last executing test programs: 15m36.66414395s ago: executing program 4 (id=489): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffe, 0x0, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) unshare(0x62040200) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xdc) r0 = syz_usbip_server_init(0x4) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in6, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}}}, &(0x7f00000000c0)=0xe4) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000801, r1, &(0x7f0000000540)={0x5, 0x6, 0x7fffffff, 0x2, 0x6, 0x7ff, 0xb97d, 0x4, 0x6}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r2, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000140), 0x8, 0x40) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000400)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0xde9, 0x7, 0x0, 0x0, 0x19, 0xd, "fee8a2ab78fc979fd1e00d96f72000000ba89de2b7fb0000e6a180b8785d960001000000000041eb8109af0000000000000000002900", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f422741b13103e52f400003fe2000000000000000000000000000000002000", [0x8, 0x7]}}) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84040, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r7, &(0x7f0000000040)={0x50, 0x0, r8, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x5, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x7ffe}}, 0x50) syz_fuse_handle_req(r7, &(0x7f0000004200)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea2105600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009900", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x0, {0x0, 0x581bc0488f52ec67}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) writev(r9, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1) dup3(r7, r9, 0x6700000000000000) close_range(r6, 0xffffffffffffffff, 0x0) dup(r5) ioctl$FS_IOC_ENABLE_VERITY(r5, 0x40806685, &(0x7f0000000200)={0x1, 0x2, 0x1000, 0xf, &(0x7f0000000080)="31c00207530c5f9b80faafd29884a5", 0xcd, 0x0, &(0x7f0000000100)="ef56f9fcb90faf7b4b5467d98320ce8270c3ad0d152290f4b5eea3ff6148c165b18b7d16c90e9c9d8cd9aa13186d37bc8f31fb319f8156f6ddb9608dda4d6b62e4af0319f2f922973552f26599ac4235e235af991566933573c12f4877b9081245032df1da2fd088bd8548b6d194fbb7da32d8b0b6c0b458ed590e7e6dfbb8320987b71c0b4933a64a726d3cf180e4da22a0b98e9d3d1a2d1f23302edffdad5dc3eb945b42734585a1be66781221612eef034f45713d30476b07256279fde54706c421c91de233d3ac3ee17c2d"}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xa0380, 0x0) 15m34.943046496s ago: executing program 4 (id=498): openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x28200, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'vlan0\x00', {0x2}, 0x6}) mbind(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3, &(0x7f0000000180)=0x9, 0x9, 0x1) get_mempolicy(0x0, 0x0, 0x2, &(0x7f0000ffc000/0x4000)=nil, 0x3) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x5, 0x40) 15m34.625670486s ago: executing program 4 (id=501): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c11223344000800000005000500000005c0040008"], 0x4a) memfd_create(0x0, 0x18) 15m34.137937886s ago: executing program 4 (id=503): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0x8000000ffffffff) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000000)={0x1}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r5, 0x0, 0x7, 0x0) shutdown(r3, 0x1) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) 15m32.944929698s ago: executing program 4 (id=510): socket$kcm(0x10, 0x400000002, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc044560f, &(0x7f0000000380)=@mmap={0x0, 0x1, 0x4, 0x2, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "37bb54f0"}}) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) r7 = openat$procfs(0xffffff9c, &(0x7f0000000640)='/proc/key-users\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f0000000680)={0x2020}, 0x2020) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1c3, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r6, 0x40405515, &(0x7f0000000000)={0x9, 0x4, 0x0, 0x7}) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000100)=0x1) socket$kcm(0x10, 0x400000002, 0x0) (async) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) (async) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc044560f, &(0x7f0000000380)=@mmap={0x0, 0x1, 0x4, 0x2, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "37bb54f0"}}) (async) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) (async) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) dup(r5) (async) openat$procfs(0xffffff9c, &(0x7f0000000640)='/proc/key-users\x00', 0x0, 0x0) (async) read$FUSE(r7, &(0x7f0000000680)={0x2020}, 0x2020) (async) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1c3, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r6, 0x40405515, &(0x7f0000000000)={0x9, 0x4, 0x0, 0x7}) (async) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000100)=0x1) (async) 15m32.550617519s ago: executing program 4 (id=512): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0xf3a, 0x0) write(r1, &(0x7f0000000240)="94", 0x1) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r6, 0x5407, &(0x7f0000000100)={0x6, 0x5, 0x9, 0xdedb, 0x3, '\v\x00\x00]\x00'}) ioctl$TIOCMSET(r6, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$TCSETS2(r7, 0x402c542b, &(0x7f0000000040)={0x5, 0x10086, 0x10021da0, 0x1, 0x1, "0800009b739baacc8ac55400fe00", 0xffffff7e, 0x82}) r8 = gettid() tkill(r8, 0x1) getpriority(0x0, r8) vmsplice(r4, &(0x7f0000000380)=[{&(0x7f0000013580)='\r', 0x1}], 0x1, 0x0) tee(r0, r5, 0x8f5, 0x0) write$cgroup_devices(r5, 0x0, 0x8) write(r2, 0x0, 0x0) 15m31.852566195s ago: executing program 32 (id=512): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0xf3a, 0x0) write(r1, &(0x7f0000000240)="94", 0x1) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r6, 0x5407, &(0x7f0000000100)={0x6, 0x5, 0x9, 0xdedb, 0x3, '\v\x00\x00]\x00'}) ioctl$TIOCMSET(r6, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) ioctl$TCSETS2(r7, 0x402c542b, &(0x7f0000000040)={0x5, 0x10086, 0x10021da0, 0x1, 0x1, "0800009b739baacc8ac55400fe00", 0xffffff7e, 0x82}) r8 = gettid() tkill(r8, 0x1) getpriority(0x0, r8) vmsplice(r4, &(0x7f0000000380)=[{&(0x7f0000013580)='\r', 0x1}], 0x1, 0x0) tee(r0, r5, 0x8f5, 0x0) write$cgroup_devices(r5, 0x0, 0x8) write(r2, 0x0, 0x0) 2.185846817s ago: executing program 2 (id=7022): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd25, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xfff2, 0xf}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_ife={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x92, 0x20000004, 0x7, 0xffeffffc}, 0x1}}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}}, 0x4c800) close(0xffffffffffffffff) 1.937058024s ago: executing program 3 (id=7026): syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 1.923388781s ago: executing program 3 (id=7027): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x19, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='10', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='1', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)='0', 0x1) socket$kcm(0x2d, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2002, 0x8) r4 = gettid() syz_open_procfs(r4, 0x0) ioctl$MEDIA_IOC_DEVICE_INFO(r0, 0xc1007c00, &(0x7f0000000080)) 1.829822611s ago: executing program 3 (id=7028): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x30, 0x64, 0x30, 0x30, 0x6c, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000880)={'fscrypt:', @auto=[0x63, 0x39, 0x64, 0x65, 0x64, 0x66, 0x36, 0x38, 0x36, 0x62, 0x37, 0x31, 0x8, 0x34, 0x7, 0x34]}, &(0x7f00000008c0)={0x0, "83be91e3956f7eeab185c5532a737cbf86a019abc3c6c5b882e77c6b66c6d809ae8c0052697af3e28ee0d067c73f9e8f2c1af82447d244584968c7ffb982e9b4", 0x1e}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000600), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x6d, 0x30, 0x30, 0x30, 0x32, 0x30, 0x30, 0x61, 0x30, 0x35]}, &(0x7f0000000800)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabb0600000000000000445566778899aabbccddeeff", 0x36}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x30, 0x37, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa91ccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x27}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x37, 0x30, 0x30, 0x30, 0x30, 0x32, 0x64, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778999aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0xa, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3f}, 0x48, r0) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x0, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x6f, 0x30, 0x30, 0x30, 0x8, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x58425c31ab49816a, 0x30, 0x30, 0x30, 0x30, 0x30, 0x65, 0x67, 0x30, 0x39, 0x33, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112200080000778899aabbccddeeff00aabbccddeeff00112233445566778899aabbccddeeff00", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f00000000c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "bd79659c024f48b5e34a802d41dfdc553eea39517e4be298a5e6c7c1934111314bd6d38465a2326646832764d1609201f568517d108fe44375613ec929462ced", 0x15}, 0x48, r0) 1.822266909s ago: executing program 2 (id=7029): bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x2, 0xffff1f20, 0xfffffff7}, 0x10) 1.673741443s ago: executing program 3 (id=7031): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)={0x2c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 1.6175501s ago: executing program 2 (id=7033): syz_usb_connect$uac2(0x3, 0x7b, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x21b4, 0x81, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x81, 0x80, 0x7, {0x8, 0xb, 0x1, 0x1, 0x1, 0xb, 0x20, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x5, 0x3, 0x9, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x6, 0x0, 0x6, {0x8, 0x25, 0x1, 0x83, 0xf, 0x0, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x270, 0x60, 0x8, 0x9, {0x8, 0x25, 0x1, 0x1, 0x3, 0xa, 0x8}}}}}}}}]}}, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040), 0xc, 0x0}, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000140)=0xb9) 1.583497246s ago: executing program 5 (id=7036): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002940)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r7, &(0x7f0000002900)={&(0x7f0000000340)=@xdp={0x2c, 0x300, r5, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000280)='k', 0x14}], 0x1}, 0x20000885) 1.51440138s ago: executing program 3 (id=7037): r0 = openat(0xffffffffffffff9c, 0x0, 0x2002, 0x8) lseek(0xffffffffffffffff, 0x10001, 0x0) write(r0, &(0x7f0000000180)='10000', 0x5) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r1], 0xe0}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x2, 0x4800002c, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x161a82, 0x149) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 1.33980221s ago: executing program 1 (id=7038): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000030073797a6b616c6c65723000001800128008000100767266000c00028008000100e8"], 0x48}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="28000000130001000200"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000120)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="340000001400010604000000000000000a402000", @ANYRES32=r3, @ANYBLOB="140002002001000000000000000000000000000108000800"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000160)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000800)=ANY=[@ANYBLOB="340000001400010605000000000000000a402000", @ANYRES32=r2, @ANYBLOB="140002002001"], 0x34}}, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000880)='veth0\x00', 0x6) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0xa, 0x5000, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) 1.292808055s ago: executing program 3 (id=7048): r0 = socket(0xa, 0x3, 0xff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[], 0x108}, 0x1, 0x0, 0x0, 0x20000041}, 0x40811) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c000c0005"], 0x48}, 0x1, 0x0, 0x0, 0x4044850}, 0xc040) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000180)=0x10001, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r2, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}, 0xd}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}}], 0x4, 0x40000100, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285628, 0x0) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f0000001580)={0x34, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r4, 0x40045b0a, &(0x7f0000000000)={0xffffffff, 0xfffffffe, 0x10007, 0xff, 0xd92}) write$char_usb(r4, &(0x7f0000000840)='3', 0x1) 1.228078375s ago: executing program 5 (id=7039): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x19, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='10', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='1', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)='0', 0x1) socket$kcm(0x2d, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2002, 0x8) r4 = gettid() syz_open_procfs(r4, 0x0) ioctl$MEDIA_IOC_DEVICE_INFO(r0, 0xc1007c00, &(0x7f0000000080)) 1.12826765s ago: executing program 5 (id=7040): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000900)=0x15) ioctl(r0, 0x404c4701, &(0x7f0000000a00)="01000000000000000000000001000000010000000a000000000000004000030040") 1.062813894s ago: executing program 5 (id=7041): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x1000) unshare(0x22020400) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', r0, 0x0, 0x41) 1.001935701s ago: executing program 1 (id=7043): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)='0', 0x1) fanotify_init(0x200, 0x0) socket$can_raw(0x1d, 0x3, 0x1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x161a82, 0x149) chroot(0x0) 936.928017ms ago: executing program 5 (id=7044): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x10, &(0x7f0000000000)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@call={0x85, 0x0, 0x0, 0xc}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2a, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 907.342967ms ago: executing program 0 (id=7045): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x200, 0x82) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) 849.948285ms ago: executing program 5 (id=7046): close(0x3) r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) close(r1) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x3e000, 0x1000}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1c}}, 0x4000) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x34000, 0x0) r4 = syz_ublk_setup_io_uring(0x155a, &(0x7f0000000500)={0x0, 0xa355, 0x10000, 0x2, 0x15a}, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0, &(0x7f00000000c0)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x255, 0x0, r4}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffde, 0x200, 0x6, 0x15e, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x80, 0x10000004, 0x142, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x2000, 0x20003, 0x0, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8256, 0x2, 0x3, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r11, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, r8, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f00000003c0)={0x2c, 0x18, r12}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0xffff, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xa002803f}) 777.68716ms ago: executing program 0 (id=7047): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)={0x50, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_CIDR={0x5}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 761.078898ms ago: executing program 1 (id=7049): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2002, 0x8) lseek(0xffffffffffffffff, 0x10001, 0x0) write(r0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r1], 0xe0}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x2, 0x4800002c, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x161a82, 0x149) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 677.419015ms ago: executing program 0 (id=7050): symlink(0x0, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x8800, &(0x7f0000000000)={0x0, 0xa, 0x40000}, 0x20) syz_open_procfs(0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000140)=@x86={0x4d, 0x3, 0x7, 0x0, 0x2, 0x9, 0x0, 0xe3, 0x5, 0x7, 0x5, 0x3, 0x0, 0x8, 0x4, 0x8, 0x0, 0x0, 0x0, '\x00', 0x5, 0x3}) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21}, &(0x7f0000000140)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000280), 0x82002, 0x0) write$dsp(r1, &(0x7f0000000040)='F', 0x1) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040)=0xf) 424.993755ms ago: executing program 2 (id=7051): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x109980, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, 0x0) 376.615216ms ago: executing program 1 (id=7052): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x80000001, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000380)={0xa, 0x4e21, 0x1, @loopback, 0x400014}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc895d8eb00066c2", "c5998c867c22b401046a89606ffcf92e", "2c5be7ad", "a0ca05c0707e52f4"}, 0x28) recvfrom$inet6(r1, &(0x7f00000000c0)=""/3, 0x3, 0x300, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x10000008ebc, 0x0) 205.070703ms ago: executing program 2 (id=7053): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000002080)=0x264, 