last executing test programs: 6m12.63648757s ago: executing program 4 (id=327): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=@newlink={0x30, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81}, [@IFLA_GROUP={0x8, 0x1b, 0x3}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x2ace8}]}, 0x30}}, 0x0) 6m12.410582233s ago: executing program 4 (id=329): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x840) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="38ff00", 0x3}], 0x1) openat$kvm(0xffffff9c, &(0x7f0000000040), 0x101000, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) keyctl$invalidate(0x15, 0x0) keyctl$read(0xb, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c00000000000000000000020000000900020073797a30000000000900010073797a3000000000140000001100010000000000000000060000000a0a6e0cdd33534e3f69f83531af28d5a83ef9076e5c641274396b6282309e4965408aed7c29de36cb83962a9d5df03b93c9f5f54e6413964eb450e09c9ff200eea722393fd17363cdf30a50ddafcee1605e384558d783c7eb1eb937dded10458c7ea4725fb0c4563c753d154f2ef055e69d68bc6757d4c4598be0b1cbed24d58b79e66a44ae294143b0c3d2ab33946b55ce8c8c21b1ee33"], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4000, 0x800, &(0x7f0000000200)) 6m10.692035132s ago: executing program 4 (id=340): socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_io_uring_setup(0xf01, &(0x7f0000000080)={0x0, 0x7f3d, 0xc00, 0x6, 0x42f6}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x10}) io_uring_enter(r0, 0x7430, 0x77ae, 0x40, 0x0, 0x0) 6m10.413667095s ago: executing program 4 (id=343): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000000)) ioctl$KVM_GET_STATS_FD_cpu(r1, 0xaece) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x10000, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sigaltstack(0x0, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72070005000400000000000900020073797a32000000000500050000006c000500010006"], 0x6c}}, 0x80) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x8864000000000000) 6m7.859685017s ago: executing program 4 (id=353): socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_io_uring_setup(0xf01, &(0x7f0000000080)={0x0, 0x7f3d, 0xc00, 0x6, 0x42f6}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x10}) io_uring_enter(r0, 0x7430, 0x77ae, 0x40, 0x0, 0x0) 6m7.74362872s ago: executing program 4 (id=354): mkdir(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0\x00', 0x551083, 0x40) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000180)={0x0, 0x9, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}, @broadcast, @empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @multicast, @random="c22843850335", @multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}]}) r1 = socket(0x400000000010, 0x2, 0x0) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r2, 0xc014563b, &(0x7f00000001c0)={0xe, {0x7, 0x5, 0x7, 0x7ef586e5}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = socket$unix(0x1, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x34, 0x0, 0x1, 0x3, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_TUPLE_MASTER={0x20, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1d}}, {0x8, 0x2, @remote}}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0x48004) fcntl$lock(r4, 0x5, &(0x7f00000000c0)={0x1, 0x2, 0x0, 0x80000000}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8024) socket(0x80000000000000a, 0x2, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r7, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000005}, 0x80) socket$inet6_tcp(0xa, 0x1, 0x0) bind$unix(r3, 0x0, 0x0) 5m52.517534314s ago: executing program 32 (id=354): mkdir(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0\x00', 0x551083, 0x40) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000180)={0x0, 0x9, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}, @broadcast, @empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @multicast, @random="c22843850335", @multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}]}) r1 = socket(0x400000000010, 0x2, 0x0) r2 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r2, 0xc014563b, &(0x7f00000001c0)={0xe, {0x7, 0x5, 0x7, 0x7ef586e5}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = socket$unix(0x1, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x34, 0x0, 0x1, 0x3, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_TUPLE_MASTER={0x20, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1d}}, {0x8, 0x2, @remote}}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0x48004) fcntl$lock(r4, 0x5, &(0x7f00000000c0)={0x1, 0x2, 0x0, 0x80000000}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8024) socket(0x80000000000000a, 0x2, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000000206030000000000000000000d0000000c000300686173683a69700005000400000000000900020073797a31000000000c000780080008400000005d05000500020000000500010006"], 0x50}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r7, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000005}, 0x80) socket$inet6_tcp(0xa, 0x1, 0x0) bind$unix(r3, 0x0, 0x0) 4m37.997336057s ago: executing program 0 (id=1159): listen(0xffffffffffffffff, 0x7) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x5008, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[@ANYBLOB="040e1a00031000"], 0xf) syz_open_dev$dri(0x0, 0x1ff, 0x0) 4m37.454651419s ago: executing program 0 (id=1165): syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x1) syz_open_dev$sg(0x0, 0x5, 0x60e0c2) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x30) 4m37.211498505s ago: executing program 0 (id=1168): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cd0aa7b73340cc2160a1fe3c184b751c51160fbce841f8a97be6148ba532e6ea09c346dfebd31a08b32808b80200000000009dd27080e71113610e10d859e8327ef03fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000067d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d7216fdb0d3a0ec4bfae563112f4b391aafe234870072858dc06e7c337642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8e12baf5c768a40538be5f76e9c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5be5f6eb2eea0d0df414b315f65112412392191fa83ee830548ef8e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb030621204d3ded6f260af62d91faae95196d5e3ff010000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a30280bc586e79a5dd8076c248e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5ffff000000000000c24411d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589ac5d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d54aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5f7d895de17a10b0a0ea15ccc0d7a830b6eb33b6b21675511d693ef5e3c44bbf71cabc5175d879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a2a2e5a00d2f953a86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c56d0886eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366a9660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e959212181d4bf32ed89c96d421c8171698c49403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef310e10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d618cdaaf7e038879c5d177b3876fda4121e15a00adb976064a93e8d000000000000903350932d3eef7fdada20c19807066e2c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a2c5986aa9200a1306ffa5a71ca69e89a6980612b35fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeadc5cf218a6eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041814f60fbbcafa487ee96b368e8769da90b44190e569fe8b1d155d0765baaca5c5548b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751beed5f79de29a67a579150bfb31232d296b9d2977ed027ca90af7088d6466f1501d96a32bfa3cf9ab0dcd626ac9341833e92685af6917ae05473ae4768341426e244159b3c3e002b6f8ee80cbe6e26c816ab92658d956d849cd3a21ebf4b143d338035cd91f087633aa668e0644b05dc5a7937cd5fb62bd08242a858aeeda8c0cbb4fc2478a8155b859e88493f322702277939832bd4a1d8109f98c5a187564c9eb80acc63ac57459593c81ce8998e38ea231b81ebaa6b242ebdf382d70232f1d8e516a8eaf39d09ea40198cf1b72eb5ce5327d3a3861470be47a9a9dbf569e6f6f474fd1448adfd70c4f4a4487edaf193a00a808389a110a4286905ba81309735f6ac5d2ba7ab2be01fa25c11dbb3170258e9d9fed944fd85c03336a49f7016517a1988bc84ee301e167d3cf88c46c4eba6e2bfd099acd2eec5c624679aa7ebab76061a9ca792bffe3d6df4dbe70b5cab6299a51e63826fd0bda4846d06e322ebd745e73da718ba0c93e7567df9ed7ea8d2fdbde44e65a4cd01748b"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x56, 0x0, &(0x7f0000000100)="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", 0x0, 0xfb, 0x60006000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000001c40)="beb61ec2ca90080239f2a54e2368fa761313c3a024a98109ba1e2e7b780d03c54b7a83d56fce397842e724674507d531762055fca371ea775f418df7bee236c9b9968146efb3232ae3413b617445e98bb644a892b9337f1a9135d9f30457a8ffb21aef4a95a155fab70a40b086056b0f63331a66b3457c", 0x2}, 0x2c) 4m36.087717253s ago: executing program 0 (id=1180): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r3, 0x4000000, 0xe, 0x0, &(0x7f0000000040)="976d9023d56482cd284a63da5397", 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000280)='P', 0x0, 0x8000}, 0x50) 4m35.515612797s ago: executing program 0 (id=1186): socket(0xa, 0x5, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040), 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[], 0x1c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x2, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) preadv(r0, 0x0, 0x0, 0x0, 0x0) 4m34.302529453s ago: executing program 0 (id=1190): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 4m19.068622773s ago: executing program 33 (id=1190): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 2m56.863425081s ago: executing program 1 (id=1920): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r4, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c65723000000000000008000500070000000a0018"], 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000180)={0x5c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME={0x3e, 0x33, @action={{{}, {}, @broadcast}, @sp_mp_close={0xf, 0x3, {{0x72, 0x6}, {0x75, 0x16, {0x1, 0x9, @void, @val=0x6, @val="18abf05723dfd89e25d3999511bbce74"}}}}}}]}, 0x5c}}, 0x0) 2m56.505131129s ago: executing program 1 (id=1923): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0x1) r1 = dup2(r0, r0) read$FUSE(r1, &(0x7f0000000440)={0x2020}, 0x2020) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r1, &(0x7f0000004d80)={0x2020}, 0x2020) write$vhost_msg_v2(r1, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000000140)=""/104, 0x68, 0x0, 0x1, 0x2}}, 0x48) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}) r4 = openat$rdma_cm(0xffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000200)={0x12, 0x10, 0xfa00, {&(0x7f0000000180), 0xffffffffffffffff, r4}}, 0x18) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x9, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xe, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032bbd7000fbdbdf25010000000500046020ec5d4014000705fe8000000000000000000000000000d5d5336d922a858b0014000700feff8dc43dc7688000000000000000000000000000aa0500020000000000"], 0x60}, 0x1, 0x0, 0x0, 0x40000000}, 0x44010) 2m56.23673771s ago: executing program 1 (id=1925): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r3, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x8000}, 0x50) 2m55.893048423s ago: executing program 1 (id=1928): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x24, @short={0x2, 0x0, 0xaaa0}}, 0x14, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4004) 2m55.676374712s ago: executing program 1 (id=1931): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast2, 0xd}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) 2m55.411063264s ago: executing program 1 (id=1932): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_CT_DIRECTION={0x5}]}}}, {0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x16}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa4}, 0x1, 0x0, 0x0, 0x840}, 0x0) 5.674284916s ago: executing program 6 (id=2394): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="d8000000100081046881f782db44b9090000000b01000000e8fe55a1180015000600140000000012080004003e000000a80016000a00001c06000200036010fab94dcf5c0461c1a6ced67f6f94007134cf6ee08000a0e408e8d8ef52878516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d95322fe7c9ffeffffff16a4683f1aeb4edbb57a5025ccca9e02360db70100000040fad95667e006dcffff951f215ce3bb9ad809d5e1cace81c639df2d04c343eb7a9db9596bb727ed", 0xcb}], 0x1}, 0x20004080) 4.852425785s ago: executing program 2 (id=2395): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000001c0)=0x1, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x14, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}}, 0x14}}, 0x0) 4.832887598s ago: executing program 6 (id=2396): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) ptrace$ARCH_SHSTK_STATUS(0x1e, 0x0, &(0x7f0000000300), 0x5005) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)}], 0x2, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) 4.658381305s ago: executing program 2 (id=2397): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)}}], 0x1, 0x0, 0x0) 4.602453241s ago: executing program 5 (id=2398): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000800)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x2c}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff}, @fda={0x66646185, 0x9}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) 3.449463261s ago: executing program 6 (id=2399): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newtaction={0x18, 0x30, 0x871a15abc695fb3d, 0x70bd2c, 0xdc, {}, [{0x4}]}, 0x18}}, 0x800) 3.425682s ago: executing program 5 (id=2400): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) r1 = socket$inet(0x2, 0x80001, 0x84) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x9}}, 0x20) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000340)=0x8) fchmodat(0xffffffffffffff9c, 0x0, 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.415260245s ago: executing program 2 (id=2401): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x3d6d9000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfff}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_open_dev$video(0x0, 0x100000000, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x0, 0x7fff8000}]}) close_range(r3, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) openat(r4, 0x0, 0x60042, 0x18f) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r4, 0x7a4, &(0x7f0000000300)={{@host}, 0x10001, 0x1, 0x8000, 0x4}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) 3.281252782s ago: executing program 3 (id=2402): getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) r1 = socket$kcm(0x10, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r2, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r3) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01d, 0x40e00) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) syz_genetlink_get_family_id$nl80211(0x0, r5) sendmmsg$inet6(r7, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r7, 0x84, 0x77, &(0x7f00000009c0)=ANY=[@ANYBLOB="12e01b3989dd", @ANYRES32=r6], 0x1000f) r8 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="200028bd7000fddbdf25150000003400018008e2020003000000140002007665746800020067656e657665310000000000000000002d0060d76044d969175921549f0210414b4bb9712904071b70bd2c7a88bad1db7c0381f100"], 0x48}, 0x1, 0x0, 0x0, 0x40001}, 0xeafa0f94b07bccea) syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40), r10) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r9, 0x40505331, &(0x7f0000000540)={{}, {0x18}, 0x0, 0x7}) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000a40)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000a80)={0x20, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [{{0x8}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008041}, 0x80) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newlink={0x68, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, r0, 0x200a0, 0x18841}, [@IFLA_GROUP={0x8}, @IFLA_VFINFO_LIST={0x40, 0x16, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0xa9, 0x8, 0x2}}, @IFLA_VF_MAC={0x28, 0x1, {0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}}]}]}]}, 0x68}}, 0x800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r8, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000003c0)="b9ff03316844268cb89e14f00800", 0x0, 0x2000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.126413108s ago: executing program 6 (id=2403): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newlink={0x3c, 0x10, 0x401, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40018}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x54}}, 0x0) 2.85872347s ago: executing program 2 (id=2404): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)={0x44, r1, 0x1, 0x70bd29, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x28, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0x4}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xdbc}]}]}, 0x44}}, 0x8080) 2.63320581s ago: executing program 5 (id=2405): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="d8000000100081046881f782db44b9090000000b01000000e8fe55a1180015000600140000000012080004003e000000a80016000a00001c06000200036010fab94dcf5c0461c1a6ced67f6f94007134cf6ee08000a0e408e8d8ef52878516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d95322fe7c9ffeffffff16a4683f1aeb4edbb57a5025ccca9e02360db70100000040fad95667e006dcffff951f215ce3bb9ad809d5e1cace81c639df2d04c343eb7a9db9596bb727ed0bffece0b42a9e", 0xd2}], 0x1}, 0x20004080) 2.589553183s ago: executing program 6 (id=2406): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000001c0)=0x1, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x64}}, 0x0) 2.424289181s ago: executing program 2 (id=2407): openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) setresuid(0x0, 0xee00, 0x0) bind$qrtr(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$pppoe(0x18, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) 2.239481987s ago: executing program 5 (id=2408): r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000480)="1c0000001a009b8a140000003b000000000000000000000000000000fda35065733173ae72a0d270d958f739b6d44c893b03599f77a332b446ea93568ae2ff534952656c6a18b6c0fdcec321127ee28705f2496eb43654255c5cc688f71db82bab173f4e19361ac01c1b0a2d2229993c8308ab7721e4c33c5fc214cd64a17d552a0fa33011d3ccceb56738a8c7e690d5843333a2a6d60f38", 