last executing test programs: 17m35.442850441s ago: executing program 32 (id=328): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x40) syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f70200", 0x18, 0x6, 0xff, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x11, 0x0, 0x3, {[@window={0x3, 0x3}]}}}}}}}}, 0x0) 11m14.665921739s ago: executing program 33 (id=1097): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$EVIOCGPROP(r0, 0x40047438, &(0x7f0000000180)=""/246) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xa}, &(0x7f0000000000)={0x1f, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0x0) 11m10.459715841s ago: executing program 4 (id=1133): socketpair$unix(0x1, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x1000006, 0x4}, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x109800, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={0x0, 0xffffffffffffff38}, 0x1, 0x0, 0x0, 0x40}, 0x26000051) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB='unlock io'], 0xe) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r2, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180)='v2to_da_alloc', 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r3 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x40202, 0x0) sendfile(r3, r3, 0x0, 0x4800000009) 11m9.317862429s ago: executing program 4 (id=1135): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000006480), 0x0, 0x4000000) 11m8.986107288s ago: executing program 4 (id=1137): r0 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESDEC], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) recvmmsg$unix(r0, &(0x7f0000001800)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000004740)=""/199, 0xc7}, {&(0x7f00000002c0)=""/233, 0xe9}, {&(0x7f0000004940)=""/255, 0xff}, {&(0x7f0000001600)=""/166, 0xa6}, {0x0}, {&(0x7f0000000580)=""/4072, 0xfe8}, {&(0x7f0000005d00)=""/215, 0xd7}], 0x7}}], 0x1, 0x0, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) 11m8.775615128s ago: executing program 4 (id=1138): socket$inet_smc(0x2b, 0x1, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xa9525000) unlink(&(0x7f0000000140)='./cgroup\x00') timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 11m6.261161846s ago: executing program 4 (id=1143): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000000400)={0x9, {{0x2, 0x4e20, @rand_addr=0x64010101}}}, 0x88) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0), 0x400) fstat(r1, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000600), 0x8808, &(0x7f0000000840)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r5}}) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x4000000, 0x1, 0x0, 'queue0\x00', 0x1c52}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000002c0)=0x20) 11m5.129412057s ago: executing program 4 (id=1145): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 11m4.981997575s ago: executing program 1 (id=1146): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000006480)=[{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000001640)='q', 0x1}], 0x1, &(0x7f0000001740)=ANY=[@ANYBLOB="180000000000000084000000050000000000fbff02000000180000000000000084000000070000007f000001000000001800"], 0x48, 0x80}], 0x1, 0x4000000) 11m4.837847549s ago: executing program 1 (id=1147): r0 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESDEC], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) recvmmsg$unix(r0, &(0x7f0000001800)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000004740)=""/199, 0xc7}, {&(0x7f00000002c0)=""/233, 0xe9}, {&(0x7f0000004940)=""/255, 0xff}, {&(0x7f0000001600)=""/166, 0xa6}, {0x0}, {&(0x7f0000000580)=""/4072, 0xfe8}, {&(0x7f0000005d00)=""/215, 0xd7}], 0x7}}], 0x1, 0x0, 0x0) write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) 11m2.666210486s ago: executing program 1 (id=1149): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000540)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="300000000000000017e2ffff010000001800000045f43a7ce45002bdb85e47ab3e39597e422ffab456dd963a000000001800000000000000170100000400000006020000004000001800000000000000170100000300000001"], 0x60}], 0x1, 0x48001) recvmmsg(r1, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)=""/7, 0x7}], 0x1}}], 0x1, 0x0, 0x0) 11m1.753355838s ago: executing program 1 (id=1152): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) socket(0x10, 0x80002, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$adsp1(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x49a, &(0x7f0000000140)={0x0, 0x79b2, 0x3180, 0xfffffffd, 0x283}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x10, 0x4007, @fd_index=0x9, 0x1e, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x627, 0x4c1, 0x63, 0x0, 0x0) 11m1.309261549s ago: executing program 1 (id=1154): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000000400)={0x9, {{0x2, 0x4e20, @rand_addr=0x64010101}}}, 0x88) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0), 0x400) fstat(r1, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000600), 0x8808, &(0x7f0000000840)={{}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r5}}) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x4000000, 0x1, 0x0, 'queue0\x00', 0x1c52}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x82) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000002c0)=0x20) 11m0.242516198s ago: executing program 1 (id=1156): syz_clone(0x1000011, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0x3, &(0x7f0000002480)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb80393884f01a506, 0x4008032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000db1000/0x1000)=nil, &(0x7f0000631000/0x2000)=nil, 0x1000}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x4b301, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000040)={0xffffffff, 0xb, 0x7, 0x8, 0x5, "e7732e9431a9e74e0fe4f9ca3fb352e74f4d01"}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1, 0x6, 0xfa11, 0xffffffff}, 0x0) unshare(0x8000000) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x4e23, 0x0, @empty, 0xfffffff8}, 0x0, {[0xfffffffe, 0x0, 0x0, 0x1, 0x50, 0x5]}}, 0x5c) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0xb9532abf1fb6ff73, 0x0) 10m49.659878378s ago: executing program 34 (id=1145): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 10m44.861176472s ago: executing program 35 (id=1156): syz_clone(0x1000011, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0x3, &(0x7f0000002480)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb80393884f01a506, 0x4008032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$UFFDIO_MOVE(r0, 0xc028aa05, &(0x7f0000000080)={&(0x7f0000db1000/0x1000)=nil, &(0x7f0000631000/0x2000)=nil, 0x1000}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000e40)='\b', 0x17ff}], 0x5) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x4b301, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000040)={0xffffffff, 0xb, 0x7, 0x8, 0x5, "e7732e9431a9e74e0fe4f9ca3fb352e74f4d01"}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1, 0x6, 0xfa11, 0xffffffff}, 0x0) unshare(0x8000000) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x4e23, 0x0, @empty, 0xfffffff8}, 0x0, {[0xfffffffe, 0x0, 0x0, 0x1, 0x50, 0x5]}}, 0x5c) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0xb9532abf1fb6ff73, 0x0) 2m50.625686975s ago: executing program 7 (id=2071): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0xe84, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x4, 0x1ff, 0x20000000, 0xc, 0x6}, 0x7f, 0x5}, [{0x2a9, 0x6, 0x810, 0x4, 0x5}, {0x4a7, 0x1ff, 0x3, 0x1, 0xd354, 0xdd}, {0x9, 0x7, 0x3ff, 0x7, 0xfffffffd, 0x4}, {0x8, 0x0, 0x6, 0x2, 0x7fff, 0x3}, {0x4f9a, 0x5, 0x1, 0x1, 0x2, 0x8008}, {0x0, 0x5, 0x1437, 0xffffffff, 0xee57, 0x9}, {0x77d, 0x8, 0x9, 0x6, 0x8, 0x1}, {0x5, 0x6, 0x0, 0x2, 0x1, 0x7fff}, {0x0, 0x5, 0x4235da1, 0x9, 0x7ec9, 0x8}, {0x10000, 0x2, 0x0, 0x1, 0x3, 0x9}, {0xd, 0xffff0001, 0x0, 0x6, 0x81, 0x4}, {0xfffffffc, 0x4, 0xffff, 0x8, 0xffffffff, 0xfffffffa}, {0x5, 0xd29, 0x101, 0x3, 0x7, 0xc}, {0x0, 0xfffffff5, 0x1, 0x72b2, 0xc874, 0x3}, {0x3, 0xf, 0x5, 0x1, 0x1ff, 0x6}, {0x9b9b, 0xffff, 0x6, 0xb, 0xb3d, 0x812}, {0x5, 0x7, 0x2, 0x5, 0x5, 0x4}, {0x6, 0x0, 0x9, 0x2, 0x82, 0x2}, {0xfffffff7, 0x6, 0x2, 0x9, 0xff}, {0x4, 0x1, 0x371, 0x8, 0x0, 0x400}, {0x9, 0x2, 0xd77, 0x8, 0x113, 0x8d3f}, {0x7, 0xffffffff, 0x8, 0x92a4, 0x9, 0x40}, {0x1a4a13f0, 0x9, 0xe, 0x3, 0xad47, 0xf83b}, {0x1ff, 0x5, 0x7, 0xfff, 0x9}, {0x100, 0x400004, 0x200, 0x9, 0xfffffffd, 0x9df}, {0x9, 0x1, 0x65, 0x9, 0x7}, {0x401, 0x10001, 0x9, 0x200, 0x9, 0x1}, {0x6, 0x10, 0xf, 0x2, 0x6, 0x3}, {0xf23, 0x3ff, 0x0, 0x9, 0xffffffff}, {0x80000000, 0x6, 0x0, 0x6, 0x6, 0xd}, {0x0, 0x9, 0xd, 0x8000, 0x3, 0x2}, {0x800, 0x9, 0x6, 0x3, 0x7, 0x8}, {0x7, 0x8, 0x7358, 0x7, 0x28, 0xffffffff}, {0x4d9, 0x45db8bad, 0xb3dd, 0x1, 0xbc, 0x7ff}, {0x7, 0x1, 0x3, 0x3, 0x3, 0x7a}, {0x5a1b, 0x1, 0x1, 0x7ff, 0x3, 0x4}, {0x3, 0x7, 0x4, 0x4, 0x1c716ddc, 0x8}, {0xffffffa5, 0x7, 0x0, 0x10, 0x3, 0x5}, {0x8219, 0x0, 0x2, 0x16, 0x3, 0x2}, {0x62, 0xf4, 0x5, 0x4, 0x4, 0x67}, {0x5, 0x4, 0x53, 0x8, 0xbffffffc, 0x7}, {0x6, 0x5, 0x2, 0xffff, 0x2, 0x2}, {0x80000001, 0x94c, 0x6, 0xfffffe00, 0x5, 0x7b27}, {0x2, 0x6, 0x1000, 0x9, 0xc}, {0xa, 0x0, 0x9, 0x4, 0xe, 0x9}, {0xdf, 0x7fff, 0x8000, 0x81, 0xff, 0xfffffff8}, {0x2, 0x10000, 0x9, 0x2, 0x2}, {0x2, 0x6, 0x9, 0x1, 0x2, 0x40}, {0xfffffe00, 0x3, 0x74d2, 0x3, 0x80000001, 0x6}, {0xe3f6, 0x8, 0xfffffff7, 0x1, 0x6, 0xc}, {0x8, 0x9, 0x8e, 0x33, 0x10001, 0x22cb}, {0x2, 0x31f5, 0x7, 0x5, 0x7fffffff, 0x1}, {0x9, 0x10001, 0x4, 0x8, 0x7, 0x9}, {0xb, 0x1ff, 0xb, 0x3, 0x5, 0x80000001}, {0x7, 0x7, 0x69b, 0x3, 0x8, 0x339}, {0xee, 0x80000000, 0xfba6, 0x101, 0x5, 0xb}, {0x3, 0x458, 0x6, 0xf, 0x7, 0x8000}, {0x9, 0xfffffffa, 0x1000, 0x0, 0xb, 0xce5a}, {0x400, 0xffff, 0x3, 0xbcbb, 0x7, 0xb}, {0x0, 0xe000, 0xb, 0x8, 0x2, 0x1}, {0x1, 0x0, 0x2, 0x9, 0x0, 0x401}, {0xd, 0x1, 0x2, 0xf, 0x81, 0x5}, {0x6, 0x9, 0x3, 0x5, 0x4, 0x3649}, {0x7, 0x2, 0x80000000, 0x9, 0x1630, 0x9e73}, {0xb, 0x1b6, 0xc2, 0x3, 0x4, 0xca}, {0x4, 0x5, 0x401, 0x4, 0xfffffff8, 0x40}, {0x8, 0x4594, 0x8, 0x4, 0x0, 0xffff}, {0x100, 0xfffffffb, 0x6, 0x0, 0x9, 0x6}, {0x3, 0xf7b, 0x3, 0x8, 0x6, 0x3}, {0x1, 0x5, 0x3, 0xab9, 0x7, 0x9}, {0xffbfffff, 0x0, 0xfc, 0x7, 0x6, 0x10}, {0xf, 0x1, 0xa000000, 0x1, 0x101, 0x1f3}, {0x7ff, 0x9, 0xfffff001, 0x8001, 0x2, 0x2}, {0x4, 0x10001, 0x6, 0x1, 0x9, 0xfffffff8}, {0x3, 0x3, 0x7, 0x9, 0x10, 0x1}, {0x5, 0x100, 0xffffffff, 0x963, 0x2, 0xc}, {0x6, 0x50, 0x6, 0xa, 0x0, 0x3}, {0x649, 0x2, 0x80000001, 0x8, 0x0, 0x1}, {0x8, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x3}, {0xa3, 0x81, 0x9fcb, 0x1, 0x8, 0x7fff}, {0x0, 0x5, 0x750c, 0x0, 0x1, 0xfffffffc}, {0x7ff, 0x7, 0x10000, 0x9, 0x4, 0x88}, {0x5, 0x10001, 0x7fff, 0x81, 0xfffffff4, 0x7}, {0x5, 0x7, 0x5, 0x4, 0x1ff}, {0x3, 0x0, 0x3ff, 0x7fffffff, 0x9, 0x3ff}, {0xdac, 0x0, 0x4, 0x80000001, 0x3, 0x8}, {0x7, 0x6, 0x6, 0x8, 0x80000001, 0xa}, {0x2, 0x4, 0x4, 0x401, 0xe32}, {0x5, 0x7, 0x6, 0x8, 0x2, 0x2}, {0x10001, 0x7, 0x3, 0x4, 0x9, 0xfffbfffa}, {0x2, 0x0, 0x3, 0x6, 0x800, 0x7}, {0x0, 0x0, 0x3, 0x8, 0x1, 0x3}, {0x3, 0x3, 0xffffffff, 0x3, 0x800, 0xde}, {0x5, 0x66, 0x41d0, 0x8001, 0x1, 0x3}, {0x6, 0x7, 0xfffffffc, 0x4, 0x3, 0x92c}, {0x4, 0xffff, 0x0, 0x101, 0x4, 0x1}, {0x9, 0xf667, 0x5, 0x3, 0x9, 0x4}, {0x1731, 0xa, 0x9960, 0x9, 0x1, 0x7}, {0xd, 0xfffffff8, 0x1, 0x3, 0xb61, 0x2}, {0x1, 0x4, 0x7fffffff, 0x80000001, 0x2, 0x6}, {0x7, 0x2, 0xffffff3a, 0x4cf, 0x800, 0x6}, {0x8000, 0x6, 0x1, 0x0, 0x100, 0x80000000}, {0x3b, 0x5562334a, 0x2, 0x2, 0x6, 0x81}, {0x4, 0x96, 0x81, 0x0, 0x101, 0x7}, {0x8000004, 0xff, 0x9, 0x0, 0x81, 0x29}, {0xa, 0x5, 0x0, 0x9, 0xffffffff, 0xfb4}, {0x80000000, 0x2, 0xffff, 0x39b5, 0x1, 0x800}, {0x61, 0x2d, 0x6, 0x1fe4c5d2, 0x1, 0x3}, {0x1, 0xe2, 0x7ff, 0x7ff, 0x7f, 0x29d0}, {0x0, 0x8, 0xc, 0xd594, 0x9, 0x7}, {0x6, 0x0, 0x7, 0x9, 0x7, 0x9}, {0x80e9, 0x7, 0x9, 0x1, 0x1, 0x18000}, {0x400, 0x9, 0x0, 0x6f}, {0x2, 0x1, 0x6, 0x3, 0xfffff71b, 0xce}, {0x1, 0xff, 0xc, 0x4, 0x800, 0x1}, {0x6, 0x2, 0x8, 0xfff, 0x4, 0x7fff}, {0x0, 0x0, 0x7f, 0x401, 0x7, 0x7fff}, {0x7, 0xa, 0x10000, 0x1, 0x8000, 0xfffff830}, {0x3, 0x4, 0x2, 0x1, 0x6, 0x2b4}, {0x3cd2dbce, 0xff, 0x9dc, 0x0, 0x8, 0xfffffffc}, {0x6, 0x0, 0xe61, 0xc5c3, 0x3, 0x1}, {0x7, 0x2, 0x197a, 0x7, 0x1, 0x8}, {0xff, 0x2c, 0xfffffc01, 0x1, 0x3, 0x100}, {0x0, 0x6, 0x10001, 0x40ce7, 0xec, 0x1000}, {0xffffffff, 0x6, 0xffffffff, 0x9, 0x2, 0x6}, {0xfa, 0x92, 0xbf1d, 0x7, 0x80, 0x5}, {0x1c91, 0x5f27, 0x1, 0x0, 0x6, 0xcf}, {0x37, 0x622, 0x2, 0x1, 0x7, 0x2}], [{}, {0xccffbfc290ab3baa}, {}, {0x2}, {0x2}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x5}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x2}, {0x4}, {0x5}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0xed3229170eca159}, {0x2, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3}, {0x4}, {0x3, 0x1}, {0x1}, {0x3}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {0x54e1b160e6ec45e8, 0x1}, {0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {}, {0x5}, {}, {0x2}, {0x5, 0x1}, {0x4}, {0x2}, {0x9baeccaf277094c4, 0x1}, {0x3}, {0x2, 0x1}, {}, {}, {0x8f9fc2e2ef57f2f0}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x2}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xe84}, 0x1, 0x0, 0x0, 0x81}, 0x800) 2m50.36196377s ago: executing program 6 (id=2075): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4000) 2m50.217885861s ago: executing program 6 (id=2078): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) socket$inet6(0xa, 0x2, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x38, 0x2, [@TCA_FLOW_ACT={0x34, 0x9, 0x0, 0x1, [@m_csum={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x68}}, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) 2m50.130202694s ago: executing program 7 (id=2080): socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x3}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x5) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @null, @default]}, 0x48) accept4(r0, 0x0, 0x0, 0x80000) r2 = accept4$netrom(r0, 0x0, 0x0, 0x80000) writev(r2, &(0x7f00000001c0), 0x7) 2m49.789840877s ago: executing program 7 (id=2084): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000777a078afbd825c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000023000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000db2100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cc2351270000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) 2m49.661371969s ago: executing program 3 (id=2085): r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x3}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x5) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000000)={{0x6, @rose, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @null, @default]}, 0x48) accept4(r1, 0x0, 0x0, 0x80000) r3 = accept4$netrom(r1, 0x0, 0x0, 0x80000) writev(r3, &(0x7f00000001c0), 0x7) close_range(r0, 0xffffffffffffffff, 0x0) 2m49.656611083s ago: executing program 7 (id=2086): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000040)='GPL\x00'}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='inet_sk_error_report\x00', r0}, 0x18) r2 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r2, r1, 0x0, 0x14, 0xfffffffffffffffe}, 0x17) 2m49.450053843s ago: executing program 6 (id=2088): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000008000000000000000000180100002020642500000000002020207b1af8ff00000000bfa108000500000047110000f6ffffffb702000008000000b7030000000000"], &(0x7f0000000300)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 2m49.449803625s ago: executing program 7 (id=2089): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x3fffffffd, 0x28100) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000003c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, 0x0) 2m49.265096988s ago: executing program 6 (id=2091): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'veth1_to_bridge\x00'}) 2m49.181940926s ago: executing program 7 (id=2092): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xc40, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66) 2m49.15223532s ago: executing program 3 (id=2093): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d0000008500000005000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) fallocate(r0, 0x22, 0x400000000000000, 0xd84) 2m48.97762317s ago: executing program 6 (id=2094): socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x3}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x5) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @null, @default]}, 0x48) accept4(r0, 0x0, 0x0, 0x80000) r2 = accept4$netrom(r0, 0x0, 0x0, 0x80000) writev(r2, &(0x7f00000001c0), 0x7) 2m48.862444006s ago: executing program 3 (id=2095): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYBLOB="01002bbd7000fedbdf25030000000c00010022"], 0x78}, 0x1, 0x0, 0x0, 0x8010}, 0x4800) 2m48.788028479s ago: executing program 3 (id=2096): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000777a078afbd825c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000023000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000db2100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cc2351270000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) 2m48.732611419s ago: executing program 3 (id=2097): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073"], 0x7c}}, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x4, 0x805, 0x7, 0x3, 0x8, 0x4000005, 0x0, 0x8, 0x8000000000000001, 0x6, 0x2, 0x300, 0x200004, 0x1], 0x10000, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x40, 0xb6, '\x00', 0x5}) ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_RUN(r0, 0xae80, 0x0) 2m48.634480933s ago: executing program 3 (id=2098): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000140)={0x1, 0x1, [@random="03c8981e6e1d"]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x701203, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2m48.573670926s ago: executing program 6 (id=2100): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000000080)={0x24, r1, 0x1, 0x70bd27, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x24}}, 0x0) 2m34.041199951s ago: executing program 36 (id=2092): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xc40, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66) 2m33.51537065s ago: executing program 37 (id=2098): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000140)={0x1, 0x1, [@random="03c8981e6e1d"]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x701203, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2m33.439500526s ago: executing program 38 (id=2100): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000000080)={0x24, r1, 0x1, 0x70bd27, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x24}}, 0x0) 24.427838979s ago: executing program 5 (id=2764): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) bind$packet(r1, &(0x7f0000000240)={0x11, 0x4, 0x0, 0x1, 0x6, 0x6, @remote}, 0x14) 24.235143059s ago: executing program 5 (id=2767): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000007000000612200000200000000000000", @ANYRES32, @ANYRES32=r1], 0x50) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') pread64(r2, &(0x7f0000002140)=""/17, 0x11, 0x0) 23.942857736s ago: executing program 5 (id=2771): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0x1, 0x60, {"3ef30fc735fc9a00003e0f01c8c4417df1a9b398000066b824008ec8460f79f2c4e1717db49c26000000b9800000c00f3235000400000f307b9666baa00066b8000066ef66bad1040f01c2260f78da"}}], 0x60}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000380)=[@enable_nested={0x12c, 0x18}], 0x18}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x35, 0x7, 0x0, 0x180, 0x4, 0x10, 0xf1, 0x403, 0x80, 0x2, 0x6, 0x9, 0x0, 0x9, 0x0, 0xbdb], 0xfec00000, 0x3c4210}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 23.382878809s