/0x140 [ 1365.528900][T26585] ? __kmalloc_cache_noprof+0x3d1/0x6e0 [ 1365.528921][T26585] nla_strdup+0x9d/0x140 [ 1365.528944][T26585] nf_tables_newtable+0x491/0x1910 [ 1365.528965][T26585] ? __pfx_nfnl_pernet+0x1/0x10 [ 1365.529001][T26585] nfnetlink_rcv+0x1240/0x27b0 [ 1365.529048][T26585] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1365.529085][T26585] ? ref_tracker_free+0x693/0x840 [ 1365.529132][T26585] ? __netlink_deliver_tap+0x807/0x850 [ 1365.529150][T26585] ? netlink_deliver_tap+0x2e/0x1b0 [ 1365.529182][T26585] netlink_unicast+0x80f/0x9b0 [ 1365.529214][T26585] ? __pfx_netlink_unicast+0x10/0x10 [ 1365.529236][T26585] ? __alloc_skb+0x193/0x390 [ 1365.529263][T26585] ? netlink_sendmsg+0x650/0xb40 [ 1365.529279][T26585] ? skb_put+0x11b/0x210 [ 1365.529302][T26585] netlink_sendmsg+0x813/0xb40 [ 1365.529329][T26585] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1365.529350][T26585] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1365.529372][T26585] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1365.529392][T26585] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1365.529407][T26585] ____sys_sendmsg+0xa68/0xad0 [ 1365.529437][T26585] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1365.529463][T26585] ? kstrtoull+0x12f/0x1d0 [ 1365.529490][T26585] ___sys_sendmsg+0x2a5/0x360 [ 1365.529510][T26585] ? __lock_acquire+0x6b5/0x2cf0 [ 1365.529535][T26585] ? __pfx____sys_sendmsg+0x10/0x10 [ 1365.529558][T26585] ? get_pid_task+0x20/0x1f0 [ 1365.529577][T26585] ? get_pid_task+0x20/0x1f0 [ 1365.529595][T26585] ? get_pid_task+0x20/0x1f0 [ 1365.529640][T26585] ? __fget_files+0x2a/0x420 [ 1365.529656][T26585] ? __fget_files+0x3a0/0x420 [ 1365.529684][T26585] __sys_sendmsg+0x183/0x260 [ 1365.529707][T26585] ? __pfx___sys_sendmsg+0x10/0x10 [ 1365.529737][T26585] ? __pfx_ksys_write+0x10/0x10 [ 1365.529766][T26585] __do_fast_syscall_32+0x1d2/0x540 [ 1365.529786][T26585] ? lockdep_hardirqs_on+0x7a/0x110 [ 1365.529801][T26585] ? do_fast_syscall_32+0x33/0x70 [ 1365.529818][T26585] ? asm_int80_emulation+0x1a/0x20 [ 1365.529834][T26585] ? do_int80_emulation+0x20e/0x400 [ 1365.529855][T26585] do_fast_syscall_32+0x33/0x70 [ 1365.529873][T26585] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1365.529893][T26585] RIP: 0023:0xf746d539 [ 1365.529909][T26585] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1365.529924][T26585] RSP: 002b:00000000f549650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1365.529944][T26585] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 1365.529957][T26585] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1365.529968][T26585] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1365.529979][T26585] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1365.529989][T26585] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1365.530017][T26585] [ 1365.866659][T26586] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5693'. [ 1366.038586][T26588] sctp: [Deprecated]: syz.3.5658 (pid 26588) Use of int in max_burst socket option deprecated. [ 1366.038586][T26588] Use struct sctp_assoc_value instead [ 1367.465605][T26624] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5700'. [ 1367.527449][T26623] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5698'. [ 1368.170897][T26626] binder_alloc: 26621: binder_alloc_buf size 8 failed, no address space [ 1368.183868][T26626] binder_alloc: allocated: 4096 (num: 1 largest: 4096), free: 0 (num: 0 largest: 0) [ 1369.040965][ T5925] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1369.196691][ T5925] usb 4-1: device descriptor read/64, error -71 [ 1369.440228][ T5925] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1369.601292][ T5925] usb 4-1: device descriptor read/64, error -71 [ 1369.601625][T26652] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5708'. [ 1369.711322][ T5925] usb usb4-port1: attempt power cycle [ 1369.923258][T26659] openvswitch: netlink: Key type 30 is not supported [ 1370.620196][ T5925] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1371.105037][ T5925] usb 4-1: device descriptor read/8, error -71 [ 1371.363045][ T5925] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1371.416896][ T5925] usb 4-1: device descriptor read/8, error -71 [ 1371.606903][ T5925] usb usb4-port1: unable to enumerate USB device [ 1371.715197][T26670] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1372.726900][T26681] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5715'. [ 1374.109832][T26708] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5720'. [ 1374.910253][ T10] usb 5-1: new full-speed USB device number 89 using dummy_hcd [ 1375.092219][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1375.101712][ T10] usb 5-1: not running at top speed; connect to a high speed hub [ 1375.111602][ T10] usb 5-1: config 5 has an invalid interface number: 44 but max is 1 [ 1375.119785][ T10] usb 5-1: config 5 has no interface number 1 [ 1375.147881][ T10] usb 5-1: config 5 interface 44 has no altsetting 0 [ 1375.163183][ T10] usb 5-1: config 5 interface 0 has no altsetting 0 [ 1375.220689][ T10] usb 5-1: New USB device found, idVendor=0582, idProduct=0074, bcdDevice=2a.70 [ 1375.229958][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1375.415279][ T10] usb 5-1: Product: syz [ 1375.429419][ T10] usb 5-1: Manufacturer: syz [ 1375.438671][ T10] usb 5-1: SerialNumber: syz [ 1375.686568][T26717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1375.709521][T26717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1375.740056][T26717] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1375.790416][T26717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1375.910296][T26717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1376.041344][ T10] usb 5-1: bad CDC descriptors [ 1376.059262][ T10] usb 5-1: USB disconnect, device number 89 [ 1376.167076][T25919] udevd[25919]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:5.44/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1376.410965][T26733] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5727'. [ 1376.822424][T26742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1376.844237][T26742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1376.892341][T26744] netlink: 288 bytes leftover after parsing attributes in process `syz.1.5731'. [ 1377.680419][T26758] binder: 26749:26758 ioctl 40046205 0 returned -22 [ 1378.048439][T26769] netlink: 'syz.4.5736': attribute type 2 has an invalid length. [ 1378.960219][ T5925] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1379.110243][ T5925] usb 4-1: Using ep0 maxpacket: 16 [ 1379.144260][ T5925] usb 4-1: config 255 has an invalid interface number: 47 but max is 0 [ 1379.158196][ T5925] usb 4-1: config 255 has no interface number 0 [ 1379.251710][ T5925] usb 4-1: config 255 interface 47 has no altsetting 0 [ 1379.278461][ T5925] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=b1.fc [ 1379.290281][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1379.298579][ T5925] usb 4-1: Product: syz [ 1379.304228][ T5925] usb 4-1: Manufacturer: syz [ 1379.309207][ T5925] usb 4-1: SerialNumber: syz [ 1379.632146][T26775] netlink: 'syz.3.5739': attribute type 10 has an invalid length. [ 1379.651516][T26775] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1379.691926][ T5925] legousbtower 4-1:255.47: interrupt endpoints not found [ 1379.712316][ T5925] usb 4-1: USB disconnect, device number 69 [ 1379.788334][T26788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1379.798302][T26788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1379.820883][T26788] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5742'. [ 1380.297908][T26793] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5743'. [ 1380.848683][T26799] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5744'. [ 1381.470195][ T5820] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1381.620177][ T5820] usb 2-1: Using ep0 maxpacket: 16 [ 1381.630706][ T5820] usb 2-1: config 0 has no interfaces? [ 1381.645783][ T5820] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 1381.665515][ T5820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1381.680052][ T5820] usb 2-1: Product: syz [ 1381.687799][ T5820] usb 2-1: Manufacturer: syz [ 1381.692521][ T5820] usb 2-1: SerialNumber: syz [ 1381.700677][ T5820] usb 2-1: config 0 descriptor?? [ 1382.034106][ T5925] usb 2-1: USB disconnect, device number 59 [ 1382.639278][T26826] FAULT_INJECTION: forcing a failure. [ 1382.639278][T26826] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1382.653978][T26826] CPU: 1 UID: 0 PID: 26826 Comm: syz.0.5751 Tainted: G L syzkaller #0 PREEMPT(full) [ 1382.654007][T26826] Tainted: [L]=SOFTLOCKUP [ 1382.654015][T26826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1382.654025][T26826] Call Trace: [ 1382.654032][T26826] [ 1382.654039][T26826] dump_stack_lvl+0xe8/0x150 [ 1382.654060][T26826] should_fail_ex+0x412/0x560 [ 1382.654075][T26826] copy_folio_from_iter_atomic+0x30f/0x1950 [ 1382.654093][T26826] ? __pfx___block_write_begin_int+0x10/0x10 [ 1382.654116][T26826] ? __pfx_copy_folio_from_iter_atomic+0x10/0x10 [ 1382.654137][T26826] iomap_file_buffered_write+0x505/0xb30 [ 1382.654157][T26826] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 1382.654173][T26826] ? inode_maybe_inc_iversion+0x18f/0x200 [ 1382.654200][T26826] ? down_read+0x272/0x2e0 [ 1382.654211][T26826] ? blkdev_write_iter+0x4f7/0x710 [ 1382.654224][T26826] blkdev_write_iter+0x524/0x710 [ 1382.654241][T26826] vfs_write+0x61d/0xb90 [ 1382.654259][T26826] ? __pfx_vfs_write+0x10/0x10 [ 1382.654278][T26826] ? __fget_files+0x2a/0x420 [ 1382.654293][T26826] ksys_write+0x150/0x270 [ 1382.654308][T26826] ? __pfx_ksys_write+0x10/0x10 [ 1382.654322][T26826] ? __pfx_ksys_write+0x10/0x10 [ 1382.654340][T26826] __do_fast_syscall_32+0x1d2/0x540 [ 1382.654351][T26826] ? lockdep_hardirqs_on+0x7a/0x110 [ 1382.654360][T26826] ? do_fast_syscall_32+0x33/0x70 [ 1382.654370][T26826] ? asm_int80_emulation+0x1a/0x20 [ 1382.654379][T26826] ? do_int80_emulation+0x20e/0x400 [ 1382.654392][T26826] do_fast_syscall_32+0x33/0x70 [ 1382.654403][T26826] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1382.654414][T26826] RIP: 0023:0xf742d539 [ 1382.654424][T26826] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1382.654432][T26826] RSP: 002b:00000000f543550c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 1382.654444][T26826] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000080000000 [ 1382.654451][T26826] RDX: 00000000fffffd2c RSI: 0000000000000000 RDI: 0000000000000000 [ 1382.654457][T26826] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1382.654463][T26826] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1382.654469][T26826] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1382.654483][T26826] [ 1383.190499][ T5925] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1383.336907][T26838] kAFS: unable to lookup cell '' [ 1383.350344][ T5925] usb 5-1: Using ep0 maxpacket: 16 [ 1383.368091][ T5925] usb 5-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 1383.377748][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1383.386620][ T5925] usb 5-1: Product: syz [ 1383.392227][ T5925] usb 5-1: Manufacturer: syz [ 1383.397619][ T5925] usb 5-1: SerialNumber: syz [ 1383.417428][ T5925] usb 5-1: config 0 descriptor?? [ 1383.435653][ T5925] ums-onetouch 5-1:0.0: USB Mass Storage device detected [ 1383.442834][ T10] usb 4-1: new full-speed USB device number 70 using dummy_hcd [ 1383.590263][T22745] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1383.724654][ T5820] usb 5-1: USB disconnect, device number 90 [ 1383.726671][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1383.739690][ T10] usb 4-1: not running at top speed; connect to a high speed hub [ 1383.759228][ T10] usb 4-1: config 5 has an invalid interface number: 246 but max is 0 [ 1383.767689][ T10] usb 4-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 1383.778253][ T10] usb 4-1: config 5 has no interface number 0 [ 1383.796672][T26845] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5757'. [ 1384.004613][T22745] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1384.085330][ T10] usb 4-1: config 5 interface 246 altsetting 4 endpoint 0x3 has invalid maxpacket 255, setting to 64 [ 1384.106572][T22745] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1384.134279][T22745] usb 2-1: config 0 descriptor?? [ 1384.139724][ T10] usb 4-1: config 5 interface 246 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1384.158678][T22745] hub 2-1:0.0: bad descriptor, ignoring hub [ 1384.169194][T22745] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1384.177462][T22745] cp210x 2-1:0.0: cp210x converter detected [ 1384.201024][T26849] netlink: 288 bytes leftover after parsing attributes in process `syz.2.5758'. [ 1384.304137][ T10] usb 4-1: config 5 interface 246 has no altsetting 0 [ 1384.349232][ T10] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4 [ 1384.360558][T26838] bridge0: entered allmulticast mode [ 1384.413070][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1384.423438][ T10] usb 4-1: Product: syz [ 1384.447530][ T10] usb 4-1: Manufacturer: syz [ 1384.462897][ T10] usb 4-1: SerialNumber: syz [ 1384.612749][T26854] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5759'. [ 1385.530622][ T12] usb 4-1: Failed to submit usb control message: -71 [ 1385.539233][ T10] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1385.551548][ T12] usb 4-1: unable to send the bmi data to the device: -71 [ 1385.573382][ T12] usb 4-1: unable to get target info from device [ 1385.579768][ T12] usb 4-1: could not get target info (-71) [ 1385.620637][ T10] usb 4-1: USB disconnect, device number 70 [ 1385.630017][ T12] usb 4-1: could not probe fw (-71) [ 1385.760047][T26870] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5762'. [ 1386.396307][T26876] netlink: 'syz.4.5765': attribute type 1 has an invalid length. [ 1386.486693][T26876] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1386.508370][T26880] erspan0: entered allmulticast mode [ 1386.573932][T26880] bond6: (slave erspan0): making interface the new active one [ 1386.594315][T26880] bond6: (slave erspan0): Enslaving as an active interface with an up link [ 1386.716932][T22745] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 1386.731477][T22745] cp210x 2-1:0.0: querying part number failed [ 1386.791979][T22745] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1386.851488][T22745] usb 2-1: USB disconnect, device number 60 [ 1386.859823][T22745] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1386.889991][T22745] cp210x 