last executing test programs: 12.60092163s ago: executing program 4 (id=183): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0x7, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r4, {}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0xa}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x850}, 0x4048080) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) 12.208711009s ago: executing program 3 (id=184): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) execveat(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x1000) name_to_handle_at(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=@FILEID_BTRFS_WITH_PARENT_ROOT={0x28, 0x4e, {0x9, 0x80, 0x3e, 0x7, 0x0, 0x1}}, &(0x7f00000001c0), 0x0) 11.517079467s ago: executing program 3 (id=186): connect$inet(0xffffffffffffffff, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock2(&(0x7f000051a000/0x3000)=nil, 0x3000, 0x1) munlockall() madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x14) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, 0x0, 0x4000004) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4800}, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr/prev\x00') openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) 11.444720792s ago: executing program 4 (id=187): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) 10.853635705s ago: executing program 4 (id=189): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x801) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) eventfd2(0x7f, 0x801) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x8000) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100036756a42015140020982b0102030109021b00020c0630ea0904b70c003f7d0f060904e5"], &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 10.198184166s ago: executing program 3 (id=191): r0 = socket$netlink(0x10, 0x3, 0x10) syz_clone(0x11, 0x0, 0xb, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x35, 0x2, @thr={0x0, &(0x7f0000000380)="2a790024371687b4d2f76c3dcd45319dae360fcb5ac4e467ebfe4ba9dfb84c713c2d632e76bf2f022d005028ea4fe0e558a0f7"}}, 0x0) r1 = gettid() kcmp(r1, 0x0, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101701) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8, 0x12, 0xfffffffc}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001435010026bd0c333c84df250a4022fe", @ANYRES32, @ANYBLOB="140006000000000005"], 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0) fcntl$notify(r3, 0x402, 0x20) r4 = socket$inet6(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090527bd7000fddbdf25021f00cb", @ANYRES32=r6, @ANYBLOB="080004006401010408000800ec00000008000200e0000065080001007f00000108000a0000000000080009"], 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendto$inet6(r4, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x80800) sendmmsg$alg(r8, &(0x7f0000004dc0)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000200)="11326d384a805032", 0x8}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r2, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) 8.359152588s ago: executing program 1 (id=195): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newqdisc={0x170, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x0, 0x1ff, 0x72, 0x8, 0x2, 0x1, 0xfffffffa, 0x6f2, 0x9, 0xb00, 0x17, 0xb, 0x1c, 0x8, 0x7, 0x1}}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000140)="bad330fbc9b5544972e7a5", 0xb, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r6, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) sendto$packet(r7, &(0x7f0000000480)="c1858aec1d0a21756f66b4805f3a", 0xe, 0x40000, &(0x7f0000000240)={0x11, 0xf8, r6, 0x1, 0x5, 0x6, @random="24f51e8e0a5a"}, 0x14) 8.231042612s ago: executing program 3 (id=196): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x134, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@multicast2, 0x0, 0x32}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x134}}, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(r0) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1000}], 0x1, 0x0, 0x0, 0x0) 7.251274487s ago: executing program 1 (id=197): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0x7, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r4, {}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0xa}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x850}, 0x4048080) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) 6.211281105s ago: executing program 4 (id=200): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r0 = gettid() capset(&(0x7f0000000040)={0x399f1316, r0}, &(0x7f0000000140)={0xcc9e, 0x26cc82c8, 0x7, 0x12518a60, 0x7, 0x9}) getdents(0xffffffffffffffff, &(0x7f0000000300)=""/233, 0xe9) ioctl$BLKCRYPTOGENERATEKEY(0xffffffffffffffff, 0xc030128a, &(0x7f00000002c0)={&(0x7f0000000400)=""/84, 0x54}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) ioctl$HIDIOCGFEATURE(r1, 0xc0404807, &(0x7f0000000940)={0xd, "95bc9233a0ffadb335984bb3280b7840ca36304441bfb8b79ebdfe0534843f462a2e51c23b47519839c74c89785759d861f0cbab603459d543d8937b4693682b"}) write$hidraw(r1, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058d"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 6.014203999s ago: executing program 1 (id=202): sched_setscheduler(0x0, 0x1, 0x0) r0 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r0, 0x80079a0) sendfile(r0, r0, 0x0, 0x7e78a6f1) fcntl$addseals(r0, 0x409, 0xc) 5.925540612s ago: executing program 2 (id=203): pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet(r1, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) sendmmsg$inet(r1, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000080)="b5", 0x1}, {&(0x7f0000000200)="02", 0x1}, {&(0x7f0000000340)="01", 0x1}, {&(0x7f0000000400)='Q', 0x1}, {&(0x7f0000000500)="d7", 0x1}, {&(0x7f0000000440)="0a653493a92529c3c575b8c153ee1e6d12d50dca5715aff47ffa379e19fe81603a51", 0x22}, {&(0x7f0000000100)=')', 0x1}, {&(0x7f0000000180)='<', 0x1}], 0x8}}, {{0x0, 0x0, &(0x7f0000004100)=[{&(0x7f00000004c0)="db", 0x1}, {&(0x7f0000001a40)="5c8c56b4ef4b478bf9b431ece6b2d8bdf4abffaee5e1138ba457a84eec31c9fdec2e274f512ea28c50a9c25214a70c6582928702c1116955bbeb327a89cc181a2bba5a572cf813a2619731ddffd8564bcf36d365cf5292989d9e186920c1229e12c006db1d590be12125bea3b9f0484e445b75da02486b2258c270fc864e6cca131ebb987f1a1c94b00228f9674d8a3af8920957bb79b18a43d7845d07da9cbd606cfadeefaf79873f32a0f0b25f55b71c62992ae0a3c2b8971184735d18d37f600de6bc84cbe7b097df1d8532c8e1e111323f61c542d743b0dd583d9e24f06472bc958931dd1ff3008825260385bfcd5250de2546a6ff22e4fab1ab39e0e2ccb19c506aae9ff404c5054b930aafcd6a35ae51c499fc2e535d719dcb5b465a7e25b245aabca1cc62bfa0fded3d066ef4fdaddfe30bc8de62a3d3c41838e6969f1f8a965e0712b4a62e16d2162b576ce12c0135a94b84199e55d1acc00684f0027aa3d91ad483c00100535cb08f7ec2ef9ccc67b85da92968a8bfd90926f3fbfda59093c4181058c6e24149ef74ad8d3b3b75c4b82fe212ac4605a3b75c6d9c7e526892d59c8762b10d8d6eb1b7f05f896abc89d89e6a0456e164fb2a9054cb60ca35ec3a46986b71b32b2e7d2a66049d508d01ce88d082375179d4be44123778067b08bc1b53372f805f60bbf79a38508fb1215527a67e8b2f06e2bf684c894d2a42724037ef20a91ec4c315ad86d2d496b914a02424a74fce888d601ab281f7a5e8e67ca119055c1b", 0x229}], 0x2}}], 0x2, 0x4008440) 5.276064632s ago: executing program 2 (id=204): r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000100)={0x0, 0x7, 0x7, &(0x7f0000000080)={0x11, "a73b6cd937b8a60b7d166e63a88d79c999dbc9fa29b475a3a9f393d5189793be0b"}}) 5.193668638s ago: executing program 1 (id=205): r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b122ebbff6884b3de82f8a3df9a2d0b67e46c349917110300b94240185146e52ac1540130161b6534e99e466173af4c775f238fae344b198915446b576be455f251e79f7ec703f937cd8530410f3700000000000000", 0x90, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 5.183151957s ago: executing program 0 (id=206): r0 = socket$netlink(0x10, 0x3, 0x10) syz_clone(0x11, 0x0, 0xb, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x35, 0x2, @thr={0x0, &(0x7f0000000380)="2a790024371687b4d2f76c3dcd45319dae360fcb5ac4e467ebfe4ba9dfb84c713c2d632e76bf2f022d005028ea4fe0e558a0f7"}}, 0x0) r1 = gettid() kcmp(r1, 0x0, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101701) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8, 0x12, 0xfffffffc}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001435010026bd0c333c84df250a4022fe", @ANYRES32, @ANYBLOB="140006000000000005"], 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0) fcntl$notify(r3, 0x402, 0x20) r4 = socket$inet6(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090527bd7000fddbdf25021f00cb", @ANYRES32=r6, @ANYBLOB="080004006401010408000800ec00000008000200e0000065080001007f00000108000a0000000000080009"], 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendto$inet6(r4, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x80800) sendmmsg$alg(r8, &(0x7f0000004dc0)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000200)="11326d384a805032", 0x8}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r2, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) 4.764044145s ago: executing program 2 (id=207): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newqdisc={0x170, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x0, 0x1ff, 0x72, 0x8, 0x2, 0x1, 0xfffffffa, 0x6f2, 0x9, 0xb00, 0x17, 0xb, 0x1c, 0x8, 0x7, 0x1}}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000140)="bad330fbc9b5544972e7a5", 0xb, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r6, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) sendto$packet(r7, &(0x7f0000000480)="c1858aec1d0a21756f66b4805f3a", 0xe, 0x40000, &(0x7f0000000240)={0x11, 0xf8, r6, 0x1, 0x5, 0x6, @random="24f51e8e0a5a"}, 0x14) 4.591579497s ago: executing program 3 (id=208): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x80) ioctl$FIONREAD(r0, 0x541b, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) r2 = syz_usb_connect(0x0, 0x48, &(0x7f0000000a40)=ANY=[@ANYBLOB="1201000022546940fa0ae803d0990102030109023600010000000009047500038cbb2a0009050a00100001000009058803"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000002740)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="40098e00000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r2, 0x0, &(0x7f0000000480)={0x24, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x28, 0x0, &(0x7f0000000280)=[@release={0x40046306, 0x2}, @dead_binder_done, @release={0x40046306, 0x2}, @free_buffer], 0x0, 0x0, 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x14, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0xa4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$UHID_CREATE2(r5, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r6, 0xc0404806, 0x0) write$UHID_SET_REPORT_REPLY(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="0e"], 0xc) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000000580)={{0xe000, 