last executing test programs: 9m23.962695765s ago: executing program 1 (id=2419): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x568, 0x0, 0x2e0, 0x428, 0x2e0, 0x2e0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c8) r0 = socket$inet(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) setsockopt$inet_buf(r0, 0x0, 0x1, &(0x7f0000000300)="80000100000000000000000100000000", 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount$nfs(&(0x7f0000000080)='127.0.0.1:/export\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,timeo=10,retrans=1\x00'}]}) r1 = accept$inet(r0, 0x0, 0x0) read(r1, 0x0, 0x0) read(r1, &(0x7f0000000304), 0x4) 9m22.961373747s ago: executing program 1 (id=2435): ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000140)='port', 0x400, &(0x7f0000000180)={@align=0x8000, {0x10, 0x5, 0x80, 0xd57}}, 0x8000, &(0x7f00000001c0), 0x0}) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mount$9p_tcp(&(0x7f0000000640), 0x0, &(0x7f00000006c0), 0x8010, &(0x7f0000000300)=ANY=[@ANYBLOB="7472616e733d7463702c706f72743d3078303030303030303030303030346532322c70726976706f72742c0004d6fe9f773da921d86d07f15b229baa73e57dfe1d51"]) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000940)={0x0, 0xbb1, 0x4, 0x3, 0xa9}, &(0x7f00000009c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf2d, 0x8, 0x0, 0x178}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x82cd, 0x20, 0x1, 0x24c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd81e, 0x80, 0x1, 0x393}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb84f, 0x20, 0x2, 0x39}}], 0x4, &(0x7f0000001c40)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, 0x0, '\x00', {0x1, 0x6ee, 0x0, &(0x7f0000000c40)=@buf_max_buf="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"}}, &(0x7f0000001cc0)) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000214000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x50}, @NFTA_NG_TYPE={0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./ffs\x00', 0x1ff) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r7, &(0x7f00000001c0)='functionfs\x00', 0xb) read(r6, &(0x7f0000000100), 0xb) mount(&(0x7f0000000240)=@filename='usb0\x00', &(0x7f0000000280)='./ffs\x00', &(0x7f0000000100), 0x0, 0x0) ioctl$XFS_IOC_FSINUMBERS(0xffffffffffffffff, 0xc0205867, &(0x7f0000000900)={&(0x7f00000002c0)=0x79, 0x2, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f00000008c0)}) 9m18.046413055s ago: executing program 1 (id=2459): openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/gser.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000000380)='dummy_udc.0', 0xb) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='\n', 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@mpls_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x12, {0xa, "f5d6a6c4b0639b11374230874419"}}]}, 0x30}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="bbbbbbbbbbbbc59a1b7447f53fe76bb1121121be6cc815dd6003000000206cfffe8000000000000000080000000000aa000c000000007349384346f85bc22c22054aad9b3be48b4a62590e51bf97e2431e1c1b5b2a1adf9da6ae757747180e8be950a5484efc9339223b13f0c6605cb51463e1afe677187bc8f04bb4803af5d35160e591d3194faf817715c2f4529a02ed32c7e7a8ce3f0f"], 0x0) 9m14.35497779s ago: executing program 1 (id=2472): ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000040)={'team_slave_1\x00', {0x2, 0x0, @initdev}}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) syz_emit_ethernet(0x52, &(0x7f0000002700)=ANY=[@ANYBLOB="5b37182347bcffffffffffff88a800004305000086dd60f7537200140600ff02000000000000000000000000000100000000000000000000ffff0000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000000a89eb81a"], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 9m4.472404915s ago: executing program 1 (id=2498): ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mount$9p_tcp(&(0x7f0000000640), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000300)=ANY=[@ANYBLOB="7472616e733d7463702c706f72743d3078303030303030303030303030346532322c70726976706f72742c0004d6fe9f773da921d86d07f15b229baa73"]) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000940)={0x0, 0xbb1, 0x4, 0x3, 0xa9}, &(0x7f00000009c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf2d, 0x8, 0x0, 0x178}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x82cd, 0x20, 0x1, 0x24c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd81e, 0x80, 0x1, 0x393}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb84f, 0x20, 0x2, 0x39}}], 0x4, &(0x7f0000001c40)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, 0x0, '\x00', {0x1, 0x6ee, 0x0, &(0x7f0000000c40)=@buf_max_buf="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"}}, &(0x7f0000001cc0)) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r4, 0xc, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x6c}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r7, &(0x7f00000001c0)='funct', 0x5) read(r6, &(0x7f0000000100), 0xb) mount(&(0x7f0000000240)=@filename='usb0\x00', &(0x7f0000000280)='./ffs\x00', &(0x7f0000000100), 0x0, 0x0) 9m1.189691857s ago: executing program 1 (id=2501): openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000000380)='dummy_udc.0', 0xb) 8m45.755583371s ago: executing program 32 (id=2501): openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000000380)='dummy_udc.0', 0xb) 8.856185791s ago: executing program 4 (id=5578): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, 0x0, 0x884) 8.437388601s ago: executing program 3 (id=5580): r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000004c0)='j\x95\'\x8aC\x16\xca\\', &(0x7f0000000c40)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?^\xc9\xef\xe0Q\x01\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\x80\x1a\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf?\xc1\rv\xd3j\r6\x7f\x00'/141, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000002c0)='\xe6\xdf\xf4\x89\b,\xcd\x9dP\x9e\xd7\xe3/\xd2=#\xc8\xb7\x98\f\x87\xcf\x00\x00\x00\x00\x00\x00\x00\x9a\x8e\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000200)="82", 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='\x1c@\\X', &(0x7f0000000880)='R\x8d\xe9\x1a\xe0\x04\x00\x00\x00\x00\x00\x00\x00s\x03l\x8c\x11kSg\x03\x14 \'_\v/\xe0\xb0A\rx\x19\xe8\xf6sU\xfe<\xef\xc9\x12\xc25\xf8A\t\xdb\xb7\x88\xeeT\x80\x00\x00\x00=-\xe0\xf9\xff\xd2/x\x86i9\xcb@\xfa-\x19Q\x00\x90\x04\'J\xf8\xdfs\xad\xe6dS\x98\xeb\x89p\xd6)\xe8\x94d\x9dv.3\x9b\x81\x8e\x10\xca\xbc\x888', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000580)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\xf5S>\xb8\x86\xfc\x9cVR\x82\x9a\xbdp\xbd\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?_\xc9\xef\xe0Q\xdb\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\xbd\xb5\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf[\xd13\xb3\xd3j\r6\x7f', &(0x7f0000000640)='y', 0x1) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000680)='P\xfc#N\x1d\x04\x00\x01\x00\x00\x00\x00\x00\x00\x04\x00\xbe\xd8\x83M\x1a\x06mEy\xcf\xb7\xb1\xd0N\x01\x03}\v\xcc\xaaca$|U\xdd\x1fhM\xa6\xa4-\x84Y\x0f\xdd\"\xf0\xf8\x1e\x84H\x7f\xf5*\x88\x8c\x0fF#-)\xa1|\xc2\x17\x1e\xedq*n\xaeT\xbc\xc7fJL\xa3Jq\xd8\xc5S\xed\xb3\fH\xe7kC\xcf', &(0x7f0000000900)="0e", 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='^](*\r\\!\x00', &(0x7f0000000100)='\b\x00\x00\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000380)='\xff\xff', &(0x7f0000000440)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda\x8d-\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?^\xc9\xef\xe0Q\x01\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\xff\xf0\xff\xff\x80\x1a\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf?\xc1\rv\xd3j\r6\x7f\x00', 0x0) 7.677098301s ago: executing program 3 (id=5583): openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x100, 0x0, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x87, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x2000000000000, 0x40, 0xfffffffffffffffd, 0x50}, {0x5}, 0x6, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8fbfaffffffe99900e60000fc002000000000000100000000000000ac1e000100000000"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc00000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc00"/30], 0xb8}}, 0x4000) 7.623160818s ago: executing program 4 (id=5584): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fc2b0000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x12, r2, 0x0) sendmsg$TCPDIAG_GETSOCK(r1, 0x0, 0x20000014) 7.614381263s ago: executing program 3 (id=5585): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB="12000000350000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r3, &(0x7f00000001c0), &(0x7f0000000400)=""/198}, 0x20) 5.502265122s ago: executing program 3 (id=5589): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40001, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44081}, 0x0) 5.498340888s ago: executing program 4 (id=5590): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000200000408000000000000000300000000000000000000000200000000000000000000000000000200000000000000000000000404"], 0x0, 0x56}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r3, 0x3, 0x1}, 0x50) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) recvmsg(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)=""/68, 0x44}, {&(0x7f0000000200)=""/145, 0x91}, {&(0x7f00000002c0)=""/51, 0x33}], 0x3}, 0x40000100) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000480)=ANY=[@ANYBLOB="20c995f09f06c1d839ad88c59ad4000000", @ANYRES16, @ANYBLOB="050025bd7000fbdbdf25220000000a0001007770616e31000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002240)=@newtfilter={0x48, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xb, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x1c, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x5}, @TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS={0x8}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 5.14291617s ago: executing program 5 (id=5594): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, 0x0, 0x884) 4.217870856s ago: executing program 4 (id=5595): openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x100, 0x0, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x87, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x2000000000000, 0x40, 0xfffffffffffffffd, 0x50}, {0x5}, 0x6, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8fbfaffffffe99900e60000fc002000000000000100000000000000ac1e000100000000"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc00000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc00"/30], 0xb8}}, 0x4000) 4.112737415s ago: executing program 4 (id=5598): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x4, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20080058) 4.039212499s ago: executing program 5 (id=5600): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x23, 0x790, 0x80000000002, 0x180, 0x2000000400000004, 0xffffffffffffffff, 0xf1, 0x3, 0xfffffffffffffd7e, 0x45, 0x0, 0x3b9, 0xfffffffffffffffe, 0x5, 0x0, 0x8], 0x8000000, 0x385310}) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x8000, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1d7) 3.978869952s ago: executing program 4 (id=5602): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000800)='devpts\x00', 0x1) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x16, 0x0, @void}, 0x10) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x101301) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_DEV_SETUP(r4, 0x405c5503, &(0x7f0000000280)={{}, 'syz1\x00', 0x10}) ioctl$UI_DEV_CREATE(r4, 0x5501) syz_open_dev$evdev(&(0x7f0000000080), 0x3, 0x101202) ioctl$UI_DEV_DESTROY(r4, 0x5502) syz_usb_connect(0x0, 0x0, 0x0, 0x0) 3.972738591s ago: executing program 3 (id=5603): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b9"], 0x0) syz_usb_disconnect(r0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000001900), 0x3, 0x200) ioctl$EVIOCREVOKE(r1, 0x40044591, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000e40)={0x44, &(0x7f0000000bc0)={0x40, 0x0, 0x58, "51cd0998ec8749231b50141c6322133fcc8071cec90a44a7a4ff7e719eeb1f9c8c1fbfa5a4bbd2560caffb9d3d71f07d6fe81979045722d681b98256d3e2fd96dd0beadfb6746fd2d2cbf0e14b5b3120e9d3c5f892b259f0"}, &(0x7f0000000c40)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000cc0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000d00)={0x20, 0x80, 0x1c, {0x39b6, 0x1, 0x5a6acdf1, 0x9b66, 0xf3, 0x35a9, 0xc93, 0x8, 0x1, 0x8, 0x81, 0x4b}}, &(0x7f0000000d40)={0x20, 0x85, 0x4, 0xc3d880d}, 0x0, 0x0, &(0x7f0000000e00)={0x20, 0x89, 0x2}}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000080)={0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="2089c6"], 0x0, 0x0}) 3.025472096s ago: executing program 0 (id=5611): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x884) 2.768015562s ago: executing program 5 (id=5613): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x80000000, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0) r1 = dup(r0) r2 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) sendfile(r1, r2, 0x0, 0x8000fffffffe) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 2.707687559s ago: executing program 0 (id=5614): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, 0x0, 0x0) 2.512780585s ago: executing program 0 (id=5617): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') pread64(r0, 0x0, 0x0, 0x4) 2.326812616s ago: executing program 0 (id=5619): openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x100, 0x0, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x87, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x2000000000000, 0x40, 0xfffffffffffffffd, 0x50}, {0x5}, 0x6, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8fbfaffffffe99900e60000fc002000000000000100000000000000ac1e000100000000"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc00000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00"/45], 0xb8}}, 0x4000) 2.302019457s ago: executing program 5 (id=5620): r0 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') pread64(r1, &(0x7f0000000140)=""/15, 0xf, 0x4) 2.067921618s ago: executing program 5 (id=5623): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x23, 0x790, 0x80000000002, 0x180, 0x2000000400000004, 0xffffffffffffffff, 0xf1, 0x3, 0xfffffffffffffd7e, 0x45, 0x0, 0x3b9, 0xfffffffffffffffe, 0x5, 0x0, 0x8], 0x8000000, 0x385310}) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x8000, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1d7) 1.997377026s ago: executing program 0 (id=5624): r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x5}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x0, 0x8, 0x7}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x40}, 0x8, 0x32}, 0x0, @in=@private=0xa0100fe, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe, 0xc00}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) 1.715291793s ago: executing program 2 (id=5626): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x2, 0x300}, {0x6e, 0x0, 0xd}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x20000f15}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.529706137s ago: executing program 2 (id=5627): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2}, 0x0) 1.319761107s ago: executing program 3 (id=5628): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101482, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) writev(r0, &(0x7f0000000340)=[{0x0}, {&(0x7f0000000880)='kteX', 0x4}], 0x2) 1.292853446s ago: executing program 2 (id=5629): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') pread64(r0, 0x0, 0x0, 0x4) 411.317056ms ago: executing program 0 (id=5630): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x2, 0x300}, {0x6e, 0x0, 0xd}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x20000f15}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 407.260134ms ago: executing program 5 (id=5631): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x11, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000300000000000000010000008500000036000000b7080000000000007b8af8ff00000000b7080000080000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705000000a5000000950000000000000000008010"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x80000) syz_usb_disconnect(r0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b00f402"], 0x10}}, 0x0) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000040)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x40085503, &(0x7f00000000c0)=0x18) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, 0x0, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 355.683049ms ago: executing program 2 (id=5632): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) recvmsg(r0, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000025c0)=[{0x0}, {0x0}], 0x2}, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 235.159355ms ago: executing program 2 (id=5633): r0 = syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, 0x0) fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000040)='stat\x00') pread64(r2, &(0x7f0000000140)=""/15, 0xf, 0x4) 0s ago: executing program 2 (id=5634): openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x100, 0x0, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x87, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x2000000000000, 0x40, 0xfffffffffffffffd, 0x50}, {0x5}, 0x6, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8fbfaffffffe99900e60000fc002000000000000100000000000000ac1e000100000000"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc00000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00"/45], 0xb8}}, 0x4000) kernel console output (not intermixed with test programs): s [ 590.073536][T12806] team0: Port device team_slave_0 added [ 590.102527][T12806] team0: Port device team_slave_1 added [ 590.376258][T12806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 590.376275][T12806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 590.376300][T12806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 592.458973][ T4259] hsr_slave_0: left promiscuous mode [ 592.500777][ T4259] hsr_slave_1: left promiscuous mode [ 592.501762][ T4259] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 592.556441][ T4259] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 595.764899][T13189] Bluetooth: hci0: invalid length 0, exp 2 for type 20 [ 596.477631][T13216] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2847'. [ 597.650461][ T5889] usb 1-1: USB disconnect, device number 20 [ 599.573625][ T4259] team0 (unregistering): Port device team_slave_1 removed [ 601.584126][ T5889] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 602.218191][ T4259] team0 (unregistering): Port device team_slave_0 removed [ 602.725316][ T5889] usb 1-1: Dual-Role OTG device on HNP port [ 602.761191][ T5889] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a6, bcdDevice= 0.00 [ 602.761271][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.520510][T13259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 603.529003][T13259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 603.618989][T13263] Bluetooth: hci0: unsupported parameter 255 [ 603.619009][T13263] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 603.711709][ T5617] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 603.745706][ T5617] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 603.747552][T13259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 603.748055][T13259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 603.779081][ T5617] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 603.779820][T13259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 603.782515][ T5617] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 603.784329][ T5617] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 603.801300][T13259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 603.816421][T13259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 603.816989][T13259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 603.835044][T13259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 603.912119][T13259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 603.942835][T13259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 603.943430][T13259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 605.330872][T12806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 605.330889][T12806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 605.330915][T12806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 605.992710][T13289] netlink: 592 bytes leftover after parsing attributes in process `syz.3.2872'. [ 606.230591][T12283] Bluetooth: hci5: command tx timeout [ 608.901313][ T5617] Bluetooth: hci5: command tx timeout [ 608.987652][T13308] 9pnet_fd: p9_fd_create_tcp (13308): problem connecting socket to 127.0.0.1 [ 609.181390][T12806] hsr_slave_0: entered promiscuous mode [ 609.185971][T12806] hsr_slave_1: entered promiscuous mode [ 609.186836][T12806] debugfs: 'hsr0' already exists in 'hsr' [ 609.186858][T12806] Cannot create hsr debugfs directory [ 610.957122][ T5617] Bluetooth: hci5: command tx timeout [ 612.988277][ T5260] 8021q: adding VLAN 0 to HW filter on device eth1 [ 612.999782][ T5617] Bluetooth: hci5: command tx timeout [ 616.331620][T13399] 9pnet_fd: p9_fd_create_tcp (13399): problem connecting socket to 127.0.0.1 [ 618.106332][T13466] netlink: 'syz.0.2932': attribute type 1 has an invalid length. [ 618.130413][T13468] Bluetooth: hci0: invalid length 0, exp 2 for type 19 [ 618.297841][ T5260] 8021q: adding VLAN 0 to HW filter on device eth2 [ 618.368187][T13466] 8021q: adding VLAN 0 to HW filter on device bond4 [ 618.379155][T13471] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.379389][T13471] bridge0: port 2(bridge_slave_1) entered forwarding state [ 618.386229][T13471] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.386396][T13471] bridge0: port 1(bridge_slave_0) entered forwarding state [ 618.413323][T13471] bond4: (slave bridge0): making interface the new active one [ 618.415760][T13471] bond4: (slave bridge0): Enslaving as an active interface with an up link [ 619.506774][T13491] 9pnet_fd: p9_fd_create_tcp (13491): problem connecting socket to 127.0.0.1 [ 619.688484][T13495] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2943'. [ 619.770542][ T5602] ffs_data_put(): freeing [ 621.426680][T13533] 9pnet_fd: p9_fd_create_tcp (13533): problem connecting socket to 127.0.0.1 [ 622.444129][T13540] Bluetooth: hci0: invalid length 0, exp 2 for type 19 [ 622.830988][T13550] binder: 13549:13550 ioctl 4004f506 2000000001c0 returned -22 [ 624.611430][ T1341] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.394661][T13574] Bluetooth: hci0: invalid length 0, exp 2 for type 19 [ 625.427987][T13264] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.428121][T13264] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.429374][T13264] bridge_slave_0: entered allmulticast mode [ 625.432081][T13264] bridge_slave_0: entered promiscuous mode [ 625.498460][T13264] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.498582][T13264] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.513577][T13264] bridge_slave_1: entered allmulticast mode [ 625.525747][T13264] bridge_slave_1: entered promiscuous mode [ 626.872548][T13264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 626.909310][T13264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 628.334007][T13606] binder: 13605:13606 ioctl 4004f506 2000000001c0 returned -22 [ 630.842222][ T31] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 630.864647][T13264] team0: Port device team_slave_0 added [ 630.944962][T13264] team0: Port device team_slave_1 added [ 630.989524][T13632] Bluetooth: hci0: unsupported parameter 255 [ 630.989544][T13632] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 631.021178][ T31] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 631.021224][ T31] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 631.021245][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.044291][ T31] usb 4-1: config 0 descriptor?? [ 631.091258][ T31] pwc: Askey VC010 type 2 USB webcam detected. [ 631.304472][ T31] pwc: send_video_command error -71 [ 631.304488][ T31] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 631.304583][ T31] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 631.365368][ T31] usb 4-1: USB disconnect, device number 24 [ 633.099169][ T31] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 633.216661][ T4259] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.256864][ T31] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 633.256919][ T31] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 633.256942][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.325922][ T31] usb 4-1: config 0 descriptor?? [ 633.342917][ T31] pwc: Askey VC010 type 2 USB webcam detected. [ 633.402504][T13264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 633.402521][T13264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 633.402548][T13264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 633.455725][T13264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 633.455739][T13264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 633.455759][T13264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 633.537610][T12806] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 633.587101][T12806] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 633.590776][ T31] pwc: send_video_command error -71 [ 633.590791][ T31] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 633.590893][ T31] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 633.612164][ T31] usb 4-1: USB disconnect, device number 25 [ 633.631930][T12806] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 633.677843][T12806] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 634.192182][ T4259] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.060589][T12806] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 635.258062][T12806] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 636.373016][T13724] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 636.911019][T13724] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 636.963165][T13724] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 636.996115][T13724] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 637.006936][T13724] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 637.256284][T13264] hsr_slave_0: entered promiscuous mode [ 637.289237][T13264] hsr_slave_1: entered promiscuous mode [ 637.294000][T13264] debugfs: 'hsr0' already exists in 'hsr' [ 637.294026][T13264] Cannot create hsr debugfs directory [ 639.160043][T13724] Bluetooth: hci1: command tx timeout [ 639.837982][ T4259] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.240273][T13724] Bluetooth: hci1: command tx timeout [ 642.166967][T13796] 9pnet_fd: p9_fd_create_tcp (13796): problem connecting socket to 127.0.0.1 [ 643.162813][ T5602] ffs_data_put(): freeing [ 643.319031][T13724] Bluetooth: hci1: command tx timeout [ 643.558021][ T4259] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.406619][ T5260] 8021q: adding VLAN 0 to HW filter on device eth1 [ 645.414537][T13724] Bluetooth: hci1: command tx timeout [ 647.833287][ T4259] bridge_slave_1: left allmulticast mode [ 647.833319][ T4259] bridge_slave_1: left promiscuous mode [ 647.856660][ T4259] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.031091][ T4259] bridge_slave_0: left allmulticast mode [ 648.031125][ T4259] bridge_slave_0: left promiscuous mode [ 648.031418][ T4259] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.359553][ T4259] bridge_slave_1: left allmulticast mode [ 648.359589][ T4259] bridge_slave_1: left promiscuous mode [ 648.359817][ T4259] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.753569][ T4259] bridge_slave_0: left allmulticast mode [ 648.753602][ T4259] bridge_slave_0: left promiscuous mode [ 648.753839][ T4259] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.907566][T13919] program syz.0.3079 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 655.253135][ T4259] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 655.440323][ T4259] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 655.542168][ T4259] bond0 (unregistering): Released all slaves [ 658.351532][ T4259] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 658.429843][ T4259] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 658.567723][ T4259] bond0 (unregistering): Released all slaves [ 658.612354][ T4259] bond1 (unregistering): Released all slaves [ 658.977840][ T5260] 8021q: adding VLAN 0 to HW filter on device eth2 [ 662.378423][T13718] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.448521][T13718] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.462163][T13718] bridge_slave_0: entered allmulticast mode [ 662.479366][T13718] bridge_slave_0: entered promiscuous mode [ 664.416463][ T31] usb 1-1: USB disconnect, device number 21 [ 667.515348][T13718] bridge0: port 2(bridge_slave_1) entered blocking state [ 667.515470][T13718] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.515707][T13718] bridge_slave_1: entered allmulticast mode [ 667.547525][T13718] bridge_slave_1: entered promiscuous mode [ 667.573518][T14204] program syz.3.3200 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 667.665647][ T5617] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 667.690874][ T5617] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 667.692038][ T5617] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 667.693781][ T5617] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 667.694490][ T5617] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 670.114177][T13718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 670.152261][T13718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 670.650727][T14258] input: syz1 as /devices/virtual/input/input8 [ 671.483001][T13724] Bluetooth: hci2: command tx timeout [ 673.558955][T13724] Bluetooth: hci2: command tx timeout [ 673.635773][T13718] team0: Port device team_slave_0 added [ 673.800382][T13718] team0: Port device team_slave_1 added [ 674.079037][ T5260] 8021q: adding VLAN 0 to HW filter on device eth4 [ 674.282872][T14324] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3242'. [ 674.469025][ T4259] hsr_slave_0: left promiscuous mode [ 674.509055][ T4259] hsr_slave_1: left promiscuous mode [ 674.510047][ T4259] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 674.562923][ T4259] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 674.749543][ T4259] hsr_slave_0: left promiscuous mode [ 674.801942][ T4259] hsr_slave_1: left promiscuous mode [ 674.803154][ T4259] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 674.803179][ T4259] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 674.860158][ T4259] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 674.860185][ T4259] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 674.985515][ T4259] veth1_macvtap: left promiscuous mode [ 674.985617][ T4259] veth0_macvtap: left promiscuous mode [ 674.985861][ T4259] veth1_vlan: left promiscuous mode [ 674.986063][ T4259] veth0_vlan: left promiscuous mode [ 675.639005][T13724] Bluetooth: hci2: command tx timeout [ 676.010845][ T4259] team0 (unregistering): Port device team_slave_1 removed [ 676.071413][ T4259] team0 (unregistering): Port device team_slave_0 removed [ 677.420364][ T4259] team0 (unregistering): Port device team_slave_1 removed [ 677.500771][ T4259] team0 (unregistering): Port device team_slave_0 removed [ 677.718944][ T5617] Bluetooth: hci2: command tx timeout [ 677.814999][T13718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 677.815015][T13718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 677.815042][T13718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 677.817812][T14324] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 678.095479][T14449] binder: 14447:14449 ioctl 4004f506 2000000001c0 returned -22 [ 679.116478][T13718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 679.116496][T13718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 679.116522][T13718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 679.396590][T13718] hsr_slave_0: entered promiscuous mode [ 679.398081][T13718] hsr_slave_1: entered promiscuous mode [ 679.412568][T13718] debugfs: 'hsr0' already exists in 'hsr' [ 679.412598][T13718] Cannot create hsr debugfs directory [ 683.706754][T14502] 9pnet_fd: p9_fd_create_tcp (14502): problem connecting socket to 127.0.0.1 [ 684.129208][ T5600] ffs_data_put(): freeing [ 684.814491][ T5260] 8021q: adding VLAN 0 to HW filter on device eth5 [ 685.503605][T14205] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.505471][T14205] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.505675][T14205] bridge_slave_0: entered allmulticast mode [ 685.551362][T14205] bridge_slave_0: entered promiscuous mode [ 685.894034][ T1341] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.391111][T14205] bridge0: port 2(bridge_slave_1) entered blocking state [ 686.391234][T14205] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.391464][T14205] bridge_slave_1: entered allmulticast mode [ 686.394281][T14205] bridge_slave_1: entered promiscuous mode [ 