2-1:0.0: device disconnected [ 1387.571038][T26899] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5770'. [ 1387.614190][T26897] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1387.899303][T26899] team0: Port device syz_tun removed [ 1387.979716][T26897] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5770'. [ 1389.338489][T26919] FAULT_INJECTION: forcing a failure. [ 1389.338489][T26919] name failslab, interval 1, probability 0, space 0, times 0 [ 1389.359539][T26919] CPU: 1 UID: 0 PID: 26919 Comm: syz.0.5775 Tainted: G L syzkaller #0 PREEMPT(full) [ 1389.359571][T26919] Tainted: [L]=SOFTLOCKUP [ 1389.359578][T26919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1389.359589][T26919] Call Trace: [ 1389.359597][T26919] [ 1389.359606][T26919] dump_stack_lvl+0xe8/0x150 [ 1389.359633][T26919] should_fail_ex+0x412/0x560 [ 1389.359659][T26919] should_failslab+0xa8/0x100 [ 1389.359681][T26919] __kvmalloc_node_noprof+0x166/0x8d0 [ 1389.359699][T26919] ? do_raw_spin_lock+0x12b/0x2f0 [ 1389.359717][T26919] ? simple_xattr_set+0x80/0x380 [ 1389.359744][T26919] simple_xattr_set+0x80/0x380 [ 1389.359762][T26919] ? do_raw_spin_unlock+0xf5/0x210 [ 1389.359783][T26919] shmem_xattr_handler_set+0x1a0/0x2d0 [ 1389.359807][T26919] ? __pfx_shmem_xattr_handler_set+0x10/0x10 [ 1389.359826][T26919] __vfs_setxattr+0x43c/0x480 [ 1389.359855][T26919] __vfs_setxattr_noperm+0x12d/0x660 [ 1389.359881][T26919] vfs_setxattr+0x16a/0x2e0 [ 1389.359906][T26919] ? __pfx_vfs_setxattr+0x10/0x10 [ 1389.359935][T26919] filename_setxattr+0x281/0x630 [ 1389.359972][T26919] ? __pfx_filename_setxattr+0x10/0x10 [ 1389.359994][T26919] ? getname_flags+0x1e4/0x540 [ 1389.360015][T26919] path_setxattrat+0x3f3/0x430 [ 1389.360046][T26919] ? __pfx_path_setxattrat+0x10/0x10 [ 1389.360092][T26919] ? fput+0xa0/0xd0 [ 1389.360110][T26919] ? ksys_write+0x242/0x270 [ 1389.360132][T26919] ? __pfx_ksys_write+0x10/0x10 [ 1389.360152][T26919] __ia32_sys_setxattr+0xbc/0xe0 [ 1389.360175][T26919] __do_fast_syscall_32+0x1d2/0x540 [ 1389.360192][T26919] ? lockdep_hardirqs_on+0x7a/0x110 [ 1389.360205][T26919] ? do_fast_syscall_32+0x33/0x70 [ 1389.360221][T26919] ? asm_int80_emulation+0x1a/0x20 [ 1389.360237][T26919] ? do_int80_emulation+0x20e/0x400 [ 1389.360259][T26919] do_fast_syscall_32+0x33/0x70 [ 1389.360284][T26919] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1389.360304][T26919] RIP: 0023:0xf742d539 [ 1389.360321][T26919] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1389.360337][T26919] RSP: 002b:00000000f545650c EFLAGS: 00000206 ORIG_RAX: 00000000000000e2 [ 1389.360358][T26919] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000080000040 [ 1389.360371][T26919] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1389.360382][T26919] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1389.360393][T26919] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1389.360405][T26919] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1389.360433][T26919] [ 1390.503045][T26935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1390.514858][T26935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1391.356128][T26950] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5785'. [ 1391.817347][T26963] netlink: 'syz.1.5782': attribute type 2 has an invalid length. [ 1392.312762][T26971] netlink: 'syz.3.5787': attribute type 2 has an invalid length. [ 1392.328994][T26971] !: entered promiscuous mode [ 1393.740848][T26981] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1393.810862][T26984] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5792'. [ 1394.135203][T26990] IPVS: set_ctl: invalid protocol: 2 224.0.0.1:20000 [ 1394.549133][T27001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1394.558237][T27001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1394.791849][T27006] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5799'. [ 1394.808300][T27006] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5799'. [ 1395.319237][T27015] netlink: 'syz.4.5801': attribute type 2 has an invalid length. [ 1395.689564][T27029] netlink: 'syz.1.5802': attribute type 2 has an invalid length. [ 1395.774587][T27030] netlink: 'syz.0.5803': attribute type 2 has an invalid length. [ 1397.535152][T27048] netlink: 'syz.3.5810': attribute type 1 has an invalid length. [ 1397.566544][T27048] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1397.650607][T27048] erspan0: entered allmulticast mode [ 1397.683414][T27048] bond1: (slave erspan0): making interface the new active one [ 1397.697924][T27048] bond1: (slave erspan0): Enslaving as an active interface with an up link [ 1397.833083][ T5916] hid_parser_main: 201 callbacks suppressed [ 1397.833099][ T5916] hid-generic 0000:0000:0000.004E: unknown main item tag 0x0 [ 1397.858966][ T5916] hid-generic 0000:0000:0000.004E: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1397.894182][T27061] netlink: 'syz.3.5814': attribute type 29 has an invalid length. [ 1397.938949][T22745] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1397.994204][T27061] netlink: 'syz.3.5814': attribute type 29 has an invalid length. [ 1398.111034][T22745] usb 2-1: Using ep0 maxpacket: 8 [ 1398.118810][T22745] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 1398.139145][T22745] usb 2-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 1398.160765][T22745] usb 2-1: config 0 has no interface number 0 [ 1398.167742][T22745] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 97, changing to 10 [ 1398.185892][T22745] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 24929, setting to 1024 [ 1398.206394][T22745] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1398.228975][T22745] usb 2-1: config 0 interface 52 has no altsetting 0 [ 1398.249771][T22745] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 1398.264098][T22745] usb 2-1: New USB device strings: Mfr=0, Product=234, SerialNumber=34 [ 1398.277461][T22745] usb 2-1: Product: syz [ 1398.282609][T22745] usb 2-1: SerialNumber: syz [ 1398.289714][T22745] usb 2-1: config 0 descriptor?? [ 1398.480456][ T3523] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1398.648519][T22745] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.52/input/input69 [ 1398.862866][T22745] usb 2-1: USB disconnect, device number 61 [ 1398.868859][ C1] synaptics_usb 2-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 1399.799538][T27080] vivid-002: disconnect [ 1400.192382][T27089] syzkaller0: entered promiscuous mode [ 1400.197901][T27089] syzkaller0: entered allmulticast mode [ 1400.224778][T27089] tipc: Enabled bearer , priority 0 [ 1400.244254][T27089] tipc: Resetting bearer [ 1400.275043][T27089] tipc: Disabling bearer [ 1400.644678][T27077] vivid-002: reconnect [ 1400.683009][T27099] netlink: 'syz.4.5822': attribute type 2 has an invalid length. [ 1401.102566][T27113] netlink: 'syz.3.5827': attribute type 2 has an invalid length. [ 1401.725366][T22745] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 1401.849965][T27124] netlink: 'syz.3.5831': attribute type 1 has an invalid length. [ 1401.886777][T27124] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1401.903489][T22745] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1401.921700][T22745] usb 2-1: not running at top speed; connect to a high speed hub [ 1401.935403][T22745] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1401.945570][T22745] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1401.963408][T22745] usb 2-1: string descriptor 0 read error: -22 [ 1401.973850][T22745] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1401.985040][T22745] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1402.003955][T22745] usb 2-1: 0:2 : does not exist [ 1402.708687][ T30] audit: type=1326 audit(1769593524.682:4480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27133 comm="syz.0.5833" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf742d539 code=0x0 [ 1403.104085][T22745] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1403.117147][T22745] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1403.146955][T22745] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 1403.186413][T22745] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1403.201436][T22745] usb 2-1: USB disconnect, device number 62 [ 1403.867759][T27154] kAFS: unable to lookup cell '' [ 1403.877308][T27154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1403.937131][T27154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1404.049514][ T5916] IPVS: starting estimator thread 0... [ 1404.509390][T27164] IPVS: using max 55 ests per chain, 132000 per kthread [ 1404.613005][T27167] netlink: 'syz.4.5841': attribute type 2 has an invalid length. [ 1404.852417][T27172] netlink: 'syz.1.5842': attribute type 4 has an invalid length. [ 1404.870386][T27172] netlink: 17 bytes leftover after parsing attributes in process `syz.1.5842'. [ 1405.159232][T27177] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5845'. [ 1407.636483][T27199] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5849'. [ 1408.250313][T22745] usb 4-1: new full-speed USB device number 71 using dummy_hcd [ 1408.427555][T22745] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1408.436581][T22745] usb 4-1: not running at top speed; connect to a high speed hub [ 1408.472835][T22745] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1408.494051][T22745] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1408.539770][T22745] usb 4-1: string descriptor 0 read error: -22 [ 1408.549737][T22745] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1408.567987][T22745] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1408.621792][T22745] usb 4-1: 0:2 : does not exist [ 1410.721008][T27239] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1410.734518][T27239] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1410.748265][T27239] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1410.777814][T27239] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1410.798412][T27239] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1411.094822][T22745] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1411.108390][T22745] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1411.155281][T22745] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 1411.275847][T22745] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1411.323967][T22745] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1411.413918][T22745] usb 4-1: USB disconnect, device number 71 [ 1411.668620][T17730] team0: Port device syz_tun removed [ 1411.733635][T27240] chnl_net:caif_netlink_parms(): no params data found [ 1412.244906][T27261] syzkaller0: entered promiscuous mode [ 1412.266488][T27261] syzkaller0: entered allmulticast mode [ 1412.725954][T27240] bridge0: port 1(bridge_slave_0) entered blocking state [ 1412.764142][T27240] bridge0: port 1(bridge_slave_0) entered disabled state [ 1412.782318][T27240] bridge_slave_0: entered allmulticast mode [ 1412.796187][T27240] bridge_slave_0: entered promiscuous mode [ 1412.808385][T27273] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1412.840333][ T5823] Bluetooth: hci5: command tx timeout [ 1412.900235][ T5820] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1412.918768][T27278] netlink: 'syz.2.5868': attribute type 13 has an invalid length. [ 1412.938183][T27240] bridge0: port 2(bridge_slave_1) entered blocking state [ 1412.946289][T27240] bridge0: port 2(bridge_slave_1) entered disabled state [ 1412.960375][T27240] bridge_slave_1: entered allmulticast mode [ 1412.967354][T27240] bridge_slave_1: entered promiscuous mode [ 1412.993238][T27282] netlink: 'syz.1.5869': attribute type 15 has an invalid length. [ 1413.009502][T27280] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5869'. [ 1413.021155][T27280] bridge_slave_0: default FDB implementation only supports local addresses [ 1413.090202][ T5820] usb 4-1: Using ep0 maxpacket: 16 [ 1413.107168][ T5820] usb 4-1: config 0 has no interfaces? [ 1413.115971][ T5820] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 1413.130206][ T5820] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1413.145888][ T5820] usb 4-1: Product: syz [ 1413.150326][ T5820] usb 4-1: Manufacturer: syz [ 1413.154932][ T5820] usb 4-1: SerialNumber: syz [ 1413.162349][ T5820] usb 4-1: config 0 descriptor?? [ 1413.181796][T27281] geneve0: Caught tx_queue_len zero misconfig [ 1413.187951][T27281] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5868'. [ 1413.240982][T27281] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5868'. [ 1413.320692][ T5820] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1413.341948][ T3523] bond0: (slave netdevsim0): Releasing backup interface [ 1413.397078][T27283] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1413.413499][T27283] syzkaller0: entered promiscuous mode [ 1413.443254][T27283] syzkaller0: entered allmulticast mode [ 1413.464999][T27281] tipc: Enabled bearer , priority 0 [ 1413.470248][ T5820] usb 2-1: Using ep0 maxpacket: 32 [ 1413.479632][T27240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1413.493567][ T5820] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1413.503919][T27240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1413.513246][ T5820] usb 2-1: config 0 has no interface number 0 [ 1413.522335][ T5925] usb 4-1: USB disconnect, device number 72 [ 1413.524819][ T5820] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1413.544265][T27276] tipc: Resetting bearer [ 1413.560522][ T5820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1413.568869][ T5820] usb 2-1: Product: syz [ 1413.584051][ T5820] usb 2-1: Manufacturer: syz [ 1413.588781][ T5820] usb 2-1: SerialNumber: syz [ 1413.604275][ T5820] usb 2-1: config 0 descriptor?? [ 1413.620713][T27276] tipc: Disabling bearer [ 1413.622516][ T5820] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1413.636730][ T5820] usb 2-1: selecting invalid altsetting 1 [ 1413.646831][ T5820] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1413.673928][ T5820] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1413.703149][ T5820] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1413.732524][ T5820] usb 2-1: media controller created [ 1413.758658][ T5820] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1413.788904][T27240] team0: Port device team_slave_0 added [ 1413.861284][T27240] team0: Port device team_slave_1 added [ 1413.917301][ T3523] bridge_slave_1: left allmulticast mode [ 1413.961122][ T3523] bridge_slave_1: left promiscuous mode [ 1413.966994][ T3523] bridge0: port 2(bridge_slave_1) entered disabled state [ 1414.023549][ T3523] bridge_slave_0: left allmulticast