0x50000, 0xf, 0xf, 0xf3, 0x0, 0x0, 0x40, 0xf, 0x2, 0x9, 0xe6}, {0xf000, 0x8000000, 0x10, 0x9, 0x2, 0x4, 0x3, 0x84, 0x9, 0x3, 0x8, 0xc2}, {0x60000, 0x25000, 0x10, 0x7, 0x5, 0xfc, 0x10, 0x26, 0x10, 0x9, 0x1a, 0x7}, {0x50000, 0xe000, 0xb, 0x7, 0x1, 0x4, 0xc0, 0x3, 0x80, 0x3, 0x4c, 0x81}, {0x5a000, 0x2000, 0xa, 0x7f, 0x2, 0xa8, 0x9, 0x3, 0x5, 0x3, 0x3, 0x75}, {0x10000, 0x100000, 0x8, 0xed, 0x3, 0x80, 0x16, 0xff, 0x3, 0x3, 0x1, 0x8}, {0xc000, 0x8080000, 0x8, 0x2, 0xf, 0xd, 0x2, 0x94, 0xc, 0x7, 0x9, 0x1}, {0x41000, 0xfec00000, 0x3, 0x5, 0x1, 0x7, 0x2, 0xb, 0x10, 0x1, 0xc9, 0x2}, {0x2000, 0xf7}, {0xd000, 0x1}, 0x9, 0x0, 0x2000, 0x0, 0xe, 0x1000, 0x70000, [0x0, 0x2, 0x2, 0x200]}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000933000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000500)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x1e01, 0x1e01, 0xfffff9, 0x80000440], 0x0, 0x0, &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0xe0) 4.586437147s ago: executing program 1 (id=209): unshare(0x22020600) socket(0x1d, 0x2, 0x6) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) execveat(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x1000) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000e3a000/0x2000)=nil, 0x2000, 0x17) move_pages(0x0, 0x2, &(0x7f0000000040)=[&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil], &(0x7f0000002640)=[0x1], 0x0, 0x0) r1 = socket(0x2b, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='sched\x00') read$FUSE(r3, &(0x7f0000002540)={0x2020}, 0x2020) r4 = landlock_create_ruleset(&(0x7f0000000140)={0x2d1d, 0x2}, 0x10, 0x0) landlock_restrict_self(r4, 0x0) 3.585386511s ago: executing program 1 (id=210): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x801) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) eventfd2(0x7f, 0x801) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x8000) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100036756a42015140020982b0102030109021b00020c0630ea0904b70c003f7d0f060904e5"], &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 3.56535148s ago: executing program 0 (id=211): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {0x0}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) sendto$inet6(r0, 0x0, 0x0, 0x4bb99a92e099cd3a, 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) pread64(0xffffffffffffffff, 0x0, 0x0, 0x8001) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000440), 0xc, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x8c10) 3.086119745s ago: executing program 4 (id=212): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x9640, 0x0) read$dsp(r0, &(0x7f0000000240)=""/197, 0xc5) ppoll(&(0x7f0000000380)=[{r0}], 0x1, 0x0, 0x0, 0x0) 2.918117325s ago: executing program 0 (id=213): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) ioctl$TCSETS(0xffffffffffffffff, 0x5432, 0x0) 2.914924332s ago: executing program 2 (id=214): pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet(r1, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) sendmmsg$inet(r1, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000080)="b5", 0x1}, {&(0x7f0000000200)="02", 0x1}, {&(0x7f0000000340)="01", 0x1}, {&(0x7f0000000400)='Q', 0x1}, {&(0x7f0000000500)="d7", 0x1}, {&(0x7f0000000440)="0a653493a92529c3c575b8c153ee1e6d12d50dca5715aff47ffa379e19fe81603a51", 0x22}, {&(0x7f0000000100)=')', 0x1}, {&(0x7f0000000180)='<', 0x1}], 0x8}}, {{0x0, 0x0, &(0x7f0000004100)=[{&(0x7f00000004c0)="db", 0x1}, {&(0x7f0000001a40)="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", 0x1cd}], 0x2}}], 0x2, 0x4008440) 2.588346604s ago: executing program 0 (id=215): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000003b80)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x8, @mcast1}, 0x1c, 0x0}}], 0x1, 0x4001c00) 2.235430661s ago: executing program 2 (id=216): r0 = socket$kcm(0x11, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x9102}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40480, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000895}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0xfffffffe, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x7fffffff, 0x6361, 0x5, 0xffffffff, 0x56}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x101}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x300, 0x0, 0x3e}, 0x80, &(0x7f0000002580)=[{&(0x7f0000000180)="27030200590214000600006fb96dbcf706e10500000086ddffff1144ee1611", 0x1f}, {&(0x7f0000000f00)="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", 0x110}, {&(0x7f0000000240)="acf7aad9756b30b5270e3f3cdf07e0a9dcad2900fbdd735362e4bc61914f291a898418ceeb9c7b62b2150c93a629d18e5a5032b098de85cda1f19e1479f35d4189", 0x41}, {&(0x7f00000022c0)}, {&(0x7f00000002c0)="55c28d3d76efaa", 0x7}, {&(0x7f0000001180)="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", 0x236}], 0x6}, 0x4104) 1.98082246s ago: executing program 0 (id=217): r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000100)={0x0, 0x7, 0x7, &(0x7f0000000080)={0x11, "a73b6cd937b8a60b7d166e63a88d79c999dbc9fa29b475a3a9f393d5189793be0b"}}) 1.525564481s ago: executing program 4 (id=218): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x134, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@multicast2, 0x0, 0x32}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x134}}, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(r0) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x1000}], 0x1, 0x0, 0x0, 0x0) 1.258659824s ago: executing program 0 (id=219): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000340)=ANY=[@ANYBLOB="071101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000080)={0x0, 0x2, 0x4, &(0x7f0000000000)={0x11, "911abe91131444c214b5363f2fa313c4c0056737c50400070000005efb6d7d73ec"}}) 802.388306ms ago: executing program 2 (id=220): unshare(0x22020600) socket(0x1d, 0x2, 0x6) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) execveat(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x1000) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000e3a000/0x2000)=nil, 0x2000, 0x17) move_pages(0x0, 0x2, &(0x7f0000000040)=[&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil], &(0x7f0000002640)=[0x1], 0x0, 0x0) r1 = socket(0x2b, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='sched\x00') read$FUSE(r3, &(0x7f0000002540)={0x2020}, 0x2020) landlock_restrict_self(0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=221): r0 = socket$netlink(0x10, 0x3, 0x10) syz_clone(0x11, 0x0, 0xb, 0x0, 0x0, 0x0) r1 = syz_clone(0x808000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = gettid() kcmp(r2, r1, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101701) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8, 0x12, 0xfffffffc}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001435010026bd0c333c84df250a4022fe", @ANYRES32, @ANYBLOB="140006000000000005"], 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0) fcntl$notify(r4, 0x402, 0x20) r5 = socket$inet6(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090527bd7000fddbdf25021f00cb", @ANYRES32=r7, @ANYBLOB="080004006401010408000800ec00000008000200e0000065080001007f00000108000a0000000000080009"], 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000"], 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendto$inet6(r5, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = accept4(r8, 0x0, 0x0, 0x80800) sendmmsg$alg(r9, &(0x7f0000004dc0)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000200)="11326d384a805032", 0x8}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r3, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.78' (ED25519) to the list of known hosts. [ 160.914772][ T5563] cgroup: Unknown subsys name 'net' [ 161.035424][ T5563] cgroup: Unknown subsys name 'cpuset' [ 161.049311][ T5563] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 166.749387][ T5563] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 170.976113][ T5582] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 170.988770][ T5585] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 170.999450][ T5585] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 171.015244][ T5585] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 171.027977][ T5585] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 171.046421][ T5585] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 171.054165][ T5585] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 171.063265][ T5585] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 171.077982][ T5585] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 171.093488][ T5590] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 171.102947][ T5591] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 171.104289][ T5590] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 171.117078][ T5591] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 171.125758][ T5590] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 171.150455][ T5590] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 171.203303][ T5591] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 171.219140][ T5591] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 171.229318][ T5591] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 171.246266][ T5591] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 171.258302][ T4876] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 171.289804][ T5582] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 171.304045][ T5582] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 171.314159][ T5582] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 171.328676][ T5582] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 171.343103][ T5582] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 173.156738][ T5591] Bluetooth: hci0: command tx timeout [ 173.160365][ T5582] Bluetooth: hci2: command tx timeout [ 173.237758][ T5582] Bluetooth: hci1: command tx timeout [ 173.317714][ T5582] Bluetooth: hci3: command tx timeout [ 173.397713][ T5582] Bluetooth: hci4: command tx timeout [ 175.238367][ T5582] Bluetooth: hci0: command tx timeout [ 175.239304][ T5591] Bluetooth: hci2: command tx timeout [ 175.317804][ T5591] Bluetooth: hci1: command tx timeout [ 175.390829][ T5593] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.398535][ T5591] Bluetooth: hci3: command tx timeout [ 175.419682][ T5593] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.439664][ T5593] bridge_slave_0: entered allmulticast mode [ 175.466661][ T5593] bridge_slave_0: entered promiscuous mode [ 175.477980][ T5591] Bluetooth: hci4: command tx timeout [ 175.586479][ T5593] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.594718][ T5593] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.605488][ T5593] bridge_slave_1: entered allmulticast mode [ 