686.611689][T14205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 686.654746][T14205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 686.984406][T14205] team0: Port device team_slave_0 added [ 686.999577][T14205] team0: Port device team_slave_1 added [ 687.330667][ T4259] bridge_slave_1: left allmulticast mode [ 687.330703][ T4259] bridge_slave_1: left promiscuous mode [ 687.330953][ T4259] bridge0: port 2(bridge_slave_1) entered disabled state [ 687.481734][ T4259] bridge_slave_0: left allmulticast mode [ 687.481769][ T4259] bridge_slave_0: left promiscuous mode [ 687.482029][ T4259] bridge0: port 1(bridge_slave_0) entered disabled state [ 687.839639][ T4259] bridge_slave_1: left allmulticast mode [ 687.839681][ T4259] bridge_slave_1: left promiscuous mode [ 687.839916][ T4259] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.022374][ T4259] bridge_slave_0: left allmulticast mode [ 688.022408][ T4259] bridge_slave_0: left promiscuous mode [ 688.022658][ T4259] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.780890][ T4259] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 688.899697][ T4259] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 688.981278][ T4259] bond0 (unregistering): Released all slaves [ 689.859523][T14701] 9pnet_fd: p9_fd_create_tcp (14701): problem connecting socket to 127.0.0.1 [ 689.986176][T14701] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3387'. [ 690.644386][ T4259] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 690.821160][ T4259] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 690.904106][ T4259] bond0 (unregistering): Released all slaves [ 690.965403][ T5260] 8021q: adding VLAN 0 to HW filter on device eth6 [ 690.967060][T14205] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 690.967073][T14205] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 690.967922][T14205] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 691.289887][T14205] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 691.289904][T14205] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 691.289930][T14205] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 691.846857][T14737] binder: 14736:14737 ioctl 4004f506 2000000001c0 returned -22 [ 692.889052][ T4259] hsr_slave_0: left promiscuous mode [ 692.932678][ T4259] hsr_slave_1: left promiscuous mode [ 692.933690][ T4259] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 693.944287][T14754] 9pnet_fd: p9_fd_create_tcp (14754): problem connecting socket to 127.0.0.1 [ 694.007802][ T4259] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 694.149467][T14759] binder: 14757:14759 ioctl 4004f506 2000000001c0 returned -22 [ 694.218954][ T4259] hsr_slave_0: left promiscuous mode [ 694.667806][ T4259] hsr_slave_1: left promiscuous mode [ 695.180660][ T4259] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 695.255786][ T4259] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 695.814435][ T4259] team0 (unregistering): Port device team_slave_1 removed [ 695.927619][ T4259] team0 (unregistering): Port device team_slave_0 removed [ 698.429664][T14789] 9pnet_fd: p9_fd_create_tcp (14789): problem connecting socket to 127.0.0.1 [ 698.479513][T13724] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 698.515383][T13724] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 698.517559][T13724] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 698.539041][T13724] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 698.544822][T13724] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 699.191071][ T4259] team0 (unregistering): Port device team_slave_1 removed [ 699.281260][ T4259] team0 (unregistering): Port device team_slave_0 removed [ 699.824682][T14205] hsr_slave_0: entered promiscuous mode [ 700.067156][T14205] hsr_slave_1: entered promiscuous mode [ 700.068194][T14205] debugfs: 'hsr0' already exists in 'hsr' [ 700.068217][T14205] Cannot create hsr debugfs directory [ 700.871790][T13724] Bluetooth: hci5: command tx timeout [ 702.920309][T13724] Bluetooth: hci5: command tx timeout [ 705.009903][T13724] Bluetooth: hci5: command tx timeout [ 706.301069][ T5260] 8021q: adding VLAN 0 to HW filter on device eth7 [ 707.100460][T13724] Bluetooth: hci5: command tx timeout [ 708.197810][T14924] 9pnet_fd: p9_fd_create_tcp (14924): problem connecting socket to 127.0.0.1 [ 710.011848][T14205] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 710.080758][T14205] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 710.500008][T14205] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 710.664595][T14205] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 710.733102][T14205] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 710.971464][T14205] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 710.972150][T14785] bridge0: port 1(bridge_slave_0) entered blocking state [ 710.972268][T14785] bridge0: port 1(bridge_slave_0) entered disabled state [ 710.972490][T14785] bridge_slave_0: entered allmulticast mode [ 711.012596][T14785] bridge_slave_0: entered promiscuous mode [ 711.046964][T14205] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 711.134535][T14205] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 711.146159][T14785] bridge0: port 2(bridge_slave_1) entered blocking state [ 711.146278][T14785] bridge0: port 2(bridge_slave_1) entered disabled state [ 711.146505][T14785] bridge_slave_1: entered allmulticast mode [ 711.169671][T14785] bridge_slave_1: entered promiscuous mode [ 711.668298][T14785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 711.688311][T14785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 712.074121][T14785] team0: Port device team_slave_0 added [ 712.083279][T14785] team0: Port device team_slave_1 added [ 712.393169][T14785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 712.393186][T14785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 712.393211][T14785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 712.442711][T14785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 712.442729][T14785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 712.442753][T14785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 712.906202][T14785] hsr_slave_0: entered promiscuous mode [ 712.916623][T14785] hsr_slave_1: entered promiscuous mode [ 712.917576][T14785] debugfs: 'hsr0' already exists in 'hsr' [ 712.917596][T14785] Cannot create hsr debugfs directory [ 715.219363][T15085] 9pnet_fd: p9_fd_create_tcp (15085): problem connecting socket to 127.0.0.1 [ 716.062243][T14205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 716.179092][T13185] bridge_slave_1: left allmulticast mode [ 716.179126][T13185] bridge_slave_1: left promiscuous mode [ 716.179382][T13185] bridge0: port 2(bridge_slave_1) entered disabled state [ 716.366240][T13185] bridge_slave_0: left allmulticast mode [ 716.366275][T13185] bridge_slave_0: left promiscuous mode [ 716.366521][T13185] bridge0: port 1(bridge_slave_0) entered disabled state [ 718.022077][T15161] binder: 15160:15161 ioctl 4004f506 2000000001c0 returned -22 [ 719.694884][T13185] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 719.997106][T15208] input: syz1 as /devices/virtual/input/input9 [ 720.034610][T13185] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 720.885537][T13185] bond0 (unregistering): Released all slaves [ 721.811061][T13185] hsr_slave_0: left promiscuous mode [ 721.850109][T13185] hsr_slave_1: left promiscuous mode [ 721.878230][T13185] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 721.931550][T13185] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 722.473114][T15259] input: syz1 as /devices/virtual/input/input10 [ 723.800968][T13185] team0 (unregistering): Port device team_slave_1 removed [ 723.880348][T13185] team0 (unregistering): Port device team_slave_0 removed [ 724.031197][ T5617] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 724.063555][ T5617] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 724.067243][ T5617] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 724.068728][ T5617] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 724.093424][ T5617] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 726.386468][T13724] Bluetooth: hci1: command tx timeout [ 728.439454][T13724] Bluetooth: hci1: command tx timeout [ 728.816381][ T5260] 8021q: adding VLAN 0 to HW filter on device eth1 [ 729.217235][T15404] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3627'. [ 729.847467][T15426] input: syz1 as /devices/virtual/input/input11 [ 730.674163][T13724] Bluetooth: hci1: command tx timeout [ 733.010628][T15454] 9pnet_fd: p9_fd_create_tcp (15454): problem connecting socket to 127.0.0.1 [ 733.015622][T13724] Bluetooth: hci1: command tx timeout [ 736.662907][T15565] program syz.3.3682 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 738.858928][T15581] 9pnet_fd: p9_fd_create_tcp (15581): problem connecting socket to 127.0.0.1 [ 739.726143][T14785] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 739.755428][T15600] netlink: 196 bytes leftover after parsing attributes in process `syz.3.3694'. [ 739.921890][T14785] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 740.108968][T14785] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 740.198757][T14785] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 740.200256][T15282] bridge0: port 1(bridge_slave_0) entered blocking state [ 740.200370][T15282] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.200594][T15282] bridge_slave_0: entered allmulticast mode [ 740.211300][T15282] bridge_slave_0: entered promiscuous mode [ 740.234885][T14785] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 740.399748][T14785] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 740.400516][T15282] bridge0: port 2(bridge_slave_1) entered blocking state [ 740.400647][T15282] bridge0: port 2(bridge_slave_1) entered disabled state [ 740.400848][T15282] bridge_slave_1: entered allmulticast mode [ 740.412083][T15282] bridge_slave_1: entered promiscuous mode [ 740.903773][T14785] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 740.964285][T14785] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 741.206537][T15282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 741.246011][T15282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 741.490363][T15282] team0: Port device team_slave_0 added [ 741.544835][T15659] netlink: 196 bytes leftover after parsing attributes in process `syz.3.3713'. [ 741.588340][T15282] team0: Port device team_slave_1 added [ 741.851273][T15282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 741.851290][T15282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 741.851317][T15282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 742.009856][T13185] bridge_slave_1: left allmulticast mode [ 742.009892][T13185] bridge_slave_1: left promiscuous mode [ 742.010173][T13185] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.194277][T13185] bridge_slave_0: left allmulticast mode [ 742.194312][T13185] bridge_slave_0: left promiscuous mode [ 742.194559][T13185] bridge0: port 1(bridge_slave_0) entered disabled state [ 747.299667][T13185] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 747.331483][ T1341] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.419760][T13185] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 747.500290][T13185] bond0 (unregistering): Released all slaves [ 747.573676][T15282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 747.573692][T15282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 747.573717][T15282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 749.188941][T13185] hsr_slave_0: left promiscuous mode [ 749.229025][T13185] hsr_slave_1: left promiscuous mode [ 749.230058][T13185] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 749.294540][T13185] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 749.661892][T15817] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3774'. [ 752.121384][T13185] team0 (unregistering): Port device team_slave_1 removed [ 752.210369][T13185] team0 (unregistering): Port device team_slave_0 removed [ 752.815883][ T5260] 8021q: adding VLAN 0 to HW filter on device eth1 [ 752.944018][T15873] input: syz1 as /devices/virtual/input/input12 [ 752.987253][T15282] hsr_slave_0: entered promiscuous mode [ 753.692907][T15282] hsr_slave_1: entered promiscuous mode [ 753.753212][T15282] debugfs: 'hsr0' already exists in 'hsr' [ 753.753229][T15282] Cannot create hsr debugfs directory [ 754.626353][T14785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 755.639896][T14785] 8021q: adding VLAN 0 to HW filter on device team0 [ 756.941091][T15906] 9pnet_fd: p9_fd_create_tcp (15906): problem connecting socket to 127.0.0.1 [ 758.906534][ T5617] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 758.974180][ T5617] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 758.981505][ T5617] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 759.011750][ T5617] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 759.014754][ T5617] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 761.298561][ T5617] Bluetooth: hci2: command tx timeout [ 761.507976][T16004] input: syz1 as /devices/virtual/input/input13 [ 762.559651][T15995] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 763.340506][ T5617] Bluetooth: hci2: command tx timeout [ 765.410589][ T5617] Bluetooth: hci2: command tx timeout [ 765.454990][T15282] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 765.514431][T15282] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 765.542158][T15282] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 765.681172][T15282] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 765.710257][T16121] netlink: 'syz.3.3872': attribute type 1 has an invalid length. [ 765.710278][T16121] netlink: 'syz.3.3872': attribute type 2 has an invalid length. [ 765.716970][T15282] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 765.780396][T15282] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 765.817235][T15282] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 765.848124][T15282] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 766.553403][T15940] bridge0: port 1(bridge_slave_0) entered blocking state [ 766.553525][T15940] bridge0: port 1(bridge_slave_0) entered disabled state [ 766.553766][T15940] bridge_slave_0: entered allmulticast mode [ 766.581981][T15940] bridge_slave_0: entered promiscuous mode [ 766.725271][T15940] bridge0: port 2(bridge_slave_1) entered blocking state [ 766.725405][T15940] bridge0: port 2(bridge_slave_1) entered disabled state [ 766.725584][T15940] bridge_slave_1: entered allmulticast mode [ 766.755948][T15940] bridge_slave_1: entered promiscuous mode [ 767.033762][T15940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 767.077953][T15940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 767.469113][ T1256] bridge_slave_1: left allmulticast mode [ 767.469149][ T1256] bridge_slave_1: left promiscuous mode [ 767.469412][ T1256] bridge0: port 2(bridge_slave_1) entered disabled state [ 767.482828][ T5617] Bluetooth: hci2: command tx timeout [ 767.633544][ T1256] bridge_slave_0: left allmulticast mode [ 767.633579][ T1256] bridge_slave_0: left promiscuous mode [ 767.633839][ T1256] bridge0: port 1(bridge_slave_0) entered disabled state [ 770.909633][ T1256] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 771.009830][ T1256] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 771.073609][ T1256] bond0 (unregistering): Released all slaves [ 771.117185][T15940] team0: Port device team_slave_0 added [ 771.133734][T15940] team0: Port device team_slave_1 added [ 771.260195][T15940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 771.260210][T15940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 771.260231][T15940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 771.262361][T15940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 771.262375][T15940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 771.262400][T15940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 771.436790][T15940] hsr_slave_0: entered promiscuous mode [ 771.438189][T15940] hsr_slave_1: entered promiscuous mode [ 771.450964][T15940] debugfs: 'hsr0' already exists in 'hsr' [ 771.450998][T15940] Cannot create hsr debugfs directory [ 771.924230][T15282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 772.179487][ T1256] hsr_slave_0: left promiscuous mode [ 772.219350][ T1256] hsr_slave_1: left promiscuous mode [ 772.220288][ T1256] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 772.274073][ T1256] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 