0x98) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 2.200163955s ago: executing program 3 (id=2409): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000800)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x2c}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff}, @fda={0x66646185, 0x9}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) 2.005420431s ago: executing program 3 (id=2410): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)}}], 0x1, 0x0, 0x0) 1.840821965s ago: executing program 6 (id=2411): r0 = socket$pppl2tp(0x18, 0x1, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000640)=0x1, 0x4) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0}, 0x20000000) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x10, &(0x7f0000000000)={0xb1e1}) ptrace$cont(0xf7aef61bbe72383, 0x0, 0x276, 0x401) r3 = socket$kcm(0x23, 0x5, 0x0) listen(r3, 0x800) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r5, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r5) write$tun(r6, 0x0, 0x3db) accept4(r3, 0x0, 0x0, 0x80000) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x8, 0x0) socket$inet_udp(0x2, 0x2, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'pim6reg\x00', {0xff}, {}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x12, "d176", 0x1}}, @common=@unspec=@state={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x1}}}, {{@ipv6={@local, @empty, [0xffffffff], [], 'veth1_to_hsr\x00', 'dummy0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)={0xffffffffffffffff}) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') bind$unix(r7, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e23}, 0x6e) pread64(r8, &(0x7f0000000240)=""/164, 0x131, 0x131) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x1, 0x1, 0x0, 0x3}}, 0x26) sendmmsg(r0, &(0x7f0000004380), 0x34000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000080)) 1.840097799s ago: executing program 2 (id=2412): r0 = syz_usbip_server_init(0x1) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000280)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000640)={0x24, 0x0, &(0x7f0000000500)=ANY=[], 0x0, 0x0}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) sendmsg$inet(r2, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) bind$alg(r1, 0x0, 0x0) syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x98bf, 0xc00, 0x0, 0x374}, &(0x7f0000000100), 0x0, 0x0) syz_usb_connect(0x1, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1edb2361000000010902"], 0x0) write$usbip_server(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000003"], 0x35) 1.607100544s ago: executing program 3 (id=2413): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x3d6d9000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfff}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) syz_open_dev$video(0x0, 0x100000000, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x0, 0x7fff8000}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) openat(r5, 0x0, 0x60042, 0x18f) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r5, 0x7a4, &(0x7f0000000300)={{@host}, 0x10001, 0x1, 0x8000, 0x4}) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) 1.458911471s ago: executing program 5 (id=2414): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) r1 = socket$inet(0x2, 0x80001, 0x84) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x9}}, 0x20) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000340)=0x8) fchmodat(0xffffffffffffff9c, 0x0, 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 303.373603ms ago: executing program 3 (id=2415): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newlink={0x3c, 0x10, 0x401, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40018}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast1}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x54}}, 0x0) 1.482799ms ago: executing program 5 (id=2416): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)={0x50, r1, 0x1, 0x70bd29, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x34, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0x4}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xdbc}]}]}, 0x50}}, 0x8080) 0s ago: executing program 3 (id=2417): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="d8000000100081046881f782db44b9090000000b01000000e8fe55a1180015000600140000000012080004003e000000a80016000a00001c06000200036010fab94dcf5c0461c1a6ced67f6f94007134cf6ee08000a0e408e8d8ef52878516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d95322fe7c9ffeffffff16a4683f1aeb4edbb57a5025ccca9e02360db70100000040fad95667e006dcffff951f215ce3bb9ad809d5e1cace81c639df2d04c343eb7a9db9596bb727ed0bffece0b42a9e", 0xd2}], 0x1}, 0x20004080) kernel console output (not intermixed with test programs): descriptor's value: 9 [ 347.567768][ T5907] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 347.567795][ T5907] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 347.567816][ T5907] usb 6-1: config 0 interface 0 has no altsetting 0 [ 347.607706][ T5907] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 347.607775][ T5907] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 347.607807][ T5907] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 347.607831][ T5907] usb 6-1: config 0 interface 0 has no altsetting 0 [ 347.726904][ T5907] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 347.726971][ T5907] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 347.726999][ T5907] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 347.727022][ T5907] usb 6-1: config 0 interface 0 has no altsetting 0 [ 347.788523][ T5907] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 347.788559][ T5907] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 347.788581][ T5907] usb 6-1: Product: syz [ 347.788596][ T5907] usb 6-1: Manufacturer: syz [ 347.788610][ T5907] usb 6-1: SerialNumber: syz [ 347.842478][ T5907] usb 6-1: config 0 descriptor?? [ 347.857450][ T5907] yurex 6-1:0.0: Could not submitting URB [ 347.866660][ T5907] yurex 6-1:0.0: probe with driver yurex failed with error -5 [ 348.058956][ T9445] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 348.195923][ T5907] usb 6-1: USB disconnect, device number 9 [ 348.216800][ T9445] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 348.227872][ T9445] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 348.502461][ T9445] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 348.513265][ T9445] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 348.567409][ T9445] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 348.583759][ T9445] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 348.639987][ T9445] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 349.278500][ T818] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 349.427703][ T9445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.428990][ T818] usb 6-1: Using ep0 maxpacket: 32 [ 349.436479][ T818] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 349.436499][ T818] usb 6-1: config 0 has no interface number 0 [ 349.452033][ T818] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 349.452064][ T818] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.452083][ T818] usb 6-1: Product: syz [ 349.452097][ T818] usb 6-1: Manufacturer: syz [ 349.452111][ T818] usb 6-1: SerialNumber: syz [ 349.610530][ T818] usb 6-1: config 0 descriptor?? [ 349.616873][ T9445] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.634007][ T818] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 349.634037][ T818] usb 6-1: selecting invalid altsetting 1 [ 349.634054][ T818] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 349.691822][ T818] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 349.692101][ T818] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 349.692145][ T818] usb 6-1: media controller created [ 349.747402][ T91] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.749516][ T91] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.782657][ T818] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 349.941511][ T818] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 349.941578][ T818] zl10353_read_register: readreg error (reg=127, ret==-71) [ 349.942071][ T818] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 350.032630][ T985] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.053279][ T985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.406684][ T818] usb 6-1: USB disconnect, device number 10 [ 351.027231][ T9776] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1533'. [ 351.058777][ T9776] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1533'. [ 351.150393][ T9782] binder: 9773:9782 ioctl 400c620e 0 returned -14 [ 351.151148][ T9782] IPv6: NLM_F_CREATE should be specified when creating new route [ 352.400710][ T9445] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.613992][ T9800] PKCS7: Unknown OID: [4] 0.0 [ 352.614012][ T9800] PKCS7: Only support pkcs7_signedData type [ 353.399260][ T5907] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 353.552782][ T5907] usb 6-1: Using ep0 maxpacket: 16 [ 353.557101][ T5907] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 353.557166][ T5907] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 353.557229][ T5907] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 353.557255][ T5907] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 353.557277][ T5907] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 353.557301][ T5907] usb 6-1: config 1 interface 0 has no altsetting 0 [ 353.557339][ T5907] usb 6-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 353.557366][ T5907] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.636810][ T5907] ums-sddr09 6-1:1.0: USB Mass Storage device detected [ 353.721434][ T9445] veth0_vlan: entered promiscuous mode [ 354.000306][ T9445] veth1_vlan: entered promiscuous mode [ 354.267412][ T9819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.365514][ T9819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.454798][ T9445] veth0_macvtap: entered promiscuous mode [ 354.580116][ T9445] veth1_macvtap: entered promiscuous mode [ 355.206307][ T9445] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 355.430263][ T9445] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 355.502315][ T3519] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.507845][ T43] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.536188][ T3519] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.600745][ T5907] ums-sddr09 6-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 355.652009][ T3519] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.664009][ T5907] usb 6-1: USB disconnect, device number 11 [ 355.830489][ T819] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 356.004249][ T819] usb 4-1: Using ep0 maxpacket: 8 [ 356.018401][ T819] usb 4-1: unable to get BOS descriptor or descriptor too short [ 356.025085][ T819] usb 4-1: config 4 interface 0 has no altsetting 0 [ 356.054819][ T819] usb 4-1: string descriptor 0 read error: -22 [ 356.054931][ T819] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 356.054958][ T819] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 356.200729][ T819] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 356.247307][ T819] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 356.264452][ T819] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 356.264518][ T819] usb 4-1: media controller created [ 356.306978][ T819] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 356.606993][ T819] zl10353_read_register: readreg error (reg=127, ret==0) [ 356.630224][ T9875] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 356.630256][ T9875] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 356.772075][ T9875] vhci_hcd vhci_hcd.0: Device attached [ 356.970166][ T819] usb 4-1: USB disconnect, device number 17 [ 357.131076][ T3573] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.131101][ T3573] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.160276][ T31] usb 6-1: new low-speed USB device number 12 using dummy_hcd [ 357.237698][ T5907] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 357.344814][ T31] usb 6-1: config 0 has no interfaces? [ 357.344861][ T31] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 357.344889][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.397457][ T31] usb 6-1: config 0 descriptor?? [ 357.516552][ T5834] Bluetooth: hci3: unexpected event for opcode 0x2011 [ 357.618940][ T9877] usb 43-1: recv xbuf, 0 [ 357.624328][ T31] usb 6-1: string descriptor 0 read error: -71 [ 357.633596][ T1119] vhci_hcd vhci_hcd.5: stop threads [ 357.633625][ T1119] vhci_hcd vhci_hcd.5: release socket [ 357.633715][ T1119] vhci_hcd vhci_hcd.5: disconnect device [ 357.695921][ T31] usb 6-1: USB disconnect, device number 12 [ 357.737785][ T5907] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 357.740602][ T3519] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.740625][ T3519] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.097714][ T818] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 358.247697][ T818] usb 4-1: Using ep0 maxpacket: 32 [ 358.250400][ T818] usb 4-1: config 0 has no interfaces? [ 358.261431][ T818] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 358.261466][ T818] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.261488][ T818] usb 4-1: Product: syz [ 358.261502][ T818] usb 4-1: Manufacturer: syz [ 358.261518][ T818] usb 4-1: SerialNumber: syz [ 358.316900][ T818] usb 4-1: config 0 descriptor?? [ 358.584638][ T9906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.585543][ T9906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.508064][ T819] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 359.723626][ T819] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 359.736975][ T5834] Bluetooth: hci3: unexpected event for opcode 0x0c03 [ 359.754225][ T819] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 359.754286][ T819] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 359.754315][ T819] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 359.754340][ T819] usb 6-1: config 0 interface 0 has no altsetting 0 [ 359.756167][ T819] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 359.756225][ T819] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 359.756253][ T819] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 359.756277][ T819] usb 6-1: config 0 interface 0 has no altsetting 0 [ 359.796224][ T819] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 359.796291][ T819] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 359.796322][ T819] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 359.796347][ T819] usb 6-1: config 0 interface 0 has no altsetting 0 [ 359.836825][ T819] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 359.836893][ T819] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 359.836922][ T819] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 359.836946][ T819] usb 6-1: config 0 interface 0 has no altsetting 0 [ 359.883344][ T819] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 359.883412][ T819] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 359.883442][ T819] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 359.883468][ T819] usb 6-1: config 0 interface 0 has no altsetting 0 [ 359.929219][ T819] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 359.929284][ T819] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 359.929313][ T819] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 359.929338][ T819] usb 6-1: config 0 interface 0 has no altsetting 0 [ 359.977731][ T819] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 359.977802][ T819] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 359.977835][ T819] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 359.977862][ T819] usb 6-1: config 0 interface 0 has no altsetting 0 [ 360.033292][ T819] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 360.033375][ T819] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 360.033406][ T819] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 360.033431][ T819] usb 6-1: config 0 interface 0 has no altsetting 0 [ 360.090367][ T819] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 360.090404][ T819] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 360.090427][ T819] usb 6-1: Product: syz [ 360.090444][ T819] usb 6-1: Manufacturer: syz [ 360.090460][ T819] usb 6-1: SerialNumber: syz [ 360.150984][ T819] usb 6-1: config 0 descriptor?? [ 360.186845][ T819] yurex 6-1:0.0: Could not submitting URB [ 360.187031][ T819] yurex 6-1:0.0: probe with driver yurex failed with error -5 [ 360.511348][ T10] usb 6-1: USB disconnect, device number 13 [ 360.757947][ T9927] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 360.759219][ T9927] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 360.976959][ T9906] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 361.021822][ T9927] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 361.021987][ T9927] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 361.115228][ T9927] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 361.115873][ T9927] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 361.247404][ T9927] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 361.247506][ T9927] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 362.382789][ T9927] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 362.562013][ T5834] Bluetooth: hci1: command 0x0406 tx timeout [ 362.708135][ T9927] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 362.941483][ T5838] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 362.974311][ T5838] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 362.977202][ T5838] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 363.073708][ T31] usb 4-1: USB disconnect, device number 18 [ 363.075313][ T5838] Bluetooth: hci3: command 