ago: executing program 5 (id=2777): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) bind$packet(r1, &(0x7f0000000240)={0x11, 0x4, 0x0, 0x1, 0x6, 0x6, @remote}, 0x14) 23.122593073s ago: executing program 5 (id=2779): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="ffffffffffffffff14001280090001007665746800000000040002800800", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4088001}, 0x0) 22.633041647s ago: executing program 5 (id=2784): unshare(0x22020400) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) readahead(r0, 0x1, 0x8) 16.899910636s ago: executing program 0 (id=2823): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000004c0)='mm_vmscan_write_folio\x00', r0, 0x0, 0xffffeffffffffffb}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 16.669217531s ago: executing program 0 (id=2826): socket$kcm(0x2, 0x3, 0x106) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x0, 0x0}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_debug_messages', 0x141a02, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000540)=ANY=[@ANYBLOB="120100028940cb40d1050170435301020301090212"], 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[], 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$kcm(0xa, 0x5, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') socket$nl_netfilter(0x10, 0x3, 0xc) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$vim2m(&(0x7f000000cd80), 0x101, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r0, @ANYBLOB="e0ff8b0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001d"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x4000004) 9.843865685s ago: executing program 8 (id=2848): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0x57, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x2, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@main=@item_012={0x1, 0x0, 0x8, '\"'}, @main=@item_4={0x3, 0x0, 0xb, "02970764"}]}}, 0x0}, 0x0) 6.665280891s ago: executing program 8 (id=2849): close(0x3) shutdown(0xffffffffffffffff, 0x1) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x0}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={@local, 0x0, r1}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={@mcast2, @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0022}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r1}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'team0\x00'}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000100)={'veth1_to_bridge\x00'}) 5.418886807s ago: executing program 0 (id=2850): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x9d, 0xea, 0x78, 0x40, 0x18b4, 0xfffb, 0xdc7b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xa0, 0x1f, 0x71}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, 0x0) 5.324768833s ago: executing program 8 (id=2851): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0x5) setuid(r1) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r2, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0x4e20, 0x2, @mcast1, 0x9}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000001c0)="8000e8beec9dbc", 0x7}], 0x1, &(0x7f0000000700)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x87}}}], 0x18}, 0xc000) 5.196619652s ago: executing program 8 (id=2852): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r1 = socket$netlink(0x10, 0x3, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/33, 0x1a}, {0x0}], 0x2, 0x8, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 4.933581974s ago: executing program 2 (id=2854): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000100)="66b9800000c00f326635001000000f302695b8dc000f00d0ba4200b89a70efd0a20068660ff6d766b864b7c38666efbafc0c66ed0f20c06635010000000f22c00f23d02e0f01718066b9280000000f32", 0x50}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 4.767678226s ago: executing program 2 (id=2855): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x800) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d3120900"], 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.149937697s ago: executing program 2 (id=2858): ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffc, 0xffdffff8, 0xffffffff, 0x7, "ff0000bb719b98fb73e53a0000000600"}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0xd) 4.077733752s ago: executing program 8 (id=2859): socket$kcm(0x2, 0x3, 0x106) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x0, 0x0}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_debug_messages', 0x141a02, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000540)=ANY=[@ANYBLOB="120100028940cb40d1050170435301020301090212"], 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[], 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$kcm(0xa, 0x5, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') socket$nl_netfilter(0x10, 0x3, 0xc) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$vim2m(&(0x7f000000cd80), 0x101, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r0, @ANYBLOB="e0ff8b0a0a0002"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001d"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x4000004) 4.027987347s ago: executing program 2 (id=2860): close(0x3) shutdown(0xffffffffffffffff, 0x1) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x0}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={@local, 0x0, r1}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={@mcast2, @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0022}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r1}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'team0\x00'}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000100)={'veth1_to_bridge\x00'}) 3.694496779s ago: executing program 0 (id=2861): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000940)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\"\b\x00\x00'], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) 3.434557733s ago: executing program 2 (id=2862): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYBLOB="ffffffffffffffff140012800900010076657468000000000400028008000a00", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4088001}, 0x0) 3.128787745s ago: executing program 9 (id=2863): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udplite(0xa, 0x2, 0x88) socket$netlink(0x10, 0x3, 0x4) socket$kcm(0x10, 0x2, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x66a42, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) open(0x0, 0x48afd, 0x180) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) syz_open_dev$video4linux(&(0x7f0000000540), 0xf, 0x101002) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x103000) open$dir(&(0x7f0000000080)='./file0\x00', 0x28080, 0x108) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x1ff) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000200)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 2.867306511s ago: executing program 9 (id=2864): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000100)="66b9800000c00f326635001000000f302695b8dc000f00d0ba4200b89a70efd0a20068660ff6d766b864b7c38666efbafc0c66ed0f20c06635010000000f22c00f23d02e0f01718066b9280000000f32", 0x50}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 2.855484136s ago: executing program 2 (id=2865): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'veth0_to_bridge\x00', 0x400}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'pimreg0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000010b00000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) 2.457979199s ago: executing program 9 (id=2866): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0xfffd, 0x0, @initdev={0xfe, 0x88, '\x00', 0x8, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, 0x0, &(0x7f00000000c0)) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f00000000c0)={0x0, 0x8000}, 0x8) 2.306347267s ago: executing program 9 (id=2867): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0) close(r1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) 2.197764776s ago: executing program 9 (id=2868): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x200008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x674, 0x4080800) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x188}}, 0x0) 1.174661085s ago: executing program 0 (id=2869): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x8000) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x9640, 0x0) ppoll(&(0x7f0000000040)=[{r1, 0x1200}], 0x1, 0x0, 0x0, 0x0) write$dsp(r0, &(0x7f0000002200)="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", 0xfe0) 985.952725ms ago: executing program 9 (id=2870): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000"], 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000002b40)={0x10, 0x1b, 0x200, 0x70bd28, 0x25dfdbfc}, 0x10}], 0x2, 0x0, 0x0, 0x80}, 0xc1) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="201104060000000101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 917.593484ms ago: executing program 8 (id=2871): close(0x3) shutdown(0xffffffffffffffff, 0x1) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x0}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={@local, 0x0, r1}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={@mcast2, @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0022}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r1}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000540)={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r5}) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, 0x0) 0s ago: executing program 0 (id=2872): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x8000) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x9640, 0x0) ppoll(&(0x7f0000000040)=[{r1, 0x1200}], 0x1, 0x0, 0x0, 0x0) write$dsp(r0, &(0x7f0000002200)="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", 0xfff) kernel console output (not intermixed with test programs): Mfr=1, Product=2, SerialNumber=3 [ 1137.542714][ T9263] usb 6-1: Product: syz [ 1137.542732][ T9263] usb 6-1: Manufacturer: syz [ 1137.542748][ T9263] usb 6-1: SerialNumber: syz [ 1137.588842][ T9263] usb 6-1: config 0 descriptor?? [ 1137.777775][T13566] tipc: Started in network mode [ 1137.777811][T13566] tipc: Node identity de09a12d142a, cluster identity 4711 [ 1137.778039][T13566] tipc: Enabled bearer , priority 0 [ 1137.779228][T13566] syzkaller0: entered promiscuous mode [ 1137.779254][T13566] syzkaller0: entered allmulticast mode [ 1137.835523][T13566] tipc: Resetting bearer [ 1137.849657][T13556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1137.850528][T13556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1137.906633][T13565] tipc: Resetting bearer [ 1138.152854][T13565] tipc: Disabling bearer [ 1138.291393][T13574] trusted_key: syz.6.1705 sent an empty control message without MSG_MORE. [ 1138.291448][T13568] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1697'. [ 1138.339213][ T9261] usb 6-1: USB disconnect, device number 42 [ 1138.413353][T13576] input: syz0 as /devices/virtual/input/input18 [ 1138.806123][T13583] loop9: detected capacity change from 0 to 7 [ 1138.807649][T13583] Buffer I/O error on dev loop9, logical block 0, async page read [ 1138.807704][T13583] Buffer I/O error on dev loop9, logical block 0, async page read [ 1138.807745][T13583] Buffer I/O error on dev loop9, logical block 0, async page read [ 1138.807782][T13583] Buffer I/O error on dev loop9, logical block 0, async page read [ 1138.807838][T13583] Buffer I/O error on dev loop9, logical block 0, async page read [ 1138.808300][T13583] Buffer I/O error on dev loop9, logical block 0, async page read [ 1138.808471][T13583] Buffer I/O error on dev loop9, logical block 0, async page read [ 1138.808493][T13583] ldm_validate_partition_table(): Disk read failed. [ 1138.808525][T13583] Buffer I/O error on dev loop9, logical block 0, async page read [ 1138.808563][T13583] Buffer I/O error on dev loop9, logical block 0, async page read [ 1138.808599][T13583] Buffer I/O error on dev loop9, logical block 0, async page read [ 1138.808639][T13583] Dev loop9: unable to read RDB block 0 [ 1138.808716][T13583] loop9: unable to read partition table [ 1138.809051][T13583] loop9: partition table beyond EOD, truncated [ 1138.809092][T13583] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 1138.809092][T13583] ) failed (rc=-5) [ 1139.392829][T13600] 9p: Bad value for 'rfdno' [ 1139.821232][T13615] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1725'. [ 1139.912079][ T9269] usb 6-1: new full-speed USB device number 43 using dummy_hcd [ 1140.044405][T13621] vxlan0: entered promiscuous mode [ 1140.045567][T13621] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 1140.045653][ T2190] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1140.045704][ T2190] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1140.045745][ T2190] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1140.045785][ T2190] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1140.070764][ T9269] usb 6-1: config 8 has an invalid interface number: 223 but max is 0 [ 1140.070855][ T9269] usb 6-1: config 8 contains an unexpected descriptor of type 0x2, skipping [ 1140.070909][ T9269] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1140.070961][ T9269] usb 6-1: config 8 has no interface number 0 [ 1140.071097][ T9269] usb 6-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 1140.071181][ T9269] usb 6-1: config 8 interface 223 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1140.162625][ T9269] usb 6-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 1140.162720][ T9269] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1140.162785][ T9269] usb 6-1: Product: syz [ 1140.162835][ T9269] usb 6-1: Manufacturer: syz [ 1140.162886][ T9269] usb 6-1: SerialNumber: syz [ 1140.468315][ T9269] usb 6-1: USB disconnect, device number 43 [ 1140.486195][T12958] udevd[12958]: setting mode of /dev/bus/usb/006/043 to 020664 failed: No such file or directory [ 1140.486392][T12958] udevd[12958]: setting owner of /dev/bus/usb/006/043 to uid=0, gid=0 failed: No such file or directory [ 1141.304583][T11919] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1141.461246][T11919] usb 6-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1141.461283][T11919] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1141.461307][T11919] usb 6-1: Product: syz [ 1141.461323][T11919] usb 6-1: Manufacturer: syz [ 1141.461341][T11919] usb 6-1: SerialNumber: syz [ 1141.503127][T11919] usb 6-1: config 0 descriptor?? [ 1142.127036][T11919] usb 6-1: f81604_read: reg: 105 failed: -EPROTO [ 1142.127067][T11919] f81604 6-1:0.0: Setting termination of CH#1 failed: -EPROTO [ 1142.127103][T11919] f81604 6-1:0.0: probe with driver f81604 failed with error -71 [ 1142.153026][T11919] usb 6-1: USB disconnect, device number 44 [ 1143.097118][ T9269] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1143.242710][ T9269] usb 6-1: Using ep0 maxpacket: 32 [ 1143.247125][ T9269] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1143.247158][ T9269] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1143.282716][ T9269] usb 6-1: config 0 descriptor?? [ 1143.445807][T13712] netlink: 108 bytes leftover after parsing attributes in process `syz.6.1768'. [ 1143.496762][ T9269] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1143.516768][ T9269] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1143.519105][ T9269] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1143.519173][ T9269] usb 6-1: media controller created [ 1143.570843][ T9269] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1143.580192][T13716] 9p: Bad value for 'rfdno' [ 1143.742023][ T9269] az6027: usb out operation failed. (-71) [ 1143.743941][ T9269] az6027: usb out operation failed. (-71) [ 1143.743960][ T9269] stb0899_attach: Driver disabled by Kconfig [ 1143.743972][ T9269] az6027: no front-end attached [ 1143.743972][ T9269] [ 1143.745781][ T9269] az6027: usb out operation failed. (-71) [ 1143.745798][ T9269] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1143.750746][ T9269] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input19 [ 1143.915395][ T9269] dvb-usb: schedule remote query interval to 400 msecs. [ 1143.915424][ T9269] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1143.929003][ T9269] usb 6-1: USB disconnect, device number 45 [ 1144.008151][T13728] syzkaller0: entered promiscuous mode [ 1144.008180][T13728] syzkaller0: entered allmulticast mode [ 1144.308891][ T9269] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1145.363436][ T5876] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1145.456488][T13765] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 1145.456565][T10646] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1145.456618][T10646] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1145.456660][T10646] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1145.456700][T10646] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1145.522568][ T5876] usb 6-1: Using ep0 maxpacket: 32 [ 1145.526619][ T5876] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1145.526653][ T5876] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1145.566485][ T5876] usb 6-1: config 0 descriptor?? [ 1145.774085][ T5876] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1145.799508][ T5876] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1145.813938][ T5876] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1145.814008][ T5876] usb 6-1: media controller created [ 1145.869552][ T5876] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1145.974975][ T5876] az6027: usb out operation failed. (-71) [ 1145.975404][ T5876] az6027: usb out operation failed. (-71) [ 1145.975420][ T5876] stb0899_attach: Driver disabled by Kconfig [ 1145.975431][ T5876] az6027: no front-end attached [ 1145.975431][ T5876] [ 1145.975850][ T5876] az6027: usb out operation failed. (-71) [ 1145.975864][ T5876] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1145.979266][ T5876] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input20 [ 1146.042705][ T5876] dvb-usb: schedule remote query interval to 400 msecs. [ 1146.042730][ T5876] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1146.045979][ T5876] usb 6-1: USB disconnect, device number 46 [ 1146.354004][ T5876] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1147.577400][T13824] netlink: 108 bytes leftover after parsing attributes in process `syz.7.1818'. [ 1147.611866][ T9263] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1147.773331][ T9263] usb 7-1: Using ep0 maxpacket: 16 [ 1147.776909][ T9263] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1147.776945][ T9263] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1147.776983][ T9263] usb 7-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1147.777009][ T9263] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1147.841473][ T9263] usb 7-1: config 0 descriptor?? [ 1148.299987][ T9263] nzxt-smart2 0003:1E71:2009.0026: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.6-1/input0 [ 1148.661056][T11919] usb 7-1: USB disconnect, device number 2 [ 1149.347948][T13858] tipc: Started in network mode [ 1149.347984][T13858] tipc: Node identity c65dd82db1bb, cluster identity 4711 [ 1149.348212][T13858] tipc: Enabled bearer , priority 0 [ 1149.351438][T13858] syzkaller0: entered promiscuous mode [ 1149.351463][T13858] syzkaller0: entered allmulticast mode [ 1149.452211][T13857] tipc: Resetting bearer [ 1149.654523][T13857] tipc: Disabling bearer [ 1149.667773][ T9261] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1149.822138][ T9261] usb 6-1: Using ep0 maxpacket: 16 [ 1149.831298][ T9261] usb 6-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 1149.831335][ T9261] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1149.831359][ T9261] usb 6-1: Product: syz [ 1149.831376][ T9261] usb 6-1: Manufacturer: syz [ 1149.831393][ T9261] usb 6-1: SerialNumber: syz [ 1149.878962][ T9261] usb 6-1: config 0 descriptor?? [ 1149.904557][ T9261] ums-onetouch 6-1:0.0: USB Mass Storage device detected [ 1150.100784][T11919] usb 6-1: USB disconnect, device number 47 [ 1150.732042][T11919] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1150.763900][T13902] tipc: Enabled bearer , priority 0 [ 1150.765026][T13902] syzkaller0: entered promiscuous mode [ 1150.765053][T13902] syzkaller0: entered allmulticast mode [ 1150.802911][T13901] tipc: Resetting bearer [ 1150.885124][T11919] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1150.885179][T11919] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 1150.888246][T11919] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1150.888278][T11919] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1150.888302][T11919] usb 8-1: Manufacturer: syz [ 1150.939233][T13901] tipc: Disabling bearer [ 1150.940815][T11919] usb 8-1: config 0 descriptor?? [ 1150.973774][T11919] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1151.638443][T13925] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input21 [ 1152.419624][T13942] i2c i2c-0: Invalid block write size 252 [ 1153.619661][T13981] i2c i2c-0: Invalid block write size 252 [ 1153.805892][ T9269] usb 8-1: USB disconnect, device number 3 [ 1153.972329][T11919] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1154.146159][T11919] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1154.146192][T11919] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1154.208702][T11919] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1154.208740][T11919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1154.208764][T11919] usb 4-1: SerialNumber: syz [ 1154.443125][ T9269] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 1154.529699][T11919] usb 4-1: 0:2 : does not exist [ 1154.639079][ T9269] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1154.639142][ T9269] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1154.639175][ T9269] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1154.677184][ T9269] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1154.677219][ T9269] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1154.677242][ T9269] usb 8-1: Manufacturer: syz [ 1154.764574][ T9269] usb 8-1: config 0 descriptor?? [ 1154.890645][T11919] usb 4-1: USB disconnect, device number 61 [ 1155.376897][ T9261] usb 8-1: USB disconnect, device number 4 [ 1155.478302][T13096] udevd[13096]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1156.341888][T11919] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1156.372433][T14043] tipc: Enabled bearer , priority 0 [ 1156.374243][T14043] syzkaller0: entered promiscuous mode [ 1156.374270][T14043] syzkaller0: entered allmulticast mode [ 1156.438680][T14042] tipc: Resetting bearer [ 1156.499394][T11919] usb 8-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1156.499417][T11919] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1156.499432][T11919] usb 8-1: Product: syz [ 1156.499443][T11919] usb 8-1: Manufacturer: syz [ 1156.499454][T11919] usb 8-1: SerialNumber: syz [ 1156.564922][T11919] usb 8-1: config 0 descriptor?? [ 1156.597101][T14042] tipc: Disabling bearer [ 1156.979607][T11919] usb 8-1: f81604_write: reg: 105 data: 0 failed: -EPROTO [ 1156.979640][T11919] f81604 8-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 1156.979681][T11919] f81604 8-1:0.0: probe with driver f81604 failed with error -71 [ 1157.025256][T11919] usb 8-1: USB disconnect, device number 5 [ 1157.905552][T14083] input: syz1 as /devices/virtual/input/input22 [ 1158.295765][T14094] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1920'. [ 1158.432742][T14095] kvm: emulating exchange as write [ 1158.768006][T14109] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1159.141458][T14124] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1934'. [ 1159.483619][ T9269] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1159.645812][ T9269] usb 9-1: Using ep0 maxpacket: 16 [ 1159.649553][ T9269] usb 9-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1159.649593][ T9269] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1159.649631][ T9269] usb 9-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1159.649659][ T9269] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1159.737264][ T9269] usb 9-1: config 0 descriptor?? [ 1160.012219][T11919] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1160.108719][T14154] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1946'. [ 1160.167512][T14153] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1160.185388][T11919] usb 6-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1160.185421][T11919] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1160.185445][T11919] usb 6-1: Product: syz [ 1160.185461][T11919] usb 6-1: Manufacturer: syz [ 1160.185478][T11919] usb 6-1: SerialNumber: syz [ 1160.224318][T11919] usb 6-1: config 0 descriptor?? [ 1160.229494][ T9269] nzxt-smart2 0003:1E71:2009.0027: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.8-1/input0 [ 1160.432645][T11919] usb 6-1: f81604_read: reg: 105 failed: -EPIPE [ 1160.432677][T11919] f81604 6-1:0.0: Setting termination of CH#0 failed: -EPIPE [ 1160.432718][T11919] f81604 6-1:0.0: probe with driver f81604 failed with error -32 [ 1160.519981][T11919] usb 6-1: USB disconnect, device number 48 [ 1160.559486][ T5876] usb 9-1: USB disconnect, device number 2 [ 1161.300196][T14183] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1161.343834][T14188] netlink: 52 bytes leftover after parsing attributes in process `syz.8.1957'. [ 1161.453109][T10646] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1161.580288][T14200] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1962'. [ 1162.508737][T14229] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1975'. [ 1163.277746][T14261] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1989'. [ 1163.277794][T14261] nbd: must specify a device to reconfigure [ 1163.281005][T14264] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1991'. [ 1164.130188][T14286] netlink: 88 bytes leftover after parsing attributes in process `syz.8.2002'. [ 1164.130215][T14286] nbd: must specify a device to reconfigure [ 1164.744806][T14297] bridge0: port 2(bridge_slave_1) entered disabled state [ 1164.770388][T14297] bridge0: port 1(bridge_slave_0) entered disabled state [ 1165.492918][T14297] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1165.523608][T14297] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1166.534153][T14320] tipc: Enabled bearer , priority 0 [ 1166.633258][T14324] syzkaller0: entered promiscuous mode [ 1166.633288][T14324] syzkaller0: entered allmulticast mode [ 1166.637131][ T6116] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1166.656356][ T6894] bridge0: port 2(bridge_slave_1) entered disabled state [ 1166.698764][T14336] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 1166.812935][T14316] tipc: Resetting bearer [ 1167.094036][T14316] tipc: Disabling bearer [ 1167.263491][ T6116] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1167.285687][ T6116] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1167.285828][ T6116] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1167.911938][ T9269] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1168.074448][ T9269] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1168.074484][ T9269] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1168.074513][ T9269] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1168.074538][ T9269] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1168.077682][ T9269] usb 6-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 1168.077712][ T9269] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1168.077735][ T9269] usb 6-1: Product: syz [ 1168.077751][ T9269] usb 6-1: Manufacturer: syz [ 1168.077768][ T9269] usb 6-1: SerialNumber: syz [ 1168.121290][ T9269] usb 6-1: config 0 descriptor?? [ 1168.187222][ T9269] kvaser_usb 6-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0 [ 1168.187250][ T9269] kvaser_usb 6-1:0.0: error -EMSGSIZE: Failed to initialize card [ 1168.187655][ T9269] kvaser_usb 6-1:0.0: probe with driver kvaser_usb failed with error -90 [ 1168.393718][ T5876] usb 6-1: USB disconnect, device number 49 [ 1170.615299][T14454] nbd: must specify a size in bytes for the device [ 1170.852776][T11919] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1171.002420][T11919] usb 6-1: Using ep0 maxpacket: 32 [ 1171.005062][T11919] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1171.005100][T11919] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1171.005144][T11919] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1171.005171][T11919] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1171.039135][T11919] usb 6-1: config 0 descriptor?? [ 1171.119196][T14475] netlink: 'syz.3.2083': attribute type 1 has an invalid length. [ 1171.119221][T14475] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2083'. [ 1171.119487][T14475] block nbd0: not configured, cannot reconfigure [ 1171.503491][T14484] nbd: must specify a size in bytes for the device [ 1171.532878][T11919] savu 0003:1E7D:2D5A.0028: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 1171.762613][T11919] usb 6-1: USB disconnect, device number 50 [ 1173.132670][ T9269] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1173.309348][ T9269] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 1173.309419][ T9269] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1173.310707][ T9269] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1173.310735][ T9269] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1173.310761][ T9269] usb 9-1: Manufacturer: syz [ 1173.350803][ T9269] usb 9-1: config 0 descriptor?? [ 1173.502789][ T9269] rc_core: IR keymap rc-hauppauge not found [ 1173.502820][ T9269] Registered IR keymap rc-empty [ 1173.508062][ T9269] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 1173.516428][ T9269] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input24 [ 1173.599206][ C0] igorplugusb 9-1:0.0: Error: urb status = -32 [ 1173.644551][ T9269] usb 9-1: USB disconnect, device number 3 [ 1174.502159][ T9269] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1174.661073][ T9269] usb 9-1: device descriptor read/64, error -71 [ 1174.891911][ T9269] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1175.052260][ T9269] usb 9-1: device descriptor read/64, error -71 [ 1175.179305][ T9269] usb usb9-port1: attempt power cycle [ 1175.512117][ T9269] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1175.553487][ T9269] usb 9-1: device descriptor read/8, error -71 [ 1175.802073][ T9269] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1175.856023][ T9269] usb 9-1: device descriptor read/8, error -71 [ 1175.965554][ T9269] usb usb9-port1: unable to enumerate USB device [ 1179.558108][ T5799] Bluetooth: hci0: command 0x0406 tx timeout [ 1182.580593][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1182.580697][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1182.581699][ T1319] aoe: packet could not be sent on nr10. consider increasing tx_queue_len [ 1184.656397][ T5802] Bluetooth: hci1: command 0x0406 tx timeout [ 1187.137157][ T5802] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1187.141339][ T5802] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1187.144292][ T5802] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1187.185802][ T5802] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1187.186620][ T5802] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1187.290863][T14515] tipc: Enabled bearer , priority 0 [ 1187.322179][T14524] tipc: Resetting bearer [ 1187.387730][T14514] tipc: Disabling bearer [ 1187.980701][ T5802] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1188.002571][ T5802] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1188.005117][ T5802] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1188.006465][ T5802] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1188.007469][ T5802] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1188.480377][ T5802] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1188.493623][ T5802] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1188.501129][ T5802] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1188.529864][ T5802] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1188.541241][ T5802] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1188.984704][ T7968] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1189.111926][ T7968] usb 6-1: device descriptor read/64, error -71 [ 1189.302702][ T5799] Bluetooth: hci4: command tx timeout [ 1189.361931][ T7968] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1189.491882][ T7968] usb 6-1: device descriptor read/64, error -71 [ 1189.605249][ T7968] usb usb6-port1: attempt power cycle [ 1189.712142][T14579] kvm: kvm [14578]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x1000011d8 [ 1189.715654][T14579] kvm: kvm [14578]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xe125 [ 1189.719658][T14579] kvm: kvm [14578]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xd128 [ 1189.719722][T14579] kvm: kvm [14578]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1189.760428][T14579] kvm: kvm [14578]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xea56 [ 1189.778252][T14579] kvm_intel: kvm [14578]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x28e7 [ 1189.941870][ T7968] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1189.962926][ T7968] usb 6-1: device descriptor read/8, error -71 [ 1190.175544][ T5799] Bluetooth: hci6: command tx timeout [ 1190.202063][ T7968] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1190.229268][ T7968] usb 6-1: device descriptor read/8, error -71 [ 1190.285882][ T6011] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1190.285936][ T6011] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1190.343039][ T7968] usb usb6-port1: unable to enumerate USB device [ 1190.572253][ T5799] Bluetooth: hci7: command tx timeout [ 1190.642047][ T6011] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1190.642093][ T6011] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1191.044599][ T6011] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1191.044630][ T6011] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1191.135463][T14545] chnl_net:caif_netlink_parms(): no params data found [ 1191.349012][ T6011] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1191.349043][ T6011] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1191.372016][ T5799] Bluetooth: hci4: command tx timeout [ 1191.551437][T14557] chnl_net:caif_netlink_parms(): no params data found [ 1192.151916][ T7968] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1192.160367][T14545] bridge0: port 1(bridge_slave_0) entered blocking state [ 1192.160591][T14545] bridge0: port 1(bridge_slave_0) entered disabled state [ 1192.160758][T14545] bridge_slave_0: entered allmulticast mode [ 1192.166004][T14545] bridge_slave_0: entered promiscuous mode [ 1192.209673][T14545] bridge0: port 2(bridge_slave_1) entered blocking state [ 1192.211993][T14545] bridge0: port 2(bridge_slave_1) entered disabled state [ 1192.212854][T14545] bridge_slave_1: entered allmulticast mode [ 1192.242208][T14545] bridge_slave_1: entered promiscuous mode [ 1192.251976][ T5799] Bluetooth: hci6: command tx timeout [ 1192.312059][ T7968] usb 6-1: Using ep0 maxpacket: 32 [ 1192.314151][ T7968] usb 6-1: config 0 has an invalid interface number: 90 but max is 0 [ 1192.314179][ T7968] usb 6-1: config 0 has no interface number 0 [ 1192.321448][ T7968] usb 6-1: New USB device found, idVendor=04cb, idProduct=0100, bcdDevice= 7.8a [ 1192.321480][ T7968] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1192.321503][ T7968] usb 6-1: Product: syz [ 1192.321520][ T7968] usb 6-1: Manufacturer: syz [ 1192.321537][ T7968] usb 6-1: SerialNumber: syz [ 1192.391076][ T7968] usb 6-1: config 0 descriptor?? [ 1192.417541][ T7968] usb-storage 6-1:0.90: USB Mass Storage device detected [ 1192.434731][ T7968] usb-storage 6-1:0.90: Quirks match for vid 04cb pid 0100: 9 [ 1192.557808][T14565] chnl_net:caif_netlink_parms(): no params data found [ 1192.651958][ T5799] Bluetooth: hci7: command tx timeout [ 1192.795479][T14630] bridge0: port 3(gretap0) entered blocking state [ 1192.796561][T14630] bridge0: port 3(gretap0) entered disabled state [ 1192.825410][T14630] gretap0: entered allmulticast mode [ 1192.831281][T14630] gretap0: entered promiscuous mode [ 1192.961210][T14633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1192.964228][T14633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1192.999040][T14545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1193.027880][T14557] bridge0: port 1(bridge_slave_0) entered blocking state [ 1193.028048][T14557] bridge0: port 1(bridge_slave_0) entered disabled state [ 1193.029608][T14557] bridge_slave_0: entered allmulticast mode [ 1193.040165][T14557] bridge_slave_0: entered promiscuous mode [ 1193.067421][T14545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1193.251933][ T7968] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1193.297652][T14557] bridge0: port 2(bridge_slave_1) entered blocking state [ 1193.297810][T14557] bridge0: port 2(bridge_slave_1) entered disabled state [ 1193.297984][T14557] bridge_slave_1: entered allmulticast mode [ 1193.300734][T14557] bridge_slave_1: entered promiscuous mode [ 1193.382123][ T7968] usb 9-1: device descriptor read/64, error -71 [ 1193.457409][ T5799] Bluetooth: hci4: command tx timeout [ 1193.459003][T10915] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1193.491204][ T6011] bridge_slave_1: left allmulticast mode [ 1193.491227][ T6011] bridge_slave_1: left promiscuous mode [ 1193.491426][ T6011] bridge0: port 2(bridge_slave_1) entered disabled state [ 1193.544251][ T6011] bridge_slave_0: left allmulticast mode [ 1193.544277][ T6011] bridge_slave_0: left promiscuous mode [ 1193.544536][ T6011] bridge0: port 1(bridge_slave_0) entered disabled state [ 1193.625597][ T7968] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1193.752003][ T7968] usb 9-1: device descriptor read/64, error -71 [ 1193.864770][ T7968] usb usb9-port1: attempt power cycle [ 1194.231986][ T7968] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1194.268004][ T7968] usb 9-1: device descriptor read/8, error -71 [ 1194.333344][ T5799] Bluetooth: hci6: command tx timeout [ 1194.540047][ T7968] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1194.552683][ T7968] usb 9-1: device descriptor read/8, error -71 [ 1194.662266][ T7968] usb usb9-port1: unable to enumerate USB device [ 1194.742149][ T5799] Bluetooth: hci7: command tx timeout [ 1194.863367][ T6011] bond0 (unregistering): (slave vxlan0): Releasing backup interface [ 1194.885644][ T6005] usb 6-1: USB disconnect, device number 55 [ 1195.055458][T14641] input: syz1 as /devices/virtual/input/input25 [ 1195.489972][T14646] faux_driver vgem: [drm] Unknown color mode 727; guessing buffer size. [ 1195.560734][ T5799] Bluetooth: hci4: command tx timeout [ 1196.112669][ T5876] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1196.174214][ T6011] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1196.259327][ T6011] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1196.275885][ T6011] bond0 (unregistering): Released all slaves [ 1196.293289][ T5876] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1196.293324][ T5876] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1196.297473][ T5876] usb 