175.615708][ T5593] bridge_slave_1: entered promiscuous mode [ 175.663495][ T5581] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.672104][ T5581] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.679809][ T5581] bridge_slave_0: entered allmulticast mode [ 175.688226][ T5581] bridge_slave_0: entered promiscuous mode [ 175.792378][ T5581] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.800204][ T5581] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.807845][ T5581] bridge_slave_1: entered allmulticast mode [ 175.815956][ T5581] bridge_slave_1: entered promiscuous mode [ 175.846288][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.853631][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.861200][ T5596] bridge_slave_0: entered allmulticast mode [ 175.869288][ T5596] bridge_slave_0: entered promiscuous mode [ 175.909524][ T5593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.965751][ T5596] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.973798][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.981668][ T5596] bridge_slave_1: entered allmulticast mode [ 175.989714][ T5596] bridge_slave_1: entered promiscuous mode [ 175.999439][ T5583] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.007048][ T5583] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.014469][ T5583] bridge_slave_0: entered allmulticast mode [ 176.023311][ T5583] bridge_slave_0: entered promiscuous mode [ 176.040496][ T5593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.073791][ T5587] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.081448][ T5587] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.089016][ T5587] bridge_slave_0: entered allmulticast mode [ 176.097396][ T5587] bridge_slave_0: entered promiscuous mode [ 176.133174][ T5583] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.140858][ T5583] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.148708][ T5583] bridge_slave_1: entered allmulticast mode [ 176.157223][ T5583] bridge_slave_1: entered promiscuous mode [ 176.198362][ T5581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.208271][ T5587] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.215690][ T5587] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.223648][ T5587] bridge_slave_1: entered allmulticast mode [ 176.231681][ T5587] bridge_slave_1: entered promiscuous mode [ 176.313758][ T5581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.351862][ T5596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.405170][ T5593] team0: Port device team_slave_0 added [ 176.479986][ T5596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.496899][ T5583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.516859][ T5593] team0: Port device team_slave_1 added [ 176.553166][ T5587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.592456][ T5583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.629890][ T5581] team0: Port device team_slave_0 added [ 176.642943][ T5587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.722863][ T5581] team0: Port device team_slave_1 added [ 176.758658][ T5596] team0: Port device team_slave_0 added [ 176.788383][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.795790][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 176.822112][ T5593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.883741][ T5596] team0: Port device team_slave_1 added [ 176.895644][ T5583] team0: Port device team_slave_0 added [ 176.904155][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.911383][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 176.937921][ T5593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.980580][ T5587] team0: Port device team_slave_0 added [ 177.016735][ T5583] team0: Port device team_slave_1 added [ 177.041518][ T5581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.048719][ T5581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.074853][ T5581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.094301][ T5587] team0: Port device team_slave_1 added [ 177.147818][ T5581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.154867][ T5581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.181243][ T5581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.217752][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.224812][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.251014][ T5596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.290186][ T5583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.297612][ T5583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.324055][ T5583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.325346][ T5591] Bluetooth: hci0: command tx timeout [ 177.336387][ T5582] Bluetooth: hci2: command tx timeout [ 177.396766][ T5582] Bluetooth: hci1: command tx timeout [ 177.408763][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.415918][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.442652][ T5596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.476368][ T5582] Bluetooth: hci3: command tx timeout [ 177.478691][ T5583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.489049][ T5583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.515338][ T5583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.545867][ T5587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.553106][ T5587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.579502][ T5587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.586806][ T5582] Bluetooth: hci4: command tx timeout [ 177.663340][ T5587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.671254][ T5587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 177.697666][ T5587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.723778][ T5593] hsr_slave_0: entered promiscuous mode [ 177.732155][ T5593] hsr_slave_1: entered promiscuous mode [ 177.802865][ T5581] hsr_slave_0: entered promiscuous mode [ 177.811248][ T5581] hsr_slave_1: entered promiscuous mode [ 177.819267][ T5581] debugfs: 'hsr0' already exists in 'hsr' [ 177.825103][ T5581] Cannot create hsr debugfs directory [ 177.923364][ T5583] hsr_slave_0: entered promiscuous mode [ 177.933121][ T5583] hsr_slave_1: entered promiscuous mode [ 177.941532][ T5583] debugfs: 'hsr0' already exists in 'hsr' [ 177.947564][ T5583] Cannot create hsr debugfs directory [ 178.038340][ T5596] hsr_slave_0: entered promiscuous mode [ 178.047232][ T5596] hsr_slave_1: entered promiscuous mode [ 178.054663][ T5596] debugfs: 'hsr0' already exists in 'hsr' [ 178.060590][ T5596] Cannot create hsr debugfs directory [ 178.202848][ T5587] hsr_slave_0: entered promiscuous mode [ 178.211232][ T5587] hsr_slave_1: entered promiscuous mode [ 178.219330][ T5587] debugfs: 'hsr0' already exists in 'hsr' [ 178.225171][ T5587] Cannot create hsr debugfs directory [ 179.397747][ T5582] Bluetooth: hci2: command tx timeout [ 179.403449][ T5591] Bluetooth: hci0: command tx timeout [ 179.420511][ T5593] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 179.443787][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 179.457957][ T5593] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 179.477168][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 179.486682][ T5582] Bluetooth: hci1: command tx timeout [ 179.488389][ T5593] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 179.508000][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 179.519577][ T5593] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 179.537572][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 179.557829][ T5582] Bluetooth: hci3: command tx timeout [ 179.638719][ T5582] Bluetooth: hci4: command tx timeout [ 179.669708][ T5581] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 179.690283][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 179.700214][ T5581] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 179.716960][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 179.728047][ T5581] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 179.749138][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 179.761436][ T5581] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 179.781306][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 179.994353][ T5583] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 180.023344][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 180.048132][ T5583] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 180.066669][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 180.102746][ T5583] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 180.121029][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 180.134856][ T5583] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 180.153194][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 180.338273][ T5596] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 180.356653][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 180.387186][ T5596] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 180.412135][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 180.454250][ T5596] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 180.471548][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 180.481826][ T5596] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 180.499761][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 180.675404][ T5587] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 180.695829][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 180.740848][ T5587] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 180.759588][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 180.784339][ T5593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.813763][ T5587] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 180.831887][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 180.855307][ T5587] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 180.875730][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 181.025072][ T5593] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.060736][ T5581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.110163][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.117742][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.212032][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.219419][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.294515][ T5581] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.384654][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.392036][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.447486][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.454913][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.493129][ T5583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.683499][ T5596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.770329][ T5583] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.884422][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.891981][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.987335][ T5596] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.033690][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.041240][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.119344][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.126875][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.223759][ T5587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.251026][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.258575][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.510849][ T5587] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.670165][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.677664][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.799048][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.806567][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.244472][ T5593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.715512][ T5581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.025239][ T5593] veth0_vlan: entered promiscuous mode [ 185.214233][ T5593] veth1_vlan: entered promiscuous mode [ 185.477124][ T5581] veth0_vlan: entered promiscuous mode [ 185.661070][ T5581] veth1_vlan: entered promiscuous mode [ 185.833217][ T5593] veth0_macvtap: entered promiscuous mode [ 185.894030][ T5583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.988431][ T5596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.000061][ T5593] veth1_macvtap: entered promiscuous mode [ 186.289808][ T5587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.432353][ T5581] veth0_macvtap: entered promiscuous mode [ 186.455815][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.564668][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.581897][ T5581] veth1_macvtap: entered promiscuous mode [ 186.695160][ T5699] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.705368][ T5699] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.754850][ T5699] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.768231][ T5699] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.904055][ T5581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.010457][ T5581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.034260][ T5583] veth0_vlan: entered promiscuous mode [ 187.108676][ T5699] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.122867][ T5699] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.135643][ T5587] veth0_vlan: entered promiscuous mode [ 187.170222][ T5699] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.180906][ T5699] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.272167][ T5583] veth1_vlan: entered promiscuous mode [ 187.425175][ T5587] veth1_vlan: entered promiscuous mode [ 187.623914][ T5596] veth0_vlan: entered promiscuous mode [ 187.774862][ T5583] veth0_macvtap: entered promiscuous mode [ 187.819273][ T5596] veth1_vlan: entered promiscuous mode [ 187.863649][ T5583] veth1_macvtap: entered promiscuous mode [ 188.009763][ T5587] veth0_macvtap: entered promiscuous mode [ 188.103254][ T5587] veth1_macvtap: entered promiscuous mode [ 188.215777][ T5583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.304358][ T5583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.448711][ T5596] veth0_macvtap: entered promiscuous mode [ 188.459690][ T56] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.470807][ T56] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.506171][ T5587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.528148][ T56] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.560946][ T56] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.606671][ T5596] veth1_macvtap: entered promiscuous mode [ 188.709076][ T5587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.888642][ T56] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.924765][ T56] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.963008][ T56] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.005522][ T56] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.132273][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.218098][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.342152][ T140] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.375253][ T140] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.403953][ T140] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.440098][ T140] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.701615][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.764851][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.025786][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.058816][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.649733][ T5593] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 192.371068][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.411020][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.651004][ T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.677647][ T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 194.158116][ T5846] mmap: syz.3.6 (5846) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 198.608128][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.664856][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.166863][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.174861][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.230294][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.244550][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.510222][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.525612][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.794760][ T143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.825889][ T5862] Zero length message leads to an empty skb [ 201.835626][ T143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.309506][ T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.343259][ T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.853925][ T5865] binder: 5863:5865 ioctl c0207511 80000400 returned -22 [ 203.309104][ T5874] fuse: Bad value for 'fd' [ 204.184429][ T5680] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 204.356697][ T5680] usb 2-1: Using ep0 maxpacket: 32 [ 204.402101][ T5680] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 204.439593][ T5680] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.480509][ T5680] usb 2-1: Product: syz [ 204.498634][ T5680] usb 2-1: Manufacturer: syz [ 204.515142][ T5680] usb 2-1: SerialNumber: syz [ 204.562362][ T5680] usb 2-1: config 0 descriptor?? [ 204.767699][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.784298][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.898424][ T5680] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: version d4.15 found at bus 002 address 002 [ 205.091272][ T5898] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 205.098947][ T5898] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 205.102458][ T5884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.184512][ T5884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.517504][ T5680] usb 2-1: USB disconnect, device number 2 [ 205.557498][ T5884] i2c i2c-1: failure writing data [ 207.944299][ T5975] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21'. [ 207.994740][ T5975] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21'. [ 208.804287][ T5987] netlink: 16 bytes leftover after parsing attributes in process `syz.1.26'. [ 208.833456][ T5983] binder: 5981:5983 ioctl c0207511 80000400 returned -22 [ 209.932546][ T5997] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 209.940012][ T5997] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 210.406476][ T5677] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 210.610666][ T5677] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.682182][ T5677] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.722963][ T5677] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 210.754670][ T5677] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.804376][ T5677] usb 3-1: config 0 descriptor?? [ 210.882610][ T6010] netlink: 4 bytes leftover after parsing attributes in process `syz.0.34'. [ 211.286394][ T5677] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 211.349155][ T5677] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 211.474610][ T5677] cp2112 0003:10C4:EA90.0001: error requesting version [ 211.580908][ T6010] syzkaller0: entered promiscuous mode [ 211.614067][ T6016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.658298][ T6010] syzkaller0: entered allmulticast mode [ 211.673111][ T6016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.683422][ T5680] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 211.754555][ T5677] cp2112 0003:10C4:EA90.0001: probe with driver cp2112 failed with error -32 [ 211.819310][ T5677] usb 3-1: USB disconnect, device number 2 [ 211.907946][ T5680] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 211.970583][ T5680] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 169, setting to 64 [ 212.016533][ T5680] usb 4-1: config 0 interface 0 has no altsetting 0 [ 212.054177][ T6014] fido_id[6014]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 212.057287][ T5680] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 212.103150][ T5680] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 212.124357][ T5680] usb 4-1: Product: syz [ 212.134714][ T5680] usb 4-1: Manufacturer: syz [ 212.153523][ T5680] usb 4-1: SerialNumber: syz [ 212.212482][ T5680] usb 4-1: config 0 descriptor?? [ 212.228471][ T6013] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 212.292552][ T5680] usb 4-1: selecting invalid altsetting 0 [ 212.708123][ T6013] usb 4-1: BOGUS urb xfer, pipe 0 != type 1 [ 212.774533][ T6020] netlink: 4 bytes leftover after parsing attributes in process `syz.4.36'. [ 212.980674][ T5680] usb 4-1: USB disconnect, device number 2 [ 212.988467][ T6013] usb 4-1: cannot submit urb 0, error -19: no device [ 213.386612][ T5856] udevd[5856]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 213.806901][ T6022] bond1: option min_links: invalid value (18446744073709551612) [ 213.847751][ T6022] bond1: option min_links: allowed values 0 - 2147483647 [ 213.886896][ T6035] netlink: 7 bytes leftover after parsing attributes in process `syz.2.37'. [ 214.003676][ T6022] bond1 (unregistering): Released all slaves [ 214.799541][ T29] audit: type=1800 audit(1780764982.600:2): pid=6047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.41" name="bus" dev="tmpfs" ino=59 res=0 errno=0 [ 215.468220][ T6056] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 