0x0406 tx timeout [ 363.124578][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 363.129598][ T5907] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 363.179387][ T5833] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 363.179576][ T9973] binder: 9972:9973 ioctl 400c620e 0 returned -14 [ 363.181449][ T9973] IPv6: NLM_F_CREATE should be specified when creating new route [ 363.196348][ T5833] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 363.280517][ T5907] usb 6-1: Using ep0 maxpacket: 8 [ 363.284724][ T5907] usb 6-1: unable to get BOS descriptor or descriptor too short [ 363.290249][ T5907] usb 6-1: config 4 interface 0 has no altsetting 0 [ 363.324962][ T5907] usb 6-1: string descriptor 0 read error: -22 [ 363.325076][ T5907] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 363.325113][ T5907] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 363.367684][ T5833] Bluetooth: hci5: command 0x0c1a tx timeout [ 363.537447][ T5907] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 363.565710][ T9979] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 363.565743][ T9979] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 363.565846][ T9979] vhci_hcd vhci_hcd.0: Device attached [ 363.683205][ T5907] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 363.683610][ T5907] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 363.683668][ T5907] usb 6-1: media controller created [ 363.771081][ T5907] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 363.824560][ T5907] zl10353_read_register: readreg error (reg=127, ret==0) [ 363.907719][ T818] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 364.007674][ T36] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 364.058803][ T5907] usb 6-1: USB disconnect, device number 14 [ 364.072633][ T9984] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 364.162209][ T36] usb 7-1: config 0 has no interfaces? [ 364.162254][ T36] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 364.162295][ T36] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.199219][ T36] usb 7-1: config 0 descriptor?? [ 364.414949][ T9980] usb 45-1: recv xbuf, 0 [ 364.457443][ T36] usb 7-1: string descriptor 0 read error: -71 [ 364.472607][ T1119] vhci_hcd vhci_hcd.6: stop threads [ 364.472639][ T1119] vhci_hcd vhci_hcd.6: release socket [ 364.472725][ T1119] vhci_hcd vhci_hcd.6: disconnect device [ 364.481308][ T36] usb 7-1: USB disconnect, device number 2 [ 364.499158][ T818] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 364.637738][ T5833] Bluetooth: hci1: command 0x0406 tx timeout [ 365.120806][ T5833] Bluetooth: hci3: command 0x0406 tx timeout [ 365.197721][ T5833] Bluetooth: hci2: command 0x0406 tx timeout [ 365.449751][ T5833] Bluetooth: hci5: command 0x0c1a tx timeout [ 365.518491][ T5833] Bluetooth: hci6: command tx timeout [ 365.697147][ T3505] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.518543][ T5833] Bluetooth: hci5: command 0x0c1a tx timeout [ 367.575584][ T819] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 367.600369][ T5833] Bluetooth: hci6: command tx timeout [ 367.790202][ T819] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.790241][ T819] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 367.790281][ T819] usb 7-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 367.790306][ T819] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.873191][ T819] usb 7-1: config 0 descriptor?? [ 368.343534][ T3505] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.742826][T10034] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1636'. [ 368.829062][T10034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.851832][T10034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.908250][T10034] netlink: 'syz.6.1636': attribute type 30 has an invalid length. [ 368.978362][ T819] hid-led 0003:27B8:01ED.0009: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.6-1/input0 [ 369.653032][T10034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.671484][T10034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.678119][ T5833] Bluetooth: hci6: command tx timeout [ 369.689861][T10034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.690440][T10034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.834035][ T819] hid-led 0003:27B8:01ED.0009: ThingM blink(1) initialized [ 369.853583][ T819] usb 7-1: USB disconnect, device number 3 [ 369.938167][ T3505] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.156527][T10046] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1640'. [ 371.757741][ T5833] Bluetooth: hci6: command tx timeout [ 371.892946][ T3505] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.397017][T10005] syz.3.1622 (10005): drop_caches: 2 [ 373.094790][ T9937] chnl_net:caif_netlink_parms(): no params data found [ 374.654070][T10146] binder: 10141:10146 ioctl 400c620e 0 returned -14 [ 374.829702][T10149] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1687'. [ 375.357749][ T5899] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 375.531841][ T5899] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 375.534069][ T5899] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 375.534131][ T5899] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 375.534159][ T5899] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 375.534183][ T5899] usb 6-1: config 0 interface 0 has no altsetting 0 [ 375.536165][ T5899] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 375.536224][ T5899] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 375.536272][ T5899] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 375.536296][ T5899] usb 6-1: config 0 interface 0 has no altsetting 0 [ 375.632836][ T5899] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 375.632879][ T5899] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 375.632896][ T5899] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 375.632910][ T5899] usb 6-1: config 0 interface 0 has no altsetting 0 [ 375.682118][ T5899] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 375.682185][ T5899] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 375.682211][ T5899] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 375.682226][ T5899] usb 6-1: config 0 interface 0 has no altsetting 0 [ 375.686417][ T5899] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 375.686475][ T5899] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 375.686492][ T5899] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 375.686506][ T5899] usb 6-1: config 0 interface 0 has no altsetting 0 [ 375.698399][ T5899] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 375.698440][ T5899] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 375.698457][ T5899] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 375.698470][ T5899] usb 6-1: config 0 interface 0 has no altsetting 0 [ 375.817686][ T5899] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 375.817880][ T5899] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 375.817912][ T5899] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 375.817937][ T5899] usb 6-1: config 0 interface 0 has no altsetting 0 [ 375.822488][ T5899] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 375.822552][ T5899] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 375.822580][ T5899] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 375.822605][ T5899] usb 6-1: config 0 interface 0 has no altsetting 0 [ 375.907449][ T5899] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 375.914766][ T5899] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 375.914798][ T5899] usb 6-1: Product: syz [ 375.914812][ T5899] usb 6-1: Manufacturer: syz [ 375.914827][ T5899] usb 6-1: SerialNumber: syz [ 375.980133][ T5899] usb 6-1: config 0 descriptor?? [ 375.986488][ T5899] yurex 6-1:0.0: Could not submitting URB [ 375.986637][ T5899] yurex 6-1:0.0: probe with driver yurex failed with error -5 [ 376.293588][ T5899] usb 6-1: USB disconnect, device number 15 [ 376.321259][ T9937] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.321432][ T9937] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.321697][ T9937] bridge_slave_0: entered allmulticast mode [ 376.369506][ T9937] bridge_slave_0: entered promiscuous mode [ 376.382938][ T31] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 376.542157][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.542197][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 376.542240][ T31] usb 7-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 376.542266][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.603529][ T31] usb 7-1: config 0 descriptor?? [ 376.808276][ T3505] bridge_slave_1: left allmulticast mode [ 376.808307][ T3505] bridge_slave_1: left promiscuous mode [ 376.854120][ T3505] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.014942][ T3505] bridge_slave_0: left allmulticast mode [ 377.014970][ T3505] bridge_slave_0: left promiscuous mode [ 377.067988][ T3505] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.315835][T10183] binder: 10178:10183 ioctl 400c620e 0 returned -14 [ 377.507073][T10167] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1694'. [ 377.527441][T10167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.530414][T10167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.548928][T10167] netlink: 'syz.6.1694': attribute type 30 has an invalid length. [ 377.622311][ T31] hid-led 0003:27B8:01ED.000A: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.6-1/input0 [ 377.734733][ T31] hid-led 0003:27B8:01ED.000A: ThingM blink(1) initialized [ 377.773705][T10167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.774345][T10167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.798007][T10167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.798902][T10167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.806089][ T10] usb 7-1: USB disconnect, device number 4 [ 377.987893][T10191] fido_id[10191]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 379.071144][T10203] syz.5.1708 (10203): drop_caches: 2 [ 379.272363][ T5833] Bluetooth: hci5: unexpected event for opcode 0x0c03 [ 379.578546][ T3505] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 379.665452][ T3505] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 379.732248][ T3505] bond0 (unregistering): Released all slaves [ 379.787831][ T818] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 379.792467][ T9937] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.792614][ T9937] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.792904][ T9937] bridge_slave_1: entered allmulticast mode [ 379.815377][ T9937] bridge_slave_1: entered promiscuous mode [ 380.006678][ T818] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.006815][ T818] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.006859][ T818] usb 7-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 380.006884][ T818] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.013638][ T818] usb 7-1: config 0 descriptor?? [ 380.046407][T10219] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 380.905765][T10229] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1720'. [ 380.926972][T10229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.949460][T10229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.954837][T10229] netlink: 'syz.6.1720': attribute type 30 has an invalid length. [ 381.114615][ T818] hid-led 0003:27B8:01ED.000B: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.6-1/input0 [ 381.222328][T10229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.222997][T10229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.225141][T10229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.225826][T10229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.245292][T10247] syz.5.1727 (10247): drop_caches: 2 [ 381.410447][ T818] hid-led 0003:27B8:01ED.000B: ThingM blink(1) initialized [ 381.425928][ T818] usb 7-1: USB disconnect, device number 5 [ 381.497765][ T31] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 381.570011][ T9937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 381.618649][ T9937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 381.650576][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 381.653533][ T31] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 381.653597][ T31] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 381.653616][ T31] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 381.653630][ T31] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 381.653651][ T31] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 381.653665][ T31] usb 4-1: config 1 interface 0 has no altsetting 0 [ 381.653687][ T31] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 381.653701][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.862036][ T31] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 382.347315][T10283] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.361786][T10259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.376806][T10259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.472976][T10278] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 383.077759][ T5899] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 383.239783][ T5899] usb 7-1: Using ep0 maxpacket: 8 [ 383.244873][ T5899] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 383.244941][ T5899] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 383.244966][ T5899] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.320158][ T5899] usb 7-1: config 0 descriptor?? [ 383.665646][ T5899] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 383.960843][ T5899] usb 7-1: USB disconnect, device number 6 [ 384.091993][ T9937] team0: Port device team_slave_0 added [ 384.251242][ T9937] team0: Port device team_slave_1 added [ 384.694464][ T31] ums-sddr09 4-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 384.768725][ T9937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 384.768745][ T9937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 384.768776][ T9937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 384.815396][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.815467][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.831983][ T31] usb 4-1: USB disconnect, device number 19 [ 385.009459][ T3505] hsr_slave_0: left promiscuous mode [ 385.051854][ T3505] hsr_slave_1: left promiscuous mode [ 385.055083][ T3505] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 385.055115][ T3505] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 385.159134][ T3505] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 385.159166][ T3505] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 385.347110][ T3505] veth1_macvtap: left promiscuous mode [ 385.347237][ T3505] veth0_macvtap: left promiscuous mode [ 385.348522][ T5899] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 385.374732][ T3505] veth1_vlan: left promiscuous mode [ 385.375224][ T3505] veth0_vlan: left promiscuous mode [ 385.508146][ T5899] usb 4-1: Using ep0 maxpacket: 8 [ 385.510491][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 385.510549][ T5899] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 385.510576][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.562164][ T5899] usb 4-1: config 0 descriptor?? [ 385.779444][ T5899] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 386.004336][ T5899] usb 4-1: USB disconnect, device number 20 [ 386.004424][ C0] iowarrior 4-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 387.811898][ T3505] team0 (unregistering): Port device team_slave_1 removed [ 387.890474][ T3505] team0 (unregistering): Port device team_slave_0 removed [ 389.436513][ T9937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 389.436533][ T9937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 389.436564][ T9937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.433190][T10432] sysfs: cannot create duplicate filename '/class/ieee80211/u¸à^!