773.140896][ T1256] team0 (unregistering): Port device team_slave_1 removed [ 773.199667][ T1256] team0 (unregistering): Port device team_slave_0 removed [ 773.660662][ T5260] 8021q: adding VLAN 0 to HW filter on device eth1 [ 775.290912][T16344] 9pnet_fd: p9_fd_create_tcp (16344): problem connecting socket to 127.0.0.1 [ 775.452477][ T5600] ffs_data_put(): freeing [ 775.536535][T15282] 8021q: adding VLAN 0 to HW filter on device team0 [ 775.555460][ T990] bridge0: port 1(bridge_slave_0) entered blocking state [ 775.555531][ T990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 775.596719][T13185] bridge0: port 2(bridge_slave_1) entered blocking state [ 775.596812][T13185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 778.728942][ T198] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 778.891242][ T198] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 778.891308][ T198] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 778.891331][ T198] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.938548][ T198] usb 1-1: config 0 descriptor?? [ 779.000190][ T198] pwc: Askey VC010 type 2 USB webcam detected. [ 779.182691][ T198] pwc: send_video_command error -71 [ 779.182708][ T198] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 779.182811][ T198] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 779.203314][ T198] usb 1-1: USB disconnect, device number 22 [ 779.363479][T15282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 779.679056][ T198] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 779.775351][T15940] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 779.817460][T15940] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 779.839020][ T198] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 779.839066][ T198] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1040, setting to 1024 [ 779.839092][ T198] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 779.839114][ T198] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 779.844180][T15940] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 779.848268][ T198] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 779.848296][ T198] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.848316][ T198] usb 1-1: Product: ꇠÜ䠜䕸婖ꭄ惡涪탉︂볲ꥠ麅ì°ëƒ°å¶¥ç¬èŽºî”·æ«¾áœ¹ê‰©ä½¹î¤‘㤓六襋阠梢å¼ä™©ê¶±éª¶à¡¿ãªŽî‹»ãƒ€ì…§î¿ï‘›î¬¿é´á¸¶êª¯êœŸé•ˆá£€ìµƒî˜ï‹˜èŠ¶ï®ì™î·‚㵫䟗ṷᅚᬒë¥ë…˜çžî‚¸è ”ﰆԾâ¬ã‡ì±–æ…慹﯆䒟ﰈ6᪨舗뚱⯭☗镪ꤶ匋ç¥ì¨…㽇晶㡠[ 779.848344][ T198] usb 1-1: Manufacturer: à° [ 779.848358][ T198] usb 1-1: SerialNumber: 歑ﵡ極 [ 780.387056][T15940] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 780.404839][T16457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 780.419307][T16457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 780.431371][ T198] cdc_ncm 1-1:1.0: bind() failure [ 780.500907][ T198] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 780.500934][ T198] cdc_ncm 1-1:1.1: bind() failure [ 780.532971][T15940] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 780.546291][ T198] usb 1-1: USB disconnect, device number 23 [ 780.593302][T15940] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 780.671683][T15940] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 780.806178][T15940] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 781.322939][T15282] veth0_vlan: entered promiscuous mode [ 781.427003][T15282] veth1_vlan: entered promiscuous mode [ 781.808200][T15282] veth0_macvtap: entered promiscuous mode [ 781.845350][T15940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 781.863086][T15282] veth1_macvtap: entered promiscuous mode [ 781.921926][T16559] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4030'. [ 781.942467][T16559] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4030'. [ 782.036821][T15940] 8021q: adding VLAN 0 to HW filter on device team0 [ 782.123948][T15282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 782.203530][ T990] bridge0: port 1(bridge_slave_0) entered blocking state [ 782.207882][ T990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 782.237166][T15282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 782.292721][ T990] bridge0: port 2(bridge_slave_1) entered blocking state [ 782.292845][ T990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 782.338548][ T990] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.396587][ T3334] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.422032][ T3334] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.458669][ T3334] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 782.629628][ T5587] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 782.898152][ T5587] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 782.898206][ T5587] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 782.898229][ T5587] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.960603][ T5587] usb 1-1: config 0 descriptor?? [ 783.146205][ T5587] pwc: Askey VC010 type 2 USB webcam detected. [ 783.229475][ T5587] pwc: send_video_command error -71 [ 783.229493][ T5587] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 783.229589][ T5587] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 783.306914][ T5587] usb 1-1: USB disconnect, device number 24 [ 784.068959][ T5587] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 784.246304][ T5587] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 784.246352][ T5587] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1040, setting to 1024 [ 784.246377][ T5587] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 784.246400][ T5587] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 784.290083][ T5587] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 784.290112][ T5587] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.290130][ T5587] usb 1-1: Product: ꇠÜ䠜䕸婖ꭄ惡涪탉︂볲ꥠ麅ì°ëƒ°å¶¥ç¬èŽºî”·æ«¾áœ¹ê‰©ä½¹î¤‘㤓六襋阠梢å¼ä™©ê¶±éª¶à¡¿ãªŽî‹»ãƒ€ì…§î¿ï‘›î¬¿é´á¸¶êª¯êœŸé•ˆá£€ìµƒî˜ï‹˜èŠ¶ï®ì™î·‚㵫䟗ṷᅚᬒë¥ë…˜çžî‚¸è ”ﰆԾâ¬ã‡ì±–æ…慹﯆䒟ﰈ6᪨舗뚱⯭☗镪ꤶ匋ç¥ì¨…㽇晶㡠[ 784.290159][ T5587] usb 1-1: Manufacturer: à° [ 784.290173][ T5587] usb 1-1: SerialNumber: 歑ﵡ極 [ 784.752064][ T5587] cdc_ncm 1-1:1.0: bind() failure [ 785.863677][ T5587] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 785.863722][ T5587] cdc_ncm 1-1:1.1: bind() failure [ 785.942058][ T5587] usb 1-1: USB disconnect, device number 25 [ 786.068244][T16604] 9pnet_fd: p9_fd_create_tcp (16604): problem connecting socket to 127.0.0.1 [ 786.727754][T13724] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 786.789161][T13724] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 786.792740][T13724] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 786.797440][T13724] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 786.822743][T13724] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 786.822776][ T5600] ffs_data_put(): freeing [ 789.198137][T13724] Bluetooth: hci5: command tx timeout [ 790.421824][T16654] binder: 16653:16654 ioctl 4004f506 2000000001c0 returned -22 [ 791.239055][T13724] Bluetooth: hci5: command tx timeout [ 792.068497][ T161] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.553116][T15940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 793.319503][T13724] Bluetooth: hci5: command tx timeout [ 793.780090][ T161] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.420592][ T161] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 795.451651][T13724] Bluetooth: hci5: command tx timeout [ 798.594359][ T161] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.182289][T15940] veth0_vlan: entered promiscuous mode [ 799.518688][T15940] veth1_vlan: entered promiscuous mode [ 800.226134][T16822] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4124'. [ 800.330705][T16822] 8021q: adding VLAN 0 to HW filter on device bond5 [ 800.483415][ T161] bridge_slave_1: left allmulticast mode [ 800.483448][ T161] bridge_slave_1: left promiscuous mode [ 800.526543][ T161] bridge0: port 2(bridge_slave_1) entered disabled state [ 800.961290][ T161] bridge_slave_0: left allmulticast mode [ 800.961323][ T161] bridge_slave_0: left promiscuous mode [ 800.961551][ T161] bridge0: port 1(bridge_slave_0) entered disabled state [ 803.704034][T16936] 9pnet_fd: p9_fd_create_tcp (16936): problem connecting socket to 127.0.0.1 [ 803.873200][ T5602] ffs_data_put(): freeing [ 803.889682][ T161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 803.979779][ T161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 804.033863][ T161] bond0 (unregistering): Released all slaves [ 804.208884][T16844] netlink: 'syz.3.4129': attribute type 12 has an invalid length. [ 804.208907][T16844] netlink: 'syz.3.4129': attribute type 29 has an invalid length. [ 804.208920][T16844] netlink: 148 bytes leftover after parsing attributes in process `syz.3.4129'. [ 804.216040][ T5260] 8021q: adding VLAN 0 to HW filter on device eth1 [ 804.259441][T16618] bridge0: port 1(bridge_slave_0) entered blocking state [ 804.259635][T16618] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.259797][T16618] bridge_slave_0: entered allmulticast mode [ 804.276298][T16618] bridge_slave_0: entered promiscuous mode [ 804.370372][T16618] bridge0: port 2(bridge_slave_1) entered blocking state [ 804.370504][T16618] bridge0: port 2(bridge_slave_1) entered disabled state [ 804.370718][T16618] bridge_slave_1: entered allmulticast mode [ 804.373316][T16618] bridge_slave_1: entered promiscuous mode [ 804.528339][T16948] netlink: 'syz.3.4176': attribute type 12 has an invalid length. [ 804.649468][T15940] veth0_macvtap: entered promiscuous mode [ 804.794020][T16618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 804.804400][T16618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 804.907559][T15940] veth1_macvtap: entered promiscuous mode [ 805.360122][T16618] team0: Port device team_slave_0 added [ 805.542395][ T161] hsr_slave_0: left promiscuous mode [ 805.581548][ T161] hsr_slave_1: left promiscuous mode [ 805.582540][ T161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 805.582564][ T161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 805.636312][ T161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 805.636341][ T161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 805.927207][ T161] veth1_macvtap: left promiscuous mode [ 805.927312][ T161] veth0_macvtap: left promiscuous mode [ 805.927573][ T161] veth1_vlan: left promiscuous mode [ 805.927758][ T161] veth0_vlan: left promiscuous mode [ 807.450185][ T161] team0 (unregistering): Port device team_slave_1 removed [ 807.509692][ T161] team0 (unregistering): Port device team_slave_0 removed [ 807.818761][T16618] team0: Port device team_slave_1 added [ 807.855114][ T5260] 8021q: adding VLAN 0 to HW filter on device eth2 [ 807.918600][T16618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 807.918616][T16618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 807.918642][T16618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 807.977941][T16618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 807.977959][T16618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 807.977984][T16618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 808.007831][T15940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 808.053440][T17075] binder: 17074:17075 ioctl 4004f506 2000000001c0 returned -22 [ 808.100332][T15940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 808.749640][T16618] hsr_slave_0: entered promiscuous mode [ 808.751076][T16618] hsr_slave_1: entered promiscuous mode [ 808.751951][T16618] debugfs: 'hsr0' already exists in 'hsr' [ 808.751973][T16618] Cannot create hsr debugfs directory [ 808.760906][ T1341] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.805261][ T3334] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.925060][ T3334] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.034027][ T3334] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.063476][T17102] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4238'. [ 810.163100][T17105] input: syz1 as /devices/virtual/input/input14 [ 811.043374][ T3334] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.472463][T17124] binder: 17122:17124 ioctl 4004f506 2000000001c0 returned -22 [ 812.501707][ T990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 812.501726][ T990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 813.026854][ T5260] 8021q: adding VLAN 0 to HW filter on device eth3 [ 813.067691][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 813.067713][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 813.802144][T17177] input: syz1 as /devices/virtual/input/input15 [ 814.846963][T17185] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4265'. [ 814.903064][T17188] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4265'. [ 816.992853][T17234] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4281'. [ 819.572693][T17305] netlink: 592 bytes leftover after parsing attributes in process `syz.3.4306'. [ 820.256123][T17329] binder: 17328:17329 ioctl 4004f506 2000000001c0 returned -22 [ 821.398560][T16618] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 821.485879][T17343] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4320'. [ 821.487158][T16618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 821.501634][T16618] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 821.546611][T16618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 821.556313][T16618] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 821.709399][T16618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 821.711551][T16618] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 821.776720][T16618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 821.977331][T17369] ±ÿ: renamed from team_slave_1 (while UP) [ 823.729467][T17413] 9pnet_fd: p9_fd_create_tcp (17413): problem connecting socket to 127.0.0.1 [ 824.093742][T16618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 824.239844][T16618] 8021q: adding VLAN 0 to HW filter on device team0 [ 824.305389][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 824.305597][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 824.388643][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 824.451728][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 827.206274][T17463] 9pnet_fd: p9_fd_create_tcp (17463): problem connecting socket to 127.0.0.1 [ 828.245355][T17474] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4360'. [ 829.224212][T16618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 831.603631][T16618] veth0_vlan: entered promiscuous mode [ 831.653111][T16618] veth1_vlan: entered promiscuous mode [ 831.927576][T16618] veth0_macvtap: entered promiscuous mode [ 831.959216][T16618] veth1_macvtap: entered promiscuous mode [ 832.059245][T16618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 832.122501][T16618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 832.187578][ T4269] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.190789][ T4269] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.201616][ T4269] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.202042][ T4269] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.296606][T17578] input: syz1 as /devices/virtual/input/input16 [ 835.376961][T17582] macvlan0: entered promiscuous mode [ 835.524702][T13185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 835.524780][T13185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 835.683502][T17588] netlink: 'syz.4.4396': attribute type 12 has an invalid length. [ 835.990296][ T4259] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 835.990310][ T4259] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 836.051838][T17598] netlink: 'syz.0.4401': attribute type 12 has an invalid length. [ 836.584879][T17607] team0 (unregistering): Port device team_slave_0 removed [ 836.712929][T17607] team0 (unregistering): Port device 26±ÿ removed [ 839.221361][ T5617] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 839.242942][ T5617] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 839.254157][ T5617] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 839.256266][ T5617] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 839.257388][ T5617] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 840.266419][T17657] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4423'. [ 840.309055][ T5587] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 840.499797][ T5587] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 840.499824][ T5587] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 840.499858][ T5587] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 840.499880][ T5587] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.548904][ T5587] usb 4-1: config 0 descriptor?? [ 841.600777][T13724] Bluetooth: hci1: command tx timeout [ 841.683093][T11440] usb 4-1: USB disconnect, device number 26 [ 842.141202][T13185] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.160485][T11440] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 842.331454][T11440] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 842.331480][T11440] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 842.331512][T11440] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 842.331534][T11440] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.377108][T11440] usb 4-1: config 0 descriptor?? [ 842.807307][T13185] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.370779][T13185] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.646002][T13724] Bluetooth: hci1: command tx timeout [ 843.684147][T11440] usb 4-1: USB disconnect, device number 27 [ 843.749019][T17727] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4443'. [ 843.983563][T17730] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4444'. [ 844.041790][T13185] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.081381][T17732] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4445'. [ 844.148124][T17740] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4447'. [ 844.936463][T17635] bridge0: port 1(bridge_slave_0) entered blocking state [ 844.936701][T17635] bridge0: port 1(bridge_slave_0) entered disabled state [ 844.936877][T17635] bridge_slave_0: entered allmulticast mode [ 844.940624][T17635] bridge_slave_0: entered promiscuous mode [ 844.943694][T17635] bridge0: port 2(bridge_slave_1) entered blocking state [ 844.943889][T17635] bridge0: port 2(bridge_slave_1) entered disabled state [ 844.944050][T17635] bridge_slave_1: entered allmulticast mode [ 844.946628][T17635] bridge_slave_1: entered promiscuous mode [ 845.068363][T17635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 845.162146][T17635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 845.718934][T13724] Bluetooth: hci1: command tx timeout [ 845.747560][T17635] team0: Port device team_slave_0 added [ 846.848371][T17635] team0: Port device team_slave_1 added [ 847.346466][T17635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 847.346483][T17635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 847.346506][T17635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 847.355299][T17635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 847.355314][T17635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 847.355339][T17635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 848.726333][T13724] Bluetooth: hci1: command tx timeout [ 848.823056][T17791] 9pnet_fd: p9_fd_create_tcp (17791): problem connecting socket to 127.0.0.1 [ 848.981498][T17807] netlink: 'syz.5.4468': attribute type 1 has an invalid length. [ 848.981518][T17807] netlink: 'syz.5.4468': attribute type 2 has an invalid length. [ 849.008856][T13185] bridge_slave_1: left allmulticast mode [ 849.008890][T13185] bridge_slave_1: left promiscuous mode [ 849.009128][T13185] bridge0: port 2(bridge_slave_1) entered disabled state [ 849.190662][T13185] bridge_slave_0: left allmulticast mode [ 849.190686][T13185] bridge_slave_0: left promiscuous mode [ 849.190850][T13185] bridge0: port 1(bridge_slave_0) entered disabled state [ 849.264815][T17818] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4470'. [ 849.265403][T17818] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4470'. [ 851.799311][T17845] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4477'. [ 851.877465][T13185] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 851.949613][T13185] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 851.997746][T13185] bond0 (unregistering): Released all slaves [ 852.034209][T13185] bond1 (unregistering): Released all slaves [ 852.071346][T13185] bond2 (unregistering): Released all slaves [ 852.142340][T17635] hsr_slave_0: entered promiscuous mode [ 852.144707][T17635] hsr_slave_1: entered promiscuous mode [ 852.145249][T17635] debugfs: 'hsr0' already exists in 'hsr' [ 852.145271][T17635] Cannot create hsr debugfs directory [ 852.147297][T17809] netlink: 'syz.3.4469': attribute type 12 has an invalid length. [ 852.147316][T17809] netlink: 'syz.3.4469': attribute type 29 has an invalid length. [ 852.147327][T17809] netlink: 148 bytes leftover after parsing attributes in process `syz.3.4469'. [ 852.155261][ T5260] 8021q: adding VLAN 0 to HW filter on device eth1 [ 852.349169][T17857] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4482'. [ 852.737565][T17869] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4487'. [ 854.968484][T17888] netlink: 'syz.5.4492': attribute type 12 has an invalid length. [ 854.968505][T17888] netlink: 'syz.5.4492': attribute type 29 has an invalid length. [ 854.968518][T17888] netlink: 148 bytes leftover after parsing attributes in process `syz.5.4492'. [ 857.982331][T17953] Bluetooth: MGMT ver 1.23 [ 858.201083][ T5260] 8021q: adding VLAN 0 to HW filter on device eth2 [ 858.344620][T17955] netlink: 'syz.0.4505': attribute type 12 has an invalid length. [ 858.344642][T17955] netlink: 'syz.0.4505': attribute type 29 has an invalid length. [ 858.344655][T17955] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4505'. [ 858.635942][T17983] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4509'. [ 861.333979][T18024] netlink: 'syz.5.4517': attribute type 12 has an invalid length. [ 861.334001][T18024] netlink: 'syz.5.4517': attribute type 29 has an invalid length. [ 861.334012][T18024] netlink: 148 bytes leftover after parsing attributes in process `syz.5.4517'. [ 861.757072][T18039] netlink: 'syz.5.4520': attribute type 3 has an invalid length. [ 864.952504][T13185] hsr_slave_0: left promiscuous mode [ 865.059023][T18116] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4530'. [ 865.083348][T13185] hsr_slave_1: left promiscuous mode [ 865.085869][T13185] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 865.085894][T13185] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 865.149097][T13185] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 865.149124][T13185] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 865.350166][T13185] veth1_macvtap: left promiscuous mode [ 865.350267][T13185] veth0_macvtap: left promiscuous mode [ 865.378750][T18123] nbd: must specify at least one socket [ 865.389648][T13185] veth1_vlan: left promiscuous mode [ 865.468381][T13185] veth0_vlan: left promiscuous mode [ 866.498581][T18155] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4540'. [ 867.619710][T13185] team0 (unregistering): Port device team_slave_1 removed [ 867.680618][T13185] team0 (unregistering): Port device team_slave_0 removed [ 868.964511][T13724] block nbd0: Receive control failed (result -32) [ 871.240321][ T1341] ieee802154 phy0 wpan0: encryption failed: -22 [ 871.327540][T18258] 9pnet_fd: p9_fd_create_tcp (18258): problem connecting socket to 127.0.0.1 [ 871.545444][T15940] ffs_data_put(): freeing [ 871.945111][T17635] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 872.036660][T17635] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 872.047885][T17635] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 873.152346][T17635] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 873.173156][T17635] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 873.346555][T13724] block nbd1: Receive control failed (result -32) [ 873.475359][T17635] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 873.547830][T17635] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 873.682098][T17635] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 874.247687][T18328] netlink: 'syz.3.4566': attribute type 3 has an invalid length. [ 874.331112][T17635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 874.347689][T17635] 8021q: adding VLAN 0 to HW filter on device team0 [ 874.538588][ T1134] bridge0: port 1(bridge_slave_0) entered blocking state [ 874.539279][ T1134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 874.624049][ T1134] bridge0: port 2(bridge_slave_1) entered blocking state [ 874.624183][ T1134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 874.651828][T18339] syzkaller0: entered promiscuous mode [ 874.651852][T18339] syzkaller0: entered allmulticast mode [ 874.672708][T18339] tipc: Started in network mode [ 874.672740][T18339] tipc: Node identity 8e3835c54454, cluster identity 4711 [ 874.747404][T18339] tipc: Enabled bearer , priority 0 [ 874.771673][T18339] tipc: Resetting bearer [ 874.837004][T18338] tipc: Resetting bearer [ 874.910675][T13724] block nbd2: Receive control failed (result -32) [ 875.021192][T18338] tipc: Disabling bearer [ 876.409407][ T31] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 876.563175][ T31] usb 1-1: Dual-Role OTG device on HNP port [ 876.563503][ T31] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a6, bcdDevice= 0.00 [ 876.563528][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.899035][T18414] nbd: must specify a size in bytes for the device [ 879.458434][T17635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 879.797356][T18446] nbd: must specify a size in bytes for the device [ 879.884335][T17635] veth0_vlan: entered promiscuous mode [ 879.906658][T17635] veth1_vlan: entered promiscuous mode [ 879.967362][T17635] veth0_macvtap: entered promiscuous mode [ 879.980235][T17635] veth1_macvtap: entered promiscuous mode [ 880.137548][T17635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 880.526550][T17635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 880.586786][ T68] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.586836][ T68] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.586872][ T68] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 880.586906][ T68] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 881.845540][ T1134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 881.845560][ T1134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 882.082611][T18477] nbd: must specify a size in bytes for the device [ 882.191715][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 882.191734][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 883.634855][ T31] usb 1-1: USB disconnect, device number 26 [ 888.331382][T13724] Bluetooth: hci2: command 0x0406 tx timeout [ 889.550981][T18511] nbd: must specify at least one socket [ 889.616277][T18514] syzkaller0: entered promiscuous mode [ 889.616301][T18514] syzkaller0: entered allmulticast mode [ 889.671670][T18514] tipc: Enabled bearer , priority 0 [ 889.797662][T18513] tipc: Resetting bearer [ 889.808657][T13724] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 889.826658][T13724] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 889.842607][T13724] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 889.875150][T13724] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 889.886174][T13724] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 891.024912][T18513] tipc: Disabling bearer [ 891.404932][ T5587] tipc: Node number set to 3396089285 [ 891.589136][T11440] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 891.741337][T11440] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 891.741392][T11440] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 891.741423][T11440] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 891.747058][T11440] usb 6-1: config 0 descriptor?? [ 891.786389][T11440] pwc: Askey VC010 type 2 USB webcam detected. [ 891.979823][T11440] pwc: send_video_command error -71 [ 891.979842][T11440] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 891.979946][T11440] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 892.021866][T11440] usb 6-1: USB disconnect, device number 2 [ 892.920858][ T5617] Bluetooth: hci4: command tx timeout [ 892.974907][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 893.038946][T11440] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 893.121088][T18565] team0 (unregistering): Port device team_slave_0 removed [ 893.175278][T18565] team0 (unregistering): Port device 26±ÿ removed [ 893.192439][T11440] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 893.192495][T11440] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 893.192518][T11440] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.237025][T11440] usb 6-1: config 0 descriptor?? [ 893.244498][T18574] nbd: must specify at least one socket [ 893.260849][T11440] pwc: Askey VC010 type 2 USB webcam detected. [ 893.644438][T11440] pwc: recv_control_msg error -32 req 02 val 2b00 [ 893.646610][T11440] pwc: recv_control_msg error -32 req 02 val 2700 [ 893.647727][T11440] pwc: recv_control_msg error -32 req 02 val 2c00 [ 893.648378][T11440] pwc: recv_control_msg error -32 req 04 val 1000 [ 893.675163][T11440] pwc: recv_control_msg error -32 req 04 val 1300 [ 893.675743][T11440] pwc: recv_control_msg error -32 req 04 val 1400 [ 893.681946][T18548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 893.682540][T18548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 893.688102][T18548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 893.688687][T18548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 893.694841][T18548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 893.697836][T18548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 893.909991][T18548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 893.910499][T18548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 893.986399][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.305927][T11440] pwc: recv_control_msg error -71 req 02 val 2100 [ 894.306379][T11440] pwc: recv_control_msg error -71 req 04 val 1500 [ 894.306831][T11440] pwc: recv_control_msg error -71 req 02 val 2500 [ 894.307345][T11440] pwc: recv_control_msg error -71 req 02 val 2400 [ 894.307786][T11440] pwc: recv_control_msg error -71 req 02 val 2600 [ 894.308244][T11440] pwc: recv_control_msg error -71 req 02 val 2900 [ 894.308683][T11440] pwc: recv_control_msg error -71 req 02 val 2800 [ 894.321682][T11440] pwc: recv_control_msg error -71 req 04 val 1100 [ 894.369376][T11440] pwc: recv_control_msg error -71 req 04 val 1200 [ 894.377897][T11440] pwc: Registered as video103. [ 894.406581][T11440] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input17 [ 894.432137][T11440] usb 6-1: USB disconnect, device number 3 [ 895.038962][ T5617] Bluetooth: hci4: command tx timeout [ 895.134865][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.810213][T18622] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4641'. [ 897.087037][ T5617] Bluetooth: hci4: command tx timeout [ 897.440005][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.580705][T18639] team0 (unregistering): Port device team_slave_0 removed [ 897.624337][T18639] team0 (unregistering): Port device team_slave_1 removed [ 897.868996][T18672] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4653'. [ 899.312653][ T5617] Bluetooth: hci4: command tx timeout [ 899.927650][T18698] netlink: 'syz.2.4654': attribute type 1 has an invalid length. [ 899.927679][T18698] netlink: 'syz.2.4654': attribute type 3 has an invalid length. [ 899.927692][T18698] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4654'. [ 901.972562][T18512] bridge0: port 1(bridge_slave_0) entered blocking state [ 901.972753][T18512] bridge0: port 1(bridge_slave_0) entered disabled state [ 901.972972][T18512] bridge_slave_0: entered allmulticast mode [ 901.982031][T18512] bridge_slave_0: entered promiscuous mode [ 902.001581][T18512] bridge0: port 2(bridge_slave_1) entered blocking state [ 902.001693][T18512] bridge0: port 2(bridge_slave_1) entered disabled state [ 902.014209][T18512] bridge_slave_1: entered allmulticast mode [ 902.020182][T18512] bridge_slave_1: entered promiscuous mode [ 902.264758][ T12] bridge_slave_1: left allmulticast mode [ 902.264789][ T12] bridge_slave_1: left promiscuous mode [ 902.265001][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 902.933202][ T12] bridge_slave_0: left allmulticast mode [ 902.933238][ T12] bridge_slave_0: left promiscuous mode [ 902.933511][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 905.954602][T18784] netlink: 'syz.5.4681': attribute type 3 has an invalid length. [ 906.042776][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 906.129525][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 906.152520][ T12] bond0 (unregistering): Released all slaves [ 906.163540][ T12] bond1 (unregistering): Released all slaves [ 906.180414][ T12] bond2 (unregistering): Released all slaves [ 906.209784][T18758] ±ÿ: renamed from team_slave_1 [ 907.291275][T18512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 907.342404][T18512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 907.511830][T18512] team0: Port device team_slave_0 added [ 907.522907][T18512] team0: Port device team_slave_1 added [ 909.070297][T18841] 9pnet_fd: p9_fd_create_tcp (18841): problem connecting socket to 127.0.0.1 [ 909.690856][T18812] syzkaller0: entered promiscuous mode [ 909.690880][T18812] syzkaller0: entered allmulticast mode [ 909.909319][T16618] ffs_data_put(): freeing [ 909.991045][T18512] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 909.991057][T18512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 909.991071][T18512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 911.531163][T18512] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 911.531180][T18512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 911.531205][T18512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 911.723629][ T5260] 8021q: adding VLAN 0 to HW filter on device eth1 [ 911.959017][ T5735] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 912.175334][ T5735] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 912.175388][ T5735] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 912.175410][ T5735] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 912.215010][ T5735] usb 1-1: config 0 descriptor?? [ 912.240857][ T5735] pwc: Askey VC010 type 2 USB webcam detected. [ 912.248572][T18512] hsr_slave_0: entered promiscuous mode [ 912.253906][T18512] hsr_slave_1: entered promiscuous mode [ 912.439939][ T5735] pwc: send_video_command error -71 [ 912.439956][ T5735] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 912.440049][ T5735] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 912.490231][ T5735] usb 1-1: USB disconnect, device number 27 [ 912.523107][T18886] nbd: must specify a size in bytes for the device [ 913.100093][ T5735] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 913.252334][ T5735] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 913.252390][ T5735] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 913.252412][ T5735] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 913.292266][ T5735] usb 1-1: config 0 descriptor?? [ 913.319440][T13724] Bluetooth: hci5: command 0x0406 tx timeout [ 913.353722][T18911] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4716'. [ 913.439055][ T5735] pwc: Askey VC010 type 2 USB webcam detected. [ 913.850105][ T5735] pwc: recv_control_msg error -32 req 02 val 2b00 [ 913.850742][ T5735] pwc: recv_control_msg error -32 req 02 val 2700 [ 913.851820][ T5735] pwc: recv_control_msg error -32 req 02 val 2c00 [ 913.852400][ T5735] pwc: recv_control_msg error -32 req 04 val 1000 [ 913.855856][ T5735] pwc: recv_control_msg error -32 req 04 val 1300 [ 913.856436][ T5735] pwc: recv_control_msg error -32 req 04 val 1400 [ 913.861080][T18879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 913.862733][T18879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 913.871908][T18879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 913.873679][T18879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 913.881005][T18879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 913.883993][T18879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 913.994744][ T12] hsr_slave_0: left promiscuous mode [ 914.092239][T18879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 914.092859][T18879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 914.218051][ T12] hsr_slave_1: left promiscuous mode [ 914.219984][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 914.220009][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 914.260653][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 914.260679][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 914.409780][ T12] veth1_macvtap: left promiscuous mode [ 914.409856][ T12] veth0_macvtap: left promiscuous mode [ 914.410058][ T12] veth1_vlan: left promiscuous mode [ 914.410200][ T12] veth0_vlan: left promiscuous mode [ 914.410872][ T5735] pwc: recv_control_msg error -71 req 02 val 2100 [ 914.412034][ T5735] pwc: recv_control_msg error -71 req 04 val 1500 [ 914.412496][ T5735] pwc: recv_control_msg error -71 req 02 val 2500 [ 914.412932][ T5735] pwc: recv_control_msg error -71 req 02 val 2400 [ 914.413758][ T5735] pwc: recv_control_msg error -71 req 02 val 2600 [ 914.415699][ T5735] pwc: recv_control_msg error -71 req 02 val 2900 [ 914.416141][ T5735] pwc: recv_control_msg error -71 req 02 val 2800 [ 914.416760][ T5735] pwc: recv_control_msg error -71 req 04 val 1100 [ 914.417201][ T5735] pwc: recv_control_msg error -71 req 04 val 1200 [ 914.510196][ T5735] pwc: Registered as video103. [ 914.530068][ T5735] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input18 [ 914.583132][ T5735] usb 1-1: USB disconnect, device number 28 [ 915.569501][T18951] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4721'. [ 915.802636][ T12] team0 (unregistering): Port device team_slave_1 removed [ 915.850159][ T12] team0 (unregistering): Port device team_slave_0 removed [ 916.215858][T18911] macvlan0: left promiscuous mode [ 916.331043][ T5260] 8021q: adding VLAN 0 to HW filter on device eth2 [ 916.879811][T18970] netlink: 'syz.0.4728': attribute type 1 has an invalid length. [ 916.879832][T18970] netlink: 'syz.0.4728': attribute type 3 has an invalid length. [ 916.879844][T18970] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4728'. [ 918.489954][ T5260] 8021q: adding VLAN 0 to HW filter on device eth3 [ 919.159896][ T5260] 8021q: adding VLAN 0 to HW filter on device eth8 [ 920.483744][T19018] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4734'. [ 921.028243][T19034] ±ÿ: renamed from team_slave_1 (while UP) [ 922.820358][T19068] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4747'. [ 923.478195][T19082] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4748'. [ 925.476591][T19097] 9pnet_fd: p9_fd_create_tcp (19097): problem connecting socket to 127.0.0.1 [ 926.400365][T19110] netlink: 'syz.0.4757': attribute type 1 has an invalid length. [ 926.400386][T19110] netlink: 'syz.0.4757': attribute type 2 has an invalid length. [ 926.730704][T15940] ffs_data_put(): freeing [ 930.292617][T19175] 9pnet_fd: p9_fd_create_tcp (19175): problem connecting socket to 127.0.0.1 [ 930.733105][T19184] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4771'. [ 930.972383][T16618] ffs_data_put(): freeing [ 931.641341][ T1341] ieee802154 phy0 wpan0: encryption failed: -22 [ 933.161443][T18512] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 933.237281][T19235] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4782'. [ 933.557082][T18512] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 933.596218][T18512] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 933.653543][T18512] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 933.672933][T18512] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 933.755305][T18512] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 933.776232][T18512] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 934.083073][T18512] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 937.524989][T19247] 9pnet_fd: p9_fd_create_tcp (19247): problem connecting socket to 127.0.0.1 [ 937.585899][T19290] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4792'. [ 938.154582][ T5602] ffs_data_put(): freeing [ 938.407721][T18512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 938.523853][T18512] 8021q: adding VLAN 0 to HW filter on device team0 [ 938.550379][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 938.552087][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 938.593796][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 938.593924][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 941.573107][T19334] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4803'. [ 941.769069][T19340] ======================================================= [ 941.769069][T19340] WARNING: The mand mount option has been deprecated and [ 941.769069][T19340] and is ignored by this kernel. Remove the mand [ 941.769069][T19340] option from the mount to silence this warning. [ 941.769069][T19340] ======================================================= [ 942.607594][T19343] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 942.991561][T18512] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 943.380892][T19345] 9pnet_fd: p9_fd_create_tcp (19345): problem connecting socket to 127.0.0.1 [ 944.632680][T18512] veth0_vlan: entered promiscuous mode [ 944.713096][T18512] veth1_vlan: entered promiscuous mode [ 944.820450][T19371] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4808'. [ 944.876199][T16618] ffs_data_put(): freeing [ 944.934267][T18512] veth0_macvtap: entered promiscuous mode [ 944.977084][T18512] veth1_macvtap: entered promiscuous mode [ 945.057275][T18512] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 945.076790][T19379] batadv_slave_0: entered promiscuous mode [ 945.088295][T18512] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 945.109515][T19378] batadv_slave_0: left promiscuous mode [ 945.129629][ T3334] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.132193][ T3334] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.133704][ T3334] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.137466][ T3334] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.390737][T19389] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4813'. [ 947.947804][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 947.947824][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 948.378662][ T990] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 948.378681][ T990] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 948.565125][ T5715] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 949.051502][ T5715] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 949.051672][ T5715] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 949.051805][ T5715] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 949.348014][ T5715] usb 1-1: config 0 descriptor?? [ 949.435708][ T5715] pwc: Askey VC010 type 2 USB webcam detected. [ 949.645587][ T5715] pwc: send_video_command error -71 [ 949.645603][ T5715] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 949.645703][ T5715] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 949.683293][ T5715] usb 1-1: USB disconnect, device number 29 [ 950.211521][T13724] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 950.245588][T13724] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 950.248673][T13724] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 950.254261][T13724] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 950.256899][T13724] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 950.748884][ T5715] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 951.050386][ T5715] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 951.050439][ T5715] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 951.050460][ T5715] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 951.062165][ T5715] usb 1-1: config 0 descriptor?? [ 952.043956][ T5715] pwc: Askey VC010 type 2 USB webcam detected. [ 952.106780][ T5715] pwc: send_video_command error -71 [ 952.106799][ T5715] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 952.106902][ T5715] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 952.159086][ T5715] usb 1-1: USB disconnect, device number 30 [ 952.448144][T13724] Bluetooth: hci0: command tx timeout [ 953.893122][T13185] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 954.518894][T13724] Bluetooth: hci0: command tx timeout [ 954.709028][T13185] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 956.086572][T19579] netlink: 'syz.0.4854': attribute type 3 has an invalid length. [ 956.116814][T13185] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 956.324667][T19586] UDC core: g1: couldn't find an available UDC or it's busy [ 956.599153][T13724] Bluetooth: hci0: command tx timeout [ 956.915426][T13185] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 958.503516][T19618] 9pnet_fd: p9_fd_create_tcp (19618): problem connecting socket to 127.0.0.1 [ 958.678892][ T5617] Bluetooth: hci0: command tx timeout [ 958.705641][T19450] bridge0: port 1(bridge_slave_0) entered blocking state [ 958.705843][T19450] bridge0: port 1(bridge_slave_0) entered disabled state [ 958.706016][T19450] bridge_slave_0: entered allmulticast mode [ 958.708624][T19450] bridge_slave_0: entered promiscuous mode [ 958.740907][T19450] bridge0: port 2(bridge_slave_1) entered blocking state [ 958.741083][T19450] bridge0: port 2(bridge_slave_1) entered disabled state [ 958.741251][T19450] bridge_slave_1: entered allmulticast mode [ 958.743202][T19450] bridge_slave_1: entered promiscuous mode [ 958.892799][T19450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 958.896721][T19450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 958.956962][T19450] team0: Port device team_slave_0 added [ 958.988447][T19450] team0: Port device team_slave_1 added [ 959.093719][T19450] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 959.093744][T19450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 959.093769][T19450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 959.096071][T19450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 959.096084][T19450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 959.096109][T19450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 959.460251][T19450] hsr_slave_0: entered promiscuous mode [ 959.461570][T19450] hsr_slave_1: entered promiscuous mode [ 959.462469][T19450] debugfs: 'hsr0' already exists in 'hsr' [ 959.462492][T19450] Cannot create hsr debugfs directory [ 959.652075][T19648] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4871'. [ 961.874508][T19709] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4885'. [ 962.150948][T13185] bridge_slave_1: left allmulticast mode [ 962.150982][T13185] bridge_slave_1: left promiscuous mode [ 962.152235][T13185] bridge0: port 2(bridge_slave_1) entered disabled state [ 962.815079][T19724] 9pnet_fd: p9_fd_create_tcp (19724): problem connecting socket to 127.0.0.1 [ 963.516233][T13185] bridge_slave_0: left allmulticast mode [ 963.516266][T13185] bridge_slave_0: left promiscuous mode [ 963.516530][T13185] bridge0: port 1(bridge_slave_0) entered disabled state [ 964.882313][T19761] UDC core: g1: couldn't find an available UDC or it's busy [ 965.480204][ T5617] Bluetooth: hci1: command 0x0406 tx timeout [ 965.680749][T13185] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 965.748415][ T36] audit: type=1326 audit(1785232056.259:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19784 comm="syz.0.4898" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf1f9de99 code=0x7ffc0000 [ 965.748468][ T36] audit: type=1326 audit(1785232056.259:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19784 comm="syz.0.4898" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf1f9de99 code=0x7ffc0000 [ 965.802590][ T36] audit: type=1326 audit(1785232056.319:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19784 comm="syz.0.4898" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf1f9de99 code=0x7ffc0000 [ 965.802648][ T36] audit: type=1326 audit(1785232056.319:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19784 comm="syz.0.4898" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f4cf1f9de99 code=0x7ffc0000 [ 965.802690][ T36] audit: type=1326 audit(1785232056.319:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19784 comm="syz.0.4898" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf1f9de99 code=0x7ffc0000 [ 965.802729][ T36] audit: type=1326 audit(1785232056.319:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19784 comm="syz.0.4898" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf1f9de99 code=0x7ffc0000 [ 965.802769][ T36] audit: type=1326 audit(1785232056.319:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19784 comm="syz.0.4898" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf1f9de99 code=0x7ffc0000 [ 965.937195][ T36] audit: type=1326 audit(1785232056.319:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19784 comm="syz.0.4898" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf1f9de99 code=0x7ffc0000 [ 965.937377][ T36] audit: type=1326 audit(1785232056.449:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19784 comm="syz.0.4898" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cf1f9de99 