last executing test programs: 19m12.392103313s ago: executing program 0 (id=340): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000dd0000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000700000018150000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001d0000001801000020786c2500000000902020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000060000000000000000000000850000009e00000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x9}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) 19m12.156763824s ago: executing program 0 (id=343): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0xa0}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x20, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000680)=r0, 0x4) sendmsg$inet(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) 19m11.802189439s ago: executing program 0 (id=350): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/20], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 19m11.641013366s ago: executing program 0 (id=352): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) 19m11.509021647s ago: executing program 0 (id=353): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d71181a000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, &(0x7f00000005c0)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 19m11.354908743s ago: executing program 0 (id=354): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r2, &(0x7f0000001240)=ANY=[@ANYBLOB="1e0306003c5c98012884636086466670115aec58bbeb2abdcb41ffe89522010cac16b5fd2ab34c23371c5ad91cb0f5c7c0a5b6"], 0xffdd) 18m56.138079721s ago: executing program 32 (id=354): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r2, &(0x7f0000001240)=ANY=[@ANYBLOB="1e0306003c5c98012884636086466670115aec58bbeb2abdcb41ffe89522010cac16b5fd2ab34c23371c5ad91cb0f5c7c0a5b6"], 0xffdd) 11m14.028246832s ago: executing program 4 (id=2038): syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000000000fe8000000000000000000400000000aa"], 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000000000900000030000380140002007369743000000000000000000000000006"], 0x44}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x5000002}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040804}, 0x20000000) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11m13.377727661s ago: executing program 4 (id=2040): socket$inet6_udplite(0xa, 0x2, 0x88) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) getpid() ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f00000000c0)={0x0, 0x2, r0, 0x7}) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_vs\x00') openat$tun(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect(0x5, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0}) syz_open_dev$vim2m(0x0, 0x7, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f00000000c0)=@nullb, &(0x7f00000001c0)='.\x00', &(0x7f0000000080)='adfs\x00', 0x218800, 0x0) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) getpid() sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8000) pread64(r1, &(0x7f0000001140)=""/228, 0x87, 0x8) 11m7.592289876s ago: executing program 4 (id=2045): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000040), 0x10) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x40000c4) socket$caif_seqpacket(0x25, 0x5, 0x5) sendmsg(0xffffffffffffffff, 0x0, 0x40844) r0 = syz_open_procfs(0x0, 0x0) getdents64(r0, &(0x7f0000002f40)=""/4098, 0x1002) getdents64(r0, 0x0, 0x607a9e0a432a4785) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) recvmsg$can_bcm(r0, &(0x7f0000000580)={&(0x7f0000000180)=@ieee802154={0x24, @short}, 0x80, &(0x7f00000003c0)}, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11m6.068037073s ago: executing program 4 (id=2048): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bond0\x00'}) r0 = socket$netlink(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) getresgid(&(0x7f0000000040), 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(r0, 0x0, 0x20040887) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2000000000002) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="2b637075205d280b3f3e7f79ce7f9aa179573a83a26d67955e68e0e84d7aea22721d6fc484f3a603c2aa1c5cf67e2345f786e0815422cc80d7bfe839420d07f6e6caa3f8415a2e513dc1cba69d6c1c32c1a8cda11845fa2851641e6869fc835c37b2b1c8f109a326c7d1092ef84bd14caa4d38bd7b6eda1b749531071c77ae4e3a1260c359d8e1c4af3ca1007e876a26d657f934d3cd908d84bd861f39c3974c5ffda78cfcd563c50b2891d393f651e584a362f44d7d762ce3b231a82b9796fa7a0afcbde55b"], 0x5) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') 11m1.086647818s ago: executing program 4 (id=2055): socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) 10m55.483850772s ago: executing program 4 (id=2060): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r0, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)="cc5c84001214dbd9e5943aa8a315357330c56529d6b619a78687eea13ea02981afbb0fab70e8c3ab037cd82bd48f4947702a177974e7eff5f2ccdec909645f69e3dea5153157374459f6a21ba8609552d9ada54e81b0f19b55b77cf382ad229baa9decce1ea639a300f1fa65b945a0e29d36cb8ed369e91698c0e9ff3fea43", 0x7f}, {0x0}, {&(0x7f0000001400)="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", 0xd3d}], 0x3}}], 0x1, 0x11) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={0x0, 0x6f4}}, 0x0) 10m39.819898321s ago: executing program 33 (id=2060): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r0, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)="cc5c84001214dbd9e5943aa8a315357330c56529d6b619a78687eea13ea02981afbb0fab70e8c3ab037cd82bd48f4947702a177974e7eff5f2ccdec909645f69e3dea5153157374459f6a21ba8609552d9ada54e81b0f19b55b77cf382ad229baa9decce1ea639a300f1fa65b945a0e29d36cb8ed369e91698c0e9ff3fea43", 0x7f}, {0x0}, {&(0x7f0000001400)="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", 0xd3d}], 0x3}}], 0x1, 0x11) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={0x0, 0x6f4}}, 0x0) 3m49.634260645s ago: executing program 1 (id=2819): syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000500)={0x200, 0x1, &(0x7f0000000180)=[0x0], &(0x7f0000000200), &(0x7f0000000580)=[0x0], &(0x7f0000000040), 0x0, 0x1}) 3m49.210599154s ago: executing program 1 (id=2821): openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(r0, &(0x7f0000000ec0)=[{{&(0x7f00000002c0)=@l2tp={0x2, 0x0, @private=0xa010100, 0x4}, 0x80, &(0x7f0000000340)=[{&(0x7f00000006c0)="cc5c84001214dbd9e5943aa8a315357330c56529d6b619a78687eea13ea02981afbb0fab70e8c3ab037cd82bd48f4947702a177974e7eff5f2ccdec909645f69e3dea5153157374459f6a21ba8609552d9ada54e81b0f19b55b77cf382ad229baa9decce1ea639a300f1fa65b945a0e29d36cb8ed369e916", 0x78}, {0x0}, {&(0x7f0000001400)="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", 0xda4}], 0x3}}, {{0x0, 0x0, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000880)="90b9f79fecb3ad0dc00ca95fb148a3ba4355cee5ce27d2c10d8474464a37dea0c1ab2a961404f5aa5493cdadb4b6bf4131e96c0aef0f89065db2aa551c68ce3fa911638fd608ff9e30cce409b6e516e59c272cdbbb88c83dc61199", 0x5b}], 0x2}}], 0x2, 0x11) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b000000", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3m48.897941855s ago: executing program 1 (id=2823): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x8040010) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) 3m48.622121865s ago: executing program 1 (id=2824): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x11, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x2, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000340)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000100)={{}, {0x0, 0x9}}, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r4, 0xc0b45545, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000440), 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0xc0800) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000280)='./file0\x00') symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a500}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x2}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x80000000}]}}}]}, 0x44}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 3m48.334163667s ago: executing program 1 (id=2826): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) 3m48.239441051s ago: executing program 2 (id=2828): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10002, 0x1, 0x1}) r1 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x3) 3m48.09692114s ago: executing program 1 (id=2830): syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000500)={0x200, 0x1, &(0x7f0000000180)=[0x0], &(0x7f0000000200), &(0x7f0000000580)=[0x0], &(0x7f0000000040), 0x0, 0x1}) 3m46.846610022s ago: executing program 2 (id=2832): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0x9, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x1, 0x74, &(0x7f0000000200)=""/116, 0x40f00, 0xc, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x5, 0xf, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x10, 0x3}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r0, 0x0, 0x0}, 0x20) 3m46.629103041s ago: executing program 2 (id=2834): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x11, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x2, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000340)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) timer_create(0x3, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000ec0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) timer_settime(0x0, 0x1, &(0x7f0000000100)={{}, {0x0, 0x9}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000440), 0x0) accept4$alg(r4, 0x0, 0x0, 0xc0800) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000280)='./file0\x00') symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a500}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x2}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x80000000}]}}}]}, 0x44}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 3m44.816098975s ago: executing program 2 (id=2836): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x10000, 0x0) 3m44.339641129s ago: executing program 2 (id=2838): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000540)=ANY=[@ANYBLOB="12010002000000102505a8a440000102030109021b000101000000090400ff02070101000905010200b4e8"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f00000000c0)="5546f1a2cb78551985", 0x9) 3m43.078513964s ago: executing program 2 (id=2842): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x11, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x2, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000340)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) timer_create(0x3, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000ec0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) timer_settime(0x0, 0x1, &(0x7f0000000100)={{}, {0x0, 0x9}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000440), 0x0) accept4$alg(r4, 0x0, 0x0, 0xc0800) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000280)='./file0\x00') symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a500}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x2}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x80000000}]}}}]}, 0x44}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 3m42.555940115s ago: executing program 34 (id=2842): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x11, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x2, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000340)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) timer_create(0x3, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000ec0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) timer_settime(0x0, 0x1, &(0x7f0000000100)={{}, {0x0, 0x9}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000440), 0x0) accept4$alg(r4, 0x0, 0x0, 0xc0800) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000280)='./file0\x00') symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a500}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x2}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x80000000}]}}}]}, 0x44}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 3m39.462004526s ago: executing program 3 (id=2850): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) 3m39.305927409s ago: executing program 3 (id=2851): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x11, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x2, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000340)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) timer_create(0x3, 0x0, &(0x7f0000000080)) timer_settime(0x0, 0x1, &(0x7f0000000100)={{}, {0x0, 0x9}}, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r4, 0xc0b45545, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000440), 0x0) accept4$alg(r5, 0x0, 0x0, 0xc0800) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000280)='./file0\x00') symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a500}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x2}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x80000000}]}}}]}, 0x44}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 3m37.871629068s ago: executing program 3 (id=2852): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x11, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x2, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000340)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) timer_create(0x3, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000ec0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) timer_settime(0x0, 0x1, &(0x7f0000000100)={{}, {0x0, 0x9}}, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r4, 0xc0b45545, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000440), 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0xc0800) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000280)='./file0\x00') symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a500}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x2}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x80000000}]}}}]}, 0x44}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 3m36.270143415s ago: executing program 3 (id=2854): socket$nl_route(0x10, 0x3, 0x0) unshare(0x6a040000) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd71, 0xffffffffffffffff}, 0x78) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/246) 3m28.133114571s ago: executing program 3 (id=2867): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount$cgroup(0x0, 0x0, 0x0, 0x10000, 0x0) 3m28.031120673s ago: executing program 3 (id=2868): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r2, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r2, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@default, @null, @null, @default, @bcast, @default]}, 0x40) 3m12.602683316s ago: executing program 35 (id=2868): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r2, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r2, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@default, @null, @null, @default, @bcast, @default]}, 0x40) 11.345783745s ago: executing program 5 (id=3130): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r0, 0x0, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000040)={0x2, 0x0, {&(0x7f0000000740)=""/96, 0x60, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r0, 0x0, 0x0) write$vhost_msg_v2(r0, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000000a80)=""/212, 0xd4, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg(r0, &(0x7f00000005c0)={0x1, {&(0x7f0000000f00)=""/4096, 0x1000, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000c40)={0x2, 0x0, {&(0x7f00000009c0)=""/105, 0x69, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000e40)=""/187, 0xbb, 0x0, 0x2, 0x3}}, 0x48) 11.160847958s ago: executing program 5 (id=3133): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x1370, &(0x7f0000000380)={0x0, 0x49fa, 0x10, 0x40, 0x3e6}, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_open_dev$vim2m(&(0x7f0000000040), 0x40003, 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, 0x0, &(0x7f0000000200), 0x2, r0}, 0x38) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000004c00)=""/102392, 0x18ff8) r2 = syz_io_uring_setup(0xa4, &(0x7f0000000100)={0x0, 0x200089bb, 0x400, 0x5, 0x1c3}, &(0x7f0000000240)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x0) io_uring_enter(r2, 0x32dc, 0x4, 0x40, 0x0, 0x0) 9.719923218s ago: executing program 6 (id=3134): rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x3, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder0\x00', 0x1, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$video(&(0x7f0000000280), 0x7f, 0x68c02) r1 = syz_io_uring_setup(0x462, &(0x7f0000000200)={0x0, 0x86fb, 0x10000, 0x0, 0x4c}, &(0x7f0000000140), 0x0) io_uring_enter(r1, 0x48ed, 0x0, 0x2, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) pselect6(0x40, &(0x7f0000000080)={0x5, 0x0, 0x120000000000, 0x2, 0x500, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f0000000180)={0x3fe, 0x7, 0x0, 0x9, 0x86, 0x800, 0x80000002}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 9.52753983s ago: executing program 6 (id=3135): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x63) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x4842, 0x0) writev(r0, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000e00)='t', 0x2fd200}, {0x0}, {&(0x7f0000001000)="d6", 0x20c00}], 0x21) 9.434824594s ago: executing program 5 (id=3136): openat$vnet(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) setfsgid(0xee00) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) munmap(&(0x7f0000901000/0x3000)=nil, 0x3000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x300, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e77, 0x20000000, 0x94a, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x3ffa, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x4000004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, r5, 0x9c3fa077fa966179, 