‚lü1Ü*ø$pOcÚÉ”ÎÜr$åG—•µ' [ 390.433221][T10432] CPU: 0 UID: 0 PID: 10432 Comm: syz.3.1799 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 390.433250][T10432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 390.433264][T10432] Call Trace: [ 390.433274][T10432] [ 390.433284][T10432] dump_stack_lvl+0xe8/0x150 [ 390.433330][T10432] sysfs_warn_dup+0x8e/0xa0 [ 390.433365][T10432] sysfs_do_create_link_sd+0xc0/0x110 [ 390.433401][T10432] device_add_class_symlinks+0x1d2/0x240 [ 390.433439][T10432] device_add+0x475/0xbb0 [ 390.433478][T10432] wiphy_register+0x1dc5/0x2dc0 [ 390.433522][T10432] ? __pfx_wiphy_register+0x10/0x10 [ 390.433545][T10432] ? __pfx_netdev_run_todo+0x10/0x10 [ 390.433568][T10432] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 390.433608][T10432] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 390.433639][T10432] ieee80211_register_hw+0x3d82/0x4a70 [ 390.433677][T10432] ? ieee80211_register_hw+0x1911/0x4a70 [ 390.433728][T10432] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 390.433756][T10432] ? __asan_memset+0x22/0x50 [ 390.433783][T10432] ? __hrtimer_setup+0x1c2/0x260 [ 390.433811][T10432] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 390.433845][T10432] mac80211_hwsim_new_radio+0x3081/0x55e0 [ 390.433889][T10432] ? mac80211_hwsim_new_radio+0xee/0x55e0 [ 390.433945][T10432] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 390.433968][T10432] ? kstrndup+0xbf/0x160 [ 390.434005][T10432] hwsim_new_radio_nl+0xf6a/0x1c00 [ 390.434050][T10432] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 390.434082][T10432] ? rcu_is_watching+0x15/0xb0 [ 390.434110][T10432] ? trace_kmalloc+0x2a/0xf0 [ 390.434134][T10432] ? __nla_parse+0x40/0x60 [ 390.434169][T10432] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 390.434196][T10432] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 390.434230][T10432] genl_family_rcv_msg_doit+0x22a/0x330 [ 390.434263][T10432] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 390.434287][T10432] ? rcu_is_watching+0x15/0xb0 [ 390.434328][T10432] ? bpf_lsm_capable+0x9/0x20 [ 390.434351][T10432] ? security_capable+0x7e/0x2c0 [ 390.434384][T10432] genl_rcv_msg+0x61c/0x7a0 [ 390.434415][T10432] ? __pfx_genl_rcv_msg+0x10/0x10 [ 390.434435][T10432] ? ref_tracker_free+0x673/0x820 [ 390.434463][T10432] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 390.434486][T10432] ? __pfx_ref_tracker_free+0x10/0x10 [ 390.434529][T10432] netlink_rcv_skb+0x232/0x4b0 [ 390.434561][T10432] ? __pfx_genl_rcv_msg+0x10/0x10 [ 390.434589][T10432] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 390.434636][T10432] ? netlink_deliver_tap+0x2e/0x1b0 [ 390.434675][T10432] ? netlink_deliver_tap+0x2e/0x1b0 [ 390.434713][T10432] genl_rcv+0x28/0x40 [ 390.434735][T10432] netlink_unicast+0x780/0x920 [ 390.434776][T10432] netlink_sendmsg+0x813/0xb40 [ 390.434822][T10432] ? __pfx_netlink_sendmsg+0x10/0x10 [ 390.434864][T10432] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 390.434911][T10432] ____sys_sendmsg+0x94c/0x9c0 [ 390.434939][T10432] ? __pfx_____sys_sendmsg+0x10/0x10 [ 390.434974][T10432] ? import_iovec+0x73/0xa0 [ 390.435012][T10432] ___sys_sendmsg+0x2a5/0x360 [ 390.435033][T10432] ? __lock_acquire+0x6b5/0x2cf0 [ 390.435065][T10432] ? __pfx____sys_sendmsg+0x10/0x10 [ 390.435094][T10432] ? futex_wait+0x2a2/0x390 [ 390.435160][T10432] ? __fget_files+0x2a/0x420 [ 390.435190][T10432] ? __fget_files+0x3a6/0x420 [ 390.435229][T10432] __x64_sys_sendmsg+0x1c3/0x2a0 [ 390.435255][T10432] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 390.435302][T10432] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.435326][T10432] do_syscall_64+0x15f/0xf80 [ 390.435355][T10432] ? clear_bhb_loop+0x40/0x90 [ 390.435385][T10432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.435406][T10432] RIP: 0033:0x7f91a52dc819 [ 390.435430][T10432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 390.435449][T10432] RSP: 002b:00007f91a288b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 390.435498][T10432] RAX: ffffffffffffffda RBX: 00007f91a5556450 RCX: 00007f91a52dc819 [ 390.435514][T10432] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 000000000000000b [ 390.435527][T10432] RBP: 00007f91a5372c91 R08: 0000000000000000 R09: 0000000000000000 [ 390.435539][T10432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 390.435551][T10432] R13: 00007f91a55564e8 R14: 00007f91a5556450 R15: 00007ffc42180e08 [ 390.435586][T10432] [ 390.467742][ T31] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 390.647654][ T31] usb 7-1: Using ep0 maxpacket: 8 [ 390.650239][ T31] usb 7-1: unable to get BOS descriptor or descriptor too short [ 390.655450][ T31] usb 7-1: config 4 interface 0 has no altsetting 0 [ 390.720084][ T31] usb 7-1: string descriptor 0 read error: -22 [ 390.720183][ T31] usb 7-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 390.720206][ T31] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 391.096337][ T9937] hsr_slave_0: entered promiscuous mode [ 391.104078][ T9937] hsr_slave_1: entered promiscuous mode [ 391.105213][ T9937] debugfs: 'hsr0' already exists in 'hsr' [ 391.105239][ T9937] Cannot create hsr debugfs directory [ 391.134663][ T31] usb 7-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 391.357704][ T31] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 391.362844][ T31] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 391.362937][ T31] usb 7-1: media controller created [ 391.515010][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 391.767900][ T31] zl10353_read_register: readreg error (reg=127, ret==0) [ 391.953223][T10463] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1816'. [ 392.296260][ T31] usb 7-1: USB disconnect, device number 7 [ 394.374431][ T10] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 394.434370][ T5482] 8021q: adding VLAN 0 to HW filter on device eth5 [ 394.517773][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 394.520547][ T10] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 394.520578][ T10] usb 6-1: config 0 has no interface number 0 [ 394.524191][ T10] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 394.524222][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.524244][ T10] usb 6-1: Product: syz [ 394.524259][ T10] usb 6-1: Manufacturer: syz [ 394.524273][ T10] usb 6-1: SerialNumber: syz [ 394.599075][ T10] usb 6-1: config 0 descriptor?? [ 394.697119][ T10] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 394.697150][ T10] usb 6-1: selecting invalid altsetting 1 [ 394.697167][ T10] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 394.743148][ T10] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 394.745214][ T10] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 394.745292][ T10] usb 6-1: media controller created [ 394.794333][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 395.964164][ T10] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 395.964274][T10519] usb 6-1: dvb_usb_ce6230: I2C read not implemented [ 395.964352][ T10] zl10353_read_register: readreg error (reg=127, ret==-110) [ 396.110756][ T10] usb 6-1: USB disconnect, device number 16 [ 398.431713][ T5833] Bluetooth: hci3: SCO packet for unknown connection handle 201 [ 400.051881][T10611] syz.3.1864 (10611): drop_caches: 2 [ 401.583764][ T31] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 401.742306][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 401.742347][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 401.742391][ T31] usb 7-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 401.742417][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.822863][ T31] usb 7-1: config 0 descriptor?? [ 402.254890][ T5482] veth0_vlan: left promiscuous mode [ 402.327895][ T10] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 402.459586][ T5482] veth0_vlan: entered promiscuous mode [ 402.539576][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 402.567991][ T10] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 402.568022][ T10] usb 4-1: config 0 has no interface number 0 [ 402.596772][ T10] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 402.596809][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.596832][ T10] usb 4-1: Product: syz [ 402.596846][ T10] usb 4-1: Manufacturer: syz [ 402.596863][ T10] usb 4-1: SerialNumber: syz [ 402.695516][T10641] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1872'. [ 402.714703][ T10] usb 4-1: config 0 descriptor?? [ 402.731349][ T10] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 402.731378][ T10] usb 4-1: selecting invalid altsetting 1 [ 402.731393][ T10] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 402.735858][ T10] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 402.736265][ T10] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 402.736318][ T10] usb 4-1: media controller created [ 402.802388][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 402.872892][T10664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.873589][T10664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.907794][T10641] netlink: 'syz.6.1872': attribute type 30 has an invalid length. [ 403.043414][ T31] hid-led 0003:27B8:01ED.000C: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.6-1/input0 [ 403.108845][ T9937] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 403.200312][T10641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.204222][T10641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.259953][T10641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.272653][T10641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.278093][ T9937] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 403.285063][ T31] hid-led 0003:27B8:01ED.000C: ThingM blink(1) initialized [ 403.292928][ T9937] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 403.429055][ T31] usb 7-1: USB disconnect, device number 8 [ 403.583546][T10666] fido_id[10666]: Failed to read report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:27B8:01ED.000C/report_descriptor': No such device [ 403.777287][ T9937] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 403.805743][ T9937] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 403.921338][ T10] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 403.921426][ T10] zl10353_read_register: readreg error (reg=127, ret==-110) [ 403.921457][T10656] usb 4-1: dvb_usb_ce6230: I2C read not implemented [ 404.030637][ T9937] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 404.031288][ T9937] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 404.268725][ T9937] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 404.375147][ T10] usb 4-1: USB disconnect, device number 21 [ 406.409516][ T9937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 406.633174][ T9937] 8021q: adding VLAN 0 to HW filter on device team0 [ 406.790938][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.791144][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 406.882988][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.883072][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 409.650544][T10745] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1903'. [ 409.973170][ T9937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 410.066528][ T9937] veth0_vlan: entered promiscuous mode [ 410.082502][ T9937] veth1_vlan: entered promiscuous mode [ 410.120985][ T9937] veth0_macvtap: entered promiscuous mode [ 410.135427][ T9937] veth1_macvtap: entered promiscuous mode [ 410.172819][ T9937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 410.189300][ T9937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 410.266151][ T31] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 411.469716][ T985] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.606221][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.606261][ T31] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 411.606301][ T31] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 411.606323][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.624605][ T31] usb 4-1: config 0 descriptor?? [ 411.782196][ T985] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.787135][ T985] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.030536][ T985] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.766615][T10748] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1905'. [ 412.877145][T10781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.878024][T10781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.898210][T10781] netlink: 'syz.3.1905': attribute type 30 has an invalid length. [ 413.021651][ T31] hid-led 0003:27B8:01ED.000D: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.3-1/input0 [ 413.172478][T10748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.173154][T10748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.275137][ T31] hid-led 0003:27B8:01ED.000D: ThingM blink(1) initialized [ 413.288591][T10794] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1917'. [ 413.321755][T10748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.322498][T10748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.492527][ T91] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.492552][ T91] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.576318][ T10] usb 4-1: USB disconnect, device number 22 [ 414.206133][T10801] fido_id[10801]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 414.454754][ T985] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.454778][ T985] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.462027][T10811] netlink: 'syz.3.1922': attribute type 4 has an invalid length. [ 415.186440][T10830] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1930'. [ 418.629575][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 418.662066][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 418.664022][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 418.700780][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 418.708217][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 420.328149][ T5833] Bluetooth: hci0: unexpected event for opcode 0x2011 [ 420.556312][T10904] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1946'. [ 421.289846][ T10] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 421.405942][T10925] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 421.405972][T10925] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 421.406063][T10925] vhci_hcd vhci_hcd.0: Device attached [ 421.457643][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 421.460479][ T10] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 421.460506][ T10] usb 6-1: config 0 has no interface number 0 [ 421.460555][ T10] usb 6-1: config 0 interface 184 has no altsetting 0 [ 421.499192][ T10] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 421.499225][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.499244][ T10] usb 6-1: Product: syz [ 421.499258][ T10] usb 6-1: Manufacturer: syz [ 421.499272][ T10] usb 6-1: SerialNumber: syz [ 421.510237][ T10] usb 6-1: config 0 descriptor?? [ 421.720846][ T6010] usb 7-1: new low-speed USB device number 9 using dummy_hcd [ 421.800099][ T819] usb 45-1: new low-speed USB device number 3 using vhci_hcd [ 421.934179][ T6010] usb 7-1: config 0 has no interfaces? [ 421.934222][ T6010] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 421.934308][ T6010] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.997875][ T5833] Bluetooth: hci4: command tx timeout [ 422.012028][ T6010] usb 7-1: config 0 descriptor?? [ 422.174676][ T91] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.261326][T10926] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 422.261724][ T3505] vhci_hcd vhci_hcd.6: stop threads [ 422.261753][ T3505] vhci_hcd vhci_hcd.6: release socket [ 422.303446][ T3505] vhci_hcd vhci_hcd.6: disconnect device [ 422.349930][ T6010] usb 7-1: USB disconnect, device number 9 [ 422.585011][ T10] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 422.786783][ T10] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 422.786820][ T10] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 422.786836][ T10] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 422.786847][ T10] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 422.787038][ T10] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 422.854432][ T10] usb 6-1: USB disconnect, device number 17 [ 423.112476][T10936] syz.2.1953 (10936): drop_caches: 2 [ 423.313632][ T5833] Bluetooth: hci3: unexpected event for opcode 0x2011 [ 423.865333][ T91] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.927728][ T818] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 423.945965][T10955] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1958'. [ 424.078661][ T818] usb 6-1: Using ep0 maxpacket: 16 [ 424.082278][ T818] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 424.084265][ T818] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 424.084451][ T818] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 424.084481][ T818] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 424.084505][ T818] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 424.084530][ T818] usb 6-1: config 1 interface 0 has no altsetting 0 [ 424.084571][ T818] usb 6-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 424.084597][ T818] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.089884][ T5833] Bluetooth: hci4: command tx timeout [ 424.221697][ T818] ums-sddr09 6-1:1.0: USB Mass Storage device detected [ 424.750049][T10949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.770948][T10949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.157750][ T5833] Bluetooth: hci4: command tx timeout [ 426.967832][ T819] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 427.276005][ T91] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.217920][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 428.237741][ T5833] Bluetooth: hci4: command tx timeout [ 428.396073][T10987] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 428.396107][T10987] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 428.396461][T10987] vhci_hcd vhci_hcd.0: Device attached [ 428.398023][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 428.401558][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 428.404379][ T10] usb 3-1: config 4 interface 0 has no altsetting 0 [ 428.490365][ T10] usb 3-1: string descriptor 0 read error: -22 [ 428.490462][ T10] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 428.490478][ T10] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 428.700506][ T10] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 428.706922][ T10] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 428.707309][ T10] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 428.708217][ T10] usb 3-1: media controller created [ 428.725735][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 428.739847][ T5907] usb 39-1: new low-speed USB device number 5 using vhci_hcd [ 428.947708][ T36] usb 4-1: new low-speed USB device number 23 using dummy_hcd [ 429.186494][ T818] ums-sddr09 6-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 429.212888][ T36] usb 4-1: config 0 has no interfaces? [ 429.212944][ T36] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 429.212959][ T36] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.297327][ T818] usb 6-1: USB disconnect, device number 18 [ 429.334230][ T36] usb 4-1: config 0 descriptor?? [ 429.602414][T10988] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 3 [ 429.640966][ T36] usb 4-1: USB disconnect, device number 23 [ 429.674808][ T2271] vhci_hcd vhci_hcd.3: stop threads [ 429.674838][ T2271] vhci_hcd vhci_hcd.3: release socket [ 429.702222][ T2271] vhci_hcd vhci_hcd.3: disconnect device [ 429.760433][ T91] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.847329][ T10] zl10353_read_register: readreg error (reg=127, ret==0) [ 429.847944][T10985] usb 3-1: dvb_usb_au6610: wlen=3, aborting [ 430.128571][ T10] usb 3-1: USB disconnect, device number 4 [ 430.560912][ T5833] Bluetooth: hci5: unexpected event for opcode 0x2011 [ 433.857999][ T5907] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 