last executing test programs: 9.756903632s ago: executing program 3 (id=3829): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xf}, @ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1138}}, 0xc000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014004000000035c1f61c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cee0090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc5", 0xb2}], 0x1}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb2, 0xb2, 0x8, [@float={0xc, 0x0, 0x0, 0x10, 0x10}, @enum={0x5, 0x1, 0x0, 0x6, 0x4, [{0x4, 0x100}]}, @union={0x6, 0x3, 0x0, 0x5, 0x1, 0x1, [{0x7, 0x4, 0x1}, {0x2, 0x5, 0x8001}, {0x0, 0x4, 0x6}]}, @enum64={0x10, 0x1, 0x0, 0x13, 0x0, 0x1, [{0x6, 0x4}]}, @fwd={0x5}, @restrict={0x10, 0x0, 0x0, 0xb, 0x5}, @datasec={0xa, 0x3, 0x0, 0xf, 0x2, [{0x4, 0x10000, 0x6}, {0x1, 0x53f5, 0x100}, {0x1, 0x2, 0xc}], "81d1"}]}, {0x0, [0x5f, 0x0, 0x2e, 0x61, 0x2e, 0x5f]}}, &(0x7f0000000640)=""/160, 0xd4, 0xa0, 0x1, 0xfffffff8}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000001"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)="ef16", 0x0}, 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x20, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}, @nested={0x4, 0x2}]}, 0x20}}, 0xc000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 9.647310788s ago: executing program 3 (id=3830): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) r0 = getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) gettid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) 8.605445286s ago: executing program 3 (id=3831): openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0xc8b, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = fsmount(r0, 0x0, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r5, &(0x7f0000000140)={[{0x2b, 'cpu'}]}, 0x5) ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000040)={0x2, 0x991, &(0x7f0000000940)="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"}) 7.532700937s ago: executing program 2 (id=3833): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f00000002c0)="f6eb094549002060009b8538a4ba", 0x0, 0x806, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001"], 0xc4}}, 0x20050890) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v\x00'], 0x1c}}, 0x4000004) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x4e, &(0x7f00000005c0)={@multicast, @random="aa08a9d9da08", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0xc2, 0x0, 0x0, 0xfffe}}}}}}}, 0x0) 7.359341328s ago: executing program 1 (id=3834): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000000)={0x3, 0x0, [{0x0, 0x0, 0x4, 0x9, 0x4, 0x0, 0xb}, {0xb, 0x5, 0x0, 0xd, 0x6, 0x0, 0x8000009}, {0x80000000, 0xffffffff, 0x4, 0x6, 0x3, 0x40007, 0x1000}]}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x96ca, 0x1000000000, 0x5, 0x3, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x0, 0x0, 0x3, 0x2, 0xffffffffffffffff], 0x10000, 0x202}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000140)={0x5, 0x0, [{0x1, 0x2, 0x1, 0x0, @msi={0x5, 0x4ec6}}, {0x9, 0x3, 0x1, 0x0, @adapter={0xd4ff}}, {0x0, 0x0, 0x0, 0x0, @msi}, {0x0, 0x0, 0x0, 0x0, @msi}, {0x0, 0x0, 0x0, 0x0, @msi}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000004c0)={0xb5, 0x0, [{0x47d60022, 0xf88690f3, 0xec7f29e1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x200}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xa52}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0xc0011023}]}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x80000000, 0x4, 0xc2, 0x4f, 0x40, 0x44, 0x80, 0x3, 0x3, 0x44, 0x8, 0xff, 0x100000000009}, {0xb, 0xa6f2, 0x6, 0x8, 0x9, 0xff, 0x4, 0x3, 0xa, 0x13, 0x7, 0x6, 0x1}, {0x1ff, 0x1, 0xd, 0x10, 0x25, 0x9, 0x0, 0xfb, 0x7, 0x15, 0x0, 0x2, 0x200000000004}], 