0x4, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x0) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000000)={@my=0x0}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@remote, @in6=@private0}}, {{@in=@broadcast}}}, &(0x7f00000004c0)=0xe4) getresgid(&(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)) 7.737947102s ago: executing program 5 (id=3137): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) rt_sigqueueinfo(r0, 0x15, &(0x7f0000000300)={0x8, 0x5, 0x3}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x589b}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r4, 0x400, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001340)=@newtfilter={0x878, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x4, 0xa}, {}, {0xffe0, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x84c, 0x2, [@TCA_FW_POLICE={0x848, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x10001, 0x2, 0x923, 0x3, 0x10000, 0x2, 0x1, 0x200, 0x80000001, 0x9, 0x4, 0x8000, 0xf34, 0x9, 0x0, 0x6, 0xffc, 0x9, 0x1, 0x0, 0x4, 0xc59d, 0x4, 0xfff, 0x9, 0x2820, 0x4, 0x7fff, 0x0, 0xfffffffe, 0x8, 0x5, 0x400, 0x78, 0x2, 0x6, 0x7, 0x7, 0x8, 0x7fffffff, 0x3ff, 0x200, 0x7, 0xff, 0x6, 0x4, 0x5, 0x7, 0x8, 0x1, 0x1, 0x100, 0x9, 0x7, 0x8, 0x4, 0x1ff, 0x4, 0x3, 0x5, 0x4, 0x3, 0x1, 0x16, 0x800, 0x9, 0xfee8, 0x8, 0x971, 0x9, 0x8, 0x5, 0xf9, 0x200, 0xf, 0x8, 0xfffff999, 0x447c, 0x133, 0x7, 0x10001, 0xfffffff9, 0x6, 0xfffffff8, 0x8001, 0x6, 0x4, 0x0, 0xf, 0x5, 0x4, 0x8, 0x0, 0x7, 0x2, 0x7, 0xffffc000, 0x383f, 0x3, 0xff, 0x4, 0x7fff, 0x9, 0x8, 0x8, 0x5, 0x3, 0x1, 0x100, 0x5, 0x4, 0x1ff, 0x1ff, 0x9, 0x9, 0x570a, 0x4c37, 0x0, 0x0, 0x2, 0x5, 0x1, 0x2, 0x2e949a91, 0x7, 0x0, 0x8, 0xa245, 0x20, 0x5, 0x9f27, 0xfffffff6, 0x9, 0x400, 0x5bd, 0xffffff50, 0x3, 0x8000, 0x2, 0x6, 0x22cc, 0x8, 0x5, 0x2, 0xe28c, 0x1, 0x5, 0x7ff, 0xd, 0xfffffff9, 0x0, 0x6, 0x0, 0x2, 0x8, 0x7, 0x1000, 0xfffffff7, 0x5, 0x0, 0x7, 0xffff, 0x7fff, 0x80, 0x6c50, 0x80, 0x6, 0x2, 0xffffffff, 0xad36, 0xf, 0x8, 0x9, 0x4, 0x3, 0x2, 0x5de3, 0xff, 0x20000, 0x1, 0x1ff, 0x7aa, 0x0, 0x200, 0x3a17ea4b, 0x3, 0x5, 0x517, 0xe7, 0x8, 0x9, 0x6, 0x7ff, 0x8, 0x6, 0x4, 0x7ff, 0xfffffff9, 0x7, 0x81, 0x81, 0x40cc, 0x3, 0x8, 0x7fff, 0x58, 0x5, 0x27, 0x9db8, 0x2c, 0x5, 0x101, 0x5, 0x7ff, 0x6, 0xb, 0x3, 0x8, 0x6, 0x8, 0x8f, 0x9, 0x46, 0x2, 0xee0, 0x5, 0x0, 0x3, 0x3, 0x5, 0xff, 0xf7, 0x6, 0x8a, 0x8, 0x5260, 0x4, 0x7, 0x137c, 0x0, 0x80000001, 0x2, 0xde, 0x4, 0xfffffffb, 0x1, 0x81, 0xffff, 0x0, 0x1ff, 0x6, 0xdd, 0x9, 0x1c, 0x80000001]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x3, 0x6, 0xf2, 0x9, 0x3d13, 0x200, 0x100, 0x5, 0x6, 0x4, 0x800, 0x0, 0x4, 0x6, 0x0, 0x5, 0x4007, 0x6, 0xe, 0x3, 0x4, 0x3ff, 0x2, 0x1ff, 0x4, 0x2, 0x101, 0x3, 0x9, 0x7, 0xffffb4af, 0x4, 0x3, 0x7, 0x1, 0x6, 0x1, 0x7, 0x80000000, 0x7, 0x0, 0x7, 0x0, 0x0, 0x3, 0x6, 0x7fff, 0x7ff, 0x2, 0xb, 0xa74, 0x8, 0x1, 0xb, 0x3ff, 0x400, 0x8, 0x2, 0xffffffff, 0x1, 0x1, 0x9, 0x7ce, 0x10, 0x80000001, 0x68, 0x0, 0x7fff, 0x6, 0xffffffff, 0x0, 0x4, 0x101, 0x80000000, 0x7, 0x101, 0x7f, 0x6, 0x8001, 0x8000, 0xc, 0x1, 0x9, 0x6, 0xa9, 0x2, 0x5, 0xffffff07, 0x2, 0x8, 0x7a90, 0xf, 0x633, 0x200, 0x7cfe, 0x3, 0x6, 0x632b, 0x10000, 0x9, 0x4, 0xffffffff, 0xc, 0x3, 0x5, 0x2, 0x7fff, 0x2, 0x4, 0x3, 0x3e, 0x5, 0x2, 0x1, 0x2685, 0x64f, 0x2, 0x0, 0x6, 0x4, 0x1, 0x4, 0xdbb1, 0x6, 0x4, 0x7, 0x100, 0x12, 0x9, 0x9, 0x800006c6, 0x10, 0x5, 0x6, 0xea, 0xfffffffe, 0x76300756, 0x0, 0xc443, 0xf, 0xc, 0x7, 0x3, 0x4, 0x3ff, 0x5549, 0xa566, 0x0, 0x2, 0x9, 0x5094, 0x7, 0x1, 0x164, 0x7, 0x8, 0x0, 0x6, 0x15c, 0x1, 0x1, 0x8, 0x1, 0x6000000, 0x7, 0x100, 0xe2d6, 0x7fff, 0xffff47f0, 0x0, 0x5, 0x10, 0x5, 0x1, 0xa6, 0x8, 0x1, 0x0, 0x8, 0x3fb, 0x3, 0x14, 0xfff, 0x4, 0x8, 0x1a6a2443, 0x7fffffff, 0xc, 0x2, 0x39a1, 0xc58, 0x4, 0xa9d, 0x3ff, 0x3, 0x9, 0x8, 0x2000001, 0xfc, 0x6, 0x5, 0x6, 0x1d6e0, 0x7, 0x5, 0x9, 0x5, 0xe, 0x1, 0xc0, 0xb, 0x7, 0x7, 0x8, 0x6, 0x2, 0x0, 0x3, 0x4, 0x6, 0x0, 0x2, 0x3, 0x2, 0x0, 0x9, 0x1, 0x6, 0x8000, 0x8001, 0x0, 0xcc1, 0x80000001, 0x800, 0x0, 0x0, 0x4, 0xfffffffa, 0x9, 0x6d, 0x7, 0x3, 0x1, 0x2, 0x4, 0x6, 0x100, 0x7, 0x7fffffff, 0x8, 0x5, 0x8e2, 0xe, 0xffff7fff, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x20000003, 0x8, 0x3, 0x7f, {0x1, 0x2, 0x5f0, 0xfff, 0xba6, 0x7}, {0x5, 0x0, 0x4, 0xb, 0x42ec, 0x65f}, 0x80000000, 0x9, 0xcbb}}]}]}}]}, 0x878}, 0x1, 0x0, 0x0, 0x8848}, 0x80) 7.443107733s ago: executing program 6 (id=3138): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) rt_sigqueueinfo(r0, 0x15, &(0x7f0000000300)={0x8, 0x5, 0x3}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x589b}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) r4 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r4, 0x400, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001340)=@newtfilter={0x878, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x4, 0xa}, {}, {0xffe0, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x84c, 0x2, [@TCA_FW_POLICE={0x848, 0x2, [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x10001, 0x2, 0x923, 0x3, 0x10000, 0x2, 0x1, 0x200, 0x80000001, 0x9, 0x4, 0x8000, 0xf34, 0x9, 0x0, 0x6, 0xffc, 0x9, 0x1, 0x0, 0x4, 0xc59d, 0x4, 0xfff, 0x9, 0x2820, 0x4, 0x7fff, 0x0, 0xfffffffe, 0x8, 0x5, 0x400, 0x78, 0x2, 0x6, 0x7, 0x7, 0x8, 0x7fffffff, 0x3ff, 0x200, 0x7, 0xff, 0x6, 0x4, 0x5, 0x7, 0x8, 0x1, 0x1, 0x100, 0x9, 0x7, 0x8, 0x4, 0x1ff, 0x4, 0x3, 0x5, 0x4, 0x3, 0x1, 0x16, 0x800, 0x9, 0xfee8, 0x8, 0x971, 0x9, 0x8, 0x5, 0xf9, 0x200, 0xf, 0x8, 0xfffff999, 0x447c, 0x133, 0x7, 0x10001, 0xfffffff9, 0x6, 0xfffffff8, 0x8001, 0x6, 0x4, 0x0, 0xf, 0x5, 0x4, 0x8, 0x0, 0x7, 0x2, 0x7, 0xffffc000, 0x383f, 0x3, 0xff, 0x4, 0x7fff, 0x9, 0x8, 0x8, 0x5, 0x3, 0x1, 0x100, 0x5, 0x4, 0x1ff, 0x1ff, 0x9, 0x9, 0x570a, 0x4c37, 0x0, 0x0, 0x2, 0x5, 0x1, 0x2, 0x2e949a91, 0x7, 0x0, 0x8, 0xa245, 0x20, 0x5, 0x9f27, 0xfffffff6, 0x9, 0x400, 0x5bd, 0xffffff50, 0x3, 0x8000, 0x2, 0x6, 0x22cc, 0x8, 0x5, 0x2, 0xe28c, 0x1, 0x5, 0x7ff, 0xd, 0xfffffff9, 0x0, 0x6, 0x0, 0x2, 0x8, 0x7, 0x1000, 0xfffffff7, 0x5, 0x0, 0x7, 0xffff, 0x7fff, 0x80, 0x6c50, 0x80, 0x6, 0x2, 0xffffffff, 0xad36, 0xf, 0x8, 0x9, 0x4, 0x3, 0x2, 0x5de3, 0xff, 0x20000, 0x1, 0x1ff, 0x7aa, 0x0, 0x200, 0x3a17ea4b, 0x3, 0x5, 0x517, 0xe7, 0x8, 0x9, 0x6, 0x7ff, 0x8, 0x6, 0x4, 0x7ff, 0xfffffff9, 0x7, 0x81, 0x81, 0x40cc, 0x3, 0x8, 0x7fff, 0x58, 0x5, 0x27, 0x9db8, 0x2c, 0x5, 0x101, 0x5, 0x7ff, 0x6, 0xb, 0x3, 0x8, 0x6, 0x8, 0x8f, 0x9, 0x46, 0x2, 0xee0, 0x5, 0x0, 0x3, 0x3, 0x5, 0xff, 0xf7, 0x6, 0x8a, 0x8, 0x5260, 0x4, 0x7, 0x137c, 0x0, 0x80000001, 0x2, 0xde, 0x4, 0xfffffffb, 0x1, 0x81, 0xffff, 0x0, 0x1ff, 0x6, 0xdd, 0x9, 0x1c, 0x80000001]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x3, 0x6, 0xf2, 0x9, 0x3d13, 0x200, 0x100, 0x5, 0x6, 0x4, 0x800, 0x0, 0x4, 0x6, 0x0, 0x5, 0x4007, 0x6, 0xe, 0x3, 0x4, 0x3ff, 0x2, 0x1ff, 0x4, 0x2, 0x101, 0x3, 0x9, 0x7, 0xffffb4af, 0x4, 0x3, 0x7, 0x1, 0x6, 0x1, 0x7, 0x80000000, 0x7, 0x0, 0x7, 0x0, 0x0, 0x3, 0x6, 0x7fff, 0x7ff, 0x2, 0xb, 0xa74, 0x8, 0x1, 0xb, 0x3ff, 0x400, 0x8, 0x2, 0xffffffff, 0x1, 0x1, 0x9, 0x7ce, 0x10, 0x80000001, 0x68, 0x0, 0x7fff, 0x6, 0xffffffff, 0x0, 0x4, 0x101, 0x80000000, 0x7, 0x101, 0x7f, 0x6, 0x8001, 0x8000, 0xc, 0x1, 0x9, 0x6, 0xa9, 0x2, 0x5, 0xffffff07, 0x2, 0x8, 0x7a90, 0xf, 0x633, 0x200, 0x7cfe, 0x3, 0x6, 0x632b, 0x10000, 0x9, 0x4, 0xffffffff, 0xc, 0x3, 0x5, 0x2, 0x7fff, 0x2, 0x4, 0x3, 0x3e, 0x5, 0x2, 0x1, 0x2685, 0x64f, 0x2, 0x0, 0x6, 0x4, 0x1, 0x4, 0xdbb1, 0x6, 0x4, 0x7, 0x100, 0x12, 0x9, 0x9, 0x800006c6, 0x10, 0x5, 0x6, 0xea, 0xfffffffe, 0x76300756, 0x0, 0xc443, 0xf, 0xc, 0x7, 0x3, 0x4, 0x3ff, 0x5549, 0xa566, 0x0, 0x2, 0x9, 0x5094, 0x7, 0x1, 0x164, 0x7, 0x8, 0x0, 0x6, 0x15c, 0x1, 0x1, 0x8, 0x1, 0x6000000, 0x7, 0x100, 0xe2d6, 0x7fff, 0xffff47f0, 0x0, 0x5, 0x10, 0x5, 0x1, 0xa6, 0x8, 0x1, 0x0, 0x8, 0x3fb, 0x3, 0x14, 0xfff, 0x4, 0x8, 0x1a6a2443, 0x7fffffff, 0xc, 0x2, 0x39a1, 0xc58, 0x4, 0xa9d, 0x3ff, 0x3, 0x9, 0x8, 0x2000001, 0xfc, 0x6, 0x5, 0x6, 0x1d6e0, 0x7, 0x5, 0x9, 0x5, 0xe, 0x1, 0xc0, 0xb, 0x7, 0x7, 0x8, 0x6, 0x2, 0x0, 0x3, 0x4, 0x6, 0x0, 0x2, 0x3, 0x2, 0x0, 0x9, 0x1, 0x6, 0x8000, 0x8001, 0x0, 0xcc1, 0x80000001, 0x800, 0x0, 0x0, 0x4, 0xfffffffa, 0x9, 0x6d, 0x7, 0x3, 0x1, 0x2, 0x4, 0x6, 0x100, 0x7, 0x7fffffff, 0x8, 0x5, 0x8e2, 0xe, 0xffff7fff, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x20000003, 0x8, 0x3, 0x7f, {0x1, 0x2, 0x5f0, 0xfff, 0xba6, 0x7}, {0x5, 0x0, 0x4, 0xb, 0x42ec, 0x65f}, 0x80000000, 0x9, 0xcbb}}]}]}}]}, 0x878}, 0x1, 0x0, 0x0, 0x8848}, 0x80) 3.088535896s ago: executing program 6 (id=3139): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 2.760208938s ago: executing program 6 (id=3140): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) syz_socket_connect_nvme_tcp() io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000100), 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) clock_getres(0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x36}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 2.758459667s ago: executing program 5 (id=3141): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) socket(0x1e, 0x4, 0x0) socket(0x1e, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) 324.666637ms ago: executing program 6 (id=3142): socket$packet(0x11, 0xa, 0x300) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) dup3(0xffffffffffffffff, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(r1, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) 0s ago: executing program 5 (id=3143): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x1370, &(0x7f0000000380)={0x0, 0x49fa, 0x10, 0x40, 0x3e6}, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_open_dev$vim2m(&(0x7f0000000040), 0x40003, 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, 0x0, &(0x7f0000000200), 0x2, r0}, 0x38) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000004c00)=""/102392, 0x18ff8) r2 = syz_io_uring_setup(0xa4, &(0x7f0000000100)={0x0, 0x200089bb, 0x400, 0x5, 0x1c3}, &(0x7f0000000240)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x0) io_uring_enter(r2, 0x32dc, 0x4, 0x40, 0x0, 0x0) kernel console output (not intermixed with test programs): 0] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1205.923098][ T3580] bond0 (unregistering): Released all slaves [ 1205.987756][T15740] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1206.200582][T14915] dvb-usb: found a 'Terratec Cinergy T Express' in warm state. [ 1206.208702][T14915] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1206.213931][T14915] dvbdev: DVB: registering new adapter (Terratec Cinergy T Express) [ 1206.214001][T14915] usb 6-1: media controller created [ 1206.278449][T14915] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1206.345066][T15740] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1206.396320][ T3580] tipc: Left network mode [ 1206.472364][T15740] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1206.488144][T14915] DVB: Unable to find symbol dib7000p_attach() [ 1206.488161][T14915] dvb-usb: no frontend was attached by 'Terratec Cinergy T Express' [ 1206.654129][T14915] rc_core: IR keymap rc-dib0700-rc5 not found [ 1206.654153][T14915] Registered IR keymap rc-empty [ 1206.654450][T14915] dvb-usb: could not initialize remote control. [ 1206.654462][T14915] dvb-usb: Terratec Cinergy T Express successfully initialized and connected. [ 1206.706313][T14915] usb 6-1: USB disconnect, device number 53 [ 1206.754440][T14915] dvb-usb: Terratec Cinergy T Express successfully deinitialized and disconnected. [ 1207.329827][T14915] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1207.336909][T15794] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1207.400001][ T5800] Bluetooth: hci4: command tx timeout [ 1207.470256][T15794] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1207.480379][T14915] usb 6-1: Using ep0 maxpacket: 8 [ 1207.501606][T14915] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1207.501633][T14915] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1207.501682][T14915] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1207.501709][T14915] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1207.501749][T14915] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1207.501769][T14915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1207.531734][T14915] hub 6-1:1.0: bad descriptor, ignoring hub [ 1207.531780][T14915] hub 6-1:1.0: probe with driver hub failed with error -5 [ 1207.532849][T14915] cdc_wdm 6-1:1.0: skipping garbage [ 1207.532867][T14915] cdc_wdm 6-1:1.0: skipping garbage [ 1207.557676][T14915] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1207.557715][T14915] cdc_wdm 6-1:1.0: Unknown control protocol [ 1207.874256][T15794] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1207.931954][T15794] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1208.165660][T15977] usb 6-1: reset high-speed USB device number 54 using dummy_hcd [ 1208.189929][ T3580] hsr_slave_0: left promiscuous mode [ 1208.230007][ T3580] hsr_slave_1: left promiscuous mode [ 1208.231762][ T3580] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1208.231782][ T3580] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1208.256194][ T3580] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1208.256229][ T3580] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1208.348400][ T3580] veth1_macvtap: left promiscuous mode [ 1208.348479][ T3580] veth0_macvtap: left promiscuous mode [ 1208.348652][ T3580] veth1_vlan: left promiscuous mode [ 1208.348706][ T3580] veth0_vlan: left promiscuous mode [ 1208.990228][T15977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1208.993008][T15977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1209.190427][ T5885] usb 6-1: USB disconnect, device number 54 [ 1209.499553][ T5800] Bluetooth: hci4: command tx timeout [ 1209.979896][ T5946] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1210.159941][ T5946] usb 6-1: Using ep0 maxpacket: 8 [ 1210.164221][ T5946] usb 6-1: config 127 has an invalid interface number: 171 but max is 1 [ 1210.164249][ T5946] usb 6-1: config 127 has no interface number 1 [ 1210.164311][ T5946] usb 6-1: config 127 interface 0 altsetting 10 has an invalid descriptor for endpoint zero, skipping [ 1210.164333][ T5946] usb 6-1: config 127 interface 171 has no altsetting 0 [ 1210.164353][ T5946] usb 6-1: config 127 interface 0 has no altsetting 0 [ 1210.191795][ T5946] usb 6-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 1210.191832][ T5946] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1210.191857][ T5946] usb 6-1: Product: syz [ 1210.191875][ T5946] usb 6-1: Manufacturer: syz [ 1210.191893][ T5946] usb 6-1: SerialNumber: syz [ 1210.464152][ T5946] xr_serial 6-1:127.171: xr_serial converter detected [ 1210.468941][ T5946] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 1210.468987][ T5946] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1210.484277][ T5946] usb 6-1: USB disconnect, device number 55 [ 1210.494721][ T5946] xr_serial 6-1:127.171: device disconnected [ 1210.960909][ T3580] team0 (unregistering): Port device team_slave_1 removed [ 1211.211451][ T3580] team0 (unregistering): Port device team_slave_0 removed [ 1211.269990][ T5885] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1211.461820][ T5885] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1211.461891][ T5885] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1211.461918][ T5885] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1211.465723][ T5885] usb 6-1: config 0 descriptor?? [ 1211.522016][ T5885] pwc: Askey VC010 type 2 USB webcam detected. [ 1211.579732][ T5800] Bluetooth: hci4: command tx timeout [ 1211.700384][ T5885] pwc: send_video_command error -71 [ 1211.700405][ T5885] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1211.700539][ T5885] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 1211.707865][ T5885] usb 6-1: USB disconnect, device number 56 [ 1212.268462][ T5885] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1212.430846][ T5885] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1212.430912][ T5885] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1212.430936][ T5885] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1212.437892][ T5885] usb 6-1: config 0 descriptor?? [ 1212.464045][ T5885] pwc: Askey VC010 type 2 USB webcam detected. [ 1212.856375][ T5885] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1212.857115][ T5885] pwc: recv_control_msg error -32 req 02 val 2700 [ 1212.857814][ T5885] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1212.858552][ T5885] pwc: recv_control_msg error -32 req 04 val 1000 [ 1212.859241][ T5885] pwc: recv_control_msg error -32 req 04 val 1300 [ 1212.860912][ T5885] pwc: recv_control_msg error -32 req 04 val 1400 [ 1212.900733][ T5885] pwc: recv_control_msg error -32 req 02 val 2000 [ 1212.901454][ T5885] pwc: recv_control_msg error -32 req 02 val 2100 [ 1212.902182][ T5885] pwc: recv_control_msg error -32 req 04 val 1500 [ 1212.902877][ T5885] pwc: recv_control_msg error -32 req 02 val 2500 [ 1213.111380][ T5885] pwc: recv_control_msg error -71 req 02 val 2600 [ 1213.112745][ T5885] pwc: recv_control_msg error -71 req 02 val 2900 [ 1213.113241][ T5885] pwc: recv_control_msg error -71 req 02 val 2800 [ 1213.115837][ T5885] pwc: recv_control_msg error -71 req 04 val 1100 [ 1213.116310][ T5885] pwc: recv_control_msg error -71 req 04 val 1200 [ 1213.118341][ T5885] pwc: Registered as video103. [ 1213.123562][ T5885] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input13 [ 1213.130877][ T5885] usb 6-1: USB disconnect, device number 57 [ 1213.650331][ T5800] Bluetooth: hci4: command tx timeout [ 1214.673137][T15960] chnl_net:caif_netlink_parms(): no params data found [ 1215.096551][T15740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1215.140020][ T1229] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1215.289853][ T1229] usb 7-1: Using ep0 maxpacket: 8 [ 1215.292474][ T1229] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1215.292538][ T1229] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1215.292564][ T1229] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1215.292590][ T1229] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1215.292616][ T1229] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1215.292661][ T1229] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1215.292685][ T1229] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1215.488932][T15960] bridge0: port 1(bridge_slave_0) entered blocking state [ 1215.489145][T15960] bridge0: port 1(bridge_slave_0) entered disabled state [ 1215.489397][T15960] bridge_slave_0: entered allmulticast mode [ 1215.513351][T15960] bridge_slave_0: entered promiscuous mode [ 1215.527164][T15960] bridge0: port 2(bridge_slave_1) entered blocking state [ 1215.527320][T15960] bridge0: port 2(bridge_slave_1) entered disabled state [ 1215.527569][T15960] bridge_slave_1: entered allmulticast mode [ 1215.547912][ T1229] usb 7-1: usb_control_msg returned -32 [ 1215.547969][ T1229] usbtmc 7-1:16.0: can't read capabilities [ 1215.563709][T15960] bridge_slave_1: entered promiscuous mode [ 1215.569900][ T5946] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1215.733743][ T5946] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 1215.733774][ T5946] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1215.733793][ T5946] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1215.733814][ T5946] usb 6-1: config 220 has no interface number 2 [ 1215.733889][ T5946] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1215.733918][ T5946] usb 6-1: config 220 interface 0 has no altsetting 0 [ 1215.733937][ T5946] usb 6-1: config 220 interface 76 has no altsetting 0 [ 1215.733955][ T5946] usb 6-1: config 220 interface 1 has no altsetting 0 [ 1215.761944][ T5946] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1215.761981][ T5946] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1215.762005][ T5946] usb 6-1: Product: syz [ 1215.762022][ T5946] usb 6-1: Manufacturer: syz [ 1215.762039][ T5946] usb 6-1: SerialNumber: syz [ 1215.843075][T15960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1215.860747][T15794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1215.866270][T15740] 8021q: adding VLAN 0 to HW filter on device team0 [ 1215.887900][T15960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1216.005391][ T5946] usb 6-1: selecting invalid altsetting 0 [ 1216.034816][ T5946] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1216.034918][ T5946] uvcvideo 6-1:220.0: No valid video chain found. [ 1216.047569][ T5946] usb 6-1: selecting invalid altsetting 0 [ 1216.047612][ T5946] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 1216.059618][ T5946] usb 6-1: USB disconnect, device number 58 [ 1216.258041][T16024] usbtmc 7-1:16.0: CHECK_CLEAR_STATUS returned 4 [ 1216.460285][ T5946] usb 7-1: USB disconnect, device number 6 [ 1216.494033][ T3589] bridge0: port 1(bridge_slave_0) entered blocking state [ 1216.494192][ T3589] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1216.505473][T15960] team0: Port device team_slave_0 added [ 1216.695225][ T3580] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1216.742720][T15960] team0: Port device team_slave_1 added [ 1216.809784][T13257] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1216.895320][ T3589] bridge0: port 2(bridge_slave_1) entered blocking state [ 1216.895750][ T3589] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1216.939824][T13257] usb 6-1: device descriptor read/64, error -71 [ 1217.074031][ T3580] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1217.102773][T15960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1217.102793][T15960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1217.102813][T15960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1217.105768][T16028] bond1: option mode: unable to set because the bond device has slaves [ 1217.108289][T15960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1217.108300][T15960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1217.108338][T15960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1217.141666][T15794] 8021q: adding VLAN 0 to HW filter on device team0 [ 1217.177090][T16028] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 1217.179762][T13257] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1217.320112][T13257] usb 6-1: device descriptor read/64, error -71 [ 1217.432119][T13257] usb usb6-port1: attempt power cycle [ 1217.899089][ T3580] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1217.950075][T13257] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1217.957741][T16030] bridge0: port 2(bridge_slave_1) entered disabled state [ 1217.958948][T16030] bridge0: port 1(bridge_slave_0) entered disabled state [ 1217.988239][T13257] usb 6-1: device descriptor read/8, error -71 [ 1218.012488][T16030] bridge0: entered allmulticast mode [ 1218.220073][T13257] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1218.240979][T13257] usb 6-1: device descriptor read/8, error -71 [ 1218.302066][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 1218.302312][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1218.350959][T13257] usb usb6-port1: unable to enumerate USB device [ 1218.615808][ T3580] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1218.620140][T13257] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1218.697368][T15960] hsr_slave_0: entered promiscuous mode [ 1218.698835][T15960] hsr_slave_1: entered promiscuous mode [ 1218.710194][T15960] debugfs: 'hsr0' already exists in 'hsr' [ 1218.710230][T15960] Cannot create hsr debugfs directory [ 1218.766153][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 1218.766309][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1218.769863][T13257] usb 7-1: Using ep0 maxpacket: 8 [ 1218.778860][T13257] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1218.778892][T13257] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1218.778952][T13257] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1218.778985][T13257] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1218.779045][T13257] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1218.779072][T13257] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1218.816338][T13257] hub 7-1:1.0: bad descriptor, ignoring hub [ 1218.816385][T13257] hub 7-1:1.0: probe with driver hub failed with error -5 [ 1218.817442][T13257] cdc_wdm 7-1:1.0: skipping garbage [ 1218.817459][T13257] cdc_wdm 7-1:1.0: skipping garbage [ 1218.844168][T13257] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1218.844196][T13257] cdc_wdm 7-1:1.0: Unknown control protocol [ 1219.431324][T16042] usb 7-1: reset high-speed USB device number 7 using dummy_hcd [ 1219.464156][ T3580] bridge_slave_1: left allmulticast mode [ 1219.464187][ T3580] bridge_slave_1: left promiscuous mode [ 1219.464464][ T3580] bridge0: port 2(bridge_slave_1) entered disabled state [ 1219.572518][ T3580] bridge_slave_0: left allmulticast mode [ 1219.572551][ T3580] bridge_slave_0: left promiscuous mode [ 1219.572824][ T3580] bridge0: port 1(bridge_slave_0) entered disabled state [ 1219.846032][ C0] vkms_vblank_simulate: vblank timer overrun [ 1220.035390][T16058] 9pnet_virtio: no channels available for device syz [ 1220.072633][ C0] vkms_vblank_simulate: vblank timer overrun [ 1220.209693][ C0] vkms_vblank_simulate: vblank timer overrun [ 1220.895729][ C0] vkms_vblank_simulate: vblank timer overrun [ 1221.050510][ C0] vkms_vblank_simulate: vblank timer overrun [ 1221.087164][ C0] vkms_vblank_simulate: vblank timer overrun [ 1221.088734][T16042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1221.089298][T16042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1221.150578][ C0] vkms_vblank_simulate: vblank timer overrun [ 1221.211564][ C0] vkms_vblank_simulate: vblank timer overrun [ 1221.216451][ T1229] usb 7-1: USB disconnect, device number 7 [ 1221.261691][ C0] vkms_vblank_simulate: vblank timer overrun [ 1221.319563][ C0] vkms_vblank_simulate: vblank timer overrun [ 1221.381182][ C0] vkms_vblank_simulate: vblank timer overrun [ 1221.440675][ C0] vkms_vblank_simulate: vblank timer overrun [ 1221.488660][ C0] vkms_vblank_simulate: vblank timer overrun [ 1221.543703][ C0] vkms_vblank_simulate: vblank timer overrun [ 1221.653085][ C0] vkms_vblank_simulate: vblank timer overrun [ 1221.794848][T16061] Bluetooth: MGMT ver 1.23 [ 1222.326372][ C0] vkms_vblank_simulate: vblank timer overrun [ 1222.349894][T14915] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1222.435389][ C0] vkms_vblank_simulate: vblank timer overrun [ 1222.485496][ C0] vkms_vblank_simulate: vblank timer overrun [ 1222.534994][ C0] vkms_vblank_simulate: vblank timer overrun [ 1222.571742][ C0] vkms_vblank_simulate: vblank timer overrun [ 1222.572553][T14915] usb 7-1: Using ep0 maxpacket: 16 [ 1222.575658][T14915] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 1222.575684][T14915] usb 7-1: config 0 has no interface number 0 [ 1222.578078][T14915] usb 7-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01 [ 1222.578104][T14915] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1222.578118][T14915] usb 7-1: Product: syz [ 1222.578147][T14915] usb 7-1: Manufacturer: syz [ 1222.578157][T14915] usb 7-1: SerialNumber: syz [ 1222.586335][T14915] usb 7-1: config 0 descriptor?? [ 1222.626982][T14915] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 1222.685191][ C0] vkms_vblank_simulate: vblank timer overrun [ 1222.734940][ C0] vkms_vblank_simulate: vblank timer overrun [ 1222.984504][ C0] vkms_vblank_simulate: vblank timer overrun [ 1223.020573][ C0] vkms_vblank_simulate: vblank timer overrun [ 1223.081750][ C0] vkms_vblank_simulate: vblank timer overrun [ 1223.131495][ C0] vkms_vblank_simulate: vblank timer overrun [ 1223.200673][ T3580] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1223.242787][ T3580] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1223.245775][T14915] gspca_xirlink_cit: Failed to write a register (index 0x0400, value 0x00, error -71) [ 1223.246193][T14915] gspca_xirlink_cit: Failed to write a register (index 0x0400, value 0x01, error -71) [ 1223.246595][T14915] gspca_xirlink_cit: Failed to write a register (index 0x0420, value 0x00, error -71) [ 1223.247000][T14915] gspca_xirlink_cit: Failed to write a register (index 0x0420, value 0x01, error -71) [ 1223.247438][T14915] gspca_xirlink_cit: Failed to write a register (index 0x0409, value 0x0D, error -71) [ 1223.247927][T14915] gspca_xirlink_cit: Failed to write a register (index 0x040A, value 0x02, error -71) [ 1223.248347][T14915] gspca_xirlink_cit: Failed to write a register (index 0x0405, value 0x18, error -71) [ 1223.248758][T14915] gspca_xirlink_cit: Failed to write a register (index 0x0435, value 0x08, error -71) [ 1223.249148][T14915] gspca_xirlink_cit: Failed to write a register (index 0x040B, value 0x26, error -71) [ 1223.249537][T14915] gspca_xirlink_cit: Failed to write a register (index 0x0437, value 0x07, error -71) [ 1223.250092][T14915] gspca_xirlink_cit: Failed to write a register (index 0x042F, value 0x15, error -71) [ 1223.250486][T14915] gspca_xirlink_cit: Failed to write a register (index 0x0439, value 0x2B, error -71) [ 1223.250888][T14915] gspca_xirlink_cit: Failed to write a register (index 0x043A, value 0x26, error -71) [ 1223.251334][T14915] gspca_xirlink_cit: Failed to write a register (index 0x0438, value 0x08, error -71) [ 1223.251795][T14915] gspca_xirlink_cit: Failed to write a register (index 0x042B, value 0x1E, error -71) [ 1223.252696][T14915] gspca_xirlink_cit: Failed to write a register (index 0x042C, value 0x41, error -71) [ 1223.256911][T14915] gspca_xirlink_cit: Failed to write a register (index 0x0100, value 0xC0, error -71) [ 1223.270953][T14915] input: xirlink-cit as /devices/platform/dummy_hcd.6/usb7/7-1/input/input14 [ 1223.304722][T14915] usb 7-1: USB disconnect, device number 8 [ 1223.452920][ T3580] bond0 (unregistering): Released all slaves [ 1223.508641][T16058] bridge3: entered promiscuous mode [ 1223.649290][ C0] vkms_vblank_simulate: vblank timer overrun [ 1223.918911][T15960] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1223.999934][ T1229] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1224.015855][T15960] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1224.162176][ T1229] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1224.162235][ T1229] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1224.162260][ T1229] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1224.172649][ T1229] usb 6-1: config 0 descriptor?? [ 1224.180443][ T1229] pwc: Askey VC010 type 2 USB webcam detected. [ 1225.010845][ T1229] pwc: send_video_command error -71 [ 1225.010864][ T1229] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1225.010996][ T1229] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 1225.014223][ T1229] usb 6-1: USB disconnect, device number 63 [ 1225.236368][T15960] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1225.309260][T15960] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1225.459827][T14915] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1225.616991][T14915] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1225.617051][T14915] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1225.617076][T14915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1225.652888][T14915] usb 6-1: config 0 descriptor?? [ 1225.671514][T14915] pwc: Askey VC010 type 2 USB webcam detected. [ 1225.804549][T11926] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1225.979041][T11926] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 1225.979074][T11926] usb 7-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1225.979094][T11926] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1225.979116][T11926] usb 7-1: config 220 has no interface number 2 [ 1225.979188][T11926] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1225.979212][T11926] usb 7-1: config 220 interface 0 has no altsetting 0 [ 1225.979230][T11926] usb 7-1: config 220 interface 76 has no altsetting 0 [ 1225.979250][T11926] usb 7-1: config 220 interface 1 has no altsetting 0 [ 1226.023088][T11926] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1226.023126][T11926] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1226.023151][T11926] usb 7-1: Product: syz [ 1226.023169][T11926] usb 7-1: Manufacturer: syz [ 1226.023187][T11926] usb 7-1: SerialNumber: syz [ 1226.082382][T14915] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1226.084381][T14915] pwc: recv_control_msg error -32 req 02 val 2700 [ 1226.085268][T14915] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1226.086012][T14915] pwc: recv_control_msg error -32 req 04 val 1000 [ 1226.086862][T14915] pwc: recv_control_msg error -32 req 04 val 1300 [ 1226.087925][T14915] pwc: recv_control_msg error -32 req 04 val 1400 [ 1226.088656][T14915] pwc: recv_control_msg error -32 req 02 val 2000 [ 1226.089352][T14915] pwc: recv_control_msg error -32 req 02 val 2100 [ 1226.104917][T15740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1226.139804][T14915] pwc: recv_control_msg error -32 req 04 val 1500 [ 1226.159098][T14915] pwc: recv_control_msg error -32 req 02 val 2500 [ 1226.166384][T14915] pwc: recv_control_msg error -32 req 02 val 2400 [ 1226.167923][T14915] pwc: recv_control_msg error -32 req 02 val 2600 [ 1226.168282][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 1226.168802][T14915] pwc: recv_control_msg error -32 req 02 val 2900 [ 1226.197341][T14915] pwc: recv_control_msg error -71 req 02 val 2800 [ 1226.207310][T14915] pwc: recv_control_msg error -71 req 04 val 1100 [ 1226.207822][T14915] pwc: recv_control_msg error -71 req 04 val 1200 [ 1226.237980][T14915] pwc: Registered as video103. [ 1226.247389][T14915] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input15 [ 1226.268828][T14915] usb 6-1: USB disconnect, device number 64 [ 1226.368803][T11926] usb 7-1: selecting invalid altsetting 0 [ 1226.382940][T11926] uvcvideo 7-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1226.382977][T11926] uvcvideo 7-1:220.0: No valid video chain found. [ 1226.452631][T11926] usb 7-1: selecting invalid altsetting 0 [ 1226.452672][T11926] usbtest 7-1:220.1: probe with driver usbtest failed with error -22 [ 1226.482204][ T3580] hsr_slave_0: left promiscuous mode [ 1226.516032][T11926] usb 7-1: USB disconnect, device number 9 [ 1226.549995][ T3580] hsr_slave_1: left promiscuous mode [ 1226.560691][ T3580] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1226.560732][ T3580] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1226.617235][ T3580] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1226.617265][ T3580] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1226.741472][ T3580] veth1_macvtap: left promiscuous mode [ 1226.741587][ T3580] veth0_macvtap: left promiscuous mode [ 1226.741883][ T3580] veth1_vlan: left promiscuous mode [ 1226.742057][ T3580] veth0_vlan: left promiscuous mode [ 1228.965029][ C1] vkms_vblank_simulate: vblank timer overrun [ 1229.107807][T16142] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2920'. [ 1229.107846][T16142] netlink: 'syz.5.2920': attribute type 7 has an invalid length. [ 1229.107860][T16142] netlink: 'syz.5.2920': attribute type 8 has an invalid length. [ 1229.107874][T16142] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2920'. [ 1229.382881][ C1] vkms_vblank_simulate: vblank timer overrun [ 1229.449741][ T9488] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1229.603644][ T9488] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1229.603703][ T9488] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1229.603728][ T9488] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1229.649326][ C1] vkms_vblank_simulate: vblank timer overrun [ 1229.653515][ T9488] usb 7-1: config 0 descriptor?? [ 1229.666214][ T9488] pwc: Askey VC010 type 2 USB webcam detected. [ 1229.903039][ T9488] pwc: send_video_command error -71 [ 1229.903060][ T9488] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1229.903177][ T9488] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71 [ 1229.925416][ T9488] usb 7-1: USB disconnect, device number 