434.157352][T11016] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1972'. [ 434.327817][ T819] usb 6-1: new low-speed USB device number 19 using dummy_hcd [ 434.513084][ T819] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 434.513141][ T819] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 434.513160][ T819] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 434.513176][ T819] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 434.513192][ T819] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 434.518994][ T819] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 434.519059][ T819] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 434.519090][ T819] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 434.519118][ T819] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 434.519146][ T819] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 434.525061][ T819] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 434.525120][ T819] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 434.525147][ T819] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 434.525171][ T819] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 434.525197][ T819] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 434.546373][ T819] usb 6-1: string descriptor 0 read error: -22 [ 434.546519][ T819] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 434.546543][ T819] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.732769][ T10] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 434.868492][T10856] chnl_net:caif_netlink_parms(): no params data found [ 434.907711][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 434.910058][ T10] usb 7-1: unable to get BOS descriptor or descriptor too short [ 434.919862][ T10] usb 7-1: config 4 interface 0 has no altsetting 0 [ 434.957133][ T10] usb 7-1: string descriptor 0 read error: -22 [ 434.957257][ T10] usb 7-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 434.957285][ T10] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 435.042957][ T819] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 435.168418][ T819] usb 6-1: USB disconnect, device number 19 [ 435.203346][ T10] usb 7-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 435.307428][T11049] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1980'. [ 435.441365][ T10] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 435.441781][ T10] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 435.486838][ T10] usb 7-1: media controller created [ 435.603097][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 435.766538][ T10] zl10353_read_register: readreg error (reg=127, ret==0) [ 435.942131][T11057] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 435.942162][T11057] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 435.944913][T11057] vhci_hcd vhci_hcd.0: Device attached [ 436.073042][ T10] usb 7-1: USB disconnect, device number 10 [ 436.177662][ T36] usb 43-1: new low-speed USB device number 3 using vhci_hcd [ 436.267730][ T5899] usb 6-1: new low-speed USB device number 20 using dummy_hcd [ 436.458128][T11069] binder: 11067:11069 ioctl 4002f516 0 returned -22 [ 436.506668][ T5899] usb 6-1: config 0 has no interfaces? [ 436.506785][ T5899] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 436.506824][ T5899] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.042439][ T5899] usb 6-1: config 0 descriptor?? [ 437.714578][T11058] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 2 [ 437.723681][ T819] usb 6-1: USB disconnect, device number 20 [ 437.894557][ T13] vhci_hcd vhci_hcd.5: stop threads [ 437.894625][ T13] vhci_hcd vhci_hcd.5: release socket [ 438.011263][ T13] vhci_hcd vhci_hcd.5: disconnect device [ 438.703221][ T5899] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 438.722061][ T91] bridge_slave_1: left allmulticast mode [ 438.722093][ T91] bridge_slave_1: left promiscuous mode [ 438.722370][ T91] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.789996][ T91] bridge_slave_0: left allmulticast mode [ 438.790031][ T91] bridge_slave_0: left promiscuous mode [ 438.790329][ T91] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.867772][ T5899] usb 7-1: Using ep0 maxpacket: 16 [ 438.873336][ T5899] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 438.873400][ T5899] usb 7-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 438.873423][ T5899] usb 7-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 438.873458][ T5899] usb 7-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 438.873482][ T5899] usb 7-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 438.873506][ T5899] usb 7-1: config 1 interface 0 has no altsetting 0 [ 438.873543][ T5899] usb 7-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 438.873567][ T5899] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.038194][ T5899] ums-sddr09 7-1:1.0: USB Mass Storage device detected [ 439.455677][T11088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.468931][T11088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.333887][ T36] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 441.623285][ T6010] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 441.789013][ T6010] usb 4-1: Using ep0 maxpacket: 8 [ 441.793753][ T6010] usb 4-1: unable to get BOS descriptor or descriptor too short [ 441.827309][ T6010] usb 4-1: config 4 interface 0 has no altsetting 0 [ 441.843214][ T6010] usb 4-1: string descriptor 0 read error: -22 [ 441.843392][ T6010] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 441.843418][ T6010] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 441.939672][ T6010] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 441.985423][ T6010] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 441.986070][ T6010] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 441.986130][ T6010] usb 4-1: media controller created [ 442.051082][ T6010] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 442.101228][T11100] usb 4-1: dvb_usb_au6610: wlen=3, aborting [ 442.207089][ T6010] zl10353_read_register: readreg error (reg=127, ret==0) [ 442.517386][ T6010] usb 4-1: USB disconnect, device number 24 [ 442.590286][T11112] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1996'. [ 443.249491][ T91] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 443.558789][ T91] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 443.601577][ T91] bond0 (unregistering): Released all slaves [ 443.778178][T10856] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.778316][T10856] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.778576][T10856] bridge_slave_0: entered allmulticast mode [ 443.782579][T10856] bridge_slave_0: entered promiscuous mode [ 443.853125][T10856] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.853263][T10856] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.853519][T10856] bridge_slave_1: entered allmulticast mode [ 443.894187][T10856] bridge_slave_1: entered promiscuous mode [ 444.416667][ T5899] ums-sddr09 7-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 444.462877][T10856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 444.567807][T10856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 444.590330][ T5833] Bluetooth: hci5: unexpected event for opcode 0x2011 [ 444.624802][ T5899] usb 7-1: USB disconnect, device number 11 [ 444.834396][T11144] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 444.834438][T11144] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 444.834553][T11144] vhci_hcd vhci_hcd.0: Device attached [ 445.077696][ T818] usb 43-1: new low-speed USB device number 4 using vhci_hcd [ 445.117830][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 445.288211][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 445.297119][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 445.314431][ T10] usb 3-1: config 4 interface 0 has no altsetting 0 [ 445.323196][ T10] usb 3-1: string descriptor 0 read error: -22 [ 445.323311][ T10] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 445.323338][ T10] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 445.351485][ T5899] usb 6-1: new low-speed USB device number 21 using dummy_hcd [ 445.412923][ T10] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 445.437733][ T36] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 445.439133][ T10] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 445.439574][ T10] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 445.439626][ T10] usb 3-1: media controller created [ 445.491065][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 445.511807][ T5899] usb 6-1: config 0 has no interfaces? [ 445.511850][ T5899] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 445.511877][ T5899] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.550763][ T5899] usb 6-1: config 0 descriptor?? [ 445.579148][T11140] usb 3-1: dvb_usb_au6610: wlen=3, aborting [ 445.587707][ T36] usb 4-1: Using ep0 maxpacket: 16 [ 445.590528][ T36] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.590561][ T36] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 445.590587][ T36] usb 4-1: config 0 interface 0 has no altsetting 0 [ 445.590620][ T36] usb 4-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 445.590643][ T36] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.622705][ T36] usb 4-1: config 0 descriptor?? [ 445.673382][ T10] zl10353_read_register: readreg error (reg=127, ret==0) [ 445.756213][T11146] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 3 [ 445.756837][ T66] vhci_hcd vhci_hcd.5: stop threads [ 445.756864][ T66] vhci_hcd vhci_hcd.5: release socket [ 445.757121][ T66] vhci_hcd vhci_hcd.5: disconnect device [ 445.786472][ T5899] usb 6-1: USB disconnect, device number 21 [ 446.031233][T10856] team0: Port device team_slave_0 added [ 446.054662][T10856] team0: Port device team_slave_1 added [ 446.172199][T10856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 446.172217][T10856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 446.172242][T10856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 446.226358][T10856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 446.226377][T10856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 446.226408][T10856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 446.272784][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 446.298532][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.396882][ T1335] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 446.677770][ T10] usb 3-1: USB disconnect, device number 5 [ 446.999154][T10856] hsr_slave_0: entered promiscuous mode [ 447.015967][T10856] hsr_slave_1: entered promiscuous mode [ 447.023718][ T5899] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 447.055449][T10856] debugfs: 'hsr0' already exists in 'hsr' [ 447.055481][T10856] Cannot create hsr debugfs directory [ 447.167763][ T5899] usb 6-1: Using ep0 maxpacket: 16 [ 447.170266][ T5899] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 447.170328][ T5899] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 447.170352][ T5899] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 447.170377][ T5899] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 447.170443][ T5899] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 447.170469][ T5899] usb 6-1: config 1 interface 0 has no altsetting 0 [ 447.170506][ T5899] usb 6-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 447.170532][ T5899] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.303455][ T5899] ums-sddr09 6-1:1.0: USB Mass Storage device detected [ 447.970137][T11173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.985451][T11173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.002837][ T36] usbhid 4-1:0.0: can't add hid device: -71 [ 449.002986][ T36] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 449.178138][ T36] usb 4-1: USB disconnect, device number 25 [ 449.286806][ T91] hsr_slave_0: left promiscuous mode [ 449.322796][ T91] hsr_slave_1: left promiscuous mode [ 449.326253][ T91] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 449.326285][ T91] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 449.434438][ T91] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 449.434471][ T91] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 449.587071][ T5899] ums-sddr09 6-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 449.616963][ T5899] usb 6-1: USB disconnect, device number 22 [ 449.832738][ T91] veth1_macvtap: left promiscuous mode [ 449.832858][ T91] veth0_macvtap: left promiscuous mode [ 449.833155][ T91] veth1_vlan: left promiscuous mode [ 449.833351][ T91] veth0_vlan: left promiscuous mode [ 449.988713][T11220] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 449.988747][T11220] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 450.023458][T11220] vhci_hcd vhci_hcd.0: Device attached [ 450.045735][T11221] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 3 [ 450.046396][ T66] vhci_hcd vhci_hcd.3: stop threads [ 450.046423][ T66] vhci_hcd vhci_hcd.3: release socket [ 450.046464][ T66] vhci_hcd vhci_hcd.3: disconnect device [ 450.159767][ T5899] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 450.227774][ T818] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 450.314009][T11229] binder: 11226:11229 ioctl 400c620e 0 returned -14 [ 451.307593][ T5899] usb 7-1: Using ep0 maxpacket: 8 [ 451.310633][ T5899] usb 7-1: unable to get BOS descriptor or descriptor too short [ 451.312223][ T5899] usb 7-1: config 4 interface 0 has no altsetting 0 [ 451.449657][ T5899] usb 7-1: string descriptor 0 read error: -22 [ 451.449772][ T5899] usb 7-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 451.449801][ T5899] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 451.601613][ T5899] usb 7-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 452.194178][ T5899] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 452.194599][ T5899] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 452.194654][ T5899] usb 7-1: media controller created [ 452.300407][ T5899] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 452.442786][ T5833] Bluetooth: hci5: unexpected event for opcode 0x2011 [ 452.573285][ T5899] zl10353_read_register: readreg error (reg=127, ret==0) [ 452.817095][ T5899] usb 7-1: USB disconnect, device number 12 [ 453.516134][T11251] fuse: Bad value for 'fd' [ 454.078504][ T91] team0 (unregistering): Port device team_slave_1 removed [ 454.592043][ T5482] 8021q: adding VLAN 0 to HW filter on device eth5 [ 455.020633][T11271] binder: 11268:11271 ioctl 400c620e 0 returned -14 [ 456.028937][ T1864] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 456.029942][ T5834] Bluetooth: hci2: command 0xfc11 tx timeout [ 456.032532][ T5833] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 456.357672][ T1864] usb 4-1: Using ep0 maxpacket: 16 [ 456.360102][ T1864] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 456.360167][ T1864] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 456.360191][ T1864] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 456.360217][ T1864] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 456.360241][ T1864] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 456.360267][ T1864] usb 4-1: config 1 interface 0 has no altsetting 0 [ 456.360304][ T1864] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 456.360330][ T1864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.440704][ T5833] Bluetooth: hci5: unexpected event for opcode 0x2011 [ 456.458372][ T1864] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 456.949207][ T6010] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 457.100903][ T6010] usb 6-1: Using ep0 maxpacket: 8 [ 457.118289][ T6010] usb 6-1: unable to get BOS descriptor or descriptor too short [ 457.119856][ T6010] usb 6-1: config 4 interface 0 has no altsetting 0 [ 457.126420][ T6010] usb 6-1: string descriptor 0 read error: -22 [ 457.126532][ T6010] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 457.126560][ T6010] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 457.305980][T11293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.306605][T11293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.434218][ T6010] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 457.472919][ T6010] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 457.473314][ T6010] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 457.473384][ T6010] usb 6-1: media controller created [ 457.525092][ T6010] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 457.589901][T11287] usb 6-1: dvb_usb_au6610: wlen=3, aborting [ 457.665789][ T6010] zl10353_read_register: readreg error (reg=127, ret==0) [ 457.971450][T11292] syz.2.2045 (11292) used greatest stack depth: 18040 bytes left [ 458.105842][ T6010] usb 6-1: USB disconnect, device number 23 [ 458.293628][T11301] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2048'. [ 458.325584][ T1864] ums-sddr09 4-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 458.419156][ T1864] usb 4-1: USB disconnect, device number 26 [ 458.886303][T11320] binder: 11314:11320 ioctl 400c620e 0 returned -14 [ 460.559339][ T5482] 8021q: adding VLAN 0 to HW filter on device eth6 [ 461.587636][ T36] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 461.805923][ T36] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 461.805960][ T36] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.805982][ T36] usb 6-1: Product: syz [ 461.805998][ T36] usb 6-1: Manufacturer: syz [ 461.806158][ T36] usb 6-1: SerialNumber: syz [ 462.473001][T11350] 8021q: adding VLAN 0 to HW filter on device bond1 [ 462.671498][T11353] 8021q: adding VLAN 0 to HW filter on device bond1 [ 462.764481][T11356] bond1: (slave geneve2): making interface the new active one [ 462.838816][T11356] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 462.900165][ T36] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 462.900247][ T36] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 462.900785][ T36] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 462.900846][ T36] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 462.963372][ T36] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 462.993361][ T36] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 463.022083][ T36] usb 6-1: USB disconnect, device number 24 [ 463.377983][ T6010] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 463.488737][T11380] binder: 11377:11380 ioctl 400c620e 0 returned -14 [ 464.507592][ T6010] usb 7-1: Using ep0 maxpacket: 16 [ 464.513937][ T6010] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 464.514011][ T6010] usb 7-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 464.514035][ T6010] usb 7-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 464.514061][ T6010] usb 7-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 464.514084][ T6010] usb 7-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 464.514108][ T6010] usb 7-1: config 1 interface 0 has no altsetting 0 [ 464.514145][ T6010] usb 7-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 464.514171][ T6010] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.576838][ T6010] ums-sddr09 7-1:1.0: USB Mass Storage device detected [ 464.994341][T11395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.023029][T11395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.938057][ T6010] ums-sddr09 7-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 465.965074][ T6010] usb 7-1: USB disconnect, device number 13 [ 466.540582][T11409] 8021q: adding VLAN 0 to HW filter on device bond1 [ 466.561757][T11412] bond1: option mode: unable to set because the bond device is up [ 467.254766][T11438] binder: 11429:11438 ioctl 400c620e 0 returned -14 [ 469.869845][T10856] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 470.110515][T10856] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 470.150985][T10856] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 470.495831][T10856] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 470.556063][T10856] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 471.337794][T10856] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 471.340956][T11473] bond1: option mode: unable to set because the bond device has slaves [ 471.342733][T10856] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 471.426354][T11478] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2086'. [ 471.514656][T10856] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 471.727675][ T5899] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 471.909855][T11494] binder: 11483:11494 ioctl 400c620e 0 returned -14 [ 472.757663][ T5899] usb 4-1: device descriptor read/64, error -71 [ 473.156543][T10856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 473.197436][T10856] 8021q: adding VLAN 0 to HW filter on device team0 [ 473.215450][ T3519] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.215682][ T3519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 473.246071][ T3519] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.246338][ T3519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 473.619827][ T5899] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 474.527739][ T5899] usb 4-1: device descriptor read/64, error -71 [ 474.638324][ T5899] usb usb4-port1: attempt power cycle [ 474.838129][ T9] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 474.926264][T11522] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 475.002971][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 475.003011][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 475.003041][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 475.003089][ T9] usb 3-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 475.003114][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.097820][ T9] usb 3-1: config 0 descriptor?? [ 475.103040][T11515] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 475.398381][T11522] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 475.432308][T11522] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 475.432618][T11522] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 475.432892][T11522] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 475.434709][T11522] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 475.434957][T11522] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 475.492397][T11522] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 475.494164][T11522] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 475.495937][T11522] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 475.702159][ T9] gt683r_led 0003:1770:FF00.000E: ignoring exceeding usage max [ 475.723992][ T9] gt683r_led 0003:1770:FF00.000E: unknown main item tag 0x0 [ 475.735194][ T9] gt683r_led 0003:1770:FF00.000E: unknown main item tag 0x0 [ 475.735240][ T9] gt683r_led 0003:1770:FF00.000E: unknown main item tag 0x0 [ 475.735265][ T9] gt683r_led 0003:1770:FF00.000E: unknown main item tag 0x0 [ 475.735290][ T9] gt683r_led 0003:1770:FF00.000E: unknown main item tag 0x0 [ 475.735314][ T9] gt683r_led 0003:1770:FF00.000E: unknown main item tag 0x0 [ 475.735338][ T9] gt683r_led 0003:1770:FF00.000E: unknown main item tag 0x0 [ 475.735361][ T9] gt683r_led 0003:1770:FF00.000E: unknown main item tag 0x0 [ 475.913749][ T9] gt683r_led 0003:1770:FF00.000E: hidraw0: USB HID v0.04 Device [HID 1770:ff00] on usb-dummy_hcd.2-1/input0 [ 476.134612][ T9] usb 3-1: USB disconnect, device number 6 [ 476.188377][T11539] bond1: option mode: unable to set because the bond device is up [ 476.301664][ T819] gt683r_led 0003:1770:FF00.000E: failed to send set report request: -19 [ 476.301811][ T819] gt683r_led 0003:1770:FF00.000E: failed to send set report request: -19 [ 476.648296][T11541] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2100'. [ 477.090656][T11556] binder: 11544:11556 ioctl 400c620e 0 returned -14 [ 477.562417][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 477.597256][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 477.638177][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 477.641039][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 477.691340][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 478.183827][T11563] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2105'. [ 478.508254][ T6010] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 478.554212][T11565] binder: BINDER_SET_CONTEXT_MGR already set [ 478.554228][T11565] binder: 11564:11565 ioctl 4018620d 200000000040 returned -16 [ 478.657697][ T6010] usb 4-1: device descriptor read/64, error -71 [ 478.840316][T11565] syz.6.2106 (11565): drop_caches: 2 [ 478.955113][ T6010] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 479.107695][ T6010] usb 4-1: device descriptor read/64, error -71 [ 480.156293][ T5834] Bluetooth: hci2: command tx timeout [ 480.158659][ T6010] usb usb4-port1: attempt power cycle [ 480.567693][ T6010] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 480.588713][ T6010] usb 4-1: device descriptor read/8, error -71 [ 480.837879][ T6010] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 480.868451][ T6010] usb 4-1: device descriptor read/8, error -71 [ 480.980397][ T6010] usb usb4-port1: unable to enumerate USB device [ 482.167808][ T5833] Bluetooth: hci2: command tx timeout [ 483.388604][T11606] comedi comedi2: reset error (fatal) [ 484.172027][T11618] binder: 11617:11618 ioctl c0306201 0 returned -14 [ 484.248959][ T5833] Bluetooth: hci2: command tx timeout [ 484.267932][T11619] binder: BINDER_SET_CONTEXT_MGR already set [ 484.267948][T11619] binder: 11617:11619 ioctl 4018620d 200000000040 returned -16 [ 484.395543][T11619] syz.6.2117 (11619): drop_caches: 2 [ 484.877174][T11631] binder: 11623:11631 ioctl 400c620e 0 returned -14 [ 486.354027][T11639] Bluetooth: MGMT ver 1.23 [ 486.431461][ T5833] Bluetooth: hci2: command tx timeout [ 486.983478][T11644] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2122'. [ 487.247691][ T819] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 487.407781][ T819] usb 4-1: device descriptor read/64, error -71 [ 487.657870][ T819] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 487.807749][ T819] usb 4-1: device descriptor read/64, error -71 [ 487.928864][ T819] usb usb4-port1: attempt power cycle [ 489.228440][ T819] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 489.250079][ T819] usb 4-1: device descriptor read/8, error -71 [ 489.277756][ T5833] Bluetooth: hci6: command 0x0406 tx timeout [ 489.487709][ T819] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 489.508466][ T819] usb 4-1: device descriptor read/8, error -71 [ 489.534625][ T5833] Bluetooth: hci6: unexpected event for opcode 0x0000 [ 489.534757][ T5833] Bluetooth: hci6: ACL packet for unknown connection handle 200 [ 489.617963][ T819] usb usb4-port1: unable to enumerate USB device [ 490.919542][T11672] binder: 11670:11672 ioctl 400c620e 0 returned -14 [ 491.182878][T11679] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2131'. [ 492.079891][T11679] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 492.278315][T11553] chnl_net:caif_netlink_parms(): no params data found [ 492.309192][T11690] bond1: option mode: unable to set because the bond device is up [ 493.215792][T11706] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.2140'. [ 493.485802][T11715] binder: 11709:11715 ioctl 400c620e 0 returned -14 [ 493.494434][T11715] IPv6: NLM_F_CREATE should be specified when creating new route [ 493.526078][ T1864] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 494.405806][ T5833] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 494.406014][ T5833] Bluetooth: hci6: Injecting HCI hardware error event [ 494.423909][ T5834] Bluetooth: hci6: hardware error 0x00 [ 494.547602][ T1864] usb 7-1: device descriptor read/64, error -71 [ 494.787661][ T1864] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 494.927713][ T1864] usb 7-1: device descriptor read/64, error -71 [ 495.028139][T11553] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.028357][T11553] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.028550][T11553] bridge_slave_0: entered allmulticast mode [ 495.031843][T11553] bridge_slave_0: entered promiscuous mode [ 495.040471][ T1864] usb usb7-port1: attempt power cycle [ 495.407709][ T1864] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 495.428430][ T1864] usb 7-1: device descriptor read/8, error -71 [ 495.512253][T11727] bond1: option mode: unable to set because the bond device is up [ 495.512850][T11553] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.513024][T11553] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.513305][T11553] bridge_slave_1: entered allmulticast mode [ 495.550858][T11553] bridge_slave_1: entered promiscuous mode [ 495.667676][ T1864] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 495.695153][ T1864] usb 7-1: device descriptor read/8, error -71 [ 495.799773][ T1864] usb usb7-port1: unable to enumerate USB device [ 495.861374][T11553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 495.866431][T11553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 496.006303][T11745] Bluetooth: MGMT ver 1.23 [ 496.657002][T11553] team0: Port device team_slave_0 added [ 496.859672][ T5834] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 498.285211][T11553] team0: Port device team_slave_1 added [ 498.681155][T11784] netlink: 592 bytes leftover after parsing attributes in process `syz.2.2163'. [ 498.758080][ T43] bridge_slave_1: left allmulticast mode [ 498.758115][ T43] bridge_slave_1: left promiscuous mode [ 498.758399][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.862508][ T43] bridge_slave_0: left allmulticast mode [ 498.862545][ T43] bridge_slave_0: left promiscuous mode [ 498.862813][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.498487][T11789] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.2164'. [ 499.737673][ T36] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 499.919574][ T36] usb 7-1: device descriptor read/64, error -71 [ 500.197815][ T36] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 500.518363][ T36] usb 7-1: device descriptor read/64, error -71 [ 501.378526][ T36] usb usb7-port1: attempt power cycle [ 501.418691][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 502.508728][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 502.537641][ T36] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 502.561870][ T36] usb 7-1: device descriptor read/8, error -71 [ 502.644052][ T43] bond0 (unregistering): Released all slaves [ 502.900161][T11553] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 502.900180][T11553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 502.900206][T11553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 502.903179][T11553] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 502.903194][T11553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 502.903219][T11553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 504.115287][ T43] hsr_slave_0: left promiscuous mode [ 504.199236][ T43] hsr_slave_1: left promiscuous mode [ 504.200663][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 504.518764][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 505.983320][T11847] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.2181'. [ 506.239164][ T5907] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 506.367810][ T5907] usb 7-1: device descriptor read/64, error -71 [ 507.461958][ T5907] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 507.684461][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.684539][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.727054][ T1335] net_ratelimit: 823 callbacks suppressed [ 507.727078][ T1335] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 508.160488][ T5907] usb 7-1: device descriptor read/64, error -71 [ 508.277178][ T5907] usb usb7-port1: attempt power cycle [ 508.617708][ T5907] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 508.639863][ T5907] usb 7-1: device descriptor read/8, error -71 [ 508.897705][ T5907] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 508.918443][ T5907] usb 7-1: device descriptor read/8, error -71 [ 509.030127][ T5907] usb usb7-port1: unable to enumerate USB device [ 509.651415][ T43] team0 (unregistering): Port device team_slave_1 removed [ 509.761181][ T43] team0 (unregistering): Port device team_slave_0 removed [ 511.119696][T11553] hsr_slave_0: entered promiscuous mode [ 511.125988][T11553] hsr_slave_1: entered promiscuous mode [ 511.983669][T11861] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 511.983698][T11861] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 511.983711][T11861] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 512.040557][T11905] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2197'. [ 512.308221][ T818] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 513.071529][ T818] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 513.071561][ T818] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 513.071603][ T818] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 513.071630][ T818] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.111194][T11912] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 513.150183][ T818] usb 3-1: config 0 descriptor?? [ 513.201815][T11912] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 514.496292][T11944] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2197'. [ 514.577299][T11944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.587785][T11944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.044854][T11944] netlink: 'syz.2.2197': attribute type 30 has an invalid length. [ 515.316382][ T5834] Bluetooth: hci5: unexpected event for opcode 0x2011 [ 515.444027][T11960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 515.458443][T11960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.462930][T11960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 515.463531][T11960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.782820][T11943] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 515.810309][ T5482] 8021q: adding VLAN 0 to HW filter on device eth5 [ 517.227684][ T819] usb 3-1: USB disconnect, device number 7 [ 518.245902][T12003] netlink: 'syz.2.2223': attribute type 10 has an invalid length. [ 518.245966][T12003] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2223'. [ 519.482436][T12003] team0: entered promiscuous mode [ 519.482464][T12003] team_slave_0: entered promiscuous mode [ 519.482788][T12003] team_slave_1: entered promiscuous mode [ 519.482992][T12003] team0: entered allmulticast mode [ 519.483005][T12003] team_slave_0: entered allmulticast mode [ 519.483020][T12003] team_slave_1: entered allmulticast mode [ 519.483962][T12003] bridge0: port 3(team0) entered blocking state [ 519.484113][T12003] bridge0: port 3(team0) entered disabled state [ 519.490067][T12003] bridge0: port 3(team0) entered blocking state [ 519.490229][T12003] bridge0: port 3(team0) entered forwarding state [ 519.603963][T12007] warning: `syz.6.2224' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 520.014826][T12017] 8021q: adding VLAN 0 to HW filter on device bond1 [ 520.199723][T12021] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2228'. [ 520.477979][ T818] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 520.636446][ T818] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 520.636467][ T818] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 520.636491][ T818] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 520.636506][ T818] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.653591][ T818] usb 4-1: config 0 descriptor?? [ 522.103899][T12051] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2228'. [ 522.119649][T12051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 522.120341][T12051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 522.122118][T12051] netlink: 'syz.3.2228': attribute type 30 has an invalid length. [ 522.498308][T12056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 