mode [ 1414.030221][ T3523] bridge_slave_0: left promiscuous mode [ 1414.037965][ T3523] bridge0: port 1(bridge_slave_0) entered disabled state [ 1414.098856][ T5820] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1414.228154][ T5820] usb 2-1: USB disconnect, device number 63 [ 1414.510183][T27303] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5874'. [ 1414.965450][ T5823] Bluetooth: hci5: command tx timeout [ 1415.359622][ T3523] bond6 (unregistering): (slave erspan0): Releasing active interface [ 1415.842112][ T3523] tipc: Disabling bearer [ 1415.862306][T27311] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5876'. [ 1416.031731][ T3523] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1416.064152][ T3523] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1416.086816][ T3523] bond0 (unregistering): Released all slaves [ 1416.105910][ T3523] bond1 (unregistering): Released all slaves [ 1416.124940][ T3523] bond2 (unregistering): Released all slaves [ 1416.699360][ T3523] bond3 (unregistering): Released all slaves [ 1416.810386][ T5925] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1416.976077][ T5925] usb 2-1: Using ep0 maxpacket: 32 [ 1416.993947][ T5925] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1417.010411][ T5823] Bluetooth: hci5: command tx timeout [ 1417.038088][ T5925] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1417.061744][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1417.118099][ T5925] usb 2-1: Product: syz [ 1417.125462][ T5925] usb 2-1: Manufacturer: syz [ 1417.140219][ T5925] usb 2-1: SerialNumber: syz [ 1417.147719][ T3523] bond4 (unregistering): Released all slaves [ 1417.149869][ T5925] usb 2-1: config 0 descriptor?? [ 1417.176025][ T5925] usb 2-1: bad CDC descriptors [ 1417.183104][ T5925] usb 2-1: unsupported MDLM descriptors [ 1417.475401][ T3523] bond5 (unregistering): (slave veth3): Releasing active interface [ 1417.488426][ T3523] bond5 (unregistering): Released all slaves [ 1417.634576][T27321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1417.694500][T27321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1417.716388][ T3523] bond6 (unregistering): Released all slaves [ 1417.745694][T27321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1417.770567][T27327] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5880'. [ 1417.780024][T27328] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5880'. [ 1417.789648][T27321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1417.851917][T27240] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1417.879457][T27240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1417.946221][T27240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1417.986222][ T3523] : left promiscuous mode [ 1418.067893][T27240] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1418.077548][T27240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1418.104722][T27240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1418.125454][ T3523] !: left promiscuous mode [ 1418.158580][T27336] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5884'. [ 1418.179545][T27240] hsr_slave_0: entered promiscuous mode [ 1418.199591][T27240] hsr_slave_1: entered promiscuous mode [ 1418.206462][T27240] debugfs: 'hsr0' already exists in 'hsr' [ 1418.224075][T27240] Cannot create hsr debugfs directory [ 1418.230437][ T3523] tipc: Left network mode [ 1418.944274][ T3523] hsr_slave_0: left promiscuous mode [ 1418.959714][ T3523] hsr_slave_1: left promiscuous mode [ 1418.981015][ T3523] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1419.000582][ T3523] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1419.080823][ T5823] Bluetooth: hci5: command tx timeout [ 1419.192122][ T3523] team0 (unregistering): Port device batadv1 removed [ 1419.450608][ T5925] usb 2-1: USB disconnect, device number 64 [ 1420.907492][T27375] netlink: 15932 bytes leftover after parsing attributes in process `syz.2.5890'. [ 1420.969123][T27377] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5891'. [ 1421.371571][ T3523] team0 (unregistering): Port device team_slave_1 removed [ 1421.572332][T27393] netlink: 'syz.0.5895': attribute type 4 has an invalid length. [ 1421.593339][T27393] netlink: 17 bytes leftover after parsing attributes in process `syz.0.5895'. [ 1421.685560][ T3523] team0 (unregistering): Port device team_slave_0 removed [ 1423.166447][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.175532][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.397778][T27410] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5899'. [ 1423.582123][T27413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1423.590883][T27413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1424.580280][ T5907] hid-generic 0000:0000:0000.004F: unknown main item tag 0x0 [ 1424.621607][ T5907] hid-generic 0000:0000:0000.004F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1424.716175][T27240] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1424.759067][T27240] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1424.792719][T27240] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1424.856200][T27240] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1425.108948][T27240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1425.128977][T27240] 8021q: adding VLAN 0 to HW filter on device team0 [ 1425.169764][T14723] bridge0: port 1(bridge_slave_0) entered blocking state [ 1425.176983][T14723] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1425.380419][T14723] bridge0: port 2(bridge_slave_1) entered blocking state [ 1425.387612][T14723] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1425.530249][ T5925] usb 4-1: new full-speed USB device number 73 using dummy_hcd [ 1425.534677][T27240] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1425.603036][T27240] veth0_vlan: entered promiscuous mode [ 1425.641209][T27240] veth1_vlan: entered promiscuous mode [ 1425.716022][ T5925] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1425.728475][ T5925] usb 4-1: not running at top speed; connect to a high speed hub [ 1425.737798][T27240] veth0_macvtap: entered promiscuous mode [ 1425.753537][ T5925] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1425.773622][T27240] veth1_macvtap: entered promiscuous mode [ 1425.779612][ T5925] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1426.235574][ T5925] usb 4-1: string descriptor 0 read error: -22 [ 1426.241991][ T5925] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1426.272013][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1426.322932][ T5925] usb 4-1: 0:2 : does not exist [ 1426.480286][T27240] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1426.524457][T27240] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1426.618265][ T3523] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1426.633019][ T3523] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1426.662111][ T3523] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1426.682466][ T3523] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1427.219645][ T3523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1427.239843][ T3523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1427.328727][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1427.338505][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1427.489188][ T5925] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1427.552062][ T5925] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1427.607804][ T5925] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 1427.651704][ T5925] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1427.680224][ T5820] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1427.852398][ T5925] usb 4-1: USB disconnect, device number 73 [ 1427.980421][ T5820] usb 2-1: Using ep0 maxpacket: 32 [ 1427.991364][ T5820] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 1428.010571][ T5820] usb 2-1: config 0 has no interface number 0 [ 1428.055624][ T3523] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1428.078411][ T5820] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1428.115032][ T5820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1428.235412][ T5820] usb 2-1: Product: syz [ 1428.259537][ T5820] usb 2-1: Manufacturer: syz [ 1428.270193][ T5820] usb 2-1: SerialNumber: syz [ 1428.383084][ T5820] usb 2-1: config 0 descriptor?? [ 1428.420834][ T5820] smsc95xx v2.0.0 [ 1428.933937][ T5820] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1429.034700][ T5820] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1429.044083][T27509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1429.123418][T27509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1430.213398][ T5820] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 1430.250347][ T5820] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 1430.300299][T27526] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5917'. [ 1430.317488][ T5820] usb 2-1: USB disconnect, device number 65 [ 1431.229323][T27553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1431.275527][T27553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1431.880530][ T5820] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1432.090198][ T5820] usb 2-1: Using ep0 maxpacket: 16 [ 1432.099043][ T5820] usb 2-1: config 0 has no interfaces? [ 1432.106105][ T5820] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1432.117080][ T5820] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1432.144095][ T5820] usb 2-1: Manufacturer: syz [ 1432.166159][ T5820] usb 2-1: config 0 descriptor?? [ 1432.539382][ T5820] usb 2-1: USB disconnect, device number 66 [ 1432.620552][T27565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1432.640248][T27565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1433.612664][T27576] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5931'. [ 1434.839510][T27592] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5936'. [ 1435.032375][T27597] netlink: 'syz.3.5935': attribute type 2 has an invalid length. [ 1435.360340][ T5892] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1435.530819][ T5892] usb 2-1: Using ep0 maxpacket: 16 [ 1435.539391][ T5892] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1435.576035][ T5892] usb 2-1: config 0 has an invalid interface number: 130 but max is 1 [ 1435.588328][ T5892] usb 2-1: config 0 has an invalid interface number: 130 but max is 1 [ 1435.614240][ T5892] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1435.657127][T27239] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1435.674324][ T5892] usb 2-1: config 0 has no interface number 0 [ 1435.681446][T27239] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1435.693868][ T5892] usb 2-1: config 0 interface 130 has no altsetting 0 [ 1435.707299][ T5892] usb 2-1: New USB device found, idVendor=369d, idProduct=1a01, bcdDevice=b2.c3 [ 1435.717053][T27239] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1435.729268][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1435.737523][ T5892] usb 2-1: Product: syz [ 1435.743041][ T5892] usb 2-1: Manufacturer: syz [ 1435.747810][ T5892] usb 2-1: SerialNumber: syz [ 1435.754714][T27239] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1435.762762][ T5892] usb 2-1: config 0 descriptor?? [ 1435.774053][T27239] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1436.503037][T27606] chnl_net:caif_netlink_parms(): no params data found [ 1436.510200][ T5907] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1436.660179][ T5907] usb 5-1: Using ep0 maxpacket: 16 [ 1436.672432][ T5907] usb 5-1: config 0 has no interfaces? [ 1436.780423][ T5907] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 1436.789492][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1436.814222][ T5907] usb 5-1: Product: syz [ 1436.818470][ T5907] usb 5-1: Manufacturer: syz [ 1436.828569][ T5907] usb 5-1: SerialNumber: syz [ 1436.852814][ T5907] usb 5-1: config 0 descriptor?? [ 1436.882055][T22745] usb 3-1: USB disconnect, device number 115 [ 1436.913165][T27606] bridge0: port 1(bridge_slave_0) entered blocking state [ 1436.959481][T27606] bridge0: port 1(bridge_slave_0) entered disabled state [ 1436.973654][T27606] bridge_slave_0: entered allmulticast mode [ 1436.991757][T27606] bridge_slave_0: entered promiscuous mode [ 1437.022015][ T5892] usb-storage 2-1:0.130: USB Mass Storage device detected [ 1437.057657][T27606] bridge0: port 2(bridge_slave_1) entered blocking state [ 1437.071532][T27606] bridge0: port 2(bridge_slave_1) entered disabled state [ 1437.087052][T27606] bridge_slave_1: entered allmulticast mode [ 1437.094764][T27606] bridge_slave_1: entered promiscuous mode [ 1437.122010][T27638] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5946'. [ 1437.168129][ T5892] usb 2-1: USB disconnect, device number 67 [ 1437.334681][ T5820] usb 5-1: USB disconnect, device number 91 [ 1437.350041][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1437.416182][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1437.730964][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1437.746625][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1438.002833][T27239] Bluetooth: hci0: command tx timeout [ 1438.049535][T27606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1438.116151][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1438.145430][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1438.174689][T27606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1438.335781][T27606] team0: Port device team_slave_0 added [ 1438.568673][T27606] team0: Port device team_slave_1 added [ 1438.634677][T27606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1438.647824][T27606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1438.677695][T27606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1438.702498][T27656] netlink: 'syz.4.5949': attribute type 2 has an invalid length. [ 1438.727234][T27656] !: entered promiscuous mode [ 1438.782388][T27606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1438.796241][T27606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1438.854487][T27606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1439.088170][ T12] batman_adv: batadv0: Interface deactivated: gretap1 [ 1440.040435][T27239] Bluetooth: hci0: command tx timeout [ 1440.144054][ T12] gretap0 (unregistering): left promiscuous mode [ 1440.184285][ T12] batman_adv: batadv0: Removing interface: gretap1 [ 1440.336173][ T12] bond3 (unregistering): (slave geneve2): Releasing active interface [ 1440.419136][T27682] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5952'. [ 1440.453109][ T12] bond1 (unregistering): (slave bridge1): Releasing active interface [ 1440.606247][ T12] bond0 (unregistering): left promiscuous mode [ 1440.613864][ T12] bond_slave_0: left promiscuous mode [ 1440.619758][ T12] bond_slave_1: left promiscuous mode [ 1440.662892][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1440.675599][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1440.735569][ T12] bond0 (unregistering): Released all slaves [ 1440.761150][ T12] bond1 (unregistering): Released all slaves [ 1440.779786][ T12] bond2 (unregistering): Released all slaves [ 1441.018504][ T12] bond3 (unregistering): Released all slaves [ 1441.045725][ T12] bond4 (unregistering): Released all slaves [ 1441.227217][T27606] hsr_slave_0: entered promiscuous mode [ 1441.234351][T27606] hsr_slave_1: entered promiscuous mode [ 1441.267647][T27606] debugfs: 'hsr0' already exists in 'hsr' [ 1441.274381][T27606] Cannot create hsr debugfs directory [ 1441.338987][ T12] : left promiscuous mode [ 1441.403292][ T12] !: left promiscuous mode [ 1442.128497][T27239] Bluetooth: hci0: command tx timeout [ 1442.168940][ T12] tipc: Left network mode [ 1442.197912][T27695] pim6reg: entered allmulticast mode [ 1443.343647][T27723] netlink: 'syz.4.5960': attribute type 2 has an invalid length. [ 1443.390617][T27634] usb 2-1: new full-speed USB device number 68 using dummy_hcd [ 1443.492911][ T12] hsr_slave_0: left promiscuous mode [ 1443.499231][ T12] hsr_slave_1: left promiscuous mode [ 1443.507089][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1443.515096][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1443.524280][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1443.532538][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1443.541120][ T12] batman_adv: batadv0: Removing interface: macvtap1 [ 1443.555938][ T12] veth1_macvtap: left promiscuous mode [ 1443.563818][ T12] veth0_macvtap: left promiscuous mode [ 1443.572144][T27634] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1443.583779][T27634] usb 2-1: not running at top speed; connect to a high speed hub [ 1443.601667][T27634] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1443.623419][T27634] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1443.643666][T27634] usb 2-1: string descriptor 0 read error: -22 [ 1443.652738][T27634] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1443.672125][T27634] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1443.699220][T27634] usb 2-1: 0:2 : does not exist [ 1444.055720][T27738] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5961'. [ 1444.202656][T27239] Bluetooth: hci0: command tx timeout [ 1444.799834][T27634] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1444.842557][T27634] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 1444.878474][T27634] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1444.890260][T27634] usb 2-1: USB disconnect, device number 68 [ 1444.939380][T25919] udevd[25919]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1445.846027][ T5194] Dev loop6: unable to read RDB block 1 [ 1445.851829][ T5194] loop6: unable to read partition table [ 1445.857786][ T5194] loop6: partition table beyond EOD, truncated [ 1445.927775][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1446.057705][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1446.845589][T27695] pim6reg: left allmulticast mode [ 1446.948208][T27606] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1447.001888][T27606] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1447.058963][T27606] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1447.159642][T27606] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1447.341963][ T12] IPVS: stop unused estimator thread 0... [ 1447.808503][T27606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1447.941252][T27606] 8021q: adding VLAN 0 to HW filter on device team0 [ 1447.969444][ T754] bridge0: port 1(bridge_slave_0) entered blocking state [ 1447.976724][ T754] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1448.026647][ T754] bridge0: port 2(bridge_slave_1) entered blocking state [ 1448.033841][ T754] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1448.339582][T27798] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5970'. [ 1448.459071][T27606] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1448.496523][T27606] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1448.584634][T27606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1448.837406][T27606] veth0_vlan: entered promiscuous mode [ 1448.901627][T27606] veth1_vlan: entered promiscuous mode [ 1449.189919][T27606] veth0_macvtap: entered promiscuous mode [ 1449.306421][T27606] veth1_macvtap: entered promiscuous mode [ 1449.396685][T27606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1449.415567][T27826] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5972'. [ 1449.422442][T27606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1449.509945][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1449.523085][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1449.542383][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1449.654984][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1449.983805][ T3469] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1449.996020][ T3469] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1450.433423][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1450.442347][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1450.657125][T27847] netlink: 'syz.3.5975': attribute type 2 has an invalid length. [ 1451.114533][T27835] pim6reg: entered allmulticast mode [ 1451.353541][T27862] fuse: Unknown parameter 'group_id00000000000000000000' [ 1452.690669][T27834] pim6reg: left allmulticast mode [ 1453.120196][T27883] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5987'. [ 1453.401002][ T5916] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1453.589596][ T5916] usb 5-1: config 0 has too many interfaces: 202, using maximum allowed: 32 [ 1453.599097][ T5916] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1453.664881][ T5916] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 202 [ 1453.878436][ T5916] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 1453.900485][ T5916] usb 5-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3 [ 1453.908617][ T5916] usb 5-1: Product: syz [ 1453.915048][ T5916] usb 5-1: Manufacturer: syz [ 1453.930198][ T5916] usb 5-1: SerialNumber: syz [ 1453.967835][ T5916] usb 5-1: config 0 descriptor?? [ 1453.977358][ T5916] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1454.228088][T14729] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1454.275320][ T10] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1454.461894][ T5916] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1454.491604][T25919] udevd[25919]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1454.524600][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 1454.539235][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1454.564431][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1454.579477][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1454.618416][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1454.639523][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1454.667763][ T10] usb 2-1: config 0 descriptor?? [ 1455.198600][ T10] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0050/input/input71 [ 1455.341774][ T10] microsoft 0003:045E:07DA.0050: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 1455.414153][T27918] netlink: 'syz.0.5992': attribute type 2 has an invalid length. [ 1455.433579][ T10] usb 2-1: USB disconnect, device number 69 [ 1455.589608][T27917] fido_id[27917]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1456.085728][ T10] usb 5-1: USB disconnect, device number 92 [ 1456.273901][T27930] tipc: Started in network mode [ 1456.279151][T27930] tipc: Node identity ac14140f, cluster identity 4711 [ 1456.288167][T27930] tipc: New replicast peer: 255.255.255.255 [ 1456.306589][T27930] tipc: Enabled bearer , priority 10 [ 1456.319443][T27930] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5996'. [ 1456.496648][T27937] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5999'. [ 1456.995322][T27948] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6002'. [ 1457.264016][ T5194] Dev loop6: unable to read RDB block 1 [ 1457.318312][ T5194] loop6: unable to read partition table [ 1457.380186][T27953] netdevsim netdevsim4: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 1457.393393][ T5194] loop6: partition table beyond EOD, truncated [ 1457.410207][ T10] tipc: Node number set to 2886997007 [ 1457.477163][T27948] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6002'. [ 1459.199339][T27973] netlink: 'syz.4.6007': attribute type 2 has an invalid length. [ 1459.735212][T27975] netlink: 'syz.3.6008': attribute type 1 has an invalid length. [ 1459.805182][T27975] bond3: (slave geneve2): making interface the new active one [ 1459.821195][T27975] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 1459.903985][T27740] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1459.916637][T27740] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1460.032589][ T36] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1460.640214][ T10] usb 5-1: new full-speed USB device number 93 using dummy_hcd [ 1460.932621][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1460.942378][ T10] usb 5-1: not running at top speed; connect to a high speed hub [ 1460.956753][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1460.967305][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1460.981075][ T10] usb 5-1: string descriptor 0 read error: -22 [ 1460.999493][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1461.024428][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1461.049949][ T10] usb 5-1: 0:2 : does not exist [ 1461.790187][T22745] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 1461.951839][T22745] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1461.959881][T22745] usb 3-1: config 0 has no interface number 0 [ 1461.987742][T22745] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1462.040277][ T10] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1462.058308][T22745] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1462.068355][T22745] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1462.078899][T22745] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1462.100219][T22745] usb 3-1: config 0 descriptor?? [ 1462.109447][ T10] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1462.173961][ T10] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 1462.229030][ T10] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1462.241050][ T10] usb 5-1: USB disconnect, device number 93 [ 1462.265128][T25919] udevd[25919]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1462.538374][T22745] prodikeys 0003:041E:2801.0051: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.2-1/input1 [ 1462.574184][T22745] hid_prodikeys: hid-prodikeys: failed to find output report [ 1462.574184][T22745] [ 1462.585406][T28013] loop4: detected capacity change from 0 to 7 [ 1462.685185][T28013] Dev loop4: unable to read RDB block 7 [ 1462.735837][T28001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1462.762392][T28001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1462.782174][T28013] loop4: unable to read partition table [ 1462.800267][T28013] loop4: partition table beyond EOD, truncated [ 1462.859077][T28013] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 1462.863648][ T5916] usb 3-1: USB disconnect, device number 116 [ 1463.601985][ T5916] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1463.614773][T28038] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6023'. [ 1464.230172][T27634] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1464.448799][T28033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1464.458383][T28033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1464.560133][T27634] usb 5-1: Using ep0 maxpacket: 8 [ 1464.975443][T27634] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1465.001100][T27634] usb 5-1: config 4 interface 0 has no altsetting 0 [ 1465.049907][T28047] tipc: Started in network mode [ 1465.056081][T28047] tipc: Node identity ac14140f, cluster identity 4711 [ 1465.069301][T28047] tipc: New replicast peer: 255.255.255.255 [ 1465.076506][T28047] tipc: Enabled bearer , priority 10 [ 1465.105766][T27634] usb 5-1: string descriptor 0 read error: -22 [ 1465.115268][T28047] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6027'. [ 1465.130773][T27634] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1465.216237][T27634] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1465.277755][T27634] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1465.305186][T27634] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1465.670520][T27634] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1465.726857][T27634] usb 5-1: media controller created [ 1465.760851][T27634] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1466.070246][ T5937] tipc: Node number set to 2886997007 [ 1466.825499][T27634] zl10353_read_register: readreg error (reg=127, ret==0) [ 1466.948881][ T5916] usb 5-1: USB disconnect, device number 94 [ 1467.464219][T28073] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6033'. [ 1467.491361][T28073] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6033'. [ 1467.507327][T28074] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6033'. [ 1467.526909][T28075] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6033'. [ 1467.804868][T28080] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6035'. [ 1468.071132][T28088] bridge_slave_0: left allmulticast mode [ 1468.084373][T28088] bridge_slave_0: left promiscuous mode [ 1468.117209][T28088] bridge0: port 1(bridge_slave_0) entered disabled state [ 1468.413434][T28088] bridge_slave_1: left allmulticast mode [ 1468.427480][T28088] bridge_slave_1: left promiscuous mode [ 1468.434953][T28088] bridge0: port 2(bridge_slave_1) entered disabled state [ 1468.464500][T28088] bond0: (slave bond_slave_0): Releasing backup interface [ 1468.535025][T28088] bond0: (slave bond_slave_1): Releasing backup interface [ 1468.567382][T28088] team0: Port device team_slave_0 removed [ 1468.630777][T28088] team0: Port device team_slave_1 removed [ 