10 [ 1230.042184][ C1] vkms_vblank_simulate: vblank timer overrun [ 1230.106524][ C1] vkms_vblank_simulate: vblank timer overrun [ 1230.203642][ C1] vkms_vblank_simulate: vblank timer overrun [ 1230.356471][ C1] vkms_vblank_simulate: vblank timer overrun [ 1230.424605][ C1] vkms_vblank_simulate: vblank timer overrun [ 1230.424755][ T9488] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1230.500269][ C1] vkms_vblank_simulate: vblank timer overrun [ 1230.570120][ C1] vkms_vblank_simulate: vblank timer overrun [ 1230.592376][ T9488] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1230.592445][ T9488] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1230.592470][ T9488] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1230.598283][ T9488] usb 7-1: config 0 descriptor?? [ 1230.632668][ T9488] pwc: Askey VC010 type 2 USB webcam detected. [ 1230.688221][ C1] vkms_vblank_simulate: vblank timer overrun [ 1230.814087][ C1] vkms_vblank_simulate: vblank timer overrun [ 1231.014980][ T9488] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1231.016443][ T9488] pwc: recv_control_msg error -32 req 02 val 2700 [ 1231.020046][ T9488] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1231.026792][ T9488] pwc: recv_control_msg error -32 req 04 val 1000 [ 1231.030187][ T9488] pwc: recv_control_msg error -32 req 04 val 1300 [ 1231.052361][ T9488] pwc: recv_control_msg error -32 req 04 val 1400 [ 1231.054548][ T9488] pwc: recv_control_msg error -32 req 02 val 2000 [ 1231.057309][ T9488] pwc: recv_control_msg error -32 req 02 val 2100 [ 1231.236660][T12115] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1231.244526][T12115] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1231.246153][T12115] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1231.247970][T12115] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1231.248826][T12115] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1231.264448][ T9488] pwc: recv_control_msg error -32 req 02 val 2500 [ 1231.416025][ C1] vkms_vblank_simulate: vblank timer overrun [ 1231.482817][ T9488] pwc: recv_control_msg error -71 req 02 val 2600 [ 1231.483309][ T9488] pwc: recv_control_msg error -71 req 02 val 2900 [ 1231.483794][ T9488] pwc: recv_control_msg error -71 req 02 val 2800 [ 1231.484486][ T9488] pwc: recv_control_msg error -71 req 04 val 1100 [ 1231.484970][ T9488] pwc: recv_control_msg error -71 req 04 val 1200 [ 1231.487565][ T9488] pwc: Registered as video103. [ 1231.535024][ T9488] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input16 [ 1231.554984][ T9488] usb 7-1: USB disconnect, device number 11 [ 1231.583259][ C1] vkms_vblank_simulate: vblank timer overrun [ 1231.793045][ C1] vkms_vblank_simulate: vblank timer overrun [ 1231.838021][ C1] vkms_vblank_simulate: vblank timer overrun [ 1231.890477][ T3580] team0 (unregistering): Port device team_slave_1 removed [ 1232.057788][ C1] vkms_vblank_simulate: vblank timer overrun [ 1232.111873][ C1] vkms_vblank_simulate: vblank timer overrun [ 1232.208736][ T3580] team0 (unregistering): Port device team_slave_0 removed [ 1232.460009][ T9488] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1232.566480][ C1] vkms_vblank_simulate: vblank timer overrun [ 1232.633014][ C1] vkms_vblank_simulate: vblank timer overrun [ 1232.633115][ T9488] usb 7-1: Using ep0 maxpacket: 8 [ 1232.635491][ T9488] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1232.635538][ T9488] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1232.635556][ T9488] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1232.678765][ T9488] usb 7-1: config 0 descriptor?? [ 1232.850066][ C1] vkms_vblank_simulate: vblank timer overrun [ 1232.916519][ T9488] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1233.297333][ C1] vkms_vblank_simulate: vblank timer overrun [ 1233.352578][ T5800] Bluetooth: hci2: command tx timeout [ 1233.481946][ C1] vkms_vblank_simulate: vblank timer overrun [ 1233.704963][ C1] vkms_vblank_simulate: vblank timer overrun [ 1233.851110][ C1] vkms_vblank_simulate: vblank timer overrun [ 1233.920927][ C1] vkms_vblank_simulate: vblank timer overrun [ 1233.982282][ C1] vkms_vblank_simulate: vblank timer overrun [ 1235.046115][T15794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1235.300870][ T9488] usb 7-1: USB disconnect, device number 12 [ 1235.403332][ T5800] Bluetooth: hci2: command tx timeout [ 1236.029907][T14914] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1236.206168][T14914] usb 7-1: Using ep0 maxpacket: 8 [ 1236.208904][T14914] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1236.208949][T14914] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1236.208994][T14914] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1236.209025][T14914] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1236.209053][T14914] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1236.209079][T14914] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1236.209108][T14914] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1236.209137][T14914] usb 7-1: config 168 interface 0 has no altsetting 0 [ 1236.241098][T14914] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1236.241147][T14914] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1236.241206][T14914] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1236.241236][T14914] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1236.241262][T14914] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1236.241287][T14914] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1236.241314][T14914] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1236.241340][T14914] usb 7-1: config 168 interface 0 has no altsetting 0 [ 1236.247173][T14914] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1236.247218][T14914] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1236.247266][T14914] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1236.247297][T14914] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1236.247324][T14914] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1236.247352][T14914] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1236.247381][T14914] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1236.247411][T14914] usb 7-1: config 168 interface 0 has no altsetting 0 [ 1236.359456][T15960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1236.432266][T14914] usb 7-1: string descriptor 0 read error: -22 [ 1236.432429][T14914] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1236.432456][T14914] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1236.606127][T14914] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1236.996743][T11926] usb 7-1: USB disconnect, device number 13 [ 1237.002286][T12115] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1237.015433][T12115] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1237.023159][T12115] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1237.036883][T12115] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1237.041204][T12115] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1237.229051][T16206] 9pnet_virtio: no channels available for device syz [ 1237.503448][T11926] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1237.509800][T12115] Bluetooth: hci2: command tx timeout [ 1237.659751][T11926] usb 7-1: Using ep0 maxpacket: 8 [ 1237.662821][T11926] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1237.662872][T11926] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1237.662922][T11926] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1237.662952][T11926] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1237.662981][T11926] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1237.663011][T11926] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1237.663041][T11926] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1237.663071][T11926] usb 7-1: config 168 interface 0 has no altsetting 0 [ 1237.664523][T11926] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1237.664564][T11926] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1237.664612][T11926] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1237.664642][T11926] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1237.664670][T11926] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1237.664698][T11926] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1237.664728][T11926] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1237.664757][T11926] usb 7-1: config 168 interface 0 has no altsetting 0 [ 1237.666175][T11926] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1237.666214][T11926] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1237.666259][T11926] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1237.666288][T11926] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1237.666315][T11926] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1237.666343][T11926] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1237.666372][T11926] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1237.666401][T11926] usb 7-1: config 168 interface 0 has no altsetting 0 [ 1237.669488][T11926] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1237.669535][T11926] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1237.669558][T11926] usb 7-1: Product: syz [ 1237.669574][T11926] usb 7-1: Manufacturer: syz [ 1237.892819][T15960] 8021q: adding VLAN 0 to HW filter on device team0 [ 1237.970783][T11926] usb 7-1: SerialNumber: syz [ 1238.010498][T16175] chnl_net:caif_netlink_parms(): no params data found [ 1238.039110][T15711] bridge0: port 1(bridge_slave_0) entered blocking state [ 1238.039360][T15711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1238.140403][T15711] bridge0: port 2(bridge_slave_1) entered blocking state [ 1238.140588][T15711] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1238.218945][T11926] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1238.234605][T11926] usb 7-1: USB disconnect, device number 14 [ 1238.699822][ T1229] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1238.835421][ T1229] usb 6-1: device descriptor read/64, error -71 [ 1239.159909][T12115] Bluetooth: hci3: command tx timeout [ 1239.236510][ T1229] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1239.381397][ T1229] usb 6-1: device descriptor read/64, error -71 [ 1239.597506][ T1229] usb usb6-port1: attempt power cycle [ 1240.269902][T12115] Bluetooth: hci2: command tx timeout [ 1240.463580][T16175] bridge0: port 1(bridge_slave_0) entered blocking state [ 1240.463795][T16175] bridge0: port 1(bridge_slave_0) entered disabled state [ 1240.464049][T16175] bridge_slave_0: entered allmulticast mode [ 1240.469925][ T1229] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1240.472634][T16175] bridge_slave_0: entered promiscuous mode [ 1240.492043][ T1229] usb 6-1: device descriptor read/8, error -71 [ 1240.523828][T16175] bridge0: port 2(bridge_slave_1) entered blocking state [ 1240.523947][T16175] bridge0: port 2(bridge_slave_1) entered disabled state [ 1240.524122][T16175] bridge_slave_1: entered allmulticast mode [ 1240.526239][T16175] bridge_slave_1: entered promiscuous mode [ 1240.699876][T11926] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1240.730168][ T1229] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1240.754371][ T1229] usb 6-1: device descriptor read/8, error -71 [ 1240.849904][T11926] usb 7-1: Using ep0 maxpacket: 8 [ 1240.857413][T11926] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1240.857450][T11926] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1240.857505][T11926] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1240.857534][T11926] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1240.857579][T11926] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1240.857602][T11926] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1240.860390][ T1229] usb usb6-port1: unable to enumerate USB device [ 1240.925647][T11926] hub 7-1:1.0: bad descriptor, ignoring hub [ 1240.925693][T11926] hub 7-1:1.0: probe with driver hub failed with error -5 [ 1240.932690][T11926] cdc_wdm 7-1:1.0: skipping garbage [ 1240.932729][T11926] cdc_wdm 7-1:1.0: skipping garbage [ 1240.940560][T11926] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1240.940582][T11926] cdc_wdm 7-1:1.0: Unknown control protocol [ 1241.027226][T16175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1241.039201][T16175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1241.239824][T12115] Bluetooth: hci3: command tx timeout [ 1241.465334][T16175] team0: Port device team_slave_0 added [ 1241.521638][T16175] team0: Port device team_slave_1 added [ 1242.722657][T16224] usb 7-1: reset high-speed USB device number 15 using dummy_hcd [ 1243.019883][T16175] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1243.019901][T16175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1243.019923][T16175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1243.037394][T16175] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1243.037414][T16175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1243.037445][T16175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1243.319870][T12115] Bluetooth: hci3: command tx timeout [ 1243.342087][T16241] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2931'. [ 1243.342124][T16241] netlink: 'syz.5.2931': attribute type 7 has an invalid length. [ 1243.342141][T16241] netlink: 'syz.5.2931': attribute type 8 has an invalid length. [ 1243.342154][T16241] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2931'. [ 1243.403603][T16202] chnl_net:caif_netlink_parms(): no params data found [ 1243.524889][T16224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1243.528593][T16224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1243.575343][T16175] hsr_slave_0: entered promiscuous mode [ 1243.576874][T16175] hsr_slave_1: entered promiscuous mode [ 1243.577979][T16175] debugfs: 'hsr0' already exists in 'hsr' [ 1243.578005][T16175] Cannot create hsr debugfs directory [ 1243.850836][T14914] usb 7-1: USB disconnect, device number 15 [ 1243.969837][T10019] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1244.129930][T10019] usb 6-1: Using ep0 maxpacket: 32 [ 1244.134472][T10019] usb 6-1: config 1 has an invalid interface number: 241 but max is 0 [ 1244.134501][T10019] usb 6-1: config 1 has no interface number 0 [ 1244.134555][T10019] usb 6-1: config 1 interface 241 altsetting 4 bulk endpoint 0x5 has invalid maxpacket 64 [ 1244.134582][T10019] usb 6-1: config 1 interface 241 has no altsetting 0 [ 1244.137708][T10019] usb 6-1: New USB device found, idVendor=0403, idProduct=e888, bcdDevice=8d.03 [ 1244.137737][T10019] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1244.137760][T10019] usb 6-1: Product: syz [ 1244.137775][T10019] usb 6-1: Manufacturer: syz [ 1244.137791][T10019] usb 6-1: SerialNumber: syz [ 1244.218230][T16245] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1244.230115][T10019] ftdi_sio 6-1:1.241: FTDI USB Serial Device converter detected [ 1244.232382][T10019] ftdi_sio ttyUSB0: unknown device type: 0x8d03 [ 1244.367998][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1244.368090][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1244.655033][T16245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1244.655602][T16245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1244.674296][T16245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1244.674894][T16245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1244.678179][T16245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1244.678821][T16245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1245.060459][T16245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1245.128448][T16245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1245.786004][T12115] Bluetooth: hci3: command tx timeout [ 1245.942265][T11926] usb 6-1: USB disconnect, device number 69 [ 1245.947267][T11926] ftdi_sio 6-1:1.241: device disconnected [ 1247.381121][T16202] bridge0: port 1(bridge_slave_0) entered blocking state [ 1247.381342][T16202] bridge0: port 1(bridge_slave_0) entered disabled state [ 1247.381622][T16202] bridge_slave_0: entered allmulticast mode [ 1247.384433][T16202] bridge_slave_0: entered promiscuous mode [ 1248.381708][T16202] bridge0: port 2(bridge_slave_1) entered blocking state [ 1248.381877][T16202] bridge0: port 2(bridge_slave_1) entered disabled state [ 1248.382096][T16202] bridge_slave_1: entered allmulticast mode [ 1248.384905][T16202] bridge_slave_1: entered promiscuous mode [ 1250.042653][T16202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1250.161350][T16202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1250.472647][T15960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1250.590180][ T1229] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1250.629498][T16202] team0: Port device team_slave_0 added [ 1250.667747][T16202] team0: Port device team_slave_1 added [ 1250.719919][ T1229] usb 7-1: device descriptor read/64, error -71 [ 1250.989818][ T1229] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1251.102464][T16202] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1251.102478][T16202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1251.102497][T16202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1251.119809][ T1229] usb 7-1: device descriptor read/64, error -71 [ 1251.182612][T16202] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1251.182629][T16202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1251.182669][T16202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1251.234330][ T1229] usb usb7-port1: attempt power cycle [ 1251.556531][T16202] hsr_slave_0: entered promiscuous mode [ 1251.557699][T16202] hsr_slave_1: entered promiscuous mode [ 1251.558385][T16202] debugfs: 'hsr0' already exists in 'hsr' [ 1251.558403][T16202] Cannot create hsr debugfs directory [ 1251.560744][T12115] Bluetooth: hci0: command 0x0406 tx timeout [ 1251.580666][ T1229] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1251.602064][ T1229] usb 7-1: device descriptor read/8, error -71 [ 1251.733123][ T3580] bridge_slave_1: left allmulticast mode [ 1251.733153][ T3580] bridge_slave_1: left promiscuous mode [ 1251.733388][ T3580] bridge0: port 2(bridge_slave_1) entered disabled state [ 1251.804060][ T3580] bridge_slave_0: left allmulticast mode [ 1251.804097][ T3580] bridge_slave_0: left promiscuous mode [ 1251.804350][ T3580] bridge0: port 1(bridge_slave_0) entered disabled state [ 1251.860015][ T1229] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1251.863726][ T3580] bridge_slave_1: left allmulticast mode [ 1251.863749][ T3580] bridge_slave_1: left promiscuous mode [ 1251.863929][ T3580] bridge0: port 2(bridge_slave_1) entered disabled state [ 1251.883818][ T1229] usb 7-1: device descriptor read/8, error -71 [ 1251.950974][ T3580] bridge_slave_0: left allmulticast mode [ 1251.950997][ T3580] bridge_slave_0: left promiscuous mode [ 1251.951199][ T3580] bridge0: port 1(bridge_slave_0) entered disabled state [ 1251.990599][ T1229] usb usb7-port1: unable to enumerate USB device [ 1254.862285][ T3580] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1254.921477][ T3580] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1254.963341][ T3580] bond0 (unregistering): Released all slaves [ 1255.159022][T10019] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1255.309856][T10019] usb 7-1: Using ep0 maxpacket: 8 [ 1255.313262][T10019] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1255.313314][T10019] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1255.313357][T10019] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1255.313388][T10019] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1255.313413][T10019] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1255.313447][T10019] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1255.313482][T10019] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1255.313521][T10019] usb 7-1: config 168 interface 0 has no altsetting 0 [ 1255.315015][T10019] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1255.315055][T10019] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1255.315097][T10019] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1255.315126][T10019] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1255.315153][T10019] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1255.315182][T10019] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1255.315210][T10019] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1255.315240][T10019] usb 7-1: config 168 interface 0 has no altsetting 0 [ 1255.316687][T10019] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1255.316729][T10019] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1255.316777][T10019] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1255.316807][T10019] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1255.316836][T10019] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1255.316864][T10019] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1255.316894][T10019] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1255.316923][T10019] usb 7-1: config 168 interface 0 has no altsetting 0 [ 1255.517626][T10019] usb 7-1: string descriptor 0 read error: -22 [ 1255.517805][T10019] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1255.517833][T10019] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1255.594004][T10019] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1255.848691][ T1229] usb 7-1: USB disconnect, device number 20 [ 1256.369866][ T5885] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1256.559988][ T5885] usb 7-1: Using ep0 maxpacket: 8 [ 1256.562214][ T5885] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1256.562254][ T5885] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1256.562297][ T5885] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1256.562317][ T5885] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1256.562335][ T5885] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1256.562353][ T5885] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1256.562372][ T5885] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1256.562392][ T5885] usb 7-1: config 168 interface 0 has no altsetting 0 [ 1256.563627][ T5885] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1256.563666][ T5885] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1256.563709][ T5885] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1256.563729][ T5885] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1256.563748][ T5885] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1256.563767][ T5885] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1256.563787][ T5885] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1256.563807][ T5885] usb 7-1: config 168 interface 0 has no altsetting 0 [ 1256.564913][ T5885] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 1256.564952][ T5885] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1256.564991][ T5885] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1256.565011][ T5885] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1256.565030][ T5885] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1256.565049][ T5885] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1256.565069][ T5885] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1256.565089][ T5885] usb 7-1: config 168 interface 0 has no altsetting 0 [ 1256.606430][ T5885] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1256.606468][ T5885] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1256.606492][ T5885] usb 7-1: Product: syz [ 1256.606508][ T5885] usb 7-1: Manufacturer: syz [ 1256.606525][ T5885] usb 7-1: SerialNumber: syz [ 1256.924455][ T5885] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1256.931221][ T5885] usb 7-1: USB disconnect, device number 21 [ 1257.090725][ T3580] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1257.170714][ T3580] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1257.212694][ T3580] bond0 (unregistering): Released all slaves [ 1259.169943][ T3580] hsr_slave_0: left promiscuous mode [ 1259.210615][ T3580] hsr_slave_1: left promiscuous mode [ 1259.212567][ T3580] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1259.320986][ T5946] usb 6-1: new full-speed USB device number 70 using dummy_hcd [ 1259.561880][ T5946] usb 6-1: config 0 has an invalid interface number: 214 but max is 0 [ 1259.561911][ T5946] usb 6-1: config 0 has no interface number 0 [ 1259.562184][ T5946] usb 6-1: config 0 interface 214 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1259.562233][ T5946] usb 6-1: config 0 interface 214 has no altsetting 0 [ 1259.585855][ T5946] usb 6-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=5d.4f [ 1259.585895][ T5946] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1259.585972][ T5946] usb 6-1: Product: syz [ 1259.585989][ T5946] usb 6-1: Manufacturer: syz [ 1259.586004][ T5946] usb 6-1: SerialNumber: syz [ 1260.008000][ T5946] usb 6-1: config 0 descriptor?? [ 1260.122302][T16299] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1262.195194][ T3580] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1262.298069][ T5946] ax88179_178a 6-1:0.214: probe with driver ax88179_178a failed with error -71 [ 1262.339921][ T5946] usb 6-1: USB disconnect, device number 70 [ 1262.480144][ T3580] hsr_slave_0: left promiscuous mode [ 1262.519930][ T3580] hsr_slave_1: left promiscuous mode [ 1262.520740][ T3580] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1262.560697][ T3580] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1262.729962][ T5946] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1262.859889][ T5946] usb 6-1: device descriptor read/64, error -71 [ 1263.109812][ T5946] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1263.239998][ T5946] usb 6-1: device descriptor read/64, error -71 [ 1263.351612][ T5946] usb usb6-port1: attempt power cycle [ 1263.689914][ T5946] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1263.732593][ T5946] usb 6-1: device descriptor read/8, error -71 [ 1263.792023][ T3580] team0 (unregistering): Port device team_slave_1 removed [ 1263.979754][ T5946] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1264.000494][ T5946] usb 6-1: device descriptor read/8, error -71 [ 1264.042468][ T3580] team0 (unregistering): Port device team_slave_0 removed [ 1264.110157][ T5946] usb usb6-port1: unable to enumerate USB device [ 1265.374250][T12115] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1265.379314][T12115] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1265.381466][T12115] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1265.383311][T12115] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1265.384200][T12115] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1265.858906][T16316] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2949'. [ 1267.427742][T12115] Bluetooth: hci1: command tx timeout [ 1269.541018][ T3580] team0 (unregistering): Port device team_slave_1 removed [ 1269.577661][T12115] Bluetooth: hci1: command tx timeout [ 1269.760580][ T3580] team0 (unregistering): Port device team_slave_0 removed [ 1271.659839][T12115] Bluetooth: hci1: command tx timeout [ 1272.729763][T13257] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1272.912397][T13257] usb 7-1: Using ep0 maxpacket: 8 [ 1272.914583][T13257] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1272.914613][T13257] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1272.914666][T13257] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1272.914688][T13257] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1273.948193][T12115] Bluetooth: hci1: command tx timeout [ 1274.388263][ T1229] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1274.559884][ T1229] usb 6-1: Using ep0 maxpacket: 8 [ 1274.563319][ T1229] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1274.563347][ T1229] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1274.563369][ T1229] usb 6-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1274.563387][ T1229] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1274.563429][ T1229] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1274.563450][ T1229] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1274.649062][ T1229] usbtmc 6-1:16.0: bulk endpoints not found [ 1274.960006][T16175] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1275.036564][T16175] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1275.356178][T16175] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1275.381456][T16175] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1275.775811][T16311] chnl_net:caif_netlink_parms(): no params data found [ 1276.076903][T13257] usb 7-1: USB disconnect, device number 22 [ 1276.409230][T16377] 9pnet_fd: Insufficient options for proto=fd [ 1276.465338][T16311] bridge0: port 1(bridge_slave_0) entered blocking state [ 1276.465558][T16311] bridge0: port 1(bridge_slave_0) entered disabled state [ 1276.465817][T16311] bridge_slave_0: entered allmulticast mode [ 1276.487897][T16311] bridge_slave_0: entered promiscuous mode [ 1276.514169][T16311] bridge0: port 2(bridge_slave_1) entered blocking state [ 1276.514470][T16311] bridge0: port 2(bridge_slave_1) entered disabled state [ 1276.514717][T16311] bridge_slave_1: entered allmulticast mode [ 1276.518030][T16311] bridge_slave_1: entered promiscuous mode [ 1276.807333][T16311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1276.823529][T16311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1277.122966][ T1229] usb 6-1: USB disconnect, device number 75 [ 1277.186341][T16311] team0: Port device team_slave_0 added [ 1277.433896][ C1] vkms_vblank_simulate: vblank timer overrun [ 1277.491438][T16385] 9pnet_virtio: no channels available for device syz [ 1277.592957][ C1] vkms_vblank_simulate: vblank timer overrun [ 1277.658168][ C1] vkms_vblank_simulate: vblank timer overrun [ 1277.884467][ C1] vkms_vblank_simulate: vblank timer overrun [ 1277.916935][T16311] team0: Port device team_slave_1 added [ 1277.919473][T16202] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1278.251821][T16202] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1278.633450][T16202] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1278.656905][T16311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1278.656924][T16311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1278.656954][T16311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1278.663886][T16202] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1278.789061][T16311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1278.789076][T16311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1278.789097][T16311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1278.853653][T16395] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1279.055339][ C1] vkms_vblank_simulate: vblank timer overrun [ 1279.518442][T16311] hsr_slave_0: entered promiscuous mode [ 1279.530280][T16311] hsr_slave_1: entered promiscuous mode [ 1279.546958][T16311] debugfs: 'hsr0' already exists in 'hsr' [ 1279.546985][T16311] Cannot create hsr debugfs directory [ 1279.790997][ C1] vkms_vblank_simulate: vblank timer overrun [ 1280.044302][ C1] vkms_vblank_simulate: vblank timer overrun [ 1280.499326][ C1] vkms_vblank_simulate: vblank timer overrun [ 1280.751630][ C1] vkms_vblank_simulate: vblank timer overrun [ 1281.279298][ C1] vkms_vblank_simulate: vblank timer overrun [ 1282.109792][ C1] vkms_vblank_simulate: vblank timer overrun [ 1283.267829][T16426] 9pnet_virtio: no channels available for device syz [ 1284.124256][T16426] bridge2: entered promiscuous mode [ 1284.179445][T16175] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1284.359860][ T5885] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1284.522993][ T5885] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1284.523047][ T5885] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1284.523067][ T5885] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1284.527626][ T5885] usb 6-1: config 0 descriptor?? [ 1284.566821][ T5885] pwc: Askey VC010 type 2 USB webcam detected. [ 1284.625030][T16175] 8021q: adding VLAN 0 to HW filter on device team0 [ 1284.743368][T13886] bridge0: port 1(bridge_slave_0) entered blocking state [ 1284.743589][T13886] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1284.745793][ T3580] bridge_slave_1: left allmulticast mode [ 1284.745816][ T3580] bridge_slave_1: left promiscuous mode [ 1284.746012][ T3580] bridge0: port 2(bridge_slave_1) entered disabled state [ 1284.759831][ T5885] pwc: send_video_command error -71 [ 1284.759848][ T5885] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1284.759963][ T5885] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 1284.767801][ T5885] usb 6-1: USB disconnect, device number 76 [ 1284.880942][ T3580] bridge_slave_0: left allmulticast mode [ 1284.880966][ T3580] bridge_slave_0: left promiscuous mode [ 1284.881157][ T3580] bridge0: port 1(bridge_slave_0) entered disabled state [ 1285.238928][ T5885] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1285.392075][ T5885] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1285.392141][ T5885] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1285.392168][ T5885] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1285.396525][ T5885] usb 6-1: config 0 descriptor?? [ 1285.406824][ T5885] pwc: Askey VC010 type 2 USB webcam detected. [ 1285.810862][ T5885] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1285.811928][ T5885] pwc: recv_control_msg error -32 req 02 val 2700 [ 1285.813425][ T5885] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1285.814527][ T5885] pwc: recv_control_msg error -32 req 04 val 1000 [ 1285.815593][ T5885] pwc: recv_control_msg error -32 req 04 val 1300 [ 1285.816652][ T5885] pwc: recv_control_msg error -32 req 04 val 1400 [ 1285.817688][ T5885] pwc: recv_control_msg error -32 req 02 val 2000 [ 1285.908515][ T5885] pwc: recv_control_msg error -32 req 02 val 2100 [ 1285.913766][ T5885] pwc: recv_control_msg error -32 req 04 val 1500 [ 1285.915398][ T5885] pwc: recv_control_msg error -32 req 02 val 2500 [ 1286.118290][ T5885] pwc: recv_control_msg error -32 req 02 val 2600 [ 1286.334132][ T5885] pwc: recv_control_msg error -71 req 02 val 2800 [ 1286.340081][ T5885] pwc: recv_control_msg error -71 req 04 val 1100 [ 1286.340640][ T5885] pwc: recv_control_msg error -71 req 04 val 1200 [ 1286.377355][ T5885] pwc: Registered as video103. [ 1286.420011][ T5885] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input17 [ 1286.435963][ T5885] usb 6-1: USB disconnect, device number 77 [ 1288.572164][ T3580] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1288.630401][ T3580] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1288.677613][ T3580] bond0 (unregistering): Released all slaves [ 1288.859942][T15711] bridge0: port 2(bridge_slave_1) entered blocking state [ 1288.860166][T15711] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1289.401161][ T3580] hsr_slave_0: left promiscuous mode [ 1289.431625][ T3580] hsr_slave_1: left promiscuous mode [ 1289.435312][ T3580] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1290.552040][ T3580] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1290.939712][T14914] usb 6-1: new full-speed USB device number 78 using dummy_hcd [ 1291.010473][ T5800] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1291.013486][ T5800] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1291.022825][ T5800] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1291.024913][ T5800] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1291.026303][ T5800] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1291.102210][T14914] usb 6-1: config 0 has an invalid interface number: 214 but max is 0 [ 1291.102239][T14914] usb 6-1: config 0 has no interface number 0 [ 1291.102287][T14914] usb 6-1: config 0 interface 214 