last executing test programs: 12.254552829s ago: executing program 2 (id=637): pipe2$watch_queue(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x1f) bpf$PROG_LOAD(0x5, 0x0, 0x1298b7cc) r1 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) epoll_create1(0x80000) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b595000000000000000002000000", @ANYRES32=r1, @ANYBLOB="140001000040000000000000000000000000000014000200fe"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0x8}) keyctl$revoke(0x3, 0x0) r5 = syz_usb_connect(0x5, 0x35, 0x0, 0x0) syz_usb_disconnect(r5) r6 = syz_usb_connect(0x3, 0x1b, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x3c, 0x67, 0xa8, 0x10, 0x12d1, 0x4d6d, 0x46a6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x5}}]}}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) syz_usb_control_io$printer(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) 9.055134187s ago: executing program 2 (id=655): r0 = getpgrp(0x0) r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000440)="a05a4eea", 0x4}], 0x2, 0x4, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="020e000010000000000000000004830008001200000001000000ff000000400000001ea0abff7f00000000000000d41f9ab9000100700000ebdf000008000000c4fc0000100000000000e2ffff1c004f030006000020080002000080f5008e24ce6e4ae300a5000003000500001e001e02"], 0x80}}, 0x4814) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x229ffa1c4ce5369, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket(0x10, 0x803, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0xe00, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e00090027097000000000220400000008000c"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x4, 0xa}, {}, {0xfff2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) 8.49572503s ago: executing program 2 (id=659): syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) unshare(0x2c020400) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000000)={0x7c, 0x3000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) 5.773938606s ago: executing program 2 (id=669): socket$kcm(0x10, 0x2, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = syz_io_uring_setup(0x8d2, &(0x7f00000001c0)={0x0, 0x54a5, 0x400, 0x3, 0x37a}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47b9, 0x95e5, 0x60, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) 5.304843905s ago: executing program 2 (id=672): getdents64(0xffffffffffffffff, &(0x7f0000000000)=""/146, 0x92) open(0x0, 0x1, 0x104) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xf32}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r3, &(0x7f0000000780)}, 0x20) mount$9p_fd(0x0, &(0x7f0000000540)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)) 4.938282848s ago: executing program 0 (id=674): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r0}, 0x38) 4.691275191s ago: executing program 0 (id=676): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x94, &(0x7f0000000040)={0xa, 0x4e24, 0x3, @private1, 0x8}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4e, 0x0, 0x0) 4.540718399s ago: executing program 0 (id=677): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, 0x0, 0x4008000) 4.37926988s ago: executing program 0 (id=679): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_PMKSA(r1, 0x0, 0x4000) 3.981718179s ago: executing program 0 (id=680): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) 3.858273387s ago: executing program 0 (id=681): r0 = inotify_init() r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@ipv6_deladdrlabel={0x38, 0x48, 0x1, 0x0, 0x0, {0xa, 0x0, 0x80}, [@IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'pimreg\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'macsec0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = io_uring_setup(0x4126, &(0x7f00000007c0)={0x0, 0x0, 0x800, 0x0, 0x1000000}) io_uring_register$IORING_REGISTER_RING_FDS(r9, 0x13, &(0x7f0000001bc0), 0x2) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r8) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r8, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0008000300", @ANYRES32=r12, @ANYBLOB='\b\x00]\x00\x00\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x88c0) sendmsg$NL80211_CMD_VENDOR(r5, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="8f4f0100", @ANYRES16=r10, @ANYBLOB="000426bd7000fedbdf25670000000c00990007000000040000004600c5002002608c66bcddbbaa9923a9a14bbd6e9f5fdb31cda7514a51ec3ec490308a2dc647a3be92ba4bfca5cb7ba18a0068188146d8ae41316a74e0803b19899a987c53a800000800c400020000000800c300ff0300000800c40000000000"], 0x80}, 0x1, 0x0, 0x0, 0x4081}, 0x24008804) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x26c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff3, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x23c, 0x2, [@TCA_CGROUP_EMATCHES={0x4}, @TCA_CGROUP_EMATCHES={0x234, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x54b0}}, @TCA_EMATCH_TREE_LIST={0xa8, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x0, 0x7, 0x1}, {{0x81, 0x1, 0x1, 0x1}, {0x1}}}}, @TCF_EM_IPT={0x28, 0x3, 0x0, 0x0, {{0x9, 0x9, 0x3}, [@TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_META={0x18, 0x3, 0x0, 0x0, {{0xff80, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x400, 0x4}, {0x6, 0x4}}}]}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x5, 0x8, 0xb}, {0x1, 0x5, 0x3}}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x0, 0x2, 0x72}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x30, 0x2, 0x0, 0x0, {{0xfff, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x1}, {0x236, 0xbc, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x5, 0x2}, {0x2, 0x6, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0xff, 0x3, 0x2}, {0x89, 0x5, 0x774c2440e0e01a1b}}}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4f}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x401}}, @TCA_EMATCH_TREE_LIST={0xc4, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x2000, 0x8, 0x4}, {0x2, 0x3, 0x3}}}, @TCF_EM_IPT={0x60, 0x2, 0x0, 0x0, {{0xd781, 0x9, 0x5}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_DATA={0x42, 0x5, "ba043935e06c1fab3f0badd0e2d3772c00e9b44508b1e847bdc3228f686c743b6aca6759920cb5402f2dd06dbd467b035a9192766edf8496c0dad67a1b66"}]}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xffff, 0x3, 0x9}, {0x6, 0x2, 0x1ff, 0xfffffffd}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x0, 0x3, 0x3ff}, {0x3, 0x10, 0x4, 0xf896}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x2, 0x1, 0x2}, {0x3, 0x0, 0xf, 0x1, 0x9, 0x0, 0x2}}}]}, @TCA_EMATCH_TREE_LIST={0xa4, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x8, 0x1, 0x7}, {0x97e, 0x9, 0xfff, 0x5, 0x5, 0x2, 0x1}}}, @TCF_EM_META={0xc, 0x3, 0x0, 0x0, {{0x8, 0x4, 0x4}}}, @TCF_EM_CONTAINER={0x7c, 0x1, 0x0, 0x0, {{0x9, 0x0, 0x3}, "4e5b801d9c661d3f0f434583f586bf4f3d509e582142c967d7687c945ef84576c6e876740473249469d3ac9f9c42d4f2250148e1b8112f4ffa4634d98504c069741c00e2e7cf01a34d32556f8de6e564c922d4b60f6fbf0d5560f2d8d18d22eefea30e83a06042d532c33f7ecce7f694"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x26c}}, 0x20000084) syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) syz_usb_disconnect(0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) 3.84021739s ago: executing program 4 (id=682): socket$kcm(0x10, 0x2, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = syz_io_uring_setup(0x8d2, &(0x7f00000001c0)={0x0, 0x54a5, 0x400, 0x3, 0x37a}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47b9, 0x95e5, 0x60, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) 3.568562408s ago: executing program 4 (id=684): syz_open_procfs(0x0, &(0x7f0000002280)='net/ip_mr_cache\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000100)='environ\x00') fcntl$setstatus(r0, 0x4, 0x40800) r1 = syz_io_uring_setup(0xb99, &(0x7f0000000640)={0x0, 0xe826, 0x800, 0x1, 0x3c3}, &(0x7f0000000dc0)=0x0, &(0x7f0000000000)=0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 3.275018089s ago: executing program 3 (id=686): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r0}, 0x38) 3.224009773s ago: executing program 1 (id=687): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x94, &(0x7f0000000040)={0xa, 0x4e24, 0x3, @private1, 0x8}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4e, 0x0, 0x0) 3.100683655s ago: executing program 1 (id=688): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0xb1c07, 0x0, 0x0, 0x8, 0x0, 0xfffffffd}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) r1 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0xf6b1, 0x10000, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x16, 0x1}) io_uring_enter(r1, 0xd44, 0x44c1, 0x7, 0x0, 0x0) 3.098000974s ago: executing program 3 (id=689): socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) ppoll(&(0x7f0000000280)=[{r1, 0x6200}], 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000200)={0x0, 0x0, 0x82, 0xa, 0x1, "42341f9b1000"}) r2 = syz_open_pts(r1, 0x40000) dup3(r2, r1, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c250000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x8040480) r3 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x8, 0xfff7}, 0x1d, [0x5, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x481, 0x7f, 0x6, 0x81, 0x39cc191a, 0x10005f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x2, 0x3, 0x0, 0x5, 0x2, 0x8, 0x4, 0x3c5e, 0x1, 0x803, 0x5, 0xfd, 0x1f461e2c, 0x0, 0xe661, 0x4, 0x7, 0x101, 0x7fff, 0x4c75, 0x800, 0x242, 0x1003, 0xe, 0x0, 0x71, 0xfffffff8, 0x800007, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x1, 0x7f, 0x0, 0x5, 0x4, 0x8, 0x7, 0x80, 0x0, 0x5, 0x16, 0x9, 0x4, 0x1, 0x440], [0x10000007, 0x10000, 0x131, 0x8003, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x2, 0x7ff, 0x2, 0x3, 0x0, 0x7, 0x5, 0x4800, 0xa5a, 0x311, 0x7b, 0xea4, 0x0, 0x0, 0x0, 0x8000, 0x9, 0x401, 0x401, 0x6, 0x7, 0xff, 0x7, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0xa, 0x3, 0x1, 0xc, 0x800, 0x6, 0x7, 0x8000, 0x4, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x3010, 0x3, 0x9, 0x1, 0x4, 0x3, 0xd, 0x17, 0x42, 0x2], [0x7, 0x4, 0x3, 0x10001, 0xfffffffe, 0x100, 0x8d2, 0x7f, 0x3, 0x7fff, 0x0, 0x9, 0x9, 0x4, 0x5, 0x5, 0x0, 0x2000004, 0x5, 0x8, 0x86, 0x7, 0x0, 0x3e3, 0x9, 0x7, 0x2, 0x102, 0x3, 0x800, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa4, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x107ff, 0xfffffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x40, 0xbb31, 0x3, 0xe, 0xfffffffd, 0x938, 0xb, 0x6, 0x0, 0x2, 0xce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x922, 0x10000, 0x6, 0x7, 0x0, 0x2, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xedd, 0xfffff000, 0xffff, 0x3, 0x3, 0x7, 0x9602, 0x4, 0x80000005, 0x4, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x1fd, 0xffbf2440, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x80000007, 0x702) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fsync(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e64000000080002400000000058000000200a0101000b000000000000010000000900020073797a30000000000900010073797a30"], 0xf8}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c000240"], 0xdc}}, 0x0) socket(0xa, 0x3, 0x3a) 3.023059582s ago: executing program 4 (id=690): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_PMKSA(r1, 0x0, 0x4000) 2.867872934s ago: executing program 1 (id=691): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2.837708253s ago: executing program 4 (id=692): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, &(0x7f0000000000)={0x80, 0x40000105, 0x0, 0x0}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0xc0010058}]}) r4 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) semop(0x0, &(0x7f0000000440)=[{0x3, 0xffff, 0x1000}], 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.806088717s ago: executing program 1 (id=693): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) ioctl$USBDEVFS_REAPURB(r1, 0x4004550d, 0x0) 2.387555037s ago: executing program 4 (id=694): socket$kcm(0x10, 0x2, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0x8d2, &(0x7f00000001c0)={0x0, 0x54a5, 0x400, 0x3, 0x37a}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47b9, 0x95e5, 0x60, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) 2.068170502s ago: executing program 4 (id=695): r0 = getpgrp(0x0) r1 = syz_pidfd_open(r0, 0x0) process_madvise(r1, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000440)="a05a4eea", 0x4}], 0x2, 0x4, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="020e000010000000000000000004830008001200000001000000ff000000400000001ea0abff7f00000000000000d41f9ab9000100700000ebdf000008000000c4fc0000100000000000e2ffff1c004f030006000020080002000080f5008e24ce6e4ae300a5000003000500001e001e02"], 0x80}}, 0x4814) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x229ffa1c4ce5369, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket(0x10, 0x803, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0xe00, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e00090027097000000000220400000008000c"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x4, 0xa}, {}, {0xfff2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) 2.001405249s ago: executing program 3 (id=696): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) socket$pppl2tp(0x18, 0x1, 0x1) syz_io_uring_setup(0x49a, 0x0, &(0x7f0000000340), 0x0) fanotify_init(0x0, 0x0) 1.248518254s ago: executing program 2 (id=697): r0 = add_key$user(0x0, &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000bc0)='f', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x1f) bpf$PROG_LOAD(0x5, 0x0, 0x1298b7cc) r2 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) epoll_create1(0x80000) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b595000000000000000002000000", @ANYRES32=r2, @ANYBLOB="140001000040000000000000000000000000000014000200fe"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0x8}) keyctl$revoke(0x3, r0) r6 = syz_usb_connect(0x5, 0x35, 0x0, 0x0) syz_usb_disconnect(r6) r7 = syz_usb_connect(0x3, 0x1b, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x3c, 0x67, 0xa8, 0x10, 0x12d1, 0x4d6d, 0x46a6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x5}}]}}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000080)=0x8) syz_usb_control_io$printer(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) 1.037081265s ago: executing program 3 (id=698): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x94, &(0x7f0000000040)={0xa, 0x4e24, 0x3, @private1, 0x8}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4e, 0x0, 0x0) 678.352818ms ago: executing program 3 (id=699): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 447.149388ms ago: executing program 3 (id=700): socketpair$unix(0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) write$sndseq(r2, &(0x7f0000001080)=[{0x41, 0x9, 0x3, 0xfd, @time={0x0, 0x1}, {0x46, 0x1}, {0xf}, @quote={{0xf, 0x6}, 0x8}}], 0x1c) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002600)='/proc/bus/input/devices\x00', 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000040)=r5, 0x4) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0xc0241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) read$FUSE(r3, &(0x7f00000001c0)={0x2020}, 0x1906) accept$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000000c0)=0x14) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) connect(0xffffffffffffffff, 0x0, 0x0) write$UHID_CREATE2(r3, &(0x7f0000002880)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x30, 0x2, 0xfffffe01, 0x800, 0x1, 0x40, "32bd3af4712b1e68209a997b30243eb244217034b5ddcd69a3ee0628c4d8b287c699d010d767cf4152305fd32bbfa19a"}}, 0x148) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002840)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002800)={&(0x7f0000002680)=@deltaction={0x14, 0x31, 0x400, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40008c0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r8, &(0x7f0000000080)={&(0x7f0000000200), 0xc, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r9, @ANYBLOB], 0x4c}}, 0x0) 156.374174ms ago: executing program 1 (id=701): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0xb1c07, 0x0, 0x0, 0x8, 0x0, 0xfffffffd}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) r1 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0xf6b1, 0x10000, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x16, 0x1}) io_uring_enter(r1, 0xd44, 0x44c1, 0x7, 0x0, 0x0) 0s ago: executing program 1 (id=702): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_PMKSA(r1, 0x0, 0x4000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.69' (ED25519) to the list of known hosts. [ 79.625185][ T5826] cgroup: Unknown subsys name 'net' [ 79.777857][ T5826] cgroup: Unknown subsys name 'cpuset' [ 79.787464][ T5826] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.419838][ T5826] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.749628][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.772202][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.781876][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 83.795634][ T5854] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.807323][ T5854] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.822277][ T5856] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.830313][ T5854] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 83.838897][ T5858] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 83.847710][ T5859] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.849917][ T5858] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.863569][ T5858] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 83.865129][ T5859] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.878696][ T5858] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.887327][ T5861] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.888913][ T5854] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.898558][ T5861] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.909820][ T5854] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.916975][ T5861] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.925277][ T5861] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.930348][ T5854] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.936149][ T5861] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.941663][ T5859] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.956672][ T5856] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.986100][ T5858] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.005529][ T5858] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.725397][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 84.750941][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 84.869294][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 84.912857][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 85.007462][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 85.181355][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.188979][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.196664][ T5838] bridge_slave_0: entered allmulticast mode [ 85.205624][ T5838] bridge_slave_0: entered promiscuous mode [ 85.215116][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.222453][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.230105][ T5842] bridge_slave_0: entered allmulticast mode [ 85.238236][ T5842] bridge_slave_0: entered promiscuous mode [ 85.289283][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.296733][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.304183][ T5838] bridge_slave_1: entered allmulticast mode [ 85.312268][ T5838] bridge_slave_1: entered promiscuous mode [ 85.321392][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.329229][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.336596][ T5842] bridge_slave_1: entered allmulticast mode [ 85.344601][ T5842] bridge_slave_1: entered promiscuous mode [ 85.371457][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.378869][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.386212][ T5850] bridge_slave_0: entered allmulticast mode [ 85.394111][ T5850] bridge_slave_0: entered promiscuous mode [ 85.469847][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.477967][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.485706][ T5850] bridge_slave_1: entered allmulticast mode [ 85.493490][ T5850] bridge_slave_1: entered promiscuous mode [ 85.518344][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.528384][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.536580][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.544150][ T5851] bridge_slave_0: entered allmulticast mode [ 85.552148][ T5851] bridge_slave_0: entered promiscuous mode [ 85.591759][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.605884][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.618571][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.626086][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.633380][ T5851] bridge_slave_1: entered allmulticast mode [ 85.641805][ T5851] bridge_slave_1: entered promiscuous mode [ 85.679928][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.715301][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.722674][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.730075][ T5839] bridge_slave_0: entered allmulticast mode [ 85.738505][ T5839] bridge_slave_0: entered promiscuous mode [ 85.751385][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.800252][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.808041][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.815693][ T5839] bridge_slave_1: entered allmulticast mode [ 85.823599][ T5839] bridge_slave_1: entered promiscuous mode [ 85.834764][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.861316][ T5842] team0: Port device team_slave_0 added [ 85.872288][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.911346][ T5838] team0: Port device team_slave_0 added [ 85.920834][ T5842] team0: Port device team_slave_1 added [ 85.945249][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.985072][ T5838] team0: Port device team_slave_1 added [ 86.022456][ T51] Bluetooth: hci1: command tx timeout [ 86.028309][ T5159] Bluetooth: hci2: command tx timeout [ 86.028424][ T5854] Bluetooth: hci3: command tx timeout [ 86.034136][ T5858] Bluetooth: hci0: command tx timeout [ 86.051298][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.066994][ T5850] team0: Port device team_slave_0 added [ 86.084042][ T5858] Bluetooth: hci4: command tx timeout [ 86.094605][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.101602][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.127827][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.157175][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.185722][ T5850] team0: Port device team_slave_1 added [ 86.206348][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.213326][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.240169][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.256245][ T5851] team0: Port device team_slave_0 added [ 86.292649][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.299753][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.325830][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.351699][ T5851] team0: Port device team_slave_1 added [ 86.360984][ T5839] team0: Port device team_slave_0 added [ 86.381630][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.389163][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.415186][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.445799][ T5839] team0: Port device team_slave_1 added [ 86.453339][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.460445][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.487014][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.538267][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.545331][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.571521][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.624577][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.631603][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.657737][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.722511][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.730062][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.756013][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.768656][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.775887][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.802135][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.817317][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.824651][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.851145][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.893248][ T5842] hsr_slave_0: entered promiscuous mode [ 86.901967][ T5842] hsr_slave_1: entered promiscuous mode [ 86.966746][ T5838] hsr_slave_0: entered promiscuous mode [ 86.975110][ T5838] hsr_slave_1: entered promiscuous mode [ 86.982398][ T5838] debugfs: 'hsr0' already exists in 'hsr' [ 86.988414][ T5838] Cannot create hsr debugfs directory [ 87.101757][ T5850] hsr_slave_0: entered promiscuous mode [ 87.110106][ T5850] hsr_slave_1: entered promiscuous mode [ 87.117911][ T5850] debugfs: 'hsr0' already exists in 'hsr' [ 87.123709][ T5850] Cannot create hsr debugfs directory [ 87.180293][ T5851] hsr_slave_0: entered promiscuous mode [ 87.190438][ T5851] hsr_slave_1: entered promiscuous mode [ 87.198206][ T5851] debugfs: 'hsr0' already exists in 'hsr' [ 87.206856][ T5851] Cannot create hsr debugfs directory [ 87.273129][ T5839] hsr_slave_0: entered promiscuous mode [ 87.280341][ T5839] hsr_slave_1: entered promiscuous mode [ 87.288498][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 87.294423][ T5839] Cannot create hsr debugfs directory [ 87.979146][ T5838] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 87.996631][ T5838] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 88.009793][ T5838] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 88.033030][ T5838] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 88.086788][ T5159] Bluetooth: hci0: command tx timeout [ 88.092866][ T51] Bluetooth: hci2: command tx timeout [ 88.093120][ T5854] Bluetooth: hci1: command tx timeout [ 88.101732][ T5858] Bluetooth: hci3: command tx timeout [ 88.150307][ T5842] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.163639][ T5842] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.171133][ T5858] Bluetooth: hci4: command tx timeout [ 88.186003][ T5842] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.212912][ T5842] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.313392][ T5850] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.330928][ T5850] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.348873][ T5850] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.384637][ T5850] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.522918][ T5851] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.540445][ T5851] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.553662][ T5851] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.567219][ T5851] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.647402][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.738365][ T5839] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.760303][ T5839] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.780913][ T5839] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.792478][ T5839] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.817242][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.857741][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.881357][ T1011] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.888952][ T1011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.943129][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.950312][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.975042][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.047101][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.093642][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.107508][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.114780][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.150332][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.157697][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.200259][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.207459][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.237978][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.245381][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.295083][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.440223][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.501068][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.508425][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.589117][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.610657][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.618138][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.737064][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.778938][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.786188][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.832462][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.840370][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.879972][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.991399][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.105553][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.172627][ T5858] Bluetooth: hci1: command tx timeout [ 90.173215][ T5854] Bluetooth: hci3: command tx timeout [ 90.184642][ T51] Bluetooth: hci2: command tx timeout [ 90.184689][ T51] Bluetooth: hci0: command tx timeout [ 90.244073][ T5854] Bluetooth: hci4: command tx timeout [ 90.456444][ T5842] veth0_vlan: entered promiscuous mode [ 90.498606][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.535813][ T5850] veth0_vlan: entered promiscuous mode [ 90.577890][ T5842] veth1_vlan: entered promiscuous mode [ 90.617230][ T5850] veth1_vlan: entered promiscuous mode [ 90.716937][ T5838] veth0_vlan: entered promiscuous mode [ 90.741693][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.759635][ T5842] veth0_macvtap: entered promiscuous mode [ 90.775996][ T5842] veth1_macvtap: entered promiscuous mode [ 90.814889][ T5838] veth1_vlan: entered promiscuous mode [ 90.822570][ T5851] veth0_vlan: entered promiscuous mode [ 90.841136][ T5850] veth0_macvtap: entered promiscuous mode [ 90.877756][ T5850] veth1_macvtap: entered promiscuous mode [ 90.899196][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.922173][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.940998][ T5851] veth1_vlan: entered promiscuous mode [ 90.987633][ T1017] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.997874][ T1017] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.030439][ T1017] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.040395][ T1017] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.055411][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.094498][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.142276][ T5839] veth0_vlan: entered promiscuous mode [ 91.172640][ T5838] veth0_macvtap: entered promiscuous mode [ 91.191267][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.202022][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.237259][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.251831][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.272738][ T5838] veth1_macvtap: entered promiscuous mode [ 91.282681][ T5839] veth1_vlan: entered promiscuous mode [ 91.321186][ T5851] veth0_macvtap: entered promiscuous mode [ 91.337363][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.350354][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.387107][ T5851] veth1_macvtap: entered promiscuous mode [ 91.443164][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.462130][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.479102][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.542732][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.567979][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.579665][ T5842] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.628703][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.648032][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.657811][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.692641][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.695154][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.708216][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.759360][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.782772][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.792921][ T5839] veth0_macvtap: entered promiscuous mode [ 91.802408][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.004993][ T9] cfg80211: failed to load regulatory.db [ 92.023558][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.034066][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.181743][ T5965] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.216199][ T5965] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.239924][ T5839] veth1_macvtap: entered promiscuous mode [ 92.247174][ T5854] Bluetooth: hci3: command tx timeout [ 92.252729][ T5159] Bluetooth: hci1: command tx timeout [ 92.252839][ T5854] Bluetooth: hci0: command tx timeout [ 92.258663][ T5858] Bluetooth: hci2: command tx timeout [ 92.324073][ T5858] Bluetooth: hci4: command tx timeout [ 92.629805][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.666348][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.757416][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.800698][ T5965] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.819903][ T5965] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.859686][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.887264][ T5973] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 92.926847][ T182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.937381][ T182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.004354][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.071293][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.101717][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.145649][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.180236][ T5965] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.198796][ T5965] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.470735][ T5965] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.511923][ T5965] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.269459][ T5965] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.317802][ T5965] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.541120][ T5999] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15'. [ 96.026638][ T6021] ptrace attach of "./syz-executor exec"[5839] was attempted by "./syz-executor exec"[6021] [ 98.825472][ T6042] 9p: Bad value for 'rfdno' [ 99.255991][ T6049] Zero length message leads to an empty skb [ 100.448685][ T6058] netlink: 180 bytes leftover after parsing attributes in process `syz.4.31'. [ 100.470315][ T6058] evm: overlay not supported [ 101.553650][ T5905] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 101.659493][ T6074] can: request_module (can-proto-0) failed. [ 101.754052][ T5905] usb 4-1: Using ep0 maxpacket: 8 [ 101.805880][ T5905] usb 4-1: config 1 interface 0 has no altsetting 0 [ 101.833127][ T5905] usb 4-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.40 [ 101.851453][ T5905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.862169][ T5905] usb 4-1: Product: syz [ 101.866456][ T5905] usb 4-1: Manufacturer: syz [ 101.871177][ T5905] usb 4-1: SerialNumber: syz [ 102.160187][ T6086] binder: 6081:6086 ioctl c0046209 0 returned -22 [ 103.015095][ T5905] usbhid 4-1:1.0: can't add hid device: -71 [ 103.042786][ T5905] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 103.114080][ T5905] usb 4-1: USB disconnect, device number 2 [ 104.604966][ T6103] netlink: 180 bytes leftover after parsing attributes in process `syz.3.43'. [ 105.707160][ T6114] can: request_module (can-proto-0) failed. [ 105.795022][ T6123] binder: 6118:6123 ioctl c0046209 0 returned -22 [ 106.965724][ T5932] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 107.093614][ T6140] 9p: Bad value for 'rfdno' [ 107.144331][ T5932] usb 1-1: Using ep0 maxpacket: 8 [ 107.186998][ T5932] usb 1-1: config 1 interface 0 has no altsetting 0 [ 107.234577][ T5932] usb 1-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.40 [ 107.835310][ T5932] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.843393][ T5932] usb 1-1: Product: syz [ 107.868691][ T5932] usb 1-1: Manufacturer: syz [ 107.905474][ T5932] usb 1-1: SerialNumber: syz [ 108.230620][ T5932] usbhid 1-1:1.0: can't add hid device: -71 [ 108.251705][ T5932] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 108.358113][ T6145] netlink: 'syz.2.57': attribute type 1 has an invalid length. [ 108.366302][ T6145] netlink: 'syz.2.57': attribute type 2 has an invalid length. [ 108.378050][ T6145] netlink: 20 bytes leftover after parsing attributes in process `syz.2.57'. [ 108.864054][ T5932] usb 1-1: USB disconnect, device number 2 [ 109.138149][ T6150] netlink: 180 bytes leftover after parsing attributes in process `syz.1.58'. [ 109.453959][ T5919] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 109.653933][ T5919] usb 3-1: Using ep0 maxpacket: 16 [ 109.682919][ T5919] usb 3-1: config 0 has no interfaces? [ 109.710450][ T5919] usb 3-1: New USB device found, idVendor=12d1, idProduct=4d6d, bcdDevice=46.a6 [ 109.751146][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.773323][ T5919] usb 3-1: Product: syz [ 109.783752][ T5919] usb 3-1: Manufacturer: syz [ 109.794945][ T5919] usb 3-1: SerialNumber: syz [ 109.818382][ T5919] usb 3-1: config 0 descriptor?? [ 110.427353][ T6170] can: request_module (can-proto-0) failed. [ 111.211141][ T5932] usb 3-1: USB disconnect, device number 2 [ 111.459967][ T29] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 111.663019][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 111.702365][ T29] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 111.774946][ T29] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 111.840933][ T29] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 111.891238][ T6192] kvm: pic: non byte write [ 111.892559][ T29] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 111.970100][ T29] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 112.031488][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.235304][ T29] usbtmc 5-1:16.0: bulk endpoints not found [ 113.321103][ T6207] netlink: 180 bytes leftover after parsing attributes in process `syz.0.73'. [ 114.244185][ T6215] 9p: Bad value for 'rfdno' [ 115.488231][ T5933] usb 5-1: USB disconnect, device number 2 [ 115.837062][ T6229] netlink: 'syz.4.80': attribute type 1 has an invalid length. [ 115.846169][ T6229] netlink: 'syz.4.80': attribute type 2 has an invalid length. [ 115.854439][ T6229] netlink: 20 bytes leftover after parsing attributes in process `syz.4.80'. [ 116.534693][ T5933] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 116.724472][ T5933] usb 5-1: Using ep0 maxpacket: 16 [ 116.766249][ T5933] usb 5-1: config 0 has no interfaces? [ 116.790405][ T5933] usb 5-1: New USB device found, idVendor=12d1, idProduct=4d6d, bcdDevice=46.a6 [ 