215.475765][ T6056] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 215.501658][ T5677] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 215.626607][ T5208] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 215.695784][ T5677] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 215.730362][ T5677] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.756250][ T5677] usb 1-1: config 0 has no interface number 0 [ 215.776365][ T5677] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 215.826828][ T5677] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 215.855648][ T5208] usb 5-1: Using ep0 maxpacket: 8 [ 215.879129][ T5208] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 215.897218][ T5677] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 215.914884][ T5208] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 215.955532][ T5208] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 215.992100][ T5677] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 216.010431][ T5208] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 28255, setting to 1024 [ 216.023406][ T5677] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.051883][ T5677] usb 1-1: Product: syz [ 216.059884][ T5208] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 216.083548][ T5677] usb 1-1: Manufacturer: syz [ 216.138562][ T5677] usb 1-1: SerialNumber: syz [ 216.144797][ T5208] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 216.186670][ T5677] usb 1-1: config 0 descriptor?? [ 216.213707][ T5208] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 216.253508][ T5208] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.594259][ T5208] usb 5-1: usb_control_msg returned -32 [ 216.641084][ T6064] netlink: 'syz.2.46': attribute type 1 has an invalid length. [ 216.659206][ T5208] usbtmc 5-1:16.0: can't read capabilities [ 216.933885][ T5680] usb 5-1: USB disconnect, device number 2 [ 217.019288][ T6049] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 217.173805][ T5679] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 217.297535][ T5679] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 217.837178][ T5679] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 218.061854][ T5679] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.099672][ T5679] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.164988][ T5679] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 218.206485][ T5679] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.249961][ T5679] usb 3-1: config 0 descriptor?? [ 218.767597][ T5679] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 218.890746][ T5679] cp2112 0003:10C4:EA90.0003: hidraw1: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 219.046866][ T5679] cp2112 0003:10C4:EA90.0003: error requesting version [ 219.094082][ T5679] cp2112 0003:10C4:EA90.0003: probe with driver cp2112 failed with error -32 [ 219.094683][ T6069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 219.129248][ T6069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.179610][ T5680] usb 1-1: USB disconnect, device number 2 [ 219.759821][ T6075] netlink: 4 bytes leftover after parsing attributes in process `syz.4.49'. [ 220.674952][ T6078] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.748533][ T5208] usb 3-1: USB disconnect, device number 3 [ 223.152761][ T6090] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.555427][ T6098] syz.2.55 uses obsolete (PF_INET,SOCK_PACKET) [ 223.775386][ T6101] netlink: 7 bytes leftover after parsing attributes in process `syz.3.54'. [ 223.945618][ T6093] bond1: option min_links: invalid value (18446744073709551612) [ 223.984678][ T6093] bond1: option min_links: allowed values 0 - 2147483647 [ 223.998815][ T6105] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 224.005787][ T6105] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 224.139715][ T6093] bond1 (unregistering): Released all slaves [ 225.737578][ T6118] netlink: 12 bytes leftover after parsing attributes in process `syz.2.60'. [ 225.784911][ T6118] netem: incorrect gi model size [ 225.852500][ T6118] netem: change failed [ 226.122939][ T6124] netlink: 4 bytes leftover after parsing attributes in process `syz.1.61'. [ 226.519252][ T5679] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 226.747830][ T5679] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.785780][ T5679] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.837541][ T5679] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 226.892956][ T5679] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.937356][ T5679] usb 4-1: config 0 descriptor?? [ 227.070103][ T6136] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 227.486807][ T5679] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 227.562452][ T5679] cp2112 0003:10C4:EA90.0004: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 227.677006][ T5679] cp2112 0003:10C4:EA90.0004: error requesting version [ 227.817887][ T6150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.891039][ T6150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.957852][ T5679] cp2112 0003:10C4:EA90.0004: probe with driver cp2112 failed with error -32 [ 228.027009][ T5679] usb 4-1: USB disconnect, device number 3 [ 228.346624][ T6151] fido_id[6151]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 228.611915][ T6157] netlink: 7 bytes leftover after parsing attributes in process `syz.1.69'. [ 229.026977][ T6146] bond1: option min_links: invalid value (18446744073709551612) [ 229.085870][ T6146] bond1: option min_links: allowed values 0 - 2147483647 [ 229.287309][ T6146] bond1 (unregistering): Released all slaves [ 229.843085][ T6175] netlink: 4 bytes leftover after parsing attributes in process `syz.0.75'. [ 229.918129][ T5208] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 230.088075][ T5208] usb 3-1: Using ep0 maxpacket: 32 [ 230.148586][ T5208] usb 3-1: unable to get BOS descriptor or descriptor too short [ 230.180844][ T5208] usb 3-1: config 12 has an invalid interface number: 183 but max is 1 [ 230.208670][ T5208] usb 3-1: config 12 has an invalid interface number: 229 but max is 1 [ 230.270784][ T5208] usb 3-1: config 12 has no interface number 0 [ 230.298218][ T5208] usb 3-1: config 12 has no interface number 1 [ 230.332322][ T5208] usb 3-1: config 12 interface 183 has no altsetting 0 [ 230.387062][ T5208] usb 3-1: New USB device found, idVendor=1415, idProduct=2000, bcdDevice=2b.98 [ 230.413818][ T5208] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.456477][ T5208] usb 3-1: Product: syz [ 230.479147][ T5208] usb 3-1: Manufacturer: syz [ 230.493654][ T5208] usb 3-1: SerialNumber: syz [ 231.017136][ T6183] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 231.220359][ T6183] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 231.257582][ T6173] netlink: 20 bytes leftover after parsing attributes in process `syz.2.74'. [ 231.406935][ T5679] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 231.521272][ T6183] bridge_slave_1: left promiscuous mode [ 231.534924][ T6183] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.618816][ T5679] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 231.664332][ T5679] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 169, setting to 64 [ 231.704853][ T5679] usb 4-1: config 0 interface 0 has no altsetting 0 [ 231.768930][ T5679] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 231.800174][ T5679] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 231.821439][ T5679] usb 4-1: Product: syz [ 231.835117][ T5679] usb 4-1: Manufacturer: syz [ 231.848851][ T5679] usb 4-1: SerialNumber: syz [ 231.890961][ T5679] usb 4-1: config 0 descriptor?? [ 231.903689][ T6183] bridge_slave_0: left allmulticast mode [ 231.929048][ T6187] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 231.959748][ T6183] bridge_slave_0: left promiscuous mode [ 232.015476][ T5679] usb 4-1: selecting invalid altsetting 0 [ 232.079646][ T6183] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.316076][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 232.336076][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 232.376070][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 232.946071][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 233.470367][ T5208] usb 3-1: USB disconnect, device number 4 [ 234.235445][ T5208] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 234.336640][ T6187] snd-usb-audio 4-1:0.0: Runtime PM usage count underflow! [ 234.365678][ T11] usb 4-1: USB disconnect, device number 4 [ 234.468946][ T5208] usb 3-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 234.533564][ T5208] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 234.579081][ T5208] usb 3-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 234.616149][ T5208] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.656358][ T5208] usb 3-1: Product: syz [ 234.665697][ T5208] usb 3-1: Manufacturer: syz [ 234.681580][ T5208] usb 3-1: SerialNumber: syz [ 234.711889][ T5208] usb 3-1: config 0 descriptor?? [ 234.803582][ T5208] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 235.006418][ T3095] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 235.186080][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 235.277222][ T3095] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.331194][ T5208] gspca_sunplus: reg_r err -71 [ 235.359440][ T3095] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.384751][ T5208] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 235.417961][ T3095] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 235.446688][ T5208] usb 3-1: USB disconnect, device number 5 [ 235.467770][ T3095] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.533250][ T3095] usb 1-1: config 0 descriptor?? [ 236.084744][ T6203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.136989][ T6203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.197778][ T3095] usbhid 1-1:0.0: can't add hid device: -71 [ 236.209533][ T3095] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 236.293190][ T3095] usb 1-1: USB disconnect, device number 3 [ 236.501903][ T6214] netlink: 4 bytes leftover after parsing attributes in process `syz.2.87'. [ 237.055570][ T6220] netlink: 7 bytes leftover after parsing attributes in process `syz.3.86'. [ 237.573565][ T6210] bond1: option min_links: invalid value (18446744073709551612) [ 237.672042][ T6210] bond1: option min_links: allowed values 0 - 2147483647 [ 237.804778][ T6210] bond1 (unregistering): Released all slaves [ 238.124819][ T6224] syzkaller0: entered promiscuous mode [ 238.137003][ T6224] syzkaller0: entered allmulticast mode [ 239.237797][ T6253] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 239.342800][ T6253] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 239.446743][ T6253] bridge_slave_1: left allmulticast mode [ 239.484421][ T6253] bridge_slave_1: left promiscuous mode [ 239.524940][ T6253] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.620029][ T6253] bridge_slave_0: left allmulticast mode [ 239.629505][ T6253] bridge_slave_0: left promiscuous mode [ 239.698455][ T6253] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.246554][ T5680] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 240.474344][ T5680] usb 2-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 240.500000][ T5680] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 240.551242][ T5680] usb 2-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 240.589327][ T5680] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.621452][ T5680] usb 2-1: Product: syz [ 240.639220][ T5680] usb 2-1: Manufacturer: syz [ 240.653602][ T5680] usb 2-1: SerialNumber: syz [ 240.695109][ T5680] usb 2-1: config 0 descriptor?? [ 240.756679][ T5680] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 241.271881][ T5680] gspca_sunplus: reg_r err -71 [ 241.296567][ T5680] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 241.351903][ T5680] usb 2-1: USB disconnect, device number 3 [ 241.547603][ T5679] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 241.750392][ T5679] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.787930][ T5679] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.826241][ T5679] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 241.861018][ T5679] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.912762][ T5679] usb 3-1: config 0 descriptor?? [ 242.422921][ T6273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.479125][ T6273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.536918][ T5679] usbhid 3-1:0.0: can't add hid device: -71 [ 242.553764][ T5679] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 242.618678][ T5679] usb 3-1: USB disconnect, device number 6 [ 242.912339][ T6293] netlink: 7 bytes leftover after parsing attributes in process `syz.3.103'. [ 243.098291][ T6279] bond1: option min_links: invalid value (18446744073709551612) [ 243.146661][ T6279] bond1: option min_links: allowed values 0 - 2147483647 [ 243.262636][ T6279] bond1 (unregistering): Released all slaves [ 244.170509][ T6309] process 'syz.1.107' launched '/dev/fd/4/./file0' with NULL argv: empty string added [ 245.091605][ T6317] netlink: 12 bytes leftover after parsing attributes in process `syz.3.110'. [ 245.466242][ T5679] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 245.657994][ T5679] usb 5-1: Using ep0 maxpacket: 8 [ 245.681004][ T5679] usb 5-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 245.721452][ T5679] usb 5-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.0a [ 245.760717][ T5679] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.856499][ T5680] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 246.009425][ T5684] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 246.039951][ T5680] usb 1-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 246.081749][ T5680] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 246.136359][ T5680] usb 1-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 246.183917][ T5680] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.202728][ T5679] usb 5-1: USB disconnect, device number 3 [ 246.217922][ T5680] usb 1-1: Product: syz [ 246.235586][ T5684] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.247559][ T5680] usb 1-1: Manufacturer: syz [ 246.260985][ T5680] usb 1-1: SerialNumber: syz [ 246.274962][ T5684] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.290178][ T5684] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 246.309017][ T5680] usb 1-1: config 0 descriptor?? [ 246.330983][ T5680] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 246.337876][ T5684] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.375150][ T5684] usb 3-1: config 0 descriptor?? [ 246.782756][ T5680] gspca_sunplus: reg_r err -71 [ 246.788241][ T5680] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 246.863901][ T6331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.864355][ T5680] usb 1-1: USB disconnect, device number 4 [ 246.899234][ T6331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.966369][ T5684] usbhid 3-1:0.0: can't add hid device: -71 [ 247.011504][ T5684] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 247.101339][ T5684] usb 3-1: USB disconnect, device number 7 [ 247.692700][ T6344] netlink: 7 bytes leftover after parsing attributes in process `syz.4.119'. [ 248.480858][ T6338] bond1: option min_links: invalid value (18446744073709551612) [ 248.489290][ T6338] bond1: option min_links: allowed values 0 - 2147483647 [ 248.599033][ T6338] bond1 (unregistering): Released all slaves [ 250.308202][ T6389] No buffer was provided with the request [ 251.327303][ T5684] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 251.531299][ T5208] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 251.536278][ T5684] usb 5-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 251.582256][ T5684] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 251.656243][ T5684] usb 5-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 251.687923][ T3095] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 251.688761][ T5684] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.716521][ T5208] usb 2-1: Using ep0 maxpacket: 8 [ 251.741055][ T5684] usb 5-1: Product: syz [ 251.747684][ T5208] usb 2-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 251.756327][ T5684] usb 5-1: Manufacturer: syz [ 251.763421][ T5684] usb 5-1: SerialNumber: syz [ 251.772273][ T5208] usb 2-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.0a [ 251.800287][ T5684] usb 5-1: config 0 descriptor?? [ 251.814957][ T5208] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.835133][ T6409] netlink: 16 bytes leftover after parsing attributes in process `syz.3.134'. [ 251.865143][ T5684] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 251.893736][ T3095] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.944851][ T3095] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.970919][ T3095] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 251.995833][ T3095] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.018926][ T3095] usb 1-1: config 0 descriptor?? [ 252.291240][ T6415] netlink: 7 bytes leftover after parsing attributes in process `syz.2.133'. [ 252.310829][ T5684] gspca_sunplus: reg_r err -71 [ 252.320783][ T5684] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 252.357026][ T5684] usb 5-1: USB disconnect, device number 4 [ 252.420731][ T5796] udevd[5796]: setting owner of /dev/bus/usb/005/004 to uid=0, gid=0 failed: No such file or directory [ 252.485342][ T6405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.503077][ T6408] bond1: option min_links: invalid value (18446744073709551612) [ 252.525717][ T6405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.562514][ T6408] bond1: option min_links: allowed values 0 - 2147483647 [ 252.592309][ T3095] usbhid 1-1:0.0: can't add hid device: -71 [ 252.627334][ T3095] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 252.674372][ T3095] usb 1-1: USB disconnect, device number 5 [ 252.694026][ T6408] bond1 (unregistering): Released all slaves [ 252.946905][ T5684] usb 2-1: USB disconnect, device number 4 [ 253.552989][ T6427] syzkaller0: entered promiscuous mode [ 253.586483][ T6427] syzkaller0: entered allmulticast mode [ 253.949998][ T6430] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 254.044900][ T6430] team0 (unregistering): Port device team_slave_0 removed [ 254.154468][ T6430] team0 (unregistering): Failed to send options change via netlink (err -105) [ 254.192083][ T6430] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 254.228700][ T6430] team0 (unregistering): Port device team_slave_1 removed [ 256.636609][ T5679] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 256.667585][ T6472] netlink: 7 bytes leftover after parsing attributes in process `syz.2.146'. [ 256.819852][ T5679] usb 1-1: Using ep0 maxpacket: 8 [ 256.862845][ T5679] usb 1-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 256.912799][ T5679] usb 1-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.0a [ 256.976542][ T5679] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.046391][ T6461] bond1: option min_links: invalid value (18446744073709551612) [ 257.095838][ T6461] bond1: option min_links: allowed values 0 - 2147483647 [ 257.161093][ T6461] bond1 (unregistering): Released all slaves [ 257.661870][ T6492] binder: 6478:6492 ioctl c018620c 800000c0 returned -22 [ 257.851774][ T6485] pimreg: entered allmulticast mode [ 257.895238][ T6483] syzkaller0: entered promiscuous mode [ 257.941002][ T6483] syzkaller0: entered allmulticast mode [ 257.972370][ T5208] usb 1-1: USB disconnect, device number 6 [ 257.981182][ T6478] pimreg: left allmulticast mode [ 259.337201][ T5208] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 259.547131][ T5208] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 259.578921][ T5208] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 259.629148][ T5208] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 259.652940][ T5208] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.667039][ T3095] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 259.707392][ T5208] usb 3-1: config 0 descriptor?? [ 259.857130][ T3095] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.901002][ T3095] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.925600][ T6518] bond1: option min_links: invalid value (18446744073709551612) [ 259.933779][ T6518] bond1: option min_links: allowed values 0 - 2147483647 [ 259.962527][ T6518] bond1 (unregistering): Released all slaves [ 259.995179][ T6507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.015015][ T3095] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 260.068723][ T6507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.079988][ T3095] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.116473][ T6527] netlink: 7 bytes leftover after parsing attributes in process `syz.0.164'. [ 260.154262][ T3095] usb 2-1: config 0 descriptor?? [ 260.164896][ T5208] ath6kl: Failed to submit usb control message: -71 [ 260.190035][ T5208] ath6kl: unable to send the bmi data to the device: -71 [ 260.221841][ T5208] ath6kl: Unable to send get target info: -71 [ 260.257962][ T5208] ath6kl: Failed to init ath6kl core: -71 [ 260.304099][ T5208] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 260.382677][ T5208] usb 3-1: USB disconnect, device number 8 [ 260.644713][ T6514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.699391][ T6514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.761525][ T3095] usbhid 2-1:0.0: can't add hid device: -71 [ 260.778743][ T3095] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 260.811955][ T3095] usb 2-1: USB disconnect, device number 5 [ 260.863056][ T6531] syzkaller0: entered promiscuous mode [ 260.887656][ T6531] syzkaller0: entered allmulticast mode [ 261.152799][ T6534] syzkaller0: entered promiscuous mode [ 261.189616][ T6534] syzkaller0: entered allmulticast mode [ 261.826550][ T5208] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 261.956600][ T5684] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 262.006819][ T5208] usb 5-1: Using ep0 maxpacket: 8 [ 262.029728][ T5208] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 262.051332][ T5208] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 262.084625][ T5208] usb 5-1: config 0 has no interface number 0 [ 262.093507][ T5208] usb 5-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 262.114642][ T5208] usb 5-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 262.129423][ T5208] usb 5-1: config 0 interface 255 has no altsetting 0 [ 262.139364][ T5208] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 262.151693][ T5208] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.177610][ T5684] usb 4-1: Using ep0 maxpacket: 8 [ 262.201857][ T5684] usb 4-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 262.217320][ T5208] usb 5-1: config 0 descriptor?? [ 262.227714][ T3095] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 262.228070][ T5684] usb 4-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.0a [ 262.283734][ T5684] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.304452][ T5208] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 262.396481][ T3095] usb 2-1: Using ep0 maxpacket: 32 [ 262.453761][ T3095] usb 2-1: unable to get BOS descriptor or descriptor too short [ 262.501872][ T3095] usb 2-1: config 12 has an invalid interface number: 183 but max is 1 [ 262.524005][ T3095] usb 2-1: config 12 has an invalid interface number: 229 but max is 1 [ 262.545220][ T3095] usb 2-1: config 12 has no interface number 0 [ 262.552224][ T3095] usb 2-1: config 12 has no interface number 1 [ 262.561527][ T3095] usb 2-1: config 12 interface 183 has no altsetting 0 [ 262.599341][ T6548] syzkaller0: entered promiscuous mode [ 262.611814][ T3095] usb 2-1: New USB device found, idVendor=1415, idProduct=2000, bcdDevice=2b.98 [ 262.616432][ T6548] syzkaller0: entered allmulticast mode [ 262.647246][ T3095] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.663034][ T3095] usb 2-1: Product: syz [ 262.688007][ T3095] usb 2-1: Manufacturer: syz [ 262.705833][ T3095] usb 2-1: SerialNumber: syz [ 262.844148][ T5208] gspca_vc032x: reg_r err -32 [ 262.865155][ T5208] vc032x 5-1:0.255: probe with driver vc032x failed with error -32 [ 263.241821][ T5684] usb 4-1: USB disconnect, device number 5 [ 263.350079][ T3095] usb 2-1: USB disconnect, device number 6 [ 263.898092][ T6562] bond1: option min_links: invalid value (18446744073709551612) [ 263.906642][ T6562] bond1: option min_links: allowed values 0 - 2147483647 [ 263.937679][ T6562] bond1 (unregistering): Released all slaves [ 263.942453][ T6568] netlink: 7 bytes leftover after parsing attributes in process `syz.2.177'. [ 264.759432][ T6577] netlink: 16 bytes leftover after parsing attributes in process `syz.0.180'. [ 265.089131][ T6558] Set syz1 is full, maxelem 6117 reached [ 265.276397][ T3095] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 265.395068][ T11] usb 5-1: USB disconnect, device number 5 [ 265.456141][ T3095] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 265.519123][ T3095] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 265.531141][ T6582] syzkaller0: entered promiscuous mode [ 265.541027][ T3095] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 265.568339][ T3095] usb 3-1: config 0 interface 0 has no altsetting 0 [ 265.576603][ T6582] syzkaller0: entered allmulticast mode [ 265.594414][ T3095] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 265.626206][ T3095] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 265.687097][ T3095] usb 3-1: config 0 interface 0 has no altsetting 0 [ 265.716372][ T3095] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 265.732151][ T3095] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 265.781011][ T3095] usb 3-1: config 0 interface 0 has no altsetting 0 [ 265.811896][ T3095] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 265.842014][ T3095] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 265.895176][ T3095] usb 3-1: config 0 interface 0 has no altsetting 0 [ 265.914766][ T3095] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 265.946790][ T3095] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 265.996783][ T3095] usb 3-1: config 0 interface 0 has no altsetting 0 [ 266.025896][ T3095] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 266.043352][ T3095] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 266.080026][ T3095] usb 3-1: config 0 interface 0 has no altsetting 0 [ 266.110941][ T3095] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 266.143164][ T3095] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 266.183500][ T3095] usb 3-1: config 0 interface 0 has no altsetting 0 [ 266.205848][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 266.217393][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.239328][ T3095] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 266.276346][ T3095] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 266.318297][ T3095] usb 3-1: config 0 interface 0 has no altsetting 0 [ 266.354373][ T3095] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 266.392712][ T3095] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 266.417490][ T3095] usb 3-1: Product: syz [ 266.425604][ T3095] usb 3-1: Manufacturer: syz [ 266.439629][ T3095] usb 3-1: SerialNumber: syz [ 266.464730][ T3095] usb 3-1: config 0 descriptor?? [ 266.530483][ T3095] yurex 3-1:0.0: Could not find endpoints [ 266.760620][ T3095] usb 3-1: USB disconnect, device number 9 [ 266.955200][ T6593] capability: warning: `syz.4.187' uses deprecated v2 capabilities in a way that may be insecure [ 267.477294][ T5679] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 267.705205][ T5679] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 267.730070][ T5679] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 267.753757][ T5679] usb 1-1: config 0 has no interface number 0 [ 267.767528][ T5679] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 267.793261][ T5679] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 267.821744][ T5679] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 267.867268][ T5684] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 267.897187][ T5679] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 267.926596][ T5679] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.935186][ T5679] usb 1-1: Product: syz [ 267.965000][ T5679] usb 1-1: Manufacturer: syz [ 267.988839][ T5679] usb 1-1: SerialNumber: syz [ 268.029041][ T5679] usb 1-1: config 0 descriptor?? [ 268.047812][ T5684] usb 5-1: Using ep0 maxpacket: 32 [ 268.075694][ T5684] usb 5-1: unable to get BOS descriptor or descriptor too short [ 268.103995][ T5684] usb 5-1: config 12 has an invalid interface number: 183 but max is 1 [ 268.136809][ T5684] usb 5-1: config 12 has an invalid interface number: 229 but max is 1 [ 268.156477][ T5684] usb 5-1: config 12 has no interface number 0 [ 268.176210][ T5684] usb 5-1: config 12 has no interface number 1 [ 268.192612][ T5684] usb 5-1: config 12 interface 183 has no altsetting 0 [ 268.227188][ T5684] usb 5-1: New USB device found, idVendor=1415, idProduct=2000, bcdDevice=2b.98 [ 268.245337][ T5684] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.263400][ T5684] usb 5-1: Product: syz [ 268.274094][ T5684] usb 5-1: Manufacturer: syz [ 268.292355][ T5684] usb 5-1: SerialNumber: syz [ 268.514111][ T6612] netlink: 7 bytes leftover after parsing attributes in process `syz.3.191'. [ 268.758714][ T3095] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 268.872449][ T3095] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 268.908323][ T6608] bond1: option min_links: invalid value (18446744073709551612) [ 268.947898][ T6608] bond1: option min_links: allowed values 0 - 2147483647 [ 269.112149][ T6608] bond1 (unregistering): Released all slaves [ 270.281414][ T6625] syzkaller0: entered promiscuous mode [ 270.310598][ T6625] syzkaller0: entered allmulticast mode [ 270.523969][ T5677] usb 1-1: USB disconnect, device number 7 [ 270.546753][ T3095] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 270.768019][ T3095] usb 4-1: Using ep0 maxpacket: 8 [ 270.822223][ T3095] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 270.878967][ T3095] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 270.980165][ T3095] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 271.014808][ T3095] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 28255, setting to 1024 [ 271.062886][ T3095] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 271.167820][ T3095] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 271.265472][ T3095] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 271.318153][ T3095] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.619393][ T3095] usb 4-1: usb_control_msg returned -32 [ 271.655152][ T3095] usbtmc 4-1:16.0: can't read capabilities [ 271.840689][ T3095] usb 4-1: USB disconnect, device number 6 [ 271.875204][ T5684] usb 5-1: USB disconnect, device number 6 [ 272.323284][ T6639] syzkaller0: entered promiscuous mode [ 272.345029][ T6639] syzkaller0: entered allmulticast mode [ 272.517597][ T5679] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 272.724503][ T5679] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 272.757422][ T5679] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 272.773766][ T5679] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 272.785831][ T5679] usb 5-1: config 0 interface 0 has no altsetting 0 [ 272.804707][ T5679] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 272.844184][ T5679] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 272.878229][ T5679] usb 5-1: config 0 interface 0 has no altsetting 0 [ 272.907602][ T5679] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 272.939712][ T5679] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 272.991816][ T5679] usb 5-1: config 0 interface 0 has no altsetting 0 [ 273.022216][ T5679] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 273.062077][ T5679] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 273.097831][ T5679] usb 5-1: config 0 interface 