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1291.102316][T14914] usb 6-1: config 0 interface 214 has no altsetting 0 [ 1291.105744][T14914] usb 6-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=5d.4f [ 1291.105774][T14914] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1291.105794][T14914] usb 6-1: Product: syz [ 1291.105810][T14914] usb 6-1: Manufacturer: syz [ 1291.105840][T14914] usb 6-1: SerialNumber: syz [ 1291.184810][T14914] usb 6-1: config 0 descriptor?? [ 1291.188778][T16471] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1291.404659][T16471] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1291.837982][T16479] netlink: 'syz.6.2988': attribute type 10 has an invalid length. [ 1292.490327][ T3580] team0 (unregistering): Port device team_slave_1 removed [ 1292.728025][T14914] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -71 [ 1292.728057][T14914] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 1292.738763][T14914] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0006: -71 [ 1292.739313][T14914] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71 [ 1292.739875][T14914] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 1292.740435][T14914] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 1292.740996][T14914] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 1292.741708][T14914] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 1292.742301][T14914] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 1292.742887][T14914] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 1292.743473][T14914] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 1292.744053][T14914] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 1292.744613][T14914] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 1292.745183][T14914] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 1292.745918][T14914] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 1292.746504][T14914] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 1292.747062][T14914] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 1292.747641][T14914] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 1292.748235][T14914] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 1292.748818][T14914] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 1292.749505][T14914] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 1292.750325][T14914] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 1292.750965][T14914] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 1292.751536][T14914] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 1292.752036][ T3580] team0 (unregistering): Port device team_slave_0 removed [ 1292.752075][T14914] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 1292.752619][T14914] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1293.110169][T12115] Bluetooth: hci4: command tx timeout [ 1295.160549][T12115] Bluetooth: hci4: command tx timeout [ 1297.249737][T12115] Bluetooth: hci4: command tx timeout [ 1297.328540][ T5800] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1297.344622][ T5800] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1297.346494][ T5800] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1297.347830][ T5800] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1297.349109][ T5800] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1299.319342][T16479] syz_tun: entered promiscuous mode [ 1299.328924][T16479] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1299.329641][ T5800] Bluetooth: hci4: command tx timeout [ 1299.361485][T16510] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1299.432570][T16481] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 1299.479764][ T5800] Bluetooth: hci6: command tx timeout [ 1299.628313][T14914] ax88179_178a 6-1:0.214 eth20: register 'ax88179_178a' at usb-dummy_hcd.5-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter, 52:9c:20:c8:b5:2c [ 1299.661955][T14914] usb 6-1: USB disconnect, device number 78 [ 1299.668061][T14914] ax88179_178a 6-1:0.214 eth20: unregister 'ax88179_178a' usb-dummy_hcd.5-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter [ 1302.359832][ T5800] Bluetooth: hci6: command tx timeout [ 1302.522786][T16529] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 1302.522834][T16529] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 1302.522849][T16529] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1302.639746][ T38] audit: type=1800 audit(1759967332.515:11): pid=16529 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.2999" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 1304.442609][ T5800] Bluetooth: hci6: command tx timeout [ 1305.049769][T14914] usb 6-1: new full-speed USB device number 79 using dummy_hcd [ 1305.211528][T14914] usb 6-1: config 0 has an invalid interface number: 214 but max is 0 [ 1305.211550][T14914] usb 6-1: config 0 has no interface number 0 [ 1305.211582][T14914] usb 6-1: config 0 interface 214 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1305.211603][T14914] usb 6-1: config 0 interface 214 has no altsetting 0 [ 1305.214101][T14914] usb 6-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=5d.4f [ 1305.214124][T14914] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1305.214138][T14914] usb 6-1: Product: syz [ 1305.214166][T14914] usb 6-1: Manufacturer: syz [ 1305.214177][T14914] usb 6-1: SerialNumber: syz [ 1305.293976][T14914] usb 6-1: config 0 descriptor?? [ 1305.295171][T16550] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1305.390112][T16311] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1305.519527][T16550] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1305.626711][T16311] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1305.700763][T16311] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1305.808177][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.808255][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1306.072395][T16311] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1306.519762][ T5800] Bluetooth: hci6: command tx timeout [ 1306.889763][T14914] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -32 [ 1306.894201][T14914] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -32 [ 1306.894233][T14914] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 1306.897759][T14914] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0006: -71 [ 1306.899308][T14914] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71 [ 1306.904790][T14914] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 1306.906454][T14914] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 1306.907025][T14914] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 1306.907552][T14914] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 1306.908093][T14914] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 1306.908616][T14914] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 1306.909151][T14914] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 1306.912937][T14914] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 1306.913877][T14914] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 1306.915662][T14914] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 1306.918434][T14914] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 1306.922093][T14914] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 1306.925657][T14914] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 1306.926530][T14914] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 1306.928525][T14914] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 1306.932764][T14914] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 1306.933348][T14914] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 1306.934881][T14914] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 1306.936418][T14914] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 1306.940582][T14914] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 1306.942321][T14914] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 1306.942914][T14914] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1306.994441][T14914] ax88179_178a 6-1:0.214 eth17: register 'ax88179_178a' at usb-dummy_hcd.5-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter, 5e:06:a2:14:f3:27 [ 1307.019054][T14914] usb 6-1: USB disconnect, device number 79 [ 1307.024054][T14914] ax88179_178a 6-1:0.214 eth17: unregister 'ax88179_178a' usb-dummy_hcd.5-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter [ 1307.313228][T16583] netlink: 'syz.6.3007': attribute type 10 has an invalid length. [ 1307.334450][T16499] chnl_net:caif_netlink_parms(): no params data found [ 1307.342843][T16473] chnl_net:caif_netlink_parms(): no params data found [ 1307.571922][T16584] bond1: option mode: unable to set because the bond device has slaves [ 1307.622476][T16583] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 1308.613452][T16602] netlink: 'syz.5.3010': attribute type 10 has an invalid length. [ 1308.911377][T16604] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 1308.961730][T16499] bridge0: port 1(bridge_slave_0) entered blocking state [ 1308.961822][T16499] bridge0: port 1(bridge_slave_0) entered disabled state [ 1308.962023][T16499] bridge_slave_0: entered allmulticast mode [ 1308.964023][T16499] bridge_slave_0: entered promiscuous mode [ 1308.969231][T16473] bridge0: port 1(bridge_slave_0) entered blocking state [ 1308.969343][T16473] bridge0: port 1(bridge_slave_0) entered disabled state [ 1308.978504][T16473] bridge_slave_0: entered allmulticast mode [ 1308.984821][T16473] bridge_slave_0: entered promiscuous mode [ 1309.015905][T16499] bridge0: port 2(bridge_slave_1) entered blocking state [ 1309.016074][T16499] bridge0: port 2(bridge_slave_1) entered disabled state [ 1309.016379][T16499] bridge_slave_1: entered allmulticast mode [ 1309.019550][T16499] bridge_slave_1: entered promiscuous mode [ 1309.301514][T16473] bridge0: port 2(bridge_slave_1) entered blocking state [ 1309.301605][T16473] bridge0: port 2(bridge_slave_1) entered disabled state [ 1309.301779][T16473] bridge_slave_1: entered allmulticast mode [ 1309.305241][T16473] bridge_slave_1: entered promiscuous mode [ 1309.649873][T14915] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1309.812782][T14915] usb 6-1: Using ep0 maxpacket: 8 [ 1309.819318][T14915] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1309.819338][T14915] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1309.819376][T14915] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1309.819398][T14915] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1309.819430][T14915] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1309.819446][T14915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1309.825594][T16499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1309.858071][T16473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1309.938099][T14915] hub 6-1:1.0: bad descriptor, ignoring hub [ 1309.938128][T14915] hub 6-1:1.0: probe with driver hub failed with error -5 [ 1309.938758][T14915] cdc_wdm 6-1:1.0: skipping garbage [ 1309.938768][T14915] cdc_wdm 6-1:1.0: skipping garbage [ 1309.947688][T16499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1309.951787][T14915] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1309.951814][T14915] cdc_wdm 6-1:1.0: Unknown control protocol [ 1310.005416][T16473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1310.368900][T16499] team0: Port device team_slave_0 added [ 1310.378618][T16473] team0: Port device team_slave_0 added [ 1310.393144][T16499] team0: Port device team_slave_1 added [ 1310.395845][T16473] team0: Port device team_slave_1 added [ 1311.455567][T16619] netlink: 'syz.6.3015': attribute type 1 has an invalid length. [ 1311.762407][T16619] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1311.783186][T16620] vlan2: entered allmulticast mode [ 1311.783207][T16620] veth1: entered allmulticast mode [ 1311.788128][T16620] bond2: (slave vlan2): making interface the new active one [ 1311.792801][T16620] bond2: (slave vlan2): Enslaving as an active interface with an up link [ 1311.811916][T16499] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1311.811938][T16499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1311.811971][T16499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1311.814892][T16473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1311.814907][T16473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1311.814940][T16473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1312.035107][T16499] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1312.035122][T16499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1312.035143][T16499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1312.036327][T16473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1312.036339][T16473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1312.036359][T16473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1312.359049][T16623] netlink: 'syz.6.3016': attribute type 10 has an invalid length. [ 1312.691989][T16473] hsr_slave_0: entered promiscuous mode [ 1312.693061][T16473] hsr_slave_1: entered promiscuous mode [ 1312.693740][T16473] debugfs: 'hsr0' already exists in 'hsr' [ 1312.693763][T16473] Cannot create hsr debugfs directory [ 1312.709394][T16625] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 1312.787272][T16499] hsr_slave_0: entered promiscuous mode [ 1312.788298][T16499] hsr_slave_1: entered promiscuous mode [ 1312.789125][T16499] debugfs: 'hsr0' already exists in 'hsr' [ 1312.789143][T16499] Cannot create hsr debugfs directory [ 1313.418233][T16631] 9pnet_virtio: no channels available for device syz [ 1314.225885][T16631] bridge3: entered promiscuous mode [ 1315.773384][T16311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1315.877348][T16606] cdc_wdm 6-1:1.0: Error autopm - -16 [ 1315.877909][T11926] usb 6-1: USB disconnect, device number 80 [ 1319.695717][T16311] 8021q: adding VLAN 0 to HW filter on device team0 [ 1319.798387][ T3580] bridge_slave_1: left allmulticast mode [ 1319.798416][ T3580] bridge_slave_1: left promiscuous mode [ 1319.798590][ T3580] bridge0: port 2(bridge_slave_1) entered disabled state [ 1319.871117][ T3580] bridge_slave_0: left allmulticast mode [ 1319.871141][ T3580] bridge_slave_0: left promiscuous mode [ 1319.871335][ T3580] bridge0: port 1(bridge_slave_0) entered disabled state [ 1319.939781][T14915] usb 6-1: new full-speed USB device number 81 using dummy_hcd [ 1319.956570][ T3580] bridge_slave_1: left allmulticast mode [ 1319.956605][ T3580] bridge_slave_1: left promiscuous mode [ 1319.956876][ T3580] bridge0: port 2(bridge_slave_1) entered disabled state [ 1320.031308][ T3580] bridge_slave_0: left allmulticast mode [ 1320.031342][ T3580] bridge_slave_0: left promiscuous mode [ 1320.031624][ T3580] bridge0: port 1(bridge_slave_0) entered disabled state [ 1320.092726][T14915] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1320.092760][T14915] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1320.092805][T14915] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1320.092828][T14915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1320.368200][T14915] usb 6-1: usb_control_msg returned -32 [ 1320.368262][T14915] usbtmc 6-1:16.0: can't read capabilities [ 1320.731524][T16671] usbtmc 6-1:16.0: usbtmc_ioctl_request failed -32 [ 1320.734882][T14915] usb 6-1: USB disconnect, device number 81 [ 1321.409370][T16680] overlayfs: failed to clone upperpath [ 1322.348849][ T3580] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1322.453726][ T3580] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1322.578705][ T3580] bond0 (unregistering): Released all slaves [ 1325.476085][ T3580] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1325.570815][ T3580] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1325.611951][ T3580] bond0 (unregistering): Released all slaves [ 1325.651514][T12115] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1325.653115][T16701] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 1325.653157][T16701] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 1325.653178][T16701] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1325.689765][ T38] audit: type=1800 audit(1759967355.655:12): pid=16701 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.3035" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 1325.799208][T12115] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1325.819362][T12115] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1325.838332][T12115] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1325.839135][T12115] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1326.239731][T10019] usb 6-1: new full-speed USB device number 82 using dummy_hcd [ 1326.416780][T10019] usb 6-1: config 0 has an invalid interface number: 214 but max is 0 [ 1326.416810][T10019] usb 6-1: config 0 has no interface number 0 [ 1326.416863][T10019] usb 6-1: config 0 interface 214 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1326.416900][T10019] usb 6-1: config 0 interface 214 has no altsetting 0 [ 1326.422150][T10019] usb 6-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=5d.4f [ 1326.422179][T10019] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1326.422199][T10019] usb 6-1: Product: syz [ 1326.422214][T10019] usb 6-1: Manufacturer: syz [ 1326.422228][T10019] usb 6-1: SerialNumber: syz [ 1326.429529][T10019] usb 6-1: config 0 descriptor?? [ 1326.437592][T16714] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1326.644057][T16714] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1326.969804][ T3580] hsr_slave_0: left promiscuous mode [ 1327.009809][ T3580] hsr_slave_1: left promiscuous mode [ 1327.010846][ T3580] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1327.038904][ T3580] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1327.193477][ T3580] hsr_slave_0: left promiscuous mode [ 1327.219720][ T3580] hsr_slave_1: left promiscuous mode [ 1327.220406][ T3580] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1327.262463][T16725] netlink: 'syz.6.3041': attribute type 10 has an invalid length. [ 1327.271241][ T3580] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1327.791140][T10019] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 1327.791516][T10019] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -71 [ 1327.791534][T10019] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 1327.792066][T10019] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0006: -71 [ 1327.792589][T10019] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71 [ 1327.794986][T10019] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 1327.795543][T10019] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 1327.795966][T10019] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 1327.796450][T10019] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 1327.796930][T10019] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 1327.797309][T10019] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 1327.797686][T10019] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 1327.798054][T10019] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 1327.798418][T10019] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 1327.798798][T10019] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 1327.799174][T10019] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 1327.799538][T10019] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 1327.803755][T10019] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 1327.804374][T10019] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 1327.804962][T10019] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 1327.806404][T10019] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 1327.807011][T10019] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 1327.807557][T10019] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 1327.808128][T10019] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 1327.808695][T10019] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 1327.809243][T10019] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 1327.812069][T10019] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1327.880101][ T5800] Bluetooth: hci2: command tx timeout [ 1328.160558][ T3580] team0 (unregistering): Port device team_slave_1 removed [ 1328.312254][ T3580] team0 (unregistering): Port device team_slave_0 removed [ 1329.798367][ T38] audit: type=1326 audit(1759967359.795:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16736 comm="syz.5.3045" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fab526beec9 code=0x0 [ 1329.959987][ T5800] Bluetooth: hci2: command tx timeout [ 1331.060998][ T3580] team0 (unregistering): Port device team_slave_1 removed [ 1331.210527][ T3580] team0 (unregistering): Port device team_slave_0 removed [ 1332.039818][ T5800] Bluetooth: hci2: command tx timeout [ 1332.092455][T16726] bond1: option mode: unable to set because the bond device has slaves [ 1332.112596][T10019] ax88179_178a 6-1:0.214 eth17: register 'ax88179_178a' at usb-dummy_hcd.5-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter, 56:24:24:51:27:51 [ 1332.142505][T10019] usb 6-1: USB disconnect, device number 82 [ 1332.146118][T10019] ax88179_178a 6-1:0.214 eth17: unregister 'ax88179_178a' usb-dummy_hcd.5-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter [ 1332.550009][ C0] vkms_vblank_simulate: vblank timer overrun [ 1333.510014][ C0] vkms_vblank_simulate: vblank timer overrun [ 1333.714498][ C0] vkms_vblank_simulate: vblank timer overrun [ 1333.769643][ C0] vkms_vblank_simulate: vblank timer overrun [ 1333.839429][T16753] vlan0: entered allmulticast mode [ 1333.839446][T16753] veth1: entered allmulticast mode [ 1334.006013][T16709] chnl_net:caif_netlink_parms(): no params data found [ 1334.104864][ C0] vkms_vblank_simulate: vblank timer overrun [ 1334.119789][ T5800] Bluetooth: hci2: command tx timeout [ 1334.475755][ C0] vkms_vblank_simulate: vblank timer overrun [ 1334.560339][T16771] netlink: 'syz.5.3054': attribute type 10 has an invalid length. [ 1334.592852][T16709] bridge0: port 1(bridge_slave_0) entered blocking state [ 1334.593053][T16709] bridge0: port 1(bridge_slave_0) entered disabled state [ 1334.593310][T16709] bridge_slave_0: entered allmulticast mode [ 1334.624280][ C0] vkms_vblank_simulate: vblank timer overrun [ 1334.626808][T16709] bridge_slave_0: entered promiscuous mode [ 1334.664510][T16771] bond1: option mode: unable to set because the bond device has slaves [ 1334.666122][T16709] bridge0: port 2(bridge_slave_1) entered blocking state [ 1334.666253][T16709] bridge0: port 2(bridge_slave_1) entered disabled state [ 1334.666506][T16709] bridge_slave_1: entered allmulticast mode [ 1334.669335][T16709] bridge_slave_1: entered promiscuous mode [ 1334.783605][ C0] vkms_vblank_simulate: vblank timer overrun [ 1334.848424][ C0] vkms_vblank_simulate: vblank timer overrun [ 1334.969325][ C0] vkms_vblank_simulate: vblank timer overrun [ 1336.148010][T16709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1336.246193][T16709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1336.450663][T10019] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 1336.502913][ C0] vkms_vblank_simulate: vblank timer overrun [ 1336.611961][T10019] usb 6-1: config 5 has an invalid interface number: 12 but max is 0 [ 1336.611990][T10019] usb 6-1: config 5 has no interface number 0 [ 1336.612022][T10019] usb 6-1: config 5 interface 12 has no altsetting 0 [ 1336.615498][T10019] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0062, bcdDevice=56.78 [ 1336.615527][T10019] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1336.615548][T10019] usb 6-1: Product: syz [ 1336.615561][T10019] usb 6-1: Manufacturer: syz [ 1336.615576][T10019] usb 6-1: SerialNumber: syz [ 1336.697004][T16709] team0: Port device team_slave_0 added [ 1336.785790][T16709] team0: Port device team_slave_1 added [ 1337.097258][T16473] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1337.178511][T16709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1337.178745][T16709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1337.178774][T16709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1337.311049][T10019] dvb-usb: found a 'Terratec Cinergy T Express' in warm state. [ 1337.316597][T16473] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1337.338148][T10019] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1337.339095][T10019] dvbdev: DVB: registering new adapter (Terratec Cinergy T Express) [ 1337.339154][T10019] usb 6-1: media controller created [ 1337.393913][T16709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1337.393950][T16709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1337.393982][T16709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1337.466067][T10019] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1337.470797][T16473] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1337.570540][T10019] DVB: Unable to find symbol dib7000p_attach() [ 1337.570557][T10019] dvb-usb: no frontend was attached by 'Terratec Cinergy T Express' [ 1337.678256][T16473] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1337.699740][T10019] rc_core: IR keymap rc-dib0700-rc5 not found [ 1337.699762][T10019] Registered IR keymap rc-empty [ 1337.700053][T10019] dvb-usb: could not initialize remote control. [ 1337.700063][T10019] dvb-usb: Terratec Cinergy T Express successfully initialized and connected. [ 1337.738374][T10019] usb 6-1: USB disconnect, device number 83 [ 1337.841786][T10019] dvb-usb: Terratec Cinergy T Express successfully deinitialized and disconnected. [ 1338.550745][ C0] vkms_vblank_simulate: vblank timer overrun [ 1338.835217][ C0] vkms_vblank_simulate: vblank timer overrun [ 1338.956960][T16819] 9pnet_virtio: no channels available for device syz [ 1338.962280][ C0] vkms_vblank_simulate: vblank timer overrun [ 1338.966007][T14914] usb 6-1: new full-speed USB device number 84 using dummy_hcd [ 1339.277842][ C0] vkms_vblank_simulate: vblank timer overrun [ 1339.760753][ C0] vkms_vblank_simulate: vblank timer overrun [ 1339.850818][T16819] bridge4: entered promiscuous mode [ 1339.874186][T16709] hsr_slave_0: entered promiscuous mode [ 1339.875684][T16709] hsr_slave_1: entered promiscuous mode [ 1339.879045][T16709] debugfs: 'hsr0' already exists in 'hsr' [ 1339.879072][T16709] Cannot create hsr debugfs directory [ 1339.919420][T14914] usb 6-1: config 0 has an invalid interface number: 214 but max is 0 [ 1339.919448][T14914] usb 6-1: config 0 has no interface number 0 [ 1339.919498][T14914] usb 6-1: config 0 interface 214 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1339.919528][T14914] usb 6-1: config 0 interface 214 has no altsetting 0 [ 1339.963774][T14914] usb 6-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=5d.4f [ 1339.963808][T14914] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1339.963829][T14914] usb 6-1: Product: syz [ 1339.963845][T14914] usb 6-1: Manufacturer: syz [ 1339.963859][T14914] usb 6-1: SerialNumber: syz [ 1340.018109][T14914] usb 6-1: config 0 descriptor?? [ 1340.019276][T16817] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1340.244181][T16817] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1340.723337][T16499] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1340.835205][T16499] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1341.090255][T16499] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1341.123286][T16499] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1341.365576][T14914] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 1341.366094][T14914] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -71 [ 1341.366120][T14914] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 1341.366564][T14914] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0006: -71 [ 1341.367006][T14914] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71 [ 1341.367763][T14914] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 1341.378167][T14914] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 1341.379489][T14914] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 1341.393810][T14914] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 1342.399758][T14914] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 1342.509917][T14914] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 1342.510454][T14914] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 1342.510965][T14914] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 1342.511459][T14914] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 1342.511949][T14914] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 1342.512436][T14914] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 1342.512923][T14914] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 1342.513435][T14914] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 1342.513936][T14914] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 1342.514470][T14914] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 1342.514983][T14914] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 1342.515500][T14914] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 1342.516028][T14914] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 1342.539872][T14914] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 1342.569742][T14914] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 1342.599759][T14914] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 1342.639842][T14914] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1342.882247][ T38] audit: type=1326 audit(1759967372.885:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16848 comm="syz.6.3066" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f12188deec9 code=0x0 [ 1343.014691][T16850] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3067'. [ 1343.766201][T14914] ax88179_178a 6-1:0.214 eth17: register 'ax88179_178a' at usb-dummy_hcd.5-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter, a2:f9:06:db:ad:ce [ 1343.790790][T14914] usb 6-1: USB disconnect, device number 84 [ 1343.801569][T14914] ax88179_178a 6-1:0.214 eth17: unregister 'ax88179_178a' usb-dummy_hcd.5-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter [ 1344.504377][T16867] fuse: Bad value for 'fd' [ 1344.903348][T16867] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3070'. [ 1345.427866][ T3580] bridge_slave_1: left allmulticast mode [ 1345.427898][ T3580] bridge_slave_1: left promiscuous mode [ 1345.428150][ T3580] bridge0: port 2(bridge_slave_1) entered disabled state [ 1345.490784][T16871] fuse: Bad value for 'fd' [ 1345.507145][ T3580] bridge_slave_0: left allmulticast mode [ 1345.507168][ T3580] bridge_slave_0: left promiscuous mode [ 1345.507358][ T3580] bridge0: port 1(bridge_slave_0) entered disabled state [ 1345.969795][T13257] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 1346.149731][T13257] usb 6-1: Using ep0 maxpacket: 8 [ 1346.152704][T13257] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1346.152729][T13257] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1346.152783][T13257] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1346.152811][T13257] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1346.152854][T13257] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1346.152876][T13257] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1346.265737][T13257] hub 6-1:1.0: bad descriptor, ignoring hub [ 1346.265771][T13257] hub 6-1:1.0: probe with driver hub failed with error -5 [ 1346.266547][T13257] cdc_wdm 6-1:1.0: skipping garbage [ 1346.266561][T13257] cdc_wdm 6-1:1.0: skipping garbage [ 1346.293674][T13257] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1346.293696][T13257] cdc_wdm 6-1:1.0: Unknown control protocol [ 1347.059773][T16873] usb 6-1: reset high-speed USB device number 85 using dummy_hcd [ 1348.013795][ T3580] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1348.103200][ T3580] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1348.161776][ T3580] bond0 (unregistering): Released all slaves [ 1348.200697][ T5909] usb 6-1: USB disconnect, device number 85 [ 1348.439516][T16882] syz.6.3076 (16882) used greatest stack depth: 17224 bytes left [ 1348.689794][ T3580] hsr_slave_0: left promiscuous mode [ 1348.731211][ T3580] hsr_slave_1: left promiscuous mode [ 1348.732159][ T3580] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1348.784906][ T3580] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1350.221015][ T3580] team0 (unregistering): Port device team_slave_1 removed [ 1350.437491][ T3580] team0 (unregistering): Port device team_slave_0 removed [ 1352.097468][T12115] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1352.101240][T12115] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1352.111739][T12115] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1352.114225][T12115] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1352.115532][T12115] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1352.219742][T14915] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 1353.089750][T14915] usb 6-1: Using ep0 maxpacket: 32 [ 1353.092200][T14915] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1353.092240][T14915] usb 6-1: config 0 has no interface number 0 [ 1353.092289][T14915] usb 6-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1353.092311][T14915] usb 6-1: config 0 interface 1 has no altsetting 0 [ 1353.095322][T14915] usb 6-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1353.095351][T14915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1353.095372][T14915] usb 6-1: Product: syz [ 1353.095388][T14915] usb 6-1: Manufacturer: syz [ 1353.095403][T14915] usb 6-1: SerialNumber: syz [ 1353.116359][T14915] usb 6-1: config 0 descriptor?? [ 1353.355704][T14915] cx231xx 6-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1353.397099][T14915] cx231xx 6-1:0.1: Failed to read PCB config [ 1353.397182][T14915] cx231xx 6-1:0.1: probe with driver cx231xx failed with error -71 [ 1353.426719][T14915] usb 6-1: USB disconnect, device number 86 [ 1353.890118][T14915] usb 6-1: new high-speed USB device number 87 using dummy_hcd [ 1354.089984][T14915] usb 6-1: Using ep0 maxpacket: 32 [ 1354.093834][T14915] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1354.093861][T14915] usb 6-1: config 0 has no interface number 0 [ 1354.093894][T14915] usb 6-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1354.093910][T14915] usb 6-1: config 0 interface 1 has no altsetting 0 [ 1354.096394][T14915] usb 6-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1354.096415][T14915] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1354.096429][T14915] usb 6-1: Product: syz [ 1354.096439][T14915] usb 6-1: Manufacturer: syz [ 1354.096450][T14915] usb 6-1: SerialNumber: syz [ 1354.126597][ T5800] Bluetooth: hci1: command tx timeout [ 1354.197792][T14915] usb 6-1: config 0 descriptor?? [ 1354.637893][T14915] cx231xx 6-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1354.650214][T14915] cx231xx 6-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4) [ 1355.599840][T14915] cx231xx 6-1:0.1: cx231xx_send_gpio_cmd: failed with status --71 [ 1355.600323][T14915] cx231xx 6-1:0.1: cx231xx_send_gpio_cmd: failed with status --71 [ 1355.601253][T14915] cx231xx 6-1:0.1: cx231xx_send_gpio_cmd: failed with status --71 [ 1355.601767][T14915] cx231xx 6-1:0.1: cx231xx_send_gpio_cmd: failed with status --71 [ 1355.602181][T14915] cx231xx 6-1:0.1: cx231xx_send_gpio_cmd: failed with status --71 [ 1355.602200][T14915] cx231xx 6-1:0.1: Failed to set devmode to analog: error: -71 [ 1355.708739][T14915] i2c i2c-2: Added multiplexed i2c bus 4 [ 1355.715060][T14915] i2c i2c-2: Added multiplexed i2c bus 5 [ 1355.716406][T14915] cx231xx 6-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-71]! [ 1355.716430][T14915] cx231xx 6-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-71]! [ 1355.780165][T14915] cx231xx 