last executing test programs: 3m22.71492887s ago: executing program 2 (id=174): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x1) ioctl$UI_DEV_CREATE(r2, 0x5501) write$uinput_user_dev(r1, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x3, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x0, 0xa9ba, 0xc1f, 0x1, 0x7f5d, 0x3, 0x6, 0x5, 0x10000, 0x2, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xd9, 0x2, 0x6, 0x3, 0x3, 0x9, 0xfff, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x0, 0xf, 0xcc, 0x5, 0x80, 0x401, 0x5, 0x5, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x4, 0x80000000, 0x1, 0x9, 0x7, 0x0, 0x5, 0xfff, 0x1, 0x7fe, 0x7fff, 0x5, 0x1000002, 0x8], [0x2, 0x1, 0x10000, 0x7, 0x9, 0x2, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x80000001, 0x0, 0x0, 0x4, 0x4, 0x7, 0x9, 0x4, 0x1, 0x5, 0x5, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x8, 0x6f, 0x80b, 0x1, 0x6, 0x525ba681, 0x4f74, 0x7, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x8b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x40, 0x4, 0xfffffff9, 0x7aa, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x6, 0x4, 0xfffffff7, 0xa3, 0x3, 0x0, 0x0, 0x3, 0x4c, 0x3, 0x5, 0x2, 0x0, 0x9, 0x13, 0x0, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x6, 0x47, 0xfa1, 0x0, 0x11, 0x3, 0x1, 0x7, 0x7, 0x8000, 0x7ff, 0x10, 0x2, 0x10001, 0x1, 0x0, 0x6, 0x71c], [0x81, 0x3, 0x10, 0x4e26, 0x3, 0x40, 0xfffffff3, 0x497, 0x4, 0x1, 0x3, 0x5, 0x56, 0xc28, 0x9, 0x5, 0x5, 0xa, 0x79a, 0x40, 0x9, 0x6, 0xc41f, 0x80000001, 0x6, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x0, 0x1000, 0x10, 0xd, 0x6, 0x8000, 0x53, 0x78d, 0x4, 0x1, 0xffffb027, 0xfffffff8, 0x9, 0x7, 0x6, 0x101, 0x7, 0x7, 0x4, 0x0, 0xb, 0x400, 0x8, 0x0, 0x8, 0x7, 0x9a33247, 0x8, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c) 3m22.159807866s ago: executing program 2 (id=181): timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) timerfd_gettime(0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 3m20.914864193s ago: executing program 2 (id=184): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4008000) shutdown(r1, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000000c0)={0x40, r4, 0x1, 0x0, 0x25dfdbfd, {{0x2}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x9, 0x71}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x99e}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]]}, 0x40}}, 0x20000000) 3m16.632535193s ago: executing program 2 (id=205): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x17}]}}}]}]}], {0x14}}, 0xb8}}, 0x4000040) 3m15.100378203s ago: executing program 2 (id=208): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x20) 3m13.421353187s ago: executing program 2 (id=213): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000040)=0x468, 0x4) syz_usb_connect(0x5, 0xe4, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000017ffd340b1134200bbdf000000010902d200010000400009046a", @ANYBLOB="4ad8"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$ptp(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$vim2m(0x0, 0x2, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f00000000c0)={0x0, 0x2, {0x0, 0x1, 0x0, 0x1, 0x5}, 0x4}) fchdir(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000480)=ANY=[], 0x0) r3 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r5 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r5, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r4, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x15001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x40}}, 0x2400c080) socket(0x1e, 0x4, 0x0) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x40000) sendmsg$NFT_BATCH(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000060a0b0400000000000000000200000064000480240001800b000100736f636b657400001400028008000240000000030800014000000002240001800b0001007470726f787900001400028008000140000000020800024000000003180001800d00010073796e70726f787900000000040002900900010073797a30000000000900020073797a320000000014000000110001"], 0xb8}}, 0x40408c0) close_range(r7, 0xffffffffffffffff, 0x0) 2m57.259451077s ago: executing program 32 (id=213): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000040)=0x468, 0x4) syz_usb_connect(0x5, 0xe4, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000017ffd340b1134200bbdf000000010902d200010000400009046a", @ANYBLOB="4ad8"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$ptp(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$vim2m(0x0, 0x2, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f00000000c0)={0x0, 0x2, {0x0, 0x1, 0x0, 0x1, 0x5}, 0x4}) fchdir(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000480)=ANY=[], 0x0) r3 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) r5 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r5, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, r4, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x15001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x40}}, 0x2400c080) socket(0x1e, 0x4, 0x0) r7 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x40000) sendmsg$NFT_BATCH(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000060a0b0400000000000000000200000064000480240001800b000100736f636b657400001400028008000240000000030800014000000002240001800b0001007470726f787900001400028008000140000000020800024000000003180001800d00010073796e70726f787900000000040002900900010073797a30000000000900020073797a320000000014000000110001"], 0xb8}}, 0x40408c0) close_range(r7, 0xffffffffffffffff, 0x0) 11.396724425s ago: executing program 4 (id=928): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) gettid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0904000000000000000002000000300004802c0001800900010068617368000000001c0002800800034000000000080002400000000008000140000000000900010073797a30000000000900020073797a320000000014000000110001000000000000"], 0x84}}, 0x0) 10.38262437s ago: executing program 4 (id=937): r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x111, 0x0) 10.018924151s ago: executing program 4 (id=942): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x20) 7.432142005s ago: executing program 4 (id=956): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b000100006002090484"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000200)={0x20, 0x3cf223c67936a6b9, 0x2, "047b"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 6.679055095s ago: executing program 1 (id=966): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, &(0x7f0000000440)='projid_map\x00') socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 6.453142469s ago: executing program 1 (id=971): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c044}, 0x40000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_newroute={0x1c, 0x18, 0xffffffffffffffff, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0xfd, 0x9}}, 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0xff}}]}}}]}, 0x5c}}, 0x0) 6.258564069s ago: executing program 5 (id=975): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000300000004000000ff07"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="057e30aae10df4f97559054b9a301ecfe91b645115e1421774006df60cb393573839b0078ce169ec2fde0afea66b5bbefa9d4f3cd8c2458336ceb1f0efe647d6d7b1cdbd12c9b8e3a822cbd51494bf79a1dbe5c22338ce37ed467a1d3d616564cbb81faa2e935b2697c12efb0ed141fa2eaad4747725c4bf20f8975e402b03eb77d1aa3f10f512397b5037b1b4cd4b7c08c03dc5e52a066e5982969fa044125ae251f46c26e2536cc8b77e8edb251378be4beedfb8dca0d449123f57677ca3da5bdebf91b195f1a5d49d7c292f20f58d490de36d8ee0e8a86bd04c3165549465cbee7891fc747d7def370ce644db894b56bd53af0d0e261bcfa6bf72a684dafc5bcafe07ece74cbd1d5fa32716dd03f7acd4f32d935438c91e033beaf49e3963e13d05e7a8334a858639636799f04a9033193e7d18a2a4b20bcc96811bb5efe476db70a76b7456ac4e71f3e89c00da0c7761c188570c7902bf2fee1be273be8a9f7a2d7508ef2188d3ba1db4fa9d1533d2f2a288cdfe3b0c50908d56ba69e81386e7e979e9d7ff78685ffb8de6baea2451762736a2bbafa11d541790b0564aef9b0b80fa24832090b84341a9fdf712d3296f911020f8021eda8130befaaab01cbe91dfc5768e6ff31ec50dd88596832a9f5fd4f558d367f40e454d3c97ad16a7f30b93629ee2def77b99f8a17c157529b0782fd847a4c75a2302ca96bbdcff660c2cca753e1a8c60dbcfb319a1594565a2e15bb6124316e196e3cafaf1a29eef84a0908d1dc80af7e333c65736699f1254addf2ab582f5c87c4f6ca234d7ca9673dc29444044b95abdaea958274e39aeb163ee2d05bc2ade5c33a0466e14fbdf8aa70ca2964c06ee5bc57b894b0143a7a503cc43574a07958940b029678df44d6c82fa2e6937ea6aeb5b8f33c21628e3b0d623c23c2e5a3546194fea742d90c1d61f343a005b9e58c3e8292b256fd0ecca81cda433f3bb0ed633607f0b635cdd8b4919bfa37c1e99df087d3f8f3ba5dec7930657eb3a4d8febb5234e048881fbfc499fe5eb6a0ce34546f7010ae2291e6731d0798ca451387a123998e68f6f577ba4e556bb9a119011a191a6bbcf55beb1fb0b8252deeed5721b271b964534a04462720c4c03e8ea7f120cfa1be630e7fc680d1f6e067075c72f642babcacf6b00cd3fdb9f3200e4ff8935b17ebe222053c78c3752666088017c2150dd014b9578af6adb15527a483eff5bb623710ca7b37ed49ff7cf1525f296af6f27846524e4aaea7476a2d08dceeca84a1ab11e2767abff12d10deaf63681dcabe9b1fb9ebe207d8e3793dba9a73a02ebea4e3a072397a88c47795d5e88b2040c9fe3f96f66f8f7d593547c8fc8f4e75a1c20962ecf2dd1e7bddf896f2a6c5f37a8784e2bc5b10cef2feab3b6eee7430908eeadd372248041a09b0c29385cd7a75754d2c429e72bf5fdac34097bbbbb3790f86399c60cb5054fbeb8eb1241608b506beb135091c18110c1d10d9a80f4adb11a6fd3001957cae0b4f8f730cc4fa4a7328e23f390caab014cfeec0ebfd0e14021f47fe330a68680678d23e7ca1ff18e7e242f4c1e3cca51dec73c58b596c2a92267ee76d3657c1e2b34102b09fa4c59c2619148440bf26802c6f858b8eee6d8c697bad2c4d5a0f76c6a4cdd3b8fdc21e447920491ef40578b68a7a5dfda04fa235fac01ad4e824b627137dc48807100e52ec5ae2f3a3fd84d68b824033b4f0ee28a9e72333b4e209ae905d0781e4fe8116e03b1ca5c3b1ea84974cabaa0214ed15bfe01e974491e8a20f9d03ed1b73799b083f3a65e809c3ff3cf126288fc1627409d46f78b5fe8b8ba0b3ddc3ac79aecd6eee2e0cc59826e5798f48f80f0c7f549b3a656e9acbc5e51bdc3becef93533166c1d9ffe4335ec973d3d27ce5987d150f554c4095650528578fe4858b670b0786f23c886612191f89ec57970dbc0e33cd62b57a08fa940b339577fd12d07dec2ac50e9e0b27f0716b3233803153389a95df956637af8d9778e27bce49ab0a832978712a074d3f7516ad512ed0d9b43049b5990c841a7b7146a24c62fb70645b8d85b6c8863d5c6aab03638ffa4e30c8de24383cf320eee735a4fd37262d473076f495da8b2f0f028b8f178c238010738d6afb1dc2e48089e80f6a7658ad3496f1a1f7f78abdcf934c733d22abb0671a0d41b9b33a5faf99d7b82166e27df0f97a7953dcc1fb364478200253757e8311ba61cb4c78a380cdd820553c7296816210f64b34619966f1540a407c8d6e8e30788909de19ede4116d09a14ce26ad59957add80b90602855c0134ba7fe8afd4493f7cd9ced61fda7d0ae02505c046acf68d68ecd9b1507a4d4eba4c2c834777b2c3c5a8b3c06677fe468072dcab48c1ac9deec30265c7f6c5864df89e25bba52715c82e9921db601b3935f5047b8cc07351b9965b1a1f6ef36c1fba89d9d96e332eacc1e8a78e09d7d6ba30845866449ed5264f763735d4e7cc133dba4b296b2dd9331efea01e5b3d05f38055e41c49993d679ef133b9b1af435fd0ac5fad33f571c76d02c40d4e301110b4442aa134364f0456da0cf362b2c27ebd667c0969ae09dad18becba9d6918fb1e741f685735cc7078f0e6328181a83da67516fac31522f9d9fc64a4b769e57e76bfff6f9867fa2fee1e7dddd11128322210e44eeef6db7269dfa1bfbd9099dd6f8219d585c22c20483251447772719a6115ccb690609de352989610a138110c884562b65de3cf63c3ebe9adfeb53c6e4ecc637c98b60161f71952b84c6fc4cea6af0ed533144bde4f8fbab2d3ffe0b2a5d0c55ec9979ea85a25045ad3a84becf0e891b89c1a83178d7368aea4bdfa0ebd46b8e110a2972c8ac96e10ac630e89f8d76bf35b03b5ecd393d1986fc61318e08ef02721e5f2cd2fe098ebcd1bd30a8f87b2a5650b51dd50d0d78ab7fe66490f5827372f1779d3d389e9fa66bd0296f0203af010d8f76783837cdde2555a90be577626a12de47d4da638efd0017750a230485f6ade34a27284d85dd87f9db8a832c571106d8296629418777b4d933fa049f0f4e5958c193e889305074091be14c66a4bf02cdfe1e8d26a5d21fa78c5628a7ee3d7a0c550296b2f0625e2dd18d45f2d45bee6746d4462c92bc3cf50503c7479bd121393821afe1cd7144ea37f4e8e5ee21f739024ad25af9430dee006b76617725556ff8a820b767fa821629819732f086a5fdf2ccb4edae0aceb3d6dea698e798ead905a2eef9065d633b007271e93101a71cbe385f56e32b3a8fb081c5c1ab09b729f89294a0007df3a3b8e93686020d993b812c6f85fe1618db897cd67be6cd5053dc8490bbebee133d140503c4aa51eea0c156523a1d81ae849dbe5a273bfc0de94836f8160ea9f146147fc02dd7b55dca6a2a43692268ee98f51fcd2d3faa76071d9716e877b2a3dcb51a51d5359a2ee705da52b43306f1f3caf33342fc281bc9c58d1ce05ecdeca371e3a788542f8fa999e4d8e10e66f0b6053d7d4cfc6acb815628bc2409b3dec01726121c267b3ee85fd61bbbdda68ae2c13026863e4a54b93d956fe692707a179411c841ca7d2f33a5223181b18b7ba2eebdd7c2a8dec3ac2a317b5fbd996e8598c394ee627308f0e887480a8dcd59b0256b636f4c62566501a733fa74232945ba1d9e2bae347391bf9ae2da4d3af2b262b772421fd3a5cab46862ea6049f5c9c76dd8549ce0e6c31c792b81b6b21f0bcca18bb2fa6a9d4d6e0a837bb119e2e002a69d6ca95a4b2acc463076c2e05731ef0cfaea84387a6baf6737cc14a25f5329ea924090311213344625a69ee382dd4bc72e00e63329956f3e021092585c9affa06a95bd0ef653ae9ff0abed5ee561ada4f83d8ef202d9c0b2225ebe8660cc408859d45e0332f4f78f6a339bce9d12ca2bc5116a8fd4007c485f5c1c41af96c41d96db35411842d7babc05c8b228066dccb9b67f348974363be521e41fa94d2034a0bc1e87360a80606e1e1bfa8e6399601b30bf93ac41129869158bc2b791b50e51519133ab58afd4023d4d721129b1307f054103a47c49e0524ac4df511c3409fa62d8b5c1a897794600f53efdcc987e06bffd77c9fc75fb7221ef29ed2f7e3e8abcb4a1875b85bd5176a6fba9a361d8684876508443bd50e630f4c684002b15930cf81d740b880eed25d22d8de8c00066790df084fea7c5021184a210a6d24f9bc862c4e3eafbb1782fa240ecfa5959d7a681bae84e8a96a5ff45dea4f9e16dd2cff2dccc6cf4042b44b7ad1f55dc1db5998ed40a409c0e67e1e64fab423d2c00fabb8976d9dacf0c82530e356a99f75082f3411adddfe4ab1ad3b55599fa15450dd5feee23591f1ce398e4c5ae8aad71ad26ea189c333c8467d1eaba9589bb8c41bbfe8c0c173e5446bc06b578c1db849fabe5fcd8fe0fca94bdc799b53b897249826037499e8b6213d640724fda1bcc9341ac61fbea02c8f39a53c496902d5c7922f678a273cdf5ffff38ea028ae19dc72f0b0688f2b9b7d5a9c04153c10ff4168cf9f243dea03b336be778f6c79d67a2d0ade82863eaf95d6fc7f745569864f369f4b39177c356c8c393bded485df28622f01251e58f3d39498520ff90e6c670f0dce5b494cb1d78dfad108406dc5857086d386bd42bd03fe716f049407e5e55caa0e73e96c1a4f6d5791ce7195b2ce72de52ed617ecefaeeabfa9350af49d1d91f9a4b97dc0808869b916f34ee242c40fe8c8aee57b6ddb69f9a10636e481dfa059ef001bad7020266f0d74b14edce6c18ffef854768a60885bad798658a6b9d0b438c483ba159346d5ce0771f53ff18e0bd47d8583bd56237f8da2747ac7eb2a87b6e26c4820d4fe18b76e06bb6e0c0cdf478b4aecd381c2a6ca9f10ec433f0aca63a66d04f70557baf9f2844005351a21664c2430fb0002cd03bcf0b2004068a2567f91a9fbee8c6d948fb35d48527b23e1398ce9f535e2b0b33c2bc31ab737ba4b980f46f5d424e33892c8093f3cd18510a3157afc023f63ad3ba999e950747c78c06ab141a26d74ffc049a6f76c465f9f9f03a8d339a8e61fef26a5239fbc11c01a87800c81efd7b9f28ee2ab2ed88a383f5013bfd6671ea3086121b235a0cc45ccb300c02588895f8d13ec7e00a3aaaa8b0e739f666fd1b13a90b23998704859c9c76108ed7ecdc63770e6ebaa0aeb9208b92ec4e948ac7fc81cc6f305f06c2f2d8c9267463af92e185ff627eed54313fa2ee0bff2cfa8be411982fd19fa88db5ec99f238f88782f8c7a957bef14f79351b63799a4cce160357c068987a5516b04c79644c140850cddc8bd5541fcca9e30826aad864240f434bd1fc67b58e3d664f782e9e46edcb34e2db98a39c23e334e51c71c9fa466470992cc1fbc36c3c8ff4340be67f9b85a74c9114cb9fe5ca4dcbb641ea17a54ba4658aeaa515109e117625a6196dd66d3584d293b468fce63b5a9c4b9461700c74ae955539bfbbe3eccfa7d9c9f737792a9d4b978baa2e92819e88340b73c88c2900b723248b18ae9414cb37a64ef8cb8ca85cda9677d9f1e71a6b70fe3ad17f2d13c1df48d93bfa50fd939a72ea26f9fbeaa6f8af2eec91b04a8fa7dc14fec0f54fcd1c5c848b4432f979f10e661cd2d7f8ff669ce99f9813fc5440fbbeb35f1a5e5115f5ca35dcc270bdbcae07a9ae8e22aabf8178379dee08874ec7840de27815890a88fc9a3bcfa88a33f9baef9af0ae01b2bd34a907f1151cb14bc8b396bc43a60f884f425e4a04348cc645aae68db49980139ddad0fed303e40b124fd654b36c961a56c44cc3686a7529b1f1ee47da3a0f1158542337df15780444790a2ff1b57e062f0db66730c9f98de395f939f44188225211c514447f67fcbf320a34c43ce09ed272bb992db3a35ae2c3c491c36f2de88984129fcea1ffd235aff7bef7fa95d65894db9a5f1b348efcb571a81b3d73ccd07cbef052389001e4d456800e05ca53bcf3485ce05791ff65a9f7913416ae26972f34f51a3270580b81307ce31c98eda06f3b35890ce317e79a16d728cd0bb6a3835667555c0c5138cfa5305a91db1f873b2a75b82ffcb27616ee67777708f7dc2ed9ddbeb38a60f446d3ac88ded25265c25ef38b0755a9d34bab5e669b6501d8c9787aae7eced9945cad3d4d1c32fa68b48a1d773750f814631db3e088c1b5e7ffa854ea1343d94ec1343918d7a1c5a095bb72b00eb3bff210aeec0b8a581a2a13429b83a193f4d447059265b63c4b8f8ea1b9494f65e79844d956c5d80780849dc086506e9eba002e682a1bae1543f8289588c574bb6ca9a2e57b908aaffed23ecf3536abaf96fe08291f3d70773288b4698e972b0187385dfff4cba59175814e75e7e5146205c7f2d2f749583b393f46c448c152d8be50d60ed8d8bdb30fc7925656a0f90b1de967c729980815e5f19ed453fbefcff67832cb90d753410a0b18eb7504600b11b0360c3d3594d48d832160d357afc1f17dc71dccabef7bbcf1fdd55b48cb02135c32650ab07b902f36b48be9376b2dd68343eacfe80d9dab3205a393a4c6ffd405f6db323dea11be4f22ce50df1e0cfec9e9b1e23acb94d66ea787d08f615a7c7288cdf1921a13a85d885e47cf1067d89ebad5b92ce5000000008d74bd2d5b78366f998cc35bf35e45d06128f1c5984fabee7542642bbf6d981b60759d3e7900e5b3d1d7310f90df0c88a600ff2f39932bf7411e61c692c9444dc9ae0dff28c0b94292c430ac4464e83ce8a29b886f45c98b8396667740c5be51e592eac0250d6e479505d36e930ca3a32cb671d58707d25b10e2660cd5e661b08e268c8bf1b3cbceb2d995a2a6fdfe5475cccc965f71baa7c84054e3bb6cbcb7167b06c708cd72ad4301e943dd1b2b2c325f682be3eaae730a8ed8bc3134b28d1ce04543bc66a529744561c42d25e65c7b5cc2a17875ebf35e53aa46e1edec29ff8d046a7e01459d9639c10d1df998cd9a12d7e50b2dc71ee7338cf71beb72d5020dc69eeafc354bf822d65ee0328eb07d04ac0d266fdb53227a158411da5ded254b3c359ee710e0278e1a06f06002538e108450fd6b11949fdc618a29baf34f232aa192230ddb318aa6d59d122257e50713fe73e6c0059399589c382dc901a8c3381139436f7331b69f457bbb38ed54daaa07a52cceb053c32690836c664b73d86261216b8610fc7b4d53dd3e5d9bcb3e25528e132911cac37e7f2618274c733b5ae02f9c27638d9e11988f1dfbb281ffd8cddf8558a481861cbe9d53a4ad8282d3587449cd51759ca397eda122d286e117d01539359870b94c98a3ce383ed1d280bcceb228acf73193e87fd3650e4dfd563cc55bfbc8626a41293cc90ef76e28e2dedaf968602d2997ae1c2752a0febe3a78f3756d40201ae13074091238324422caabe22c66b7866065264261fc2c3e0569493468d1c1c36259aedd5f078a231e72decd70f4de8532f6753287435296f33a096bc1c8b0ebb68c9f783881e45ac54159ec1c2f9e1f5cb48f96729a62d1b4fdaa89ef5de8741bca04e953534dc977e881a61281812af435206378eff173d7929ab4967e511bdc14e6d49cba517b0563c14fcd6ba38ef32bc48a00643416d7e34f7465b3e6240589d854db4d9714e998f2edf3a03986598a52aaf647d938f4a8e07c1c29615803af6cd403d261ad6da3