6-1: config 0 descriptor?? [ 1196.326869][ T5876] cp210x 6-1:0.0: cp210x converter detected [ 1196.331385][T14545] team0: Port device team_slave_0 added [ 1196.392116][T11919] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1196.412262][ T5799] Bluetooth: hci6: command tx timeout [ 1196.549833][T14545] team0: Port device team_slave_1 added [ 1196.551941][T11919] usb 9-1: Using ep0 maxpacket: 32 [ 1196.556544][T11919] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1196.556605][T11919] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1196.556671][T11919] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1196.556736][T11919] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1196.569061][T11919] usb 9-1: config 0 descriptor?? [ 1196.639585][T14557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1196.770040][ T5876] cp210x 6-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 1196.798191][ T5876] usb 6-1: cp210x converter now attached to ttyUSB0 [ 1196.812048][ T5799] Bluetooth: hci7: command tx timeout [ 1196.843519][T14557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1196.974682][ T5876] usb 6-1: USB disconnect, device number 56 [ 1196.989416][ T5876] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1197.038563][T11919] usbhid 9-1:0.0: can't add hid device: -71 [ 1197.038697][T11919] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1197.045995][T11919] usb 9-1: USB disconnect, device number 12 [ 1197.112807][ T5876] cp210x 6-1:0.0: device disconnected [ 1197.563885][T14565] bridge0: port 1(bridge_slave_0) entered blocking state [ 1197.564381][T14565] bridge0: port 1(bridge_slave_0) entered disabled state [ 1197.564658][T14565] bridge_slave_0: entered allmulticast mode [ 1197.567210][T14565] bridge_slave_0: entered promiscuous mode [ 1197.713924][T14545] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1197.713947][T14545] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1197.713978][T14545] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1197.715585][T14565] bridge0: port 2(bridge_slave_1) entered blocking state [ 1197.715691][T14565] bridge0: port 2(bridge_slave_1) entered disabled state [ 1197.715861][T14565] bridge_slave_1: entered allmulticast mode [ 1197.717905][T14565] bridge_slave_1: entered promiscuous mode [ 1198.074386][T14557] team0: Port device team_slave_0 added [ 1198.076134][T14545] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1198.076151][T14545] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1198.076183][T14545] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1198.187605][T14557] team0: Port device team_slave_1 added [ 1198.748739][T14565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1198.786483][T14557] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1198.786513][T14557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1198.786544][T14557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1199.157245][T14565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1199.158971][T14557] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1199.158988][T14557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1199.159019][T14557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1199.592015][ T6011] hsr_slave_0: left promiscuous mode [ 1199.611875][T11919] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1199.612230][ T6011] hsr_slave_1: left promiscuous mode [ 1199.613818][ T6011] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1199.613838][ T6011] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1199.663235][ T6011] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1199.663259][ T6011] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1199.740988][ T6011] veth1_macvtap: left promiscuous mode [ 1199.741064][ T6011] veth0_macvtap: left promiscuous mode [ 1199.741234][ T6011] veth1_vlan: left promiscuous mode [ 1199.741350][ T6011] veth0_vlan: left promiscuous mode [ 1199.775378][T11919] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 1199.775450][T11919] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1199.776866][T11919] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1199.776895][T11919] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1199.776920][T11919] usb 9-1: Manufacturer: syz [ 1199.781336][T11919] usb 9-1: config 0 descriptor?? [ 1199.903102][T11919] rc_core: IR keymap rc-hauppauge not found [ 1199.903127][T11919] Registered IR keymap rc-empty [ 1199.905731][T11919] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 1199.910679][T11919] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input26 [ 1200.104255][T11919] usb 9-1: USB disconnect, device number 13 [ 1202.622931][ T6011] team0 (unregistering): Port device team_slave_1 removed [ 1202.896946][ T6011] team0 (unregistering): Port device team_slave_0 removed [ 1205.778451][T14545] hsr_slave_0: entered promiscuous mode [ 1205.779500][T14545] hsr_slave_1: entered promiscuous mode [ 1205.780227][T14545] debugfs: 'hsr0' already exists in 'hsr' [ 1205.780246][T14545] Cannot create hsr debugfs directory [ 1205.809442][T14693] tipc: Enabled bearer , priority 0 [ 1205.809885][T14694] syzkaller0: entered promiscuous mode [ 1205.809928][T14694] syzkaller0: entered allmulticast mode [ 1205.830051][T14698] tipc: Resetting bearer [ 1205.972126][T14692] tipc: Resetting bearer [ 1206.144156][T14692] tipc: Disabling bearer [ 1206.339593][T14565] team0: Port device team_slave_0 added [ 1206.564735][T14565] team0: Port device team_slave_1 added [ 1207.038047][T14557] hsr_slave_0: entered promiscuous mode [ 1207.039190][T14557] hsr_slave_1: entered promiscuous mode [ 1207.039969][T14557] debugfs: 'hsr0' already exists in 'hsr' [ 1207.039995][T14557] Cannot create hsr debugfs directory [ 1207.315550][T14565] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1207.315571][T14565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1207.315602][T14565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1207.376059][T14565] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1207.376078][T14565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1207.376117][T14565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1207.382125][ T6005] usb 9-1: new full-speed USB device number 14 using dummy_hcd [ 1207.535627][ T6005] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1207.536270][ T6005] usb 9-1: not running at top speed; connect to a high speed hub [ 1207.537637][ T6005] usb 9-1: config 136 has an invalid interface number: 30 but max is 0 [ 1207.537665][ T6005] usb 9-1: config 136 has an invalid descriptor of length 0, skipping remainder of the config [ 1207.537693][ T6005] usb 9-1: config 136 has no interface number 0 [ 1207.537807][ T6005] usb 9-1: config 136 interface 30 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1207.540317][ T6005] usb 9-1: New USB device found, idVendor=0499, idProduct=f00e, bcdDevice=f0.f3 [ 1207.540348][ T6005] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1207.540376][ T6005] usb 9-1: Product: syz [ 1207.540387][ T6005] usb 9-1: Manufacturer: syz [ 1207.540398][ T6005] usb 9-1: SerialNumber: syz [ 1207.898635][ T6005] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1207.900681][ T6005] usb 9-1: invalid MIDI in EP 0 [ 1208.120638][ T6005] snd-usb-audio 9-1:136.30: probe with driver snd-usb-audio failed with error -22 [ 1208.138418][ T6005] usb 9-1: USB disconnect, device number 14 [ 1208.223677][T14737] udevd[14737]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:136.30/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1208.269752][T14565] hsr_slave_0: entered promiscuous mode [ 1208.270775][T14565] hsr_slave_1: entered promiscuous mode [ 1208.271508][T14565] debugfs: 'hsr0' already exists in 'hsr' [ 1208.271528][T14565] Cannot create hsr debugfs directory [ 1208.955185][ T6011] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1209.268632][ T6011] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1209.676392][ T6011] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1210.096814][ T6011] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1210.229333][T14545] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1210.307925][T14545] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1210.692479][T14545] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1210.733470][T14545] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1211.264648][ T6011] bridge_slave_1: left allmulticast mode [ 1211.264679][ T6011] bridge_slave_1: left promiscuous mode [ 1211.264973][ T6011] bridge0: port 2(bridge_slave_1) entered disabled state [ 1211.354638][ T6011] bridge_slave_0: left allmulticast mode [ 1211.354662][ T6011] bridge_slave_0: left promiscuous mode [ 1211.354853][ T6011] bridge0: port 1(bridge_slave_0) entered disabled state [ 1211.861938][ T7968] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1212.001894][ T7968] usb 9-1: device descriptor read/64, error -71 [ 1212.172563][ T6011] erspan0 (unregistering): left promiscuous mode [ 1212.278537][ T7968] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1212.421933][ T7968] usb 9-1: device descriptor read/64, error -71 [ 1212.535967][ T7968] usb usb9-port1: attempt power cycle [ 1212.583327][ T6011] bond0 (unregistering): (slave vxlan0): Releasing backup interface [ 1212.606019][ T6011] vxlan0 (unregistering): left promiscuous mode [ 1212.872035][ T7968] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1212.897617][ T7968] usb 9-1: device descriptor read/8, error -71 [ 1213.132083][ T7968] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1213.152738][ T7968] usb 9-1: device descriptor read/8, error -71 [ 1213.263771][ T7968] usb usb9-port1: unable to enumerate USB device [ 1213.962000][ T6011] bond0 (unregistering): left promiscuous mode [ 1213.962027][ T6011] bond_slave_0: left promiscuous mode [ 1213.962230][ T6011] bond_slave_1: left promiscuous mode [ 1214.117090][ T6011] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1214.172559][ T6011] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1214.213122][ T6011] bond0 (unregistering): Released all slaves [ 1215.274306][ T6011] bond1 (unregistering): Released all slaves [ 1215.761984][ T9269] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 1215.989169][ T9269] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1215.989203][ T9269] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1215.989231][ T9269] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1215.989256][ T9269] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1215.992833][ T9269] usb 9-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 1215.992917][ T9269] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1215.992979][ T9269] usb 9-1: Product: syz [ 1215.993024][ T9269] usb 9-1: Manufacturer: syz [ 1215.993067][ T9269] usb 9-1: SerialNumber: syz [ 1216.090018][ T9269] usb 9-1: config 0 descriptor?? [ 1216.099184][ T9269] kvaser_usb 9-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0 [ 1216.099209][ T9269] kvaser_usb 9-1:0.0: error -EMSGSIZE: Failed to initialize card [ 1216.099302][ T9269] kvaser_usb 9-1:0.0: probe with driver kvaser_usb failed with error -90 [ 1216.393818][ T7968] usb 9-1: USB disconnect, device number 19 [ 1216.417545][ T6011] bond2 (unregistering): Released all slaves [ 1217.572668][ T6011] bond3 (unregistering): (slave dummy0): Releasing active interface [ 1217.572703][ T6011] dummy0: left promiscuous mode [ 1217.572870][ T6011] dummy0: left allmulticast mode [ 1217.628529][ T6011] bond3 (unregistering): Released all slaves [ 1217.647160][ T6011] bond4 (unregistering): Released all slaves [ 1217.666067][ T6011] bond5 (unregistering): Released all slaves [ 1217.685428][ T6011] bond6 (unregistering): Released all slaves [ 1218.234440][ T6011] tipc: Left network mode [ 1220.037877][T14545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1220.551900][ T5876] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 1220.726670][ T5876] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1220.726712][ T5876] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1220.731161][ T5876] usb 9-1: config 0 descriptor?? [ 1220.776180][ T5876] cp210x 9-1:0.0: cp210x converter detected [ 1220.960551][ T5876] cp210x 9-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 1220.960573][ T5876] cp210x 9-1:0.0: querying part number failed [ 1220.981453][ T5876] usb 9-1: cp210x converter now attached to ttyUSB0 [ 1221.149875][T14545] 8021q: adding VLAN 0 to HW filter on device team0 [ 1221.177343][T10915] bridge0: port 1(bridge_slave_0) entered blocking state [ 1221.177565][T10915] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1221.239829][ T1005] bridge0: port 2(bridge_slave_1) entered blocking state [ 1221.240989][ T1005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1221.487331][ T6011] hsr_slave_0: left promiscuous mode [ 1221.502087][ T6011] hsr_slave_1: left promiscuous mode [ 1221.545888][ T6011] team0: left promiscuous mode [ 1221.545913][ T6011] team_slave_0: left promiscuous mode [ 1221.546157][ T6011] team_slave_1: left promiscuous mode [ 1223.293802][ T6005] usb 9-1: USB disconnect, device number 20 [ 1223.313110][ T6005] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1223.313914][ T6005] cp210x 9-1:0.0: device disconnected [ 1223.591908][ T9261] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1223.753665][ T9261] usb 6-1: config 0 has an invalid interface number: 69 but max is 0 [ 1223.753699][ T9261] usb 6-1: config 0 has no interface number 0 [ 1223.753742][ T9261] usb 6-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1223.753761][ T9261] usb 6-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1223.756429][ T9261] usb 6-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1223.756466][ T9261] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1223.756481][ T9261] usb 6-1: Product: syz [ 1223.756492][ T9261] usb 6-1: Manufacturer: syz [ 1223.756503][ T9261] usb 6-1: SerialNumber: syz [ 1223.760484][ T9261] usb 6-1: config 0 descriptor?? [ 1223.834352][T14898] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1223.840628][ T9261] cyberjack 6-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1223.898350][ T6005] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1223.902992][ T9261] usb 6-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1224.072398][ C1] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 1224.105545][ T6005] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1224.105574][ T6005] usb 9-1: config 0 has no interfaces? [ 1224.109481][ T6005] usb 9-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1224.109511][ T6005] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1224.109581][ T6005] usb 9-1: Product: syz [ 1224.109597][ T6005] usb 9-1: Manufacturer: syz [ 1224.109610][ T6005] usb 9-1: SerialNumber: syz [ 1224.184635][ T6005] usb 9-1: config 0 descriptor?? [ 1224.322826][ T6005] usb 6-1: USB disconnect, device number 57 [ 1224.330083][ T6005] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1224.330988][ T6005] cyberjack 6-1:0.69: device disconnected [ 1224.757489][ T6011] team0 (unregistering): Port device team_slave_1 removed [ 1225.062561][ T6011] team0 (unregistering): Port device team_slave_0 removed [ 1226.546606][ T7968] usb 9-1: USB disconnect, device number 21 [ 1227.995954][T14917] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1228.359151][T14557] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1228.454610][T14557] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1228.491926][ T9261] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 1228.500749][T14557] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1228.648296][ T9261] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1228.648331][ T9261] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1228.678927][ T9261] usb 9-1: config 0 descriptor?? [ 1228.732858][ T9261] cp210x 9-1:0.0: cp210x converter detected [ 1228.885562][ T9261] cp210x 9-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 1228.885593][ T9261] cp210x 9-1:0.0: querying part number failed [ 1228.916337][ T9261] usb 9-1: cp210x converter now attached to ttyUSB0 [ 1228.942343][T14557] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1229.440338][T14565] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1229.494607][T14565] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1229.529008][T14545] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1229.546941][T14565] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1229.574924][ T6011] IPVS: stop unused estimator thread 0... [ 1229.615158][T14565] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1229.924532][T14557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1230.027966][T14557] 8021q: adding VLAN 0 to HW filter on device team0 [ 1230.058254][ T6894] bridge0: port 1(bridge_slave_0) entered blocking state [ 1230.058489][ T6894] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1230.098385][ T6894] bridge0: port 2(bridge_slave_1) entered blocking state [ 1230.099359][ T6894] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1230.151101][T14565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1230.272000][T14565] 8021q: adding VLAN 0 to HW filter on device team0 [ 1230.313064][T12399] bridge0: port 1(bridge_slave_0) entered blocking state [ 1230.313291][T12399] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1230.423116][ T5956] bridge0: port 2(bridge_slave_1) entered blocking state [ 1230.423340][ T5956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1230.608102][T14545] veth0_vlan: entered promiscuous mode [ 1230.719970][T14545] veth1_vlan: entered promiscuous mode [ 1230.867501][T14545] veth0_macvtap: entered promiscuous mode [ 1230.907054][T14545] veth1_macvtap: entered promiscuous mode [ 1231.065472][T14545] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1231.153639][T14545] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1231.235353][ T1209] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1231.268857][T14557] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1231.279871][ T1209] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1231.291440][ T1209] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1231.305796][ T5876] usb 9-1: USB disconnect, device number 22 [ 1231.323573][ T5876] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1231.324391][ T5876] cp210x 9-1:0.0: device disconnected [ 1231.325003][ T1209] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1232.033287][T14557] veth0_vlan: entered promiscuous mode [ 1232.172605][ T6011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1232.172630][ T6011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1232.178599][T14557] veth1_vlan: entered promiscuous mode [ 1232.238679][T14565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1232.344251][ C1] [drm:vkms_crtc_handle_vblank_timeout] *ERROR* vkms failure on handling vblank [ 1232.381887][ T9261] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1232.455578][T12399] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1232.455603][T12399] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1232.517171][ T9261] usb 6-1: device descriptor read/64, error -71 [ 1232.601671][T14557] veth0_macvtap: entered promiscuous mode [ 1232.694674][T14557] veth1_macvtap: entered promiscuous mode [ 1232.753820][ T9261] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1232.823518][T14565] veth0_vlan: entered promiscuous mode [ 1232.883533][ T9261] usb 6-1: device descriptor read/64, error -71 [ 1232.917966][T14565] veth1_vlan: entered promiscuous mode [ 1232.946762][T14557] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1233.004764][ T9261] usb usb6-port1: attempt