6-1:0.1: probe with driver cx231xx failed with error -71 [ 1355.785809][T14915] usb 6-1: USB disconnect, device number 87 [ 1356.136258][T16915] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 1356.136304][T16915] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 1356.136326][T16915] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1356.199807][ T5800] Bluetooth: hci1: command tx timeout [ 1358.279982][ T5800] Bluetooth: hci1: command tx timeout [ 1360.864092][ T5800] Bluetooth: hci1: command tx timeout [ 1362.248986][T12115] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1362.259228][T12115] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1362.263009][T12115] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1362.265720][T12115] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1362.270415][T12115] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1363.818762][ C0] vkms_vblank_simulate: vblank timer overrun [ 1363.868655][ C0] vkms_vblank_simulate: vblank timer overrun [ 1364.207815][ C0] vkms_vblank_simulate: vblank timer overrun [ 1364.214800][T16949] overlayfs: failed to clone upperpath [ 1364.360135][ T5800] Bluetooth: hci3: command tx timeout [ 1366.471430][ C0] vkms_vblank_simulate: vblank timer overrun [ 1366.477960][ T5800] Bluetooth: hci3: command tx timeout [ 1366.647876][T16959] 9pnet: Unknown protocol version 9p200 [ 1367.448909][ C0] vkms_vblank_simulate: vblank timer overrun [ 1367.520201][ C0] vkms_vblank_simulate: vblank timer overrun [ 1367.605384][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1367.605500][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1369.169658][T16709] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1369.522577][ T5800] Bluetooth: hci3: command tx timeout [ 1369.890312][T16709] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1369.912404][T16977] netlink: 'syz.6.3100': attribute type 1 has an invalid length. [ 1370.027909][T16977] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1370.043432][T16709] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1370.072653][T16709] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1370.323469][T16901] chnl_net:caif_netlink_parms(): no params data found [ 1371.559877][ T5800] Bluetooth: hci3: command tx timeout [ 1373.062532][T16938] chnl_net:caif_netlink_parms(): no params data found [ 1373.629766][ T5909] usb 6-1: new high-speed USB device number 88 using dummy_hcd [ 1373.796454][ T5909] usb 6-1: Using ep0 maxpacket: 16 [ 1373.798358][ T5909] usb 6-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid maxpacket 46080, setting to 1024 [ 1373.798445][ T5909] usb 6-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1373.798472][ T5909] usb 6-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1373.798491][ T5909] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1373.837082][ T5909] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1373.837118][ T5909] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1373.837252][ T5909] usb 6-1: Product: syz [ 1373.837270][ T5909] usb 6-1: Manufacturer: syz [ 1373.837287][ T5909] usb 6-1: SerialNumber: syz [ 1373.855359][T17003] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1374.076375][ T5909] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 88 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 1374.092559][ T5909] usb 6-1: USB disconnect, device number 88 [ 1374.106828][ T5909] usblp0: removed [ 1374.123260][T17006] udevd[17006]: setting mode of /dev/bus/usb/006/088 to 020664 failed: No such file or directory [ 1374.123494][T17006] udevd[17006]: setting owner of /dev/bus/usb/006/088 to uid=0, gid=7 failed: No such file or directory [ 1374.238728][T16901] bridge0: port 1(bridge_slave_0) entered blocking state [ 1374.238939][T16901] bridge0: port 1(bridge_slave_0) entered disabled state [ 1374.239121][T16901] bridge_slave_0: entered allmulticast mode [ 1374.243137][T16901] bridge_slave_0: entered promiscuous mode [ 1374.440180][T16901] bridge0: port 2(bridge_slave_1) entered blocking state [ 1374.440312][T16901] bridge0: port 2(bridge_slave_1) entered disabled state [ 1374.440617][T16901] bridge_slave_1: entered allmulticast mode [ 1374.443045][T16901] bridge_slave_1: entered promiscuous mode [ 1376.247520][T17033] fuse: Bad value for 'fd' [ 1376.418327][T16901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1376.420285][T16938] bridge0: port 1(bridge_slave_0) entered blocking state [ 1376.420444][T16938] bridge0: port 1(bridge_slave_0) entered disabled state [ 1376.420686][T16938] bridge_slave_0: entered allmulticast mode [ 1376.423724][T16938] bridge_slave_0: entered promiscuous mode [ 1376.481417][T16901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1376.484221][T16938] bridge0: port 2(bridge_slave_1) entered blocking state [ 1376.484326][T16938] bridge0: port 2(bridge_slave_1) entered disabled state [ 1376.484502][T16938] bridge_slave_1: entered allmulticast mode [ 1376.487032][T16938] bridge_slave_1: entered promiscuous mode [ 1376.666716][T17042] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3113'. [ 1378.274291][T16901] team0: Port device team_slave_0 added [ 1378.331128][T16938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1378.351443][T16901] team0: Port device team_slave_1 added [ 1378.414424][T16938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1378.759886][T14914] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 1378.822504][T16901] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1378.822517][T16901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1378.822534][T16901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1378.838006][T16938] team0: Port device team_slave_0 added [ 1378.841827][T16901] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1378.841845][T16901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1378.841878][T16901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1378.906971][T16938] team0: Port device team_slave_1 added [ 1379.019816][T14914] usb 6-1: Using ep0 maxpacket: 16 [ 1379.022862][T14914] usb 6-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid maxpacket 46080, setting to 1024 [ 1379.022894][T14914] usb 6-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1379.022918][T14914] usb 6-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1379.022946][T14914] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1379.028192][T14914] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1379.028227][T14914] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1379.028246][T14914] usb 6-1: Product: syz [ 1379.028260][T14914] usb 6-1: Manufacturer: syz [ 1379.028274][T14914] usb 6-1: SerialNumber: syz [ 1379.114317][T17057] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1379.349985][T14914] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 89 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 1379.377629][T14914] usb 6-1: USB disconnect, device number 89 [ 1379.390806][T14914] usblp0: removed [ 1379.432360][T16938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1379.432378][T16938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1379.432409][T16938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1379.622575][T16938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1379.622588][T16938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1379.622607][T16938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1379.844167][T16901] hsr_slave_0: entered promiscuous mode [ 1379.845216][T16901] hsr_slave_1: entered promiscuous mode [ 1379.845976][T16901] debugfs: 'hsr0' already exists in 'hsr' [ 1379.846011][T16901] Cannot create hsr debugfs directory [ 1382.040525][T16938] hsr_slave_0: entered promiscuous mode [ 1382.044382][T16938] hsr_slave_1: entered promiscuous mode [ 1382.045929][T16938] debugfs: 'hsr0' already exists in 'hsr' [ 1382.045956][T16938] Cannot create hsr debugfs directory [ 1383.632161][T17081] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 1383.632206][T17081] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 1383.632226][T17081] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1383.889425][T17085] overlayfs: failed to clone upperpath [ 1384.255566][T16709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1384.918905][T17092] bridge4: entered promiscuous mode [ 1387.904760][T12115] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1387.935111][T12115] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1387.950365][T12115] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1387.957311][T12115] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1387.957902][T12115] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1389.322401][T17120] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 1389.322437][T17120] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 1389.322451][T17120] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1389.786889][ T3580] bridge_slave_1: left allmulticast mode [ 1389.786922][ T3580] bridge_slave_1: left promiscuous mode [ 1389.787192][ T3580] bridge0: port 2(bridge_slave_1) entered disabled state [ 1390.714397][T12115] Bluetooth: hci4: command tx timeout [ 1390.827335][ T3580] bridge_slave_0: left allmulticast mode [ 1390.827367][ T3580] bridge_slave_0: left promiscuous mode [ 1390.827642][ T3580] bridge0: port 1(bridge_slave_0) entered disabled state [ 1391.063205][ T3580] bridge_slave_1: left allmulticast mode [ 1391.063235][ T3580] bridge_slave_1: left promiscuous mode [ 1391.063407][ T3580] bridge0: port 2(bridge_slave_1) entered disabled state [ 1392.140823][ T3580] bridge_slave_0: left allmulticast mode [ 1392.140847][ T3580] bridge_slave_0: left promiscuous mode [ 1392.141035][ T3580] bridge0: port 1(bridge_slave_0) entered disabled state [ 1392.840337][T12115] Bluetooth: hci4: command tx timeout [ 1392.900555][ T3580] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1392.960514][ T3580] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1393.032699][ T3580] bond0 (unregistering): Released all slaves [ 1393.790392][ T3580] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1393.900280][ T3580] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1393.981937][ T3580] bond0 (unregistering): Released all slaves [ 1395.089087][T12115] Bluetooth: hci4: command tx timeout [ 1397.301877][T12115] Bluetooth: hci4: command tx timeout [ 1398.288553][ C1] ------------[ cut here ]------------ [ 1398.288569][ C1] ODEBUG: free active (active state 0) object: ffff8880231948d0 object type: timer_list hint: rose_t0timer_expiry+0x0/0x360 [ 1398.289407][ C1] WARNING: CPU: 1 PID: 29 at lib/debugobjects.c:615 debug_print_object+0x16b/0x1e0 [ 1398.289610][ C1] Modules linked in: [ 1398.289651][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1398.289684][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1398.289702][ C1] RIP: 0010:debug_print_object+0x16b/0x1e0 [ 1398.289736][ C1] Code: 4c 89 ff e8 c7 c8 96 fd 4d 8b 0f 48 c7 c7 00 55 3f 8b 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 2a 6e f9 fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 c7 4d 6e 0a 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 [ 1398.289755][ C1] RSP: 0018:ffffc90000a3f708 EFLAGS: 00010282 [ 1398.289774][ C1] RAX: 181d10435ca43300 RBX: dffffc0000000000 RCX: ffff88801c2c1e00 [ 1398.289791][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 1398.289805][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000100 [ 1398.289818][ C1] R10: dffffc0000000000 R11: ffffed101712487b R12: ffffffff89b85920 [ 1398.289835][ C1] R13: ffffffff8b3f5680 R14: ffff8880231948d0 R15: ffffffff8aecf760 [ 1398.289869][ C1] FS: 0000000000000000(0000) GS:ffff888126ccd000(0000) knlGS:0000000000000000 [ 1398.289889][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1398.289905][ C1] CR2: 00007f435655fd68 CR3: 0000000053c8a000 CR4: 00000000003526f0 [ 1398.289925][ C1] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 1398.289941][ C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1398.289956][ C1] Call Trace: [ 1398.289971][ C1] [ 1398.289988][ C1] debug_check_no_obj_freed+0x3a2/0x470 [ 1398.290043][ C1] ? rose_timer_expiry+0x4cb/0x600 [ 1398.290102][ C1] kfree+0x114/0x950 [ 1398.290156][ C1] ? rose_timer_expiry+0x4cb/0x600 [ 1398.290186][ C1] rose_timer_expiry+0x4cb/0x600 [ 1398.290206][ C1] ? call_timer_fn+0x155/0x5f0 [ 1398.290267][ C1] call_timer_fn+0x17e/0x5f0 [ 1398.290297][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1398.290318][ C1] ? call_timer_fn+0xbe/0x5f0 [ 1398.290348][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1398.290391][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1398.290492][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1398.290536][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1398.290561][ C1] __run_timer_base+0x648/0x970 [ 1398.290609][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 1398.290660][ C1] run_timer_softirq+0xb7/0x180 [ 1398.290697][ C1] handle_softirqs+0x22f/0x710 [ 1398.290753][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1398.290796][ C1] run_ktimerd+0xcf/0x190 [ 1398.290826][ C1] ? __pfx_run_ktimerd+0x10/0x10 [ 1398.290855][ C1] ? schedule+0x91/0x360 [ 1398.290888][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 1398.290921][ C1] smpboot_thread_fn+0x53f/0xa60 [ 1398.290952][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 1398.290991][ C1] kthread+0x711/0x8a0 [ 1398.291029][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1398.291058][ C1] ? __pfx_kthread+0x10/0x10 [ 1398.291089][ C1] ? rt_spin_unlock+0x150/0x200 [ 1398.291127][ C1] ? rt_spin_unlock+0x161/0x200 [ 1398.291158][ C1] ? __pfx_kthread+0x10/0x10 [ 1398.291193][ C1] ret_from_fork+0x4b9/0x870 [ 1398.291246][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1398.291299][ C1] ? __switch_to_asm+0x39/0x70 [ 1398.291352][ C1] ? __switch_to_asm+0x33/0x70 [ 1398.291380][ C1] ? __pfx_kthread+0x10/0x10 [ 1398.291415][ C1] ret_from_fork_asm+0x1a/0x30 [ 1398.291467][ C1] [ 1398.291491][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1398.291508][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1398.291534][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1398.291548][ C1] Call Trace: [ 1398.291557][ C1] [ 1398.291566][ C1] dump_stack_lvl+0x99/0x250 [ 1398.291595][ C1] ? __asan_memcpy+0x40/0x70 [ 1398.291629][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1398.291657][ C1] ? __pfx__printk+0x10/0x10 [ 1398.291712][ C1] vpanic+0x237/0x6d0 [ 1398.291736][ C1] ? __pfx_vpanic+0x10/0x10 [ 1398.291772][ C1] panic+0xb9/0xc0 [ 1398.291792][ C1] ? __pfx_panic+0x10/0x10 [ 1398.291833][ C1] __warn+0x31b/0x4b0 [ 1398.291854][ C1] ? debug_print_object+0x16b/0x1e0 [ 1398.291890][ C1] ? debug_print_object+0x16b/0x1e0 [ 1398.291924][ C1] report_bug+0x2be/0x4f0 [ 1398.291995][ C1] ? debug_print_object+0x16b/0x1e0 [ 1398.292029][ C1] ? debug_print_object+0x16b/0x1e0 [ 1398.292062][ C1] ? debug_print_object+0x16d/0x1e0 [ 1398.292095][ C1] handle_bug+0x84/0x160 [ 1398.292147][ C1] exc_invalid_op+0x1a/0x50 [ 1398.292177][ C1] asm_exc_invalid_op+0x1a/0x20 [ 1398.292215][ C1] RIP: 0010:debug_print_object+0x16b/0x1e0 [ 1398.292250][ C1] Code: 4c 89 ff e8 c7 c8 96 fd 4d 8b 0f 48 c7 c7 00 55 3f 8b 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 2a 6e f9 fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 c7 4d 6e 0a 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 [ 1398.292271][ C1] RSP: 0018:ffffc90000a3f708 EFLAGS: 00010282 [ 1398.292291][ C1] RAX: 181d10435ca43300 RBX: dffffc0000000000 RCX: ffff88801c2c1e00 [ 1398.292309][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 1398.292324][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000100 [ 1398.292338][ C1] R10: dffffc0000000000 R11: ffffed101712487b R12: ffffffff89b85920 [ 1398.292356][ C1] R13: ffffffff8b3f5680 R14: ffff8880231948d0 R15: ffffffff8aecf760 [ 1398.292378][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1398.292425][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 1398.292462][ C1] debug_check_no_obj_freed+0x3a2/0x470 [ 1398.292516][ C1] ? rose_timer_expiry+0x4cb/0x600 [ 1398.292539][ C1] kfree+0x114/0x950 [ 1398.292562][ C1] ? rose_timer_expiry+0x4cb/0x600 [ 1398.292591][ C1] rose_timer_expiry+0x4cb/0x600 [ 1398.292611][ C1] ? call_timer_fn+0x155/0x5f0 [ 1398.292647][ C1] call_timer_fn+0x17e/0x5f0 [ 1398.292685][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1398.292707][ C1] ? call_timer_fn+0xbe/0x5f0 [ 1398.292737][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1398.292780][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1398.292805][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1398.292828][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 1398.292853][ C1] __run_timer_base+0x648/0x970 [ 1398.292901][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 1398.292951][ C1] run_timer_softirq+0xb7/0x180 [ 1398.292981][ C1] handle_softirqs+0x22f/0x710 [ 1398.293021][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1398.293063][ C1] run_ktimerd+0xcf/0x190 [ 1398.293095][ C1] ? __pfx_run_ktimerd+0x10/0x10 [ 1398.293124][ C1] ? schedule+0x91/0x360 [ 1398.293156][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 1398.293183][ C1] smpboot_thread_fn+0x53f/0xa60 [ 1398.293214][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 1398.293254][ C1] kthread+0x711/0x8a0 [ 1398.293293][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1398.293322][ C1] ? __pfx_kthread+0x10/0x10 [ 1398.293352][ C1] ? rt_spin_unlock+0x150/0x200 [ 1398.293392][ C1] ? rt_spin_unlock+0x161/0x200 [ 1398.293424][ C1] ? __pfx_kthread+0x10/0x10 [ 1398.293459][ C1] ret_from_fork+0x4b9/0x870 [ 1398.293491][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1398.293528][ C1] ? __switch_to_asm+0x39/0x70 [ 1398.293558][ C1] ? __switch_to_asm+0x33/0x70 [ 1398.293586][ C1] ? __pfx_kthread+0x10/0x10 [ 1398.293622][ C1] ret_from_fork_asm+0x1a/0x30 [ 1398.293680][ C1] [ 1398.294068][ C1] Kernel Offset: disabled