1468.651552][T28088] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1468.661015][T28088] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1468.724423][T28088] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1468.742792][T28088] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1468.786367][T28088] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1469.268596][T28113] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1469.686241][ T10] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1469.930473][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1469.960426][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1469.975976][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1470.001903][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1470.027840][ T10] usb 2-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1470.037373][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1470.051116][ T10] usb 2-1: Product: syz [ 1470.059637][ T10] usb 2-1: Manufacturer: syz [ 1470.069810][ T10] usb 2-1: SerialNumber: syz [ 1470.110827][ T10] usb 2-1: config 0 descriptor?? [ 1470.152687][ T10] iguanair 2-1:0.0: probe with driver iguanair failed with error -12 [ 1470.324984][ T30] audit: type=1326 audit(1769593592.302:4481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28125 comm="syz.2.6047" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f67539 code=0x0 [ 1470.488311][T28131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1470.500037][T28131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1470.554552][T28131] macvlan2: entered promiscuous mode [ 1470.577996][T28131] macvlan2: entered allmulticast mode [ 1470.655144][T28134] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6048'. [ 1470.683558][T27634] usb 2-1: USB disconnect, device number 70 [ 1471.395325][T28147] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6050'. [ 1471.414191][T28147] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1471.620161][ T10] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1471.865541][ T10] usb 2-1: config 7 has an invalid interface number: 195 but max is 2 [ 1471.875830][ T10] usb 2-1: config 7 has an invalid interface number: 166 but max is 2 [ 1471.891548][ T10] usb 2-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 1471.905121][ T10] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 1471.930154][ T10] usb 2-1: config 7 has 2 interfaces, different from the descriptor's value: 3 [ 1471.952574][ T10] usb 2-1: config 7 has no interface number 0 [ 1471.969351][ T10] usb 2-1: config 7 has no interface number 1 [ 1471.989513][ T10] usb 2-1: config 7 interface 195 altsetting 255 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 1472.064594][T28157] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1472.070193][ T10] usb 2-1: config 7 interface 195 altsetting 255 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 1472.071148][T28157] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1472.104913][ T10] usb 2-1: config 7 interface 195 altsetting 255 endpoint 0x9 has an invalid bInterval 222, changing to 11 [ 1472.135475][ T10] usb 2-1: config 7 interface 195 altsetting 255 has a duplicate endpoint with address 0x1, skipping [ 1472.148475][ T10] usb 2-1: config 7 interface 195 altsetting 255 has a duplicate endpoint with address 0xE, skipping [ 1472.163749][ T10] usb 2-1: config 7 interface 195 altsetting 255 has a duplicate endpoint with address 0x5, skipping [ 1472.180264][T28157] vhci_hcd vhci_hcd.0: Device attached [ 1472.192399][ T10] usb 2-1: config 7 interface 195 altsetting 255 has a duplicate endpoint with address 0x5, skipping [ 1472.226560][ T10] usb 2-1: config 7 interface 195 altsetting 255 has a duplicate endpoint with address 0x2, skipping [ 1472.283923][ T10] usb 2-1: config 7 interface 195 altsetting 255 has a duplicate endpoint with address 0x6, skipping [ 1472.306913][ T10] usb 2-1: config 7 interface 166 altsetting 69 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 1472.319431][ T10] usb 2-1: config 7 interface 166 altsetting 69 has a duplicate endpoint with address 0x83, skipping [ 1472.335397][ T10] usb 2-1: config 7 interface 166 altsetting 69 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1472.394408][ T10] usb 2-1: config 7 interface 195 has no altsetting 0 [ 1472.412189][ T10] usb 2-1: config 7 interface 166 has no altsetting 0 [ 1472.425939][ T10] usb 2-1: New USB device found, idVendor=083a, idProduct=4531, bcdDevice=af.23 [ 1472.441220][T22745] usb 33-1: new low-speed USB device number 4 using vhci_hcd [ 1472.447397][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1472.456896][ T10] usb 2-1: Product: І [ 1472.465366][ T10] usb 2-1: Manufacturer: э [ 1472.474278][ T10] usb 2-1: SerialNumber: 蘻 [ 1472.557423][T28157] netdevsim netdevsim0: Direct firmware load for nel/address_bits failed with error -2 [ 1472.590141][T28157] netdevsim netdevsim0: Falling back to sysfs fallback for: nel/address_bits [ 1472.725268][T28152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1472.786197][T28152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1472.838920][T28174] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1472.853523][T28176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1472.914138][T28176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1472.937027][T28158] vhci_hcd: connection reset by peer [ 1472.953981][ T12] vhci_hcd vhci_hcd.0: stop threads [ 1472.972177][ T12] vhci_hcd vhci_hcd.0: release socket [ 1472.977849][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 1473.320246][ T5937] usb 4-1: new full-speed USB device number 75 using dummy_hcd [ 1473.478069][ T5937] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1473.493945][ T5937] usb 4-1: not running at top speed; connect to a high speed hub [ 1473.506156][ T5937] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1473.517878][ T5937] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1473.538907][ T5937] usb 4-1: string descriptor 0 read error: -22 [ 1473.550364][ T5937] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1473.559892][ T5937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1473.601816][ T5937] usb 4-1: 0:2 : does not exist [ 1473.818835][ T5937] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 1473.897988][ T5937] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1473.911346][ T5937] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1473.926662][ T5937] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 1473.961420][ T5937] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1473.991776][ T5937] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1474.005842][ T5937] usb 4-1: USB disconnect, device number 75 [ 1474.188438][T28189] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6062'. [ 1474.445278][ T10] usb 2-1: USB disconnect, device number 71 [ 1474.780243][ T5820] usb 5-1: new full-speed USB device number 95 using dummy_hcd [ 1474.936915][ T5820] usb 5-1: device descriptor read/64, error -71 [ 1474.982784][T28202] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6065'. [ 1475.323750][ T5820] usb 5-1: new full-speed USB device number 96 using dummy_hcd [ 1475.460207][ T5820] usb 5-1: device descriptor read/64, error -71 [ 1475.580992][ T5820] usb usb5-port1: attempt power cycle [ 1476.200188][ T5820] usb 5-1: new full-speed USB device number 97 using dummy_hcd [ 1476.238247][ T5820] usb 5-1: device descriptor read/8, error -71 [ 1476.458473][ T5823] Bluetooth: hci3: command 0x0406 tx timeout [ 1476.481720][ T5820] usb 5-1: new full-speed USB device number 98 using dummy_hcd [ 1476.511850][ T5820] usb 5-1: device descriptor read/8, error -71 [ 1476.625529][ T5820] usb usb5-port1: unable to enumerate USB device [ 1476.862225][T28213] fuse: Invalid rootmode [ 1476.988291][ T30] audit: type=1326 audit(1769593598.962:4482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28218 comm="syz.0.6070" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d539 code=0x7ffc0000 [ 1477.069789][ T30] audit: type=1326 audit(1769593598.992:4483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28218 comm="syz.0.6070" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d539 code=0x7ffc0000 [ 1477.098623][ T30] audit: type=1326 audit(1769593598.992:4484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28218 comm="syz.0.6070" exe="/root/syz-executor" sig=0 arch=40000003 syscall=435 compat=1 ip=0xf742d539 code=0x7ffc0000 [ 1477.395183][ T30] audit: type=1326 audit(1769593599.322:4485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28218 comm="syz.0.6070" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d539 code=0x7ffc0000 [ 1477.586391][ T30] audit: type=1326 audit(1769593599.322:4486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28218 comm="syz.0.6070" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d539 code=0x7ffc0000 [ 1477.620285][T22745] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 1477.672331][ T30] audit: type=1326 audit(1769593599.322:4487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28228 comm="syz.0.6070" exe="/root/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf719572b code=0x7ffc0000 [ 1477.695605][ T30] audit: type=1326 audit(1769593599.532:4488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28228 comm="syz.0.6070" exe="/root/syz-executor" sig=0 arch=40000003 syscall=1 compat=1 ip=0xf742d539 code=0x7ffc0000 [ 1478.557751][ T30] audit: type=1326 audit(1769593600.532:4489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28218 comm="syz.0.6070" exe="/root/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf742d539 code=0x7ffc0000 [ 1478.604809][T28246] netlink: 'syz.1.6073': attribute type 2 has an invalid length. [ 1478.815230][ T30] audit: type=1326 audit(1769593600.572:4490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28218 comm="syz.0.6070" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d539 code=0x7ffc0000 [ 1478.848827][ T30] audit: type=1326 audit(1769593600.572:4491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28218 comm="syz.0.6070" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf742d539 code=0x7ffc0000 [ 1479.831832][T28256] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6076'. [ 1480.382015][T27634] usb 2-1: new full-speed USB device number 72 using dummy_hcd [ 1480.542329][T27634] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1480.560825][T27634] usb 2-1: not running at top speed; connect to a high speed hub [ 1480.571253][T27634] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1480.595376][T27634] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1480.808424][T27634] usb 2-1: string descriptor 0 read error: -22 [ 1480.818025][T27634] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1480.841288][T27634] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1481.108364][T27634] usb 2-1: 0:2 : does not exist [ 1481.379536][T27634] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1481.405707][T27634] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1481.430269][T27634] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1481.443084][T27634] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 1481.469185][T27634] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1481.615273][T27634] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1481.626521][T27634] usb 2-1: USB disconnect, device number 72 [ 1482.350550][ T5937] usb 5-1: new full-speed USB device number 99 using dummy_hcd [ 1482.490163][ T5937] usb 5-1: device descriptor read/64, error -71 [ 1482.740255][ T5937] usb 5-1: new full-speed USB device number 100 using dummy_hcd [ 1482.813422][T28284] syzkaller1: entered promiscuous mode [ 1482.829662][T28284] syzkaller1: entered allmulticast mode [ 1482.847655][T28284] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6084'. [ 1482.880463][ T5937] usb 5-1: device descriptor read/64, error -71 [ 1483.173543][ T5937] usb usb5-port1: attempt power cycle [ 1483.372105][T28290] syzkaller0: left promiscuous mode [ 1483.377466][T28290] syzkaller0: left allmulticast mode [ 1483.560420][ T5937] usb 5-1: new full-speed USB device number 101 using dummy_hcd [ 1483.592391][ T5937] usb 5-1: device descriptor read/8, error -71 [ 1483.900246][ T5937] usb 5-1: new full-speed USB device number 102 using dummy_hcd [ 1483.930177][ T5937] usb 5-1: device descriptor read/8, error -71 [ 1484.041623][ T5937] usb usb5-port1: unable to enumerate USB device [ 1484.237212][T28304] netlink: 'syz.0.6088': attribute type 2 has an invalid length. [ 1484.607834][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.614698][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.974731][T28312] fuse: Unknown parameter 'mGN8oad' [ 1485.030398][T28312] IPVS: set_ctl: invalid protocol: 33 100.1.1.2:21 [ 1485.138338][T28317] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6092'. [ 1486.650259][T22745] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1486.810178][T22745] usb 4-1: Using ep0 maxpacket: 16 [ 1486.840092][T22745] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 1486.866022][T22745] usb 4-1: config 1 has no interface number 0 [ 1486.900519][T22745] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1486.917268][T22745] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1486.931009][T22745] usb 4-1: config 1 interface 105 has no altsetting 0 [ 1486.977278][T22745] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1487.001615][T22745] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1487.018989][T22745] usb 4-1: Product: syz [ 1487.040137][T22745] usb 4-1: Manufacturer: syz [ 1487.051157][T22745] usb 4-1: SerialNumber: syz [ 1487.069759][T28330] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1487.083125][T28330] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1487.313517][T28345] syzkaller0: entered promiscuous mode [ 1487.319188][T28345] syzkaller0: entered allmulticast mode [ 1487.752047][T28356] fuse: Unknown parameter '\fƒvC;g ' [ 1487.769505][T28330] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1487.780461][T28330] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1487.915940][T28361] netlink: 'syz.4.6101': attribute type 2 has an invalid length. [ 1487.935595][ T5937] usb 2-1: new full-speed USB device number 73 using dummy_hcd [ 1488.122164][ T5937] usb 2-1: device descriptor read/64, error -71 [ 1488.360443][ T5937] usb 2-1: new full-speed USB device number 74 using dummy_hcd [ 1488.397151][T22745] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 1488.422624][T22745] aqc111 4-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, d6:02:29:0b:65:9c [ 1488.531216][ T5937] usb 2-1: device descriptor read/64, error -71 [ 1488.637671][ T10] usb 4-1: USB disconnect, device number 76 [ 1488.645238][ T10] aqc111 4-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 1488.970024][ T5937] usb usb2-port1: attempt power cycle [ 1489.112596][ T10] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1489.126240][ T10] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1489.141255][ T10] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 1489.350197][ T5937] usb 2-1: new full-speed USB device number 75 using dummy_hcd [ 1489.409085][ T5937] usb 2-1: device descriptor read/8, error -71 [ 1489.863522][T28389] fuse: Unknown parameter 'mGN8oad' [ 1489.946902][ T5937] usb 2-1: new full-speed USB device number 76 using dummy_hcd [ 1489.995545][ T5937] usb 2-1: device descriptor read/8, error -71 [ 1490.087200][T28389] IPVS: set_ctl: invalid protocol: 33 100.1.1.2:21 [ 1490.114310][ T5937] usb usb2-port1: unable to enumerate USB device [ 1490.824723][T28413] FAULT_INJECTION: forcing a failure. [ 1490.824723][T28413] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1490.861466][T28413] CPU: 0 UID: 0 PID: 28413 Comm: syz.4.6113 Tainted: G L syzkaller #0 PREEMPT(full) [ 1490.861497][T28413] Tainted: [L]=SOFTLOCKUP [ 1490.861504][T28413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1490.861516][T28413] Call Trace: [ 1490.861523][T28413] [ 1490.861532][T28413] dump_stack_lvl+0xe8/0x150 [ 1490.861559][T28413] should_fail_ex+0x412/0x560 [ 1490.861585][T28413] _copy_from_user+0x2d/0xb0 [ 1490.861609][T28413] get_compat_msghdr+0xb3/0x4c0 [ 1490.861636][T28413] ? __pfx_get_compat_msghdr+0x10/0x10 [ 1490.861657][T28413] ? rcu_is_watching+0x15/0xb0 [ 1490.861673][T28413] ? ___sys_recvmsg+0x224/0x590 [ 1490.861702][T28413] ___sys_recvmsg+0x1dd/0x590 [ 1490.861728][T28413] ? __pfx____sys_recvmsg+0x10/0x10 [ 1490.861754][T28413] ? __fget_files+0x2a/0x420 [ 1490.861800][T28413] do_recvmmsg+0x3a5/0x800 [ 1490.861829][T28413] ? __pfx_do_recvmmsg+0x10/0x10 [ 1490.861888][T28413] __sys_recvmmsg+0x1a5/0x290 [ 1490.861911][T28413] ? __pfx___sys_recvmmsg+0x10/0x10 [ 1490.861930][T28413] ? ksys_write+0x242/0x270 [ 1490.861953][T28413] ? __pfx_ksys_write+0x10/0x10 [ 1490.861976][T28413] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 1490.862000][T28413] __do_fast_syscall_32+0x1d2/0x540 [ 1490.862018][T28413] ? lockdep_hardirqs_on+0x7a/0x110 [ 1490.862034][T28413] ? do_fast_syscall_32+0x33/0x70 [ 1490.862049][T28413] ? asm_int80_emulation+0x1a/0x20 [ 1490.862065][T28413] ? do_int80_emulation+0x20e/0x400 [ 1490.862084][T28413] do_fast_syscall_32+0x33/0x70 [ 1490.862101][T28413] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1490.862120][T28413] RIP: 0023:0xf748d539 [ 1490.862137][T28413] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1490.862151][T28413] RSP: 002b:00000000f549550c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 1490.862170][T28413] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000008001c700 [ 1490.862181][T28413] RDX: 0000000000000278 RSI: 0000000000020000 RDI: 0000000000000000 [ 1490.862191][T28413] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1490.862201][T28413] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1490.862210][T28413] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1490.862232][T28413] [ 1491.565176][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1491.565203][ T30] audit: type=1326 audit(1769593613.542:4498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28417 comm="syz.2.6116" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 1491.698180][ T30] audit: type=1326 audit(1769593613.542:4499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28417 comm="syz.2.6116" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 1491.956135][ T30] audit: type=1326 audit(1769593613.582:4500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28417 comm="syz.2.6116" exe="/root/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 1492.314768][ T30] audit: type=1326 audit(1769593613.582:4501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28417 comm="syz.2.6116" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 1492.403714][ T30] audit: type=1326 audit(1769593613.582:4502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28417 comm="syz.2.6116" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 1492.456548][ T30] audit: type=1326 audit(1769593613.582:4503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28417 comm="syz.2.6116" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 1492.488825][ T30] audit: type=1326 audit(1769593613.582:4504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28417 comm="syz.2.6116" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 1492.574321][ T30] audit: type=1326 audit(1769593613.582:4505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28417 comm="syz.2.6116" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 1492.600157][ T5925] usb 5-1: new full-speed USB device number 103 using dummy_hcd [ 1492.652800][ T30] audit: type=1326 audit(1769593613.582:4506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28417 comm="syz.2.6116" exe="/root/syz-executor" sig=0 arch=40000003 syscall=286 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 1492.714466][ T30] audit: type=1326 audit(1769593613.582:4507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28417 comm="syz.2.6116" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f67539 code=0x7ffc0000 [ 1492.772383][ T5925] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1492.780945][ T5925] usb 5-1: not running at top speed; connect to a high speed hub [ 1492.789908][ T5925] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1492.802184][ T5925] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1492.879490][ T5925] usb 5-1: string descriptor 0 read error: -22 [ 1492.886133][ T5925] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1492.896685][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1492.914264][ T5925] usb 5-1: 0:2 : does not exist [ 1492.950897][ T5820] usb 2-1: new full-speed USB device number 77 using dummy_hcd [ 1493.253658][ T5925] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1493.282936][ T5820] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1493.362478][ T5820] usb 2-1: not running at top speed; connect to a high speed hub [ 1493.378251][ T5820] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1493.405960][ T5820] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1493.421378][ T5925] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1493.446178][ T5820] usb 2-1: string descriptor 0 read error: -22 [ 1493.452957][ T5820] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1493.462341][ T5820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1493.468869][ T5925] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1493.513413][ T5925] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 1493.547007][ T5925] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1493.572664][T28440] Set syz1 is full, maxelem 6117 reached [ 1493.588848][ T5925] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1493.638193][ T5820] usb 2-1: 0:2 : does not exist [ 1493.646111][ T5925] usb 5-1: USB disconnect, device number 103 [ 1493.768855][ T5820] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1493.813414][ T5820] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1493.832063][ T5820] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1493.869586][ T5820] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 1494.221097][ T5820] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1494.239078][ T5820] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1494.280570][ T5820] usb 2-1: USB disconnect, device number 77 [ 1494.636077][T28463] input: syz0 as /devices/virtual/input/input73 [ 1494.719744][T28465] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1494.778739][T28458] netlink: 100 bytes leftover after parsing attributes in process `syz.4.6123'. [ 1494.798808][T28463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1494.893931][T28464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6125'. [ 1494.905229][T28464] sit0: entered promiscuous mode [ 1495.840274][T28489] netlink: 'syz.2.6130': attribute type 2 has an invalid length. [ 1495.861926][T28489] !: entered promiscuous mode [ 1496.943582][ T5925] usb 3-1: new full-speed USB device number 117 using dummy_hcd [ 1497.139594][ T5925] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1497.150444][ T5925] usb 3-1: not running at top speed; connect to a high speed hub [ 1497.165128][ T5925] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1497.175556][ T5925] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1497.194044][ T5925] usb 3-1: string descriptor 0 read error: -22 [ 1497.200464][ T5925] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1497.209640][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1497.230459][ T5925] usb 3-1: 0:2 : does not exist [ 1497.993435][ T5925] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1498.050151][ T5925] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1498.092846][ T5925] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1498.144050][ T5925] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 1498.248291][ T5925] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1498.279231][ T5925] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1498.296140][ T5925] usb 3-1: USB disconnect, device number 117 [ 1498.427337][T28516] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6140'. [ 1500.104584][T28541] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6146'. [ 1500.864938][T28553] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6148'. [ 1501.271047][ T10] usb 4-1: new full-speed USB device number 77 using dummy_hcd [ 1501.430590][ T10] usb 4-1: device descriptor read/64, error -71 [ 1501.670300][ T10] usb 4-1: new full-speed USB device number 78 using dummy_hcd [ 1501.835108][ T10] usb 4-1: device descriptor read/64, error -71 [ 1501.993955][ T10] usb usb4-port1: attempt power cycle [ 1502.800241][ T10] usb 4-1: new full-speed USB device number 79 using dummy_hcd [ 1502.830757][ T10] usb 4-1: device descriptor read/8, error -71 [ 1503.080301][ T5820] usb 5-1: new full-speed USB device number 104 using dummy_hcd [ 1503.080736][ T10] usb 4-1: new full-speed USB device number 80 using dummy_hcd [ 1503.110806][ T10] usb 4-1: device descriptor read/8, error -71 [ 1503.220641][ T10] usb usb4-port1: unable to enumerate USB device [ 1503.257700][ T5820] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1503.266481][ T5820] usb 5-1: not running at top speed; connect to a high speed hub [ 1503.278934][ T5820] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1503.298204][ T5820] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1503.333155][ T5820] usb 5-1: string descriptor 0 read error: -22 [ 1503.339534][ T5820] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1503.359063][ T5820] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1503.382458][ T5820] usb 5-1: 0:2 : does not exist [ 1503.609445][ T5820] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1503.647882][ T5820] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1503.669336][ T5820] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1503.683603][ T5820] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 1503.717922][ T5820] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1503.733952][ T5820] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1503.747510][ T5820] usb 5-1: USB disconnect, device number 104 [ 1504.582955][T28587] netlink: 'syz.2.6156': attribute type 10 has an invalid length. [ 1504.651857][T28587] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1504.922501][ T5820] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1505.100902][ T5820] usb 3-1: Using ep0 maxpacket: 32 [ 1505.110984][ T5820] usb 3-1: config 0 has an invalid interface number: 217 but max is 0 [ 1505.139553][ T5820] usb 3-1: config 0 has no interface number 0 [ 1505.156423][ T5820] usb 3-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 1505.165924][ T5820] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1505.174136][ T5820] usb 3-1: Product: syz [ 1505.180261][ T5820] usb 3-1: Manufacturer: syz [ 1505.192456][ T5820] usb 3-1: SerialNumber: syz [ 1505.226328][ T5820] usb 3-1: config 0 descriptor?? [ 1505.268145][ T5820] ftdi_sio 3-1:0.217: FTDI USB Serial Device converter detected [ 1505.279463][ T5820] usb 3-1: Detected SIO [ 1505.291881][ T5820] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1505.328741][T28599] input: syz1 as /devices/virtual/input/input76 [ 1507.473182][ T5925] usb 3-1: USB disconnect, device number 118 [ 1507.486800][ T5925] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1507.650430][ T5925] ftdi_sio 3-1:0.217: device disconnected [ 1507.699368][T28636] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1508.020229][ T5937] usb 2-1: new full-speed USB device number 78 using dummy_hcd [ 1508.348014][ T5937] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1508.422244][ T5937] usb 2-1: not running at top speed; connect to a high speed hub [ 1508.452106][ T5937] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1508.464297][ T5937] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1508.514158][ T5937] usb 2-1: string descriptor 0 read error: -22 [ 1508.522707][ T5937] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1508.548268][ T5937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1508.586359][ T5937] usb 2-1: 0:2 : does not exist [ 1508.998768][T28651] netlink: 'syz.3.6173': attribute type 2 has an invalid length. [ 1509.260317][ T5892] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1509.403168][ T5937] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1509.425866][ T5937] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1509.439608][ T5937] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 1509.453966][ T5892] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1509.470203][ T5892] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1509.486458][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1509.495469][ T5892] usb 3-1: Product: syz [ 1509.499818][ T5892] usb 3-1: Manufacturer: syz [ 1509.505111][ T5892] usb 3-1: SerialNumber: syz [ 1509.517462][ T5937] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1509.539564][ T5937] usb 2-1: USB disconnect, device number 78 [ 1509.567891][ T5892] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1509.661227][T28657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6176'. [ 1509.671552][T28657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6176'. [ 1509.976049][ T5892] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1509.987260][ T5892] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 1509.996334][ T5892] usb 3-1: media controller created [ 1510.017466][ T5892] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1510.688784][T28672] netlink: 'syz.3.6180': attribute type 33 has an invalid length. [ 1510.703498][T28672] netlink: 63 bytes leftover after parsing attributes in process `syz.3.6180'. [ 1511.180174][ T5937] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1511.353453][ T5937] usb 4-1: Using ep0 maxpacket: 8 [ 1511.368289][ T5937] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1511.397686][ T5937] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1511.420360][ T5937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1511.447827][ T5937] usb 4-1: config 0 descriptor?? [ 1511.455329][ T5937] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1512.557973][ T5892] usb 3-1: USB disconnect, device number 119 [ 1512.648758][ T5937] gspca_vc032x: reg_w err -110 [ 1512.676029][ T5937] vc032x 4-1:0.0: probe with driver vc032x failed with error -110 [ 1512.796513][T22745] usb 4-1: USB disconnect, device number 81 [ 1513.094970][T28698] netlink: 'syz.2.6186': attribute type 2 has an invalid length. [ 1514.220180][ T5892] usb 2-1: new full-speed USB device number 79 using dummy_hcd [ 1514.380378][ T5892] usb 2-1: device descriptor read/all, error -61 [ 1514.520490][ T5892] usb 2-1: new full-speed USB device number 80 using dummy_hcd [ 1514.618812][T28708] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6190'. [ 1514.628229][T28708] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6190'. [ 1514.660163][ T5892] usb 2-1: device descriptor read/64, error -71 [ 1514.770693][ T5892] usb usb2-port1: attempt power cycle [ 1515.110144][ T5892] usb 2-1: new full-speed USB device number 81 using dummy_hcd [ 1515.130613][ T5892] usb 2-1: device descriptor read/8, error -71 [ 1515.370138][ T5892] usb 2-1: new full-speed USB device number 82 using dummy_hcd [ 1515.390854][ T5892] usb 2-1: device descriptor read/8, error -71 [ 1515.502054][ T5892] usb usb2-port1: unable to enumerate USB device [ 1515.579138][T28715] binder: 28714:28715 ioctl 40086602 80000080 returned -22 [ 1518.700310][ T5892] usb 2-1: new full-speed USB device number 83 using dummy_hcd [ 1518.881233][ T5892] usb 2-1: device descriptor read/64, error -71 [ 1519.120272][ T5892] usb 2-1: new full-speed USB device number 84 using dummy_hcd [ 1519.250196][ T5892] usb 2-1: device descriptor read/64, error -71 [ 1519.360377][ T5892] usb usb2-port1: attempt power cycle [ 1519.700169][ T5892] usb 2-1: new full-speed USB device number 85 using dummy_hcd [ 1519.805440][ T5892] usb 2-1: device descriptor read/8, error -71 [ 1519.940163][ T5916] usb 4-1: new low-speed USB device number 82 using dummy_hcd [ 1520.009285][T27239] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1520.022213][T27239] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1520.033328][T27239] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1520.042972][T27239] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1520.050641][T27239] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1520.120231][ T5916] usb 4-1: Invalid ep0 maxpacket: 64 [ 1520.156818][ T5892] usb 2-1: new full-speed USB device number 86 using dummy_hcd [ 1520.190973][ T5892] usb 2-1: device descriptor read/8, error -71 [ 1520.272702][ T5916] usb 4-1: new low-speed USB device number 83 using dummy_hcd [ 1520.305049][ T5892] usb usb2-port1: unable to enumerate USB device [ 1520.506580][ T5916] usb 4-1: Invalid ep0 maxpacket: 64 [ 1520.519052][ T5916] usb usb4-port1: attempt power cycle [ 1520.646167][T28772] chnl_net:caif_netlink_parms(): no params data found [ 1520.871379][ T5916] usb 4-1: new low-speed USB device number 84 using dummy_hcd [ 1520.891322][ T5916] usb 4-1: Invalid ep0 maxpacket: 64 [ 1520.895640][T14729] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1521.020267][ T5916] usb 4-1: new low-speed USB device number 85 using dummy_hcd [ 1521.040894][ T5916] usb 4-1: Invalid ep0 maxpacket: 64 [ 1521.046497][ T5916] usb usb4-port1: unable to enumerate USB device [ 1521.075077][T14729] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1521.094271][T28772] bridge0: port 1(bridge_slave_0) entered blocking state [ 1521.104204][T28772] bridge0: port 1(bridge_slave_0) entered disabled state [ 1521.111797][T28772] bridge_slave_0: entered allmulticast mode [ 1521.119083][T28772] bridge_slave_0: entered promiscuous mode [ 1521.153389][T14729] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1521.179602][T28772] bridge0: port 2(bridge_slave_1) entered blocking state [ 1521.187294][T28772] bridge0: port 2(bridge_slave_1) entered disabled state [ 1521.194629][T28772] bridge_slave_1: entered allmulticast mode [ 1521.203450][T28772] bridge_slave_1: entered promiscuous mode [ 1521.230155][ T10] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1521.289596][T14729] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1521.325545][T28772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1521.348844][T28772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1521.380120][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 1521.418771][ T10] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1521.433610][T28772] team0: Port device team_slave_0 added [ 1521.440950][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1521.453548][T28772] team0: Port device team_slave_1 added [ 1521.459301][ T10] usb 5-1: Product: syz [ 1521.465926][ T10] usb 5-1: Manufacturer: syz [ 1521.476872][ T10] usb 5-1: SerialNumber: syz [ 1521.497258][ T10] usb 5-1: config 0 descriptor?? [ 1521.510288][ T10] visor 5-1:0.0: Sony Clie 3.5 converter detected [ 1521.527833][T28772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1521.535995][T28772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1521.562274][T28772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1521.603235][T28772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1521.614279][T28772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1521.651054][T28772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1521.753821][T28781] team0: Port device syz_tun added [ 1521.799666][T28781] team0: Port device syz_tun removed [ 1521.861297][T28781] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1521.889377][T14729] bridge_slave_1: left allmulticast mode [ 1521.903102][T14729] bridge0: port 2(bridge_slave_1) entered disabled state [ 1521.910852][ T10] usb 5-1: clie_3_5_startup: get config number failed: -71 [ 1521.924099][ T10] visor 5-1:0.0: probe with driver visor failed with error -71 [ 1521.939028][T14729] bridge_slave_0: left allmulticast mode [ 1521.951523][ T10] usb 5-1: USB disconnect, device number 105 [ 1521.967857][T14729] bridge0: port 1(bridge_slave_0) entered disabled state [ 1522.120196][T27239] Bluetooth: hci4: command tx timeout [ 1522.278236][T14729] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 1523.131769][T28797] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6215'. [ 1523.355898][T14729] dvmrp8 (unregistering): left allmulticast mode [ 1523.659678][ T10] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1523.706093][T14729] bond1 (unregistering): Released all slaves [ 1523.718188][T14729] bond2 (unregistering): Released all slaves [ 1523.838632][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 1523.866839][ T10] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1523.869315][T28772] hsr_slave_0: entered promiscuous mode [ 1523.878780][ T10] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1523.908706][ T10] usb 4-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1523.925416][ T10] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1523.943112][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1523.953719][T28772] hsr_slave_1: entered promiscuous mode [ 1523.954303][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1523.968079][T28772] debugfs: 'hsr0' already exists in 'hsr' [ 1523.972510][ T10] usb 4-1: Product: syz [ 1523.978087][ T10] usb 4-1: Manufacturer: syz [ 1523.983118][ T10] usb 4-1: SerialNumber: syz [ 1523.992275][T28772] Cannot create hsr debugfs directory [ 1524.029848][T14729] !: left promiscuous mode [ 1524.095745][T14729] tipc: Left network mode [ 1524.200206][T27239] Bluetooth: hci4: command tx timeout [ 1524.230767][T28814] fuse: Bad value for 'fd' [ 1524.449066][T28791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1524.460637][T28791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1524.535501][ T10] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 86 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 1524.580715][ T10] usb 4-1: USB disconnect, device number 86 [ 1524.627360][ T10] usblp0: removed [ 1524.830323][ T5820] usb 3-1: new full-speed USB device number 120 using dummy_hcd [ 1524.951043][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 1524.951061][ T30] audit: type=1326 audit(1769593646.932:4536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28831 comm="syz.1.6221" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf746d539 code=0x0 [ 1524.983843][ T5820] usb 3-1: device descriptor read/64, error -71 [ 1525.008995][T14729] hsr_slave_0: left promiscuous mode [ 1525.026366][T14729] hsr_slave_1: left promiscuous mode [ 1525.072713][T14729] veth1_macvtap: left promiscuous mode [ 1525.078621][T14729] veth0_macvtap: left promiscuous mode [ 1525.129087][T14729] veth0_vlan: left promiscuous mode [ 1525.410215][ T5820] usb 3-1: new full-speed USB device number 121 using dummy_hcd [ 1525.540223][ T5820] usb 3-1: device descriptor read/64, error -71 [ 1525.664251][ T5820] usb usb3-port1: attempt power cycle [ 1525.713180][T27634] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1525.885955][T27634] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1525.899645][T27634] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1525.919811][T27634] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1525.931669][T27634] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1525.947114][T27634] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1525.961693][T27634] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1525.976863][T27634] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1526.010558][ T5820] usb 3-1: new full-speed USB device number 122 using dummy_hcd [ 1526.027307][T27634] usb 4-1: Product: syz [ 1526.032300][T27634] usb 4-1: Manufacturer: syz [ 1526.060577][ T5820] usb 3-1: device descriptor read/8, error -71 [ 1526.075886][T27634] cdc_wdm 4-1:1.0: skipping garbage [ 1526.085202][T27634] cdc_wdm 4-1:1.0: skipping garbage [ 1526.121648][T27634] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1526.127569][T27634] cdc_wdm 4-1:1.0: Unknown control protocol [ 1526.150232][T22745] usb 5-1: new full-speed USB device number 106 using dummy_hcd [ 1526.280603][T27239] Bluetooth: hci4: command tx timeout [ 1526.332037][T22745] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 1526.343893][ T5820] usb 3-1: new full-speed USB device number 123 using dummy_hcd [ 1526.356164][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1526.362781][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1526.369090][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1526.375705][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1526.382050][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1526.388653][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1526.395494][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1526.395534][ T5820] usb 3-1: device descriptor read/8, error -71 [ 1526.402112][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1526.402569][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1526.408639][T22745] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1526.414535][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1526.415363][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1526.442863][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1526.451309][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1526.457948][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1526.464743][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1526.471396][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1526.477641][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1526.484224][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1526.490503][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1526.497082][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1526.507105][ T10] usb 4-1: USB disconnect, device number 87 [ 1526.513136][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1526.534575][T22745] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1526.571873][ T5820] usb usb3-port1: unable to enumerate USB device [ 1526.600813][T22745] usb 5-1: config 0 descriptor?? [ 1526.825961][T28844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1526.837941][T28844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1527.111472][T14729] team0 (unregistering): Port device team_slave_1 removed [ 1527.287050][T14729] team0 (unregistering): Port device team_slave_0 removed [ 1527.737428][T22745] ath6kl: Failed to submit usb control message: -110 [ 1527.756780][T22745] ath6kl: unable to send the bmi data to the device: -110 [ 1527.765167][T22745] ath6kl: Unable to send get target info: -110 [ 1527.801802][T22745] ath6kl: Failed to init ath6kl core: -110 [ 1527.808662][T22745] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 1527.959342][ T5820] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1528.133851][ T5820] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1528.144374][ T5820] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1528.172014][ T5820] usb 3-1: config 0 descriptor?? [ 1528.185661][ T5820] cp210x 3-1:0.0: cp210x converter detected [ 1528.360791][T27239] Bluetooth: hci4: command tx timeout [ 1528.543843][T28864] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 1528.676230][T14729] IPVS: stop unused estimator thread 0... [ 1528.752198][T28870] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6228'. [ 1528.944233][ T10] usb 5-1: USB disconnect, device number 106 [ 1529.054759][T28772] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1529.117232][T28772] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1529.146594][T28772] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1529.169402][T28877] fuse: Bad value for 'fd' [ 1529.182913][T28772] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1529.415921][T28772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1529.509432][T28772] 8021q: adding VLAN 0 to HW filter on device team0 [ 1529.533827][T28893] netlink: 