power cycle [ 1233.061690][T14557] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1233.150395][ T7324] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1233.195796][ T7324] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1233.277884][ T7324] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1233.278248][ T7324] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1233.354668][ T9261] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1233.375754][ T9261] usb 6-1: device descriptor read/8, error -71 [ 1233.591555][T14565] veth0_macvtap: entered promiscuous mode [ 1233.620166][ T9261] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1233.632622][ T9261] usb 6-1: device descriptor read/8, error -71 [ 1233.734304][T14565] veth1_macvtap: entered promiscuous mode [ 1233.743210][ T9261] usb usb6-port1: unable to enumerate USB device [ 1233.994857][T14565] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1234.118180][ T1209] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1234.118204][ T1209] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1234.119964][T14565] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1234.204881][ T5956] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1234.204936][ T5956] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1234.204977][ T5956] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1234.205015][ T5956] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1234.466535][T10915] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1234.466559][T10915] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1234.839322][ T1005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1234.839348][ T1005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1235.130250][T12399] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1235.130276][T12399] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1236.522271][ T9261] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1236.614884][ T9269] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 1236.681899][ T9261] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1236.681930][ T9261] usb 6-1: config 0 has no interface number 0 [ 1236.690286][ T9261] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1236.690320][ T9261] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1236.690342][ T9261] usb 6-1: Product: syz [ 1236.690358][ T9261] usb 6-1: Manufacturer: syz [ 1236.690374][ T9261] usb 6-1: SerialNumber: syz [ 1236.741928][ T9269] usb 9-1: device descriptor read/64, error -71 [ 1236.745010][ T9261] usb 6-1: config 0 descriptor?? [ 1236.963049][ T9261] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1237.002012][ T9269] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 1237.005015][ T9261] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1237.005477][ T9261] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1237.005542][ T9261] usb 6-1: media controller created [ 1237.090133][ T9261] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1237.132227][ T9269] usb 9-1: device descriptor read/64, error -71 [ 1237.277850][ T9269] usb usb9-port1: attempt power cycle [ 1237.631846][T15070] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 1237.634094][ T9269] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 1237.659430][ T9269] usb 9-1: device descriptor read/8, error -71 [ 1237.829411][T15070] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1237.829478][T15070] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1237.829570][T15070] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1237.896375][T15070] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1237.896419][T15070] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1237.896444][T15070] usb 3-1: Manufacturer: syz [ 1237.932124][ T9269] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 1237.952872][ T9269] usb 9-1: device descriptor read/8, error -71 [ 1238.054724][T15070] usb 3-1: config 0 descriptor?? [ 1238.068095][ T9269] usb usb9-port1: unable to enumerate USB device [ 1238.307566][ T9261] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 1238.691278][ T9261] usb 6-1: USB disconnect, device number 62 [ 1238.715080][ T7324] bridge0: port 2(bridge_slave_1) entered disabled state [ 1238.788181][T14732] udevd[14732]: setting owner of /dev/bus/usb/006/062 to uid=0, gid=0 failed: No such file or directory [ 1238.793316][T15070] usb 3-1: USB disconnect, device number 14 [ 1240.493808][ T9269] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1240.646595][ T9269] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 1240.646628][ T9269] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1240.647899][ T9269] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1240.682133][ T9269] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1240.682184][ T9269] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1240.682207][ T9269] usb 1-1: Manufacturer: syz [ 1240.734441][ T9269] usb 1-1: config 0 descriptor?? [ 1240.739521][ T9269] igorplugusb 1-1:0.0: incorrect number of endpoints [ 1241.932563][T15070] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1242.061977][T15070] usb 3-1: device descriptor read/64, error -71 [ 1242.316639][T15070] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1242.451971][T15070] usb 3-1: device descriptor read/64, error -71 [ 1242.564502][T15070] usb usb3-port1: attempt power cycle [ 1242.901834][T15070] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1242.922739][T15070] usb 3-1: device descriptor read/8, error -71 [ 1243.162038][T15070] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1243.182733][T15070] usb 3-1: device descriptor read/8, error -71 [ 1243.302801][T15070] usb usb3-port1: unable to enumerate USB device [ 1243.305024][T11919] usb 1-1: USB disconnect, device number 34 [ 1244.050955][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1244.051032][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1245.052443][ T5876] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1245.181921][ T5876] usb 6-1: device descriptor read/64, error -71 [ 1245.501899][ T5876] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1245.631883][ T49] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1245.632039][ T5876] usb 6-1: device descriptor read/64, error -71 [ 1245.742588][ T5876] usb usb6-port1: attempt power cycle [ 1245.786764][ T49] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 1245.786797][ T49] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1245.786860][ T49] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1245.789249][ T49] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1245.789277][ T49] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1245.789298][ T49] usb 3-1: Manufacturer: syz [ 1245.855551][ T49] usb 3-1: config 0 descriptor?? [ 1245.874349][ T49] igorplugusb 3-1:0.0: incorrect number of endpoints [ 1246.091849][ T5876] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 1246.112513][ T5876] usb 6-1: device descriptor read/8, error -71 [ 1246.353865][ T5876] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1246.377253][ T5876] usb 6-1: device descriptor read/8, error -71 [ 1246.482540][ T5876] usb usb6-port1: unable to enumerate USB device [ 1246.632018][ T7968] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1246.761956][ T7968] usb 10-1: device descriptor read/64, error -71 [ 1247.022353][ T7968] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1247.151984][ T7968] usb 10-1: device descriptor read/64, error -71 [ 1247.231823][T11919] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 1247.262740][ T7968] usb usb10-port1: attempt power cycle [ 1247.394149][T11919] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1247.394185][T11919] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1247.421099][T11919] usb 9-1: config 0 descriptor?? [ 1247.448134][T11919] cp210x 9-1:0.0: cp210x converter detected [ 1247.612126][ T7968] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1247.636195][ T7968] usb 10-1: device descriptor read/8, error -71 [ 1247.660396][T11919] cp210x 9-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 1247.660430][T11919] cp210x 9-1:0.0: querying part number failed [ 1247.692586][T11919] usb 9-1: cp210x converter now attached to ttyUSB0 [ 1247.881051][ T7968] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1247.895526][ T7968] usb 10-1: device descriptor read/8, error -71 [ 1248.031992][ T7968] usb usb10-port1: unable to enumerate USB device [ 1248.041123][ T5938] usb 3-1: USB disconnect, device number 19 [ 1249.286948][ T9269] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1249.451407][ T9269] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1249.451437][ T9269] usb 6-1: config 0 has no interface number 0 [ 1249.471096][ T9269] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1249.471130][ T9269] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1249.471154][ T9269] usb 6-1: Product: syz [ 1249.471171][ T9269] usb 6-1: Manufacturer: syz [ 1249.471188][ T9269] usb 6-1: SerialNumber: syz [ 1249.511879][ T5876] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1249.513141][ T9269] usb 6-1: config 0 descriptor?? [ 1249.664581][ T5876] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 1249.664609][ T5876] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1249.664625][ T5876] usb 1-1: config 0 has no interface number 0 [ 1249.664672][ T5876] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1249.664692][ T5876] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1249.670664][ T5876] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1249.670701][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1249.670726][ T5876] usb 1-1: Product: syz [ 1249.670743][ T5876] usb 1-1: Manufacturer: syz [ 1249.670760][ T5876] usb 1-1: SerialNumber: syz [ 1249.763633][ T5876] usb 1-1: config 0 descriptor?? [ 1249.852728][ T9269] dvb_usb_ec168 6-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 1249.891063][ T9269] usb 6-1: USB disconnect, device number 67 [ 1250.061858][ T49] usb 9-1: USB disconnect, device number 27 [ 1250.088518][ T49] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1250.102972][ T49] cp210x 9-1:0.0: device disconnected [ 1250.531828][ T49] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 1250.683789][ T49] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 1250.683852][ T49] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1250.685084][ T49] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1250.685113][ T49] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1250.685135][ T49] usb 9-1: Manufacturer: syz [ 1250.749863][ T49] usb 9-1: config 0 descriptor?? [ 1250.765571][ T49] igorplugusb 9-1:0.0: incorrect number of endpoints [ 1250.904895][T15586] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2351'. [ 1251.501910][ T49] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1251.631866][ T49] usb 6-1: device descriptor read/64, error -71 [ 1251.871871][ T49] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1252.012424][ T49] usb 6-1: device descriptor read/64, error -71 [ 1252.122525][ T49] usb usb6-port1: attempt power cycle [ 1252.300839][ T9269] usb 1-1: USB disconnect, device number 35 [ 1252.482078][ T49] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1252.504862][ T49] usb 6-1: device descriptor read/8, error -71 [ 1252.741819][ T49] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1252.762719][ T49] usb 6-1: device descriptor read/8, error -71 [ 1252.872786][ T49] usb usb6-port1: unable to enumerate USB device [ 1253.268189][ T49] usb 9-1: USB disconnect, device number 28 [ 1253.932300][ T5938] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1254.064871][ T5938] usb 1-1: device descriptor read/64, error -71 [ 1254.307572][ T5938] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1254.441887][ T5938] usb 1-1: device descriptor read/64, error -71 [ 1254.552454][ T5938] usb usb1-port1: attempt power cycle [ 1254.681948][ T9261] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 1254.849234][ T9261] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 1254.849300][ T9261] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1254.852291][ T9261] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1254.852368][ T9261] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1254.852426][ T9261] usb 9-1: Manufacturer: syz [ 1254.897969][ T5938] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1254.904644][ T9261] usb 9-1: config 0 descriptor?? [ 1254.920665][ T5938] usb 1-1: device descriptor read/8, error -71 [ 1254.948672][ T9261] igorplugusb 9-1:0.0: incorrect number of endpoints [ 1255.161860][ T5938] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1255.182813][ T5938] usb 1-1: device descriptor read/8, error -71 [ 1255.292863][ T5938] usb usb1-port1: unable to enumerate USB device [ 1255.472111][ T9261] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1255.632492][ T9261] usb 3-1: Using ep0 maxpacket: 32 [ 1255.636524][ T9261] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1255.636557][ T9261] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1255.669728][ T9261] usb 3-1: config 0 descriptor?? [ 1255.887011][ T9261] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1255.888739][ T9261] usb 3-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 1255.888775][ T9261] usb 3-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 1256.461852][T11919] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1256.612013][T11919] usb 10-1: device descriptor read/64, error -71 [ 1256.861816][T11919] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1256.992069][T11919] usb 10-1: device descriptor read/64, error -71 [ 1257.102901][T11919] usb usb10-port1: attempt power cycle [ 1257.474877][T11919] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1257.475851][ T5938] usb 9-1: USB disconnect, device number 29 [ 1257.492859][T11919] usb 10-1: device descriptor read/8, error -71 [ 1257.734499][T11919] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1257.752616][T11919] usb 10-1: device descriptor read/8, error -71 [ 1257.863496][T11919] usb usb10-port1: unable to enumerate USB device [ 1258.482254][ T5876] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1258.482719][ T7968] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1258.631855][ T7968] usb 1-1: Using ep0 maxpacket: 32 [ 1258.636323][ T7968] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1258.636353][ T7968] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1258.636393][ T7968] usb 1-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 1258.636420][ T7968] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1258.636587][ T5876] usb 6-1: Using ep0 maxpacket: 32 [ 1258.639054][ T5876] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1258.639086][ T5876] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1258.723934][ T7968] usb 1-1: config 0 descriptor?? [ 1258.725944][ T5876] usb 6-1: config 0 descriptor?? [ 1258.957456][ T5876] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1258.960702][ T6005] usb 1-1: USB disconnect, device number 40 [ 1259.088705][ T49] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 1259.212268][ T49] usb 9-1: device descriptor read/64, error -71 [ 1259.452118][ T49] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 1259.590304][ T49] usb 9-1: device descriptor read/64, error -71 [ 1259.692511][ T49] usb usb9-port1: attempt power cycle [ 1260.041880][ T49] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 1260.064676][ T49] usb 9-1: device descriptor read/8, error -71 [ 1260.097114][ T5956] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1260.312014][ T49] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 1260.357758][ T49] usb 9-1: device descriptor read/8, error -71 [ 1260.480416][ T49] usb usb9-port1: unable to enumerate USB device [ 1260.654294][ T5938] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1260.731191][T15994] loop8: detected capacity change from 0 to 8 [ 1260.745634][T15994] Dev loop8: unable to read RDB block 8 [ 1260.745682][T15994] loop8: unable to read partition table [ 1260.745914][T15994] loop8: partition table beyond EOD, truncated [ 1260.745934][T15994] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1260.855702][ T5938] usb 10-1: config index 0 descriptor too short (expected 23569, got 27) [ 1260.855766][ T5938] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1260.858305][ T5938] usb 10-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1260.858336][ T5938] usb 10-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1260.858367][ T5938] usb 10-1: Manufacturer: syz [ 1260.932055][ T5938] usb 10-1: config 0 descriptor?? [ 1260.938030][ T5938] igorplugusb 10-1:0.0: incorrect number of endpoints [ 1261.008231][ T5956] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1261.378940][ T5956] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1261.401976][ T5938] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1261.551872][ T5938] usb 1-1: Using ep0 maxpacket: 32 [ 1261.554911][ T5938] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1261.554943][ T5938] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1261.589601][ T5938] usb 1-1: config 0 descriptor?? [ 1261.867004][ T5938] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1261.957041][ T5956] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1262.554434][ T5956] bridge_slave_1: left allmulticast mode [ 1262.554469][ T5956] bridge_slave_1: left promiscuous mode [ 1262.554764][ T5956] bridge0: port 2(bridge_slave_1) entered disabled state [ 1262.728164][ T5956] bridge_slave_0: left allmulticast mode [ 1262.728196][ T5956] bridge_slave_0: left promiscuous mode [ 1262.728466][ T5956] bridge0: port 1(bridge_slave_0) entered disabled state [ 1263.415107][ T49] usb 10-1: USB disconnect, device number 10 [ 1264.131907][ T7968] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1264.282066][ T7968] usb 10-1: device descriptor read/64, error -71 [ 1264.590526][ T7968] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1264.729719][ T7968] usb 10-1: device descriptor read/64, error -71 [ 1264.837824][ T7968] usb usb10-port1: attempt power cycle [ 1265.232874][ T7968] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1265.252587][ T7968] usb 10-1: device descriptor read/8, error -71 [ 1265.491897][ T7968] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1265.538224][ T7968] usb 10-1: device descriptor read/8, error -71 [ 1265.649715][ T7968] usb usb10-port1: unable to enumerate USB device [ 1266.315970][ T5956] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1266.373348][ T5956] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1266.394874][ T5956] bond0 (unregistering): Released all slaves [ 1266.874102][ T5956] tipc: Left network mode [ 1267.191829][ T9269] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 1267.383065][ T9269] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 1267.383129][ T9269] usb 9-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1267.385225][ T9269] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1267.385258][ T9269] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1267.385281][ T9269] usb 9-1: Manufacturer: syz [ 1267.460606][ T9269] usb 9-1: config 0 descriptor?? [ 1267.485196][ T9269] igorplugusb 9-1:0.0: incorrect number of endpoints [ 1268.770101][T16312] can0: slcan on ttyS3. [ 1269.244758][T16310] can0 (unregistered): slcan off ttyS3. [ 1269.491848][ T5956] hsr_slave_0: left promiscuous mode [ 1269.512241][ T5956] hsr_slave_1: left promiscuous mode [ 1269.513299][ T5956] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1269.513327][ T5956] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1269.562696][ T5956] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1269.562719][ T5956] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1269.593889][T16366] Failed to get privilege flags for destination (handle=0x0:0x0) [ 1269.791164][ T5956] veth1_macvtap: left promiscuous mode [ 1269.791273][ T5956] veth0_macvtap: left promiscuous mode [ 1269.791532][ T5956] veth1_vlan: left promiscuous mode [ 1269.799764][ T5956] veth0_vlan: left promiscuous mode [ 1269.983405][ T6005] usb 9-1: USB disconnect, device number 34 [ 1272.644023][T16440] kvm: kvm [16439]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xc95a [ 1272.647419][T16440] kvm: kvm [16439]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x1016 [ 1272.700280][T16440] kvm: kvm [16439]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x10000c8ad [ 1272.700349][T16440] kvm: kvm [16439]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1272.728398][T16440] kvm: kvm [16439]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xe1c6 [ 1272.744706][T16440] kvm: kvm [16439]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xaa74 [ 1272.744799][T16440] kvm: kvm [16439]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1272.747265][T16440] kvm: kvm [16439]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x85b [ 1272.747328][T16440] kvm: kvm [16439]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1272.770152][T16440] kvm_intel: kvm [16439]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x3187 [ 1272.773439][T16440] kvm: kvm [16439]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x3187 [ 1272.777132][T16440] kvm_intel: kvm [16439]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x5149 [ 1273.374296][ T5956] team0 (unregistering): Port device team_slave_1 removed [ 1273.694211][ T5956] team0 (unregistering): Port device team_slave_0 removed [ 1276.694558][T16352] syzkaller0: entered promiscuous mode [ 1276.694582][T16352] syzkaller0: entered allmulticast mode [ 1276.797549][T16364] tipc: Started in network mode [ 1276.797592][T16364] tipc: Node identity f228b6ca9378, cluster identity 4711 [ 1276.798299][T16364] tipc: Enabled bearer , priority 0 [ 1276.820860][T16345] tipc: Resetting bearer [ 1276.985098][T16345] tipc: Disabling bearer [ 1277.667047][T16473] can0: slcan on ttyS3. [ 1277.888043][T16472] can0 (unregistered): slcan off ttyS3. [ 1277.925829][ T7968] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1278.071782][ T7968] usb 10-1: Using ep0 maxpacket: 16 [ 1278.075461][ T7968] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1278.075492][ T7968] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1278.075534][ T7968] usb 10-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1278.075561][ T7968] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1278.081302][ T7968] usb 10-1: config 0 descriptor?? [ 1278.480870][T16519] kvm_pr_unimpl_wrmsr: 5 callbacks suppressed [ 1278.480893][T16519] kvm: kvm [16518]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xc95a [ 1278.525525][T16519] kvm: kvm [16518]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x1016 [ 1278.553000][T16519] kvm: kvm [16518]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x10000c8ad [ 1278.553093][T16519] kvm: kvm [16518]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1278.595953][T16519] kvm: kvm [16518]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xe1c6 [ 1278.614194][T16519] kvm: kvm [16518]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xaa74 [ 1278.614393][T16519] kvm: kvm [16518]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1278.621557][T16519] kvm: kvm [16518]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x85b [ 1278.622464][T16519] kvm: kvm [16518]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1278.737668][T16519] kvm_intel: kvm [16518]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x3187 [ 1278.738849][T16519] kvm: kvm [16518]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x3187 [ 1278.740487][T16519] kvm_intel: kvm [16518]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x5149 [ 1279.003016][T16545] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2477'. [ 1279.521894][T15070] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 1279.703045][T15070] usb 9-1: Using ep0 maxpacket: 32 [ 1279.711620][T15070] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1279.729360][T15070] usb 9-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 1279.729397][T15070] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1279.751538][T15070] usb 9-1: config 0 descriptor?? [ 1279.778501][T15070] dvb-usb: found a 'TeVii S662' in warm state. [ 1279.778560][T15070] dw2102: su3000_power_ctrl: 1, initialized 0 [ 1279.779161][T15070] dvb-usb: bulk message failed: -22 (2/0) [ 1279.810197][T15070] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1279.832523][T15070] dvbdev: DVB: registering new adapter (TeVii S662) [ 1279.832586][T15070] usb 9-1: media controller created [ 1279.833027][T15070] dvb-usb: bulk message failed: -22 (6/0) [ 1279.833046][T15070] dw2102: i2c transfer failed. [ 1279.833068][T15070] dvb-usb: bulk message failed: -22 (6/0) [ 1279.833085][T15070] dw2102: i2c transfer failed. [ 1279.833102][T15070] dvb-usb: bulk message failed: -22 (6/0) [ 1279.833118][T15070] dw2102: i2c transfer failed. [ 1279.833136][T15070] dvb-usb: bulk message failed: -22 (6/0) [ 1279.833153][T15070] dw2102: i2c transfer failed. [ 1279.833169][T15070] dvb-usb: bulk message failed: -22 (6/0) [ 1279.833186][T15070] dw2102: i2c transfer failed. [ 1279.833204][T15070] dvb-usb: bulk message failed: -22 (6/0) [ 1279.833221][T15070] dw2102: i2c transfer failed. [ 1279.833232][T15070] dvb-usb: MAC address: 02:02:02:02:02:02 [ 1279.939995][T15070] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1280.030898][T15070] dvb-usb: bulk message failed: -22 (3/0) [ 1280.030930][T15070] dw2102: command 0x0e transfer failed. [ 1280.030942][T15070] dvb-usb: bulk message failed: -22 (3/0) [ 1280.030957][T15070] dw2102: command 0x0e transfer failed. [ 1280.334490][T15070] dvb-usb: bulk message failed: -22 (3/0) [ 1280.334517][T15070] dw2102: command 0x0e transfer failed. [ 1280.334528][T15070] dvb-usb: bulk message failed: -22 (3/0) [ 1280.334546][T15070] dw2102: command 0x0e transfer failed. [ 1280.334557][T15070] dvb-usb: bulk message failed: -22 (1/0) [ 1280.334574][T15070] dw2102: command 0x51 transfer failed. [ 1280.334585][T15070] dvb-usb: bulk message failed: -22 (5/0) [ 1280.334601][T15070] dw2102: i2c probe for address 0x68 failed. [ 1280.334614][T15070] dvb-usb: bulk message failed: -22 (5/0) [ 1280.334630][T15070] dw2102: i2c probe for address 0x69 failed. [ 1280.334644][T15070] dvb-usb: bulk message failed: -22 (5/0) [ 1280.334660][T15070] dw2102: i2c probe for address 0x6a failed. [ 1280.334673][T15070] dw2102: probing for demodulator failed. Is the external power switched on? [ 1280.334686][T15070] dvb-usb: no frontend was attached by 'TeVii S662' [ 1280.706804][ T7968] usb 10-1: USB disconnect, device number 15 [ 1280.720341][T15070] rc_core: IR keymap rc-tt-1500 not found [ 1280.720363][T15070] Registered IR keymap rc-empty [ 1280.757996][T15070] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.8/usb9/9-1/rc/rc0 [ 1280.796108][T15070] input: TeVii S662 as /devices/platform/dummy_hcd.8/usb9/9-1/rc/rc0/input28 [ 1280.832261][T15070] dvb-usb: schedule remote query interval to 250 msecs. [ 1280.832287][T15070] dw2102: su3000_power_ctrl: 0, initialized 1 [ 1280.832303][T15070] dvb-usb: TeVii S662 successfully initialized and connected. [ 1280.835960][T15070] usb 9-1: USB disconnect, device number 35 [ 1281.160036][T15070] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 1281.275842][ T804] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1281.294232][T16642] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2488'. [ 1281.344941][T16657] loop5: detected capacity change from 0 to 7 [ 1281.376395][T14713] Dev loop5: unable to read RDB block 7 [ 1281.376445][T14713] loop5: unable to read partition table [ 1281.376804][T14713] loop5: partition table beyond EOD, truncated [ 1281.413560][T16657] Dev loop5: unable to read RDB block 7 [ 1281.413610][T16657] loop5: unable to read partition table [ 1281.413832][T16657] loop5: partition table beyond EOD, truncated [ 1281.422051][T16657] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1281.471863][ T804] usb 10-1: config index 0 descriptor too short (expected 23569, got 27) [ 1281.471911][ T804] usb 10-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1281.475905][ T804] usb 10-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1281.475947][ T804] usb 10-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1281.475971][ T804] usb 10-1: Manufacturer: syz [ 1281.653760][ T804] usb 10-1: config 0 descriptor?? [ 1281.676879][ T804] igorplugusb 10-1:0.0: incorrect number of endpoints [ 1282.092466][T11921] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 1282.242680][T11921] usb 9-1: Using ep0 maxpacket: 32 [ 1282.246578][T11921] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1282.246640][T11921] usb 9-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 1282.246669][T11921] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1282.303656][T11921] usb 9-1: config 0 descriptor?? [ 1282.335052][T11921] dvb-usb: found a 'TeVii S662' in warm state. [ 1282.335103][T11921] dw2102: su3000_power_ctrl: 1, initialized 0 [ 1282.335127][T11921] dvb-usb: bulk message failed: -22 (2/0) [ 1282.373571][T11921] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1282.378978][T11921] dvbdev: DVB: registering new adapter (TeVii S662) [ 1282.379039][T11921] usb 9-1: media controller created [ 1282.379070][T11921] dvb-usb: bulk message failed: -22 (6/0) [ 1282.379088][T11921] dw2102: i2c transfer failed. [ 1282.379107][T11921] dvb-usb: bulk message failed: -22 (6/0) [ 1282.379123][T11921] dw2102: i2c transfer failed. [ 1282.379142][T11921] dvb-usb: bulk message failed: -22 (6/0) [ 1282.379159][T11921] dw2102: i2c transfer failed. [ 1282.379178][T11921] dvb-usb: bulk message failed: -22 (6/0) [ 1282.379194][T11921] dw2102: i2c transfer failed. [ 1282.379213][T11921] dvb-usb: bulk message failed: -22 (6/0) [ 1282.379230][T11921] dw2102: i2c transfer failed. [ 1282.379249][T11921] dvb-usb: bulk message failed: -22 (6/0) [ 1282.379265][T11921] dw2102: i2c transfer failed. [ 1282.379277][T11921] dvb-usb: MAC address: 02:02:02:02:02:02 [ 1282.500282][T11921] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1282.533173][T11921] dvb-usb: bulk message failed: -22 (3/0) [ 1282.533197][T11921] dw2102: command 0x0e transfer failed. [ 1282.533209][T11921] dvb-usb: bulk message failed: -22 (3/0) [ 1282.533225][T11921] dw2102: command 0x0e transfer failed. [ 1282.843963][T11921] dvb-usb: bulk message failed: -22 (3/0) [ 1282.843990][T11921] dw2102: command 0x0e transfer failed. [ 1282.844003][T11921] dvb-usb: bulk message failed: -22 (3/0) [ 1282.844020][T11921] dw2102: command 0x0e transfer failed. [ 1282.844031][T11921] dvb-usb: bulk message failed: -22 (1/0) [ 1282.844061][T11921] dw2102: command 0x51 transfer failed. [ 1282.844071][T11921] dvb-usb: bulk message failed: -22 (5/0) [ 1282.844087][T11921] dw2102: i2c probe for address 0x68 failed. [ 1282.844101][T11921] dvb-usb: bulk message failed: -22 (5/0) [ 1282.844117][T11921] dw2102: i2c probe for address 0x69 failed. [ 1282.844130][T11921] dvb-usb: bulk message failed: -22 (5/0) [ 1282.844146][T11921] dw2102: i2c probe for address 0x6a failed. [ 1282.844159][T11921] dw2102: probing for demodulator failed. Is the external power switched on? [ 1282.844172][T11921] dvb-usb: no frontend was attached by 'TeVii S662' [ 1283.113055][T11921] rc_core: IR keymap rc-tt-1500 not found [ 1283.113079][T11921] Registered IR keymap rc-empty [ 1283.117835][T11921] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.8/usb9/9-1/rc/rc0 [ 1283.147572][T11921] input: TeVii S662 as /devices/platform/dummy_hcd.8/usb9/9-1/rc/rc0/input29 [ 1283.167395][T11921] dvb-usb: schedule remote query interval to 250 msecs. [ 1283.167421][T11921] dw2102: su3000_power_ctrl: 0, initialized 1 [ 1283.167437][T11921] dvb-usb: TeVii S662 successfully initialized and connected. [ 1283.206139][T11921] usb 9-1: USB disconnect, device number 36 [ 1283.320959][T16741] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2500'. [ 1283.590479][T11921] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 1284.002547][ T804] usb 10-1: USB disconnect, device number 16 [ 1284.226626][T16804] loop8: detected capacity change from 0 to 8 [ 1284.233516][T16804] Dev loop8: unable to read RDB block 8 [ 1284.235461][T16804] loop8: unable to read partition table [ 1284.236097][T16804] loop8: partition table beyond EOD, truncated [ 1284.236151][T16804] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1284.701863][ T804] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1284.861809][ T804] usb 10-1: Using ep0 maxpacket: 32 [ 1284.866029][ T804] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1284.866091][ T804] usb 10-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 1284.866120][ T804] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1284.908417][ T804] usb 10-1: config 0 descriptor?? [ 1284.934360][ T804] dvb-usb: found a 'TeVii S662' in warm state. [ 1284.934410][ T804] dw2102: su3000_power_ctrl: 1, initialized 0 [ 1284.934433][ T804] dvb-usb: bulk message failed: -22 (2/0) [ 1284.965412][ T804] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1284.966581][ T804] dvbdev: DVB: registering new adapter (TeVii S662) [ 1284.966648][ T804] usb 10-1: media controller created [ 1284.966679][ T804] dvb-usb: bulk message failed: -22 (6/0) [ 1284.966697][ T804] dw2102: i2c transfer failed. [ 1284.966717][ T804] dvb-usb: bulk message failed: -22 (6/0) [ 1284.966734][ T804] dw2102: i2c transfer failed. [ 1284.966752][ T804] dvb-usb: bulk message failed: -22 (6/0) [ 1284.966769][ T804] dw2102: i2c transfer failed. [ 1284.966787][ T804] dvb-usb: bulk message failed: -22 (6/0) [ 1284.966803][ T804] dw2102: i2c transfer failed. [ 1284.966822][ T804] dvb-usb: bulk message failed: -22 (6/0) [ 1284.966838][ T804] dw2102: i2c transfer failed. [ 1284.966855][ T804] dvb-usb: bulk message failed: -22 (6/0) [ 1284.966871][ T804] dw2102: i2c transfer failed. [ 1284.966883][ T804] dvb-usb: MAC address: 02:02:02:02:02:02 [ 1285.087083][ T804] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1285.147956][ T804] dvb-usb: bulk message failed: -22 (3/0) [ 1285.147980][ T804] dw2102: command 0x0e transfer failed. [ 1285.147993][ T804] dvb-usb: bulk message failed: -22 (3/0) [ 1285.148009][ T804] dw2102: command 0x0e transfer failed. [ 1285.451828][ T804] dvb-usb: bulk message failed: -22 (3/0) [ 1285.451856][ T804] dw2102: command 0x0e transfer failed. [ 1285.451867][ T804] dvb-usb: bulk message failed: -22 (3/0) [ 1285.451884][ T804] dw2102: command 0x0e transfer failed. [ 1285.451893][ T804] dvb-usb: bulk message failed: -22 (1/0) [ 1285.451909][ T804] dw2102: command 0x51 transfer failed. [ 1285.451919][ T804] dvb-usb: bulk message failed: -22 (5/0) [ 1285.451935][ T804] dw2102: i2c probe for address 0x68 failed. [ 1285.451948][ T804] dvb-usb: bulk message failed: -22 (5/0) [ 1285.451963][ T804] dw2102: i2c probe for address 0x69 failed. [ 1285.451977][ T804] dvb-usb: bulk message failed: -22 (5/0) [ 1285.451992][ T804] dw2102: i2c probe for address 0x6a failed. [ 1285.452005][ T804] dw2102: probing for demodulator failed. Is the external power switched on? [ 1285.452017][ T804] dvb-usb: no frontend was attached by 'TeVii S662' [ 1285.751473][ T804] rc_core: IR keymap rc-tt-1500 not found [ 1285.751497][ T804] Registered IR keymap rc-empty [ 1285.753457][ T804] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.9/usb10/10-1/rc/rc0 [ 1285.802452][ T804] input: TeVii S662 as /devices/platform/dummy_hcd.9/usb10/10-1/rc/rc0/input30 [ 1285.858913][ T804] dvb-usb: schedule remote query interval to 250 msecs. [ 1285.858939][ T804] dw2102: su3000_power_ctrl: 0, initialized 1 [ 1285.858955][ T804] dvb-usb: TeVii S662 successfully initialized and connected. [ 1285.902326][ T804] usb 10-1: USB disconnect, device number 17 [ 1286.106491][ T804] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 1289.161918][T15070] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 1289.312407][T15070] usb 9-1: Using ep0 maxpacket: 32 [ 1289.315781][T15070] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1289.315831][T15070] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1289.315865][T15070] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1289.355035][T15070] usb 9-1: config 0 descriptor?? [ 1289.367284][T15070] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1290.571855][T15070] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1290.722360][T17112] loop5: detected capacity change from 0 to 7 [ 1290.724082][T17112] Dev loop5: unable to read RDB block 7 [ 1290.724124][T17112] loop5: AHDI p1 [ 1290.724164][T17112] loop5: partition table partially beyond EOD, truncated [ 1290.763573][T15070] usb 10-1: config index 0 descriptor too short (expected 23569, got 27) [ 1290.763645][T15070] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1290.767220][T15070] usb 10-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1290.767254][T15070] usb 10-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1290.767278][T15070] usb 10-1: Manufacturer: syz [ 1290.827813][T15070] usb 10-1: config 0 descriptor?? [ 1290.951834][T15070] rc_core: IR keymap rc-hauppauge not found [ 1290.951857][T15070] Registered IR keymap rc-empty [ 1290.957582][T15070] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 1290.994142][T15070] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input31 [ 1291.035543][ C1] igorplugusb 10-1:0.0: Error: urb status = -32 [ 1291.076552][T15070] usb 10-1: USB disconnect, device number 18 [ 1291.638925][T17160] syzkaller0: entered promiscuous mode [ 1291.638946][T17160] syzkaller0: entered allmulticast mode [ 1291.918403][T11921] usb 9-1: USB disconnect, device number 37 [ 1292.792372][ T9263] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 1292.941949][ T9263] usb 9-1: Using ep0 maxpacket: 32 [ 1292.950386][ T9263] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 1292.950417][ T9263] usb 9-1: config 0 has no interface number 0 [ 1292.974386][ T9263] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1292.974422][ T9263] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1292.974445][ T9263] usb 9-1: Product: syz [ 1292.974463][ T9263] usb 9-1: Manufacturer: syz [ 1292.974480][ T9263] usb 9-1: SerialNumber: syz [ 1292.978817][ T9263] usb 9-1: config 0 descriptor?? [ 1293.021986][ T9263] smsc95xx v2.0.0 [ 1293.022118][T11921] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1293.189113][T11921] usb 10-1: config index 0 descriptor too short (expected 23569, got 27) [ 1293.189201][T11921] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1293.207802][T11921] usb 10-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1293.207906][T11921] usb 10-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1293.207933][T11921] usb 10-1: Manufacturer: syz [ 1293.260821][T11921] usb 10-1: config 0 descriptor?? [ 1293.422092][T11921] rc_core: IR keymap rc-hauppauge not found [ 1293.422116][T11921] Registered IR keymap rc-empty [ 1293.431029][T11921] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 1293.457046][T11921] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input32 [ 1293.459905][ T9263] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1293.459939][ T9263] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1293.499925][ C0] igorplugusb 