c1c804034b4a4eef3ea1cc8db39d9e171b3f6dd074388577a4eb901c25c8031e4592cea80b6354850657f53b2acd910ec2c5a7db6abb0153e051dadfbcdf047e35591b96b5657ca55d99ef6fb48e07c34321cd20c40b30a646132f8afcb9426fe84a790567fb847076a8762ca29cfb037e0c948edc12122a1160a55d465f5c912406a10dc0d3c1156cd207e9ffe906d267c9c870521934e1c56af460c0ad0dea9c929acf85768e22bb65eca6e25e4ec8e6edb7a6215e8c7e5fdb56c7131b156ab6a78fc808f8f17a2708ff68b37778c00b3b546004fb2b2c588d8ca8276d281026bfe896698569814410422f27421b8fc5c09d47635f17ddf6b9f56a203c991514678c18a4afabe1eeca6fce1187fffcb6ebdacfc6cac9750766ed40c80e7eceb342a3fa6f86d014949f9d111bfd96e2a39d364f2e2722f2d9ab0577befe26055890161d780e52eff4022461c1d3b019b86af28c4f02fd1f7496d8c141344ad5756bcdc45158f3af7aac227c8853f607cae412db6fa924c039859fe455857bd5fde66cc1b773c12f516401a31c80d750079247c128a103361e7f0a392d21b4b1b594307ff6b37e5a242666209ec517561e04645b92e7cf3cff1a6c76c900d12d9556e2962c535401b1e61fa85e06551ed678703fb3bf8590f2608ae3c278b8d1ac286af38061afbbc3cb27ee7adc6ad299151cd00a84506e6a97648ff99f2a9d35d8421e71589437406fa8e6def8ce34c9abe5de3481c492887176d4485dac794b84567d5ebaf68d0007cb2256a0f1ce4318f6891f750fa9696fed3525059688cf973e70d688b1759cd0f3dfb0b2a7078174b978767cbdbfc3f7d5850e2f7772e2bd6e3ed69ef13cc141238b5ee04b6615e33c42fcd6cf979a0ac848458b713b9a988c1e3fc32f2a182fc0cab2e6933e9aa5c2d77db8c6a1802b43bd8220ff0ca92229fc26a44761d00eeebec834e5f7d382b4f58a2759c56e53b163dae034ffa1970acc57165746e575470e13c4044f392ae4bea93e7d666256436507bb987a247785301274d4f262f94989cdc94b209b7499bd0cb4437525b72be79c87c6076533e4a14799a60bd3563d46ee4767108bed7e637cfed6f3139637bb01f36385dc5873eed726fbec9a87da294cc11db8b49fe45b798ae74e1a8cb0f2907eb0178d2baf5f0f88f654baab9f147741945c496ddea1cfed65a82e913a131c4ac7bb6f0d8d5d28225dab8a33c6e60c0d2b2d5dbd8c35089f13f9a2ae81ec9addaefea9b8ddabc8cdeb6437381ce346db6e14d9d1e8bb4662b508d61da77fc8d9ebebceb1c23be5d0a7bba4a48c0591333ab7779bae78ff23c4bbf8a8cf30f3120a5b63a047064d7ed7d37191cf39b6d1e8ffe3b47379767bd691cb855a9c938e9a0235a5ec9c316a6dceca63fa5fe6df0b9f0d6b38add216aaf2726d3377ab827b00b4cbf490708a0f679b8cd7caadb3dee40cc98f778917d6a6263fcc0747bf75fd676d84abb7d10087da323f95c2571139fd4c9826ad5db6ee4c246b9da20592cae11f9264bd2945aa1a427b2acefb514a2daafbbae35ff761eb1e3b98b4a1dfca348b8c4ff96325a618d677180ceb7e916654ecc2deecb4e61d01080f44b98776b1b43aebeffe2c14006dd1d78c8babf1179f42fd20d87654d3246d41e9dc633eac1741be44f8d751d8c9fd57316fe06d60872939b7a2906bb27a299a3408a51d74e5d98417f05f85fc1b332e103e79203e9fe344dc1d1572de39d914c5270c839870d2b33da5a6efc08c4f0c8227cc35a7f77c6a55f80ceef90e217c80e5ecb4c236685f5219787b01612cfbac90794e8269c07fb7ca4f7dba4defb2aae2b37f7b1696e78de15dbb1b6d4ee0cc4c0fae274b2c2de9343862de1d9847515ad235b1837daa9b814f19e895ae3966ed262e3e7add9f19009e6b61462917b29502b67e124c43538a6bcab7296529e01bb26ab8b3ef094ed057383c4f92790b6f705ae9d943c4e8dad84f6ef82b54d062713c16960fb475d74d46a1b16062563da3391cc6ff5185162c31ff7339e4837e38adab8ab911abaaa006e313dd19a1f92b4f7bede4525b154e1b9f796136a85f3602da011ae2232be902347e08ce0bbf3d23d91c4aac11c8824caafa1d1ff0343ce655802c1915f3ae7c0c670b18e56e139be66a33613afcb3b1928613b3afba9d635070af678216d57023d1911f0eb7ebddefc96f0efd8e9dc10e8a87a68393e19733ef900c6264722940750ae16f664e445414e85e98570303c6d87d7f265cfae0a1e9314fc14674c2871c0d59bbe2eddaf9330a4e2a28673af73910d6cb90790f800e89d55a2930910a8430ade9551819d83d5ea6da4e58326b7ce555d01da86ea78200f0219ec92473da95cd5a632c525ca9fbcddebb8168881cdb2f5da787d0e31881e2b17d78184f3a0bed8662486d3937dab275d050b9dd5a2ce904208a91a467afc33e10fb6c1ca788a5ef30d6e8b615ec0ae1503fea7006569559b7b155c31b196b85881c5671173c06fc5373e9fd973e7111ed45874609bf3c88c6db732210a3ea04cb68662bbc2048bb55d811482af5c658e29bd18c57ffa25e88d7297cd20d4c2b13007cfae89f4dcd90177a0806a2ceb2095333b58f828c093b9bf63cd07e3d56a446fd12e755fd651211bc160948836939c17623b317b9e935307044bab2c11879a62288e7ecbbb97f10f52516f517b7b8e44cff5964fdfaf8044065056b48db13b1365004c336afa3535af1242c9b7271b8b1ba2213fcbb80926bcd394815cd7c27e3aeb2348dc45f5e06e32f5bd56d1c472f41b564ec0939cd012028412883cc098d086fd43858747b746be72b979d175f6a6447fc5908616dec7fc6c962e12e96e09bd068acd2fcf0ce1cc26d9f82b2b91bc9aafcbf8435011f73b6a8ea1bb2f3289b23236136b31656600762feff53e607df8cf3c9a7f257b212630c19f142e4cf5094250b629cabb145c77f1f14ad60ab7617078f810a766cfa341fb7c16086609bc0a768fb1cd782606f32b83a0a55d883269a05b80275612dc571cb993ea9e447b4d32570d412203ab4c8b050b63bb5ac0f8d6f4e9a1644e4b622587b2ae125c2093bd363493d58544d6303a0de17780fcd83e993aa83f4432274eee1e6333fcdc77bcfdea95b8b9ed787723e35b71f1dbe89ff1e3e6fde146c05b6fe9eae52b472624e412253a63e7fcf1b77dbff7509eec5a55501e222f66bd84d36663cd244fa1556bd34b4c9957a93a71e63961ffc7700c5545acdd3e79da41e1cfaca0956d4978222cda23a574d691dbb6c6bd083c70c2782c045bbbe0fcaa10efbc002af6832e3fa7dda0ec8ff6ded69302d55d5a62a7ec213f16ecc5e3304a83103d1c2b21e04e3f5f3730339a630a407e8cc6a5afd2f2ed78ff992035a3783a2708195a46e565a9113be8c228ccaae3510363b475732ad48fe8ff34801f4c35132359d4c5c5bff65141f4a8684d462cf5d97b44496440fff3f7a28d28bbaa8e6db2a6064cbe9fca4679afe8ca6dd27a25c56f3e58165040f19a0455199a0ece4583f060979427f2f3495f40a83bc6ee3eaadab18705d464662b8aba9c7aa2f29114f7acc247548a85bd44723064abeee18f7f558f6d0d74fa08103dd906124454745d23005c425b260b0034372123b642a0cbebbc1a0bcf0cfc3639876eceac5f9734057ff659cfd35b1a3eaa768b86d66244aabc23a45676a59d492614f1c0011c9253e53fc7bb3e20d303afdb5b6614dcc7bbf72a339e414672aac23c2e2983083f08dbc34e3452def00f402598b6aaa4f0d896d1648b1442621993b7d0c930560cb6152b9ce59f94356726816a224fca84da5dbde6675d20f546a3e4635e82ff9575cac9160e6819f", 0xfffffffffffffd8a, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000000c0), 0xce4, r3}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x401, r3, 0x0, 0x100000000000000}, 0x38) 6.23730857s ago: executing program 1 (id=976): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, 0x0, 0x50) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x80000001, 0x4, 0x32, 0x0, 0xff}, 0x9c) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_PANIC(r3, 0x5100) sendto$inet6(r1, &(0x7f0000000080)='8', 0x1, 0x65055, &(0x7f0000000340)={0xa, 0x4e20, 0x5, @local, 0x7}, 0x1c) r4 = socket$unix(0x1, 0x1, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000005c0)='ns/pid_for_children\x00') r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000000)=0x8000, 0x4) socket$packet(0x11, 0x3, 0x300) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 4.835994938s ago: executing program 1 (id=982): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYBLOB="01000000010000001c0012000c00010062"], 0x3c}}, 0x0) 3.379375144s ago: executing program 5 (id=987): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c044}, 0x40000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_newroute={0x1c, 0x18, 0xffffffffffffffff, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0xfd, 0x9}}, 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0xff}}]}}}]}, 0x5c}}, 0x0) 3.231854675s ago: executing program 0 (id=988): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007663616e00000000", @ANYRES32=r3], 0x3c}}, 0x0) 3.13642732s ago: executing program 5 (id=989): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff000000", @ANYRES32=r1, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="140006"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4801}, 0x8d0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0xd8, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0xac, 0x2, [@TCA_BPF_ACT={0x4c}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0xd8}}, 0x0) 2.986838938s ago: executing program 0 (id=990): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e2b, 0xb, @private1={0xfc, 0x1, '\x00', 0x6}, 0x6}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000000)={0x5e}, 0x8) 2.957418418s ago: executing program 1 (id=991): syz_usb_connect$hid(0x0, 0x90, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000200000001000000", @ANYRES32=0x1, @ANYRES32=0x0], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000002, 0xe, 0xfffffffffffffda9, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.931732063s ago: executing program 5 (id=992): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, 0x0, 0x50) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x80000001, 0x4, 0x32, 0x0, 0xff}, 0x9c) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_PANIC(r3, 0x5100) sendto$inet6(r1, &(0x7f0000000080)='8', 0x1, 0x65055, &(0x7f0000000340)={0xa, 0x4e20, 0x5, @local, 0x7}, 0x1c) r4 = socket$unix(0x1, 0x1, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000005c0)='ns/pid_for_children\x00') r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000000)=0x8000, 0x4) socket$packet(0x11, 0x3, 0x300) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 2.701147301s ago: executing program 0 (id=995): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f00000001c0)={0x18, 0x0, {0x0, @multicast, 'dvmrp1\x00'}}, 0x1e) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) r2 = getpid() r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a900000000c0a010400000000000000000a0000060900020073797a31000000000900010073797a310000000064000380600000800c00018006000100d65b000050000b804c0001800e000100636f6e6e6c696d69740000000c000280080001"], 0xb8}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) r4 = syz_pidfd_open(r2, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000040)={0x7, 0x100000, 0x0, 'queue0\x00'}) write$sndseq(r6, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r5, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) close_range(r4, 0xffffffffffffffff, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') lseek(r7, 0x289e0cb5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x3) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000180)={0x5, 0x7, 0x8001}) clock_adjtime(0x4, &(0x7f0000000100)={0x6d900000, 0x8fc3, 0x5, 0x7fff, 0x3, 0x8, 0x9, 0xf, 0x5586, 0x7, 0xe1d, 0x7ff, 0x408, 0x60, 0x9346, 0xa, 0x8a8, 0x3, 0x2, 0x4, 0x200, 0x7f3, 0x7, 0x200000, 0x32c, 0xef}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r8, 0x100000) r9 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r9, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r9, 0x84, 0xf, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x31}}}, 0x2, 0x4, 0x101, 0x5, 0x1}, &(0x7f0000000180)=0x98) syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb88a84e0081004d000802000186dd0610000365c5c89753a1ff0200000000000000000000000000010180c2000001fe8000000000000000000000000000aa"], &(0x7f0000000440)={0x0, 0x4, [0x883, 0xc9b, 0xcff, 0x885]}) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x320, 0xfffffffd, 0x0, 0x0, 0x0, {0x800}, {}, {0x8}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2}) 2.583698042s ago: executing program 5 (id=997): socket$nl_generic(0x10, 0x3, 0x10) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') 1.527187534s ago: executing program 5 (id=999): syz_usb_connect(0x0, 0x164, &(0x7f0000000440)=ANY=[@ANYBLOB="120100007af28810d30b55055b000000000109025201010000000009044000000e010000082406", @ANYBLOB="05ccc463ca964ed0", @ANYRESOCT], 0x0) 1.523846419s ago: executing program 0 (id=1000): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007663616e00000000", @ANYRES32=r3], 0x3c}}, 0x0) 1.446837267s ago: executing program 4 (id=1002): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff000000", @ANYRES32=r1, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="140006"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4801}, 0x8d0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newtfilter={0xd8, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0xac, 0x2, [@TCA_BPF_ACT={0x4c}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0xd8}}, 0x0) 1.30745092s ago: executing program 3 (id=1003): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) write(r0, &(0x7f00000000c0), 0x0) close(0x3) 1.302295451s ago: executing program 3 (id=1004): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$usbfs(0x0, 0x77, 0x503341) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001040)={r3, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x1d, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000feffffffb7080000000000007b8af8ff00000000b7080000080000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a5000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000810000085000000a700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.254355599s ago: executing program 3 (id=1005): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$usbfs(0x0, 0x77, 0x503341) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 1.235558778s ago: executing program 0 (id=1006): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) gettid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0904000000000000000002000000300004802c0001800900010068617368000000001c0002800800034000000000080002400000000008000140000000000900010073797a30000000000900020073797a320000000014000000110001000000000000"], 0x84}}, 0x0) 1.234892611s ago: executing program 4 (id=1007): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, 0x0, 0x50) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x80000001, 0x4, 0x32, 0x0, 0xff}, 0x9c) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_PANIC(r3, 0x5100) sendto$inet6(r1, &(0x7f0000000080)='8', 0x1, 0x65055, &(0x7f0000000340)={0xa, 0x4e20, 0x5, @local, 0x7}, 0x1c) r4 = socket$unix(0x1, 0x1, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000005c0)='ns/pid_for_children\x00') r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000000)=0x8000, 0x4) socket$packet(0x11, 0x3, 0x300) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x10, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x48}, 0x1, 0x0, 0x0, 0x600}, 0x0) 1.167340648s ago: executing program 3 (id=1008): socket$inet_tcp(0x2, 0x1, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r4, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 1.120930862s ago: executing program 1 (id=1009): socket$nl_generic(0x10, 0x3, 0x10) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') 1.098879863s ago: executing program 3 (id=1010): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f00000001c0)={0x18, 0x0, {0x0, @multicast, 'dvmrp1\x00'}}, 0x1e) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) r2 = getpid() r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a900000000c0a010400000000000000000a0000060900020073797a31000000000900010073797a310000000064000380600000800c00018006000100d65b000050000b804c0001800e000100636f6e6e6c696d69740000000c000280080001"], 0xb8}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) r4 = syz_pidfd_open(r2, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000040)={0x7, 0x100000, 0x0, 'queue0\x00'}) write$sndseq(r6, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r5, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) close_range(r4, 0xffffffffffffffff, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') lseek(r7, 0x289e0cb5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x3) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000180)={0x5, 0x7, 0x8001}) clock_adjtime(0x4, &(0x7f0000000100)={0x6d900000, 0x8fc3, 0x5, 0x7fff, 0x3, 0x8, 0x9, 0xf, 0x5586, 0x7, 0xe1d, 0x7ff, 0x408, 0x60, 0x9346, 0xa, 0x8a8, 0x3, 0x2, 0x4, 0x200, 0x7f3, 0x7, 0x200000, 0x32c, 0xef}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r8, 0x100000) r9 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r9, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r9, 0x84, 0xf, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x31}}}, 0x2, 0x4, 0x101, 0x5, 0x1}, &(0x7f0000000180)=0x98) syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb88a84e0081004d000802000186dd0610000365c5c89753a1ff0200000000000000000000000000010180c2000001fe8000000000000000000000000000aa"], &(0x7f0000000440)={0x0, 0x4, [0x883, 0xc9b, 0xcff, 0x885]}) ioctl$FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x320, 0xfffffffd, 0x0, 0x0, 0x0, {0x800}, {}, {0x8}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2}) 946.956299ms ago: executing program 3 (id=1011): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = memfd_create(0x0, 0x1) pwritev(r1, 0x0, 0x0, 0x800000, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, 0x0, 0x24002de8) ioctl$LOOP_SET_STATUS(r0, 0x4c02, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000002c0)={0x0, {}, 0x0, {}, 0x7, 0x6, 0x2, 0x18, "d1c759b1ddcf9eae07db96d9c14d6430cc544f61f4873134806f2d7105a86cca51fe2b4a3afa7976be1d5d4162fdab4c3e8855be083a28e69730a023d43cead9", "b4397d7b6efb5ba32db6d5f4812d1ee6c1267b7370d8aac083d947837bac641e", [0x5, 0x9]}) 0s ago: executing program 0 (id=1012): socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) close(0x4) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"a2e3ad21ed0d09f91b5b090987f70906d038e7ff7fc6e5539b0d3d0e8b089b323b6d07060890e0878f0e1ac6e7049b334a959b3e9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070b07580936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0931a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5bcd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383701d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b6080000007a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39dd0000000039ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb06ffc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00b98e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb15da202d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d877a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.205' (ED25519) to the list of known hosts. [ 78.850308][ T5792] cgroup: Unknown subsys name 'net' [ 79.090140][ T5792] cgroup: Unknown subsys name 'cpuset' [ 79.146759][ T5792] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 80.749277][ T5792] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.520879][ T5822] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.550337][ T5822] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.561462][ T5822] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.569436][ T5822] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.571214][ T5826] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.572615][ T5826] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.574777][ T5826] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.577722][ T5823] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.603905][ T5823] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.605138][ T5823] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.614103][ T5824] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.615466][ T5824] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.618369][ T5824] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.620400][ T5824] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.623767][ T5123] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.638173][ T5824] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.638897][ T5123] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.641389][ T5824] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.642476][ T5823] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.648293][ T5824] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.653764][ T5123] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.655241][ T5824] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.668950][ T5824] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.669213][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.672172][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.655282][ T5809] chnl_net:caif_netlink_parms(): no params data found [ 85.735913][ T5805] chnl_net:caif_netlink_parms(): no params data found [ 85.744022][ T5807] chnl_net:caif_netlink_parms(): no params data found [ 85.811574][ T5808] chnl_net:caif_netlink_parms(): no params data found [ 85.911102][ T5806] chnl_net:caif_netlink_parms(): no params data found [ 86.028550][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.029226][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.029537][ T5809] bridge_slave_0: entered allmulticast mode [ 86.030971][ T5809] bridge_slave_0: entered promiscuous mode [ 86.105698][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.105767][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.105875][ T5809] bridge_slave_1: entered allmulticast mode [ 86.110507][ T5809] bridge_slave_1: entered promiscuous mode [ 86.177065][ T5805] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.177202][ T5805] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.177309][ T5805] bridge_slave_0: entered allmulticast mode [ 86.178627][ T5805] bridge_slave_0: entered promiscuous mode [ 86.182005][ T5807] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.182111][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.182251][ T5807] bridge_slave_0: entered allmulticast mode [ 86.183790][ T5807] bridge_slave_0: entered promiscuous mode [ 86.247726][ T5805] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.247843][ T5805] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.248708][ T5805] bridge_slave_1: entered allmulticast mode [ 86.251161][ T5805] bridge_slave_1: entered promiscuous mode [ 86.255169][ T5807] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.255236][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.255332][ T5807] bridge_slave_1: entered allmulticast mode [ 86.267064][ T5807] bridge_slave_1: entered promiscuous mode [ 86.269892][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.269998][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.270139][ T5808] bridge_slave_0: entered allmulticast mode [ 86.272698][ T5808] bridge_slave_0: entered promiscuous mode [ 86.282444][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.342378][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.342485][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.342628][ T5808] bridge_slave_1: entered allmulticast mode [ 86.345214][ T5808] bridge_slave_1: entered promiscuous mode [ 86.355262][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.430622][ T5806] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.430688][ T5806] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.430788][ T5806] bridge_slave_0: entered allmulticast mode [ 86.432170][ T5806] bridge_slave_0: entered promiscuous mode [ 86.437716][ T5805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.444420][ T5807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.483054][ T5806] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.483198][ T5806] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.483372][ T5806] bridge_slave_1: entered allmulticast mode [ 86.484844][ T5806] bridge_slave_1: entered promiscuous mode [ 86.501016][ T5805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.504061][ T5807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.511519][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.540803][ T5809] team0: Port device team_slave_0 added [ 86.580210][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.581748][ T5809] team0: Port device team_slave_1 added [ 86.708081][ T59] Bluetooth: hci3: command tx timeout [ 86.708086][ T5820] Bluetooth: hci0: command tx timeout [ 86.786162][ T5820] Bluetooth: hci4: command tx timeout [ 86.786168][ T59] Bluetooth: hci2: command tx timeout [ 86.866272][ T5820] Bluetooth: hci1: command tx timeout [ 86.981299][ T5806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.983089][ T5805] team0: Port device team_slave_0 added [ 86.984945][ T5807] team0: Port device team_slave_0 added [ 87.035834][ T5806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.040297][ T5805] team0: Port device team_slave_1 added [ 87.042726][ T5807] team0: Port device team_slave_1 added [ 87.045069][ T5808] team0: Port device team_slave_0 added [ 87.054506][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.054520][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.054543][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.123070][ T42] cfg80211: failed to load regulatory.db [ 87.139345][ T5808] team0: Port device team_slave_1 added [ 87.140711][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.140725][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.140746][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.232015][ T5806] team0: Port device team_slave_0 added [ 87.232751][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.232764][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.232792][ T5805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.246904][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.246920][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.246942][ T5807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.273984][ T5806] team0: Port device team_slave_1 added [ 87.274902][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.274915][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.274938][ T5805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.276969][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.276981][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.277003][ T5807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.279381][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.279393][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.279414][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.348855][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.348871][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.348894][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.414070][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.414087][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.414109][ T5806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.431126][ T5809] hsr_slave_0: entered promiscuous mode [ 87.432691][ T5809] hsr_slave_1: entered promiscuous mode [ 87.438369][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.438382][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.438404][ T5806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.596533][ T5807] hsr_slave_0: entered promiscuous mode [ 87.597799][ T5807] hsr_slave_1: entered promiscuous mode [ 87.598646][ T5807] debugfs: 'hsr0' already exists in 'hsr' [ 87.598753][ T5807] Cannot create hsr debugfs directory [ 87.609254][ T5805] hsr_slave_0: entered promiscuous mode [ 87.610427][ T5805] hsr_slave_1: entered promiscuous mode [ 87.612044][ T5805] debugfs: 'hsr0' already exists in 'hsr' [ 87.612065][ T5805] Cannot create hsr debugfs directory [ 87.914195][ T5808] hsr_slave_0: entered promiscuous mode [ 87.915411][ T5808] hsr_slave_1: entered promiscuous mode [ 87.917868][ T5808] debugfs: 'hsr0' already exists in 'hsr' [ 87.917890][ T5808] Cannot create hsr debugfs directory [ 87.994450][ T5806] hsr_slave_0: entered promiscuous mode [ 87.995152][ T5806] hsr_slave_1: entered promiscuous mode [ 87.995619][ T5806] debugfs: 'hsr0' already exists in 'hsr' [ 87.995633][ T5806] Cannot create hsr debugfs directory [ 88.563966][ T5809] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.604085][ T5809] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.606966][ T5809] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.640559][ T5809] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.641667][ T5809] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.671346][ T5809] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.696971][ T5809] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.730652][ T5809] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.786352][ T5820] Bluetooth: hci3: command tx timeout [ 88.786360][ T59] Bluetooth: hci0: command tx timeout [ 88.866659][ T5820] Bluetooth: hci2: command tx timeout [ 88.866687][ T5820] Bluetooth: hci4: command tx timeout [ 88.892750][ T5807] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.931148][ T5807] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.933051][ T5807] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.947014][ T59] Bluetooth: hci1: command tx timeout [ 88.957255][ T5807] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.959969][ T5807] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.000260][ T5807] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.045354][ T5807] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.073363][ T5807] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.192882][ T5805] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.230675][ T5805] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.235271][ T5805] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.251396][ T5805] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.269980][ T5805] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.299293][ T5805] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.326594][ T5805] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.358840][ T5805] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.462528][ T5808] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.500366][ T5808] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.519124][ T5808] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.549702][ T5808] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.564307][ T5808] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.590594][ T5808] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.615683][ T5808] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.650656][ T5808] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.777101][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.777944][ T5806] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 89.820574][ T5806] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.825021][ T5806] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 89.848707][ T5806] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.852259][ T5806] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 89.898734][ T5806] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.905119][ T5806] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 89.949159][ T5806] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.003679][ T5809] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.019863][ T5807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.057590][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.057794][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.121431][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.121526][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.164944][ T5807] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.202396][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.202469][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.225399][ T5805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.262378][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.262493][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.334255][ T5805] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.378501][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.381460][ T1369] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.381576][ T1369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.500454][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.505396][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.622672][ T5808] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.652521][ T5806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.675907][ T3195] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.683424][ T3195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.762259][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.762378][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.839721][ T5806] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.866315][ T59] Bluetooth: hci0: command tx timeout [ 90.866353][ T59] Bluetooth: hci3: command tx timeout [ 90.917559][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.917802][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.947862][ T5820] Bluetooth: hci2: command tx timeout [ 90.947893][ T5820] Bluetooth: hci4: command tx timeout [ 90.960976][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.003389][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.004275][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.036181][ T59] Bluetooth: hci1: command tx timeout [ 91.154863][ T5807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.355747][ T5809] veth0_vlan: entered promiscuous mode [ 91.472896][ T5809] veth1_vlan: entered promiscuous mode [ 91.564178][ T5805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.564525][ T5807] veth0_vlan: entered promiscuous mode [ 91.647477][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.648818][ T5807] veth1_vlan: entered promiscuous mode [ 91.699239][ T5809] veth0_macvtap: entered promiscuous mode [ 91.723937][ T5809] veth1_macvtap: entered promiscuous mode [ 91.803931][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.814252][ T5805] veth0_vlan: entered promiscuous mode [ 91.820812][ T5807] veth0_macvtap: entered promiscuous mode [ 91.839719][ T5806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.842880][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.862897][ T5807] veth1_macvtap: entered promiscuous mode [ 91.881710][ T5808] veth0_vlan: entered promiscuous mode [ 91.903728][ T5805] veth1_vlan: entered promiscuous mode [ 91.911265][ T1319] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.926126][ T1319] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.947121][ T43] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.952503][ T43] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.960358][ T5808] veth1_vlan: entered promiscuous mode [ 92.037474][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.129278][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.315631][ T1319] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.344332][ T1319] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.369069][ T1319] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.389250][ T1319] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.407040][ T5805] veth0_macvtap: entered promiscuous mode [ 92.510510][ T5805] veth1_macvtap: entered promiscuous mode [ 92.542929][ T5808] veth0_macvtap: entered promiscuous mode [ 92.567866][ T1417] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.567894][ T1417] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.667848][ T5808] veth1_macvtap: entered promiscuous mode [ 92.845453][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.857915][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.857932][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.946185][ T5820] Bluetooth: hci0: command tx timeout [ 92.946229][ T59] Bluetooth: hci3: command tx timeout [ 92.948986][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.982728][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.009319][ T1435] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.009338][ T1435] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.010692][ T5806] veth0_vlan: entered promiscuous mode [ 93.026973][ T5820] Bluetooth: hci2: command tx timeout [ 93.027016][ T59] Bluetooth: hci4: command tx timeout [ 93.049640][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.072106][ T3195] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.073979][ T3195] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.100748][ T3195] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.106234][ T59] Bluetooth: hci1: command tx timeout [ 93.114976][ T3195] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.132128][ T3195] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.214495][ T3195] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.234408][ T5806] veth1_vlan: entered promiscuous mode [ 93.243561][ T3195] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.260220][ T3195] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.264806][ T1435] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.264824][ T1435] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.208416][ T1435] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.208436][ T1435] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.308688][ T5806] veth0_macvtap: entered promiscuous mode [ 94.318503][ T1435] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.318521][ T1435] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.427548][ T5934] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 94.458429][ T5806] veth1_macvtap: entered promiscuous mode [ 94.477485][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.477503][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.574823][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.574844][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.582844][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.650929][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.759635][ T1469] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.759933][ T1469] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.760474][ T1469] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.760822][ T1469] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.328875][ T5943] Zero length message leads to an empty skb [ 97.469659][ T5947] Bluetooth: MGMT ver 1.23 [ 97.469703][ T5947] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 98.356776][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.356798][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.644214][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.644234][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.687962][ T5976] netlink: 'syz.3.19': attribute type 1 has an invalid length. [ 100.202121][ T5985] binder: 5982:5985 ioctl c0285840 0 returned -22 [ 101.605090][ T5996] sg_write: data in/out 447452/210 bytes for SCSI command 0x0-- guessing data in; [ 101.605090][ T5996] program syz.0.23 not setting count and/or reply_len properly [ 102.885643][ T6014] netlink: 'syz.4.31': attribute type 1 has an invalid length. [ 103.627480][ T42] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 103.636864][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 103.927812][ T42] usb 2-1: device descriptor read/64, error -32 [ 104.024714][ T5812] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 104.216476][ T42] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 104.438436][ T5812] usb 3-1: Using ep0 maxpacket: 8 [ 104.606343][ T5812] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 104.606375][ T5812] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 104.606399][ T5812] usb 3-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 104.606419][ T5812] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 104.606460][ T5812] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 104.606482][ T5812] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.774317][ T6043] netlink: 36 bytes leftover after parsing attributes in process `syz.0.38'. [ 105.975580][ T5812] usbtmc 3-1:16.0: bulk endpoints not found [ 107.644867][ T6062] netlink: 'syz.0.44': attribute type 1 has an invalid length. [ 107.837414][ T6055] input: syz1 as /devices/virtual/input/input5 [ 107.902955][ T5812] usb 3-1: USB disconnect, device number 2 [ 109.520670][ T6078] netlink: 4 bytes leftover after parsing attributes in process `syz.4.49'. [ 109.520692][ T6078] netlink: 24 bytes leftover after parsing attributes in process `syz.4.49'. [ 111.979610][ T6107] batman_adv: batadv: cannot create tp meter kthread [ 112.678614][ T6122] netlink: 4 bytes leftover after parsing attributes in process `syz.1.64'. [ 112.678633][ T6122] netlink: 24 bytes leftover after parsing attributes in process `syz.1.64'. [ 113.053807][ T6126] input: syz1 as /devices/virtual/input/input6 [ 113.496025][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.516018][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.526009][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.536008][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.545997][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.566021][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.576020][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.586032][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.596011][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.606016][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 115.237366][ T31] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 115.412270][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.412304][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.412354][ T31] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 115.412376][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.749263][ T31] usb 2-1: config 0 descriptor?? [ 116.767192][ T31] usb 2-1: can't set config #0, error -71 [ 116.809211][ T31] usb 2-1: USB disconnect, device number 4 [ 117.696255][ T6162] vlan2: entered allmulticast mode [ 117.696279][ T6162] veth0_to_bond: entered allmulticast mode [ 119.049790][ T6183] input: syz0 as /devices/virtual/input/input7 [ 120.015651][ T6203] io-wq is not configured for unbound workers [ 120.321433][ T6211] netlink: 20 bytes leftover after parsing attributes in process `syz.2.90'. [ 120.567359][ T6211] ip6gre1: entered promiscuous mode [ 120.567386][ T6211] ip6gre1: entered allmulticast mode [ 120.693584][ T6218] netlink: 'syz.2.90': attribute type 6 has an invalid length. [ 120.693606][ T6218] netlink: 72 bytes leftover after parsing attributes in process `syz.2.90'. [ 121.411604][ T6231] input: syz0 as /devices/virtual/input/input8 [ 121.540925][ T6228] vlan2: entered allmulticast mode [ 121.540940][ T6228] veth0_to_bond: entered allmulticast mode [ 124.023435][ T6262] sg_write: data in/out 445404/202 bytes for SCSI command 0x0-- guessing data in; [ 124.023435][ T6262] program syz.0.107 not setting count and/or reply_len properly [ 127.016125][ T6291] sg_write: data in/out 445404/202 bytes for SCSI command 0x0-- guessing data in; [ 127.016125][ T6291] program syz.2.120 not setting count and/or reply_len properly [ 128.870494][ T31] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 129.028342][ T31] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 129.028372][ T31] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 129.028389][ T31] usb 2-1: config 220 has an invalid descriptor of length 99, skipping remainder of the config [ 129.028407][ T31] usb 2-1: config 220 has no interface number 2 [ 129.028470][ T31] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 129.028495][ T31] usb 2-1: config 220 interface 0 has no altsetting 0 [ 129.028512][ T31] usb 2-1: config 220 interface 76 has no altsetting 0 [ 129.028528][ T31] usb 2-1: config 220 interface 1 has no altsetting 0 [ 129.139466][ T31] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 129.139495][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.139513][ T31] usb 2-1: Product: syz [ 129.139525][ T31] usb 2-1: Manufacturer: syz [ 129.140536][ T31] usb 2-1: SerialNumber: syz [ 129.598636][ T31] usb 2-1: selecting invalid altsetting 0 [ 129.662938][ T31] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 129.662962][ T31] uvcvideo 2-1:220.0: No valid video chain found. [ 129.744904][ T31] usb 2-1: selecting invalid altsetting 0 [ 129.744941][ T31] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 129.781780][ T31] usb 2-1: USB disconnect, device number 5 [ 130.377431][ T5896] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 130.527485][ T5896] usb 4-1: Using ep0 maxpacket: 8 [ 130.533959][ T5896] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 130.533995][ T5896] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 130.534018][ T5896] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 130.534040][ T5896] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 130.534086][ T5896] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 130.534107][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.636592][ T6337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.663982][ T6337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.679482][ T5896] usb 4-1: usb_control_msg returned -32 [ 131.679525][ T5896] usbtmc 4-1:16.0: can't read capabilities [ 131.789145][ T5896] usb 4-1: USB disconnect, device number 2 [ 132.706313][ T6041] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 132.858208][ T6041] usb 3-1: config 1 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.858241][ T6041] usb 3-1: config 1 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.858262][ T6041] usb 3-1: config 1 interface 0 has no altsetting 0 [ 132.905462][ T6041] usb 3-1: string descriptor 0 read error: -22 [ 132.905544][ T6041] usb 3-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.40 [ 132.905557][ T6041] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.976086][ T31] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 133.148391][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.148505][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.153621][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 133.253890][ T31] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.253942][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 133.253961][ T31] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 133.674400][ T31] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 133.674431][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.674450][ T31] usb 5-1: Product: syz [ 133.674463][ T31] usb 5-1: Manufacturer: syz [ 133.674476][ T31] usb 5-1: SerialNumber: syz [ 133.703577][ T6355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.765590][ T6355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.837169][ T31] usb 5-1: config 0 descriptor?? [ 133.910585][ T31] mcba_usb 5-1:0.0: Can't find endpoints [ 134.004684][ T6041] usbhid 3-1:1.0: can't add hid device: -71 [ 134.004762][ T6041] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 134.135751][ T6041] usb 3-1: USB disconnect, device number 3 [ 135.446095][ T6041] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 135.556089][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 135.836506][ T6041] usb 1-1: Using ep0 maxpacket: 8 [ 135.839079][ T6041] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 135.839109][ T6041] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 135.839122][ T6041] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 135.839133][ T6041] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 135.839155][ T6041] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 135.839166][ T6041] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.504033][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 136.507062][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 136.507093][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 136.507116][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 136.507138][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 136.507175][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 136.507196][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.547200][ T6041] usb 1-1: usb_control_msg returned -32 [ 136.547244][ T6041] usbtmc 1-1:16.0: can't read capabilities [ 137.006176][ T9] usb 3-1: GET_CAPABILITIES returned 0 [ 137.006224][ T9] usbtmc 3-1:16.0: can't read capabilities [ 137.020458][ T6041] usb 1-1: USB disconnect, device number 2 [ 137.569546][ T9] usb 3-1: USB disconnect, device number 4 [ 138.046125][ T31] usb 5-1: USB disconnect, device number 2 [ 138.178237][ T6415] netlink: 'syz.2.161': attribute type 1 has an invalid length. [ 141.612580][ T6453] input: syz0 as /devices/virtual/input/input10 [ 141.874492][ T6461] netlink: 44 bytes leftover after parsing attributes in process `syz.4.179'. [ 143.379655][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 143.536058][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 143.558388][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.558421][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 143.558433][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 143.634303][ T9] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 143.634344][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.634363][ T9] usb 2-1: Product: syz [ 143.634376][ T9] usb 2-1: Manufacturer: syz [ 143.634390][ T9] usb 2-1: SerialNumber: syz [ 143.741258][ T9] usb 2-1: config 0 descriptor?? [ 143.808391][ T9] mcba_usb 2-1:0.0: Can't find endpoints [ 144.764060][ T6494] netlink: 44 bytes leftover after parsing attributes in process `syz.0.192'. [ 148.896154][ T31] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 149.046239][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 149.048376][ T31] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 149.048394][ T31] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 149.048407][ T31] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 149.048419][ T31] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 149.048441][ T31] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 149.048452][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.318554][ T31] usb 1-1: usb_control_msg returned -32 [ 150.318602][ T31] usbtmc 1-1:16.0: can't read capabilities [ 150.382093][ T6041] usb 2-1: USB disconnect, device number 6 [ 150.478346][ T31] usb 1-1: USB disconnect, device number 3 [ 155.410786][ T6564] sctp: Trying to GSO but underlying device doesn't support it. [ 155.422645][ T6566] sg_write: data in/out 439260/178 bytes for SCSI command 0x0-- guessing data in; [ 155.422645][ T6566] program syz.0.219 not setting count and/or reply_len properly [ 155.622460][ T6557] libceph: resolve '0..' (ret=-3): failed [ 156.786196][ T5906] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 157.528296][ T6586] netlink: 52 bytes leftover after parsing attributes in process `syz.4.218'. [ 157.549877][ T5906] usb 3-1: config 0 has an invalid interface number: 106 but max is 0 [ 157.549902][ T5906] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.549919][ T5906] usb 3-1: config 0 has no interface number 0 [ 157.549945][ T5906] usb 3-1: too many endpoints for config 0 interface 106 altsetting 74: 216, using maximum allowed: 30 [ 157.549978][ T5906] usb 3-1: config 0 interface 106 altsetting 74 has 0 endpoint descriptors, different from the interface descriptor's value: 216 [ 157.550004][ T5906] usb 3-1: config 0 interface 106 has no altsetting 0 [ 157.550034][ T5906] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 157.550055][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.566471][ T5906] usb 3-1: config 0 descriptor?? [ 157.679169][ T6587] netlink: 44 bytes leftover after parsing attributes in process `syz.4.218'. [ 157.718457][ T5906] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 157.839262][ T6593] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 158.410657][ T6602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.516855][ T6602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.883996][ T66] usb 3-1: Failed to submit usb control message: -110 [ 158.884019][ T66] usb 3-1: unable to send the bmi data to the device: -110 [ 158.884028][ T66] usb 3-1: unable to get target info from device [ 158.884048][ T66] usb 3-1: could not get target info (-110) [ 158.884064][ T66] usb 3-1: could not probe fw (-110) [ 160.961136][ T6624] libceph: resolve '0..' (ret=-3): failed [ 162.109900][ T6632] input: syz0 as /devices/virtual/input/input11 [ 162.423240][ T6642] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 164.567507][ T6659] libceph: resolve '0..' (ret=-3): failed [ 165.645512][ T9] usb 3-1: USB disconnect, device number 5 [ 166.708432][ T6679] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 169.168749][ T5820] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 169.172712][ T5820] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 169.175915][ T5820] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 169.196498][ T5820] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 169.198875][ T5820] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 169.709211][ T6701] libceph: resolve '0..' (ret=-3): failed [ 170.107330][ T6705] loop2: detected capacity change from 0 to 7 [ 170.435590][ T6705] Dev loop2: unable to read RDB block 7 [ 170.435624][ T6705] loop2: AHDI p1 p2 p3 [ 170.435648][ T6705] loop2: partition table partially beyond EOD, truncated [ 170.740309][ T6705] loop2: p1 start 1818582900 is beyond EOD, truncated [ 170.740337][ T6705] loop2: p3 start 335544320 is beyond EOD, truncated [ 171.666087][ T59] Bluetooth: hci5: command tx timeout [ 172.787283][ T6717] vlan2: entered allmulticast mode [ 172.787302][ T6717] veth0_to_bond: entered allmulticast mode [ 173.016101][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 173.166410][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 173.176545][ T9] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 173.176573][ T9] usb 1-1: config 0 has no interface number 0 [ 173.176616][ T9] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 173.212552][ T9] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 173.212582][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.212600][ T9] usb 1-1: Product: syz [ 173.212613][ T9] usb 1-1: Manufacturer: syz [ 173.212627][ T9] usb 1-1: SerialNumber: syz [ 174.154285][ T59] Bluetooth: hci5: command tx timeout [ 174.171290][ T9] usb 1-1: config 0 descriptor?? [ 174.202954][ T9] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 174.202990][ T9] em28xx 1-1:0.132: Video interface 132 found: [ 174.287489][ T66] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.483775][ T6695] chnl_net:caif_netlink_parms(): no params data found [ 174.638294][ T9] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 174.742355][ T6746] tipc: Started in network mode [ 174.742385][ T6746] tipc: Node identity ac14140f, cluster identity 4711 [ 174.743320][ T6746] tipc: New replicast peer: 255.255.255.255 [ 174.844967][ T6746] tipc: Enabled bearer , priority 10 [ 175.086687][ T5794] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 175.118244][ T66] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.233048][ T6747] netlink: 12 bytes leftover after parsing attributes in process `syz.3.280'. [ 175.233072][ T6747] tipc: Disabling bearer [ 175.236472][ T5794] usb 5-1: Using ep0 maxpacket: 16 [ 175.258834][ T5794] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 175.258857][ T5794] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.258874][ T5794] usb 5-1: config 0 has no interface number 0 [ 175.258916][ T5794] usb 5-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 175.258938][ T5794] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.276054][ T9] em28xx 1-1:0.132: failed to read eeprom (err=-110) [ 175.276109][ T9] em28xx 1-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 175.340939][ T5794] usb 5-1: config 0 descriptor?? [ 175.369860][ T5794] uvcvideo 5-1:0.64: Found UVC 0.00 device (0bd3:0555) [ 175.369893][ T5794] uvcvideo 5-1:0.64: No valid video chain found. [ 175.529490][ T9] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 175.529529][ T9] em28xx 1-1:0.132: analog set to bulk mode. [ 175.530274][ T5948] em28xx 1-1:0.132: Registering V4L2 extension [ 175.618017][ T6041] usb 5-1: USB disconnect, device number 3 [ 175.685902][ T66] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.695846][ T5948] em28xx 1-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 175.705098][ T9] usb 1-1: USB disconnect, device number 4 [ 175.706945][ T5948] em28xx 1-1:0.132: failed to trigger read from i2c address 0x48 (error=-19) [ 175.707057][ T5948] em28xx 1-1:0.132: failed to trigger read from i2c address 0x42 (error=-19) [ 175.707151][ T5948] em28xx 1-1:0.132: failed to trigger read from i2c address 0x40 (error=-19) [ 175.805409][ T5948] em28xx 1-1:0.132: failed to trigger read from i2c address 0x84 (error=-19) [ 175.805474][ T5948] em28xx 1-1:0.132: failed to trigger read from i2c address 0x86 (error=-19) [ 175.805529][ T5948] em28xx 1-1:0.132: failed to trigger read from i2c address 0x94 (error=-19) [ 175.805823][ T5948] em28xx 1-1:0.132: failed to trigger read from i2c address 0x96 (error=-19) [ 175.826877][ T9] em28xx 1-1:0.132: Disconnecting em28xx [ 175.876122][ T5896] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 175.918983][ T5948] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 175.918999][ T5948] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 175.919006][ T5948] em28xx 1-1:0.132: No AC97 audio processor [ 176.057867][ T5896] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 176.057935][ T5896] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 176.057953][ T5896] usb 2-1: config 220 has an invalid descriptor of length 99, skipping remainder of the config [ 176.057972][ T5896] usb 2-1: config 220 has no interface number 2 [ 176.058061][ T5896] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 176.058076][ T5896] usb 2-1: config 220 interface 0 has no altsetting 0 [ 176.058085][ T5896] usb 2-1: config 220 interface 76 has no altsetting 0 [ 176.058094][ T5896] usb 2-1: config 220 interface 1 has no altsetting 0 [ 176.158025][ T5896] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 176.158051][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.158067][ T5896] usb 2-1: Product: syz [ 176.158081][ T5896] usb 2-1: Manufacturer: syz [ 176.158094][ T5896] usb 2-1: SerialNumber: syz [ 176.199959][ T5948] usb 1-1: Decoder not found [ 176.199976][ T5948] em28xx 1-1:0.132: failed to create media graph [ 176.200029][ T5948] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 176.226197][ T59] Bluetooth: hci5: command tx timeout [ 176.483240][ T5948] em28xx 1-1:0.132: Remote control support is not available for this card. [ 176.491394][ T9] em28xx 1-1:0.132: Closing input extension [ 176.520979][ T5896] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 176.521011][ T5896] uvcvideo 2-1:220.0: No valid video chain found. [ 176.521068][ T5896] usb 2-1: selecting invalid altsetting 0 [ 176.633733][ T5896] usb 2-1: selecting invalid altsetting 0 [ 176.633775][ T5896] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 176.659845][ T5896] usb 2-1: USB disconnect, device number 7 [ 176.803376][ T66] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.918232][ T6695] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.918458][ T6695] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.918688][ T6695] bridge_slave_0: entered allmulticast mode [ 176.960308][ T6695] bridge_slave_0: entered promiscuous mode [ 176.973719][ T6695] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.974945][ T6695] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.975104][ T6695] bridge_slave_1: entered allmulticast mode [ 177.029351][ T6695] bridge_slave_1: entered promiscuous mode [ 178.094863][ T6695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.398417][ T59] Bluetooth: hci5: command tx timeout [ 178.432872][ T6695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.645130][ T9] em28xx 1-1:0.132: Freeing device [ 178.780891][ T6695] team0: Port device team_slave_0 added [ 178.803376][ T6695] team0: Port device team_slave_1 added [ 178.833239][ T6784] netlink: 44 bytes leftover after parsing attributes in process `syz.0.289'. [ 179.628225][ T6795] Bluetooth: hci0: unsupported parameter 255 [ 179.628245][ T6795] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 179.677709][ T6695] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.677726][ T6695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 179.677750][ T6695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.745066][ T6695] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.745081][ T6695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 179.745101][ T6695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.540831][ T6695] hsr_slave_0: entered promiscuous mode [ 180.542158][ T6695] hsr_slave_1: entered promiscuous mode [ 180.549837][ T6695] debugfs: 'hsr0' already exists in 'hsr' [ 180.549861][ T6695] Cannot create hsr debugfs directory [ 180.771276][ T6812] netlink: 44 bytes leftover after parsing attributes in process `syz.4.301'. [ 183.078448][ T66] bridge_slave_1: left allmulticast mode [ 183.078570][ T66] bridge_slave_1: left promiscuous mode [ 183.100205][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.252764][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 183.282194][ T66] bridge_slave_0: left allmulticast mode [ 183.282224][ T66] bridge_slave_0: left promiscuous mode [ 183.282521][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.558139][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.558166][ T9] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 183.558195][ T9] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 183.558207][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.630157][ T9] usb 5-1: config 0 descriptor?? [ 185.248424][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 185.333847][ T6852] netlink: 44 bytes leftover after parsing attributes in process `syz.3.312'. [ 185.346758][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 185.389381][ T66] bond0 (unregistering): Released all slaves [ 185.486262][ T6841] vlan2: entered allmulticast mode [ 185.486283][ T6841] veth0_to_bond: entered allmulticast mode [ 187.356233][ T5896] usb 5-1: USB disconnect, device number 4 [ 188.417204][ T6884] netlink: 44 bytes leftover after parsing attributes in process `syz.1.322'. [ 191.424731][ T6925] netlink: 28 bytes leftover after parsing attributes in process `syz.3.331'. [ 191.798337][ T5468] 8021q: adding VLAN 0 to HW filter on device eth1 [ 191.910404][ T6926] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 191.910429][ T6926] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 191.974654][ T6926] bond1: (slave vcan1): making interface the new active one [ 192.015041][ T6926] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 192.557465][ T6939] netlink: 44 bytes leftover after parsing attributes in process `syz.0.333'. [ 193.579339][ T6951] Bluetooth: hci0: invalid length 0, exp 2 for type 5 [ 194.616996][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 194.639762][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.639825][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.783116][ T9] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 194.783145][ T9] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 194.783161][ T9] usb 2-1: config 220 has an invalid descriptor of length 99, skipping remainder of the config [ 194.783179][ T9] usb 2-1: config 220 has no interface number 2 [ 194.783254][ T9] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 194.783281][ T9] usb 2-1: config 220 interface 0 has no altsetting 0 [ 194.783297][ T9] usb 2-1: config 220 interface 76 has no altsetting 0 [ 194.783312][ T9] usb 2-1: config 220 interface 1 has no altsetting 0 [ 194.819560][ T66] hsr_slave_0: left promiscuous mode [ 194.881170][ T9] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 194.881200][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.881219][ T9] usb 2-1: Product: syz [ 194.881233][ T9] usb 2-1: Manufacturer: syz [ 194.881247][ T9] usb 2-1: SerialNumber: syz [ 194.969152][ T66] hsr_slave_1: left promiscuous mode [ 194.978106][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.978184][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.201478][ T9] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 195.201512][ T9] uvcvideo 2-1:220.0: No valid video chain found. [ 195.201570][ T9] usb 2-1: selecting invalid altsetting 0 [ 195.250418][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.250444][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.086156][ T9] usb 2-1: selecting invalid altsetting 0 [ 196.086189][ T9] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 196.100060][ T9] usb 2-1: USB disconnect, device number 8 [ 196.299482][ T6983] netlink: 28 bytes leftover after parsing attributes in process `syz.4.345'. [ 196.319666][ T66] veth1_macvtap: left promiscuous mode [ 196.319917][ T66] veth0_macvtap: left promiscuous mode [ 196.320378][ T66] veth1_vlan: left promiscuous mode [ 196.320737][ T66] veth0_vlan: left promiscuous mode [ 196.675226][ T6986] input: syz0 as /devices/virtual/input/input13 [ 196.912238][ T6990] Bluetooth: hci0: invalid length 0, exp 2 for type 5 [ 197.266156][ T5896] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 197.426061][ T5896] usb 2-1: Using ep0 maxpacket: 8 [ 197.430512][ T5896] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.430540][ T5896] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 197.430565][ T5896] usb 2-1: config 0 interface 0 has no altsetting 0 [ 197.430602][ T5896] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0a2b, bcdDevice= 0.00 [ 197.430623][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.435077][ T5896] usb 2-1: config 0 descriptor?? [ 197.557323][ T66] team0 (unregistering): Port device team_slave_1 removed [ 197.617353][ T66] team0 (unregistering): Port device team_slave_0 removed [ 197.947964][ T5896] hid-corsair-void 0003:1B1C:0A2B.0001: unknown main item tag 0x0 [ 197.948005][ T5896] hid-corsair-void 0003:1B1C:0A2B.0001: unknown main item tag 0x0 [ 197.948031][ T5896] hid-corsair-void 0003:1B1C:0A2B.0001: unknown main item tag 0x0 [ 197.948057][ T5896] hid-corsair-void 0003:1B1C:0A2B.0001: unknown main item tag 0x0 [ 197.948082][ T5896] hid-corsair-void 0003:1B1C:0A2B.0001: unknown main item tag 0x0 [ 197.948105][ T5896] hid-corsair-void 0003:1B1C:0A2B.0001: unknown main item tag 0x0 [ 197.948127][ T5896] hid-corsair-void 0003:1B1C:0A2B.0001: unknown main item tag 0x0 [ 197.948148][ T5896] hid-corsair-void 0003:1B1C:0A2B.0001: unknown main item tag 0x0 [ 197.948171][ T5896] hid-corsair-void 0003:1B1C:0A2B.0001: unknown main item tag 0x0 [ 197.948196][ T5896] hid-corsair-void 0003:1B1C:0A2B.0001: unknown main item tag 0x0 [ 198.020760][ T5896] hid-corsair-void 0003:1B1C:0A2B.0001: hidraw0: USB HID vff.fa Device [HID 1b1c:0a2b] on usb-dummy_hcd.1-1/input0 [ 198.067531][ T5468] 8021q: adding VLAN 0 to HW filter on device eth2 [ 198.132094][ T6984] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 198.132118][ T6984] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 198.182239][ T5897] usb 2-1: USB disconnect, device number 9 [ 198.186564][ T6984] bond1: (slave vcan1): making interface the new active one [ 198.187330][ T6984] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 198.194609][ T814] hid-corsair-void 0003:1B1C:0A2B.0001: failed to request battery (reason: -19) [ 198.223221][ T814] hid-corsair-void 0003:1B1C:0A2B.0001: failed to request firmware (reason: -19) [ 199.785012][ T7006] libceph: resolve '0..' (ret=-3): failed [ 199.940699][ T7008] netlink: 44 bytes leftover after parsing attributes in process `syz.3.352'. [ 199.940727][ T7008] netlink: 44 bytes leftover after parsing attributes in process `syz.3.352'. [ 199.940736][ T7008] netlink: 44 bytes leftover after parsing attributes in process `syz.3.352'. [ 200.046877][ T6695] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 201.912923][ T6695] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 201.928015][ T6695] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 202.172219][ T6695] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 202.289938][ T7022] input: syz0 as /devices/virtual/input/input14 [ 202.417236][ T6695] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 203.347322][ T6695] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 204.973652][ T7048] loop2: detected capacity change from 0 to 7 [ 204.993866][ T7048] Dev loop2: unable to read RDB block 7 [ 204.993900][ T7048] loop2: AHDI p1 p2 p3 [ 204.993930][ T7048] loop2: partition table partially beyond EOD, truncated [ 204.994175][ T7048] loop2: p1 start 1818582900 is beyond EOD, truncated [ 204.994194][ T7048] loop2: p3 start 335544320 is beyond EOD, truncated [ 205.810319][ T6695] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 205.864001][ T6695] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 205.865340][ T5468] 8021q: adding VLAN 0 to HW filter on device eth3 [ 207.099214][ T5123] Bluetooth: hci3: command 0x0406 tx timeout [ 207.099444][ T5123] Bluetooth: hci0: command 0x0406 tx timeout [ 207.099580][ T5123] Bluetooth: hci4: command 0x0406 tx timeout [ 207.323298][ T7066] libceph: resolve '0..' (ret=-3): failed [ 208.159505][ T7073] netlink: 44 bytes leftover after parsing attributes in process `syz.4.366'. [ 208.159529][ T7073] netlink: 44 bytes leftover after parsing attributes in process `syz.4.366'. [ 208.159543][ T7073] netlink: 44 bytes leftover after parsing attributes in process `syz.4.366'. [ 208.396078][ T6041] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 209.463000][ T7075] faux_driver vgem: [drm] Unknown color mode 32769; guessing buffer size. [ 209.498243][ T6041] usb 1-1: device not accepting address 5, error -71 [ 209.545054][ T6695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.559038][ T7087] input: syz0 as /devices/virtual/input/input15 [ 209.724021][ T7088] sg_write: data in/out 435164/162 bytes for SCSI command 0x0-- guessing data in; [ 209.724021][ T7088] program syz.3.367 not setting count and/or reply_len properly [ 209.853222][ T6695] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.889111][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.889423][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.944411][ T1169] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.944495][ T1169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.575736][ T7104] random: crng reseeded on system resumption [ 211.675382][ T7121] libceph: resolve '0..' (ret=-3): failed [ 211.986376][ T5820] Bluetooth: hci1: command 0x0406 tx timeout [ 212.633266][ T7128] netlink: 'syz.0.377': attribute type 33 has an invalid length. [ 212.633285][ T7128] netlink: 8 bytes leftover after parsing attributes in process `syz.0.377'. [ 212.635073][ T7128] bond0: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 212.747485][ T7131] sg_write: data in/out 435164/162 bytes for SCSI command 0x0-- guessing data in; [ 212.747485][ T7131] program syz.4.379 not setting count and/or reply_len properly [ 214.502780][ T7150] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 214.671561][ T5468] 8021q: adding VLAN 0 to HW filter on device eth4 [ 214.723011][ T6695] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.971166][ T7154] loop2: detected capacity change from 0 to 7 [ 216.331758][ T7154] Dev loop2: unable to read RDB block 7 [ 216.331790][ T7154] loop2: AHDI p1 p2 p3 [ 216.331814][ T7154] loop2: partition table partially beyond EOD, truncated [ 216.332027][ T7154] loop2: p1 start 1818582900 is beyond EOD, truncated [ 216.332045][ T7154] loop2: p3 start 335544320 is beyond EOD, truncated [ 217.750418][ T7171] libceph: resolve '0..' (ret=-3): failed [ 217.796665][ T7183] sg_write: data in/out 435164/162 bytes for SCSI command 0x0-- guessing data in; [ 217.796665][ T7183] program syz.0.391 not setting count and/or reply_len properly [ 218.030278][ T7190] netlink: 44 bytes leftover after parsing attributes in process `syz.4.393'. [ 218.030308][ T7190] netlink: 44 bytes leftover after parsing attributes in process `syz.4.393'. [ 218.030323][ T7190] netlink: 44 bytes leftover after parsing attributes in process `syz.4.393'. [ 218.370789][ T6695] veth0_vlan: entered promiscuous mode [ 218.383766][ T6695] veth1_vlan: entered promiscuous mode [ 218.470943][ T7198] netlink: 120 bytes leftover after parsing attributes in process `syz.4.396'. [ 218.470976][ T7198] netlink: 128 bytes leftover after parsing attributes in process `syz.4.396'. [ 218.537541][ T6695] veth0_macvtap: entered promiscuous mode [ 218.542915][ T6695] veth1_macvtap: entered promiscuous mode [ 218.596570][ T6695] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.764541][ T6695] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.815867][ T43] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.825151][ T43] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.825213][ T43] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.825247][ T43] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.620668][ T7212] loop2: detected capacity change from 0 to 7 [ 219.640532][ T7212] Dev loop2: unable to read RDB block 7 [ 219.640562][ T7212] loop2: AHDI p1 p2 p3 [ 219.640591][ T7212] loop2: partition table partially beyond EOD, truncated [ 219.640996][ T7212] loop2: p1 start 1818582900 is beyond EOD, truncated [ 219.641016][ T7212] loop2: p3 start 335544320 is beyond EOD, truncated [ 220.031120][ T7217] libceph: resolve '0..' (ret=-3): failed [ 220.161747][ T5817] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 220.912369][ T1498] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.912443][ T1498] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.946137][ T5817] usb 2-1: Using ep0 maxpacket: 8 [ 220.954137][ T5817] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.954166][ T5817] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 220.954189][ T5817] usb 2-1: config 0 interface 0 has no altsetting 0 [ 220.954218][ T5817] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0a2b, bcdDevice= 0.00 [ 220.954237][ T5817] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.070696][ T5817] usb 2-1: config 0 descriptor?? [ 222.145770][ T5817] usbhid 2-1:0.0: can't add hid device: -71 [ 222.167289][ T5817] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 222.232968][ T5817] usb 2-1: USB disconnect, device number 10 [ 222.241254][ T1369] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.241273][ T1369] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.326332][ T7226] netlink: 120 bytes leftover after parsing attributes in process `syz.0.406'. [ 222.326355][ T7226] netlink: 64 bytes leftover after parsing attributes in process `syz.0.406'. [ 225.493531][ T7250] binder: 7249:7250 ioctl c0306201 0 returned -14 [ 225.555139][ T7255] libceph: resolve '0..' (ret=-3): failed [ 227.284792][ T7267] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 227.301682][ T7266] netlink: 20 bytes leftover after parsing attributes in process `syz.4.418'. [ 227.320989][ T7264] netlink: 120 bytes leftover after parsing attributes in process `syz.3.417'. [ 227.321009][ T7264] netlink: 64 bytes leftover after parsing attributes in process `syz.3.417'. [ 227.421029][ T7266] vlan3: entered promiscuous mode [ 227.421051][ T7266] bond0: entered promiscuous mode [ 227.421063][ T7266] bond_slave_0: entered promiscuous mode [ 227.426598][ T7266] bond_slave_1: entered promiscuous mode [ 230.350905][ T7303] ªªªªªª;”gÓ’•–ô: renamed from vlan0 (while UP) [ 230.471543][ T7309] libceph: resolve '0..' (ret=-3): failed [ 231.856494][ T7325] netlink: 120 bytes leftover after parsing attributes in process `syz.4.432'. [ 231.856516][ T7325] netlink: 64 bytes leftover after parsing attributes in process `syz.4.432'. [ 231.864095][ T7326] netlink: 20 bytes leftover after parsing attributes in process `syz.0.433'. [ 232.459984][ T7326] vlan3: entered promiscuous mode [ 232.460007][ T7326] bond0: entered promiscuous mode [ 232.460019][ T7326] bond_slave_0: entered promiscuous mode [ 232.460215][ T7326] bond_slave_1: entered promiscuous mode [ 232.756446][ T6041] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 232.908849][ T6041] usb 4-1: unable to get BOS descriptor or descriptor too short [ 232.910984][ T6041] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 232.911000][ T6041] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 232.911026][ T6041] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 232.911046][ T6041] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 232.911066][ T6041] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 232.911079][ T6041] usb 4-1: config 1 interface 1 has no altsetting 0 [ 232.914414][ T6041] usb 4-1: string descriptor 0 read error: -22 [ 232.914489][ T6041] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 232.914502][ T6041] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.340641][ T6041] usb 4-1: 2:0: failed to get current value for ch 0 (-32) [ 233.772868][ T6041] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 235.321089][ T7369] libceph: resolve '0..' (ret=-3): failed [ 236.067649][ T6041] usb 4-1: USB disconnect, device number 3 [ 236.438630][ T7376] input: syz1 as /devices/virtual/input/input16 [ 236.824464][ T7390] loop2: detected capacity change from 0 to 7 [ 237.016079][ T7390] Dev loop2: unable to read RDB block 7 [ 237.016108][ T7390] loop2: AHDI p1 p2 p3 [ 237.016130][ T7390] loop2: partition table partially beyond EOD, truncated [ 237.066462][ T7390] loop2: p1 start 1818582900 is beyond EOD, truncated [ 237.066488][ T7390] loop2: p3 start 335544320 is beyond EOD, truncated [ 237.073806][ T7396] random: crng reseeded on system resumption [ 238.600541][ T7419] netlink: 44 bytes leftover after parsing attributes in process `syz.0.455'. [ 238.732656][ T7426] libceph: resolve '0..' (ret=-3): failed [ 240.996081][ T814] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 241.146024][ T814] usb 1-1: Using ep0 maxpacket: 32 [ 241.151399][ T814] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 241.151426][ T814] usb 1-1: config 0 has no interface number 0 [ 241.151469][ T814] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 241.160149][ T814] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 241.160177][ T814] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.160195][ T814] usb 1-1: Product: syz [ 241.160209][ T814] usb 1-1: Manufacturer: syz [ 241.160221][ T814] usb 1-1: SerialNumber: syz [ 241.219140][ T814] usb 1-1: config 0 descriptor?? [ 241.379448][ T814] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 241.379486][ T814] em28xx 1-1:0.132: Video interface 132 found: [ 241.689267][ T814] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 241.935215][ T7472] netlink: 28 bytes leftover after parsing attributes in process `syz.1.467'. [ 242.142164][ T814] em28xx 1-1:0.132: failed to get i2c transfer status from bridge register (error=-5) [ 242.142194][ T814] em28xx 1-1:0.132: board has no eeprom [ 242.196119][ T814] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 242.196201][ T814] em28xx 1-1:0.132: analog set to bulk mode. [ 242.199504][ T5794] em28xx 1-1:0.132: Registering V4L2 extension [ 242.455560][ T5794] em28xx 1-1:0.132: failed to trigger read from i2c address 0x4a (error=-19) [ 242.455675][ T5794] em28xx 1-1:0.132: failed to trigger read from i2c address 0x48 (error=-19) [ 242.455778][ T5794] em28xx 1-1:0.132: failed to trigger read from i2c address 0x42 (error=-19) [ 242.455887][ T5794] em28xx 1-1:0.132: failed to trigger read from i2c address 0x40 (error=-19) [ 242.489626][ T814] usb 1-1: USB disconnect, device number 7 [ 245.471448][ T7488] libceph: resolve '0..' (ret=-3): failed [ 245.598313][ T814] em28xx 1-1:0.132: Disconnecting em28xx [ 245.917143][ T5794] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 245.917166][ T5794] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 245.917178][ T5794] em28xx 1-1:0.132: No AC97 audio processor [ 245.996708][ T5794] usb 1-1: Decoder not found [ 245.996728][ T5794] em28xx 1-1:0.132: failed to create media graph [ 245.996759][ T5794] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 246.053767][ T5794] em28xx 1-1:0.132: Remote control support is not available for this card. [ 246.055696][ T814] em28xx 1-1:0.132: Closing input extension [ 246.094637][ T814] em28xx 1-1:0.132: Freeing device [ 246.389649][ T7511] netlink: 52 bytes leftover after parsing attributes in process `syz.0.478'. [ 246.522196][ T7512] netlink: 12 bytes leftover after parsing attributes in process `syz.1.473'. [ 246.545478][ T7512] 8021q: VLANs not supported on vcan0 [ 246.640473][ T7521] netlink: 28 bytes leftover after parsing attributes in process `syz.3.480'. [ 246.649352][ T7521] bond1: (slave vcan2): The slave device specified does not support setting the MAC address [ 246.652760][ T7521] bond1: (slave vcan2): Enslaving as a backup interface with an up link [ 248.891965][ T7549] netlink: 52 bytes leftover after parsing attributes in process `syz.4.491'. [ 249.016069][ T814] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 249.166252][ T814] usb 1-1: Using ep0 maxpacket: 32 [ 249.181942][ T814] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 249.181969][ T814] usb 1-1: config 0 has no interface number 0 [ 249.182012][ T814] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 249.210528][ T814] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 249.210556][ T814] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.210575][ T814] usb 1-1: Product: syz [ 249.210589][ T814] usb 1-1: Manufacturer: syz [ 249.210602][ T814] usb 1-1: SerialNumber: syz [ 249.237323][ T7560] netlink: 28 bytes leftover after parsing attributes in process `syz.4.494'. [ 249.262977][ T814] usb 1-1: config 0 descriptor?? [ 249.282893][ T814] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 249.282930][ T814] em28xx 1-1:0.132: Video interface 132 found: [ 249.306092][ T5794] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 250.489846][ T814] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 250.492098][ T5794] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 250.492120][ T5794] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 250.610868][ T5794] usb 2-1: string descriptor 0 read error: -22 [ 250.610990][ T5794] usb 2-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.40 [ 250.611004][ T5794] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.284947][ T814] em28xx 1-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 251.284979][ T814] em28xx 1-1:0.132: board has no eeprom [ 251.366188][ T814] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 251.367896][ T814] em28xx 1-1:0.132: analog set to bulk mode. [ 251.368232][ T5794] em28xx 1-1:0.132: Registering V4L2 extension [ 251.436925][ T814] usb 1-1: USB disconnect, device number 8 [ 251.440390][ T814] em28xx 1-1:0.132: Disconnecting em28xx [ 251.553168][ T7582] netlink: 20 bytes leftover after parsing attributes in process `syz.5.501'. [ 251.593937][ T5794] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 251.593953][ T5794] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 251.593960][ T5794] em28xx 1-1:0.132: No AC97 audio processor [ 251.632786][ T5794] usb 1-1: Decoder not found [ 251.632805][ T5794] em28xx 1-1:0.132: failed to create media graph [ 251.632836][ T5794] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 251.672778][ T7586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.673104][ T7586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.700107][ T5794] em28xx 1-1:0.132: Remote control support is not available for this card. [ 251.700164][ T814] em28xx 1-1:0.132: Closing input extension [ 251.893921][ T7590] netlink: 52 bytes leftover after parsing attributes in process `syz.3.504'. [ 251.986767][ T814] em28xx 1-1:0.132: Freeing device [ 252.984980][ T9] usb 2-1: USB disconnect, device number 11 [ 253.896053][ T814] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 253.952337][ T7616] netlink: 20 bytes leftover after parsing attributes in process `syz.0.513'. [ 254.056039][ T814] usb 4-1: Using ep0 maxpacket: 8 [ 254.061249][ T814] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.061276][ T814] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 254.061303][ T814] usb 4-1: config 0 interface 0 has no altsetting 0 [ 254.061336][ T814] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0a2b, bcdDevice= 0.00 [ 254.061357][ T814] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.248845][ T814] usb 4-1: config 0 descriptor?? [ 255.271800][ T814] usbhid 4-1:0.0: can't add hid device: -71 [ 255.271914][ T814] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 255.336754][ T814] usb 4-1: USB disconnect, device number 4 [ 255.417399][ T7631] netlink: 52 bytes leftover after parsing attributes in process `syz.1.517'. [ 256.144084][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.144151][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.341879][ T7642] netlink: 28 bytes leftover after parsing attributes in process `syz.4.521'. [ 258.738697][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 259.518677][ T9] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 259.518706][ T9] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 259.518725][ T9] usb 1-1: config 220 has no interface number 2 [ 259.518790][ T9] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 259.518816][ T9] usb 1-1: config 220 interface 0 has no altsetting 0 [ 259.518834][ T9] usb 1-1: config 220 interface 76 has no altsetting 0 [ 259.518851][ T9] usb 1-1: config 220 interface 1 has no altsetting 0 [ 259.539995][ T7668] netlink: 52 bytes leftover after parsing attributes in process `syz.3.529'. [ 259.599030][ T9] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 259.599060][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.599079][ T9] usb 1-1: Product: syz [ 259.599093][ T9] usb 1-1: Manufacturer: syz [ 259.599106][ T9] usb 1-1: SerialNumber: syz [ 260.035276][ T9] usb 1-1: selecting invalid altsetting 0 [ 260.075128][ T9] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 260.075163][ T9] uvcvideo 1-1:220.0: No valid video chain found. [ 260.111888][ T9] usb 1-1: selecting invalid altsetting 0 [ 260.111926][ T9] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 260.138566][ T9] usb 1-1: USB disconnect, device number 9 [ 260.221182][ T7680] netlink: 28 bytes leftover after parsing attributes in process `syz.1.534'. [ 260.236050][ T5794] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 260.476607][ T5794] usb 4-1: Using ep0 maxpacket: 8 [ 260.479218][ T5794] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.479245][ T5794] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 260.479271][ T5794] usb 4-1: config 0 interface 0 has no altsetting 0 [ 260.479302][ T5794] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0a2b, bcdDevice= 0.00 [ 260.479323][ T5794] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.578322][ T5794] usb 4-1: config 0 descriptor?? [ 261.577430][ T5794] usbhid 4-1:0.0: can't add hid device: -71 [ 261.577557][ T5794] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 261.595609][ T5794] usb 4-1: USB disconnect, device number 5 [ 262.986118][ T7694] netlink: 52 bytes leftover after parsing attributes in process `syz.0.541'. [ 263.123283][ T7697] loop2: detected capacity change from 0 to 7 [ 263.166777][ T7697] Dev loop2: unable to read RDB block 7 [ 263.166807][ T7697] loop2: AHDI p1 p2 p3 [ 263.166832][ T7697] loop2: partition table partially beyond EOD, truncated [ 263.167125][ T7697] loop2: p1 start 1818582900 is beyond EOD, truncated [ 263.167143][ T7697] loop2: p3 start 335544320 is beyond EOD, truncated [ 263.415447][ T7704] netlink: 28 bytes leftover after parsing attributes in process `syz.3.545'. [ 264.829992][ T36] audit: type=1326 audit(1776514508.853:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7716 comm="syz.4.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1264fc819 code=0x7ffc0000 [ 264.866815][ T36] audit: type=1326 audit(1776514508.913:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7716 comm="syz.4.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fb1264fc819 code=0x7ffc0000 [ 264.866878][ T36] audit: type=1326 audit(1776514508.913:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7716 comm="syz.4.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1264fc819 code=0x7ffc0000 [ 264.866915][ T36] audit: type=1326 audit(1776514508.913:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7716 comm="syz.4.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1264fc819 code=0x7ffc0000 [ 264.866951][ T36] audit: type=1326 audit(1776514508.913:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7716 comm="syz.4.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7fb1264fc819 code=0x7ffc0000 [ 264.866987][ T36] audit: type=1326 audit(1776514508.913:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7716 comm="syz.4.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1264fc819 code=0x7ffc0000 [ 264.867023][ T36] audit: type=1326 audit(1776514508.913:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7716 comm="syz.4.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1264fc819 code=0x7ffc0000 [ 264.867059][ T36] audit: type=1326 audit(1776514508.913:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7716 comm="syz.4.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fb1264fc819 code=0x7ffc0000 [ 264.872081][ T36] audit: type=1326 audit(1776514508.923:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7716 comm="syz.4.