116.822838][ T5933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.858468][ T5933] usb 5-1: Product: syz [ 116.880990][ T5933] usb 5-1: Manufacturer: syz [ 116.907153][ T5933] usb 5-1: SerialNumber: syz [ 116.942691][ T5933] usb 5-1: config 0 descriptor?? [ 118.683920][ T5919] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 118.802188][ T5934] usb 5-1: USB disconnect, device number 3 [ 118.864661][ T5919] usb 4-1: Using ep0 maxpacket: 32 [ 118.887126][ T5919] usb 4-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 118.917968][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.944688][ T5919] usb 4-1: Product: syz [ 118.960608][ T5919] usb 4-1: Manufacturer: syz [ 118.975601][ T5919] usb 4-1: SerialNumber: syz [ 119.173529][ T6269] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 119.245760][ T5919] usb 4-1: Unsupported UAC3 BADD profile [ 119.549412][ T5919] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 119.609694][ T5919] usb 4-1: USB disconnect, device number 3 [ 119.724684][ T6156] udevd[6156]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 120.046319][ T6280] syzkaller1: entered promiscuous mode [ 120.066876][ T6280] syzkaller1: entered allmulticast mode [ 121.067460][ T6294] input: syz1 as /devices/virtual/input/input5 [ 121.108026][ T6298] fuse: Invalid rootmode [ 121.211458][ T6299] netlink: 'syz.0.102': attribute type 1 has an invalid length. [ 121.219434][ T6299] netlink: 'syz.0.102': attribute type 2 has an invalid length. [ 121.228340][ T6299] netlink: 20 bytes leftover after parsing attributes in process `syz.0.102'. [ 121.809484][ T5933] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 121.983911][ T5933] usb 1-1: Using ep0 maxpacket: 16 [ 122.050570][ T5933] usb 1-1: config 0 has no interfaces? [ 122.067111][ T5933] usb 1-1: New USB device found, idVendor=12d1, idProduct=4d6d, bcdDevice=46.a6 [ 122.098768][ T5933] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.138585][ T5933] usb 1-1: Product: syz [ 122.153087][ T5933] usb 1-1: Manufacturer: syz [ 122.166158][ T5933] usb 1-1: SerialNumber: syz [ 122.271685][ T5933] usb 1-1: config 0 descriptor?? [ 123.293909][ T5932] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 123.454320][ T5932] usb 3-1: Using ep0 maxpacket: 8 [ 123.474940][ T5932] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.518458][ T5932] usb 3-1: config 0 interface 0 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 123.580125][ T5932] usb 3-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 123.636504][ T5932] usb 3-1: config 0 interface 0 has no altsetting 0 [ 123.667141][ T5932] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 123.862202][ T5932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.000834][ T5932] usb 3-1: Product: syz [ 124.015202][ T5932] usb 3-1: Manufacturer: syz [ 124.029294][ T5932] usb 3-1: SerialNumber: syz [ 124.121809][ T5932] usb 3-1: config 0 descriptor?? [ 124.128487][ T5933] usb 1-1: USB disconnect, device number 3 [ 124.257932][ T5932] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found [ 124.397430][ T5932] snd_usb_toneport 3-1:0.0: cannot get proper max packet size [ 124.446466][ T5932] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected [ 124.497854][ T5932] snd_usb_toneport 3-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 124.605712][ T5919] usb 3-1: USB disconnect, device number 3 [ 127.051088][ T6371] netlink: 'syz.2.124': attribute type 1 has an invalid length. [ 127.059258][ T6371] netlink: 'syz.2.124': attribute type 2 has an invalid length. [ 127.067320][ T6371] netlink: 20 bytes leftover after parsing attributes in process `syz.2.124'. [ 127.526612][ T6373] syz.1.126 uses obsolete (PF_INET,SOCK_PACKET) [ 127.663882][ T5905] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 127.836643][ T5933] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 127.864108][ T5905] usb 3-1: Using ep0 maxpacket: 16 [ 127.921666][ T5905] usb 3-1: config 0 has no interfaces? [ 127.986283][ T5905] usb 3-1: New USB device found, idVendor=12d1, idProduct=4d6d, bcdDevice=46.a6 [ 128.009532][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.035876][ T5933] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 128.047143][ T5905] usb 3-1: Product: syz [ 128.059686][ T5905] usb 3-1: Manufacturer: syz [ 128.075254][ T5933] usb 1-1: config 0 interface 0 has no altsetting 0 [ 128.082015][ T5905] usb 3-1: SerialNumber: syz [ 128.104525][ T5933] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 128.116192][ T5905] usb 3-1: config 0 descriptor?? [ 128.135987][ T6386] netlink: 'syz.1.131': attribute type 1 has an invalid length. [ 128.149283][ T5933] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.157137][ T6386] netlink: 'syz.1.131': attribute type 2 has an invalid length. [ 128.182247][ T5933] usb 1-1: config 0 descriptor?? [ 128.190947][ T6386] netlink: 20 bytes leftover after parsing attributes in process `syz.1.131'. [ 128.210907][ T6375] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 128.293970][ T5905] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 128.464639][ T5905] usb 4-1: Using ep0 maxpacket: 32 [ 128.476465][ T5905] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.506120][ T5905] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 128.535314][ T5905] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 128.555605][ T5905] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 128.593237][ T5905] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 128.624100][ T5905] usb 4-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 128.678222][ T5933] hid-multitouch 0003:1FD2:6007.0001: unknown main item tag 0x0 [ 128.688825][ T5905] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 128.723147][ T5905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 128.733024][ T5933] hid-multitouch 0003:1FD2:6007.0001: unknown main item tag 0x0 [ 128.753004][ T5905] usb 4-1: Product: syz [ 128.757348][ T5933] hid-multitouch 0003:1FD2:6007.0001: unknown main item tag 0x0 [ 128.771129][ T5905] usb 4-1: Manufacturer: syz [ 128.784168][ T5933] hid-multitouch 0003:1FD2:6007.0001: unknown main item tag 0x0 [ 128.792794][ T5905] usb 4-1: SerialNumber: syz [ 128.802964][ T5933] hid-multitouch 0003:1FD2:6007.0001: unknown main item tag 0x0 [ 128.815864][ T5905] usb 4-1: config 0 descriptor?? [ 128.821910][ T5933] hid-multitouch 0003:1FD2:6007.0001: unknown main item tag 0x0 [ 128.835706][ T5933] hid-multitouch 0003:1FD2:6007.0001: unknown main item tag 0x0 [ 128.848812][ T5905] usb 4-1: no audio or video endpoints found [ 128.855182][ T5933] hid-multitouch 0003:1FD2:6007.0001: unknown main item tag 0x0 [ 128.883957][ T6025] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 128.886154][ T5933] hid-multitouch 0003:1FD2:6007.0001: unknown main item tag 0x0 [ 128.926127][ T5933] hid-multitouch 0003:1FD2:6007.0001: unknown main item tag 0x0 [ 129.040838][ T5933] hid-multitouch 0003:1FD2:6007.0001: hidraw0: USB HID v7f.fd Device [HID 1fd2:6007] on usb-dummy_hcd.0-1/input0 [ 129.103372][ T5933] usb 1-1: USB disconnect, device number 4 [ 129.125767][ T6025] usb 2-1: Using ep0 maxpacket: 16 [ 129.158835][ T6025] usb 2-1: config 0 has no interfaces? [ 129.208780][ T6025] usb 2-1: New USB device found, idVendor=12d1, idProduct=4d6d, bcdDevice=46.a6 [ 129.240450][ T6025] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.266503][ T6025] usb 2-1: Product: syz [ 129.283244][ T6025] usb 2-1: Manufacturer: syz [ 129.298656][ T6025] usb 2-1: SerialNumber: syz [ 129.325912][ T6025] usb 2-1: config 0 descriptor?? [ 129.440588][ T6389] fido_id[6389]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 129.960558][ T5840] usb 3-1: USB disconnect, device number 4 [ 129.994418][ T6025] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 130.218322][ T6025] usb 5-1: Using ep0 maxpacket: 16 [ 130.232223][ T6025] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 130.250200][ T6025] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 130.901653][ T6025] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 130.910950][ T6025] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.029843][ T6025] usb 5-1: Product: syz [ 131.035646][ T6025] usb 5-1: Manufacturer: syz [ 131.040489][ T6025] usb 5-1: SerialNumber: syz [ 131.052321][ T6025] usb 5-1: config 0 descriptor?? [ 131.088714][ T6025] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 131.116380][ T6025] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 131.141281][ T5905] usb 2-1: USB disconnect, device number 2 [ 131.189826][ T5840] usb 4-1: USB disconnect, device number 4 [ 131.502342][ T6411] netlink: 8 bytes leftover after parsing attributes in process `syz.3.139'. [ 131.709401][ T6025] em28xx 5-1:0.0: chip ID is em2874 [ 132.801308][ T6430] process 'syz.4.132' launched '/dev/fd/9' with NULL argv: empty string added [ 132.898528][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.905960][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.034037][ T5905] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 133.255296][ T6434] netlink: 'syz.3.145': attribute type 1 has an invalid length. [ 133.263141][ T6434] netlink: 'syz.3.145': attribute type 2 has an invalid length. [ 133.270987][ T6434] netlink: 20 bytes leftover after parsing attributes in process `syz.3.145'. [ 133.584710][ T5905] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 133.630938][ T5905] usb 2-1: config 0 interface 0 has no altsetting 0 [ 133.653261][ T5905] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 133.709751][ T5905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.737241][ T5905] usb 2-1: config 0 descriptor?? [ 133.751992][ T6429] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 133.843992][ T6025] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 133.975036][ T6429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.026904][ T6025] usb 4-1: Using ep0 maxpacket: 16 [ 134.056319][ T6025] usb 4-1: config 0 has no interfaces? [ 134.080890][ T6025] usb 4-1: New USB device found, idVendor=12d1, idProduct=4d6d, bcdDevice=46.a6 [ 134.094848][ T6429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.115975][ T6025] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.145680][ T6025] usb 4-1: Product: syz [ 134.153078][ T6025] usb 4-1: Manufacturer: syz [ 134.170850][ T6025] usb 4-1: SerialNumber: syz [ 134.201077][ T6025] usb 4-1: config 0 descriptor?? [ 134.293815][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 134.401764][ T5905] hid_parser_main: 469 callbacks suppressed [ 134.401782][ T5905] hid-multitouch 0003:1FD2:6007.0002: unknown main item tag 0x0 [ 134.557787][ T5905] hid-multitouch 0003:1FD2:6007.0002: unknown main item tag 0x0 [ 134.566122][ T5905] hid-multitouch 0003:1FD2:6007.0002: unknown main item tag 0x0 [ 134.573906][ T5905] hid-multitouch 0003:1FD2:6007.0002: unknown main item tag 0x0 [ 134.583719][ T5905] hid-multitouch 0003:1FD2:6007.0002: unknown main item tag 0x0 [ 134.591671][ T5905] hid-multitouch 0003:1FD2:6007.0002: unknown main item tag 0x0 [ 134.609960][ T5905] hid-multitouch 0003:1FD2:6007.0002: unknown main item tag 0x0 [ 134.618035][ T5905] hid-multitouch 0003:1FD2:6007.0002: unknown main item tag 0x0 [ 134.628903][ T5905] hid-multitouch 0003:1FD2:6007.0002: unknown main item tag 0x0 [ 134.642078][ T5905] hid-multitouch 0003:1FD2:6007.0002: unknown main item tag 0x0 [ 135.415307][ T5905] hid-multitouch 0003:1FD2:6007.0002: unexpected long global item [ 135.487447][ T5905] hid-multitouch 0003:1FD2:6007.0002: probe with driver hid-multitouch failed with error -22 [ 135.586182][ T6440] trusted_key: encrypted_key: insufficient parameters specified [ 135.755688][ T5905] usb 2-1: USB disconnect, device number 3 [ 135.993891][ T6025] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 136.173897][ T6025] usb 1-1: Using ep0 maxpacket: 32 [ 136.189004][ T6025] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.210273][ T6025] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 136.234853][ T6025] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 136.258130][ T6025] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 136.282151][ T6025] usb 1-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 136.291636][ T6025] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 136.299885][ T6025] usb 1-1: Product: syz [ 136.308593][ T6025] usb 1-1: Manufacturer: syz [ 136.313879][ T6025] usb 1-1: SerialNumber: syz [ 136.344332][ T6025] usb 1-1: config 0 descriptor?? [ 136.362537][ T6025] usb 1-1: no audio or video endpoints found [ 136.405424][ T5905] usb 5-1: USB disconnect, device number 4 [ 136.429348][ T5905] em28xx 5-1:0.0: Disconnecting em28xx [ 136.479726][ T5933] usb 4-1: USB disconnect, device number 5 [ 136.501218][ T5905] em28xx 5-1:0.0: Freeing device [ 136.572194][ T6448] netlink: 4 bytes leftover after parsing attributes in process `syz.4.150'. [ 136.685590][ T9] usb 1-1: USB disconnect, device number 5 [ 138.624420][ T6025] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 138.770046][ T6481] kvm: pic: non byte write [ 138.801625][ T6025] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 138.941096][ T6485] netlink: 'syz.0.161': attribute type 1 has an invalid length. [ 138.949280][ T6485] netlink: 'syz.0.161': attribute type 2 has an invalid length. [ 138.957426][ T6485] netlink: 20 bytes leftover after parsing attributes in process `syz.0.161'. [ 139.070772][ T6025] usb 2-1: config 0 interface 0 has no altsetting 0 [ 139.331986][ T6025] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 139.359758][ T6025] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.383400][ T6025] usb 2-1: config 0 descriptor?? [ 139.408035][ T6473] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 139.669080][ T6473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.732257][ T5932] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 139.762139][ T6473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.896863][ T5932] usb 1-1: Using ep0 maxpacket: 16 [ 139.910615][ T5932] usb 1-1: config 0 has no interfaces? [ 139.922522][ T5932] usb 1-1: New USB device found, idVendor=12d1, idProduct=4d6d, bcdDevice=46.a6 [ 139.947223][ T5932] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.963938][ T5932] usb 1-1: Product: syz [ 139.969943][ T5932] usb 1-1: Manufacturer: syz [ 139.976965][ T5932] usb 1-1: SerialNumber: syz [ 139.994107][ T5932] usb 1-1: config 0 descriptor?? [ 140.039210][ T6025] hid_parser_main: 247 callbacks suppressed [ 140.039236][ T6025] hid-multitouch 0003:1FD2:6007.0003: unknown main item tag 0x0 [ 140.056686][ T6025] hid-multitouch 0003:1FD2:6007.0003: unknown main item tag 0x0 [ 140.065071][ T6025] hid-multitouch 0003:1FD2:6007.0003: unknown main item tag 0x0 [ 140.073286][ T6025] hid-multitouch 0003:1FD2:6007.0003: unknown main item tag 0x0 [ 140.085604][ T6025] hid-multitouch 0003:1FD2:6007.0003: unknown main item tag 0x0 [ 140.098929][ T6025] hid-multitouch 0003:1FD2:6007.0003: unknown main item tag 0x0 [ 140.110224][ T6025] hid-multitouch 0003:1FD2:6007.0003: unknown main item tag 0x0 [ 140.136438][ T6025] hid-multitouch 0003:1FD2:6007.0003: unknown main item tag 0x0 [ 140.154622][ T6025] hid-multitouch 0003:1FD2:6007.0003: unknown main item tag 0x0 [ 140.173689][ T6025] hid-multitouch 0003:1FD2:6007.0003: unknown main item tag 0x0 [ 140.196622][ T6025] hid-multitouch 0003:1FD2:6007.0003: unexpected long global item [ 140.252663][ T6025] hid-multitouch 0003:1FD2:6007.0003: probe with driver hid-multitouch failed with error -22 [ 140.291609][ T6025] usb 2-1: USB disconnect, device number 4 [ 142.224389][ T5932] usb 1-1: USB disconnect, device number 6 [ 142.521686][ T6516] bridge0: port 3(hsr0) entered blocking state [ 143.223343][ T6516] bridge0: port 3(hsr0) entered disabled state [ 143.247133][ T6516] hsr0: entered allmulticast mode [ 143.263954][ T6516] hsr_slave_0: entered allmulticast mode [ 143.282739][ T6516] hsr_slave_1: entered allmulticast mode [ 143.375795][ T6537] ptrace attach of "./syz-executor exec"[5839] was attempted by "./syz-executor exec"[6537] [ 143.456373][ T6516] hsr0: entered promiscuous mode [ 143.471496][ T6535] kvm: kvm [6532]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 143.566516][ T6516] bridge0: port 3(hsr0) entered blocking state [ 143.572935][ T6516] bridge0: port 3(hsr0) entered forwarding state [ 144.990348][ T6549] netlink: 180 bytes leftover after parsing attributes in process `syz.2.178'. [ 147.720558][ T6571] Cannot find del_set index 4 as target [ 147.994738][ T6571] netlink: 'syz.1.185': attribute type 2 has an invalid length. [ 148.098687][ T5933] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 148.324132][ T5933] usb 1-1: Using ep0 maxpacket: 8 [ 148.341425][ T5933] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.971061][ T6025] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 148.974142][ T5933] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1536, setting to 64 [ 149.013861][ T5933] usb 1-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 149.160512][ T5933] usb 1-1: config 0 interface 0 has no altsetting 0 [ 149.215013][ T5933] usb 1-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 149.241744][ T5933] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.253867][ T6025] usb 4-1: Using ep0 maxpacket: 8 [ 149.261386][ T5933] usb 1-1: Product: syz [ 149.272476][ T5933] usb 1-1: Manufacturer: syz [ 149.287203][ T5933] usb 1-1: SerialNumber: syz [ 149.301802][ T6025] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 149.331678][ T5933] usb 1-1: config 0 descriptor?? [ 149.347420][ T6025] usb 4-1: config 0 has no interface number 0 [ 149.369612][ T5933] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 found [ 149.377638][ T6025] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 149.409607][ T6025] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 50335, setting to 1024 [ 149.462287][ T6025] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 149.483630][ T6025] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.520452][ T6025] usb 4-1: config 0 descriptor?? [ 149.572497][ T6573] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 149.592993][ T5933] snd_usb_toneport 1-1:0.0: cannot get proper max packet size [ 149.618713][ T5933] snd_usb_toneport 1-1:0.0: Line 6 TonePort UX2 now disconnected [ 149.658237][ T5933] snd_usb_toneport 1-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 149.775024][ T6025] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 149.788698][ T9] usb 1-1: USB disconnect, device number 7 [ 149.821631][ T6591] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 150.084070][ C0] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 150.121959][ T5919] usb 4-1: USB disconnect, device number 6 [ 151.066010][ T6604] kvm: kvm [6603]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xffef00000000 [ 152.155176][ T6622] netlink: 180 bytes leftover after parsing attributes in process `syz.2.198'. [ 152.264368][ T6025] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 152.448402][ T6025] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 152.478888][ T6025] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 152.494163][ T6025] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 152.533931][ T6025] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.608929][ T6025] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 152.627962][ T6025] usb 1-1: invalid MIDI out EP 0 [ 152.957686][ T6618] batadv0: entered promiscuous mode [ 152.978953][ T6618] vlan2: entered promiscuous mode [ 153.160597][ T6025] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 153.212878][ T6025] usb 1-1: USB disconnect, device number 8 [ 154.867015][ T6662] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 155.179754][ T6666] Attempt to restore checkpoint with obsolete wellknown handles [ 166.230665][ T6784] can: request_module (can-proto-0) failed. [ 167.464834][ T5932] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 167.624700][ T5932] usb 2-1: Using ep0 maxpacket: 8 [ 167.645796][ T5932] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1536, setting to 64 [ 167.688012][ T5932] usb 2-1: config 0 interface 0 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 167.717386][ T5932] usb 2-1: config 0 interface 0 has no altsetting 0 [ 167.734448][ T5932] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 167.744816][ T5932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.753628][ T5932] usb 2-1: Product: syz [ 167.758463][ T5932] usb 2-1: Manufacturer: syz [ 167.764532][ T5932] usb 2-1: SerialNumber: syz [ 167.803459][ T5932] usb 2-1: config 0 descriptor?? [ 167.843124][ T5932] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found [ 167.917731][ T6819] kvm: kvm [6818]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x5016 [ 167.958288][ T6827] can: request_module (can-proto-0) failed. [ 168.060700][ T5932] snd_usb_toneport 2-1:0.0: cannot get proper max packet size [ 168.118512][ T5932] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected [ 168.152139][ T5932] snd_usb_toneport 2-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 168.260308][ T5853] usb 2-1: USB disconnect, device number 5 [ 168.475085][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 168.783881][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 169.504334][ T5853] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 169.696431][ T5853] usb 5-1: Using ep0 maxpacket: 8 [ 169.712367][ T5853] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 169.730762][ T5853] usb 5-1: config 0 has no interface number 0 [ 169.749662][ T5853] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 169.787332][ T5853] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 50335, setting to 1024 [ 169.825232][ T5853] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 169.862865][ T5853] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.901584][ T5853] usb 5-1: config 0 descriptor?? [ 169.930455][ T6846] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 169.955276][ T6870] can: request_module (can-proto-0) failed. [ 169.997894][ T5853] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 170.273107][ T6025] usb 5-1: USB disconnect, device number 5 [ 170.279326][ C1] iowarrior 5-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 171.003955][ T6025] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 171.173900][ T6025] usb 3-1: Using ep0 maxpacket: 8 [ 171.184401][ T6025] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1536, setting to 64 [ 171.208774][ T6025] usb 3-1: config 0 interface 0 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 171.237726][ T6025] usb 3-1: config 0 interface 0 has no altsetting 0 [ 171.258728][ T6025] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 171.275259][ T6025] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.298157][ T6025] usb 3-1: Product: syz [ 171.311998][ T6025] usb 3-1: Manufacturer: syz [ 171.325509][ T6025] usb 3-1: SerialNumber: syz [ 171.359881][ T6025] usb 3-1: config 0 descriptor?? [ 171.429362][ T6025] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found [ 171.602601][ T6025] snd_usb_toneport 3-1:0.0: cannot get proper max packet size [ 171.626171][ T6025] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected [ 171.660425][ T6025] snd_usb_toneport 3-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 171.682636][ T6888] kvm: kvm [6887]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x5016 [ 171.802258][ T6025] usb 3-1: USB disconnect, device number 5 [ 172.516190][ T6902] netlink: 'syz.3.289': attribute type 1 has an invalid length. [ 172.524068][ T6902] netlink: 'syz.3.289': attribute type 2 has an invalid length. [ 172.531872][ T6902] netlink: 20 bytes leftover after parsing attributes in process `syz.3.289'. [ 173.095056][ T5853] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 173.176076][ T6025] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 173.253872][ T5853] usb 4-1: Using ep0 maxpacket: 16 [ 173.266365][ T6918] netlink: 'syz.4.294': attribute type 3 has an invalid length. [ 173.281698][ T5853] usb 4-1: config 0 has no interfaces? [ 173.292502][ T5853] usb 4-1: New USB device found, idVendor=12d1, idProduct=4d6d, bcdDevice=46.a6 [ 173.307846][ T5853] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.323890][ T5853] usb 4-1: Product: syz [ 173.332600][ T5853] usb 4-1: Manufacturer: syz [ 173.343831][ T5853] usb 4-1: SerialNumber: syz [ 173.361076][ T5853] usb 4-1: config 0 descriptor?? [ 173.376398][ T6025] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 173.390166][ T6025] usb 3-1: config 0 interface 0 has no altsetting 0 [ 173.403103][ T6025] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 173.416862][ T6025] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.444781][ T6025] usb 3-1: config 0 descriptor?? [ 173.473083][ T6904] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 173.726362][ T6904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.787075][ T6904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.018792][ T6025] usbhid 3-1:0.0: can't add hid device: -71 [ 174.036257][ T6025] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 174.063080][ T6025] usb 3-1: USB disconnect, device number 6 [ 175.154076][ T5932] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 175.317556][ T5932] usb 3-1: unable to get BOS descriptor or descriptor too short [ 175.327066][ T5932] usb 3-1: not running at top speed; connect to a high speed hub [ 175.350726][ T5932] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 175.361787][ T5932] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 175.371450][ T5932] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 175.402742][ T5932] usb 3-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40 [ 175.437957][ T5932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.475517][ T5933] usb 4-1: USB disconnect, device number 7 [ 175.476363][ T5932] usb 3-1: Product: syz [ 175.491507][ T5932] usb 3-1: Manufacturer: syz [ 175.501238][ T5932] usb 3-1: SerialNumber: syz [ 175.524219][ T6025] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 175.714881][ T6025] usb 2-1: Using ep0 maxpacket: 8 [ 175.783711][ T6025] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1536, setting to 64 [ 175.815864][ T6025] usb 2-1: config 0 interface 0 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 175.839521][ T6025] usb 2-1: config 0 interface 0 has no altsetting 0 [ 175.860403][ T6025] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 175.876979][ T6025] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.896234][ T6025] usb 2-1: Product: syz [ 175.903654][ T6025] usb 2-1: Manufacturer: syz [ 175.909036][ T6025] usb 2-1: SerialNumber: syz [ 175.921703][ T6025] usb 2-1: config 0 descriptor?? [ 175.940002][ T6025] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found [ 176.141196][ T6025] snd_usb_toneport 2-1:0.0: cannot get proper max packet size [ 176.151531][ T5932] usb 3-1: us122l: couldn't allocate write buffer [ 176.162873][ T6025] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected [ 176.176337][ T5932] snd-usb-us122l 3-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 176.189501][ T6025] snd_usb_toneport 2-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 176.235913][ T5932] usb 3-1: USB disconnect, device number 7 [ 176.349714][ T5933] usb 2-1: USB disconnect, device number 6 [ 176.871506][ T6946] netlink: 7 bytes leftover after parsing attributes in process `syz.2.304'. [ 176.916849][ T6946] netlink: 24 bytes leftover after parsing attributes in process `syz.2.304'. [ 177.107292][ T6952] netlink: 'syz.1.305': attribute type 3 has an invalid length. [ 178.195468][ T6966] netlink: 'syz.1.312': attribute type 1 has an invalid length. [ 178.205173][ T6966] netlink: 'syz.1.312': attribute type 2 has an invalid length. [ 178.213279][ T6966] netlink: 20 bytes leftover after parsing attributes in process `syz.1.312'. [ 179.136886][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 179.647124][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 179.677544][ T9] usb 2-1: config 0 has no interfaces? [ 179.707994][ T9] usb 2-1: New USB device found, idVendor=12d1, idProduct=4d6d, bcdDevice=46.a6 [ 179.730079][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.752414][ T9] usb 2-1: Product: syz [ 179.777591][ T9] usb 2-1: Manufacturer: syz [ 179.782429][ T9] usb 2-1: SerialNumber: syz [ 179.802951][ T9] usb 2-1: config 0 descriptor?? [ 181.181704][ T9] usb 2-1: USB disconnect, device number 7 [ 182.844088][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 183.200093][ T7032] Cannot find del_set index 4 as target [ 183.331949][ T7036] netlink: 'syz.0.329': attribute type 2 has an invalid length. [ 184.153270][ T7041] syzkaller0: entered promiscuous mode [ 184.182202][ T7041] syzkaller0: entered allmulticast mode [ 184.393885][ T29] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 184.566353][ T29] usb 3-1: unable to get BOS descriptor or descriptor too short [ 184.599963][ T29] usb 3-1: not running at top speed; connect to a high speed hub [ 184.779589][ T29] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 184.801746][ T29] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 185.457092][ T29] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 185.475122][ T29] usb 3-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40 [ 185.484269][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.631013][ T29] usb 3-1: Product: syz [ 185.651632][ T29] usb 3-1: Manufacturer: syz [ 185.671466][ T29] usb 3-1: SerialNumber: syz [ 185.973871][ T5933] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 186.159796][ T5933] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 186.203240][ T5933] usb 5-1: config 0 interface 0 has no altsetting 0 [ 186.219722][ T5933] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 186.239839][ T5933] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.277334][ T5933] usb 5-1: config 0 descriptor?? [ 186.302132][ T7055] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 186.325424][ T29] usb 3-1: us122l: couldn't allocate write buffer [ 186.352135][ T29] snd-usb-us122l 3-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 186.406546][ T29] usb 3-1: USB disconnect, device number 8 [ 186.530256][ T7055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.569330][ T7055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.611908][ T6156] udevd[6156]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 187.061734][ T5933] usbhid 5-1:0.0: can't add hid device: -71 [ 187.082570][ T5933] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 187.120342][ T5933] usb 5-1: USB disconnect, device number 6 [ 188.881109][ T7090] Cannot find del_set index 4 as target [ 189.071666][ T7102] trusted_key: encrypted_key: insufficient parameters specified [ 189.081941][ T7101] netlink: 'syz.1.352': attribute type 2 has an invalid length. [ 189.443498][ T7113] trusted_key: encrypted_key: insufficient parameters specified [ 189.733928][ T5933] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 189.903859][ T5933] usb 5-1: Using ep0 maxpacket: 32 [ 189.915259][ T5933] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.940657][ T5933] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 189.955420][ T5933] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 189.984029][ T5933] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 190.019791][ T5933] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 190.029140][ T5853] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 190.048021][ T5933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 190.056310][ T5933] usb 5-1: Product: syz [ 190.066075][ T5933] usb 5-1: Manufacturer: syz [ 190.076778][ T5933] usb 5-1: SerialNumber: syz [ 190.098475][ T5933] usb 5-1: config 0 descriptor?? [ 190.121587][ T5933] usb 5-1: no audio or video endpoints found [ 190.203914][ T5853] usb 1-1: Using ep0 maxpacket: 8 [ 190.227468][ T5853] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 190.256664][ T5853] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 190.278865][ T5853] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 190.308843][ T5853] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 190.461938][ T5933] usb 5-1: USB disconnect, device number 7 [ 190.500525][ T5853] usb 1-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 191.127860][ T5853] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 191.137059][ T5853] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.234520][ T5853] usbtmc 1-1:16.0: bulk endpoints not found [ 191.500912][ T7123] netlink: 40 bytes leftover after parsing attributes in process `syz.0.364'. [ 191.553088][ T6025] usb 1-1: USB disconnect, device number 9 [ 191.647778][ T7133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.367'. [ 192.253906][ T5933] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 192.441976][ T5933] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 192.485658][ T5933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.500134][ T5853] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 192.511915][ T5933] usb 3-1: Product: syz [ 192.517344][ T5933] usb 3-1: Manufacturer: syz [ 192.522122][ T5933] usb 3-1: SerialNumber: syz [ 193.236293][ T5853] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 193.318005][ T5853] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.355247][ T5853] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 193.392111][ T5853] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 193.437548][ T5853] usb 2-1: Manufacturer: syz [ 193.465928][ T7156] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.378'. [ 193.474104][ T5853] usb 2-1: config 0 descriptor?? [ 193.513788][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 193.638848][ T5933] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 193.673050][ T5933] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 193.764852][ T7169] netlink: 7 bytes leftover after parsing attributes in process `syz.0.381'. [ 193.814319][ T7169] netlink: 16 bytes leftover after parsing attributes in process `syz.0.381'. [ 193.854458][ T5853] rc_core: IR keymap rc-hauppauge not found [ 193.879693][ T5853] Registered IR keymap rc-empty [ 193.911273][ T5853] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 193.955666][ T5853] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input6 [ 194.029273][ T5853] igorplugusb 2-1:0.0: submit urb failed: -53 [ 194.050193][ T5853] usb 2-1: USB disconnect, device number 8 [ 194.360242][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.371425][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.571639][ T5933] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPIPE [ 194.604242][ T5933] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 194.633415][ T5933] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 194.692540][ T5933] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 194.779862][ T5933] usb 3-1: USB disconnect, device number 9 [ 195.518929][ T7194] syzkaller0: entered promiscuous mode [ 195.541703][ T7194] syzkaller0: entered allmulticast mode [ 196.544925][ T5933] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 196.606578][ T7202] netlink: 7 bytes leftover after parsing attributes in process `syz.2.392'. [ 196.626749][ T7202] netlink: 16 bytes leftover after parsing attributes in process `syz.2.392'. [ 196.734369][ T5933] usb 4-1: Using ep0 maxpacket: 8 [ 196.759341][ T5933] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 196.820051][ T5933] usb 4-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 196.856367][ T5933] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.897059][ T5933] usb 4-1: Product: syz [ 196.906171][ T5933] usb 4-1: Manufacturer: syz [ 196.918137][ T5933] usb 4-1: SerialNumber: syz [ 196.945535][ T5933] usb 4-1: config 0 descriptor?? [ 197.312117][ T7200] ptrace attach of "./syz-executor exec"[5851] was attempted by "\x0a Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ `·\x5c¼ \x0a N ÿ  pßY¼ €    ¥ ÿÿ     $ @   \x0c   , @ ( €   k ÿÿ ÿÿÿÿ    $ @   \x0c   , @ ( [ 197.494493][ T7216] netlink: 'syz.2.396': attribute type 1 has an invalid length. [ 197.599248][ T7216] netlink: 'syz.2.396': attribute type 2 has an invalid length. [ 197.607384][ T7216] netlink: 20 bytes leftover after parsing attributes in process `syz.2.396'. [ 197.996256][ T5933] msi2500 4-1:0.0: Registered as swradio24 [ 198.003830][ T5933] msi2500 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 198.074621][ T5933] usb 4-1: USB disconnect, device number 8 [ 198.183892][ T5919] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 198.363910][ T5919] usb 3-1: Using ep0 maxpacket: 16 [ 198.394774][ T5919] usb 3-1: config 0 has no interfaces? [ 198.425429][ T5919] usb 3-1: New USB device found, idVendor=12d1, idProduct=4d6d, bcdDevice=46.a6 [ 198.456555][ T5919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.497619][ T5919] usb 3-1: Product: syz [ 198.521550][ T5919] usb 3-1: Manufacturer: syz [ 198.536692][ T5919] usb 3-1: SerialNumber: syz [ 198.711084][ T5919] usb 3-1: config 0 descriptor?? [ 198.804850][ T5933] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 199.047284][ T5933] usb 4-1: Using ep0 maxpacket: 8 [ 199.062532][ T5933] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1536, setting to 64 [ 199.081828][ T5933] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 199.091927][ T5933] usb 4-1: config 0 interface 0 has no altsetting 0 [ 199.104300][ T5933] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 199.113911][ T5933] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.130302][ T5933] usb 4-1: Product: syz [ 199.139160][ T5933] usb 4-1: Manufacturer: syz [ 199.150564][ T5933] usb 4-1: SerialNumber: syz [ 199.175448][ T5933] usb 4-1: config 0 descriptor?? [ 199.194928][ T5933] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 found [ 199.424002][ T5933] snd_usb_toneport 4-1:0.0: cannot get proper max packet size [ 199.454180][ T5933] snd_usb_toneport 4-1:0.0: Line 6 TonePort UX2 now disconnected [ 199.497764][ T5933] snd_usb_toneport 4-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 199.610704][ T29] usb 4-1: USB disconnect, device number 9 [ 199.921874][ T7236] netlink: 7 bytes leftover after parsing attributes in process `syz.4.404'. [ 199.931763][ T7236] netlink: 16 bytes leftover after parsing attributes in process `syz.4.404'. [ 200.521736][ T5919] usb 3-1: USB disconnect, device number 10 [ 200.719699][ T7255] capability: warning: `syz.3.411' uses deprecated v2 capabilities in a way that may be insecure [ 201.314863][ T7267] netlink: 7 bytes leftover after parsing attributes in process `syz.2.415'. [ 201.339183][ T7265] syzkaller0: entered promiscuous mode [ 201.370873][ T7265] syzkaller0: entered allmulticast mode [ 201.378890][ T7267] netlink: 16 bytes leftover after parsing attributes in process `syz.2.415'. [ 202.274519][ T7274] Cannot find del_set index 4 as target [ 202.372507][ T7283] input: syz0 as /devices/virtual/input/input7 [ 202.441429][ T7277] netlink: 'syz.2.416': attribute type 2 has an invalid length. [ 203.164099][ T7299] netlink: 7 bytes leftover after parsing attributes in process `syz.0.426'. [ 203.187394][ T7299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.426'. [ 203.467379][ T7306] usb usb7: usbfs: process 7306 (syz.0.428) did not claim interface 