522.500833][T12056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 522.527130][T12056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 522.540406][T12056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 523.838331][ T5907] usb 4-1: USB disconnect, device number 38 [ 525.902884][T12087] binder: 12085:12087 ioctl 4018620d 0 returned -22 [ 526.507656][ T819] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 526.663671][T11553] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 526.707686][ T819] usb 6-1: Using ep0 maxpacket: 8 [ 526.711092][ T819] usb 6-1: unable to get BOS descriptor or descriptor too short [ 526.713891][ T819] usb 6-1: config 4 interface 0 has no altsetting 0 [ 526.753452][ T819] usb 6-1: string descriptor 0 read error: -22 [ 526.753563][ T819] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 526.753592][ T819] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 526.777235][T11553] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 526.789963][T11553] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 526.817879][ T819] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 526.826156][ T819] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 526.826501][ T819] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 526.826561][ T819] usb 6-1: media controller created [ 526.876348][ T819] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 527.223033][T11553] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 527.235006][T11553] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 527.322586][T11553] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 527.329305][T11553] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 527.403390][T11553] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 528.330490][ T819] zl10353_read_register: readreg error (reg=127, ret==0) [ 528.331374][T12092] usb 6-1: dvb_usb_au6610: wlen=3, aborting [ 528.470973][ T819] usb 6-1: USB disconnect, device number 25 [ 529.154688][T12138] netlink: 'syz.3.2250': attribute type 10 has an invalid length. [ 529.154738][T12138] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2250'. [ 531.187971][T12138] team0: entered promiscuous mode [ 531.187998][T12138] team_slave_0: entered promiscuous mode [ 531.188280][T12138] team_slave_1: entered promiscuous mode [ 531.188532][T12138] team0: entered allmulticast mode [ 531.188547][T12138] team_slave_0: entered allmulticast mode [ 531.188566][T12138] team_slave_1: entered allmulticast mode [ 531.189537][T12138] bridge0: port 3(team0) entered blocking state [ 531.189688][T12138] bridge0: port 3(team0) entered disabled state [ 531.195007][T12138] bridge0: port 3(team0) entered blocking state [ 531.195167][T12138] bridge0: port 3(team0) entered forwarding state [ 531.276226][T11553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 531.534246][T11553] 8021q: adding VLAN 0 to HW filter on device team0 [ 531.594509][ T3573] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.600319][ T3573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 531.650627][ T3573] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.653699][ T3573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 534.576271][T12162] syz.6.2254 (12162): drop_caches: 2 [ 534.657224][T12171] syz.3.2257 (12171) used greatest stack depth: 17096 bytes left [ 534.874871][T11553] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 535.745798][T11553] veth0_vlan: entered promiscuous mode [ 535.796642][T11553] veth1_vlan: entered promiscuous mode [ 536.055171][T11553] veth0_macvtap: entered promiscuous mode [ 536.104606][T11553] veth1_macvtap: entered promiscuous mode [ 536.178452][ T818] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 536.328098][ T818] usb 4-1: Using ep0 maxpacket: 8 [ 536.335291][ T818] usb 4-1: unable to get BOS descriptor or descriptor too short [ 536.340093][ T818] usb 4-1: config 4 interface 0 has no altsetting 0 [ 536.368034][ T818] usb 4-1: string descriptor 0 read error: -22 [ 536.368185][ T818] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 536.368212][ T818] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 536.538715][ T818] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 536.622825][ T818] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 536.623209][ T818] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 536.623263][ T818] usb 4-1: media controller created [ 536.624836][T12178] usb 4-1: dvb_usb_au6610: wlen=3, aborting [ 536.827889][ T818] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 537.211603][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 537.221213][ T818] zl10353_read_register: readreg error (reg=127, ret==0) [ 537.257128][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 537.267023][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 537.310513][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 537.328386][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 537.632424][T12211] 8021q: adding VLAN 0 to HW filter on device bond2 [ 537.663586][ T818] usb 4-1: USB disconnect, device number 39 [ 539.470308][ T5834] Bluetooth: hci4: command tx timeout [ 540.707608][ T6010] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 540.877871][ T6010] usb 3-1: Using ep0 maxpacket: 8 [ 540.882036][ T6010] usb 3-1: unable to get BOS descriptor or descriptor too short [ 540.884568][ T6010] usb 3-1: config 4 interface 0 has no altsetting 0 [ 540.928543][ T6010] usb 3-1: string descriptor 0 read error: -22 [ 540.928743][ T6010] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 540.928772][ T6010] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 542.198746][ T5834] Bluetooth: hci4: command tx timeout [ 542.299896][ T6010] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 542.394376][ T6010] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 542.465063][ T6010] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 542.465863][ T6010] usb 3-1: media controller created [ 542.479570][ T818] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 542.482763][T12245] usb 3-1: dvb_usb_au6610: wlen=3, aborting [ 542.495593][ T6010] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 542.549093][ T6010] zl10353_read_register: readreg error (reg=127, ret==0) [ 542.632130][ T818] usb 4-1: Using ep0 maxpacket: 16 [ 542.640212][ T818] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 542.640256][ T818] usb 4-1: config 0 interface 0 has no altsetting 0 [ 542.640368][ T818] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 542.640400][ T818] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.670101][ T818] usb 4-1: config 0 descriptor?? [ 542.689526][ T6010] usb 3-1: USB disconnect, device number 8 [ 542.840239][T12248] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 544.016024][ T818] usbhid 4-1:0.0: can't add hid device: -71 [ 544.016166][ T818] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 544.079825][ T818] usb 4-1: USB disconnect, device number 40 [ 544.240028][ T5834] Bluetooth: hci4: command tx timeout [ 544.537640][ T6010] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 544.702303][ T6010] usb 6-1: config 0 has an invalid interface number: 117 but max is 0 [ 544.702336][ T6010] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 544.702356][ T6010] usb 6-1: config 0 has no interface number 0 [ 544.702404][ T6010] usb 6-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 544.702427][ T6010] usb 6-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 544.712972][ T6010] usb 6-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 544.713005][ T6010] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.713090][ T6010] usb 6-1: Product: syz [ 544.713104][ T6010] usb 6-1: Manufacturer: syz [ 544.713118][ T6010] usb 6-1: SerialNumber: syz [ 544.735902][ T6010] usb 6-1: config 0 descriptor?? [ 544.749541][T12199] chnl_net:caif_netlink_parms(): no params data found [ 545.132069][ T5834] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 545.388869][ T6010] usb 6-1: USB disconnect, device number 26 [ 546.325734][ T5834] Bluetooth: hci4: command tx timeout [ 546.966447][T12295] 8021q: adding VLAN 0 to HW filter on device bond2 [ 547.115518][ T1864] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 547.287616][ T1864] usb 4-1: Using ep0 maxpacket: 8 [ 547.290769][ T1864] usb 4-1: unable to get BOS descriptor or descriptor too short [ 547.292413][ T1864] usb 4-1: config 4 interface 0 has no altsetting 0 [ 547.297185][ T1864] usb 4-1: string descriptor 0 read error: -22 [ 547.297303][ T1864] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 547.297330][ T1864] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 547.432535][ T1864] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 547.553345][ T1864] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 547.553768][ T1864] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 547.553823][ T1864] usb 4-1: media controller created [ 547.648045][T12311] netlink: 'syz.6.2293': attribute type 10 has an invalid length. [ 547.648096][T12311] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2293'. [ 548.788268][T12298] usb 4-1: dvb_usb_au6610: wlen=3, aborting [ 548.825236][T12311] team0: entered promiscuous mode [ 548.825263][T12311] team_slave_0: entered promiscuous mode [ 548.825545][T12311] team_slave_1: entered promiscuous mode [ 548.825786][T12311] team0: entered allmulticast mode [ 548.825800][T12311] team_slave_0: entered allmulticast mode [ 548.825819][T12311] team_slave_1: entered allmulticast mode [ 548.826835][T12311] bridge0: port 3(team0) entered blocking state [ 548.826978][T12311] bridge0: port 3(team0) entered disabled state [ 548.831752][T12311] bridge0: port 3(team0) entered blocking state [ 548.831909][T12311] bridge0: port 3(team0) entered forwarding state [ 549.398093][ T1864] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 549.485758][T12199] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.485941][T12199] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.486191][T12199] bridge_slave_0: entered allmulticast mode [ 549.534804][T12199] bridge_slave_0: entered promiscuous mode [ 549.552543][ T1864] zl10353_read_register: readreg error (reg=127, ret==0) [ 549.573998][T12199] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.574239][T12199] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.574513][T12199] bridge_slave_1: entered allmulticast mode [ 549.591331][T12199] bridge_slave_1: entered promiscuous mode [ 550.691585][ T1864] usb 4-1: USB disconnect, device number 41 [ 552.568079][ T9] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 552.781365][ T9] usb 6-1: config 0 has an invalid interface number: 117 but max is 0 [ 552.781400][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 552.781420][ T9] usb 6-1: config 0 has no interface number 0 [ 552.782604][ T9] usb 6-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 552.782635][ T9] usb 6-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 552.786731][ T9] usb 6-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 552.786786][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.786809][ T9] usb 6-1: Product: syz [ 552.786825][ T9] usb 6-1: Manufacturer: syz [ 552.786841][ T9] usb 6-1: SerialNumber: syz [ 552.882972][ T9] usb 6-1: config 0 descriptor?? [ 553.118323][T12339] bond1: option mode: unable to set because the bond device has slaves [ 553.132712][T12199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 553.171385][T12199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 553.242185][T12199] team0: Port device team_slave_0 added [ 553.247342][T12199] team0: Port device team_slave_1 added [ 553.518745][ T1864] usb 6-1: USB disconnect, device number 27 [ 553.550589][T12345] 8021q: adding VLAN 0 to HW filter on device bond2 [ 554.580960][T12199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 554.580980][T12199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 554.581009][T12199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 555.158225][T12199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 555.158293][T12199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 555.158327][T12199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 555.362292][T12356] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 555.362416][T12356] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 555.362481][T12356] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 555.838977][ T6085] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 555.999122][ T6085] usb 7-1: Using ep0 maxpacket: 8 [ 556.004644][ T6085] usb 7-1: unable to get BOS descriptor or descriptor too short [ 556.005896][ T6085] usb 7-1: config 4 interface 0 has no altsetting 0 [ 556.016252][ T6085] usb 7-1: string descriptor 0 read error: -22 [ 556.016331][ T6085] usb 7-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 556.016345][ T6085] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 556.449191][ T6085] usb 7-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 556.471008][ T6085] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 556.471413][ T6085] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 556.471481][ T6085] usb 7-1: media controller created [ 556.555891][ T6085] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 556.669548][T12358] usb 7-1: dvb_usb_au6610: wlen=3, aborting [ 556.692867][ C0] raw-gadget.0 gadget.6: ignoring, device is not running [ 556.693080][ T6085] zl10353_read_register: readreg error (reg=127, ret==0) [ 556.846798][ T6085] usb 7-1: USB disconnect, device number 26 [ 557.054482][T12374] bond1: option mode: unable to set because the bond device is up [ 557.226402][T12199] hsr_slave_0: entered promiscuous mode [ 557.228996][T12199] hsr_slave_1: entered promiscuous mode [ 557.230654][T12199] debugfs: 'hsr0' already exists in 'hsr' [ 557.230679][T12199] Cannot create hsr debugfs directory [ 557.477774][T12387] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 558.390170][T12395] netlink: 'syz.5.2317': attribute type 10 has an invalid length. [ 558.390222][T12395] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2317'. [ 558.456913][T12395] team0: entered promiscuous mode [ 558.456939][T12395] team_slave_0: entered promiscuous mode [ 558.457246][T12395] team_slave_1: entered promiscuous mode [ 558.459341][T12395] 8021q: adding VLAN 0 to HW filter on device team0 [ 558.460433][T12395] bridge0: port 3(team0) entered blocking state [ 558.460594][T12395] bridge0: port 3(team0) entered disabled state [ 561.459870][ T66] bridge_slave_1: left allmulticast mode [ 561.459900][ T66] bridge_slave_1: left promiscuous mode [ 561.460181][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.570017][ T66] bridge_slave_0: left allmulticast mode [ 561.570040][ T66] bridge_slave_0: left promiscuous mode [ 561.570240][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.757711][ T36] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 561.907717][ T36] usb 6-1: Using ep0 maxpacket: 8 [ 561.978449][ T36] usb 6-1: unable to get BOS descriptor or descriptor too short [ 561.983327][ T36] usb 6-1: config 4 interface 0 has no altsetting 0 [ 562.003847][ T36] usb 6-1: string descriptor 0 read error: -22 [ 562.003924][ T36] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 562.003939][ T36] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 562.013892][T12424] binder: 12423:12424 ioctl c0306201 0 returned -14 [ 562.114914][ T36] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 562.296674][ T36] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 562.297042][ T36] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 562.297092][ T36] usb 6-1: media controller created [ 562.313907][ T36] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 562.341842][T12421] usb 6-1: dvb_usb_au6610: wlen=3, aborting [ 563.169263][ T36] zl10353_read_register: readreg error (reg=127, ret==0) [ 563.228203][ T36] usb 6-1: USB disconnect, device number 28 [ 563.746279][T12433] netlink: 'syz.6.2328': attribute type 10 has an invalid length. [ 563.746305][T12433] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2328'. [ 565.233412][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 566.098636][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 566.120296][ T66] bond0 (unregistering): Released all slaves [ 566.411687][T12415] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 566.810158][ T66] hsr_slave_0: left promiscuous mode [ 566.847773][ T66] hsr_slave_1: left promiscuous mode [ 566.870090][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 566.909810][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 567.032459][T12463] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 567.075505][ T66] veth1_macvtap: left promiscuous mode [ 567.075635][ T66] veth0_macvtap: left promiscuous mode [ 567.090258][ T66] veth1_vlan: left promiscuous mode [ 567.090486][ T66] veth0_vlan: left promiscuous mode [ 567.317927][ T6010] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 567.481351][ T6010] usb 3-1: config 0 has an invalid interface number: 148 but max is 0 [ 567.481386][ T6010] usb 3-1: config 0 has no interface number 0 [ 567.481436][ T6010] usb 3-1: config 0 interface 148 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10 [ 567.489340][ T6010] usb 3-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.ec [ 567.489372][ T6010] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.489392][ T6010] usb 3-1: Product: syz [ 567.489406][ T6010] usb 3-1: Manufacturer: syz [ 567.489421][ T6010] usb 3-1: SerialNumber: syz [ 567.541585][ T6010] usb 3-1: config 0 descriptor?? [ 567.590444][ T6010] kobil_sct 3-1:0.148: KOBIL USB smart card terminal converter detected [ 567.609581][ T9] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 567.712991][ T6010] usb 3-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 567.767761][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 567.841168][ T9] usb 7-1: unable to get BOS descriptor or descriptor too short [ 567.871775][ T9] usb 7-1: config 4 interface 0 has no