0x6) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020646c2500000000002020207b1af8ff00000000bfa10000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r3, 0x1, &(0x7f00000001c0)=[0x0]) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10002}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 169.514962ms ago: executing program 0 (id=7054): syz_emit_ethernet(0x32, &(0x7f0000000100)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @local}, "4e214e20000000000000000008000004"}}}}, 0x0) 168.16224ms ago: executing program 1 (id=7055): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) ioctl(r0, 0x5422, 0x0) 88.95138ms ago: executing program 0 (id=7056): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000000340)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xa}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000022c0)='`', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r1, 0x1) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) 74.539211ms ago: executing program 2 (id=7057): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x4c, r2, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x60}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x2}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000080)="000a18000000090000eb55000000000100aa34745a1945da08e815b218b1752ad5eddec559244805bd238863fd069f79b5", 0x31, 0x4000000, &(0x7f0000000380)={0x11, 0xe56930649afa540, r6, 0x1, 0xd8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) 57.145175ms ago: executing program 0 (id=7058): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x7f, &(0x7f00000002c0)="1a00000002000000", 0x8) 0s ago: executing program 1 (id=7059): syz_open_dev$dvb_dvr(&(0x7f0000001040), 0x0, 0x100) pipe(&(0x7f00000000c0)) pselect6(0x40, &(0x7f0000000100)={0x0, 0x800000000000000, 0x0, 0x0, 0x800, 0x0, 0x8}, 0x0, &(0x7f0000000080)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6a9, 0x3ac8}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) kernel console output (not intermixed with test programs): ] usb 1-1: not running at top speed; connect to a high speed hub [ 974.361904][ T8651] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 974.368287][ T8651] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 974.368363][ T8651] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 974.427368][ T8651] gspca_main: spca501-2.14.0 probing 0000:0000 [ 974.819559][T24726] __nla_validate_parse: 3 callbacks suppressed [ 974.819598][T24726] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5736'. [ 974.934288][ T8651] gspca_spca501: reg write: error -110 [ 974.934318][ T8651] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 974.934401][ T8651] spca501 1-1:1.0: probe with driver spca501 failed with error -22 [ 974.993673][ T8651] uvcvideo 1-1:1.0: Found UVC 1.00 device (0000:0000) [ 975.010898][ T8651] uvcvideo 1-1:1.0: No streaming interface found for terminal 32770. [ 975.603741][ T5676] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 975.775862][ T5676] usb 2-1: Using ep0 maxpacket: 32 [ 975.782631][ T5676] usb 2-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 975.794059][ T190] usb 1-1: USB disconnect, device number 67 [ 975.803522][ T5676] usb 2-1: config 0 has an invalid interface number: 119 but max is 0 [ 975.803561][ T5676] usb 2-1: config 0 has no interface number 0 [ 975.803613][ T5676] usb 2-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 975.803647][ T5676] usb 2-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 975.803675][ T5676] usb 2-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 27 [ 975.803700][ T5676] usb 2-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 975.830319][T24740] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5743'. [ 975.848087][T24740] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5743'. [ 975.895178][ T5676] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 975.895219][ T5676] usb 2-1: Product: syz [ 975.895252][ T5676] usb 2-1: Manufacturer: syz [ 975.895269][ T5676] usb 2-1: SerialNumber: syz [ 975.931485][ T5676] usb 2-1: config 0 descriptor?? [ 975.942678][T24727] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 975.976275][ T5676] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.119/input/input128 [ 977.052341][T24764] FAULT_INJECTION: forcing a failure. [ 977.052341][T24764] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 977.068056][T24764] CPU: 0 UID: 0 PID: 24764 Comm: syz.2.5750 Tainted: G L syzkaller #0 PREEMPT(full) [ 977.068091][T24764] Tainted: [L]=SOFTLOCKUP [ 977.068099][T24764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 977.068110][T24764] Call Trace: [ 977.068118][T24764] [ 977.068127][T24764] dump_stack_lvl+0xe8/0x150 [ 977.068162][T24764] should_fail_ex+0x410/0x560 [ 977.068190][T24764] _copy_from_user+0x2d/0xb0 [ 977.068211][T24764] __se_sys_listns+0x28a/0x2780 [ 977.068237][T24764] ? __fget_files+0x2a/0x420 [ 977.068262][T24764] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 977.068295][T24764] ? __pfx___se_sys_listns+0x10/0x10 [ 977.068319][T24764] ? fput+0xa0/0xd0 [ 977.068353][T24764] __do_fast_syscall_32+0x27a/0x6a0 [ 977.068381][T24764] ? do_fast_syscall_32+0x33/0x70 [ 977.068406][T24764] ? asm_int80_emulation+0x1a/0x20 [ 977.068429][T24764] ? do_int80_emulation+0x299/0x500 [ 977.068458][T24764] ? trace_irq_disable+0x3b/0x140 [ 977.068480][T24764] do_fast_syscall_32+0x33/0x70 [ 977.068506][T24764] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 977.068529][T24764] RIP: 0023:0xf7f380ec [ 977.068546][T24764] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 977.068563][T24764] RSP: 002b:00000000f53f650c EFLAGS: 00000206 ORIG_RAX: 00000000000001d6 [ 977.068584][T24764] RAX: ffffffffffffffda RBX: 00000000800000c0 RCX: 0000000000000000 [ 977.068598][T24764] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000000000000000 [ 977.068610][T24764] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 977.068622][T24764] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 977.068633][T24764] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 977.068660][T24764] [ 977.367069][ T190] hid_parser_main: 409 callbacks suppressed [ 977.378417][ T190] hid-generic 0000:0000:0000.0041: unknown main item tag 0x0 [ 977.394948][ T190] hid-generic 0000:0000:0000.0041: hidraw0: HID v0.00 Device [syz1] on syz0 [ 978.024482][ T30] usb 2-1: USB disconnect, device number 60 [ 978.679533][T24801] FAULT_INJECTION: forcing a failure. [ 978.679533][T24801] name failslab, interval 1, probability 0, space 1, times 0 [ 978.679576][T24801] CPU: 1 UID: 0 PID: 24801 Comm: syz.2.5762 Tainted: G L syzkaller #0 PREEMPT(full) [ 978.679601][T24801] Tainted: [L]=SOFTLOCKUP [ 978.679608][T24801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 978.679618][T24801] Call Trace: [ 978.679625][T24801] [ 978.679633][T24801] dump_stack_lvl+0xe8/0x150 [ 978.679665][T24801] should_fail_ex+0x410/0x560 [ 978.679698][T24801] should_failslab+0xa8/0x100 [ 978.679722][T24801] __kmalloc_cache_noprof+0xa3/0x600 [ 978.679751][T24801] ? nf_tables_newtable+0x43e/0x1990 [ 978.679778][T24801] ? nf_tables_newtable+0x43e/0x1990 [ 978.679808][T24801] nf_tables_newtable+0x43e/0x1990 [ 978.679853][T24801] nfnetlink_rcv+0x1288/0x28c0 [ 978.679904][T24801] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 978.679938][T24801] ? ref_tracker_free+0x689/0x830 [ 978.679978][T24801] ? skb_clone+0x246/0x3a0 [ 978.680010][T24801] ? __netlink_deliver_tap+0x811/0x860 [ 978.680040][T24801] ? netlink_deliver_tap+0x2e/0x1b0 [ 978.680060][T24801] ? netlink_deliver_tap+0x2e/0x1b0 [ 978.680087][T24801] netlink_unicast+0x7bd/0x940 [ 978.680116][T24801] netlink_sendmsg+0x813/0xb40 [ 978.680145][T24801] ? __pfx_netlink_sendmsg+0x10/0x10 [ 978.680174][T24801] ? apparmor_socket_sendmsg+0x98/0x360 [ 978.680204][T24801] ? __pfx_netlink_sendmsg+0x10/0x10 [ 978.680224][T24801] sock_sendmsg_nosec+0x13a/0x180 [ 978.680250][T24801] ____sys_sendmsg+0x54e/0x850 [ 978.680275][T24801] ? __pfx_____sys_sendmsg+0x10/0x10 [ 978.680308][T24801] ___sys_sendmsg+0x2a5/0x360 [ 978.680327][T24801] ? __lock_acquire+0x6df/0x2e50 [ 978.680350][T24801] ? __pfx____sys_sendmsg+0x10/0x10 [ 978.680369][T24801] ? get_pid_task+0x20/0x1f0 [ 978.680386][T24801] ? get_pid_task+0x20/0x1f0 [ 978.680402][T24801] ? get_pid_task+0x20/0x1f0 [ 978.680446][T24801] ? __fget_files+0x2a/0x420 [ 978.680468][T24801] ? __fget_files+0x3a2/0x420 [ 978.680499][T24801] __sys_sendmsg+0x177/0x240 [ 978.680521][T24801] ? __pfx___sys_sendmsg+0x10/0x10 [ 978.680557][T24801] __do_fast_syscall_32+0x27a/0x6a0 [ 978.680585][T24801] ? do_fast_syscall_32+0x33/0x70 [ 978.680610][T24801] ? asm_int80_emulation+0x1a/0x20 [ 978.680627][T24801] ? do_int80_emulation+0x299/0x500 [ 978.680651][T24801] ? trace_irq_disable+0x3b/0x140 [ 978.680673][T24801] do_fast_syscall_32+0x33/0x70 [ 978.680699][T24801] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 978.680721][T24801] RIP: 0023:0xf7f380ec [ 978.680737][T24801] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 978.680752][T24801] RSP: 002b:00000000f53f650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 978.680772][T24801] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 978.680785][T24801] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 978.680796][T24801] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 978.680806][T24801] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 978.680817][T24801] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 978.680844][T24801] [ 978.781487][T24803] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5763'. [ 978.812288][T24803] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5763'. [ 979.058447][T24808] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5765'. [ 979.907679][T24822] FAULT_INJECTION: forcing a failure. [ 979.907679][T24822] name failslab, interval 1, probability 0, space 1, times 0 [ 979.933695][T24822] CPU: 1 UID: 0 PID: 24822 Comm: syz.2.5770 Tainted: G L syzkaller #0 PREEMPT(full) [ 979.933716][T24822] Tainted: [L]=SOFTLOCKUP [ 979.933720][T24822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 979.933727][T24822] Call Trace: [ 979.933732][T24822] [ 979.933737][T24822] dump_stack_lvl+0xe8/0x150 [ 979.933758][T24822] should_fail_ex+0x410/0x560 [ 979.933778][T24822] should_failslab+0xa8/0x100 [ 979.933792][T24822] __kmalloc_noprof+0xfe/0x720 [ 979.933806][T24822] ? rcu_is_watching+0x16/0xb0 [ 979.933819][T24822] ? tomoyo_realpath_from_path+0xef/0x640 [ 979.933831][T24822] ? tomoyo_realpath_from_path+0xef/0x640 [ 979.933846][T24822] tomoyo_realpath_from_path+0xef/0x640 [ 979.933862][T24822] ? tomoyo_path2_perm+0x299/0x760 [ 979.933878][T24822] tomoyo_path2_perm+0x2e7/0x760 [ 979.933895][T24822] ? __pfx_tomoyo_path2_perm+0x10/0x10 [ 979.933913][T24822] ? current_check_refer_path+0x867/0x1380 [ 979.933924][T24822] ? current_check_refer_path+0x87d/0x1380 [ 979.933938][T24822] ? __lock_acquire+0x6df/0x2e50 [ 979.933968][T24822] tomoyo_path_rename+0x121/0x1b0 [ 979.933982][T24822] ? __pfx_tomoyo_path_rename+0x10/0x10 [ 979.933998][T24822] ? _raw_spin_unlock+0x28/0x50 [ 979.934013][T24822] security_path_rename+0x248/0x460 [ 979.934028][T24822] filename_renameat2+0x4ba/0x9a0 [ 979.934047][T24822] ? __pfx_filename_renameat2+0x10/0x10 [ 979.934064][T24822] ? strncpy_from_user+0x150/0x2c0 [ 979.934080][T24822] ? do_getname+0x151/0x250 [ 979.934094][T24822] __se_sys_renameat2+0x5a/0x2c0 [ 979.934107][T24822] __do_fast_syscall_32+0x27a/0x6a0 [ 979.934123][T24822] ? do_fast_syscall_32+0x33/0x70 [ 979.934137][T24822] ? asm_int80_emulation+0x1a/0x20 [ 979.934146][T24822] ? do_int80_emulation+0x299/0x500 [ 979.934160][T24822] ? trace_irq_disable+0x3b/0x140 [ 979.934172][T24822] do_fast_syscall_32+0x33/0x70 [ 979.934187][T24822] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 979.934198][T24822] RIP: 0023:0xf7f380ec [ 979.934209][T24822] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 979.934218][T24822] RSP: 002b:00000000f53f650c EFLAGS: 00000206 ORIG_RAX: 0000000000000161 [ 979.934231][T24822] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000240 [ 979.934238][T24822] RDX: 0000000000000004 RSI: 0000000080000000 RDI: 0000000000000002 [ 979.934244][T24822] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 979.934250][T24822] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 979.934256][T24822] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 979.934272][T24822] [ 979.935407][T24822] ERROR: Out of memory at tomoyo_realpath_from_path. [ 980.116220][ T30] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 980.268584][ T30] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 980.269898][ T30] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 980.269924][ T30] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 980.269948][ T30] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 47 [ 980.269981][ T30] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.323140][T24820] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 980.360842][ T30] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 980.885986][ T30] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 980.905169][ T30] usb 1-1: USB disconnect, device number 68 [ 981.364433][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 981.598149][T24838] IPv6: A: Disabled Multicast RS [ 981.903962][T24849] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5780'. [ 983.963592][T14302] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 984.113548][T14302] usb 2-1: Using ep0 maxpacket: 8 [ 984.119699][T14302] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 984.135650][T14302] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 984.146776][T14302] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.159521][T14302] usb 2-1: config 0 descriptor?? [ 984.406652][T14302] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 984.606911][T14302] usb 2-1: USB disconnect, device number 61 [ 985.640883][T24921] tipc: Started in network mode [ 985.640933][T24921] tipc: Node identity 76f59ac3847d, cluster identity 4711 [ 985.642083][T24921] tipc: Enabled bearer , priority 0 [ 985.673770][T24921] syzkaller0: entered promiscuous mode [ 985.673806][T24921] syzkaller0: entered allmulticast mode [ 985.738857][T24921] tipc: Resetting bearer [ 985.817780][T24919] tipc: Resetting bearer [ 985.907944][T24919] tipc: Disabling bearer [ 986.663725][ T190] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 986.810600][T24948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 986.823978][ T190] usb 4-1: Using ep0 maxpacket: 16 [ 986.831105][ T190] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 986.841630][T24948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 986.850817][ T190] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 986.850860][ T190] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 986.850901][ T190] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 986.850945][ T190] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.897272][ T190] usb 4-1: config 0 descriptor?? [ 987.317381][T24941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 987.317824][T24941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 987.360696][ T190] microsoft 0003:045E:07DA.0042: unknown main item tag 0x0 [ 987.368218][ T190] microsoft 0003:045E:07DA.0042: ignoring exceeding usage max [ 987.390088][ T190] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0042/input/input129 [ 987.449499][T24957] validate_nla: 55 callbacks suppressed [ 987.459629][T24957] netlink: 'syz.0.5825': attribute type 2 has an invalid length. [ 987.459666][T24957] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5825'. [ 987.533296][ T190] microsoft 0003:045E:07DA.0042: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 987.552083][T24957] : entered promiscuous mode [ 987.565483][ T8657] usb 4-1: USB disconnect, device number 69 [ 987.572076][T24959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 987.582671][T24959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 987.777625][T24962] fido_id[24962]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 989.586070][T25012] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5846'. [ 991.367414][T25057] netlink: 'syz.0.5864': attribute type 2 has an invalid length. [ 991.367440][T25057] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5864'. [ 992.058854][T25084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 992.059255][T25084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 992.077698][T25084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 992.078121][T25084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 992.215134][ T190] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 992.288960][T25084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 992.290056][T25084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 992.377568][ T190] usb 2-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 992.389453][ T190] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 992.400393][ T190] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 992.421107][ T190] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 992.429320][ T190] usb 2-1: Product: syz [ 992.429340][ T190] usb 2-1: Manufacturer: syz [ 992.665317][ T190] usb 2-1: USB disconnect, device number 62 [ 992.934840][T25092] syz_tun: entered allmulticast mode [ 992.986576][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.986647][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.073988][T14302] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 