0 before use [ 204.545180][ T5919] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 204.754238][ T5919] usb 1-1: Using ep0 maxpacket: 8 [ 204.793690][ T5919] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 204.814581][ T7334] netlink: 7 bytes leftover after parsing attributes in process `syz.2.438'. [ 204.821067][ T5919] usb 1-1: config 0 has no interface number 0 [ 204.855622][ T5919] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 204.856835][ T7334] netlink: 8 bytes leftover after parsing attributes in process `syz.2.438'. [ 204.912567][ T5919] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 50335, setting to 1024 [ 204.941565][ T5919] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 204.963564][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.996468][ T5919] usb 1-1: config 0 descriptor?? [ 205.029750][ T7326] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 205.073695][ T5919] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 205.488448][ T29] usb 1-1: USB disconnect, device number 10 [ 205.578694][ T7338] syzkaller0: entered promiscuous mode [ 205.612651][ T7338] syzkaller0: entered allmulticast mode [ 206.023862][ T7341] tipc: Started in network mode [ 206.032453][ T7341] tipc: Node identity 22e57161add1, cluster identity 4711 [ 206.060930][ T7341] tipc: Enabled bearer , priority 0 [ 206.098129][ T7337] tipc: Resetting bearer [ 206.183312][ T7337] tipc: Disabling bearer [ 206.316100][ T7359] openvswitch: netlink: Flow key attr not present in new flow. [ 206.643929][ T5856] Bluetooth: hci3: command 0x0406 tx timeout [ 206.651038][ T5856] Bluetooth: hci2: command 0x0406 tx timeout [ 206.661143][ T5856] Bluetooth: hci0: command 0x0406 tx timeout [ 206.667820][ T5848] Bluetooth: hci1: command 0x0406 tx timeout [ 206.667847][ T5841] Bluetooth: hci4: command 0x0406 tx timeout [ 206.709567][ T6025] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 206.917675][ T7366] netlink: 7 bytes leftover after parsing attributes in process `syz.2.450'. [ 206.937257][ T6025] usb 2-1: unable to get BOS descriptor or descriptor too short [ 206.957853][ T7366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.450'. [ 206.984051][ T6025] usb 2-1: not running at top speed; connect to a high speed hub [ 207.007490][ T6025] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 207.034857][ T6025] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 207.063373][ T6025] usb 2-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0x42, changing to 0x2 [ 207.161280][ T6025] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x2 has an invalid bInterval 0, changing to 4 [ 207.232299][ T6025] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 207.294282][ T6025] usb 2-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40 [ 207.346526][ T6025] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.388779][ T6025] usb 2-1: Product: syz [ 207.403623][ T6025] usb 2-1: Manufacturer: syz [ 207.432029][ T6025] usb 2-1: SerialNumber: syz [ 207.842564][ T7380] netlink: 40 bytes leftover after parsing attributes in process `syz.2.457'. [ 207.893132][ T30] audit: type=1800 audit(1773939257.936:2): pid=7382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.458" name="bus" dev="tmpfs" ino=499 res=0 errno=0 [ 207.977961][ T7384] tipc: Enabling of bearer rejected, failed to enable media [ 208.096532][ T6025] usb 2-1: us122l: couldn't allocate write buffer [ 208.113897][ T6025] snd-usb-us122l 2-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 208.180827][ T6025] usb 2-1: USB disconnect, device number 9 [ 209.224934][ T7415] netlink: 40 bytes leftover after parsing attributes in process `syz.0.471'. [ 209.636541][ T7421] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 209.815249][ T7429] 9p: Bad value for 'rfdno' [ 210.415670][ T5932] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 210.596944][ T5932] usb 1-1: unable to get BOS descriptor or descriptor too short [ 210.625839][ T5932] usb 1-1: not running at top speed; connect to a high speed hub [ 210.658006][ T5932] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 210.687119][ T5932] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 210.714745][ T5932] usb 1-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0x42, changing to 0x2 [ 210.754397][ T5932] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x2 has an invalid bInterval 0, changing to 4 [ 210.779005][ T5932] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 210.866815][ T5932] usb 1-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40 [ 210.899161][ T5932] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.945961][ T5932] usb 1-1: Product: syz [ 210.969492][ T5932] usb 1-1: Manufacturer: syz [ 210.992592][ T5932] usb 1-1: SerialNumber: syz [ 211.982527][ T5932] usb 1-1: us122l: couldn't allocate write buffer [ 212.014426][ T5932] snd-usb-us122l 1-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 212.037156][ T5932] usb 1-1: USB disconnect, device number 11 [ 212.235837][ T7440] kvm: kvm [7438]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xffbc00005700 [ 212.760742][ T7461] netlink: 12 bytes leftover after parsing attributes in process `syz.1.487'. [ 213.801829][ T7483] trusted_key: encrypted_key: insufficient parameters specified [ 215.704847][ T6025] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 215.878820][ T6025] usb 2-1: Using ep0 maxpacket: 8 [ 215.909571][ T6025] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 215.954970][ T6025] usb 2-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 215.979154][ T6025] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.997160][ T6025] usb 2-1: Product: syz [ 216.011581][ T6025] usb 2-1: Manufacturer: syz [ 216.021425][ T6025] usb 2-1: SerialNumber: syz [ 216.037635][ T6025] usb 2-1: config 0 descriptor?? [ 216.467587][ T7529] netlink: 'syz.2.511': attribute type 1 has an invalid length. [ 216.476463][ T7529] netlink: 'syz.2.511': attribute type 2 has an invalid length. [ 216.484753][ T7529] netlink: 20 bytes leftover after parsing attributes in process `syz.2.511'. [ 216.830115][ T7540] trusted_key: encrypted_key: insufficient parameters specified [ 216.946180][ T6025] msi2500 2-1:0.0: Registered as swradio24 [ 216.966631][ T6025] msi2500 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 217.017689][ T6025] usb 2-1: USB disconnect, device number 10 [ 217.086642][ T5933] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 217.288006][ T5933] usb 3-1: Using ep0 maxpacket: 16 [ 217.328492][ T5933] usb 3-1: config 0 has no interfaces? [ 217.359725][ T5933] usb 3-1: New USB device found, idVendor=12d1, idProduct=4d6d, bcdDevice=46.a6 [ 217.412643][ T5933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.437199][ T5933] usb 3-1: Product: syz [ 217.448675][ T5933] usb 3-1: Manufacturer: syz [ 217.464130][ T5933] usb 3-1: SerialNumber: syz [ 217.499055][ T5933] usb 3-1: config 0 descriptor?? [ 219.203072][ T5853] usb 3-1: USB disconnect, device number 11 [ 219.494168][ T5933] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 219.664647][ T5933] usb 5-1: Using ep0 maxpacket: 8 [ 219.681373][ T5933] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 219.717449][ T5933] usb 5-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 219.753657][ T5933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.779105][ T5933] usb 5-1: Product: syz [ 219.792203][ T5933] usb 5-1: Manufacturer: syz [ 219.797478][ T5933] usb 5-1: SerialNumber: syz [ 219.809637][ T5933] usb 5-1: config 0 descriptor?? [ 220.151157][ T5933] msi2500 5-1:0.0: Registered as swradio24 [ 220.157341][ T5933] msi2500 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 220.175282][ T5933] usb 5-1: USB disconnect, device number 8 [ 221.085850][ T7638] netlink: 'syz.3.540': attribute type 1 has an invalid length. [ 221.093712][ T7638] netlink: 'syz.3.540': attribute type 2 has an invalid length. [ 221.101799][ T7638] netlink: 20 bytes leftover after parsing attributes in process `syz.3.540'. [ 221.724230][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 221.954078][ T5919] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 222.873833][ T5919] usb 4-1: Using ep0 maxpacket: 16 [ 222.887345][ T5919] usb 4-1: config 0 has no interfaces? [ 222.904690][ T5919] usb 4-1: New USB device found, idVendor=12d1, idProduct=4d6d, bcdDevice=46.a6 [ 222.929191][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.960354][ T5919] usb 4-1: Product: syz [ 222.979178][ T5919] usb 4-1: Manufacturer: syz [ 222.993284][ T5919] usb 4-1: SerialNumber: syz [ 223.021083][ T5919] usb 4-1: config 0 descriptor?? [ 224.604834][ T6025] usb 4-1: USB disconnect, device number 10 [ 225.907958][ T7701] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 226.676845][ T7719] can: request_module (can-proto-0) failed. [ 226.863850][ T7728] netlink: 8 bytes leftover after parsing attributes in process `syz.4.572'. [ 227.263846][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 227.448990][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 227.476479][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 227.490677][ T9] usb 5-1: config 13 has an invalid interface number: 50 but max is 0 [ 227.490701][ T9] usb 5-1: config 13 has no interface number 0 [ 227.490730][ T9] usb 5-1: config 13 interface 50 altsetting 167 bulk endpoint 0x88 has invalid maxpacket 16 [ 227.490750][ T9] usb 5-1: config 13 interface 50 has no altsetting 0 [ 227.493072][ T9] usb 5-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 227.493093][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.493107][ T9] usb 5-1: Product: syz [ 227.493139][ T9] usb 5-1: Manufacturer: syz [ 227.493155][ T9] usb 5-1: SerialNumber: syz [ 227.496428][ T7734] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 227.512316][ T7732] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 228.256773][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 228.297300][ T9] usb 5-1: MIDIStreaming interface descriptor not found [ 229.078412][ T9] usb 5-1: USB disconnect, device number 9 [ 229.971731][ T7766] netlink: 'syz.3.585': attribute type 1 has an invalid length. [ 230.010115][ T7766] netlink: 'syz.3.585': attribute type 2 has an invalid length. [ 230.048999][ T7766] netlink: 20 bytes leftover after parsing attributes in process `syz.3.585'. [ 230.560443][ T7769] can: request_module (can-proto-0) failed. [ 230.584098][ T5934] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 230.633761][ T0] NOHZ tick-stop error: local softirq work is pending, handler #280!!! [ 230.763965][ T5934] usb 4-1: Using ep0 maxpacket: 16 [ 230.797215][ T5934] usb 4-1: config 0 has no interfaces? [ 230.835043][ T5934] usb 4-1: New USB device found, idVendor=12d1, idProduct=4d6d, bcdDevice=46.a6 [ 230.862804][ T5934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.897062][ T5934] usb 4-1: Product: syz [ 230.915364][ T5934] usb 4-1: Manufacturer: syz [ 230.936319][ T5934] usb 4-1: SerialNumber: syz [ 230.990539][ T5934] usb 4-1: config 0 descriptor?? [ 231.158623][ T30] audit: type=1800 audit(1773939281.206:3): pid=7786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.592" name="bus" dev="tmpfs" ino=598 res=0 errno=0 [ 232.096046][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 232.284096][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 232.306956][ T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 232.343625][ T9] usb 3-1: config 0 has no interface number 0 [ 232.395374][ T9] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 232.468098][ T9] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 50335, setting to 1024 [ 232.537813][ T9] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 232.590730][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.616159][ T5853] usb 4-1: USB disconnect, device number 11 [ 232.657792][ T9] usb 3-1: config 0 descriptor?? [ 232.699328][ T7798] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 232.745948][ T9] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 233.055250][ T7809] kvm: kvm [7808]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xffffffe70000c900 [ 233.072196][ T29] usb 3-1: USB disconnect, device number 12 [ 233.191393][ T7809] kvm: kvm [7808]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xffbf00000000 [ 233.230650][ T7809] kvm: kvm [7808]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xfff700001c00 [ 233.369185][ T7815] can: request_module (can-proto-0) failed. [ 235.323646][ T7849] netlink: 'syz.3.609': attribute type 1 has an invalid length. [ 235.354267][ T7849] netlink: 'syz.3.609': attribute type 2 has an invalid length. [ 235.373462][ T7849] netlink: 20 bytes leftover after parsing attributes in process `syz.3.609'. [ 235.402227][ T7847] trusted_key: encrypted_key: insufficient parameters specified [ 235.713891][ T5932] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 235.876735][ T29] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 235.896342][ T5932] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 235.928245][ T5932] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 235.961016][ T5932] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 