code=0x7ffc0000 [ 965.937567][ T36] audit: type=1326 audit(1785232056.449:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19784 comm="syz.0.4898" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4cf1f9de99 code=0x7ffc0000 [ 965.940399][T13185] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 965.997869][T13185] bond0 (unregistering): Released all slaves [ 966.181368][T19789] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4899'. [ 966.320606][ T5260] 8021q: adding VLAN 0 to HW filter on device eth1 [ 966.616707][T19797] UDC core: g1: couldn't find an available UDC or it's busy [ 966.721044][T19805] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4904'. [ 967.900026][T19819] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4908'. [ 968.201399][T19829] UDC core: g1: couldn't find an available UDC or it's busy [ 969.484997][T19844] tipc: Started in network mode [ 969.485029][T19844] tipc: Node identity 42cf86e9aa36, cluster identity 4711 [ 969.485415][T19844] tipc: Enabled bearer , priority 0 [ 970.058089][T19879] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4923'. [ 970.225287][T19831] tipc: Disabling bearer [ 970.295095][T19887] UDC core: g1: couldn't find an available UDC or it's busy [ 970.533758][ T5260] 8021q: adding VLAN 0 to HW filter on device eth2 [ 971.539568][T13185] hsr_slave_0: left promiscuous mode [ 971.560713][T13185] hsr_slave_1: left promiscuous mode [ 971.561668][T13185] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 971.561691][T13185] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 971.600595][T13185] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 971.600626][T13185] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 971.790214][T13185] veth1_macvtap: left promiscuous mode [ 971.790282][T13185] veth0_macvtap: left promiscuous mode [ 971.790425][T13185] veth1_vlan: left promiscuous mode [ 971.790529][T13185] veth0_vlan: left promiscuous mode [ 974.112345][T19929] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4939'. [ 974.229426][T13185] team0 (unregistering): Port device team_slave_1 removed [ 974.270137][T13185] team0 (unregistering): Port device team_slave_0 removed [ 974.488602][T19933] overlayfs: failed to resolve './file0': -2 [ 974.753820][T19937] overlayfs: failed to resolve './file0': -2 [ 974.848469][T19911] team0 (unregistering): Port device team_slave_0 removed [ 974.881741][T19939] netlink: 388 bytes leftover after parsing attributes in process `syz.0.4943'. [ 974.907024][T19911] team0 (unregistering): Port device 26±ÿ removed [ 976.407841][T19962] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4950'. [ 976.600337][T19974] overlayfs: failed to resolve './file0': -2 [ 976.678727][T19977] netlink: 388 bytes leftover after parsing attributes in process `syz.4.4953'. [ 976.817253][T19981] overlayfs: failed to resolve './file0': -2 [ 976.993639][T19990] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4957'. [ 977.135419][T19997] vcan0: tx drop: invalid sa for name 0xfffffffffffffffd [ 979.304343][T20030] netlink: 388 bytes leftover after parsing attributes in process `syz.5.4964'. [ 982.039207][T20064] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4972'. [ 983.206074][T20082] netlink: 388 bytes leftover after parsing attributes in process `syz.2.4977'. [ 983.658997][ T5829] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 983.790795][T19450] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 983.919242][T19450] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 983.937762][T19450] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 983.971366][ T5829] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 983.971421][ T5829] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 983.971443][ T5829] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 983.978140][ T5829] usb 5-1: config 0 descriptor?? [ 983.990912][ T5829] pwc: Askey VC010 type 2 USB webcam detected. [ 984.072148][T19450] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 984.086680][T19450] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 984.138903][T19450] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 984.160625][T19450] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 984.232716][ T5829] pwc: send_video_command error -71 [ 984.232732][ T5829] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 984.232834][ T5829] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 984.291221][T19450] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 984.321105][ T5829] usb 5-1: USB disconnect, device number 13 [ 985.644732][T19450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 985.771256][ T5829] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 985.851125][T20146] netlink: 388 bytes leftover after parsing attributes in process `syz.5.4987'. [ 985.874898][T19450] 8021q: adding VLAN 0 to HW filter on device team0 [ 985.894655][ T1256] bridge0: port 1(bridge_slave_0) entered blocking state [ 985.894845][ T1256] bridge0: port 1(bridge_slave_0) entered forwarding state [ 985.923633][ T990] bridge0: port 2(bridge_slave_1) entered blocking state [ 985.923816][ T990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 985.932212][ T5829] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 985.932264][ T5829] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 985.932286][ T5829] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.988289][ T5829] usb 5-1: config 0 descriptor?? [ 986.155705][ T5829] pwc: Askey VC010 type 2 USB webcam detected. [ 986.424814][ T5829] pwc: recv_control_msg error -32 req 02 val 2b00 [ 986.425954][ T5829] pwc: recv_control_msg error -32 req 02 val 2700 [ 986.427629][ T5829] pwc: recv_control_msg error -32 req 02 val 2c00 [ 986.433973][ T5829] pwc: recv_control_msg error -32 req 04 val 1000 [ 986.436074][ T5829] pwc: recv_control_msg error -32 req 04 val 1300 [ 986.437011][ T5829] pwc: recv_control_msg error -32 req 04 val 1400 [ 986.454587][T20092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 986.459732][T20092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 986.491528][T20092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 986.492647][T20092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 986.523317][T20092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 986.524177][T20092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 986.578545][T20156] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4992'. [ 986.595443][T20092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 986.618394][T20156] ip6gre1: entered allmulticast mode [ 986.628013][T20092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 988.146395][ T5829] pwc: recv_control_msg error -71 req 02 val 2100 [ 988.157950][ T5829] pwc: recv_control_msg error -71 req 04 val 1500 [ 988.158447][ T5829] pwc: recv_control_msg error -71 req 02 val 2500 [ 988.159271][ T5829] pwc: recv_control_msg error -71 req 02 val 2400 [ 988.159733][ T5829] pwc: recv_control_msg error -71 req 02 val 2600 [ 988.160168][ T5829] pwc: recv_control_msg error -71 req 02 val 2900 [ 988.160604][ T5829] pwc: recv_control_msg error -71 req 02 val 2800 [ 988.161209][ T5829] pwc: recv_control_msg error -71 req 04 val 1100 [ 988.161640][ T5829] pwc: recv_control_msg error -71 req 04 val 1200 [ 988.303673][ T5829] pwc: Registered as video103. [ 988.346232][ T5829] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input19 [ 988.641493][ T5829] usb 5-1: USB disconnect, device number 14 [ 988.923778][T19450] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 989.070619][T19450] veth0_vlan: entered promiscuous mode [ 989.104647][T19450] veth1_vlan: entered promiscuous mode [ 989.229129][T19450] veth0_macvtap: entered promiscuous mode [ 989.236998][T19450] veth1_macvtap: entered promiscuous mode [ 989.262901][T19450] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 989.285569][T19450] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 989.315439][ T1034] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 989.320921][ T1034] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 989.342984][ T3334] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 989.361408][ T3334] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 990.858917][ T990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 990.858937][ T990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 991.272790][T13185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 991.272810][T13185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 992.127042][ T5829] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 992.300888][ T5829] usb 4-1: device descriptor read/64, error -71 [ 992.540775][ T5829] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 993.081325][T20257] 9pnet_fd: p9_fd_create_tcp (20257): problem connecting socket to 127.0.0.1 [ 993.887522][ T1341] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.928917][ T5829] usb 4-1: device descriptor read/64, error -71 [ 994.095042][ T5829] usb usb4-port1: attempt power cycle [ 994.112448][T17635] ffs_data_put(): freeing [ 994.182866][ T5617] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 994.242840][ T5617] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 994.250955][ T5617] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 994.256367][ T5617] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 994.259726][ T5617] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 994.430077][ T5829] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 994.449704][ T5829] usb 4-1: device descriptor read/8, error -71 [ 994.717998][ T5829] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 994.729536][ T5829] usb 4-1: device descriptor read/8, error -71 [ 994.839210][ T5829] usb usb4-port1: unable to enumerate USB device [ 996.589206][ T5617] Bluetooth: hci4: command tx timeout [ 997.748977][T11440] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 997.899386][T11440] usb 6-1: device descriptor read/64, error -71 [ 998.067386][T20263] bridge0: port 1(bridge_slave_0) entered blocking state [ 998.067500][T20263] bridge0: port 1(bridge_slave_0) entered disabled state [ 998.067717][T20263] bridge_slave_0: entered allmulticast mode [ 998.107986][T20263] bridge_slave_0: entered promiscuous mode [ 998.134400][T20263] bridge0: port 2(bridge_slave_1) entered blocking state [ 998.134512][T20263] bridge0: port 2(bridge_slave_1) entered disabled state [ 998.134699][T20263] bridge_slave_1: entered allmulticast mode [ 998.138919][T11440] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 998.173866][T20263] bridge_slave_1: entered promiscuous mode [ 998.268912][T11440] usb 6-1: device descriptor read/64, error -71 [ 998.303063][T20263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 998.327987][T20263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 998.380065][T11440] usb usb6-port1: attempt power cycle [ 998.400117][T20263] team0: Port device team_slave_0 added [ 998.423820][T20263] team0: Port device team_slave_1 added [ 998.678919][ T5617] Bluetooth: hci4: command tx timeout [ 998.778916][T11440] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 998.801344][T11440] usb 6-1: device descriptor read/8, error -71 [ 998.805197][T20263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 998.805211][T20263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 998.805236][T20263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 998.816733][T20263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 998.816747][T20263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 998.816772][T20263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 999.044324][T11440] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 999.084769][T11440] usb 6-1: device descriptor read/8, error -71 [ 999.128402][T20263] hsr_slave_0: entered promiscuous mode [ 999.134380][T20263] hsr_slave_1: entered promiscuous mode [ 999.189239][T11440] usb usb6-port1: unable to enumerate USB device [ 1000.715264][T20263] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1000.773352][T13724] Bluetooth: hci4: command tx timeout [ 1001.948949][ T31] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1002.078997][ T31] usb 4-1: device descriptor read/64, error -71 [ 1002.235156][T20263] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.339985][ T31] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1002.469393][ T31] usb 4-1: device descriptor read/64, error -71 [ 1002.589616][ T31] usb usb4-port1: attempt power cycle [ 1002.838900][ T5617] Bluetooth: hci4: command tx timeout [ 1002.929044][ T31] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1002.949640][ T31] usb 4-1: device descriptor read/8, error -71 [ 1003.117676][T20263] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1004.968885][ T31] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1005.042331][ T31] usb 4-1: device descriptor read/8, error -71 [ 1005.149389][ T31] usb usb4-port1: unable to enumerate USB device [ 1005.581044][T20263] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.968237][T20596] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5158'. [ 1007.396502][T20263] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1007.458173][T20263] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1007.461220][T20263] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1007.530557][T20263] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1007.534116][T20263] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1007.583310][T20263] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1007.584234][T20263] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1007.632699][T20263] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1007.633817][T20626] netlink: 68 bytes leftover after parsing attributes in process `syz.5.5172'. [ 1007.855269][T20263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1007.910575][T20263] 8021q: adding VLAN 0 to HW filter on device team0 [ 1007.926380][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1007.926512][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1007.975860][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 1007.975942][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1008.465576][T20664] netlink: 68 bytes leftover after parsing attributes in process `syz.5.5185'. [ 1009.675281][T20709] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5197'. [ 1009.949514][T20720] ±ÿ: renamed from team_slave_1 (while UP) [ 1010.413877][T20263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1010.740050][T20263] veth0_vlan: entered promiscuous mode [ 1010.778563][T20263] veth1_vlan: entered promiscuous mode [ 1011.025615][T20263] veth0_macvtap: entered promiscuous mode [ 1011.259689][T20263] veth1_macvtap: entered promiscuous mode [ 1011.297341][T20263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1011.335102][T20263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1011.375870][ T1165] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.376400][ T1165] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.376860][ T1165] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.377094][ T1165] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.844176][T20763] tipc: Enabled bearer , priority 0 [ 1013.876286][T20775] tipc: Resetting bearer [ 1014.216404][T20762] tipc: Disabling bearer [ 1016.005411][ T161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1016.005432][ T161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1016.290577][ T4259] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1016.290596][ T4259] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1017.190372][T20858] netlink: 'syz.4.5247': attribute type 1 has an invalid length. [ 1017.400955][T20858] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1019.668090][ T36] kauditd_printk_skb: 22 callbacks suppressed [ 1019.668108][ T36] audit: type=1326 audit(1785232110.179:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20917 comm="syz.4.5273" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cbc08de99 code=0x7ffc0000 [ 1019.668155][ T36] audit: type=1326 audit(1785232110.179:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20917 comm="syz.4.5273" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cbc08de99 code=0x7ffc0000 [ 1019.680767][ T36] audit: type=1326 audit(1785232110.199:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20917 comm="syz.4.5273" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cbc08de99 code=0x7ffc0000 [ 1019.684144][ T36] audit: type=1326 audit(1785232110.199:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20917 