altsetting 0 [ 568.317087][ T9] usb 7-1: string descriptor 0 read error: -22 [ 568.317200][ T9] usb 7-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 568.317228][ T9] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 568.733226][ T9] usb 7-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 568.780474][ T6010] usb 3-1: USB disconnect, device number 9 [ 568.820896][ T9] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 568.821296][ T9] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 568.821353][ T9] usb 7-1: media controller created [ 568.875498][T12465] usb 7-1: dvb_usb_au6610: wlen=3, aborting [ 568.933988][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 569.033916][ T6010] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 569.069434][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 569.140231][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 569.140317][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.144712][ T1335] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 569.277045][ T6010] kobil_sct 3-1:0.148: device disconnected [ 569.462155][ T9] usb 7-1: USB disconnect, device number 27 [ 570.279444][ T66] team0 (unregistering): Port device team_slave_1 removed [ 570.328814][ T66] team0 (unregistering): Port device team_slave_0 removed [ 572.887752][ T9] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 573.067656][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 573.070249][ T9] usb 7-1: unable to get BOS descriptor or descriptor too short [ 573.071880][ T9] usb 7-1: config 4 interface 0 has no altsetting 0 [ 573.078951][ T9] usb 7-1: string descriptor 0 read error: -22 [ 573.079061][ T9] usb 7-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 573.079085][ T9] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 573.186837][ T9] usb 7-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 573.230854][ T9] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 573.231109][ T9] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 573.231140][ T9] usb 7-1: media controller created [ 573.330809][T12519] usb 7-1: dvb_usb_au6610: wlen=3, aborting [ 573.334801][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 573.621304][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 574.202102][ T9] usb 7-1: USB disconnect, device number 28 [ 574.594056][ T5482] 8021q: adding VLAN 0 to HW filter on device eth5 [ 575.426298][T12559] syzkaller1: entered promiscuous mode [ 575.426328][T12559] syzkaller1: entered allmulticast mode [ 577.787727][ T36] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 577.939901][ T36] usb 7-1: Using ep0 maxpacket: 8 [ 577.962822][ T36] usb 7-1: unable to get BOS descriptor or descriptor too short [ 577.964214][ T36] usb 7-1: config 4 interface 0 has no altsetting 0 [ 577.981802][ T36] usb 7-1: string descriptor 0 read error: -22 [ 577.981901][ T36] usb 7-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 577.981926][ T36] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 578.232043][ T36] usb 7-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 578.270960][ T36] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 578.271364][ T36] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 578.271420][ T36] usb 7-1: media controller created [ 578.333004][ T36] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 578.537617][ T36] zl10353_read_register: readreg error (reg=127, ret==0) [ 578.895103][ T36] usb 7-1: USB disconnect, device number 29 [ 583.716553][T12199] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 583.802195][T12199] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 583.837698][ T6085] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 584.131660][ T6085] usb 3-1: Using ep0 maxpacket: 8 [ 584.147932][ T6085] usb 3-1: unable to get BOS descriptor or descriptor too short [ 584.149412][ T6085] usb 3-1: config 4 interface 0 has no altsetting 0 [ 584.156091][ T6085] usb 3-1: string descriptor 0 read error: -22 [ 584.156219][ T6085] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 584.156247][ T6085] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 584.221126][T12199] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 584.261315][ T6085] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 584.277155][ T6085] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 584.277812][ T6085] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 584.277921][ T6085] usb 3-1: media controller created [ 584.323736][T12199] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 584.335473][ T6085] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 584.390850][T12199] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 584.590554][T12199] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 584.598050][T12199] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 584.728173][T12199] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 584.958334][T12664] syz.6.2392 (12664): drop_caches: 2 [ 585.800637][ T6085] zl10353_read_register: readreg error (reg=127, ret==0) [ 585.802216][T12649] usb 3-1: dvb_usb_au6610: wlen=3, aborting [ 586.055816][ T6085] usb 3-1: USB disconnect, device number 10 [ 586.326457][T12689] futex_wake_op: syz.6.2396 tries to shift op by 144; fix this program [ 587.374173][T12199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 587.464316][T12199] 8021q: adding VLAN 0 to HW filter on device team0 [ 587.528678][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.532054][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 587.828081][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.828237][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 587.917866][T12705] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 589.103378][T12732] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 589.103412][T12732] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 589.106897][T12732] vhci_hcd vhci_hcd.0: Device attached [ 589.222144][T12736] netlink: 'syz.6.2411': attribute type 2 has an invalid length. [ 589.386193][T12199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 589.507601][ T6010] usb 3-1: new low-speed USB device number 11 using dummy_hcd [ 589.588618][T12327] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 590.384699][ T6010] usb 3-1: config 0 has no interfaces? [ 590.384746][ T6010] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 590.384775][ T6010] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.450799][ T6010] usb 3-1: config 0 descriptor?? [ 590.653800][T12734] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 1 [ 590.657966][ T91] vhci_hcd vhci_hcd.2: stop threads [ 590.657992][ T91] vhci_hcd vhci_hcd.2: release socket [ 590.689569][ T91] vhci_hcd vhci_hcd.2: disconnect device [ 590.711646][T12199] veth0_vlan: entered promiscuous mode [ 590.728893][ T6010] usb 3-1: USB disconnect, device number 11 [ 590.797029][T12199] veth1_vlan: entered promiscuous mode [ 590.836955][ C1] [ 590.836965][ C1] ====================================================== [ 590.836969][ C1] WARNING: possible circular locking dependency detected [ 590.836975][ C1] syzkaller #0 Not tainted [ 590.836982][ C1] ------------------------------------------------------ [ 590.836986][ C1] syz.6.2411/12731 is trying to acquire lock: [ 590.836994][ C1] ffff888062ebae60 (slock-AF_PHONET/1){+.+.}-{3:3}, at: __sk_receive_skb+0x1bf/0x9e0 [ 590.837036][ C1] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 590.837036][ C1] but task is already holding lock: [ 590.837039][ C1] ffff888061e602a0 (slock-AF_PHONET){+...}-{3:3}, at: __sk_receive_skb+0x1f1/0x9e0 [ 590.837070][ C1] [ 590.837070][ C1] which lock already depends on the new lock. [ 590.837070][ C1] [ 590.837074][ C1] [ 590.837074][ C1] the existing dependency chain (in reverse order) is: [ 590.837078][ C1] [ 590.837078][ C1] -> #1 (slock-AF_PHONET){+...}-{3:3}: [ 590.837094][ C1] rt_spin_lock+0x83/0x400 [ 590.837110][ C1] __sk_receive_skb+0x1f1/0x9e0 [ 590.837124][ C1] phonet_rcv+0x781/0xc40 [ 590.837139][ C1] process_backlog+0x5e1/0xc60 [ 590.837153][ C1] __napi_poll+0xab/0x550 [ 590.837164][ C1] net_rx_action+0x696/0xe00 [ 590.837178][ C1] handle_softirqs+0x1de/0x6d0 [ 590.837194][ C1] __local_bh_enable_ip+0x170/0x2b0 [ 590.837210][ C1] netif_rx+0xb9/0xf0 [ 590.837221][ C1] pn_send+0x62a/0x8e0 [ 590.837234][ C1] pn_skb_send+0x218/0x510 [ 590.837248][ C1] pipe_snd_status+0x1f1/0x320 [ 590.837264][ C1] pipe_do_rcv+0xf15/0x16a0 [ 590.837273][ C1] __sk_receive_skb+0x962/0x9e0 [ 590.837286][ C1] pep_do_rcv+0x685/0xaa0 [ 590.837295][ C1] __release_sock+0x2a9/0x3d0 [ 590.837306][ C1] release_sock+0x1be/0x290 [ 590.837320][ C1] pep_sock_accept+0xd47/0x11e0 [ 590.837336][ C1] pn_socket_accept+0xc1/0x310 [ 590.837349][ C1] do_accept+0x52b/0x760 [ 590.837363][ C1] __sys_accept4+0x139/0x230 [ 590.837377][ C1] __x64_sys_accept4+0x9a/0xb0 [ 590.837391][ C1] do_syscall_64+0x15f/0xf80 [ 590.837403][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.837413][ C1] [ 590.837413][ C1] -> #0 (slock-AF_PHONET/1){+.+.}-{3:3}: [ 590.837446][ C1] __lock_acquire+0x15a5/0x2cf0 [ 590.837467][ C1] lock_acquire+0x106/0x350 [ 590.837486][ C1] rt_spin_lock_nested+0x81/0x3f0 [ 590.837513][ C1] __sk_receive_skb+0x1bf/0x9e0 [ 590.837540][ C1] pep_do_rcv+0x685/0xaa0 [ 590.837557][ C1] __sk_receive_skb+0x962/0x9e0 [ 590.837583][ C1] phonet_rcv+0x781/0xc40 [ 590.837611][ C1] process_backlog+0x5e1/0xc60 [ 590.837636][ C1] __napi_poll+0xab/0x550 [ 590.837657][ C1] net_rx_action+0x696/0xe00 [ 590.837683][ C1] handle_softirqs+0x1de/0x6d0 [ 590.837711][ C1] __local_bh_enable_ip+0x170/0x2b0 [ 590.837741][ C1] netif_rx+0xb9/0xf0 [ 590.837760][ C1] pn_send+0x62a/0x8e0 [ 590.837814][ C1] pn_skb_send+0x218/0x510 [ 590.837843][ C1] pep_sock_close+0x2c1/0x5b0 [ 590.837873][ C1] pn_socket_release+0x9b/0xc0 [ 590.837897][ C1] sock_close+0xc3/0x240 [ 590.837918][ C1] __fput+0x461/0xa70 [ 590.837944][ C1] task_work_run+0x1d9/0x270 [ 590.837967][ C1] exit_to_user_mode_loop+0xed/0x480 [ 590.837989][ C1] do_syscall_64+0x33e/0xf80 [ 590.838012][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.838032][ C1] [ 590.838032][ C1] other info that might help us debug this: [ 590.838032][ C1] [ 590.838039][ C1] Possible unsafe locking scenario: [ 590.838039][ C1] [ 590.838046][ C1] CPU0 CPU1 [ 590.838053][ C1] ---- ---- [ 590.838058][ C1] lock(slock-AF_PHONET); [ 590.838074][ C1] lock(slock-AF_PHONET/1); [ 590.838095][ C1] lock(slock-AF_PHONET); [ 590.838111][ C1] lock(slock-AF_PHONET/1); [ 590.838130][ C1] [ 590.838130][ C1] *** DEADLOCK *** [ 590.838130][ C1] [ 590.838136][ C1] 7 locks held by syz.6.2411/12731: [ 590.838149][ C1] #0: ffff88802290e138 (&sb->s_type->i_mutex_key#12){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 590.838206][ C1] #1: ffff888062ebc098 (sk_lock-AF_PHONET){+.+.}-{0:0}, at: pep_sock_close+0x86/0x5b0 [ 590.838266][ C1] #2: ffffffff8dfc80c0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 590.838325][ C1] #3: ffffffff8dfc80c0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x271/0xc60 [ 590.838381][ C1] #4: ffff888061e602a0 (slock-AF_PHONET){+...}-{3:3}, at: __sk_receive_skb+0x1f1/0x9e0 [ 590.838437][ C1] #5: ffffffff8dfc80c0 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 590.838496][ C1] #6: ffff888061e60358 (sk_lock-AF_PHONET){+.+.}-{0:0}, at: phonet_rcv+0x781/0xc40 [ 590.838553][ C1] [ 590.838553][ C1] stack backtrace: [ 590.838566][ C1] CPU: 1 UID: 0 PID: 12731 Comm: syz.6.2411 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 590.838591][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 590.838602][ C1] Call Trace: [ 590.838610][ C1] [ 590.838620][ C1] dump_stack_lvl+0xe8/0x150 [ 590.838654][ C1] print_circular_bug+0x2e1/0x300 [ 590.838686][ C1] check_noncircular+0x12e/0x150 [ 590.838719][ C1] __lock_acquire+0x15a5/0x2cf0 [ 590.838745][ C1] ? try_to_take_rt_mutex+0x840/0xb00 [ 590.838774][ C1] ? __sk_receive_skb+0x1bf/0x9e0 [ 590.838801][ C1] lock_acquire+0x106/0x350 [ 590.838833][ C1] ? __sk_receive_skb+0x1bf/0x9e0 [ 590.838858][ C1] ? sk_filter_trim_cap+0x8f1/0xce0 [ 590.838882][ C1] rt_spin_lock_nested+0x81/0x3f0 [ 590.838911][ C1] ? __sk_receive_skb+0x1bf/0x9e0 [ 590.838940][ C1] ? __pfx_sk_filter_trim_cap+0x10/0x10 [ 590.838960][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 590.838981][ C1] ? __pfx_rt_spin_lock_nested+0x10/0x10 [ 590.839011][ C1] ? rt_spin_lock+0x1e0/0x400 [ 590.839043][ C1] __sk_receive_skb+0x1bf/0x9e0 [ 590.839074][ C1] pep_do_rcv+0x685/0xaa0 [ 590.839094][ C1] ? __pfx_pep_do_rcv+0x10/0x10 [ 590.839116][ C1] ? __pfx_pep_do_rcv+0x10/0x10 [ 590.839135][ C1] ? phonet_rcv+0x781/0xc40 [ 590.839161][ C1] __sk_receive_skb+0x962/0x9e0 [ 590.839188][ C1] phonet_rcv+0x781/0xc40 [ 590.839213][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 590.839238][ C1] ? __pfx_phonet_rcv+0x10/0x10 [ 590.839266][ C1] ? process_backlog+0x271/0xc60 [ 590.839292][ C1] ? process_backlog+0x271/0xc60 [ 590.839316][ C1] ? __pfx_phonet_rcv+0x10/0x10 [ 590.839343][ C1] process_backlog+0x5e1/0xc60 [ 590.839378][ C1] __napi_poll+0xab/0x550 [ 590.839400][ C1] net_rx_action+0x696/0xe00 [ 590.839432][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 590.839457][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 590.839487][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 590.839515][ C1] ? enqueue_to_backlog+0x340/0xcb0 [ 590.839542][ C1] handle_softirqs+0x1de/0x6d0 [ 590.839574][ C1] __local_bh_enable_ip+0x170/0x2b0 [ 590.839604][ C1] netif_rx+0xb9/0xf0 [ 590.839624][ C1] pn_send+0x62a/0x8e0 [ 590.839650][ C1] pn_skb_send+0x218/0x510 [ 590.839677][ C1] pep_sock_close+0x2c1/0x5b0 [ 590.839709][ C1] pn_socket_release+0x9b/0xc0 [ 590.839733][ C1] sock_close+0xc3/0x240 [ 590.839756][ C1] ? __pfx_sock_close+0x10/0x10 [ 590.839780][ C1] __fput+0x461/0xa70 [ 590.839817][ C1] task_work_run+0x1d9/0x270 [ 590.839844][ C1] ? __pfx_task_work_run+0x10/0x10 [ 590.839870][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.839893][ C1] exit_to_user_mode_loop+0xed/0x480 [ 590.839915][ C1] ? rcu_is_watching+0x15/0xb0 [ 590.839943][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.839964][ C1] do_syscall_64+0x33e/0xf80 [ 590.839988][ C1] ? trace_irq_disable+0x3b/0x140 [ 590.840009][ C1] ? clear_bhb_loop+0x40/0x90 [ 590.840033][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.840054][ C1] RIP: 0033:0x7f0264a7c819 [ 590.840073][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 590.840091][ C1] RSP: 002b:00007ffe25fe0e38 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 590.840115][ C1] RAX: 0000000000000000 RBX: 00007f0264cf7da0 RCX: 00007f0264a7c819 [ 590.840130][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 590.840144][ C1] RBP: 00007f0264cf7da0 R08: 0000000000000006 R09: 0000000000000000 [ 590.840158][ C1] R10: 00007f0264cf7cb0 R11: 0000000000000246 R12: 000000000008fe74 [ 590.840173][ C1] R13: 00007f0264cf5fac R14: 000000000008fe42 R15: 00007f0264cf5fa0 [ 590.840196][ C1] [ 590.926479][T12199] veth0_macvtap: entered promiscuous mode [ 590.941442][T12199] veth1_macvtap: entered promiscuous mode [ 590.991832][T12199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 591.004482][T12199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 591.015483][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.015620][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.015653][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.015683][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.520016][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.729347][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 593.929226][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.169435][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.707700][T12327] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 594.722864][ T12] bridge0: port 3(team0) entered disabled state [ 594.778290][ T12] bridge_slave_1: left allmulticast mode [ 594.778310][ T12] bridge_slave_1: left promiscuous mode [ 594.778436][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.839940][ T12] bridge_slave_0: left allmulticast mode [ 594.839962][ T12] bridge_slave_0: left promiscuous mode [ 594.840068][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.898820][ T12] dvmrp8: left allmulticast mode [ 595.568461][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 595.628324][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 595.648958][ T12] bond0 (unregistering): Released all slaves [ 595.652130][ T12] bond1 (unregistering): Released all slaves [ 595.689348][ T5482] 8021q: adding VLAN 0 to HW filter on device eth5 [ 596.160736][ T5482] 8021q: adding VLAN 0 to HW filter on device eth6 [ 596.569083][ T5482] 8021q: adding VLAN 0 to HW filter on device eth7 [ 596.971894][ T5482] 8021q: adding VLAN 0 to HW filter on device eth8 [ 597.147681][ T12] hsr_slave_0: left promiscuous mode [ 597.167713][ T12] hsr_slave_1: left promiscuous mode [ 597.168432][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 597.168453][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 597.247964][ T12] veth1_macvtap: left promiscuous mode [ 597.248015][ T12] veth0_macvtap: left promiscuous mode [ 597.248106][ T12] veth1_vlan: left promiscuous mode [ 597.248163][ T12] veth0_vlan: left promiscuous mode [ 597.694241][ T12] team_slave_1 (unregistering): left promiscuous mode [ 597.694263][ T12] team_slave_1 (unregistering): left allmulticast mode [ 597.718114][ T12] team0 (unregistering): Port device team_slave_1 removed [ 597.723892][ T12] team_slave_0 (unregistering): left promiscuous mode [ 597.723916][ T12] team_slave_0 (unregistering): left allmulticast mode [ 597.758633][ T12] team0 (unregistering): Port device team_slave_0 removed [ 599.058972][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.259430][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.470831][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.659590][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.348742][ T5482] 8021q: adding VLAN 0 to HW filter on device eth9 [ 600.671556][ T5482] 8021q: adding VLAN 0 to HW filter on device eth10