235.988602][ T7859] kvm: kvm [7857]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x89fd0000d400 [ 235.999477][ T5932] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 236.015325][ T5932] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.032281][ T5932] usb 2-1: Product: syz [ 236.045057][ T5932] usb 2-1: Manufacturer: syz [ 236.052552][ T5932] usb 2-1: SerialNumber: syz [ 236.058024][ T7859] kvm: kvm [7857]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xfffd00005100 [ 236.058585][ T29] usb 4-1: Using ep0 maxpacket: 16 [ 236.083597][ T29] usb 4-1: config 0 has no interfaces? [ 236.092691][ T29] usb 4-1: New USB device found, idVendor=12d1, idProduct=4d6d, bcdDevice=46.a6 [ 236.103118][ T7859] kvm: kvm [7857]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 236.120626][ T5932] cdc_mbim 2-1:1.0: skipping garbage [ 236.128980][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.137715][ T5932] cdc_mbim 2-1:1.0: CDC Union missing and no IAD found [ 236.138027][ T7859] kvm: kvm [7857]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x60d000003f4 [ 236.145861][ T29] usb 4-1: Product: syz [ 236.158705][ T5932] cdc_mbim 2-1:1.0: bind() failure [ 236.159592][ T7859] kvm: kvm [7857]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 236.177506][ T29] usb 4-1: Manufacturer: syz [ 236.183280][ T29] usb 4-1: SerialNumber: syz [ 236.198307][ T29] usb 4-1: config 0 descriptor?? [ 236.336362][ T5853] usb 2-1: USB disconnect, device number 11 [ 237.639051][ T7889] netlink: 180 bytes leftover after parsing attributes in process `syz.0.625'. [ 238.148941][ T5934] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 238.337891][ T5905] usb 4-1: USB disconnect, device number 12 [ 238.395791][ T5934] usb 3-1: Using ep0 maxpacket: 32 [ 238.441134][ T5934] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.464718][ T5934] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 238.506110][ T5934] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 238.545812][ T5934] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 238.583024][ T5934] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 238.598368][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 238.608351][ T5934] usb 3-1: Product: syz [ 238.612588][ T5934] usb 3-1: Manufacturer: syz [ 238.617688][ T5934] usb 3-1: SerialNumber: syz [ 238.670316][ T5934] usb 3-1: config 0 descriptor?? [ 238.708814][ T5934] usb 3-1: no audio or video endpoints found [ 238.913343][ T5905] usb 3-1: USB disconnect, device number 13 [ 239.312424][ T7906] syzkaller1: entered promiscuous mode [ 239.320871][ T7906] syzkaller1: entered allmulticast mode [ 239.352550][ T7904] kvm: kvm [7903]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x89fd0000d400 [ 239.390814][ T7904] kvm: kvm [7903]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xfffd00005100 [ 239.408005][ T7904] kvm: kvm [7903]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 239.424745][ T7904] kvm: kvm [7903]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x60d000003f4 [ 239.455901][ T7904] kvm: kvm [7903]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 239.707934][ T7921] netlink: 12 bytes leftover after parsing attributes in process `syz.0.636'. [ 240.010542][ T7926] netlink: 'syz.2.637': attribute type 1 has an invalid length. [ 240.018413][ T7926] netlink: 'syz.2.637': attribute type 2 has an invalid length. [ 240.026306][ T7926] netlink: 20 bytes leftover after parsing attributes in process `syz.2.637'. [ 240.747398][ T5905] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 240.945337][ T5905] usb 3-1: Using ep0 maxpacket: 16 [ 240.967634][ T5905] usb 3-1: config 0 has no interfaces? [ 240.995864][ T5905] usb 3-1: New USB device found, idVendor=12d1, idProduct=4d6d, bcdDevice=46.a6 [ 241.031371][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.071125][ T5905] usb 3-1: Product: syz [ 241.090310][ T5905] usb 3-1: Manufacturer: syz [ 241.108933][ T5905] usb 3-1: SerialNumber: syz [ 241.146663][ T5905] usb 3-1: config 0 descriptor?? [ 242.093662][ T7953] syzkaller1: entered promiscuous mode [ 242.099450][ T7953] syzkaller1: entered allmulticast mode [ 242.371810][ T7955] kvm: kvm [7954]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x89fd0000d400 [ 242.389889][ T7955] kvm: kvm [7954]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xfffd00005100 [ 242.416899][ T7955] kvm: kvm [7954]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 242.446655][ T7955] kvm: kvm [7954]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x60d000003f4 [ 242.456034][ T7955] kvm: kvm [7954]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 242.799126][ T5905] usb 3-1: USB disconnect, device number 14 [ 242.948159][ T7978] netlink: 12 bytes leftover after parsing attributes in process `syz.2.655'. [ 243.189467][ T7974] can: request_module (can-proto-0) failed. [ 244.432857][ T8014] Cannot find del_set index 4 as target [ 244.789474][ T8013] kvm: kvm [8012]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xfcee0000cb42 [ 245.773094][ T8028] netlink: 'syz.3.666': attribute type 1 has an invalid length. [ 245.781170][ T8028] netlink: 'syz.3.666': attribute type 2 has an invalid length. [ 245.791341][ T8028] netlink: 20 bytes leftover after parsing attributes in process `syz.3.666'. [ 246.242725][ T8036] netlink: 12 bytes leftover after parsing attributes in process `syz.1.670'. [ 246.423828][ T5932] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 246.594046][ T5932] usb 4-1: Using ep0 maxpacket: 16 [ 246.601005][ T5932] usb 4-1: config 0 has no interfaces? [ 246.611427][ T5932] usb 4-1: New USB device found, idVendor=12d1, idProduct=4d6d, bcdDevice=46.a6 [ 246.611459][ T5932] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.611480][ T5932] usb 4-1: Product: syz [ 246.611495][ T5932] usb 4-1: Manufacturer: syz [ 246.611510][ T5932] usb 4-1: SerialNumber: syz [ 246.621996][ T5932] usb 4-1: config 0 descriptor?? [ 247.626962][ T8066] 9p: Bad value for 'rfdno' [ 248.180099][ T8082] netlink: 12 bytes leftover after parsing attributes in process `syz.1.683'. [ 248.597290][ T5934] usb 4-1: USB disconnect, device number 13 [ 249.182577][ T8102] netlink: 44 bytes leftover after parsing attributes in process `syz.3.689'. [ 250.294308][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 250.671234][ T8122] netlink: 12 bytes leftover after parsing attributes in process `syz.4.695'. [ 251.210572][ T8133] netlink: 'syz.2.697': attribute type 1 has an invalid length. [ 251.231712][ T8133] netlink: 'syz.2.697': attribute type 2 has an invalid length. [ 251.240213][ T8133] netlink: 20 bytes leftover after parsing attributes in process `syz.2.697'. [ 251.937035][ T8142] node ffff888057a06100 offset 0 parent ffff888057a05e40 shift 0 count 64 values 0 array ffff888079a8d920 list ffff888057a06118 ffff888057a06118 marks 0 0 0 [ 251.960586][ T8142] ------------[ cut here ]------------ [ 251.966362][ T8142] kernel BUG at ./include/linux/xarray.h:1441! [ 251.977569][ T8142] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 251.983895][ T8142] CPU: 0 UID: 0 PID: 8142 Comm: syz.3.700 Not tainted syzkaller #0 PREEMPT(full) [ 251.993120][ T8142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 252.003212][ T8142] RIP: 0010:collapse_scan_file+0x4f98/0x5230 [ 252.009268][ T8142] Code: ff 4c 89 e7 48 c7 c6 20 b2 dc 8b e8 72 52 f1 fe 90 0f 0b 48 85 db 0f 84 03 01 00 00 e8 41 e5 8f ff 48 89 df e8 89 90 7b 09 90 <0f> 0b e8 31 e5 8f ff 48 89 df 48 c7 c6 20 b2 dc 8b e8 42 52 f1 fe [ 252.028918][ T8142] RSP: 0018:ffffc9000504ee20 EFLAGS: 00010246 [ 252.035014][ T8142] RAX: 0000000000000000 RBX: ffff888057a06100 RCX: 470f5899bceae600 [ 252.043031][ T8142] RDX: ffffc9000f142000 RSI: 0000000000007c43 RDI: 0000000000007c44 [ 252.051013][ T8142] RBP: ffffc9000504f130 R08: ffffc9000504eba7 R09: 1ffff92000a09d74 [ 252.058996][ T8142] R10: dffffc0000000000 R11: fffff52000a09d75 R12: ffffea0001a3e2f0 [ 252.066981][ T8142] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffc9000504f010 [ 252.074959][ T8142] FS: 00007fbc5cc966c0(0000) GS:ffff888125436000(0000) knlGS:0000000000000000 [ 252.083912][ T8142] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 252.090527][ T8142] CR2: 0000001b31a23ffc CR3: 0000000038126000 CR4: 00000000003526f0 [ 252.098509][ T8142] Call Trace: [ 252.101821][ T8142] [ 252.104768][ T8142] ? collapse_scan_file+0x1c1/0x5230 [ 252.110070][ T8142] ? __pfx___schedule+0x10/0x10 [ 252.114939][ T8142] ? __pfx_collapse_scan_file+0x10/0x10 [ 252.120527][ T8142] ? __lock_acquire+0x6b5/0x2cf0 [ 252.125486][ T8142] ? schedule+0x16e/0x360 [ 252.129856][ T8142] ? __up_read+0x291/0x6b0 [ 252.134309][ T8142] ? __pfx___up_read+0x10/0x10 [ 252.139094][ T8142] collapse_single_pmd+0x22b/0x4510 [ 252.144327][ T8142] ? do_raw_spin_lock+0x12b/0x2f0 [ 252.149361][ T8142] ? __flush_work+0x100/0xc50 [ 252.154048][ T8142] ? __flush_work+0x100/0xc50 [ 252.158728][ T8142] ? __flush_work+0x100/0xc50 [ 252.163407][ T8142] ? __flush_work+0xab9/0xc50 [ 252.168107][ T8142] ? __pfx_collapse_single_pmd+0x10/0x10 [ 252.173763][ T8142] ? __flush_work+0x100/0xc50 [ 252.178478][ T8142] ? madvise_collapse+0x18c/0x820 [ 252.183518][ T8142] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 252.189159][ T8142] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 252.195155][ T8142] madvise_collapse+0x34c/0x820 [ 252.200033][ T8142] madvise_vma_behavior+0x1094/0x4460 [ 252.205440][ T8142] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 252.211169][ T8142] ? __lock_acquire+0x6b5/0x2cf0 [ 252.216125][ T8142] ? unwind_next_frame+0xa5/0x23c0 [ 252.221259][ T8142] ? is_bpf_text_address+0x26/0x2b0 [ 252.226475][ T8142] ? is_bpf_text_address+0x292/0x2b0 [ 252.231795][ T8142] ? is_bpf_text_address+0x26/0x2b0 [ 252.237090][ T8142] ? kernel_text_address+0xa5/0xe0 [ 252.242227][ T8142] ? __kernel_text_address+0xd/0x30 [ 252.247463][ T8142] ? unwind_get_return_address+0x4d/0x90 [ 252.253125][ T8142] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 252.259298][ T8142] ? arch_stack_walk+0xfb/0x150 [ 252.264162][ T8142] ? mas_prev_slot+0xb7b/0xbf0 [ 252.268977][ T8142] ? find_vma_prev+0x123/0x1b0 [ 252.273759][ T8142] ? __pfx_find_vma_prev+0x10/0x10 [ 252.278908][ T8142] ? file_ioctl+0x273/0x860 [ 252.283422][ T8142] madvise_walk_vmas+0x573/0xae0 [ 252.288386][ T8142] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 252.293885][ T8142] ? blk_start_plug+0x6e/0x1b0 [ 252.298669][ T8142] madvise_do_behavior+0x386/0x540 [ 252.303812][ T8142] ? __pfx_madvise_do_behavior+0x10/0x10 [ 252.309477][ T8142] ? down_read+0x270/0x2e0 [ 252.313906][ T8142] ? madvise_lock+0x146/0x2e0 [ 252.318607][ T8142] do_madvise+0x1fa/0x2e0 [ 252.322956][ T8142] ? __pfx_do_madvise+0x10/0x10 [ 252.327832][ T8142] ? rcu_is_watching+0x15/0xb0 [ 252.332605][ T8142] ? __pfx_kcov_ioctl+0x10/0x10 [ 252.337465][ T8142] __x64_sys_madvise+0xa6/0xc0 [ 252.342248][ T8142] do_syscall_64+0x14d/0xf80 [ 252.346864][ T8142] ? trace_irq_disable+0x3b/0x150 [ 252.351923][ T8142] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.358004][ T8142] ? clear_bhb_loop+0x40/0x90 [ 252.362733][ T8142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.368631][ T8142] RIP: 0033:0x7fbc5bd9c799 [ 252.373064][ T8142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.392690][ T8142] RSP: 002b:00007fbc5cc96028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 252.401110][ T8142] RAX: ffffffffffffffda RBX: 00007fbc5c016090 RCX: 00007fbc5bd9c799 [ 252.409108][ T8142] RDX: 0000000000000019 RSI: 0000000000600003 RDI: 0000200000000000 [ 252.417088][ T8142] RBP: 00007fbc5be32c99 R08: 0000000000000000 R09: 0000000000000000 [ 252.425072][ T8142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 252.433060][ T8142] R13: 00007fbc5c016128 R14: 00007fbc5c016090 R15: 00007ffca7d03cd8 [ 252.441096][ T8142] [ 252.444165][ T8142] Modules linked in: [ 252.449040][ T8142] ---[ end trace 0000000000000000 ]--- [ 252.459823][ T8142] RIP: 0010:collapse_scan_file+0x4f98/0x5230 [ 252.465947][ T8142] Code: ff 4c 89 e7 48 c7 c6 20 b2 dc 8b e8 72 52 f1 fe 90 0f 0b 48 85 db 0f 84 03 01 00 00 e8 41 e5 8f ff 48 89 df e8 89 90 7b 09 90 <0f> 0b e8 31 e5 8f ff 48 89 df 48 c7 c6 20 b2 dc 8b e8 42 52 f1 fe [ 252.485968][ T8142] RSP: 0018:ffffc9000504ee20 EFLAGS: 00010246 [ 252.492638][ T8142] RAX: 0000000000000000 RBX: ffff888057a06100 RCX: 470f5899bceae600 [ 252.500914][ T8142] RDX: ffffc9000f142000 RSI: 0000000000007c43 RDI: 0000000000007c44 [ 252.509614][ T8142] RBP: ffffc9000504f130 R08: ffffc9000504eba7 R09: 1ffff92000a09d74 [ 252.518090][ T8142] R10: dffffc0000000000 R11: fffff52000a09d75 R12: ffffea0001a3e2f0 [ 252.527176][ T8142] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffc9000504f010 [ 252.535507][ T8142] FS: 00007fbc5cc966c0(0000) GS:ffff888125436000(0000) knlGS:0000000000000000 [ 252.544650][ T8142] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 252.552207][ T8142] CR2: 00007f9d6a7e9e80 CR3: 0000000038126000 CR4: 00000000003526f0 [ 252.560707][ T8142] Kernel panic - not syncing: Fatal exception [ 252.567389][ T8142] Kernel Offset: disabled [ 252.571949][ T8142] Rebooting in 86400 seconds..