0x9}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x1067a, 0x6, 0xf3b8, 0x0, 0x1000, 0x400, 0x4002004c4, 0x1000, 0xfffffffffffffffd, 0x97, 0x10, 0x0, 0x3, 0x4], 0xeeee8000, 0x400}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.236742541s ago: executing program 2 (id=3835): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x13, 0x4}) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) r2 = mq_open(&(0x7f0000000040)='a\x7f\x00\xca\x06x\a\x00\x00\x00\x00\x00g\xd4\xb8\xcd\x18\xbb', 0xc3, 0x48, 0x0) mq_timedreceive(r2, 0x0, 0xfffffffffffffee3, 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000340)={0x0, 0x80000}) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$DVB_DEMUX_DMX_REMOVE_PID(0xffffffffffffffff, 0x40026f34, &(0x7f0000000040)=0x1) close_range(r0, 0xffffffffffffffff, 0x0) 6.434936213s ago: executing program 2 (id=3836): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000140)=""/43, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffb2, 0x0, 0x0, 0x10, 0x5}, 0x94) 6.121204623s ago: executing program 2 (id=3837): socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xfffe, 0x8, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) ptrace$setsig(0x4203, 0x0, 0x10, &(0x7f0000000200)={0x3e, 0x6, 0xfffffffb}) 6.114945252s ago: executing program 1 (id=3838): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xf}, @ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1138}}, 0xc000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014004000000035c1f61c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cee0090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc5", 0xb2}], 0x1}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8e, 0x8e, 0x8, [@float={0xc, 0x0, 0x0, 0x10, 0x10}, @enum={0x5, 0x1, 0x0, 0x6, 0x4, [{0x4, 0x100}]}, @enum64={0x10, 0x2, 0x0, 0x13, 0x0, 0x1, [{0x9, 0x3, 0x8}, {0x6, 0x4}]}, @fwd={0x5}, @restrict={0x10, 0x0, 0x0, 0xb, 0x5}, @datasec={0xa, 0x3, 0x0, 0xf, 0x2, [{0x4, 0x10000, 0x6}, {0x1, 0x53f5, 0x100}, {0x1, 0x2, 0xc}], "81d1"}]}, {0x0, [0x5f, 0x0, 0x2e, 0x61, 0x2e, 0x5f]}}, &(0x7f0000000640)=""/160, 0xb0, 0xa0, 0x1, 0xfffffff8}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000001"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)="ef16", 0x0}, 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x20, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}, @nested={0x4, 0x2}]}, 0x20}}, 0xc000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 5.651448068s ago: executing program 2 (id=3839): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) r0 = getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) gettid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) 5.515977508s ago: executing program 3 (id=3840): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() ioprio_get$pid(0x1, r0) bind$unix(0xffffffffffffffff, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0xc67e7be33bfcd098, &(0x7f0000000180)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) fanotify_init(0x79, 0x101000) syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_mcast\x00') fanotify_init(0x8, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) 4.459258233s ago: executing program 2 (id=3841): r0 = syz_open_dev$dvb_demux(0x0, 0x0, 0x41) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) r1 = mq_open(&(0x7f0000000040)='a\x7f\x00\xca\x06x\a\x00\x00\x00\x00\x00g\xd4\xb8\xcd\x18\xbb', 0xc3, 0x48, 0x0) mq_timedreceive(r1, 0x0, 0xfffffffffffffee3, 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000340)={0x0, 0x80000}) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r0, 0x40026f34, &(0x7f0000000040)=0x1) 4.452920071s ago: executing program 0 (id=3842): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_emit_ethernet(0x27, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}, @void, {@arp={0x806, @generic={0x205, 