993.234286][T14302] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 993.245004][T14302] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 993.260473][T14302] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 993.271242][T14302] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 993.285867][T25088] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 993.302152][T14302] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 993.334386][T25101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 993.343930][T25101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 993.423044][T25102] input: syz0 as /devices/virtual/input/input130 [ 993.679707][T14302] usb 1-1: USB disconnect, device number 69 [ 995.528876][T25153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 995.545043][T25153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 996.390048][T25189] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5918'. [ 996.893570][ T8657] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 997.044647][ T8657] usb 2-1: Using ep0 maxpacket: 8 [ 997.045375][ T8657] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 997.046539][ T8657] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 997.046580][ T8657] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.050016][ T8657] usb 2-1: config 0 descriptor?? [ 997.060541][T25217] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5929'. [ 997.092232][T25217] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5929'. [ 997.123113][T25217] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5929'. [ 997.267825][ T8657] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 997.484365][ T8657] usb 2-1: USB disconnect, device number 63 [ 997.558579][T25227] syzkaller0: entered promiscuous mode [ 997.564391][T25227] syzkaller0: entered allmulticast mode [ 997.582447][T25227] tipc: Started in network mode [ 997.587859][T25227] tipc: Node identity fad2caac53d1, cluster identity 4711 [ 997.592565][T25229] fuse: Bad value for 'fd' [ 997.604122][T25227] tipc: Enabled bearer , priority 0 [ 997.618775][T25226] tipc: Resetting bearer [ 997.676030][T25226] tipc: Disabling bearer [ 997.797775][T25235] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5939'. [ 998.735299][ T30] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 998.884326][ T30] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 998.885425][ T30] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 998.885455][ T30] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 998.885491][ T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.924334][T25275] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 998.962956][ T30] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 999.157518][ T30] usb 4-1: USB disconnect, device number 70 [ 999.286618][T25290] netlink: 84 bytes leftover after parsing attributes in process `syz.5.5962'. [ 999.757965][T25315] syz_tun: entered allmulticast mode [ 1000.744769][ T30] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1000.779039][ T5676] usb 3-1: USB disconnect, device number 25 [ 1000.793562][ T8657] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1000.894076][ T30] usb 1-1: Using ep0 maxpacket: 32 [ 1000.899539][ T30] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1000.916272][ T30] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1000.925795][ T30] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1000.925820][ T30] usb 1-1: Product: syz [ 1000.925833][ T30] usb 1-1: Manufacturer: syz [ 1000.925847][ T30] usb 1-1: SerialNumber: syz [ 1000.933035][ T30] usb 1-1: config 0 descriptor?? [ 1000.933991][T25338] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1000.942303][ T30] hub 1-1:0.0: bad descriptor, ignoring hub [ 1000.942328][ T30] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1000.947401][ T8657] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1000.960996][ T8657] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1000.961028][ T8657] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1000.961066][ T8657] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.986040][T25342] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1001.025308][ T8657] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1001.136631][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1001.157767][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1001.165782][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1001.192099][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1001.205141][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1001.514466][ T8657] usb 4-1: USB disconnect, device number 71 [ 1002.233539][ T5676] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1002.276773][T25352] bridge0: port 1(bridge_slave_0) entered blocking state [ 1002.277198][T25352] bridge0: port 1(bridge_slave_0) entered disabled state [ 1002.277329][T25352] bridge_slave_0: entered allmulticast mode [ 1002.279310][T25352] bridge_slave_0: entered promiscuous mode [ 1002.290310][T25352] bridge0: port 2(bridge_slave_1) entered blocking state [ 1002.291434][T25352] bridge0: port 2(bridge_slave_1) entered disabled state [ 1002.291664][T25352] bridge_slave_1: entered allmulticast mode [ 1002.295065][T25352] bridge_slave_1: entered promiscuous mode [ 1002.369852][T25352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1002.380588][T25352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1002.394715][ T5676] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1002.405086][ T5676] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1002.416286][ T5676] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1002.424620][T25352] team0: Port device team_slave_0 added [ 1002.426254][ T5676] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1002.427973][T25352] team0: Port device team_slave_1 added [ 1002.455763][T25360] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1002.489565][ T5676] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1002.509685][ T1468] raw-gadget.1 gadget.0: failed to queue suspend event [ 1002.520512][T25352] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1002.520547][T25352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1002.520593][T25352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1002.569044][T25352] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1002.576477][T25352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1002.576529][T25352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1002.577864][T25338] raw-gadget.1 gadget.0: failed to queue resume event [ 1002.599759][T23064] raw-gadget.1 gadget.0: failed to queue suspend event [ 1002.667059][T25338] raw-gadget.1 gadget.0: failed to queue resume event [ 1002.703770][ T1468] raw-gadget.1 gadget.0: failed to queue suspend event [ 1002.784075][T25338] raw-gadget.1 gadget.0: failed to queue resume event [ 1002.804470][T25352] hsr_slave_0: entered promiscuous mode [ 1002.812420][T25352] hsr_slave_1: entered promiscuous mode [ 1002.826087][ T5676] usb 2-1: USB disconnect, device number 64 [ 1002.858398][ T1468] raw-gadget.1 gadget.0: failed to queue suspend event [ 1002.927583][T25338] raw-gadget.1 gadget.0: failed to queue resume event [ 1002.957719][ T1468] raw-gadget.1 gadget.0: failed to queue suspend event [ 1003.054330][T25338] raw-gadget.1 gadget.0: failed to queue resume event [ 1003.106969][ T1468] raw-gadget.1 gadget.0: failed to queue suspend event [ 1003.176414][T25338] raw-gadget.1 gadget.0: failed to queue resume event [ 1003.253514][ T8363] raw-gadget.1 gadget.0: failed to queue suspend event [ 1003.293698][ T5619] Bluetooth: hci2: command tx timeout [ 1003.335497][T25338] raw-gadget.1 gadget.0: failed to queue resume event [ 1003.430633][ T8363] raw-gadget.1 gadget.0: failed to queue suspend event [ 1003.546747][T25338] raw-gadget.1 gadget.0: failed to queue resume event [ 1003.571141][ T1468] raw-gadget.1 gadget.0: failed to queue suspend event [ 1003.665335][T25338] raw-gadget.1 gadget.0: failed to queue disconnect event [ 1003.806865][ T30] usb 1-1: USB disconnect, device number 70 [ 1003.826942][T25352] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1003.849984][T25352] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1004.387554][T25352] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1004.387611][T25352] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1004.501195][T25352] team0: Port device netdevsim1 removed [ 1004.531806][T25352] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1004.531861][T25352] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1004.663558][ T5676] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 1004.727216][T25352] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1004.727272][T25352] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1004.829794][ T5676] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1004.840367][ T5676] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1004.840414][ T5676] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1004.840467][ T5676] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1004.895757][T25398] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1004.909247][ T5676] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1005.157576][ T190] usb 2-1: USB disconnect, device number 65 [ 1005.375393][ T5619] Bluetooth: hci2: command tx timeout [ 1005.550282][T25352] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1005.602318][T25352] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1005.612790][T25352] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1005.652288][T25352] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1005.653100][T25352] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1005.671196][T25352] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1005.680047][T25352] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1005.711993][T25352] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1005.783877][ T8657] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1005.934248][ T8657] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1005.946386][ T8657] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1005.946434][ T8657] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1005.946495][ T8657] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1005.993164][T25418] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1006.014356][ T8657] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1006.173772][T25352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1006.256111][T25352] 8021q: adding VLAN 0 to HW filter on device team0 [ 1006.306621][ T8657] usb 1-1: USB disconnect, device number 71 [ 1006.319854][T23061] bridge0: port 1(bridge_slave_0) entered blocking state [ 1006.319954][T23061] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1006.357654][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 1006.357785][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1006.608931][T25352] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1006.782972][T25352] veth0_vlan: entered promiscuous mode [ 1006.813827][T25352] veth1_vlan: entered promiscuous mode [ 1006.921383][T25352] veth0_macvtap: entered promiscuous mode [ 1006.947595][T25352] veth1_macvtap: entered promiscuous mode [ 1007.015559][T25352] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1007.030353][T25352] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1007.096679][T23064] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1007.123986][ T8363] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1007.124046][ T8363] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1007.228580][T25457] bridge0: port 1(bridge_slave_0) entered disabled state [ 1007.374103][T23063] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1007.374164][T23063] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1007.374214][T23063] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1007.374251][T23063] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1007.374286][T23063] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1007.445085][T25461] tipc: Started in network mode [ 1007.445135][T25461] tipc: Node identity 7f000001, cluster identity 4711 [ 1007.449494][T25461] tipc: New replicast peer: 127.0.0.1 [ 1007.449926][T25461] tipc: Enabled bearer , priority 10 [ 1007.458279][ T5619] Bluetooth: hci2: command tx timeout [ 1007.475617][ T1468] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1007.475637][ T1468] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1007.662155][T19594] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1007.662196][T19594] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1007.754989][T25474] syz_tun: entered allmulticast mode [ 1007.803534][ T8657] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 1007.836176][T25479] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6029'. [ 1007.954395][ T8657] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1007.970064][ T8657] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1007.970100][ T8657] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1007.992902][ T8657] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 1007.992943][ T8657] usb 4-1: SerialNumber: syz [ 1008.064061][ T30] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1008.185495][T25489] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6032'. [ 1008.221991][T25463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1008.232579][ T30] usb 2-1: Using ep0 maxpacket: 32 [ 1008.238533][ T30] usb 2-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 1008.249269][ T30] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 1008.249295][ T30] usb 2-1: config 0 has no interface number 0 [ 1008.249332][ T30] usb 2-1: config 0 interface 196 altsetting 55 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 1008.249380][ T30] usb 2-1: config 0 interface 196 altsetting 55 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1008.249402][ T30] usb 2-1: config 0 interface 196 altsetting 55 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1008.249426][ T30] usb 2-1: config 0 interface 196 altsetting 55 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1008.249447][ T30] usb 2-1: config 0 interface 196 has no altsetting 0 [ 1008.316377][T25463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1008.340256][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1008.340297][ T30] usb 2-1: Product: syz [ 1008.340352][ T30] usb 2-1: Manufacturer: syz [ 1008.340371][ T30] usb 2-1: SerialNumber: syz [ 1008.370154][ T30] usb 2-1: config 0 descriptor?? [ 1008.475508][ T5676] tipc: Node number set to 2130706433 [ 1008.537935][ T8657] usb 4-1: invalid UAC_HEADER (v1) [ 1008.609349][ T5676] usb 2-1: USB disconnect, device number 66 [ 1008.619088][ T8657] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1008.638160][ T8657] usb 4-1: USB disconnect, device number 72 [ 1008.779190][T12053] udevd[12053]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1009.322702][T25523] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6046'. [ 1009.322756][T25523] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1009.503469][ T30] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1009.533559][ T5619] Bluetooth: hci2: command tx timeout [ 1009.567636][T25532] syz_tun: entered allmulticast mode [ 1009.654221][ T30] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1009.664744][ T30] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1009.674901][ T30] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1009.685137][ T30] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1009.694302][ T30] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1009.709312][ T30] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1009.717455][ T30] usb 4-1: Product: syz [ 1009.721723][ T30] usb 4-1: Manufacturer: syz [ 1009.733491][ T8651] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1009.742982][ T30] cdc_wdm 4-1:1.0: skipping garbage [ 1009.748349][ T30] cdc_wdm 4-1:1.0: skipping garbage [ 1009.756051][ T30] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1009.762349][ T30] cdc_wdm 4-1:1.0: Unknown control protocol [ 1009.883592][ T8651] usb 1-1: Using ep0 maxpacket: 8 [ 1009.889668][ T8651] usb 1-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 1009.904906][ T8651] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1009.915641][ T8651] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1009.915661][ T8651] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1009.915674][ T8651] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1009.952108][ T8651] usb 1-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 1009.952148][ T8651] usb 1-1: Product: syz [ 1009.952179][ T8651] usb 1-1: Manufacturer: syz [ 1009.952196][ T8651] usb 1-1: SerialNumber: syz [ 1009.980679][ T8651] usb 1-1: config 0 descriptor?? [ 1010.019875][ T5683] usb 4-1: USB disconnect, device number 73 [ 1010.183596][ T8651] rc_core: IR keymap rc-imon-rsc not found [ 1010.183633][ T8651] Registered IR keymap rc-empty [ 1010.198510][ T8651] rc rc0: iMON Station as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1010.214879][ T8651] input: iMON Station as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input131 [ 1010.231416][ T8651] imon_raw 1-1:0.0: probe with driver imon_raw failed with error -90 [ 1010.276815][ T8651] usb 1-1: USB disconnect, device number 72 [ 1011.110806][ T8651] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1011.264691][ T8651] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1011.277793][ T8651] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1011.300414][ T8651] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1011.314667][ T8651] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 1011.314707][ T8651] usb 1-1: SerialNumber: syz [ 1011.549909][T25553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1011.562128][T25553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1011.687207][ T8651] usb 1-1: invalid UAC_HEADER (v1) [ 1011.786841][ T8651] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1011.799110][ T8651] usb 1-1: USB disconnect, device number 73 [ 1011.846193][T12053] udevd[12053]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1012.653819][ T5683] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1012.814581][ T5683] usb 3-1: Using ep0 maxpacket: 32 [ 1012.817007][ T5683] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1012.818642][ T5683] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1012.820704][ T5683] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1012.820726][ T5683] usb 3-1: Product: syz [ 1012.820739][ T5683] usb 3-1: Manufacturer: syz [ 1012.820752][ T5683] usb 3-1: SerialNumber: syz [ 1012.828159][ T5683] usb 3-1: config 0 descriptor?? [ 1012.829055][T25603] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1012.837321][ T5683] hub 3-1:0.0: bad descriptor, ignoring hub [ 1012.837344][ T5683] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1013.573790][ T5683] usb 3-1: USB disconnect, device number 26 [ 1013.932134][T25641] netlink: 14 bytes leftover after parsing attributes in process `syz.5.6091'. [ 1014.318778][T25664] loop5: detected capacity change from 0 to 7 [ 1014.321541][T25664] Dev loop5: unable to read RDB block 7 [ 1014.321568][T25664] loop5: AHDI p1 p3 p4 [ 1014.321588][T25664] loop5: partition table partially beyond EOD, truncated [ 1014.324086][T25664] loop5: p1 size 100663296 extends beyond EOD, truncated [ 1014.326482][T25664] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 1014.519821][ T7147] udevd[7147]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 1014.529461][T12053] udevd[12053]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 1015.286537][T25699] loop5: detected capacity change from 0 to 7 [ 1015.287585][T25699] Dev loop5: unable to read RDB block 7 [ 1015.287625][T25699] loop5: unable to read partition table [ 1015.287810][T25699] loop5: partition table beyond EOD, truncated [ 1015.287827][T25699] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1015.483549][ T8651] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1015.613579][ T8651] usb 4-1: device descriptor read/64, error -71 [ 1015.853653][ T8651] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1015.983569][ T8651] usb 4-1: device descriptor read/64, error -71 [ 1016.094378][ T8651] usb usb4-port1: attempt power cycle [ 1016.360243][T25734] loop5: detected capacity change from 0 to 7 [ 1016.387507][T25734] Dev loop5: unable to read RDB block 7 [ 1016.396062][T25734] loop5: unable to read partition table [ 1016.402588][T25734] loop5: partition table beyond EOD, truncated [ 1016.410446][T25734] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1016.433466][ T8651] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1016.465360][ T8651] usb 4-1: device descriptor read/8, error -71 [ 1016.703755][ T8651] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1016.724133][ T8651] usb 4-1: device descriptor read/8, error -71 [ 1016.838132][ T8651] usb usb4-port1: unable to enumerate USB device [ 1017.553527][ T8651] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1017.706058][ T8651] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1017.716893][ T8651] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1017.716938][ T8651] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1017.716971][ T8651] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1017.717018][ T8651] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1017.717045][ T8651] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1017.770869][ T8651] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1017.770899][ T8651] usb 1-1: Product: syz [ 1017.770934][ T8651] usb 1-1: Manufacturer: syz [ 1017.793303][ T8651] cdc_wdm 1-1:1.0: skipping garbage [ 1017.793338][ T8651] cdc_wdm 1-1:1.0: skipping garbage [ 1017.806323][ T8651] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1017.806369][ T8651] cdc_wdm 1-1:1.0: Unknown control protocol [ 1018.159286][T25772] loop5: detected capacity change from 0 to 7 [ 1018.168158][T25772] Dev loop5: unable to read RDB block 7 [ 1018.175801][T25772] loop5: unable to read partition table [ 1018.176089][T25772] loop5: partition table beyond EOD, truncated [ 1018.176163][T25772] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1018.360293][ C0] cdc_wdm 1-1:1.0: Unexpected error -71 [ 1018.361318][ C0] wdm_int_callback: 13 callbacks suppressed [ 1018.361342][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1018.361360][ C0] wdm_int_callback: 14 callbacks suppressed [ 1018.361376][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1018.361585][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1018.361603][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1018.361813][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1018.361833][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1018.362032][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1018.362052][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1018.362254][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1018.362271][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1018.362479][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1018.362499][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1018.362702][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1018.362721][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1018.362922][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1018.362941][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1018.363147][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1018.363169][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1018.369017][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 1018.369041][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 1018.501496][ T5683] usb 1-1: USB disconnect, device number 74 [ 1018.501595][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1018.535368][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1018.546711][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1018.555304][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1018.557862][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1018.559479][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1019.109838][T24795] syz_tun (unregistering): left allmulticast mode [ 1019.255603][T25780] bridge0: port 1(bridge_slave_0) entered blocking state [ 1019.262940][T25780] bridge0: port 1(bridge_slave_0) entered disabled state [ 1019.263101][T25780] bridge_slave_0: entered allmulticast mode [ 1019.278679][T25780] bridge_slave_0: entered promiscuous mode [ 1019.293177][T25780] bridge0: port 2(bridge_slave_1) entered blocking state [ 1019.302354][T25780] bridge0: port 2(bridge_slave_1) entered disabled state [ 1019.311418][T25780] bridge_slave_1: entered allmulticast mode [ 1019.321052][T25780] bridge_slave_1: entered promiscuous mode [ 1019.578508][ T1468] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.643814][T25780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1019.658102][T25780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1019.707372][T25780] team0: Port device team_slave_0 added [ 1019.718546][T25780] team0: Port device team_slave_1 added [ 1019.791728][T25780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1019.791755][T25780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1019.792003][T25780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1019.926192][ T1468] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.962083][T25780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1019.962121][T25780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1019.962146][T25780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1020.065513][ T1468] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1020.129016][T25780] hsr_slave_0: entered promiscuous mode [ 1020.137513][T25780] hsr_slave_1: entered promiscuous mode [ 1020.144233][T25780] debugfs: 'hsr0' already exists in 'hsr' [ 1020.144389][T25780] Cannot create hsr debugfs directory [ 1020.194648][ T1468] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1020.653670][ T52] Bluetooth: hci5: command tx timeout [ 1020.823724][ T30] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1020.959907][ T1468] bridge0: port 2(bridge_slave_1) entered disabled state [ 1020.968498][ T1468] bridge_slave_0: left allmulticast mode [ 1020.973624][ T30] usb 1-1: device descriptor read/64, error -71 [ 1020.981980][ T1468] bridge0: port 1(bridge_slave_0) entered disabled state [ 1021.213693][ T30] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1021.343487][ T30] usb 1-1: device descriptor read/64, error -71 [ 1021.453958][ T30] usb usb1-port1: attempt power cycle [ 1021.467201][ T1468] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1021.481591][ T1468] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1021.497070][ T1468] bond0 (unregistering): Released all slaves [ 1021.511771][ T1468] bond2 (unregistering): Released all slaves [ 1021.539572][ T1468] bond1 (unregistering): Released all slaves [ 1021.793691][ T30] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1021.806633][ T1468] ¿: left promiscuous mode [ 1021.814343][ T30] usb 1-1: device descriptor read/8, error -71 [ 1022.053569][ T30] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1022.074366][ T30] usb 1-1: device descriptor read/8, error -71 [ 1022.187714][ T30] usb usb1-port1: unable to enumerate USB device [ 1022.734794][ T52] Bluetooth: hci5: command tx timeout [ 1023.167906][ T1468] team0 (unregistering): Port device team_slave_1 removed [ 1023.198358][ T1468] team0 (unregistering): Port device team_slave_0 removed [ 1023.974834][T25780] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1023.999244][T25780] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1024.008929][T25780] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1024.035949][T25780] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1024.045512][T25780] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1024.065384][T25780] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1024.074119][T25780] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1024.097908][T25780] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1024.114973][ T1468] IPVS: stop unused estimator thread 0... [ 1024.237967][T25780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1024.262167][T25780] 8021q: adding VLAN 0 to HW filter on device team0 [ 1024.275930][ T1468] bridge0: port 1(bridge_slave_0) entered blocking state [ 1024.276070][ T1468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1024.306797][T19594] bridge0: port 2(bridge_slave_1) entered blocking state [ 1024.306907][T19594] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1024.422020][T25780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1024.499132][T25780] veth0_vlan: entered promiscuous mode [ 1024.535205][T25780] veth1_vlan: entered promiscuous mode [ 1024.619570][T25780] veth0_macvtap: entered promiscuous mode [ 1024.632309][T25780] veth1_macvtap: entered promiscuous mode [ 1024.669725][T25780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1024.686395][T25780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1024.772660][T23057] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.776209][T23057] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.776596][T23057] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.815279][ T52] Bluetooth: hci5: command tx timeout [ 1024.815622][ T1468] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.927025][T19594] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1024.927062][T19594] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1025.023891][T19594] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1025.029410][T19594] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1025.933743][ T8657] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1026.065089][ T8657] usb 2-1: device descriptor read/64, error -71 [ 1026.242012][T25939] netlink: zone id is out of range [ 1026.242227][T25939] netlink: zone id is out of range [ 1026.266528][T25939] netlink: zone id is out of range [ 1026.274682][T25939] netlink: zone id is out of range [ 1026.286223][T25939] netlink: zone id is out of range [ 1026.286450][T25939] netlink: zone id is out of range [ 1026.286496][T25939] netlink: zone id is out of range [ 1026.307876][T25939] netlink: zone id is out of range [ 1026.308028][T25939] netlink: zone id is out of range [ 1026.308237][T25939] netlink: zone id is out of range [ 1026.323718][ T8657] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1026.454400][ T8657] usb 2-1: device descriptor read/64, error -71 [ 1026.461804][ T5619] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1026.476972][ T5619] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1026.477987][ T5619] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1026.478836][ T5619] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1026.479401][ T5619] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1026.564069][ T8657] usb usb2-port1: attempt power cycle [ 1026.771053][T16295] syz_tun (unregistering): left allmulticast mode [ 1026.893752][ T52] Bluetooth: hci5: command tx timeout [ 1026.903875][ T8657] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1026.926255][ T8657] usb 2-1: device descriptor read/8, error -71 [ 1027.163731][ T8657] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1027.184127][ T8657] usb 2-1: device descriptor read/8, error -71 [ 1027.266081][T25960] input: syz1 as /devices/virtual/input/input133 [ 1027.298577][ T8657] usb usb2-port1: unable to enumerate USB device [ 1027.340003][T19594] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1027.351690][T19594] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.439123][T25944] bridge0: port 1(bridge_slave_0) entered blocking state [ 1027.439609][T25944] bridge0: port 1(bridge_slave_0) entered disabled state [ 1027.439739][T25944] bridge_slave_0: entered allmulticast mode [ 1027.441928][T25944] bridge_slave_0: entered promiscuous mode [ 1027.453359][T25944] bridge0: port 2(bridge_slave_1) entered blocking state [ 1027.455522][T25944] bridge0: port 2(bridge_slave_1) entered disabled state [ 1027.455658][T25944] bridge_slave_1: entered allmulticast mode [ 1027.459168][T25944] bridge_slave_1: entered promiscuous mode [ 1027.567700][T25944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1027.573765][ T30] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1027.577008][T25944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1027.622308][T19594] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1027.622355][T19594] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.671054][T25944] team0: Port device team_slave_0 added [ 1027.675725][T25944] team0: Port device team_slave_1 added [ 1027.725954][ T30] usb 1-1: Using ep0 maxpacket: 16 [ 1027.729160][ T30] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1027.736295][ T30] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.736319][ T30] usb 1-1: Product: syz [ 1027.736332][ T30] usb 1-1: Manufacturer: syz [ 1027.736346][ T30] usb 1-1: SerialNumber: syz [ 1027.744057][ T30] usb 1-1: config 0 descriptor?? [ 1027.791233][T19594] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1027.808020][T19594] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1027.878012][T25944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1027.878045][T25944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1027.878090][T25944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1027.929026][T25944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1027.929059][T25944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1027.929110][T25944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1028.060694][T25944] hsr_slave_0: entered promiscuous mode [ 1028.062005][T25944] hsr_slave_1: entered promiscuous mode [ 1028.062820][T25944] debugfs: 'hsr0' already exists in 'hsr' [ 1028.062838][T25944] Cannot create hsr debugfs directory [ 1028.182539][ T30] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1028.209669][ T30] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1028.211844][ T30] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1028.211891][ T30] usb 1-1: media controller created [ 1028.272954][ T30] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1028.302151][T25982] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6198'. [ 1028.574640][ T52] Bluetooth: hci3: command tx timeout [ 1028.715981][T19594] bridge_slave_1: left promiscuous mode [ 1028.716245][T19594] bridge0: port 2(bridge_slave_1) entered disabled state [ 1028.738662][T19594] bridge_slave_0: left allmulticast mode [ 1028.738698][T19594] bridge_slave_0: left promiscuous mode [ 1028.740808][T19594] bridge0: port 