0 has no altsetting 0 [ 273.137672][ T5679] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 273.164267][ T5679] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 273.200442][ T5679] usb 5-1: config 0 interface 0 has no altsetting 0 [ 273.239094][ T5679] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 273.269440][ T5679] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 273.300635][ T5679] usb 5-1: config 0 interface 0 has no altsetting 0 [ 273.353258][ T5679] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 273.401646][ T5679] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 273.458087][ T5679] usb 5-1: config 0 interface 0 has no altsetting 0 [ 273.506738][ T5679] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 273.554518][ T6657] netlink: 7 bytes leftover after parsing attributes in process `syz.0.206'. [ 273.574462][ T5679] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 273.630165][ T5679] usb 5-1: config 0 interface 0 has no altsetting 0 [ 273.673003][ T5679] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 273.698580][ T6653] bond1: option min_links: invalid value (18446744073709551612) [ 273.702350][ T5679] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 273.752003][ T6653] bond1: option min_links: allowed values 0 - 2147483647 [ 273.762219][ T5679] usb 5-1: Product: syz [ 273.780398][ T5679] usb 5-1: Manufacturer: syz [ 273.796493][ T5679] usb 5-1: SerialNumber: syz [ 273.804722][ T6653] bond1 (unregistering): Released all slaves [ 273.839127][ T5679] usb 5-1: config 0 descriptor?? [ 273.870952][ T5679] yurex 5-1:0.0: Could not find endpoints [ 274.109879][ T3095] usb 5-1: USB disconnect, device number 7 [ 274.160396][ T5679] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 274.387764][ T5679] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 274.423589][ T5679] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 274.471514][ T5679] usb 4-1: config 0 has no interface number 0 [ 274.493330][ T6666] syzkaller0: entered promiscuous mode [ 274.499396][ T5679] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 274.548296][ T6666] syzkaller0: entered allmulticast mode [ 274.556130][ T5679] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 274.592676][ T5679] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 274.648907][ T5679] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 274.683055][ T5679] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.712045][ T5679] usb 4-1: Product: syz [ 274.732198][ T5679] usb 4-1: Manufacturer: syz [ 274.753269][ T5679] usb 4-1: SerialNumber: syz [ 274.819869][ T5679] usb 4-1: config 0 descriptor?? [ 275.398592][ T5684] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 275.540606][ T3095] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 275.572045][ T3095] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 275.608215][ T5684] usb 2-1: Using ep0 maxpacket: 32 [ 275.641378][ T5684] usb 2-1: unable to get BOS descriptor or descriptor too short [ 275.677365][ T5684] usb 2-1: config 12 has an invalid interface number: 183 but max is 1 [ 275.723211][ T5684] usb 2-1: config 12 has an invalid interface number: 229 but max is 1 [ 275.742675][ T5684] usb 2-1: config 12 has no interface number 0 [ 275.756198][ T5684] usb 2-1: config 12 has no interface number 1 [ 275.773596][ T5684] usb 2-1: config 12 interface 183 has no altsetting 0 [ 275.836999][ T5684] usb 2-1: New USB device found, idVendor=1415, idProduct=2000, bcdDevice=2b.98 [ 275.872808][ T5684] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.924201][ T5684] usb 2-1: Product: syz [ 275.948053][ T5684] usb 2-1: Manufacturer: syz [ 275.956671][ T5684] usb 2-1: SerialNumber: syz [ 276.517322][ T6692] syzkaller0: entered promiscuous mode [ 276.549746][ T6692] syzkaller0: entered allmulticast mode [ 277.332455][ T5680] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 277.439253][ T5679] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 277.518557][ T5680] usb 5-1: Using ep0 maxpacket: 8 [ 277.534590][ T3095] usb 4-1: USB disconnect, device number 7 [ 277.563904][ T5680] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 277.599912][ T5680] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 277.634901][ T5680] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 277.646716][ T5679] usb 1-1: Using ep0 maxpacket: 32 [ 277.683163][ T5680] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 28255, setting to 1024 [ 277.695572][ T5679] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 277.731001][ T5679] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.759370][ T5680] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 277.776593][ T5680] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 277.800981][ T5679] usb 1-1: config 0 descriptor?? [ 277.808182][ T5680] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 277.832409][ T5680] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.062495][ T5679] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 278.123326][ T5680] usb 5-1: usb_control_msg returned -32 [ 278.135089][ T5679] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 278.163831][ T5680] usbtmc 5-1:16.0: can't read capabilities [ 278.225390][ T5679] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 278.264283][ T5679] usb 1-1: media controller created [ 278.267668][ T6700] ===================================================== [ 278.277505][ T6700] BUG: KMSAN: kernel-infoleak in _copy_to_user+0xcc/0x120 [ 278.284838][ T6700] _copy_to_user+0xcc/0x120 [ 278.289725][ T6700] i2cdev_ioctl_smbus+0x586/0x660 [ 278.294932][ T6700] compat_i2cdev_ioctl+0x48f/0xb40 [ 278.300508][ T6700] __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 278.306462][ T6700] ia32_sys_call+0x2854/0x4360 [ 278.311426][ T6700] __do_fast_syscall_32+0x195/0x470 [ 278.317094][ T6700] do_fast_syscall_32+0x37/0x80 [ 278.322241][ T6700] do_SYSENTER_32+0x1f/0x30 [ 278.327081][ T6700] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 278.334008][ T6700] [ 278.336956][ T6700] Uninit was stored to memory at: [ 278.342264][ T6700] __i2c_smbus_xfer+0x2618/0x30a0 [ 278.351616][ T6700] i2c_smbus_xfer+0x2d8/0x480 [ 278.357628][ T6700] i2cdev_ioctl_smbus+0x4a1/0x660 [ 278.362931][ T6700] compat_i2cdev_ioctl+0x48f/0xb40 [ 278.368523][ T6700] __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 278.374268][ T6700] ia32_sys_call+0x2854/0x4360 [ 278.380767][ T6700] __do_fast_syscall_32+0x195/0x470 [ 278.386253][ T6700] do_fast_syscall_32+0x37/0x80 [ 278.391254][ T6700] do_SYSENTER_32+0x1f/0x30 [ 278.395883][ T6700] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 278.402627][ T6700] [ 278.405012][ T6700] Local variable msgbuf1.i created at: [ 278.410754][ T6700] __i2c_smbus_xfer+0x97c/0x30a0 [ 278.415841][ T6700] i2c_smbus_xfer+0x2d8/0x480 [ 278.420846][ T6700] [ 278.423261][ T6700] Byte 1 of 2 is uninitialized [ 278.428701][ T6700] Memory access of size 2 starts at ffff888017e77c76 [ 278.435555][ T6700] Data copied to user address 0000000080000000 [ 278.441977][ T6700] [ 278.444424][ T6700] CPU: 0 UID: 0 PID: 6700 Comm: syz.0.219 Not tainted syzkaller #0 PREEMPT(lazy) [ 278.457579][ T6700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 278.469062][ T6700] ===================================================== [ 278.476285][ T6700] Disabling lock debugging due to kernel taint [ 278.520974][ T6700] Kernel panic - not syncing: kmsan.panic set ... [ 278.527559][ T6700] CPU: 1 UID: 0 PID: 6700 Comm: syz.0.219 Tainted: G B syzkaller #0 PREEMPT(lazy) [ 278.538503][ T6700] Tainted: [B]=BAD_PAGE [ 278.542739][ T6700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 278.552918][ T6700] Call Trace: [ 278.556286][ T6700] [ 278.559301][ T6700] __dump_stack+0x26/0x30 [ 278.563785][ T6700] dump_stack_lvl+0x50/0x1c0 [ 278.568511][ T6700] ? dump_stack+0x12/0x25 [ 278.572979][ T6700] dump_stack+0x1e/0x25 [ 278.577263][ T6700] vpanic+0x7b4/0x1430 [ 278.581500][ T6700] panic+0x15d/0x160 [ 278.585591][ T6700] kmsan_report+0x31a/0x320 [ 278.590263][ T6700] ? kmsan_internal_check_memory+0x1e8/0x240 [ 278.596397][ T6700] ? kmsan_copy_to_user+0xef/0x190 [ 278.601667][ T6700] ? _copy_to_user+0xcc/0x120 [ 278.606466][ T6700] ? i2cdev_ioctl_smbus+0x586/0x660 [ 278.611826][ T6700] ? compat_i2cdev_ioctl+0x48f/0xb40 [ 278.617260][ T6700] ? __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 278.623147][ T6700] ? ia32_sys_call+0x2854/0x4360 [ 278.628251][ T6700] ? __do_fast_syscall_32+0x195/0x470 [ 278.633756][ T6700] ? do_fast_syscall_32+0x37/0x80 [ 278.638897][ T6700] ? do_SYSENTER_32+0x1f/0x30 [ 278.643689][ T6700] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 278.650363][ T6700] ? __pfx_az6027_i2c_xfer+0x10/0x10 [ 278.655808][ T6700] ? __i2c_transfer+0x1189/0x31c0 [ 278.660989][ T6700] ? kmsan_get_metadata+0xf1/0x160 [ 278.666273][ T6700] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 278.672769][ T6700] ? kmsan_get_metadata+0xf1/0x160 [ 278.678050][ T6700] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 278.684040][ T6700] ? __i2c_smbus_xfer+0x201d/0x30a0 [ 278.689368][ T6700] ? kmsan_get_metadata+0xf1/0x160 [ 278.694661][ T6700] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 278.700655][ T6700] kmsan_internal_check_memory+0x1e8/0x240 [ 278.706642][ T6700] kmsan_copy_to_user+0xef/0x190 [ 278.711742][ T6700] _copy_to_user+0xcc/0x120 [ 278.716372][ T6700] i2cdev_ioctl_smbus+0x586/0x660 [ 278.721587][ T6700] compat_i2cdev_ioctl+0x48f/0xb40 [ 278.726875][ T6700] ? __pfx_compat_i2cdev_ioctl+0x10/0x10 [ 278.732663][ T6700] __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 278.738381][ T6700] ? fpregs_restore_userregs+0x211/0x3b0 [ 278.744199][ T6700] ? kmsan_get_metadata+0xf1/0x160 [ 278.749472][ T6700] ? kmsan_get_metadata+0xf1/0x160 [ 278.754772][ T6700] ia32_sys_call+0x2854/0x4360 [ 278.759707][ T6700] __do_fast_syscall_32+0x195/0x470 [ 278.765063][ T6700] do_fast_syscall_32+0x37/0x80 [ 278.770048][ T6700] do_SYSENTER_32+0x1f/0x30 [ 278.774680][ T6700] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 278.781188][ T6700] RIP: 0023:0xf7f0601c [ 278.785359][ T6700] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 278.805094][ T6700] RSP: 002b:00000000f53c650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 278.813652][ T6700] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000720 [ 278.821721][ T6700] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 278.829785][ T6700] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 278.837841][ T6700] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 278.845987][ T6700] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 278.854085][ T6700] [ 278.857354][ T6700] Kernel Offset: disabled [ 278.861726][ T6700] Rebooting in 86400 seconds..