'syz.1.6230': attribute type 2 has an invalid length. [ 1529.566064][ T3523] bridge0: port 1(bridge_slave_0) entered blocking state [ 1529.573356][ T3523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1529.602990][ T3523] bridge0: port 2(bridge_slave_1) entered blocking state [ 1529.610278][ T3523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1529.924213][T28772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1530.064564][T28772] veth0_vlan: entered promiscuous mode [ 1530.244509][T28772] veth1_vlan: entered promiscuous mode [ 1530.372923][T28772] veth0_macvtap: entered promiscuous mode [ 1530.426300][T28772] veth1_macvtap: entered promiscuous mode [ 1530.485536][T28772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1530.512917][T28772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1530.573113][ T3523] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1530.586418][ T5820] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 1530.606046][ T5820] cp210x 3-1:0.0: querying part number failed [ 1530.618626][ T3523] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1530.683360][ T5820] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1530.742387][ T3523] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1530.780260][ T3523] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1530.789413][ T5820] usb 3-1: USB disconnect, device number 124 [ 1530.844570][ T5820] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1530.911263][ T5820] cp210x 3-1:0.0: device disconnected [ 1531.049816][ T3523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1531.079282][ T3523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1531.580267][ T5820] usb 3-1: new full-speed USB device number 125 using dummy_hcd [ 1531.679902][ T3523] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1531.692277][ T3523] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1531.730290][ T5820] usb 3-1: device descriptor read/64, error -71 [ 1532.060196][ T5820] usb 3-1: new full-speed USB device number 126 using dummy_hcd [ 1532.155801][ T5937] usb 5-1: new full-speed USB device number 107 using dummy_hcd [ 1532.191138][ T5820] usb 3-1: device descriptor read/64, error -71 [ 1532.273133][T28940] syz_tun: entered allmulticast mode [ 1532.303202][ T5820] usb usb3-port1: attempt power cycle [ 1532.323454][ T5937] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1532.337807][ T5937] usb 5-1: not running at top speed; connect to a high speed hub [ 1532.349137][ T5937] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1532.363472][ T5937] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1532.383735][ T5937] usb 5-1: string descriptor 0 read error: -22 [ 1532.391723][ T5937] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1532.404667][ T5937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1532.446412][ T5937] usb 5-1: 0:2 : does not exist [ 1532.651471][ T5820] usb 3-1: new full-speed USB device number 127 using dummy_hcd [ 1532.683372][ T5820] usb 3-1: device descriptor read/8, error -71 [ 1532.714934][T28948] fuse: Bad value for 'fd' [ 1532.920409][ T5820] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 1532.940733][T28954] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6242'. [ 1532.951056][ T5820] usb 3-1: device descriptor read/8, error -71 [ 1533.108055][ T5820] usb usb3-port1: unable to enumerate USB device [ 1533.264566][ T5937] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1533.294282][ T5937] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1533.313133][ T5937] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 1533.356166][ T5937] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1533.392508][ T5937] usb 5-1: USB disconnect, device number 107 [ 1533.714261][T28975] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6244'. [ 1535.032971][T29000] fuse: Bad value for 'fd' [ 1535.518737][T28940] syz_tun: left allmulticast mode [ 1536.116694][T29013] netlink: 6 bytes leftover after parsing attributes in process `syz.4.6255'. [ 1536.125960][T29013] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1536.419034][T29018] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6257'. [ 1536.526194][T27634] usb 5-1: new full-speed USB device number 108 using dummy_hcd [ 1536.671563][T27634] usb 5-1: device descriptor read/64, error -71 [ 1536.920236][T27634] usb 5-1: new full-speed USB device number 109 using dummy_hcd [ 1537.060324][T27634] usb 5-1: device descriptor read/64, error -71 [ 1537.190662][T27634] usb usb5-port1: attempt power cycle [ 1537.561197][T27634] usb 5-1: new full-speed USB device number 110 using dummy_hcd [ 1537.602095][T27634] usb 5-1: device descriptor read/8, error -71 [ 1537.840134][T27634] usb 5-1: new full-speed USB device number 111 using dummy_hcd [ 1537.870515][T27634] usb 5-1: device descriptor read/8, error -71 [ 1537.887129][ T5823] Bluetooth: hci5: command 0x0406 tx timeout [ 1537.988027][T27634] usb usb5-port1: unable to enumerate USB device [ 1538.695404][T29044] random: crng reseeded on system resumption [ 1539.058665][T29064] netlink: 'syz.2.6268': attribute type 2 has an invalid length. [ 1539.934058][T29082] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6274'. [ 1540.640303][ T5937] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 1540.818925][ T5937] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1540.847069][ T5937] usb 3-1: not running at top speed; connect to a high speed hub [ 1540.863847][ T5937] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1540.883375][ T5937] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1541.049789][ T5937] usb 3-1: string descriptor 0 read error: -22 [ 1541.073195][ T5937] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1541.084175][ T5937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1541.123403][ T5937] usb 3-1: 0:2 : does not exist [ 1541.640316][ T5937] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1541.833416][ T5937] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1541.848922][ T5937] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 1541.888180][ T5937] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1541.908426][ T5937] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1542.024634][ T5937] usb 3-1: USB disconnect, device number 3 [ 1542.208531][T29105] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6279'. [ 1542.254666][T29102] bridge0: port 2(bridge_slave_1) entered disabled state [ 1542.262176][T29102] bridge0: port 1(bridge_slave_0) entered disabled state [ 1542.334424][T29105] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6279'. [ 1542.378311][T29105] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6279'. [ 1542.428847][T29102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1542.442826][T29102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1542.528667][ T754] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1542.547167][ T754] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1542.634195][ T754] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1543.258802][T29120] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.6285'. [ 1543.310239][ T10] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 1543.440472][ T10] usb 3-1: device descriptor read/64, error -71 [ 1543.530119][ T5820] usb 5-1: new full-speed USB device number 112 using dummy_hcd [ 1543.692285][ T5820] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1543.700138][ T10] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 1543.702279][ T5820] usb 5-1: not running at top speed; connect to a high speed hub [ 1543.719108][T29124] netlink: 'syz.1.6286': attribute type 2 has an invalid length. [ 1543.759576][ T5820] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1543.790307][ T5820] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1543.823328][ T5820] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1543.847659][ T5820] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1543.875827][ T5820] usb 5-1: Product: syz [ 1543.891844][ T10] usb 3-1: device descriptor read/64, error -71 [ 1543.906611][ T5820] usb 5-1: Manufacturer: syz [ 1543.922352][ T5820] usb 5-1: SerialNumber: syz [ 1544.002020][ T10] usb usb3-port1: attempt power cycle [ 1544.040734][T29130] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6288'. [ 1544.420124][ T10] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 1544.441693][ T10] usb 3-1: device descriptor read/8, error -71 [ 1544.500584][ T5820] usb 5-1: cannot find UAC_HEADER [ 1544.658892][ T5820] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1544.683742][ T5820] usb 5-1: USB disconnect, device number 112 [ 1544.690146][ T10] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 1544.704562][T25919] udevd[25919]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1544.734874][ T10] usb 3-1: device descriptor read/8, error -71 [ 1544.853188][ T10] usb usb3-port1: unable to enumerate USB device [ 1545.130188][ T10] usb 4-1: new full-speed USB device number 88 using dummy_hcd [ 1545.240336][ T5820] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1545.282760][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1545.292895][ T10] usb 4-1: not running at top speed; connect to a high speed hub [ 1545.302992][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1545.313526][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1545.326244][ T10] usb 4-1: string descriptor 0 read error: -22 [ 1545.332744][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1545.342074][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1545.356999][ T10] usb 4-1: 0:2 : does not exist [ 1545.362036][ T5937] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 1545.405615][ T5820] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1545.415531][ T5820] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1545.426632][ T5820] usb 2-1: config 0 descriptor?? [ 1545.435531][ T5820] cp210x 2-1:0.0: cp210x converter detected [ 1545.520141][ T5937] usb 5-1: Using ep0 maxpacket: 8 [ 1545.527098][ T5937] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1545.538796][ T5937] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1545.547967][ T5937] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1545.560140][ T5937] usb 5-1: Product: syz [ 1545.564367][ T5937] usb 5-1: Manufacturer: syz [ 1545.569076][ T5937] usb 5-1: SerialNumber: syz [ 1545.776060][T29152] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 1545.807915][T29150] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6294'. [ 1545.877705][ T10] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1545.907088][T29150] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6294'. [ 1545.907101][ T5937] usb 5-1: palm_os_3_probe - error -110 getting connection information [ 1545.907178][ T5937] visor 5-1:1.0: probe with driver visor failed with error -110 [ 1545.918903][T29150] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6294'. [ 1545.934098][ T10] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1545.953202][T29150] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6294'. [ 1545.978258][ T10] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 1546.047588][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.056505][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.106752][ T10] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1546.166362][ T10] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1546.250133][ T10] usb 4-1: USB disconnect, device number 88 [ 1547.990985][T29187] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6300'. [ 1548.208010][ T5820] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 1548.220618][ T5820] cp210x 2-1:0.0: querying part number failed [ 1548.257404][ T5820] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1548.307285][ T5820] usb 2-1: USB disconnect, device number 87 [ 1548.373535][ T5820] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1548.398930][ T5820] cp210x 2-1:0.0: device disconnected [ 1548.424307][ T10] usb 5-1: USB disconnect, device number 113 [ 1549.454790][T29201] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6304'. [ 1549.529154][T29201] vlan2: entered promiscuous mode [ 1549.550404][T29201] batadv0: entered promiscuous mode [ 1549.880274][T27634] usb 2-1: new full-speed USB device number 88 using dummy_hcd [ 1550.167212][T27634] usb 2-1: device descriptor read/64, error -71 [ 1550.285511][T29217] syzkaller0: entered promiscuous mode [ 1550.325988][T29217] syzkaller0: entered allmulticast mode [ 1550.420151][T27634] usb 2-1: new full-speed USB device number 89 using dummy_hcd [ 1550.561165][T27634] usb 2-1: device descriptor read/64, error -71 [ 1550.606117][T29220] netlink: 'syz.2.6310': attribute type 1 has an invalid length. [ 1550.675776][T27634] usb usb2-port1: attempt power cycle [ 1550.831661][T29220] bond1: entered promiscuous mode [ 1550.876849][T29220] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1551.158915][T27634] usb 2-1: new full-speed USB device number 90 using dummy_hcd [ 1551.211328][T27634] usb 2-1: device descriptor read/8, error -71 [ 1551.450104][T27634] usb 2-1: new full-speed USB device number 91 using dummy_hcd [ 1551.540815][T27634] usb 2-1: device descriptor read/8, error -71 [ 1551.650514][T27634] usb usb2-port1: unable to enumerate USB device [ 1551.731942][ T30] audit: type=1326 audit(1769593673.712:4537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29242 comm="syz.3.6317" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf745d539 code=0x0 [ 1553.731497][ T5937] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1554.000762][ T5937] usb 5-1: Using ep0 maxpacket: 32 [ 1554.029112][ T5937] usb 5-1: too many configurations: 50, using maximum allowed: 8 [ 1554.056520][ T5937] usb 5-1: config index 0 descriptor too short (expected 259, got 18) [ 1554.095232][ T5937] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 1 [ 1554.139966][ T5937] usb 5-1: can't read configurations, error -22 [ 1554.544937][ T5937] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 1554.710465][ T5937] usb 5-1: Using ep0 maxpacket: 32 [ 1554.719218][ T5937] usb 5-1: too many configurations: 50, using maximum allowed: 8 [ 1554.730888][ T5937] usb 5-1: config index 0 descriptor too short (expected 259, got 18) [ 1554.740273][ T5937] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 1 [ 1554.754851][ T5937] usb 5-1: can't read configurations, error -22 [ 1554.771341][ T5937] usb usb5-port1: attempt power cycle [ 1554.779176][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 serialport: Connection terminated to allow system upgrade. Please reconnect at your convenience.