1(bridge_slave_0) entered disabled state [ 1028.771496][T19594] pim6reg: left allmulticast mode [ 1028.843748][ T30] zl10353_read_register: readreg error (reg=127, ret==0) [ 1028.843815][ T30] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1028.843843][ T30] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1028.846370][T25960] dtv5100: wlen = 0, aborting. [ 1028.864139][T25997] loop5: detected capacity change from 0 to 7 [ 1028.870704][T25997] Dev loop5: unable to read RDB block 7 [ 1028.870744][T25997] loop5: unable to read partition table [ 1028.870943][T25997] loop5: partition table beyond EOD, truncated [ 1028.872685][T25997] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1028.922036][ T30] usb 1-1: USB disconnect, device number 79 [ 1029.031518][ T30] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1029.252075][T19594] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1029.262611][T19594] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1029.273330][T19594] bond0 (unregistering): Released all slaves [ 1029.281538][T19594] bond1 (unregistering): (slave dummy0): Releasing active interface [ 1029.300288][T19594] bond1 (unregistering): Released all slaves [ 1029.357148][T19594] D†'|o: left promiscuous mode [ 1029.769026][T19594] tipc: Left network mode [ 1029.915075][T26015] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6208'. [ 1030.265831][ T8649] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1030.395725][ T8649] usb 1-1: device descriptor read/64, error -71 [ 1030.556243][T19594] hsr_slave_0: left promiscuous mode [ 1030.562866][T19594] hsr_slave_1: left promiscuous mode [ 1030.653770][ T52] Bluetooth: hci3: command tx timeout [ 1030.655416][ T8649] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1030.802390][ T8649] usb 1-1: device descriptor read/64, error -71 [ 1030.904764][ T8649] usb usb1-port1: attempt power cycle [ 1031.032512][T19594] team0 (unregistering): Port device team_slave_1 removed [ 1031.061663][T19594] team0 (unregistering): Port device team_slave_0 removed [ 1031.274419][ T8649] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1031.306073][ T8649] usb 1-1: device descriptor read/8, error -71 [ 1031.573525][ T8649] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1031.617041][ T8649] usb 1-1: device descriptor read/8, error -71 [ 1031.716461][ T8649] usb usb1-port1: unable to enumerate USB device [ 1031.926323][T26044] syzkaller0: entered promiscuous mode [ 1031.926368][T26044] syzkaller0: entered allmulticast mode [ 1032.158594][T19594] IPVS: stop unused estimator thread 0... [ 1032.324807][T25944] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1032.343171][T25944] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1032.350666][T25944] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1032.364590][T25944] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1032.366110][T25944] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1032.381422][T25944] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1032.385582][T25944] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1032.396114][T25944] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1032.712882][T25944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1032.733876][ T52] Bluetooth: hci3: command tx timeout [ 1032.745230][T25944] 8021q: adding VLAN 0 to HW filter on device team0 [ 1032.757494][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 1032.757638][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1032.776367][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 1032.776482][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1032.973313][T25944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1033.127134][T25944] veth0_vlan: entered promiscuous mode [ 1033.160805][T25944] veth1_vlan: entered promiscuous mode [ 1033.264502][T25944] veth0_macvtap: entered promiscuous mode [ 1033.270079][T26088] net_ratelimit: 30 callbacks suppressed [ 1033.270173][T26088] netlink: zone id is out of range [ 1033.272699][T26088] netlink: zone id is out of range [ 1033.276214][T26088] netlink: zone id is out of range [ 1033.276521][T26088] netlink: zone id is out of range [ 1033.281763][T26088] netlink: zone id is out of range [ 1033.281939][T26088] netlink: zone id is out of range [ 1033.281978][T26088] netlink: zone id is out of range [ 1033.282339][T26088] netlink: zone id is out of range [ 1033.282458][T26088] netlink: zone id is out of range [ 1033.282750][T26088] netlink: zone id is out of range [ 1033.283294][T25944] veth1_macvtap: entered promiscuous mode [ 1033.353091][T25944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1033.375876][T25944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1033.467629][ T50] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.477170][ T50] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.477211][ T50] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.477242][ T50] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.602985][ T8363] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1033.603028][ T8363] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1033.695982][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1033.696011][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1034.025558][ T30] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1034.185733][ T30] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1034.197623][ T30] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1034.197668][ T30] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1034.197719][ T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1034.239391][T26096] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1034.252332][ T30] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1034.497126][ T9] usb 4-1: USB disconnect, device number 78 [ 1034.803853][ T30] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1034.813875][ T52] Bluetooth: hci3: command tx timeout [ 1034.933539][ T30] usb 2-1: device descriptor read/64, error -71 [ 1035.173677][ T30] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1035.313539][ T30] usb 2-1: device descriptor read/64, error -71 [ 1035.423693][ T30] usb usb2-port1: attempt power cycle [ 1035.763478][ T30] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1035.785649][ T30] usb 2-1: device descriptor read/8, error -71 [ 1036.023492][ T30] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1036.044133][ T30] usb 2-1: device descriptor read/8, error -71 [ 1036.134460][T26145] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1036.134500][T26145] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1036.154935][ T30] usb usb2-port1: unable to enumerate USB device [ 1036.164600][T26145] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1036.164637][T26145] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1036.198605][T26145] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1036.198644][T26145] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1036.227774][T26145] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1036.234579][T26145] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1036.276549][T26145] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1036.276587][T26145] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1036.356673][T26153] loop5: detected capacity change from 0 to 7 [ 1036.357451][T26153] Dev loop5: unable to read RDB block 7 [ 1036.357478][T26153] loop5: AHDI p1 p3 p4 [ 1036.357497][T26153] loop5: partition table partially beyond EOD, truncated [ 1036.357647][T26153] loop5: p1 size 100663296 extends beyond EOD, truncated [ 1036.366419][T26153] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 1036.630633][T12053] udevd[12053]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 1036.651070][ T7147] udevd[7147]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 1036.864598][ T190] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1036.944076][T26167] syz_tun: entered allmulticast mode [ 1037.014214][ T190] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1037.024687][ T190] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1037.037415][ T190] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1037.047390][ T190] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1037.062721][T26157] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1037.078809][ T190] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1037.308163][ T190] usb 3-1: USB disconnect, device number 27 [ 1037.502830][T26181] loop5: detected capacity change from 0 to 7 [ 1037.509292][T26181] Dev loop5: unable to read RDB block 7 [ 1037.509342][T26181] loop5: AHDI p1 p3 p4 [ 1037.509759][T26181] loop5: partition table partially beyond EOD, truncated [ 1037.509933][T26181] loop5: p1 size 100663296 extends beyond EOD, truncated [ 1037.514372][T26181] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 1037.661438][ T7147] udevd[7147]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 1037.670757][T12053] udevd[12053]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 1038.255527][T26198] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6271'. [ 1038.255566][T26198] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6271'. [ 1039.004080][ T5676] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1039.143480][ T5676] usb 3-1: device descriptor read/64, error -71 [ 1039.303563][ T190] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1039.404416][ T5676] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1039.464083][ T190] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1039.474768][ T190] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1039.486659][ T190] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1039.496807][ T190] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1039.512670][T26215] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1039.535534][ T190] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1039.563725][ T5676] usb 3-1: device descriptor read/64, error -71 [ 1039.684323][ T5676] usb usb3-port1: attempt power cycle [ 1039.739662][ T190] usb 2-1: USB disconnect, device number 75 [ 1040.033739][ T5676] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1040.064303][ T5676] usb 3-1: device descriptor read/8, error -71 [ 1040.113601][ T30] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1040.263512][ T30] usb 4-1: Using ep0 maxpacket: 32 [ 1040.264343][ T30] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1040.267743][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1040.267766][ T30] usb 4-1: Product: syz [ 1040.267779][ T30] usb 4-1: Manufacturer: syz [ 1040.267792][ T30] usb 4-1: SerialNumber: syz [ 1040.274078][ T30] usb 4-1: config 0 descriptor?? [ 1040.279169][ T30] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1040.279261][ T30] dvb-usb: bulk message failed: -22 (4/0) [ 1040.279275][ T30] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1040.279492][ T30] dvb-usb: bulk message failed: -22 (5/0) [ 1040.279505][ T30] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1040.285239][ T30] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1040.287244][ T30] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1040.287293][ T30] usb 4-1: media controller created [ 1040.306259][ T30] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1040.329484][ T30] usb 4-1: selecting invalid altsetting 3 [ 1040.329517][ T30] ttusb2: set interface to alts=3 failed [ 1040.339205][ T5676] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1040.371835][ T30] DVB: Unable to find symbol tda10086_attach() [ 1040.371849][ T30] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1040.372607][ T30] dvb-usb: bulk message failed: -22 (4/0) [ 1040.372623][ T30] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1040.372738][ T30] dvb-usb: bulk message failed: -22 (5/0) [ 1040.372750][ T30] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1040.372813][ T30] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1040.408939][ T5676] usb 3-1: device descriptor read/8, error -71 [ 1040.514511][ T5676] usb usb3-port1: unable to enumerate USB device [ 1040.527863][T26221] ttusb2: more than 2 i2c messages at a time is not handled yet. TODO. [ 1040.527905][T26221] ttusb2: i2c wr len=58 too high [ 1040.531607][ T30] usb 4-1: USB disconnect, device number 79 [ 1040.570862][T26239] net_ratelimit: 11 callbacks suppressed [ 1040.576943][T26239] socket: no more sockets [ 1040.639643][ T30] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1040.655549][T26239] socket: no more sockets [ 1042.384819][T26276] socket: no more sockets [ 1042.423581][T26276] socket: no more sockets [ 1042.721914][T26286] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6312'. [ 1042.730997][T26286] hsr_slave_0: left promiscuous mode [ 1042.739151][T26286] hsr_slave_1: left promiscuous mode [ 1042.919149][T26298] loop5: detected capacity change from 0 to 7 [ 1042.927693][T26298] Dev loop5: unable to read RDB block 7 [ 1042.940091][T26298] loop5: unable to read partition table [ 1042.947888][T26298] loop5: partition table beyond EOD, truncated [ 1042.949094][T26298] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1042.994926][ T190] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1043.164425][ T190] usb 2-1: Using ep0 maxpacket: 32 [ 1043.165134][ T190] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1043.168652][ T190] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1043.168673][ T190] usb 2-1: Product: syz [ 1043.168687][ T190] usb 2-1: Manufacturer: syz [ 1043.168701][ T190] usb 2-1: SerialNumber: syz [ 1043.197488][ T190] usb 2-1: config 0 descriptor?? [ 1043.204752][ T190] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1043.204845][ T190] dvb-usb: bulk message failed: -22 (4/0) [ 1043.204859][ T190] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1043.204965][ T190] dvb-usb: bulk message failed: -22 (5/0) [ 1043.204978][ T190] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1043.215992][ T190] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1043.217009][ T190] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1043.217055][ T190] usb 2-1: media controller created [ 1043.255374][ T190] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1043.283072][ T190] usb 2-1: selecting invalid altsetting 3 [ 1043.286469][ T190] ttusb2: set interface to alts=3 failed [ 1043.393090][ T190] DVB: Unable to find symbol tda10086_attach() [ 1043.393133][ T190] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1043.395390][ T190] dvb-usb: bulk message failed: -22 (4/0) [ 1043.395407][ T190] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1043.395515][ T190] dvb-usb: bulk message failed: -22 (5/0) [ 1043.395527][ T190] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1043.395593][ T190] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1043.454100][ T5676] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1043.519955][T26288] ttusb2: more than 2 i2c messages at a time is not handled yet. TODO. [ 1043.519998][T26288] ttusb2: i2c wr len=58 too high [ 1043.532983][ T190] usb 2-1: USB disconnect, device number 76 [ 1043.611496][ T190] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1043.614886][ T5676] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1043.617808][ T5676] usb 4-1: config 0 has no interfaces? [ 1043.630433][ T5676] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1043.630458][ T5676] usb 4-1: Product: syz [ 1043.630471][ T5676] usb 4-1: Manufacturer: syz [ 1043.630484][ T5676] usb 4-1: SerialNumber: syz [ 1043.660254][ T5676] usb 4-1: config 0 descriptor?? [ 1044.123559][ T5710] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1044.294274][ T5710] usb 1-1: Using ep0 maxpacket: 16 [ 1044.300582][ T5710] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1044.313894][ T5710] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1044.313957][ T5710] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1044.314014][ T5710] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1044.314038][ T5710] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1044.314064][ T5710] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1044.357958][ T5710] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1044.371291][ T5710] usb 1-1: Manufacturer: syz [ 1044.395226][ T5710] usb 1-1: config 0 descriptor?? [ 1044.833878][T26329] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6324'. [ 1044.843272][ T5710] rc_core: IR keymap rc-hauppauge not found [ 1044.843300][ T5710] Registered IR keymap rc-empty [ 1044.843545][ T5710] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1044.847449][T26329] hsr_slave_0: left promiscuous mode [ 1044.851992][T26329] hsr_slave_1: left promiscuous mode [ 1044.863594][ T5710] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1044.896496][ T5710] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1044.905867][ T5710] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input135 [ 1044.926577][ T5710] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1044.945393][ T5710] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1044.963791][ T5710] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1044.981165][T26333] loop5: detected capacity change from 0 to 7 [ 1044.986631][T26333] Dev loop5: unable to read RDB block 7 [ 1044.986670][T26333] loop5: unable to read partition table [ 1044.986864][T26333] loop5: partition table beyond EOD, truncated [ 