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1264fc819 code=0x7ffc0000 [ 264.872126][ T36] audit: type=1326 audit(1776514508.973:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7716 comm="syz.4.551" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1264fc819 code=0x7ffc0000 [ 265.092024][ T7722] netlink: 'syz.3.552': attribute type 32 has an invalid length. [ 265.092045][ T7722] netlink: 8 bytes leftover after parsing attributes in process `syz.3.552'. [ 265.092067][ T7722] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 265.366124][ T7624] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 265.516107][ T7624] usb 6-1: Using ep0 maxpacket: 8 [ 265.520236][ T7624] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.520265][ T7624] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 265.520291][ T7624] usb 6-1: config 0 interface 0 has no altsetting 0 [ 265.520325][ T7624] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0a2b, bcdDevice= 0.00 [ 265.520347][ T7624] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.598325][ T7624] usb 6-1: config 0 descriptor?? [ 266.294908][ T7624] usbhid 6-1:0.0: can't add hid device: -71 [ 266.295027][ T7624] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 266.327952][ T7624] usb 6-1: USB disconnect, device number 2 [ 267.236393][ T7755] netlink: 'syz.5.565': attribute type 32 has an invalid length. [ 267.236406][ T7755] netlink: 8 bytes leftover after parsing attributes in process `syz.5.565'. [ 267.236421][ T7755] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 267.986633][ T7769] Invalid source name [ 268.635291][ T7777] netlink: 100 bytes leftover after parsing attributes in process `syz.1.572'. [ 269.126055][ T42] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 269.151455][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 269.295944][ T42] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 269.295998][ T42] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 269.296019][ T42] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.324945][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 269.344191][ T42] usb 2-1: config 0 descriptor?? [ 269.358194][ T9] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.358222][ T9] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 269.358245][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 269.358274][ T9] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0a2b, bcdDevice= 0.00 [ 269.358293][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.459887][ T9] usb 1-1: config 0 descriptor?? [ 269.701440][ T42] pwc: Askey VC010 type 2 USB webcam detected. [ 269.921414][ T42] pwc: recv_control_msg error -32 req 02 val 2b00 [ 269.923391][ T42] pwc: recv_control_msg error -32 req 02 val 2700 [ 269.951567][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 269.951898][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 270.054412][ T9] usb 1-1: USB disconnect, device number 10 [ 270.155838][ T42] pwc: recv_control_msg error -32 req 04 val 1000 [ 270.171948][ T42] pwc: recv_control_msg error -32 req 04 val 1300 [ 270.174824][ T42] pwc: recv_control_msg error -32 req 04 val 1400 [ 270.175593][ T42] pwc: recv_control_msg error -32 req 02 val 2000 [ 270.196644][ T42] pwc: recv_control_msg error -32 req 02 val 2100 [ 270.197274][ T42] pwc: recv_control_msg error -32 req 04 val 1500 [ 270.197898][ T42] pwc: recv_control_msg error -32 req 02 val 2500 [ 270.200961][ T42] pwc: recv_control_msg error -32 req 02 val 2400 [ 270.207814][ T42] pwc: recv_control_msg error -32 req 02 val 2600 [ 270.227476][ T42] pwc: recv_control_msg error -32 req 02 val 2900 [ 270.236871][ T42] pwc: recv_control_msg error -32 req 02 val 2800 [ 270.238152][ T42] pwc: recv_control_msg error -32 req 04 val 1100 [ 270.245375][ T42] pwc: recv_control_msg error -32 req 04 val 1200 [ 270.938033][ T7797] netlink: 'syz.1.579': attribute type 32 has an invalid length. [ 270.938054][ T7797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.579'. [ 270.938076][ T7797] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 271.181288][ T42] pwc: Registered as video103. [ 271.356981][ T42] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input17 [ 272.448593][ T42] usb 2-1: USB disconnect, device number 12 [ 273.206429][ T5817] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 273.379052][ T5817] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 273.379105][ T5817] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 273.379127][ T5817] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.431257][ T5817] usb 4-1: config 0 descriptor?? [ 273.457409][ T5817] pwc: Askey VC010 type 2 USB webcam detected. [ 273.597462][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 273.904230][ T6041] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 273.904752][ T5817] pwc: recv_control_msg error -32 req 02 val 2b00 [ 273.932772][ T9] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 273.932799][ T9] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 273.932817][ T9] usb 6-1: config 220 has an invalid descriptor of length 255, skipping remainder of the config [ 273.932836][ T9] usb 6-1: config 220 has no interface number 2 [ 273.932917][ T9] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 273.932943][ T9] usb 6-1: config 220 interface 0 has no altsetting 0 [ 273.932961][ T9] usb 6-1: config 220 interface 76 has no altsetting 0 [ 273.932978][ T9] usb 6-1: config 220 interface 1 has no altsetting 0 [ 273.933557][ T5817] pwc: recv_control_msg error -32 req 02 val 2700 [ 273.976624][ T9] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 273.976656][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.976676][ T9] usb 6-1: Product: syz [ 273.976690][ T9] usb 6-1: Manufacturer: syz [ 273.976704][ T9] usb 6-1: SerialNumber: syz [ 274.141894][ T5817] pwc: recv_control_msg error -32 req 04 val 1000 [ 274.143154][ T5817] pwc: recv_control_msg error -32 req 04 val 1300 [ 274.143647][ T5817] pwc: recv_control_msg error -32 req 04 val 1400 [ 274.146256][ T5817] pwc: recv_control_msg error -32 req 02 val 2000 [ 274.146881][ T5817] pwc: recv_control_msg error -32 req 02 val 2100 [ 274.156475][ T5817] pwc: recv_control_msg error -32 req 04 val 1500 [ 274.166137][ T5817] pwc: recv_control_msg error -32 req 02 val 2500 [ 274.206420][ T5817] pwc: recv_control_msg error -32 req 02 val 2400 [ 274.210818][ T5817] pwc: recv_control_msg error -32 req 02 val 2600 [ 274.211986][ T6041] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 274.212034][ T6041] usb 5-1: config 1 interface 0 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 274.212119][ T6041] usb 5-1: config 1 interface 0 has no altsetting 0 [ 274.223846][ T5817] pwc: recv_control_msg error -32 req 02 val 2900 [ 274.275570][ T5817] pwc: recv_control_msg error -32 req 02 val 2800 [ 274.301465][ T5817] pwc: recv_control_msg error -32 req 04 val 1100 [ 274.304051][ T5817] pwc: recv_control_msg error -32 req 04 val 1200 [ 274.437372][ T6041] usb 5-1: string descriptor 0 read error: -22 [ 274.437520][ T6041] usb 5-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.40 [ 274.437533][ T6041] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.525678][ T5817] pwc: Registered as video103. [ 274.608885][ T5817] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input18 [ 274.613008][ T9] usb 6-1: selecting invalid altsetting 0 [ 274.615045][ T9] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 274.615074][ T9] uvcvideo 6-1:220.0: No valid video chain found. [ 274.672438][ T6041] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 274.728854][ T9] usb 6-1: selecting invalid altsetting 0 [ 274.728892][ T9] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 274.776746][ T9] usb 6-1: USB disconnect, device number 3 [ 274.821419][ T5817] usb 4-1: USB disconnect, device number 6 [ 275.103427][ T7837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.103979][ T7837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.381113][ T7624] usb 5-1: USB disconnect, device number 5 [ 278.682535][ T7867] Invalid source name [ 282.056038][ T6041] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 282.204356][ T7890] netlink: 32 bytes leftover after parsing attributes in process `syz.3.614'. [ 282.207314][ T6041] usb 5-1: Using ep0 maxpacket: 16 [ 282.209446][ T6041] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 282.209489][ T6041] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 282.209508][ T6041] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 282.211655][ T6041] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 282.211679][ T6041] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.211696][ T6041] usb 5-1: Product: syz [ 282.211709][ T6041] usb 5-1: Manufacturer: syz [ 282.211722][ T6041] usb 5-1: SerialNumber: syz [ 282.251482][ T6041] usb 5-1: config 0 descriptor?? [ 282.266267][ T6041] mcba_usb 5-1:0.0: Can't find endpoints [ 282.533829][ T9] usb 5-1: USB disconnect, device number 6 [ 282.666093][ T6041] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 282.796727][ T6041] usb 2-1: device descriptor read/64, error -71 [ 283.810538][ T6041] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 283.966059][ T6041] usb 2-1: device descriptor read/64, error -71 [ 284.114761][ T6041] usb usb2-port1: attempt power cycle [ 284.405043][ T36] kauditd_printk_skb: 7 callbacks suppressed [ 284.405060][ T36] audit: type=1326 audit(1776514528.503:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7929 comm="syz.5.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fb584c819 code=0x7ffc0000 [ 284.405404][ T36] audit: type=1326 audit(1776514528.503:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7929 comm="syz.5.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fb584c819 code=0x7ffc0000 [ 284.428769][ T36] audit: type=1326 audit(1776514528.523:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7929 comm="syz.5.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fb584c819 code=0x7ffc0000 [ 284.428815][ T36] audit: type=1326 audit(1776514528.533:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7929 comm="syz.5.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fb584c819 code=0x7ffc0000 [ 284.428849][ T36] audit: type=1326 audit(1776514528.533:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7929 comm="syz.5.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0fb584c819 code=0x7ffc0000 [ 284.428886][ T36] audit: type=1326 audit(1776514528.533:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7929 comm="syz.5.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fb584c819 code=0x7ffc0000 [ 284.431094][ T36] audit: type=1326 audit(1776514528.533:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7929 comm="syz.5.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fb584c819 code=0x7ffc0000 [ 284.431135][ T36] audit: type=1326 audit(1776514528.533:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7929 comm="syz.5.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f0fb584c819 code=0x7ffc0000 [ 284.438751][ T36] audit: type=1326 audit(1776514528.543:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7929 comm="syz.5.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fb584c819 code=0x7ffc0000 [ 284.444390][ T36] audit: type=1326 audit(1776514528.543:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7929 comm="syz.5.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fb584c819 code=0x7ffc0000 [ 284.546136][ T6041] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 284.566982][ T6041] usb 2-1: device descriptor read/8, error -71 [ 284.890857][ T6041] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 284.960450][ T6041] usb 2-1: device descriptor read/8, error -71 [ 285.444224][ T42] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 285.445097][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 285.461175][ T6041] usb usb2-port1: unable to enumerate USB device [ 285.524326][ T6041] libceph: connect (1)[c::]:6789 error -101 [ 285.526086][ T6041] libceph: mon0 (1)[c::]:6789 connect error [ 285.595575][ T7916] ceph: No mds server is up or the cluster is laggy [ 285.616328][ T42] usb 1-1: device descriptor read/64, error -32 [ 285.625554][ T7941] netlink: 56 bytes leftover after parsing attributes in process `syz.1.631'. [ 285.625585][ T7941] netlink: 56 bytes leftover after parsing attributes in process `syz.1.631'. [ 285.625600][ T7941] netlink: 56 bytes leftover after parsing attributes in process `syz.1.631'. [ 285.827540][ T7941] netlink: 56 bytes leftover after parsing attributes in process `syz.1.631'. [ 285.827568][ T7941] netlink: 56 bytes leftover after parsing attributes in process `syz.1.631'. [ 285.827583][ T7941] netlink: 56 bytes leftover after parsing attributes in process `syz.1.631'. [ 285.840319][ T6041] libceph: connect (1)[c::]:6789 error -101 [ 285.840498][ T6041] libceph: mon0 (1)[c::]:6789 connect error [ 285.876174][ T42] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 286.046089][ T42] usb 1-1: Using ep0 maxpacket: 16 [ 286.049887][ T42] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 286.049911][ T42] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.049928][ T42] usb 1-1: config 0 has no interface number 0 [ 286.049968][ T42] usb 1-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 286.049989][ T42] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.107836][ T42] usb 1-1: config 0 descriptor?? [ 286.250341][ T42] uvcvideo 1-1:0.64: probe with driver uvcvideo failed with error -22 [ 286.364510][ T42] usb 1-1: USB disconnect, device number 12 [ 286.434491][ T7941] netlink: 56 bytes leftover after parsing attributes in process `syz.1.631'. [ 286.434510][ T7941] netlink: 56 bytes leftover after parsing attributes in process `syz.1.631'. [ 286.434518][ T7941] netlink: 56 bytes leftover after parsing attributes in process `syz.1.631'. [ 286.756006][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 287.006056][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 287.070699][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.202441][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 287.202470][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 287.202486][ T9] usb 4-1: SerialNumber: syz [ 287.288998][ T9] usb 4-1: config 0 descriptor?? [ 287.365296][ T9] uvcvideo 4-1:0.0: Found UVC 0.00 device (05ac:8501) [ 287.365330][ T9] uvcvideo 4-1:0.0: No valid video chain found. [ 290.430883][ T7984] netlink: 56 bytes leftover after parsing attributes in process `syz.4.644'. [ 290.430909][ T7984] netlink: 56 bytes leftover after parsing attributes in process `syz.4.644'. [ 290.430925][ T7984] netlink: 56 bytes leftover after parsing attributes in process `syz.4.644'. [ 291.085757][ T7984] netlink: 56 bytes leftover after parsing attributes in process `syz.4.644'. [ 291.085785][ T7984] netlink: 56 bytes leftover after parsing attributes in process `syz.4.644'. [ 291.085801][ T7984] netlink: 56 bytes leftover after parsing attributes in process `syz.4.644'. [ 291.224180][ T7984] netlink: 56 bytes leftover after parsing attributes in process `syz.4.644'. [ 291.224208][ T7984] netlink: 56 bytes leftover after parsing attributes in process `syz.4.644'. [ 291.224224][ T7984] netlink: 56 bytes leftover after parsing attributes in process `syz.4.644'. [ 291.458018][ T9] usb 4-1: USB disconnect, device number 7 [ 291.933137][ T8005] netlink: 'syz.1.652': attribute type 32 has an invalid length. [ 291.933157][ T8005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.652'. [ 291.933178][ T8005] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 292.876064][ T5906] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 293.027219][ T5906] usb 2-1: Using ep0 maxpacket: 8 [ 293.127161][ T5906] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 293.129042][ T5906] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 293.129058][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 293.129068][ T5906] usb 2-1: SerialNumber: syz [ 293.154942][ T5906] usb 2-1: config 0 descriptor?? [ 293.302291][ T5906] uvcvideo 2-1:0.0: Found UVC 0.00 device (05ac:8501) [ 293.302324][ T5906] uvcvideo 2-1:0.0: No valid video chain found. [ 293.371020][ T8041] netlink: 'syz.0.665': attribute type 32 has an invalid length. [ 293.371051][ T8041] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 294.093591][ T5811] Bluetooth: hci5: command 0x0406 tx timeout [ 295.612243][ T8073] __nla_validate_parse: 12 callbacks suppressed [ 295.612261][ T8073] netlink: 56 bytes leftover after parsing attributes in process `syz.0.677'. [ 295.612278][ T8073] netlink: 56 bytes leftover after parsing attributes in process `syz.0.677'. [ 295.612293][ T8073] netlink: 56 bytes leftover after parsing attributes in process `syz.0.677'. [ 295.918274][ T42] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 296.056495][ T5889] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 296.080228][ T42] usb 5-1: config 1 interface 0 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 296.081806][ T42] usb 5-1: config 1 interface 0 has no altsetting 0 [ 296.108930][ T42] usb 5-1: string descriptor 0 read error: -22 [ 296.109054][ T42] usb 5-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.40 [ 296.109075][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.207452][ T5889] usb 1-1: Using ep0 maxpacket: 8 [ 296.209118][ T42] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 296.213968][ T5889] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.213991][ T5889] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 296.214004][ T5889] usb 1-1: config 0 interface 0 has no altsetting 0 [ 296.214023][ T5889] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0a2b, bcdDevice= 0.00 [ 296.214034][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.286620][ T5889] usb 1-1: config 0 descriptor?? [ 296.426106][ T814] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 296.566435][ T814] usb 4-1: device descriptor read/64, error -71 [ 297.047217][ T8086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.056520][ T5889] usbhid 1-1:0.0: can't add hid device: -71 [ 297.056627][ T5889] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 297.078648][ T9] usb 2-1: USB disconnect, device number 17 [ 297.088238][ T814] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 297.094315][ T5889] usb 1-1: USB disconnect, device number 13 [ 297.111182][ T8086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.287165][ T814] usb 4-1: device descriptor read/64, error -71 [ 297.396650][ T814] usb usb4-port1: attempt power cycle [ 297.477160][ T8092] netlink: 44 bytes leftover after parsing attributes in process `syz.5.685'. [ 297.516079][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 297.666445][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 297.670367][ T9] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 297.670392][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 297.670409][ T9] usb 2-1: config 0 has no interface number 0 [ 297.670453][ T9] usb 2-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 297.670475][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.724968][ T9] usb 2-1: config 0 descriptor?? [ 297.744197][ T9] uvcvideo 2-1:0.64: probe with driver uvcvideo failed with error -22 [ 297.777308][ T814] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 298.039512][ T9] usb 2-1: USB disconnect, device number 18 [ 298.191357][ T814] usb 4-1: device descriptor read/8, error -71 [ 299.770970][ T814] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 299.776697][ T42] usb 5-1: USB disconnect, device number 7 [ 299.915036][ T8120] netlink: 108 bytes leftover after parsing attributes in process `syz.1.695'. [ 299.976010][ T814] usb 4-1: device not accepting address 11, error -71 [ 299.976359][ T814] usb usb4-port1: unable to enumerate USB device [ 299.982910][ T8116] netlink: 44 bytes leftover after parsing attributes in process `syz.0.696'. [ 300.132156][ T8124] netlink: 'syz.1.697': attribute type 32 has an invalid length. [ 300.132175][ T8124] netlink: 8 bytes leftover after parsing attributes in process `syz.1.697'. [ 300.132200][ T8124] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 301.006304][ T5948] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 301.156125][ T5948] usb 2-1: device descriptor read/64, error -71 [ 301.479781][ T6041] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 302.176046][ T5948] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 302.258642][ T6041] usb 1-1: config 1 interface 0 altsetting 13 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 302.258677][ T6041] usb 1-1: config 1 interface 0 has no altsetting 0 [ 302.263072][ T6041] usb 1-1: string descriptor 0 read error: -22 [ 302.263207][ T6041] usb 1-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.40 [ 302.263229][ T6041] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.318236][ T5948] usb 2-1: device descriptor read/64, error -71 [ 302.401309][ T6041] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 302.429389][ T5948] usb usb2-port1: attempt power cycle [ 302.446292][ T8147] loop2: detected capacity change from 0 to 7 [ 302.453912][ T8147] Dev loop2: unable to read RDB block 7 [ 302.453940][ T8147] loop2: AHDI p1 p2 p3 [ 302.453964][ T8147] loop2: partition table partially beyond EOD, truncated [ 302.454233][ T8147] loop2: p1 start 1818582900 is beyond EOD, truncated [ 302.454251][ T8147] loop2: p3 start 335544320 is beyond EOD, truncated [ 302.646148][ T42] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 302.686011][ T6041] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 302.788359][ T5948] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 302.806053][ T42] usb 6-1: Using ep0 maxpacket: 8 [ 302.806689][ T5948] usb 2-1: device descriptor read/8, error -71 [ 302.807858][ T42] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.807882][ T42] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 302.807903][ T42] usb 6-1: config 0 interface 0 has no altsetting 0 [ 302.807921][ T42] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0a2b, bcdDevice= 0.00 [ 302.807933][ T42] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.811223][ T42] usb 6-1: config 0 descriptor?? [ 302.874330][ T6041] usb 4-1: Using ep0 maxpacket: 16 [ 302.889366][ T6041] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 302.889392][ T6041] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 302.889417][ T6041] usb 4-1: config 0 has no interface number 0 [ 302.889461][ T6041] usb 4-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 302.889484][ T6041] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.944253][ T5889] usb 1-1: USB disconnect, device number 14 [ 302.955307][ T6041] usb 4-1: config 0 descriptor?? [ 302.975550][ T6041] uvcvideo 4-1:0.64: probe with driver uvcvideo failed with error -22 [ 303.066064][ T5948] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 303.087799][ T5948] usb 2-1: device descriptor read/8, error -71 [ 303.196519][ T5948] usb usb2-port1: unable to enumerate USB device [ 303.251818][ T814] usb 4-1: USB disconnect, device number 12 [ 303.448041][ T8157] netlink: 44 bytes leftover after parsing attributes in process `syz.0.710'. [ 303.458058][ T42] usbhid 6-1:0.0: can't add hid device: -71 [ 303.458167][ T42] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 303.473890][ T42] usb 6-1: USB disconnect, device number 4 [ 304.186057][ T6041] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 304.338327][ T6041] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 304.338358][ T6041] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.343255][ T6041] usb 2-1: config 0 descriptor?? [ 304.428750][ T6041] cp210x 2-1:0.0: cp210x converter detected [ 305.327100][ T6041] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 306.410718][ T6041] usb 2-1: cp210x converter now attached to ttyUSB0 [ 306.432898][ T6041] usb 2-1: USB disconnect, device number 23 [ 306.522553][ T6041] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 306.626377][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 306.646580][ T6041] cp210x 2-1:0.0: device disconnected [ 306.776276][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 306.779381][ T9] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 306.779405][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 306.779424][ T9] usb 5-1: config 0 has no interface number 0 [ 306.779468][ T9] usb 5-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 306.779490][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.833386][ T9] usb 5-1: config 0 descriptor?? [ 306.848917][ T9] uvcvideo 5-1:0.64: probe with driver uvcvideo failed with error -22 [ 307.668000][ T5889] usb 5-1: USB disconnect, device number 8 [ 308.212635][ T8224] netlink: 28 bytes leftover after parsing attributes in process `syz.1.738'. [ 308.348646][ T8230] netlink: 36 bytes leftover after parsing attributes in process `syz.5.741'. [ 309.635621][ T8245] loop2: detected capacity change from 0 to 7 [ 309.662182][ T8245] Dev loop2: unable to read RDB block 7 [ 309.662211][ T8245] loop2: AHDI p1 p2 p3 [ 309.662237][ T8245] loop2: partition table partially beyond EOD, truncated [ 309.662552][ T8245] loop2: p1 start 1818582900 is beyond EOD, truncated [ 309.662571][ T8245] loop2: p3 start 335544320 is beyond EOD, truncated [ 309.700238][ T8253] netlink: 4 bytes leftover after parsing attributes in process `syz.0.747'. [ 310.745362][ T8289] netlink: 260 bytes leftover after parsing attributes in process `syz.0.765'. [ 311.374899][ T5948] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 311.492829][ T8310] netlink: 44 bytes leftover after parsing attributes in process `syz.0.773'. [ 311.492854][ T8310] netlink: 44 bytes leftover after parsing attributes in process `syz.0.773'. [ 311.492868][ T8310] netlink: 44 bytes leftover after parsing attributes in process `syz.0.773'. [ 311.556108][ T5948] usb 5-1: Using ep0 maxpacket: 32 [ 311.558174][ T5948] usb 5-1: config 0 has no interfaces? [ 311.561554][ T5948] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 311.561581][ T5948] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.561600][ T5948] usb 5-1: Product: syz [ 311.561614][ T5948] usb 5-1: Manufacturer: syz [ 311.561628][ T5948] usb 5-1: SerialNumber: syz [ 311.612857][ T5948] usb 5-1: config 0 descriptor?? [ 311.724256][ T8315] netlink: 260 bytes leftover after parsing attributes in process `syz.0.777'. [ 312.950627][ T8347] netlink: 260 bytes leftover after parsing attributes in process `syz.1.788'. [ 313.235587][ T8354] netlink: 20 bytes leftover after parsing attributes in process `syz.0.793'. [ 313.916443][ T8379] netlink: 260 bytes leftover after parsing attributes in process `syz.5.803'. [ 314.208385][ T5948] usb 5-1: USB disconnect, device number 9 [ 315.092165][ T8404] netlink: 260 bytes leftover after parsing attributes in process `syz.0.814'. [ 317.085714][ T8435] libceph: resolve '0..' (ret=-3): failed [ 317.188528][ T8440] netlink: 4 bytes leftover after parsing attributes in process `syz.5.827'. [ 317.431963][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.432030][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.792829][ T36] kauditd_printk_skb: 2 callbacks suppressed [ 317.792846][ T36] audit: type=1326 audit(1776514561.893:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8453 comm="syz.0.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f3c8c819 code=0x7ffc0000 [ 317.828595][ T36] audit: type=1326 audit(1776514561.923:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8453 comm="syz.0.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f3c8c819 code=0x7ffc0000 [ 317.830603][ T36] audit: type=1326 audit(1776514561.933:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8453 comm="syz.0.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fe7f3c8c819 code=0x7ffc0000 [ 317.835316][ T36] audit: type=1326 audit(1776514561.933:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8453 comm="syz.0.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f3c8c819 code=0x7ffc0000 [ 317.835359][ T36] audit: type=1326 audit(1776514561.933:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8453 comm="syz.0.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f3c8c819 code=0x7ffc0000 [ 317.857086][ T36] audit: type=1326 audit(1776514561.963:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8453 comm="syz.0.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7fe7f3c8c819 code=0x7ffc0000 [ 317.857130][ T36] audit: type=1326 audit(1776514561.963:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8453 comm="syz.0.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f3c8c819 code=0x7ffc0000 [ 317.857165][ T36] audit: type=1326 audit(1776514561.963:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8453 comm="syz.0.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fe7f3c8c819 code=0x7ffc0000 [ 317.857199][ T36] audit: type=1326 audit(1776514561.963:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8453 comm="syz.0.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7f3c8c819 code=0x7ffc0000 [ 317.857233][ T36] audit: type=1326 audit(1776514561.963:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8453 comm="syz.0.833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe7f3c8c819 code=0x7ffc0000 [ 320.635617][ T8505] netlink: 68 bytes leftover after parsing attributes in process `syz.1.852'. [ 322.323957][ T8532] libceph: resolve '0..' (ret=-3): failed [ 324.485345][ T8563] libceph: resolve '0..' (ret=-3): failed [ 326.301118][ T8599] netlink: 68 bytes leftover after parsing attributes in process `syz.1.876'. [ 329.650288][ T8634] netlink: 68 bytes leftover after parsing attributes in process `syz.0.907'. [ 331.331211][ T5889] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 331.589927][ T8667] netlink: 68 bytes leftover after parsing attributes in process `syz.4.920'. [ 331.596371][ T5889] usb 2-1: device descriptor read/64, error -71 [ 332.596039][ T5889] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 332.727143][ T8683] netlink: 44 bytes leftover after parsing attributes in process `syz.5.926'. [ 332.756084][ T5889] usb 2-1: device descriptor read/64, error -71 [ 332.924424][ T8689] netlink: 'syz.3.927': attribute type 30 has an invalid length. [ 332.924444][ T8689] netlink: 8 bytes leftover after parsing attributes in process `syz.3.927'. [ 332.924470][ T8689] bond0: option arp_missed_max: invalid value (0) [ 332.924486][ T8689] bond0: option arp_missed_max: allowed values 1 - 255 [ 332.989013][ T5889] usb usb2-port1: attempt power cycle [ 333.666348][ T8705] netlink: 68 bytes leftover after parsing attributes in process `syz.1.934'. [ 333.933746][ T8714] netlink: 'syz.0.939': attribute type 32 has an invalid length. [ 333.933766][ T8714] netlink: 8 bytes leftover after parsing attributes in process `syz.0.939'. [ 333.933791][ T8714] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 336.053226][ T8740] netlink: 44 bytes leftover after parsing attributes in process `syz.1.947'. [ 336.482332][ T8749] netlink: 68 bytes leftover after parsing attributes in process `syz.0.951'. [ 337.442125][ T8781] netlink: 68 bytes leftover after parsing attributes in process `syz.0.964'. [ 337.885125][ T8799] netlink: 28 bytes leftover after parsing attributes in process `syz.0.972'. [ 337.891441][ T8799] netlink: 8 bytes leftover after parsing attributes in process `syz.0.972'. [ 337.891460][ T8799] netlink: 4 bytes leftover after parsing attributes in process `syz.0.972'. [ 339.126061][ T5948] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 339.285954][ T5948] usb 5-1: Using ep0 maxpacket: 32 [ 339.288004][ T5948] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 339.288029][ T5948] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 339.288047][ T5948] usb 5-1: config 0 has no interface number 0 [ 339.291897][ T5948] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 339.291936][ T5948] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.291955][ T5948] usb 5-1: Product: syz [ 339.291969][ T5948] usb 5-1: Manufacturer: syz [ 339.291983][ T5948] usb 5-1: SerialNumber: syz [ 339.380852][ T5948] usb 5-1: config 0 descriptor?? [ 339.820896][ T8827] netlink: 16 bytes leftover after parsing attributes in process `syz.1.982'. [ 340.984441][ T8834] netlink: 28 bytes leftover after parsing attributes in process `syz.0.988'. [ 340.985079][ T8834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.988'. [ 340.985096][ T8834] netlink: 4 bytes leftover after parsing attributes in process `syz.0.988'. [ 341.091766][ T8836] netlink: 68 bytes leftover after parsing attributes in process `syz.5.989'. [ 341.503733][ T8852] netlink: 44 bytes leftover after parsing attributes in process `syz.0.995'. [ 342.651802][ T5897] usb 5-1: USB disconnect, device number 10 [ 342.670567][ T8863] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1000'. [ 342.671234][ T8863] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1000'. [ 342.671251][ T8863] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1000'. [ 342.737357][ T8867] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1002'. [ 344.285766][ T5820] BUG: kernel NULL pointer dereference, address: 0000000000000010 [ 344.285784][ T5820] #PF: supervisor read access in kernel mode [ 344.285793][ T5820] #PF: error_code(0x0000) - not-present page [ 344.285802][ T5820] PGD 8000000038ca3067 P4D 8000000038ca3067 PUD 0 [ 344.285830][ T5820] Oops: Oops: 0000 [#1] SMP KASAN PTI [ 344.285857][ T5820] CPU: 0 UID: 0 PID: 5820 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 344.285876][ T5820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 344.285887][ T5820] Workqueue: hci4 hci_rx_work [ 344.285923][ T5820] RIP: 0010:kcov_remote_start+0x2a1/0x710 [ 344.285952][ T5820] Code: 8d 8d 4c 8b b8 00 04 72 92 bd 00 00 04 00 eb 4f 41 8b ae a4 00 00 00 49 c7 c7 a0 56 02 8e 4d 8b 3f 49 81 ff a0 56 02 8e 74 4c <41> 39 6f 10 75 ee 4c 89 ff e8 71 ea e5 02 84 c0 74 0e 49 8b 07 49 [ 344.285967][ T5820] RSP: 0018:ffffc900051c7a10 EFLAGS: 00010207 [ 344.285980][ T5820] RAX: 0000000000000000 RBX: ffff88804190dc40 RCX: 0000000000000000 [ 344.285991][ T5820] RDX: 0000000025fd0600 RSI: 0000000000000001 RDI: ffffffff8ba72a80 [ 344.286001][ T5820] RBP: 0000000000100000 R08: ffffffff8b2ce750 R09: ffffffff8dfc80c0 [ 344.286012][ T5820] R10: dffffc0000000000 R11: fffffbfff1f1711f R12: 0000000000000002 [ 344.286024][ T5820] R13: 0000000000000001 R14: ffff88801f6d8f00 R15: 0000000000000000 [ 344.286034][ T5820] FS: 0000000000000000(0000) GS:ffff888126109000(0000) knlGS:0000000000000000 [ 344.286048][ T5820] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 344.286106][ T5820] CR2: 0000000000000010 CR3: 000000003de94000 CR4: 00000000003526f0 [ 344.286120][ T5820] Call Trace: [ 344.286127][ T5820] [ 344.286135][ T5820] hci_rx_work+0x10f/0x1040 [ 344.286161][ T5820] ? process_scheduled_works+0xa70/0x1860 [ 344.286188][ T5820] process_scheduled_works+0xb5d/0x1860 [ 344.286224][ T5820] ? __pfx_process_scheduled_works+0x10/0x10 [ 344.286251][ T5820] ? assign_work+0x3d5/0x5e0 [ 344.286277][ T5820] worker_thread+0xa53/0xfc0 [ 344.286302][ T5820] kthread+0x388/0x470 [ 344.286321][ T5820] ? __pfx_worker_thread+0x10/0x10 [ 344.286335][ T5820] ? __pfx_kthread+0x10/0x10 [ 344.286354][ T5820] ret_from_fork+0x514/0xb70 [ 344.286382][ T5820] ? __pfx_ret_from_fork+0x10/0x10 [ 344.286407][ T5820] ? __switch_to+0xc79/0x1410 [ 344.286431][ T5820] ? __pfx_kthread+0x10/0x10 [ 344.286448][ T5820] ret_from_fork_asm+0x1a/0x30 [ 344.286471][ T5820] [ 344.286477][ T5820] Modules linked in: [ 344.286501][ T5820] CR2: 0000000000000010 [ 344.286513][ T5820] ---[ end trace 0000000000000000 ]--- [ 344.286521][ T5820] RIP: 0010:kcov_remote_start+0x2a1/0x710 [ 344.286545][ T5820] Code: 8d 8d 4c 8b b8 00 04 72 92 bd 00 00 04 00 eb 4f 41 8b ae a4 00 00 00 49 c7 c7 a0 56 02 8e 4d 8b 3f 49 81 ff a0 56 02 8e 74 4c <41> 39 6f 10 75 ee 4c 89 ff e8 71 ea e5 02 84 c0 74 0e 49 8b 07 49 [ 344.286557][ T5820] RSP: 0018:ffffc900051c7a10 EFLAGS: 00010207 [ 344.286570][ T5820] RAX: 0000000000000000 RBX: ffff88804190dc40 RCX: 0000000000000000 [ 344.286580][ T5820] RDX: 0000000025fd0600 RSI: 0000000000000001 RDI: ffffffff8ba72a80 [ 344.286592][ T5820] RBP: 0000000000100000 R08: ffffffff8b2ce750 R09: ffffffff8dfc80c0 [ 344.286604][ T5820] R10: dffffc0000000000 R11: fffffbfff1f1711f R12: 0000000000000002 [ 344.286616][ T5820] R13: 0000000000000001 R14: ffff88801f6d8f00 R15: 0000000000000000 [ 344.286627][ T5820] FS: 0000000000000000(0000) GS:ffff888126109000(0000) knlGS:0000000000000000 [ 344.286640][ T5820] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 344.286651][ T5820] CR2: 0000000000000010 CR3: 000000003de94000 CR4: 00000000003526f0 [ 344.286666][ T5820] Kernel panic - not syncing: Fatal exception [ 344.287002][ T5820] Kernel Offset: disabled