comm="syz.4.5273" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cbc08de99 code=0x7ffc0000 [ 1019.684192][ T36] audit: type=1326 audit(1785232110.199:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20917 comm="syz.4.5273" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f1cbc08de99 code=0x7ffc0000 [ 1019.687376][ T36] audit: type=1326 audit(1785232110.199:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20917 comm="syz.4.5273" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cbc08de99 code=0x7ffc0000 [ 1019.687424][ T36] audit: type=1326 audit(1785232110.199:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20917 comm="syz.4.5273" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cbc08de99 code=0x7ffc0000 [ 1019.687465][ T36] audit: type=1326 audit(1785232110.199:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20917 comm="syz.4.5273" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cbc08de99 code=0x7ffc0000 [ 1019.688125][ T36] audit: type=1326 audit(1785232110.199:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20917 comm="syz.4.5273" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cbc08de99 code=0x7ffc0000 [ 1019.688169][ T36] audit: type=1326 audit(1785232110.199:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20917 comm="syz.4.5273" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1cbc08de99 code=0x7ffc0000 [ 1022.160790][T20978] fuse: Bad value for 'fd' [ 1023.863944][T21016] fuse: Bad value for 'fd' [ 1025.232475][ T36] kauditd_printk_skb: 47 callbacks suppressed [ 1025.232492][ T36] audit: type=1326 audit(1785232115.749:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21040 comm="syz.5.5326" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16d03ede99 code=0x7ffc0000 [ 1025.232800][ T36] audit: type=1326 audit(1785232115.749:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21040 comm="syz.5.5326" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16d03ede99 code=0x7ffc0000 [ 1025.298427][ T36] audit: type=1326 audit(1785232115.749:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21040 comm="syz.5.5326" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16d03ede99 code=0x7ffc0000 [ 1025.303204][ T36] audit: type=1326 audit(1785232115.809:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21040 comm="syz.5.5326" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16d03ede99 code=0x7ffc0000 [ 1025.303254][ T36] audit: type=1326 audit(1785232115.809:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21040 comm="syz.5.5326" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f16d03ede99 code=0x7ffc0000 [ 1025.304348][ T36] audit: type=1326 audit(1785232115.819:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21040 comm="syz.5.5326" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16d03ede99 code=0x7ffc0000 [ 1025.304393][ T36] audit: type=1326 audit(1785232115.819:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21040 comm="syz.5.5326" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16d03ede99 code=0x7ffc0000 [ 1025.304434][ T36] audit: type=1326 audit(1785232115.819:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21040 comm="syz.5.5326" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16d03ede99 code=0x7ffc0000 [ 1025.304667][ T36] audit: type=1326 audit(1785232115.819:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21040 comm="syz.5.5326" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f16d03ede99 code=0x7ffc0000 [ 1025.308276][ T36] audit: type=1326 audit(1785232115.819:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21040 comm="syz.5.5326" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16d03ede99 code=0x7ffc0000 [ 1027.157214][T21084] Bluetooth: MGMT ver 1.23 [ 1027.157249][T21084] Bluetooth: hci0: invalid length 0, exp 2 for type 19 [ 1027.826358][T21111] Bluetooth: hci0: invalid length 0, exp 2 for type 19 [ 1030.031779][T21190] netlink: 'syz.0.5380': attribute type 12 has an invalid length. [ 1030.174510][T21195] overlayfs: missing 'lowerdir' [ 1030.276935][T21197] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5383'. [ 1030.756150][T21205] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1031.906217][T21216] tipc: Started in network mode [ 1031.906246][T21216] tipc: Node identity 02d2e4342497, cluster identity 4711 [ 1031.906429][T21216] tipc: Enabled bearer , priority 0 [ 1031.921815][T21216] tipc: Resetting bearer [ 1032.042795][T21214] tipc: Disabling bearer [ 1032.147639][T21226] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 1034.957336][T21297] 9pnet_fd: p9_fd_create_tcp (21297): problem connecting socket to 127.0.0.1 [ 1035.099897][T15940] ffs_data_put(): freeing [ 1036.474892][T21328] Bluetooth: hci0: invalid length 0, exp 2 for type 19 [ 1036.551650][T21332] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5425'. [ 1038.025973][T21378] Bluetooth: hci0: invalid length 0, exp 2 for type 19 [ 1038.036330][T21381] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5440'. [ 1038.403262][T21393] overlayfs: failed to resolve './file0': -2 [ 1038.808889][T17942] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1038.972465][T17942] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1038.972492][T17942] usb 1-1: config 0 has no interfaces? [ 1038.972520][T17942] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1038.972542][T17942] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1039.039208][T17942] usb 1-1: config 0 descriptor?? [ 1039.265037][T17942] usb 1-1: USB disconnect, device number 31 [ 1040.000516][T21436] Bluetooth: hci0: invalid length 0, exp 2 for type 19 [ 1041.287798][T21453] overlayfs: missing 'lowerdir' [ 1042.529821][T21489] netlink: 'syz.0.5470': attribute type 12 has an invalid length. [ 1043.172523][T21493] bond0: (slave bond_slave_0): Releasing backup interface [ 1043.465959][T21503] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5476'. [ 1043.748219][T21510] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1044.634036][T21515] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5481'. [ 1044.861461][T21515] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1045.098999][T11440] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1045.254134][T11440] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1045.254160][T11440] usb 1-1: config 0 has no interfaces? [ 1045.254188][T11440] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1045.254211][T11440] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1045.304507][T11440] usb 1-1: config 0 descriptor?? [ 1045.539648][ T5587] usb 1-1: USB disconnect, device number 32 [ 1046.216208][T21568] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1047.206064][T21572] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5496'. [ 1047.272265][T21572] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1047.472769][T21581] overlayfs: failed to resolve './file0': -2 [ 1047.488110][T21583] fuse: Bad value for 'fd' [ 1047.488488][T21578] Bluetooth: hci0: invalid length 0, exp 2 for type 18 [ 1048.259601][T21613] input: syz1 as /devices/virtual/input/input21 [ 1049.406768][T21620] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1050.473234][T21626] Bluetooth: hci0: invalid length 0, exp 2 for type 19 [ 1050.634741][T21633] netlink: 'syz.5.5517': attribute type 12 has an invalid length. [ 1052.524239][T21660] Bluetooth: hci0: unsupported parameter 255 [ 1052.524259][T21660] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1052.704253][T21669] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1053.794516][T21676] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5537'. [ 1053.909849][ T36] kauditd_printk_skb: 8 callbacks suppressed [ 1053.909866][ T36] audit: type=1326 audit(1785232144.429:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21681 comm="syz.5.5538" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16d03ede99 code=0x7ffc0000 [ 1053.909912][ T36] audit: type=1326 audit(1785232144.429:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21681 comm="syz.5.5538" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16d03ede99 code=0x7ffc0000 [ 1053.931877][ T36] audit: type=1326 audit(1785232144.449:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21681 comm="syz.5.5538" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16d03ede99 code=0x7ffc0000 [ 1053.931926][ T36] audit: type=1326 audit(1785232144.449:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21681 comm="syz.5.5538" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16d03ede99 code=0x7ffc0000 [ 1053.934167][ T36] audit: type=1326 audit(1785232144.449:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21681 comm="syz.5.5538" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f16d03ede99 code=0x7ffc0000 [ 1053.934212][ T36] audit: type=1326 audit(1785232144.449:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21681 comm="syz.5.5538" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16d03ede99 code=0x7ffc0000 [ 1053.934253][ T36] audit: type=1326 audit(1785232144.449:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21681 comm="syz.5.5538" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16d03ede99 code=0x7ffc0000 [ 1053.936120][ T36] audit: type=1326 audit(1785232144.449:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21681 comm="syz.5.5538" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16d03ede99 code=0x7ffc0000 [ 1053.939909][ T36] audit: type=1326 audit(1785232144.449:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21681 comm="syz.5.5538" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16d03ede99 code=0x7ffc0000 [ 1053.941545][ T36] audit: type=1326 audit(1785232144.459:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21681 comm="syz.5.5538" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f16d03ede99 code=0x7ffc0000 [ 1054.065027][T21684] input: syz1 as /devices/virtual/input/input22 [ 1054.090278][T21676] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1054.558849][ T1341] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.062547][T21701] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1056.318515][T21713] netlink: 'syz.5.5545': attribute type 1 has an invalid length. [ 1056.405971][T21713] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1056.456340][T21717] Bluetooth: hci0: invalid length 0, exp 2 for type 19 [ 1058.130986][T21746] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5563'. [ 1058.159553][T21748] Bluetooth: hci0: invalid length 0, exp 2 for type 19 [ 1059.258149][T21778] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5578'. [ 1059.342531][T21781] overlayfs: overlapping lowerdir path [ 1060.250025][T21778] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1060.695371][T21795] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1063.790514][T21818] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5594'. [ 1063.976115][T21818] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1064.353889][T21838] kvm: pic: non byte read [ 1064.354096][T21838] kvm: pic: non byte read [ 1064.360652][T21838] kvm: pic: non byte read [ 1064.360925][T21838] kvm: pic: non byte read [ 1064.361122][T21838] kvm: pic: non byte read [ 1064.361300][T21838] kvm: pic: non byte read [ 1064.361480][T21838] kvm: pic: non byte read [ 1064.361656][T21838] kvm: pic: non byte read [ 1064.361830][T21838] kvm: pic: non byte read [ 1064.362005][T21838] kvm: pic: non byte read [ 1064.379643][T21852] input: syz1 as /devices/virtual/input/input23 [ 1064.461197][ T31] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1064.657754][ T31] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1064.657781][ T31] usb 4-1: config 0 has no interfaces? [ 1064.657830][ T31] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1064.657852][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1064.757322][ T31] usb 4-1: config 0 descriptor?? [ 1065.013141][T16587] usb 4-1: USB disconnect, device number 36 [ 1065.108483][T21868] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5611'. [ 1065.194700][T21868] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1068.140680][T13724] ================================================================== [ 1068.140772][T13724] BUG: KASAN: vmalloc-out-of-bounds in __list_del_entry_valid_or_report+0xb5/0x190 [ 1068.141016][T13724] Read of size 8 at addr ffffc9001ba21008 by task kworker/u9:2/13724 [ 1068.141032][T13724] [ 1068.141079][T13724] CPU: 1 UID: 0 PID: 13724 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1068.141132][T13724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1068.141145][T13724] Workqueue: hci0 hci_rx_work [ 1068.141289][T13724] Call Trace: [ 1068.141325][T13724] [ 1068.141385][T13724] dump_stack_lvl+0xe8/0x150 [ 1068.141497][T13724] print_address_description+0x55/0x1e0 [ 1068.141528][T13724] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 1068.141580][T13724] print_report+0x58/0x70 [ 1068.141598][T13724] kasan_report+0x117/0x150 [ 1068.141667][T13724] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 1068.141684][T13724] __list_del_entry_valid_or_report+0xb5/0x190 [ 1068.141699][T13724] kcov_remote_start+0x295/0x6f0 [ 1068.141762][T13724] hci_rx_work+0x10f/0x1020 [ 1068.141782][T13724] ? process_scheduled_works+0xa20/0x14e0 [ 1068.141839][T13724] process_scheduled_works+0xa8e/0x14e0 [ 1068.141866][T13724] ? __pfx_process_scheduled_works+0x10/0x10 [ 1068.141885][T13724] ? assign_work+0x3cf/0x5d0 [ 1068.141902][T13724] worker_thread+0xa47/0xfb0 [ 1068.141931][T13724] kthread+0x388/0x470 [ 1068.141991][T13724] ? __pfx_worker_thread+0x10/0x10 [ 1068.142008][T13724] ? __pfx_kthread+0x10/0x10 [ 1068.142029][T13724] ret_from_fork+0x514/0xb70 [ 1068.142107][T13724] ? __pfx_ret_from_fork+0x10/0x10 [ 1068.142130][T13724] ? __switch_to+0xc89/0x1420 [ 1068.142195][T13724] ? __pfx_kthread+0x10/0x10 [ 1068.142214][T13724] ret_from_fork_asm+0x1a/0x30 [ 1068.142256][T13724] [ 1068.142287][T13724] [ 1068.142291][T13724] The buggy address belongs to a vmalloc virtual mapping [ 1068.142329][T13724] Memory state around the buggy address: [ 1068.142373][T13724] ffffc9001ba20f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1068.142383][T13724] ffffc9001ba20f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1068.142394][T13724] >ffffc9001ba21000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1068.142401][T13724] ^ [ 1068.142409][T13724] ffffc9001ba21080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1068.142420][T13724] ffffc9001ba21100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1068.142428][T13724] ================================================================== [ 1068.142561][T13724] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1068.142574][T13724] CPU: 1 UID: 0 PID: 13724 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1068.142591][T13724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1068.142600][T13724] Workqueue: hci0 hci_rx_work [ 1068.142617][T13724] Call Trace: [ 1068.142623][T13724] [ 1068.142629][T13724] vpanic+0x56c/0xa60 [ 1068.142645][T13724] ? __pfx_vpanic+0x10/0x10 [ 1068.142658][T13724] ? __pfx___schedule+0x10/0x10 [ 1068.142744][T13724] panic+0xc5/0xd0 [ 1068.142757][T13724] ? __pfx_panic+0x10/0x10 [ 1068.142772][T13724] ? preempt_schedule_common+0x82/0xd0 [ 1068.142789][T13724] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 1068.142803][T13724] check_panic_on_warn+0x89/0xb0 [ 1068.142852][T13724] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 1068.142868][T13724] end_report+0x73/0x170 [ 1068.142887][T13724] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 1068.142900][T13724] kasan_report+0x128/0x150 [ 1068.142917][T13724] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 1068.142935][T13724] __list_del_entry_valid_or_report+0xb5/0x190 [ 1068.142950][T13724] kcov_remote_start+0x295/0x6f0 [ 1068.142982][T13724] hci_rx_work+0x10f/0x1020 [ 1068.142999][T13724] ? process_scheduled_works+0xa20/0x14e0 [ 1068.143017][T13724] process_scheduled_works+0xa8e/0x14e0 [ 1068.143048][T13724] ? __pfx_process_scheduled_works+0x10/0x10 [ 1068.143066][T13724] ? assign_work+0x3cf/0x5d0 [ 1068.143082][T13724] worker_thread+0xa47/0xfb0 [ 1068.143108][T13724] kthread+0x388/0x470 [ 1068.143128][T13724] ? __pfx_worker_thread+0x10/0x10 [ 1068.143143][T13724] ? __pfx_kthread+0x10/0x10 [ 1068.143163][T13724] ret_from_fork+0x514/0xb70 [ 1068.143185][T13724] ? __pfx_ret_from_fork+0x10/0x10 [ 1068.143205][T13724] ? __switch_to+0xc89/0x1420 [ 1068.143225][T13724] ? __pfx_kthread+0x10/0x10 [ 1068.143245][T13724] ret_from_fork_asm+0x1a/0x30 [ 1068.143266][T13724] [ 1068.146029][T13724] Kernel Offset: disabled