1044.986880][T26333] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1044.987483][ T5710] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1045.004702][ T5710] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1045.026055][ T5710] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1045.045856][ T5710] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1045.063550][ T5710] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1045.084741][ T5710] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1045.104032][ T5710] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1045.135679][ T5710] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 1045.136374][ T5710] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1045.170310][ T5710] usb 1-1: USB disconnect, device number 84 [ 1045.548015][ T5676] usb 4-1: USB disconnect, device number 80 [ 1045.673530][ T30] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1045.827201][ T30] usb 3-1: Using ep0 maxpacket: 32 [ 1045.828242][ T30] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1045.832145][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1045.832167][ T30] usb 3-1: Product: syz [ 1045.832180][ T30] usb 3-1: Manufacturer: syz [ 1045.832194][ T30] usb 3-1: SerialNumber: syz [ 1045.843349][ T30] usb 3-1: config 0 descriptor?? [ 1045.846792][ T30] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 1045.846880][ T30] dvb-usb: bulk message failed: -22 (4/0) [ 1045.846893][ T30] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1045.847009][ T30] dvb-usb: bulk message failed: -22 (5/0) [ 1045.847022][ T30] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1045.853286][ T30] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1045.857780][ T30] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 1045.857828][ T30] usb 3-1: media controller created [ 1045.873264][ T30] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1045.888478][ T30] usb 3-1: selecting invalid altsetting 3 [ 1045.888496][ T30] ttusb2: set interface to alts=3 failed [ 1045.927043][ T30] DVB: Unable to find symbol tda10086_attach() [ 1045.927058][ T30] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 1045.928293][ T30] dvb-usb: bulk message failed: -22 (4/0) [ 1045.928309][ T30] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1045.928418][ T30] dvb-usb: bulk message failed: -22 (5/0) [ 1045.928429][ T30] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 1045.928569][ T30] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 1046.050627][ T5676] usb 3-1: USB disconnect, device number 32 [ 1046.102385][ T5676] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 1046.245665][T26364] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6338'. [ 1046.282587][T26364] hsr_slave_0: left promiscuous mode [ 1046.288135][T26364] hsr_slave_1: left promiscuous mode [ 1046.478013][T26372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6341'. [ 1046.665342][ T5676] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1046.813702][ T5676] usb 2-1: Using ep0 maxpacket: 32 [ 1046.816726][ T5676] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1046.817666][ T5676] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 1046.817696][ T5676] usb 2-1: config 0 has no interface number 0 [ 1046.824544][ T5676] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.824567][ T5676] usb 2-1: Product: syz [ 1046.824582][ T5676] usb 2-1: Manufacturer: syz [ 1046.824596][ T5676] usb 2-1: SerialNumber: syz [ 1046.834639][ T5676] usb 2-1: config 0 descriptor?? [ 1046.980497][T26392] loop5: detected capacity change from 0 to 7 [ 1046.988474][T26392] Dev loop5: unable to read RDB block 7 [ 1046.988536][T26392] loop5: unable to read partition table [ 1046.988785][T26392] loop5: partition table beyond EOD, truncated [ 1046.988803][T26392] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1047.523032][ T5676] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 1047.523089][ T5676] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 1047.523945][ T5676] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1047.524185][ T5676] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 1047.529634][ T5676] usb 2-1: USB disconnect, device number 77 [ 1047.731082][T26397] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6352'. [ 1047.840273][T26404] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6354'. [ 1047.866310][T26404] hsr_slave_0: left promiscuous mode [ 1047.872065][T26404] hsr_slave_1: left promiscuous mode [ 1048.234153][T26420] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6359'. [ 1049.397077][T26432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6364'. [ 1049.497946][T26437] loop0: detected capacity change from 0 to 3904 [ 1049.585347][T26437] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting. [ 1049.585380][T26437] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 1049.585792][T26437] loop0: [ 1049.882279][T26447] socket: no more sockets [ 1049.908785][T26447] socket: no more sockets [ 1049.973564][ T8657] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1050.124261][ T8657] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1050.135602][ T8657] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1050.135680][ T8657] usb 4-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1050.135704][ T8657] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1050.135745][ T8657] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.189590][ T8657] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1050.287019][ T8657] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1050.372427][T26463] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6378'. [ 1050.402052][ T8657] usb 4-1: USB disconnect, device number 81 [ 1050.846545][T26476] socket: no more sockets [ 1050.896066][T26476] socket: no more sockets [ 1051.108989][T26486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6388'. [ 1051.167294][T26492] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6390'. [ 1051.693361][T26513] socket: no more sockets [ 1051.702259][T26515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6402'. [ 1051.804066][ T8657] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1051.954511][ T8657] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1051.956679][ T8657] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1051.956720][ T8657] usb 3-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1051.956739][ T8657] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1051.956776][ T8657] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1051.975891][ T8657] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1052.126993][ T8657] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1052.194151][ T8657] usb 3-1: USB disconnect, device number 33 [ 1053.556939][ T190] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1053.713767][ T190] usb 3-1: Using ep0 maxpacket: 8 [ 1053.720529][ T190] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1053.734017][ T190] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 1053.749369][ T190] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1053.749405][ T190] usb 3-1: Product: syz [ 1053.749431][ T190] usb 3-1: Manufacturer: syz [ 1053.749449][ T190] usb 3-1: SerialNumber: syz [ 1053.777443][ T190] usb 3-1: config 0 descriptor?? [ 1053.789772][ T190] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1053.789830][ T190] usb 3-1: setting power ON [ 1053.789852][ T190] dvb-usb: bulk message failed: -22 (2/0) [ 1053.807292][ T190] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1053.807930][ T190] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1053.807987][ T190] usb 3-1: media controller created [ 1053.856068][ T190] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1053.880217][ T190] usb 3-1: selecting invalid altsetting 6 [ 1053.880261][ T190] usb 3-1: digital interface selection failed (-22) [ 1053.896291][ T190] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1053.899214][ T190] usb 3-1: setting power OFF [ 1053.899233][ T190] dvb-usb: bulk message failed: -22 (2/0) [ 1053.899246][ T190] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1053.899257][ T190] (NULL device *): no alternate interface [ 1053.952464][ T190] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1053.995045][ T5683] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1054.017055][ T8651] usb 3-1: USB disconnect, device number 34 [ 1054.144328][ T5683] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1054.145410][ T5683] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1054.145451][ T5683] usb 2-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1054.145471][ T5683] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1054.145507][ T5683] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1054.172788][ T5683] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1054.341256][ T5683] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 1054.383300][T26578] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1054.393261][T26578] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 1054.421740][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.421816][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.436851][ T190] usb 2-1: USB disconnect, device number 78 [ 1054.997428][T26603] netlink: 'syz.1.6439': attribute type 4 has an invalid length. [ 1055.542353][T26621] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6447'. [ 1056.418264][T26648] tipc: Enabling of bearer rejected, already enabled [ 1057.512020][T26671] netlink: 'syz.1.6465': attribute type 12 has an invalid length. [ 1057.612421][T26674] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6466'. [ 1057.696596][T26674] vlan2: entered promiscuous mode [ 1057.696632][T26674] erspan0: entered promiscuous mode [ 1058.255926][T26691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6472'. [ 1058.560068][T26698] netlink: Failed to add helper -22 [ 1058.560143][T26698] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1058.813592][ T190] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1058.974399][ T190] usb 3-1: Using ep0 maxpacket: 8 [ 1058.975253][ T190] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1058.976800][ T190] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 1058.976845][ T190] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1058.976869][ T190] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1058.976891][ T190] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1058.976914][ T190] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1058.976943][ T190] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1058.976981][ T190] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1059.224831][ T190] usb 3-1: GET_CAPABILITIES returned 0 [ 1059.224900][ T190] usbtmc 3-1:16.0: can't read capabilities [ 1059.439291][ C0] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1059.441686][T26698] usbtmc 3-1:16.0: Unable to send data, error -71 [ 1059.581172][T26712] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6480'. [ 1059.588993][T26712] vlan0: entered promiscuous mode [ 1059.589012][T26712] erspan0: entered promiscuous mode [ 1059.788066][T26722] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6485'. [ 1061.318939][T26752] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6496'. [ 1061.462274][ T5683] usb 3-1: USB disconnect, device number 35 [ 1061.490758][T26758] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6498'. [ 1062.567276][T26783] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6508'. [ 1062.675476][T26785] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6509'. [ 1062.732531][T26787] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6510'. [ 1063.741726][T26808] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6519'. [ 1063.833665][T26811] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6520'. [ 1064.472546][ T5683] logitech-hidpp-device 0003:046D:C082.0043: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 1064.587867][T26832] fido_id[26832]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1064.627444][T26836] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6530'. [ 1064.733002][T26838] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6531'. [ 1064.806041][T26844] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6532'. [ 1065.856194][T26877] netlink: Failed to add helper -22 [ 1065.856261][T26877] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1065.971825][T26887] syz_tun: entered allmulticast mode [ 1066.093540][ T30] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1066.253553][ T30] usb 3-1: Using ep0 maxpacket: 8 [ 1066.260425][ T30] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1066.276822][T26897] bridge_slave_1: entered allmulticast mode [ 1066.283222][ T30] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 1066.292349][ T30] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1066.292378][ T30] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1066.292403][ T30] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1066.292426][ T30] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1066.292448][ T30] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1066.292487][ T30] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1066.570244][ T30] usb 3-1: GET_CAPABILITIES returned 0 [ 1066.570330][ T30] usbtmc 3-1:16.0: can't read capabilities [ 1066.788434][ C1] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1066.799566][T26877] usbtmc 3-1:16.0: Unable to send data, error -71 [ 1066.810613][ T30] usb 3-1: USB disconnect, device number 36 [ 1067.505166][T26931] __nla_validate_parse: 4 callbacks suppressed [ 1067.505202][T26931] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6566'. [ 1067.530019][T26931] vlan2: entered promiscuous mode [ 1067.530064][T26931] gretap0: entered promiscuous mode [ 1067.574020][T26934] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6567'. [ 1068.143605][T26962] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6579'. [ 1068.328159][T26967] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6581'. [ 1068.336229][T26967] vlan2: entered promiscuous mode [ 1068.467738][T26972] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6592'. [ 1068.891934][T26987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6589'. [ 1068.893972][T26987] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6589'. [ 1069.001576][T26997] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6594'. [ 1069.090981][T27001] syz_tun: entered allmulticast mode [ 1069.096871][T27002] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6597'. [ 1069.946321][T27034] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6611'. [ 1070.097252][T27039] netlink: Failed to add helper -22 [ 1070.111046][T27039] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1070.350020][T27049] binder_alloc: 27048: binder_alloc_buf size -272 failed, no address space [ 1070.350063][T27049] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 1070.527740][T27062] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 12 out of range (51000000..2150000000) [ 1071.933531][ T190] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 1072.121904][ T190] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1072.131737][ T190] usb 3-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice= 0.40 [ 1072.131779][ T190] usb 3-1: too many configurations: 178, using maximum allowed: 8 [ 1072.134761][ T190] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1072.134794][ T190] usb 3-1: can't read configurations, error -71 [ 1072.673607][ T8657] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1072.844280][ T8657] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1072.862548][ T8657] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1072.862606][ T8657] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1072.862644][ T8657] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1072.862670][ T8657] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1072.910794][ T8657] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1072.910835][ T8657] usb 4-1: Manufacturer: syz [ 1072.927370][ T8657] usb 4-1: config 0 descriptor?? [ 1073.082600][T27167] __nla_validate_parse: 4 callbacks suppressed [ 1073.082657][T27167] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6667'. [ 1073.237850][T27175] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6682'. [ 1073.356655][ T8657] appleir 0003:05AC:8243.0044: unknown main item tag 0x0 [ 1073.384407][ T8657] appleir 0003:05AC:8243.0044: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 1074.067822][T27198] netlink: Failed to add helper -22 [ 1074.073330][T27198] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1074.200094][T27208] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6685'. [ 1074.293946][ T190] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1074.464072][ T190] usb 2-1: Using ep0 maxpacket: 8 [ 1074.464826][ T190] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1074.465906][ T190] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 1074.465952][ T190] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1074.465977][ T190] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1074.465999][ T190] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1074.466175][ T190] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1074.466197][ T190] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1074.466234][ T190] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1074.683305][ T190] usb 2-1: GET_CAPABILITIES returned 0 [ 1074.683491][ T190] usbtmc 2-1:16.0: can't read capabilities [ 1074.956193][ T190] usb 2-1: USB disconnect, device number 79 [ 1075.455170][ T8649] usb 4-1: USB disconnect, device number 82 [ 1076.003191][T27279] fuse: Invalid uid '00000000000000000003' [ 1076.327331][T27286] netlink: Failed to add helper -22 [ 1076.327408][T27286] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1076.483519][ T8657] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1076.591648][T27305] input: syz1 as /devices/virtual/input/input137 [ 1076.633567][ T8657] usb 3-1: Using ep0 maxpacket: 8 [ 1076.639236][ T8657] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1076.651609][ T8657] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 1076.651875][ T8657] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1076.652017][ T8657] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1076.652064][ T8657] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1076.652091][ T8657] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1076.652128][ T8657] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1076.652172][ T8657] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1076.847324][T27318] binder_alloc: 27314: binder_alloc_buf size 12224 failed, no address space [ 1076.847370][T27318] binder_alloc: allocated: 1024 (num: 1 largest: 1024), free: 11264 (num: 1 largest: 11264) [ 1076.911325][T27315] syz.1.6735 (27315): drop_caches: 2 [ 1077.034935][ T8657] usb 3-1: GET_CAPABILITIES returned 0 [ 1077.041763][ T8657] usbtmc 3-1:16.0: can't read capabilities [ 1077.238507][ C0] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1077.238612][T27286] usbtmc 3-1:16.0: Unable to send data, error -71 [ 1077.241466][ T8649] usb 3-1: USB disconnect, device number 39 [ 1077.576667][T27353] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6750'. [ 1078.038715][T23053] IPVS: starting estimator thread 0... [ 1078.124241][T27377] IPVS: using max 31 ests per chain, 74400 per kthread [ 1078.168072][T27384] netlink: 'syz.0.6763': attribute type 5 has an invalid length. [ 1078.168113][T27384] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6763'. [ 1078.427781][T27388] netlink: Failed to add helper -22 [ 1078.427849][T27388] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1078.473246][T27401] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6771'. [ 1078.554541][ T8657] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1078.714556][ T8657] usb 2-1: Using ep0 maxpacket: 8 [ 1078.720386][ T8657] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1078.725687][ T8657] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 1078.725740][ T8657] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1078.725766][ T8657] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1078.725788][ T8657] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1078.725812][ T8657] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1078.725833][ T8657] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1078.725871][ T8657] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1078.849621][T27414] netlink: 'syz.2.6777': attribute type 5 has an invalid length. [ 1078.857862][T27414] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6777'. [ 1078.952755][ T8657] usb 2-1: GET_CAPABILITIES returned 0 [ 1078.952814][ T8657] usbtmc 2-1:16.0: can't read capabilities [ 1079.008628][T27418] socket: no more sockets [ 1079.168032][ T190] usb 2-1: USB disconnect, device number 80 [ 1079.188334][T27426] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6783'. [ 1079.497631][ T50] IPVS: starting estimator thread 0... [ 1079.584192][T27441] IPVS: using max 31 ests per chain, 74400 per kthread [ 1079.631282][T27443] socket: no more sockets [ 1079.805426][T27454] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6795'. [ 1079.869450][T27458] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6799'. [ 1079.890822][T27458] vlan0: entered promiscuous mode [ 1079.896648][T27458] gretap0: entered promiscuous mode [ 1080.009865][ T50] IPVS: starting estimator thread 0... [ 1080.084115][T27469] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6803'. [ 1080.121100][T27465] IPVS: using max 31 ests per chain, 74400 per kthread [ 1080.234464][T27469] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.6803'. [ 1080.340263][T27477] netlink: Failed to add helper -22 [ 1080.340330][T27477] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1080.567124][T27482] socket: no more sockets [ 1080.603538][ T8651] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1080.700897][T27486] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6809'. [ 1080.754718][ T8651] usb 4-1: Using ep0 maxpacket: 8 [ 1080.765831][ T8651] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1080.776398][ T8651] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 1080.776462][ T8651] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1080.776502][ T8651] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1080.776529][ T8651] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1080.776555][ T8651] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1080.776578][ T8651] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1080.776620][ T8651] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1080.875471][T27490] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6812'. [ 1080.897652][T27490] vlan2: entered promiscuous mode [ 1081.042514][T19594] IPVS: starting estimator thread 0... [ 1081.045857][ T8651] usb 4-1: GET_CAPABILITIES returned 0 [ 1081.045902][ T8651] usbtmc 4-1:16.0: can't read capabilities [ 1081.143796][T27502] IPVS: using max 34 ests per chain, 81600 per kthread [ 1081.253350][ T8651] usb 4-1: USB disconnect, device number 83 [ 1081.767608][T27531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1081.767669][T27531] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1081.791151][T27531] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1081.791198][T27531] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1082.253676][ T8649] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1082.275414][T27552] vlan2: entered promiscuous mode [ 1082.275439][T27552] gretap0: entered promiscuous mode [ 1082.369965][T27555] netlink: Failed to add helper -22 [ 1082.370043][T27555] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1082.434378][ T8649] usb 4-1: Using ep0 maxpacket: 32 [ 1082.440333][ T8649] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1082.440408][ T8649] usb 4-1: no configurations [ 1082.440424][ T8649] usb 4-1: can't read configurations, error -22 [ 1082.584243][ T8649] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1082.623533][ T8657] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1082.743732][ T8649] usb 4-1: Using ep0 maxpacket: 32 [ 1082.745408][ T8649] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1082.745444][ T8649] usb 4-1: no configurations [ 1082.745457][ T8649] usb 4-1: can't read configurations, error -22 [ 1082.745697][ T8649] usb usb4-port1: attempt power cycle [ 1082.783607][ T8657] usb 2-1: Using ep0 maxpacket: 8 [ 1082.789499][ T8657] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1082.799875][ T8657] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 1082.808415][ T8657] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1082.819835][ T8657] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1082.819866][ T8657] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1082.819891][ T8657] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1082.819913][ T8657] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1082.819956][ T8657] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1083.083528][ T8649] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1083.091465][ T8657] usb 2-1: GET_CAPABILITIES returned 0 [ 1083.097219][ T8657] usbtmc 2-1:16.0: can't read capabilities [ 1083.115841][ T8649] usb 4-1: Using ep0 maxpacket: 32 [ 1083.116387][ T8649] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1083.116421][ T8649] usb 4-1: no configurations [ 1083.116433][ T8649] usb 4-1: can't read configurations, error -22 [ 1083.255643][ T8649] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1083.275814][ T8649] usb 4-1: Using ep0 maxpacket: 32 [ 1083.276416][ T8649] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1083.276452][ T8649] usb 4-1: no configurations [ 1083.276463][ T8649] usb 4-1: can't read configurations, error -22 [ 1083.276704][ T8649] usb usb4-port1: unable to enumerate USB device [ 1083.312332][ T8649] usb 2-1: USB disconnect, device number 81 [ 1083.789343][T27603] __nla_validate_parse: 6 callbacks suppressed [ 1083.789396][T27603] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6859'. [ 1083.911039][T27603] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.6859'. [ 1084.524944][T27634] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6873'. [ 1084.749839][T27642] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1084.814969][T27642] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1084.831242][T27642] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1084.844610][T27642] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1085.554468][T27662] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6885'. [ 1085.918884][T27675] socket: no more sockets [ 1085.993538][ T8657] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1086.143892][ T8657] usb 4-1: Using ep0 maxpacket: 32 [ 1086.151658][ T8657] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1086.151724][ T8657] usb 4-1: no configurations [ 1086.151742][ T8657] usb 4-1: can't read configurations, error -22 [ 1086.295713][T27686] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6896'. [ 1086.305386][ T8657] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1086.401454][T27686] vlan0: entered promiscuous mode [ 1086.401493][T27686] gretap0: entered promiscuous mode [ 1086.463500][ T8657] usb 4-1: Using ep0 maxpacket: 32 [ 1086.469289][ T8657] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1086.469357][ T8657] usb 4-1: no configurations [ 1086.469374][ T8657] usb 4-1: can't read configurations, error -22 [ 1086.490686][ T8657] usb usb4-port1: attempt power cycle [ 1086.833559][ T8657] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1086.857498][ T8657] usb 4-1: Using ep0 maxpacket: 32 [ 1086.863355][ T8657] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1086.874207][ T8657] usb 4-1: no configurations [ 1086.874248][ T8657] usb 4-1: can't read configurations, error -22 [ 1086.891766][T27698] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1086.948024][T27698] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1086.955410][T27698] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1086.962430][T27698] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1087.033477][ T8657] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1087.054765][ T8657] usb 4-1: Using ep0 maxpacket: 32 [ 1087.055251][ T8657] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 1087.055297][ T8657] usb 4-1: no configurations [ 1087.055310][ T8657] usb 4-1: can't read configurations, error -22 [ 1087.055672][ T8657] usb usb4-port1: unable to enumerate USB device [ 1087.719459][T27716] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6909'. [ 1088.918314][T27741] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6918'. [ 1089.458073][T27766] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6930'. [ 1089.480371][T27762] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6926'. [ 1090.206002][T27798] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6941'. [ 1090.437000][T27804] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1090.533750][T27804] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6943'. [ 1090.567982][T27804] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1090.671332][T27804] bond1: (slave geneve2): making interface the new active one [ 1090.687645][T27804] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1091.086678][T27816] tc action pedit 'at' offset 5 out of bounds [ 1091.086723][T27816] tc action pedit 'at' offset 5 out of bounds [ 1091.086758][T27816] tc action pedit 'at' offset 5 out of bounds [ 1091.086773][T27816] tc action pedit 'at' offset 5 out of bounds [ 1091.086787][T27816] tc action pedit 'at' offset 5 out of bounds [ 1091.086800][T27816] tc action pedit 'at' offset 5 out of bounds [ 1091.086815][T27816] tc action pedit 'at' offset 5 out of bounds [ 1091.086831][T27816] tc action pedit 'at' offset 5 out of bounds [ 1091.086846][T27816] tc action pedit 'at' offset 5 out of bounds [ 1091.086861][T27816] tc action pedit 'at' offset 5 out of bounds [ 1091.086886][T27816] 0: reclassify loop, rule prio 0, protocol 800 [ 1091.608553][T27834] program syz.1.6957 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1091.749726][T27839] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6959'. [ 1091.887132][T27851] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6961'. [ 1092.991879][T27868] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6970'. [ 1093.263654][T27874] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6972'. [ 1093.278138][ T5619] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1093.289211][ T5619] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1093.299419][ T5619] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1093.316661][ T5619] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1093.328781][ T5619] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1093.389092][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1093.397906][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1093.406651][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1093.418950][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1093.433351][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1093.851152][T23044] syz_tun (unregistering): left allmulticast mode [ 1094.134793][T23057] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1094.264082][ T30] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1094.288053][T23057] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1094.388099][T27898] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6981'. [ 1094.389796][T23057] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1094.409021][ T30] usb 2-1: device descriptor read/64, error -71 [ 1094.644195][ T30] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1094.674778][T27879] bridge0: port 1(bridge_slave_0) entered blocking state [ 1094.675508][T27879] bridge0: port 1(bridge_slave_0) entered disabled state [ 1094.675651][T27879] bridge_slave_0: entered allmulticast mode [ 1094.684284][T27879] bridge_slave_0: entered promiscuous mode [ 1094.700270][T27879] bridge0: port 2(bridge_slave_1) entered blocking state [ 1094.700370][T27879] bridge0: port 2(bridge_slave_1) entered disabled state [ 1094.700511][T27879] bridge_slave_1: entered allmulticast mode [ 1094.706433][T27879] bridge_slave_1: entered promiscuous mode [ 1094.775485][ T30] usb 2-1: device descriptor read/64, error -71 [ 1094.820822][T27879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1094.835721][T27879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1094.884560][ T30] usb usb2-port1: attempt power cycle [ 1094.912074][T27910] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.6983'. [ 1094.961682][T27879] team0: Port device team_slave_0 added [ 1095.018787][T27879] team0: Port device team_slave_1 added [ 1095.066623][T27919] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6984'. [ 1095.223566][ T30] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1095.244268][ T30] usb 2-1: device descriptor read/8, error -71 [ 1095.465535][T23057] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1095.482126][T23057] bond0 (unregistering): Released all slaves [ 1095.485413][ T30] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1095.504362][ T30] usb 2-1: device descriptor read/8, error -71 [ 1095.512538][T27879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1095.512884][T27879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1095.512910][T27879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1095.516570][T27879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1095.516584][T27879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1095.516608][T27879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1095.544347][T27927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1095.628116][ T52] Bluetooth: hci1: command tx timeout [ 1095.634404][ T30] usb usb2-port1: unable to enumerate USB device [ 1095.651582][T27928] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1095.666227][T27927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1095.674833][T27879] hsr_slave_0: entered promiscuous mode [ 1095.675607][T27927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1095.677815][T27879] hsr_slave_1: entered promiscuous mode [ 1095.682512][T23057] : left promiscuous mode [ 1095.843113][T23057] tipc: Disabling bearer [ 1095.849121][T23057] tipc: Left network mode [ 1096.216312][T23057] hsr_slave_0: left promiscuous mode [ 1096.228066][T23057] hsr_slave_1: left promiscuous mode [ 1096.252337][T23057] veth1_to_hsr: left allmulticast mode [ 1096.257915][T23057] veth1_to_hsr: left promiscuous mode [ 1096.258035][T23057] veth1_macvtap: left promiscuous