10-1:0.0: Error: urb status = -32 [ 1293.545755][T17226] syzkaller0: entered promiscuous mode [ 1293.545785][T17226] syzkaller0: entered allmulticast mode [ 1293.578714][T11921] usb 10-1: USB disconnect, device number 19 [ 1294.068311][ T9263] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 1294.069273][ T9263] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -71 [ 1294.105665][ T9263] usb 9-1: USB disconnect, device number 38 [ 1294.120992][T14732] udevd[14732]: setting owner of /dev/bus/usb/009/038 to uid=0, gid=0 failed: No such file or directory [ 1294.412973][T17281] loop8: detected capacity change from 0 to 8 [ 1294.415322][T17281] Dev loop8: unable to read RDB block 8 [ 1294.415370][T17281] loop8: unable to read partition table [ 1294.415609][T17281] loop8: partition table beyond EOD, truncated [ 1294.417196][T17281] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1295.207443][T17308] kvm_pr_unimpl_wrmsr: 5 callbacks suppressed [ 1295.207470][T17308] kvm: kvm [17304]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xc95a [ 1295.222511][T17308] kvm: kvm [17304]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x1016 [ 1295.289642][T17308] kvm: kvm [17304]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x10000c8ad [ 1295.289710][T17308] kvm: kvm [17304]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1295.337661][T17308] kvm: kvm [17304]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xe1c6 [ 1295.341486][T17308] kvm: kvm [17304]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xaa74 [ 1295.341589][T17308] kvm: kvm [17304]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1295.484452][T17308] kvm: kvm [17304]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x85b [ 1295.484544][T17308] kvm: kvm [17304]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1295.545371][T17308] kvm_intel: kvm [17304]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x3187 [ 1295.546751][T17308] kvm: kvm [17304]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x3187 [ 1295.548698][T17308] kvm_intel: kvm [17304]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x5149 [ 1295.779437][T17341] netlink: 'syz.2.2588': attribute type 4 has an invalid length. [ 1296.816426][T17390] netlink: 'syz.2.2601': attribute type 4 has an invalid length. [ 1297.490249][T17407] kvm_intel: kvm [17406]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x3187 [ 1297.499059][T17407] kvm_intel: kvm [17406]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x5149 [ 1299.841923][ T5940] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1300.001924][ T5940] usb 10-1: config 0 has no interfaces? [ 1300.001967][ T5940] usb 10-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1300.001994][ T5940] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1300.007746][ T5940] usb 10-1: config 0 descriptor?? [ 1300.292326][T16123] usb 10-1: USB disconnect, device number 20 [ 1300.572669][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 1302.801821][ T804] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1302.970084][ T804] usb 10-1: config 0 has no interfaces? [ 1302.970130][ T804] usb 10-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1302.970159][ T804] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1303.008766][ T804] usb 10-1: config 0 descriptor?? [ 1303.303383][T15144] usb 10-1: USB disconnect, device number 21 [ 1304.502805][T17696] kvm: MONITOR instruction emulated as NOP! [ 1304.803321][ T7968] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 1304.954108][ T7968] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1304.954141][ T7968] usb 9-1: config 0 has no interface number 0 [ 1304.957181][ T7968] usb 9-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1304.957214][ T7968] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1304.957237][ T7968] usb 9-1: Product: syz [ 1304.957254][ T7968] usb 9-1: Manufacturer: syz [ 1304.957273][ T7968] usb 9-1: SerialNumber: syz [ 1305.021084][ T7968] usb 9-1: config 0 descriptor?? [ 1305.236631][ T7968] usb 9-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state [ 1305.238268][ T7968] usb 9-1: Direct firmware load for dvb-usb-ec168.fw failed with error -2 [ 1305.238295][ T7968] usb 9-1: Falling back to sysfs fallback for: dvb-usb-ec168.fw [ 1305.459565][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.459641][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1305.761821][T16733] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1305.891863][T16733] usb 10-1: device descriptor read/64, error -71 [ 1306.137354][T16733] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 1306.148472][T17771] can0: slcan on ttyS3. [ 1306.271907][T17769] can0 (unregistered): slcan off ttyS3. [ 1306.284760][T16733] usb 10-1: device descriptor read/64, error -71 [ 1306.392346][T16733] usb usb10-port1: attempt power cycle [ 1306.731870][T16733] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1306.755631][T16733] usb 10-1: device descriptor read/8, error -71 [ 1306.991793][T16733] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1307.013824][T16733] usb 10-1: device descriptor read/8, error -71 [ 1307.043855][T17808] loop8: detected capacity change from 0 to 8 [ 1307.065761][T14713] Dev loop8: unable to read RDB block 8 [ 1307.065811][T14713] loop8: unable to read partition table [ 1307.066071][T14713] loop8: partition table beyond EOD, truncated [ 1307.070340][T17808] Dev loop8: unable to read RDB block 8 [ 1307.070388][T17808] loop8: unable to read partition table [ 1307.070618][T17808] loop8: partition table beyond EOD, truncated [ 1307.070641][T17808] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 1307.126582][T16733] usb usb10-port1: unable to enumerate USB device [ 1307.349220][T17815] vlan2: entered promiscuous mode [ 1307.349247][T17815] ip6gretap0: entered promiscuous mode [ 1308.516427][T17878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2695'. [ 1308.516446][T17878] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2695'. [ 1308.733111][T17878] veth3: entered promiscuous mode [ 1308.733141][T17878] veth3: entered allmulticast mode [ 1309.932617][ T9264] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 1310.094769][ T9264] usb 10-1: config 0 has no interfaces? [ 1310.094810][ T9264] usb 10-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 1310.094837][ T9264] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1310.131323][ T9264] usb 10-1: config 0 descriptor?? [ 1310.446829][T16733] usb 10-1: USB disconnect, device number 26 [ 1310.983719][T17991] netlink: 'syz.2.2712': attribute type 83 has an invalid length. [ 1312.328611][ T38] audit: type=1804 audit(1768356270.001:156): pid=18041 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.5.2724" name="bus" dev="ramfs" ino=69767 res=1 errno=0 [ 1312.355020][ T38] audit: type=1804 audit(1768356270.031:157): pid=18041 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.5.2724" name="bus" dev="ramfs" ino=69767 res=1 errno=0 [ 1312.657286][ T5802] Bluetooth: hci4: command 0x0406 tx timeout [ 1312.659051][ T5802] Bluetooth: hci7: command 0x0406 tx timeout [ 1312.659089][ T5802] Bluetooth: hci6: command 0x0406 tx timeout [ 1313.165774][T18084] loop5: detected capacity change from 0 to 7 [ 1313.189029][T14713] Dev loop5: unable to read RDB block 7 [ 1313.189062][T14713] loop5: AHDI p1 [ 1313.189095][T14713] loop5: partition table partially beyond EOD, truncated [ 1313.242168][T18084] Dev loop5: unable to read RDB block 7 [ 1313.242204][T18084] loop5: AHDI p1 [ 1313.242243][T18084] loop5: partition table partially beyond EOD, truncated [ 1313.534324][T18101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2734'. [ 1313.812867][T18101] veth5: entered promiscuous mode [ 1313.812896][T18101] veth5: entered allmulticast mode [ 1313.971907][T11919] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 1314.101791][T11919] usb 10-1: device descriptor read/64, error -71 [ 1314.341919][T11919] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 1314.473716][T11919] usb 10-1: device descriptor read/64, error -71 [ 1314.586794][T11919] usb usb10-port1: attempt power cycle [ 1314.687504][T18170] loop5: detected capacity change from 0 to 7 [ 1314.689524][T18170] Dev loop5: unable to read RDB block 7 [ 1314.689555][T18170] loop5: AHDI p1 [ 1314.689583][T18170] loop5: partition table partially beyond EOD, truncated [ 1314.921856][T11919] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 1314.942695][T11919] usb 10-1: device descriptor read/8, error -71 [ 1314.957513][ T38] audit: type=1326 audit(1768356272.661:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18178 comm="syz.5.2746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f75ccf749 code=0x7ffc0000 [ 1314.957572][ T38] audit: type=1326 audit(1768356272.661:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18178 comm="syz.5.2746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f75ccf749 code=0x7ffc0000 [ 1314.957622][ T38] audit: type=1326 audit(1768356272.661:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18178 comm="syz.5.2746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f75ccf749 code=0x7ffc0000 [ 1314.997237][ T38] audit: type=1326 audit(1768356272.701:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18178 comm="syz.5.2746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f5f75ccf749 code=0x7ffc0000 [ 1315.003094][ T38] audit: type=1326 audit(1768356272.701:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18178 comm="syz.5.2746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f75ccf749 code=0x7ffc0000 [ 1315.019178][ T38] audit: type=1326 audit(1768356272.711:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18178 comm="syz.5.2746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f75ccf749 code=0x7ffc0000 [ 1315.019282][ T38] audit: type=1326 audit(1768356272.711:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18178 comm="syz.5.2746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f75ccf749 code=0x7ffc0000 [ 1315.019417][ T38] audit: type=1326 audit(1768356272.721:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18178 comm="syz.5.2746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7f5f75ccf749 code=0x7ffc0000 [ 1315.224159][T11919] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 1315.245375][T11919] usb 10-1: device descriptor read/8, error -71 [ 1315.352409][T11919] usb usb10-port1: unable to enumerate USB device [ 1315.388991][T18193] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2750'. [ 1315.582505][T18193] veth3: entered promiscuous mode [ 1315.582534][T18193] veth3: entered allmulticast mode [ 1315.871317][T18235] loop5: detected capacity change from 0 to 7 [ 1315.883647][T14713] Dev loop5: unable to read RDB block 7 [ 1315.883678][T14713] loop5: AHDI p1 [ 1315.883710][T14713] loop5: partition table partially beyond EOD, truncated [ 1315.886594][T18235] Dev loop5: unable to read RDB block 7 [ 1315.886625][T18235] loop5: AHDI p1 [ 1315.886656][T18235] loop5: partition table partially beyond EOD, truncated [ 1316.334501][T18258] netlink: 'syz.8.2760': attribute type 83 has an invalid length. [ 1316.815623][T18279] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 1316.984158][T18290] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2768'. [ 1317.354356][T18305] netlink: 'syz.2.2773': attribute type 83 has an invalid length. [ 1317.711878][T15070] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 1317.871912][T15070] usb 10-1: Using ep0 maxpacket: 16 [ 1317.874626][T15070] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1317.874664][T15070] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1317.877300][T15070] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1317.877333][T15070] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1317.877357][T15070] usb 10-1: Product: syz [ 1317.877375][T15070] usb 10-1: Manufacturer: syz [ 1317.877393][T15070] usb 10-1: SerialNumber: syz [ 1317.952824][T15070] usb 10-1: config 0 descriptor?? [ 1317.985066][T15070] em28xx 10-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1317.985111][T15070] em28xx 10-1:0.0: Audio interface 0 found (Vendor Class) [ 1318.272917][T18337] veth3: entered promiscuous mode [ 1318.272947][T18337] veth3: entered allmulticast mode [ 1318.278882][T18352] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2782'. [ 1318.490496][T18365] netlink: 'syz.0.2785': attribute type 83 has an invalid length. [ 1318.570836][T15070] em28xx 10-1:0.0: unknown em28xx chip ID (0) [ 1318.571549][T15070] em28xx 10-1:0.0: Config register raw data: 0xfffffffb [ 1319.187322][T15070] em28xx 10-1:0.0: Unknown AC97 audio processor detected! [ 1319.188018][T15070] em28xx 10-1:0.0: couldn't setup AC97 register 2 [ 1319.188677][T15070] em28xx 10-1:0.0: couldn't setup AC97 register 4 [ 1319.189318][T15070] em28xx 10-1:0.0: couldn't setup AC97 register 6 [ 1319.189949][T15070] em28xx 10-1:0.0: couldn't setup AC97 register 54 [ 1319.190717][T15070] em28xx 10-1:0.0: couldn't setup AC97 register 56 [ 1319.467033][ T5799] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1319.501369][ T5799] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1319.509498][ T5799] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1319.516071][ T5799] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1319.522112][ T5799] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1319.832686][T15070] em28xx 10-1:0.0: couldn't setup AC97 register 20 [ 1319.834021][T15070] em28xx 10-1:0.0: couldn't setup AC97 register 16 [ 1319.839304][T15070] em28xx 10-1:0.0: couldn't setup AC97 register 12 [ 1319.841029][T15070] em28xx 10-1:0.0: couldn't setup AC97 register 14 [ 1319.841472][T15070] em28xx 10-1:0.0: couldn't setup AC97 register 18 [ 1319.873238][T15070] em28xx 10-1:0.0: couldn't setup AC97 register 22 [ 1319.873685][T15070] em28xx 10-1:0.0: couldn't setup AC97 register 24 [ 1319.973313][T15070] em28xx 10-1:0.0: Binding audio extension [ 1319.973329][T15070] em28xx 10-1:0.0: em28xx-audio.c: Copyright (C) 2006 Markus Rechberger [ 1319.973341][T15070] em28xx 10-1:0.0: em28xx-audio.c: Copyright (C) 2007-2016 Mauro Carvalho Chehab [ 1320.039165][T15070] em28xx 10-1:0.0: alt 0 doesn't exist on interface 7 [ 1320.159726][T15070] usb 10-1: USB disconnect, device number 31 [ 1320.217330][T15070] em28xx 10-1:0.0: Disconnecting em28xx [ 1320.217374][T15070] em28xx 10-1:0.0: Closing audio extension [ 1320.299495][T15070] em28xx 10-1:0.0: Freeing device [ 1320.666462][ T5936] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1320.828619][ T5938] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 1320.828712][ T5938] dvb_usb_az6027 1-1:0.0: probe with driver dvb_usb_az6027 failed with error -2 [ 1320.857248][ T5938] usb 1-1: USB disconnect, device number 41 [ 1320.858894][ T5876] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 1320.858975][ T5876] dvb_usb_az6027 6-1:0.0: probe with driver dvb_usb_az6027 failed with error -2 [ 1320.965489][ T9261] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1320.965556][ T9261] dvb_usb_az6027 3-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 1320.987879][ T9261] usb 3-1: USB disconnect, device number 20 [ 1321.162055][T18480] Bluetooth: MGMT ver 1.23 [ 1321.162096][T18480] Bluetooth: hci0: invalid length 0, exp 2 for type 21 [ 1321.188219][ T5936] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1321.190201][ T5876] usb 6-1: USB disconnect, device number 72 [ 1321.215259][ T5938] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1321.364188][ T5938] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1321.364221][ T5938] usb 1-1: config 0 has no interface number 0 [ 1321.368696][ T5938] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1321.368729][ T5938] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1321.368753][ T5938] usb 1-1: Product: syz [ 1321.368771][ T5938] usb 1-1: Manufacturer: syz [ 1321.368788][ T5938] usb 1-1: SerialNumber: syz [ 1321.445908][ T5938] usb 1-1: config 0 descriptor?? [ 1321.640956][T17969] Bluetooth: hci0: command tx timeout [ 1321.688593][ T5938] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1321.703837][ T5938] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1321.704248][ T5938] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1321.704303][ T5938] usb 1-1: media controller created [ 1321.745466][ T5938] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1321.822672][ T5936] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1321.893066][ T5938] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 1322.009014][ T5938] usb 1-1: USB disconnect, device number 42 [ 1322.318095][ T5936] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1322.544611][T18602] Bluetooth: hci0: invalid length 0, exp 2 for type 21 [ 1322.664115][T18382] chnl_net:caif_netlink_parms(): no params data found [ 1323.692008][T17969] Bluetooth: hci0: command tx timeout [ 1323.779599][T18382] bridge0: port 1(bridge_slave_0) entered blocking state [ 1323.779830][T18382] bridge0: port 1(bridge_slave_0) entered disabled state [ 1323.780071][T18382] bridge_slave_0: entered allmulticast mode [ 1323.827458][T18382] bridge_slave_0: entered promiscuous mode [ 1323.850188][T18382] bridge0: port 2(bridge_slave_1) entered blocking state [ 1323.857856][T18382] bridge0: port 2(bridge_slave_1) entered disabled state [ 1323.858817][T18382] bridge_slave_1: entered allmulticast mode [ 1323.911562][T18382] bridge_slave_1: entered promiscuous mode [ 1323.923210][ T5936] bridge_slave_1: left allmulticast mode [ 1323.923240][ T5936] bridge_slave_1: left promiscuous mode [ 1323.923617][ T5936] bridge0: port 2(bridge_slave_1) entered disabled state [ 1323.964109][T18713] Bluetooth: hci0: invalid length 0, exp 2 for type 21 [ 1324.025057][ T5936] bridge_slave_0: left allmulticast mode [ 1324.025090][ T5936] bridge_slave_0: left promiscuous mode [ 1324.025349][ T5936] bridge0: port 1(bridge_slave_0) entered disabled state [ 1324.682539][ T9261] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 1324.721857][ T804] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1324.913752][ T9261] usb 10-1: Using ep0 maxpacket: 16 [ 1324.919366][ T9261] usb 10-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1324.919406][ T9261] usb 10-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1324.919433][ T9261] usb 10-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 1324.919475][ T9261] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1324.919512][ T9261] usb 10-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1324.919539][ T9261] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1324.934685][ T804] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1324.934715][ T804] usb 1-1: config 0 has no interfaces? [ 1324.938041][ T804] usb 1-1: New USB device found, idVendor=05d1, idProduct=7001, bcdDevice=53.43 [ 1324.938074][ T804] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1324.938097][ T804] usb 1-1: Product: syz [ 1324.938113][ T804] usb 1-1: Manufacturer: syz [ 1324.938129][ T804] usb 1-1: SerialNumber: syz [ 1325.050473][ T804] usb 1-1: config 0 descriptor?? [ 1325.064549][ T9261] usb 10-1: config 0 descriptor?? [ 1325.258855][T18761] Bluetooth: hci0: invalid length 0, exp 2 for type 21 [ 1325.309436][T18733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1325.310266][T18733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1325.717552][T17956] usb 10-1: USB disconnect, device number 32 [ 1325.731899][ T5936] erspan0 (unregistering): left promiscuous mode [ 1325.772069][T17969] Bluetooth: hci0: command tx timeout [ 1326.422187][ T5936] bridge0 (unregistering): left promiscuous mode [ 1326.553828][ T9263] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1326.703907][ T9263] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1326.703939][ T9263] usb 3-1: config 0 has no interface number 0 [ 1326.726887][ T9263] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1326.726922][ T9263] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1326.726947][ T9263] usb 3-1: Product: syz [ 1326.726963][ T9263] usb 3-1: Manufacturer: syz [ 1326.726980][ T9263] usb 3-1: SerialNumber: syz [ 1326.796928][ T9263] usb 3-1: config 0 descriptor?? [ 1327.007737][ T9263] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1327.022252][ T9263] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1327.023020][ T9263] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1327.023060][ T9263] usb 3-1: media controller created [ 1327.060386][ T9263] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1327.229388][ T9263] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 1327.289735][ T9263] usb 3-1: USB disconnect, device number 21 [ 1327.851944][T17969] Bluetooth: hci0: command tx timeout [ 1328.038267][T18838] Bluetooth: hci0: invalid length 0, exp 2 for type 21 [ 1328.392563][ T5936] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1328.442498][ T5936] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1328.464484][ T5936] bond0 (unregistering): Released all slaves [ 1329.357634][ T5936] bond1 (unregistering): Released all slaves [ 1330.399499][ T5936] bond2 (unregistering): Released all slaves [ 1331.364618][ T5936] bond3 (unregistering): Released all slaves [ 1332.294180][ T5936] bond4 (unregistering): Released all slaves [ 1333.222939][ T5936] bond5 (unregistering): Released all slaves [ 1334.168177][ T5936] bond6 (unregistering): Released all slaves [ 1335.182661][ T5936] bond7 (unregistering): (slave dummy0): Releasing active interface [ 1335.182687][ T5936] dummy0: left promiscuous mode [ 1335.208299][ T5936] bond7 (unregistering): Released all slaves [ 1335.225532][ T5936] bond8 (unregistering): Released all slaves [ 1335.416503][T18733] team_slave_0: entered promiscuous mode [ 1335.416543][T18733] team_slave_1: entered promiscuous mode [ 1335.416692][T18764] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2826'. [ 1335.416836][T18764] team_slave_0: left promiscuous mode [ 1335.416907][T18764] team_slave_1: left promiscuous mode [ 1335.556435][T17956] usb 1-1: USB disconnect, device number 43 [ 1335.613245][T18842] veth7: entered promiscuous mode [ 1335.613275][T18842] veth7: entered allmulticast mode [ 1335.642280][ T5936] tipc: Left network mode [ 1335.918702][T18921] Bluetooth: hci0: invalid length 0, exp 2 for type 21 [ 1336.031834][T17956] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1336.219810][T17956] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1336.219843][T17956] usb 1-1: config 0 has no interface number 0 [ 1336.241514][T17956] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1336.241550][T17956] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1336.241577][T17956] usb 1-1: Product: syz [ 1336.241594][T17956] usb 1-1: Manufacturer: syz [ 1336.241611][T17956] usb 1-1: SerialNumber: syz [ 1336.284957][T17956] usb 1-1: config 0 descriptor?? [ 1336.377626][T18382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1336.412958][T18382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1336.490633][T17956] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1336.507136][T17956] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1336.507460][T17956] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1336.507520][T17956] usb 1-1: media controller created [ 1336.547245][T17956] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1336.713258][T17956] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 1336.824854][T17956] usb 1-1: USB disconnect, device number 44 [ 1337.489547][T18382] team0: Port device team_slave_0 added [ 1337.511051][T18382] team0: Port device team_slave_1 added [ 1337.582918][T17956] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1337.652257][T19018] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2862'. [ 1337.731928][T17956] usb 1-1: Using ep0 maxpacket: 32 [ 1337.734035][T17956] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1337.734069][T17956] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1337.734109][T17956] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1337.734127][T17956] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1337.739216][T17956] usb 1-1: config 0 descriptor?? [ 1337.981475][T19030] Bluetooth: hci0: invalid length 0, exp 2 for type 20 [ 1338.176120][T17956] savu 0003:1E7D:2D5A.002A: unknown main item tag 0x0 [ 1338.176163][T17956] savu 0003:1E7D:2D5A.002A: unknown main item tag 0x0 [ 1338.176192][T17956] savu 0003:1E7D:2D5A.002A: unknown main item tag 0x0 [ 1338.176221][T17956] savu 0003:1E7D:2D5A.002A: unknown main item tag 0x0 [ 1338.176249][T17956] savu 0003:1E7D:2D5A.002A: unknown main item tag 0x0 [ 1338.176277][T17956] savu 0003:1E7D:2D5A.002A: unknown main item tag 0x0 [ 1338.176306][T17956] savu 0003:1E7D:2D5A.002A: unknown main item tag 0x0 [ 1338.176334][T17956] savu 0003:1E7D:2D5A.002A: unknown main item tag 0x0 [ 1338.269508][T17956] savu 0003:1E7D:2D5A.002A: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 1338.350893][T15070] usb 1-1: USB disconnect, device number 45 [ 1338.405847][T18382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1338.405867][T18382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1338.405897][T18382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1338.505740][T18382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1338.505760][T18382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1338.505793][T18382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1338.630192][T19057] fido_id[19057]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1338.773869][ T5936] hsr_slave_0: left promiscuous mode [ 1338.811968][ T5936] hsr_slave_1: left promiscuous mode [ 1339.046344][ T5936] veth1_macvtap: left promiscuous mode [ 1339.046429][ T5936] veth0_macvtap: left promiscuous mode [ 1339.046669][ T5936] veth1_vlan: left promiscuous mode [ 1339.046849][ T5936] veth0_vlan: left promiscuous mode [ 1340.284704][T15070] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 1340.474457][T15070] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1340.474494][T15070] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1340.474552][T15070] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1340.474580][T15070] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1340.479645][T15070] usb 10-1: config 0 descriptor?? [ 1341.883611][T19107] ================================================================== [ 1341.883633][T19107] BUG: KASAN: slab-use-after-free in rt_spin_lock+0x88/0x3e0 [ 1341.883810][T19107] Read of size 1 at addr ffff8880307ce200 by task syz.0.2872/19107 [ 1341.883831][T19107] [ 1341.883860][T19107] CPU: 1 UID: 0 PID: 19107 Comm: syz.0.2872 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1341.883888][T19107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1341.883912][T19107] Call Trace: [ 1341.883925][T19107] [ 1341.883935][T19107] dump_stack_lvl+0xe8/0x150 [ 1341.884005][T19107] print_report+0xca/0x240 [ 1341.884043][T19107] ? rt_spin_lock+0x88/0x3e0 [ 1341.884077][T19107] kasan_report+0x118/0x150 [ 1341.884147][T19107] ? rt_spin_lock+0x88/0x3e0 [ 1341.884183][T19107] ? __wake_up_common_lock+0x2f/0x1e0 [ 1341.884236][T19107] __kasan_check_byte+0x2a/0x40 [ 1341.884272][T19107] lock_acquire+0x84/0x340 [ 1341.884304][T19107] ? rt_mutex_slowunlock+0x668/0x8a0 [ 1341.884335][T19107] ? reacquire_held_locks+0x104/0x190 [ 1341.884384][T19107] rt_spin_lock+0x88/0x3e0 [ 1341.884414][T19107] ? __wake_up_common_lock+0x2f/0x1e0 [ 1341.884445][T19107] ? __pfx_rt_spin_lock+0x10/0x10 [ 1341.884476][T19107] ? rt_spin_unlock+0x161/0x200 [ 1341.884510][T19107] ? __wake_up_common_lock+0x18a/0x1e0 [ 1341.884541][T19107] __wake_up_common_lock+0x2f/0x1e0 [ 1341.884571][T19107] ? snd_pcm_post_stop+0x14a/0x1e0 [ 1341.884655][T19107] ? __pfx_snd_pcm_post_stop+0x10/0x10 [ 1341.884677][T19107] snd_pcm_action+0x1f4/0x240 [ 1341.884735][T19107] loopback_trigger+0xb82/0x1b60 [ 1341.884787][T19107] ? rcu_is_watching+0x15/0xb0 [ 1341.884835][T19107] snd_pcm_do_start+0xb7/0x180 [ 1341.884859][T19107] snd_pcm_action+0xe7/0x240 [ 1341.884893][T19107] __snd_pcm_lib_xfer+0x1762/0x1d00 [ 1341.884946][T19107] ? __pfx_interleaved_copy+0x10/0x10 [ 1341.884973][T19107] ? __pfx_default_write_copy+0x10/0x10 [ 1341.885002][T19107] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1341.885029][T19107] ? __pfx___snd_pcm_lib_xfer+0x10/0x10 [ 1341.885053][T19107] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 1341.885085][T19107] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1341.885121][T19107] ? snd_pcm_oss_write3+0x1a2/0x350 [ 1341.885200][T19107] snd_pcm_oss_write3+0x1bc/0x350 [ 1341.885242][T19107] snd_pcm_oss_sync1+0x345/0x760 [ 1341.885278][T19107] ? __pfx_snd_pcm_oss_sync1+0x10/0x10 [ 1341.885307][T19107] ? __pfx_default_wake_function+0x10/0x10 [ 1341.885357][T19107] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1341.885382][T19107] ? lockdep_hardirqs_on+0x7b/0x110 [ 1341.885429][T19107] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1341.885454][T19107] ? mutex_lock_interruptible_nested+0x154/0x1d0 [ 1341.885487][T19107] ? snd_pcm_oss_sync+0x286/0x9d0 [ 1341.885511][T19107] ? snd_pcm_format_set_silence+0x12f/0x2d0 [ 1341.885542][T19107] snd_pcm_oss_sync+0x6ef/0x9d0 [ 1341.885571][T19107] snd_pcm_oss_release+0x102/0x250 [ 1341.885595][T19107] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 1341.885619][T19107] __fput+0x45b/0xa80 [ 1341.885663][T19107] task_work_run+0x1d4/0x260 [ 1341.885700][T19107] ? __pfx_task_work_run+0x10/0x10 [ 1341.885741][T19107] exit_to_user_mode_loop+0xef/0x4e0 [ 1341.885773][T19107] ? rcu_is_watching+0x15/0xb0 [ 1341.885796][T19107] do_syscall_64+0x2c1/0xf80 [ 1341.885842][T19107] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1341.885884][T19107] ? trace_irq_disable+0x37/0x100 [ 1341.885922][T19107] ? clear_bhb_loop+0x60/0xb0 [ 1341.885948][T19107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1341.885972][T19107] RIP: 0033:0x7f11ece0f749 [ 1341.885996][T19107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1341.886017][T19107] RSP: 002b:00007ffc1e9da058 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1341.886043][T19107] RAX: 0000000000000000 RBX: 00007f11ed067da0 RCX: 00007f11ece0f749 [ 1341.886061][T19107] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1341.886076][T19107] RBP: 00007f11ed067da0 R08: 0000000000002124 R09: 000000051e9da34f [ 1341.886093][T19107] R10: 00007f11ed067cb0 R11: 0000000000000246 R12: 000000000014783b [ 1341.886110][T19107] R13: 00007f11ed066090 R14: ffffffffffffffff R15: 00007ffc1e9da170 [ 1341.886138][T19107] [ 1341.886148][T19107] [ 1341.886153][T19107] Allocated by task 19108: [ 1341.886165][T19107] kasan_save_track+0x3e/0x80 [ 1341.886195][T19107] __kasan_kmalloc+0x93/0xb0 [ 1341.886227][T19107] __kmalloc_cache_noprof+0x1fb/0x6d0 [ 1341.886270][T19107] snd_pcm_attach_substream+0x5b7/0xb30 [ 1341.886300][T19107] snd_pcm_open_substream+0xb6/0x2410 [ 1341.886331][T19107] snd_pcm_oss_open+0xf2a/0x1bd0 [ 1341.886357][T19107] chrdev_open+0x4cf/0x5e0 [ 1341.886375][T19107] do_dentry_open+0x7d0/0x1270 [ 1341.886397][T19107] vfs_open+0x3b/0x350 [ 1341.886417][T19107] path_openat+0x342a/0x3df0 [ 1341.886446][T19107] do_filp_open+0x1fa/0x410 [ 1341.886474][T19107] do_sys_openat2+0x121/0x200 [ 1341.886497][T19107] __x64_sys_openat+0x138/0x170 [ 1341.886521][T19107] do_syscall_64+0xec/0xf80 [ 1341.886541][T19107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1341.886563][T19107] [ 1341.886569][T19107] Freed by task 19108: [ 1341.886580][T19107] kasan_save_track+0x3e/0x80 [ 1341.886608][T19107] kasan_save_free_info+0x46/0x50 [ 1341.886633][T19107] __kasan_slab_free+0x5c/0x80 [ 1341.886663][T19107] kfree+0x1bd/0x900 [ 1341.886690][T19107] snd_pcm_detach_substream+0x1e1/0x290 [ 1341.886716][T19107] snd_pcm_oss_release+0x184/0x250 [ 1341.886737][T19107] __fput+0x45b/0xa80 [ 1341.886759][T19107] task_work_run+0x1d4/0x260 [ 1341.886791][T19107] exit_to_user_mode_loop+0xef/0x4e0 [ 1341.886820][T19107] do_syscall_64+0x2c1/0xf80 [ 1341.886841][T19107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1341.886862][T19107] [ 1341.886868][T19107] The buggy address belongs to the object at ffff8880307ce000 [ 1341.886868][T19107] which belongs to the cache kmalloc-2k of size 2048 [ 1341.886887][T19107] The buggy address is located 512 bytes inside of [ 1341.886887][T19107] freed 2048-byte region [ffff8880307ce000, ffff8880307ce800) [ 1341.886912][T19107] [ 1341.886918][T19107] The buggy address belongs to the physical page: [ 1341.886939][T19107] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x307c8 [ 1341.886961][T19107] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1341.886980][T19107] anon flags: 0x80000000000040(head|node=0|zone=1) [ 1341.887003][T19107] page_type: f5(slab) [ 1341.887022][T19107] raw: 0080000000000040 ffff88813ff27000 0000000000000000 dead000000000001 [ 1341.887042][T19107] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 1341.887064][T19107] head: 0080000000000040 ffff88813ff27000 0000000000000000 dead000000000001 [ 1341.887084][T19107] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 1341.887104][T19107] head: 0080000000000003 ffffea0000c1f201 00000000ffffffff 00000000ffffffff [ 1341.887124][T19107] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 1341.887137][T19107] page dumped because: kasan: bad access detected [ 1341.887153][T19107] page_owner tracks the page as allocated [ 1341.887162][T19107] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 27897572873, free_ts 0 [ 1341.887200][T19107] post_alloc_hook+0x234/0x290 [ 1341.887230][T19107] get_page_from_freelist+0x28c0/0x2960 [ 1341.887250][T19107] __alloc_frozen_pages_noprof+0x181/0x370 [ 1341.887271][T19107] alloc_pages_mpol+0xd1/0x380 [ 1341.887290][T19107] allocate_slab+0x86/0x3b0 [ 1341.887314][T19107] ___slab_alloc+0xb10/0x13e0 [ 1341.887335][T19107] __slab_alloc+0xc6/0x1f0 [ 1341.887361][T19107] __kmalloc_noprof+0x15f/0x7e0 [ 1341.887391][T19107] __tty_alloc_driver+0x1a4/0x410 [ 1341.887486][T19107] rfcomm_init_ttys+0x1a/0x250 [ 1341.887619][T19107] rfcomm_init+0x56/0x120 [ 1341.887650][T19107] do_one_initcall+0x1f1/0x800 [ 1341.887679][T19107] do_initcall_level+0x104/0x190 [ 1341.887753][T19107] do_initcalls+0x59/0xa0 [ 1341.887778][T19107] kernel_init_freeable+0x2a7/0x3d0 [ 1341.887802][T19107] kernel_init+0x1d/0x1d0 [ 1341.887829][T19107] page_owner free stack trace missing [ 1341.887839][T19107] [ 1341.887844][T19107] Memory state around the buggy address: [ 1341.887857][T19107] ffff8880307ce100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1341.887874][T19107] ffff8880307ce180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1341.887890][T19107] >ffff8880307ce200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1341.887903][T19107] ^ [ 1341.887915][T19107] ffff8880307ce280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1341.887931][T19107] ffff8880307ce300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1341.887944][T19107] ================================================================== [ 1341.888117][T19107] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1341.888140][T19107] CPU: 1 UID: 0 PID: 19107 Comm: syz.0.2872 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1341.888167][T19107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1341.888182][T19107] Call Trace: [ 1341.888192][T19107] [ 1341.888202][T19107] vpanic+0x1e0/0x670 [ 1341.888239][T19107] panic+0xb9/0xc0 [ 1341.888270][T19107] ? __pfx_panic+0x10/0x10 [ 1341.888302][T19107] ? preempt_schedule_thunk+0x16/0x30 [ 1341.888331][T19107] ? preempt_schedule_thunk+0x16/0x30 [ 1341.888363][T19107] ? rt_spin_lock+0x88/0x3e0 [ 1341.888394][T19107] check_panic_on_warn+0x89/0xb0 [ 1341.888447][T19107] ? rt_spin_lock+0x88/0x3e0 [ 1341.888478][T19107] end_report+0x6f/0x140 [ 1341.888513][T19107] kasan_report+0x129/0x150 [ 1341.888550][T19107] ? rt_spin_lock+0x88/0x3e0 [ 1341.888586][T19107] ? __wake_up_common_lock+0x2f/0x1e0 [ 1341.888615][T19107] __kasan_check_byte+0x2a/0x40 [ 1341.888651][T19107] lock_acquire+0x84/0x340 [ 1341.888682][T19107] ? rt_mutex_slowunlock+0x668/0x8a0 [ 1341.888713][T19107] ? reacquire_held_locks+0x104/0x190 [ 1341.888754][T19107] rt_spin_lock+0x88/0x3e0 [ 1341.888785][T19107] ? __wake_up_common_lock+0x2f/0x1e0 [ 1341.888816][T19107] ? __pfx_rt_spin_lock+0x10/0x10 [ 1341.888847][T19107] ? rt_spin_unlock+0x161/0x200 [ 1341.888881][T19107] ? __wake_up_common_lock+0x18a/0x1e0 [ 1341.888913][T19107] __wake_up_common_lock+0x2f/0x1e0 [ 1341.888943][T19107] ? snd_pcm_post_stop+0x14a/0x1e0 [ 1341.888966][T19107] ? __pfx_snd_pcm_post_stop+0x10/0x10 [ 1341.888989][T19107] snd_pcm_action+0x1f4/0x240 [ 1341.889023][T19107] loopback_trigger+0xb82/0x1b60 [ 1341.889049][T19107] ? rcu_is_watching+0x15/0xb0 [ 1341.889075][T19107] snd_pcm_do_start+0xb7/0x180 [ 1341.889099][T19107] snd_pcm_action+0xe7/0x240 [ 1341.889136][T19107] __snd_pcm_lib_xfer+0x1762/0x1d00 [ 1341.889167][T19107] ? __pfx_interleaved_copy+0x10/0x10 [ 1341.889194][T19107] ? __pfx_default_write_copy+0x10/0x10 [ 1341.889223][T19107] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1341.889250][T19107] ? __pfx___snd_pcm_lib_xfer+0x10/0x10 [ 1341.889275][T19107] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 1341.889307][T19107] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1341.889342][T19107] ? snd_pcm_oss_write3+0x1a2/0x350 [ 1341.889410][T19107] snd_pcm_oss_write3+0x1bc/0x350 [ 1341.889451][T19107] snd_pcm_oss_sync1+0x345/0x760 [ 1341.889487][T19107] ? __pfx_snd_pcm_oss_sync1+0x10/0x10 [ 1341.889516][T19107] ? __pfx_default_wake_function+0x10/0x10 [ 1341.889553][T19107] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1341.889578][T19107] ? lockdep_hardirqs_on+0x7b/0x110 [ 1341.889601][T19107] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1341.889626][T19107] ? mutex_lock_interruptible_nested+0x154/0x1d0 [ 1341.889659][T19107] ? snd_pcm_oss_sync+0x286/0x9d0 [ 1341.889682][T19107] ? snd_pcm_format_set_silence+0x12f/0x2d0 [ 1341.889713][T19107] snd_pcm_oss_sync+0x6ef/0x9d0 [ 1341.889741][T19107] snd_pcm_oss_release+0x102/0x250 [ 1341.889765][T19107] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 1341.889788][T19107] __fput+0x45b/0xa80 [ 1341.889821][T19107] task_work_run+0x1d4/0x260 [ 1341.889857][T19107] ? __pfx_task_work_run+0x10/0x10 [ 1341.889898][T19107] exit_to_user_mode_loop+0xef/0x4e0 [ 1341.889929][T19107] ? rcu_is_watching+0x15/0xb0 [ 1341.889952][T19107] do_syscall_64+0x2c1/0xf80 [ 1341.889977][T19107] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1341.889999][T19107] ? trace_irq_disable+0x37/0x100 [ 1341.890024][T19107] ? clear_bhb_loop+0x60/0xb0 [ 1341.890051][T19107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1341.890074][T19107] RIP: 0033:0x7f11ece0f749 [ 1341.890094][T19107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1341.890116][T19107] RSP: 002b:00007ffc1e9da058 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1341.890140][T19107] RAX: 0000000000000000 RBX: 00007f11ed067da0 RCX: 00007f11ece0f749 [ 1341.890157][T19107] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1341.890173][T19107] RBP: 00007f11ed067da0 R08: 0000000000002124 R09: 000000051e9da34f [ 1341.890190][T19107] R10: 00007f11ed067cb0 R11: 0000000000000246 R12: 000000000014783b [ 1341.890207][T19107] R13: 00007f11ed066090 R14: ffffffffffffffff R15: 00007ffc1e9da170 [ 1341.890236][T19107] [ 1341.890837][T19107] Kernel Offset: disabled