mode [ 1096.258059][T23057] veth0_macvtap: left promiscuous mode [ 1096.441210][T27950] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6991'. [ 1096.718481][ T5280] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1096.726374][ T8649] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1096.908874][ T8649] usb 4-1: Using ep0 maxpacket: 16 [ 1096.944210][ T8649] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1096.944282][ T8649] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 1096.945086][ T8649] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1096.945119][ T8649] usb 4-1: can't read configurations, error -71 [ 1097.033635][ T5683] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1097.091008][T23057] IPVS: stop unused estimator thread 0... [ 1097.217139][ T5683] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1097.220139][ T5683] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1097.220163][ T5683] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1097.220180][ T5683] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1097.220220][ T5683] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1097.230112][ T5683] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1097.230135][ T5683] usb 3-1: Product: syz [ 1097.230148][ T5683] usb 3-1: Manufacturer: syz [ 1097.245638][ T5683] cdc_wdm 3-1:1.0: skipping garbage [ 1097.245658][ T5683] cdc_wdm 3-1:1.0: skipping garbage [ 1097.245678][ T5683] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1097.470774][ T5683] usb 3-1: USB disconnect, device number 40 [ 1097.477696][T27974] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6997'. [ 1097.694011][ T52] Bluetooth: hci1: command tx timeout [ 1097.769605][T27879] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1097.797818][T27879] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1097.802125][T27879] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1097.828071][T27879] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1097.831605][T27879] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1097.851787][T27879] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1097.853270][T27879] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1097.871386][T27879] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1097.880118][T27992] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7002'. [ 1098.131449][T27879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1098.161695][T27879] 8021q: adding VLAN 0 to HW filter on device team0 [ 1098.202744][T23063] bridge0: port 1(bridge_slave_0) entered blocking state [ 1098.202887][T23063] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1098.240393][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1098.240509][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1098.322791][T28008] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1098.337186][T28008] block device autoloading is deprecated and will be removed. [ 1098.482121][T27879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1098.594351][ T8649] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1098.639780][T27879] veth0_vlan: entered promiscuous mode [ 1098.650975][T28032] netlink: 44 bytes leftover after parsing attributes in process `syz.5.7013'. [ 1098.672675][T27879] veth1_vlan: entered promiscuous mode [ 1098.685241][T28030] socket: no more sockets [ 1098.773518][ T8649] usb 4-1: Using ep0 maxpacket: 16 [ 1098.802235][T27879] veth0_macvtap: entered promiscuous mode [ 1098.818748][ T8649] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1098.818813][ T8649] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 1098.819665][T27879] veth1_macvtap: entered promiscuous mode [ 1098.824278][ T8649] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1098.824312][ T8649] usb 4-1: can't read configurations, error -71 [ 1098.872175][T27879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1098.890986][T27879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1098.923610][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1098.932572][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1098.932613][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1098.932646][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.090955][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1099.090996][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1099.147346][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1099.147378][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1099.438048][T28057] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7023'. [ 1099.460454][T23057] IPVS: starting estimator thread 0... [ 1099.563724][T28062] IPVS: using max 30 ests per chain, 72000 per kthread [ 1099.774020][ T52] Bluetooth: hci1: command tx timeout [ 1100.275439][ T8649] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1100.332094][T28093] netlink: Failed to add helper -22 [ 1100.339797][T28093] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1100.389015][T28097] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7038'. [ 1100.436491][ T8649] usb 3-1: Using ep0 maxpacket: 16 [ 1100.488705][ T8649] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1100.488778][ T8649] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 1100.492391][ T8649] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1100.492424][ T8649] usb 3-1: can't read configurations, error -71 [ 1100.583662][ T190] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1100.669386][T28107] socket: no more sockets [ 1100.744534][ T190] usb 4-1: Using ep0 maxpacket: 8 [ 1100.746520][ T190] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1100.747444][ T190] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 1100.747489][ T190] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1100.747513][ T190] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1100.747536][ T190] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1100.747566][ T190] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1100.747588][ T190] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1100.747625][ T190] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1100.934112][T28120] socket: no more sockets [ 1101.073702][ T190] usb 4-1: GET_CAPABILITIES returned 0 [ 1101.073767][ T190] usbtmc 4-1:16.0: can't read capabilities [ 1101.282302][ C0] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1101.282623][T28093] usbtmc 4-1:16.0: Unable to send data, error -71 [ 1101.284782][ T190] usb 4-1: USB disconnect, device number 96 [ 1101.531167][T28137] debugfs: 'netdev:syzkaller0' already exists in 'phy59' [ 1101.649475][T28137] ------------[ cut here ]------------ [ 1101.649511][T28137] hwsim_get_chanwidth(bw) > hwsim_get_chanwidth(confbw) [ 1101.649555][T28137] WARNING: drivers/net/wireless/virtual/mac80211_hwsim_main.c:2263 at mac80211_hwsim_tx+0x1bea/0x2580, CPU#0: syz.2.7057/28137 [ 1101.676324][T28137] Modules linked in: [ 1101.682148][T28137] CPU: 0 UID: 0 PID: 28137 Comm: syz.2.7057 Tainted: G L syzkaller #0 PREEMPT(full) [ 1101.693165][T28137] Tainted: [L]=SOFTLOCKUP SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1101.697535][T28137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1101.707675][T28137] RIP: 0010:mac80211_hwsim_tx+0x1bea/0x2580 [ 1101.713623][T28137] Code: c6 05 b2 21 29 09 01 48 c7 c7 c0 7d bd 8c be a3 08 00 00 48 c7 c2 00 7f bd 8c e8 a1 05 69 fa e9 65 f4 ff ff e8 77 59 8d fa 90 <0f> 0b 90 49 bc 00 00 00 00 00 fc ff df 48 8b 5c 24 18 e9 3b ff ff [ 1101.733300][T28137] RSP: 0018:ffffc90005a8efa0 EFLAGS: 00010283 [ 1101.739417][T28137] RAX: ffffffff873a61a9 RBX: 0000000000000000 RCX: 0000000000080000 [ 1101.747445][T28137] RDX: ffffc9000e48f000 RSI: 0000000000000231 RDI: 0000000000000232 [ 1101.755482][T28137] RBP: ffffc90005a8f130 R08: ffff8880788bddc0 R09: 000000000000000e [ 1101.763526][T28137] R10: 000000000000000d R11: 0000000000000002 R12: 0000000000000028 [ 1101.771518][T28137] R13: ffff88802ea36030 R14: 0000000000000014 R15: 0000000000000030 [ 1101.779555][T28137] FS: 0000000000000000(0000) GS:ffff888124cda000(0063) knlGS:00000000f5466b40 [ 1101.788542][T28137] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 1101.795185][T28137] CR2: 000000002fd14ff8 CR3: 0000000052a7a000 CR4: 00000000003526f0 [ 1101.803165][T28137] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1101.811290][T28137] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1101.819316][T28137] Call Trace: [ 1101.822602][T28137] [ 1101.825597][T28137] ? __pfx_mac80211_hwsim_tx+0x10/0x10 [ 1101.831116][T28137] ieee80211_tx_frags+0x3df/0x890 [ 1101.836420][T28137] ? __pfx_ieee80211_tx_frags+0x10/0x10 [ 1101.842025][T28137] __ieee80211_tx+0x267/0x580 [ 1101.846810][T28137] ieee80211_tx+0x312/0x4b0 [ 1101.851330][T28137] ? __pfx_ieee80211_tx+0x10/0x10 [ 1101.853857][ T52] Bluetooth: hci1: command tx timeout [ 1101.861786][T28137] ? ieee80211_xmit+0x2e5/0x3c0 [ 1101.866704][T28137] ieee80211_monitor_start_xmit+0xb33/0x1280 [ 1101.872705][T28137] ? ieee80211_monitor_start_xmit+0x5ea/0x1280 [ 1101.878934][T28137] ? __pfx_ieee80211_monitor_start_xmit+0x10/0x10 [ 1101.885418][T28137] dev_hard_start_xmit+0x2cd/0x830 [ 1101.890575][T28137] __dev_queue_xmit+0x14c0/0x3820 [ 1101.895679][T28137] ? __dev_queue_xmit+0x29b/0x3820 [ 1101.900802][T28137] ? _copy_from_iter+0x21b/0x1660 [ 1101.905883][T28137] ? skb_set_owner_w+0x263/0x3d0 [ 1101.910839][T28137] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1101.916278][T28137] ? __pfx__copy_from_iter+0x10/0x10 [ 1101.921600][T28137] ? __pfx_packet_parse_headers+0x10/0x10 [ 1101.927550][T28137] ? packet_xmit+0x68/0x330 [ 1101.932066][T28137] ? skb_put+0x112/0x210 [ 1101.936373][T28137] packet_sendmsg+0x3d0d/0x4f80 [ 1101.941252][T28137] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1101.946699][T28137] ? futex_hash_allocate+0xd55/0xe70 [ 1101.951999][T28137] ? __futex_wait+0x1e1/0x400 [ 1101.956744][T28137] ? __lock_acquire+0x6df/0x2e50 [ 1101.961702][T28137] ? __pfx_futex_wake_mark+0x10/0x10 [ 1101.967059][T28137] ? __pfx_packet_sendmsg+0x10/0x10 [ 1101.972267][T28137] ? aa_sk_perm+0x713/0x900 [ 1101.976828][T28137] ? lockdep_unlock+0x60/0xd0 [ 1101.981526][T28137] ? __pfx_aa_sk_perm+0x10/0x10 [ 1101.986446][T28137] ? aa_sock_msg_perm+0x144/0x210 [ 1101.991485][T28137] ? apparmor_socket_sendmsg+0x98/0x360 [ 1101.997101][T28137] ? __pfx_packet_sendmsg+0x10/0x10 [ 1102.002314][T28137] sock_sendmsg_nosec+0x13a/0x180 [ 1102.007409][T28137] __sys_sendto+0x408/0x5a0 [ 1102.011940][T28137] ? file_init_path+0x3b/0x5a0 [ 1102.016764][T28137] ? __pfx___sys_sendto+0x10/0x10 [ 1102.021838][T28137] ? rcu_is_watching+0x16/0xb0 [ 1102.026662][T28137] __ia32_sys_sendto+0xdd/0x100 [ 1102.031551][T28137] __do_fast_syscall_32+0x27a/0x6a0 [ 1102.036811][T28137] ? do_fast_syscall_32+0x33/0x70 [ 1102.041851][T28137] ? asm_int80_emulation+0x1a/0x20 [ 1102.047020][T28137] ? do_int80_emulation+0x299/0x500 [ 1102.052237][T28137] ? trace_irq_disable+0x3b/0x140 [ 1102.057334][T28137] do_fast_syscall_32+0x33/0x70 [ 1102.062205][T28137] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1102.068596][T28137] RIP: 0023:0xf7fa30ec [ 1102.072672][T28137] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1102.092338][T28137] RSP: 002b:00000000f546650c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 1102.100823][T28137] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000080 [ 1102.108838][T28137] RDX: 0000000000000031 RSI: 0000000004000000 RDI: 0000000080000380 [ 1102.116857][T28137] RBP: 0000000000000014 R08: 0000000000000000 R09: 0000000000000000 [ 1102.124869][T28137] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1102.132846][T28137] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1102.140898][T28137] [ 1102.143971][T28137] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1102.151255][T28137] CPU: 0 UID: 0 PID: 28137 Comm: syz.2.7057 Tainted: G L syzkaller #0 PREEMPT(full) [ 1102.162194][T28137] Tainted: [L]=SOFTLOCKUP [ 1102.166518][T28137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1102.176575][T28137] Call Trace: [ 1102.179861][T28137] [ 1102.182799][T28137] vpanic+0x56d/0xa60 [ 1102.186796][T28137] ? __pfx__printk+0x10/0x10 [ 1102.191391][T28137] ? __pfx_vpanic+0x10/0x10 [ 1102.195900][T28137] ? is_bpf_text_address+0x292/0x2b0 [ 1102.201176][T28137] ? is_bpf_text_address+0x26/0x2b0 [ 1102.206372][T28137] panic+0xc5/0xd0 [ 1102.210094][T28137] ? __pfx_panic+0x10/0x10 [ 1102.214519][T28137] __warn+0x315/0x4c0 [ 1102.218500][T28137] ? mac80211_hwsim_tx+0x1bea/0x2580 [ 1102.223785][T28137] ? mac80211_hwsim_tx+0x1bea/0x2580 [ 1102.229063][T28137] __report_bug+0x276/0x570 [ 1102.233630][T28137] ? mac80211_hwsim_tx+0x1bea/0x2580 [ 1102.238912][T28137] ? __pfx___report_bug+0x10/0x10 [ 1102.243928][T28137] ? lockdep_hardirqs_on+0x7b/0x110 [ 1102.249120][T28137] ? irqentry_exit+0x218/0x910 [ 1102.253876][T28137] ? trace_irq_disable+0x3b/0x140 [ 1102.258893][T28137] ? mac80211_hwsim_tx+0x1bec/0x2580 [ 1102.264178][T28137] ? mac80211_hwsim_tx+0x1bea/0x2580 [ 1102.269453][T28137] report_bug+0x16b/0x220 [ 1102.273776][T28137] ? mac80211_hwsim_tx+0x1bea/0x2580 [ 1102.279059][T28137] ? mac80211_hwsim_tx+0x1bec/0x2580 [ 1102.284341][T28137] handle_bug+0x9c/0x200 [ 1102.288574][T28137] exc_invalid_op+0x1a/0x50 [ 1102.293063][T28137] asm_exc_invalid_op+0x1a/0x20 [ 1102.297900][T28137] RIP: 0010:mac80211_hwsim_tx+0x1bea/0x2580 [ 1102.303791][T28137] Code: c6 05 b2 21 29 09 01 48 c7 c7 c0 7d bd 8c be a3 08 00 00 48 c7 c2 00 7f bd 8c e8 a1 05 69 fa e9 65 f4 ff ff e8 77 59 8d fa 90 <0f> 0b 90 49 bc 00 00 00 00 00 fc ff df 48 8b 5c 24 18 e9 3b ff ff [ 1102.323388][T28137] RSP: 0018:ffffc90005a8efa0 EFLAGS: 00010283 [ 1102.329457][T28137] RAX: ffffffff873a61a9 RBX: 0000000000000000 RCX: 0000000000080000 [ 1102.337422][T28137] RDX: ffffc9000e48f000 RSI: 0000000000000231 RDI: 0000000000000232 [ 1102.345380][T28137] RBP: ffffc90005a8f130 R08: ffff8880788bddc0 R09: 000000000000000e [ 1102.353341][T28137] R10: 000000000000000d R11: 0000000000000002 R12: 0000000000000028 [ 1102.361298][T28137] R13: ffff88802ea36030 R14: 0000000000000014 R15: 0000000000000030 [ 1102.369263][T28137] ? mac80211_hwsim_tx+0x1be9/0x2580 [ 1102.374565][T28137] ? __pfx_mac80211_hwsim_tx+0x10/0x10 [ 1102.380030][T28137] ieee80211_tx_frags+0x3df/0x890 [ 1102.385064][T28137] ? __pfx_ieee80211_tx_frags+0x10/0x10 [ 1102.390613][T28137] __ieee80211_tx+0x267/0x580 [ 1102.395287][T28137] ieee80211_tx+0x312/0x4b0 [ 1102.399782][T28137] ? __pfx_ieee80211_tx+0x10/0x10 [ 1102.404816][T28137] ? ieee80211_xmit+0x2e5/0x3c0 [ 1102.409660][T28137] ieee80211_monitor_start_xmit+0xb33/0x1280 [ 1102.415634][T28137] ? ieee80211_monitor_start_xmit+0x5ea/0x1280 [ 1102.421781][T28137] ? __pfx_ieee80211_monitor_start_xmit+0x10/0x10 [ 1102.428192][T28137] dev_hard_start_xmit+0x2cd/0x830 [ 1102.433305][T28137] __dev_queue_xmit+0x14c0/0x3820 [ 1102.438330][T28137] ? __dev_queue_xmit+0x29b/0x3820 [ 1102.443436][T28137] ? _copy_from_iter+0x21b/0x1660 [ 1102.448452][T28137] ? skb_set_owner_w+0x263/0x3d0 [ 1102.453395][T28137] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1102.458775][T28137] ? __pfx__copy_from_iter+0x10/0x10 [ 1102.464065][T28137] ? __pfx_packet_parse_headers+0x10/0x10 [ 1102.469780][T28137] ? packet_xmit+0x68/0x330 [ 1102.474276][T28137] ? skb_put+0x112/0x210 [ 1102.478508][T28137] packet_sendmsg+0x3d0d/0x4f80 [ 1102.483362][T28137] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1102.488753][T28137] ? futex_hash_allocate+0xd55/0xe70 [ 1102.494030][T28137] ? __futex_wait+0x1e1/0x400 [ 1102.498705][T28137] ? __lock_acquire+0x6df/0x2e50 [ 1102.503719][T28137] ? __pfx_futex_wake_mark+0x10/0x10 [ 1102.509006][T28137] ? __pfx_packet_sendmsg+0x10/0x10 [ 1102.514194][T28137] ? aa_sk_perm+0x713/0x900 [ 1102.518690][T28137] ? lockdep_unlock+0x60/0xd0 [ 1102.523361][T28137] ? __pfx_aa_sk_perm+0x10/0x10 [ 1102.528229][T28137] ? aa_sock_msg_perm+0x144/0x210 [ 1102.533243][T28137] ? apparmor_socket_sendmsg+0x98/0x360 [ 1102.538781][T28137] ? __pfx_packet_sendmsg+0x10/0x10 [ 1102.543996][T28137] sock_sendmsg_nosec+0x13a/0x180 [ 1102.549018][T28137] __sys_sendto+0x408/0x5a0 [ 1102.553514][T28137] ? file_init_path+0x3b/0x5a0 [ 1102.558269][T28137] ? __pfx___sys_sendto+0x10/0x10 [ 1102.563305][T28137] ? rcu_is_watching+0x16/0xb0 [ 1102.568061][T28137] __ia32_sys_sendto+0xdd/0x100 [ 1102.572909][T28137] __do_fast_syscall_32+0x27a/0x6a0 [ 1102.578103][T28137] ? do_fast_syscall_32+0x33/0x70 [ 1102.583126][T28137] ? asm_int80_emulation+0x1a/0x20 [ 1102.588308][T28137] ? do_int80_emulation+0x299/0x500 [ 1102.593500][T28137] ? trace_irq_disable+0x3b/0x140 [ 1102.598521][T28137] do_fast_syscall_32+0x33/0x70 [ 1102.603370][T28137] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1102.609702][T28137] RIP: 0023:0xf7fa30ec [ 1102.613768][T28137] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1102.633361][T28137] RSP: 002b:00000000f546650c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 1102.641777][T28137] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 0000000080000080 [ 1102.649740][T28137] RDX: 0000000000000031 RSI: 0000000004000000 RDI: 0000000080000380 [ 1102.657710][T28137] RBP: 0000000000000014 R08: 0000000000000000 R09: 0000000000000000 [ 1102.665673][T28137] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1102.673636][T28137] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1102.681610][T28137] [ 1102.684903][T28137] Kernel Offset: disabled [ 1102.689218][T28137] Rebooting in 86400 seconds..