0x9200, 0x6, 0x4, 0x9, @remote, "0f0f8c26", @broadcast, "e0"}}}}, &(0x7f00000000c0)={0x5da7, 0x3, [0xbab, 0xd10, 0xdf3, 0x319]}) syz_open_dev$usbmon(&(0x7f0000000140), 0x8000000000, 0x40a01) r0 = syz_io_uring_setup(0x88d, &(0x7f0000000300)={0x0, 0xd54b, 0x8, 0xfefffffd, 0x1a6}, &(0x7f0000000000)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x4, 0x0, 0x0) syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001140)=ANY=[@ANYBLOB], 0x50) 4.44458247s ago: executing program 1 (id=3843): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="b70200000d000000bfa300000000000005000000000000007a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf27fb6d2c643db7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27106e225b7937f02008b5e5a076d83923dd29c034055b67d5b310efcfa89147a7fb0a93d035f2f206d2ef831ab7ea0c34f17e3ad6eecbb622003b538dfd8e012e79578e51bc53099e90f4580d7be3e8c254a5cba117cbdb9cd38bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e6a9f65f1328d6704902cbe7bc04b82d2789cb132b8667c214733a18c8b6619f28d996d60a17e3c184b751c51160100000000000080148b9a31ee8dc8b544f3c4a532e60a0ac346dfebd31a08060000000200000000000000334d83239dd20100008000000000d858e8327ef01fb6c86acac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08a406f99f7b1e1ad828267d4eadd3964663e085354133f7130856f756436303767d2e24f29e5dad9796edb697a6ea0183babc190ae2ebf8aad34732181feb28cb0bae7c34dc5e7c805210600000000000000c3dec04b25df45d4f71ab158c36657b7218baa07a99bd50499ccc421ace5e845885efb5b9964e4beba3da8223fe5308e4e65ee93e107000000f8ddebf70132a4d01776839b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b1282dc51bb0015982730711c599e1c72ffa11ed8be1a6830d7507005154c46bd3ca96318c570f0721fc7aa2a5836ba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf70a9d1cdac944779dc08a705414888700a30e2366c6a06b3367a389ca39059787790017b0689a173db9c24db65c1e00015c1d093dab18fd0699fe3304000000323e9c7080397bc49d70c060d57bc88fbe3bbaa058b040362ab926150363fb099408885afc2bf9a46a076b7babfcddeff8c35030669ea69f5e4be1b8e0d6697e97186f9ae97d5670dba6623279f73db9dec75070cd9ab0fda6b069ef6d2857ca3e4e6068f1bf710d133d541da86e0477e4a6cc999dc21c3ef408e6b178e7c9f274d7fafc8d757d33dfa35aa2b2ff7f9a7d365e63845f3e1092f8dde8af3904ea0f4b82649b83ed4fa0f873339c4cadecc13219ba7518aa4f7db34ead13484742067ab743c1d82a5687f2ed690000010000000000000000000000000000000000000099d4fa0000000000003f0ecdc7c82e72919c91d2039afe17e95edef8ba72205beff7771bcb293747b88486cacee403000000a2919a4b09e168e4e4d5ff2ed893f2e314679fa69fc7e0cf761f918725704a01c56009a9f748e5aaf30a10bd8c409b1870c1f75e26b45264e3d3f8e0048e55ae289c2f884d0766cddc76eb7f601110ff39053c262279f4ef00fbdb8c328615a9ec84f27a9f3938ae736138b8c1ec220c1540bf3d162dc1c27fa30f0dc60b9f257db5d1c7ed2efce676a93110904d5e055af44664b53c764d61443f73552195c7ccfbf9f03c44432eaa3b7501d4239354da8de21eada75d3a3afb2c76ff0700007976694b6a0f0e946766f57544ff52cef0dd811bec4e3c0a30f2d7d19d26d201721b8eded3bc475958dd498ee2b2d6146e33fc0de1dc2e0516ac565ddb1d4ae89e671282a2d3066ac968c7d7d7db195f255b1b4a85eb9ee0a3b68c9e209756623adf685dd715d68ed1274b4d5502f512493af8f98c615cac3666c58f785c3f758be352a71871d5c081197d37980e4f4e26b5476fb20407ff7098b7174bef66fa03a99b5c0c20b378065fac4ef9ac2d0d804b9400000060e5d3f1749f6aecf69ba83a71caa9bdddc679f1b826f74b6563a4be1fd82b73c8c2bc65f63982b951fb058fd3c7b6341c4580376b2c16bd94d2da66059de81abfa15eeeae3b0ba38d8bb1bf032c73f1285e21fff5a1d138e061b1dc7bbda199b5fab8e0719e9cd69b47dcb52b0be6a3a73afdf328132e1d4f21065716be0c53a23940d07188b015fa341dbc92231c8b5e5717eac184f46c9f61b69f55cd2231bcf821052429a1f250e8b734be0605a15f25923d599544b319319ff0a32621019347df460a098119a6f47eb1bac47946d7a009cbc6ec74c19a93cc7c7138b28c95270116181fd5f5533d3c58104d2ad0e10d3663488e664401453f22f0d76d2162635365258af61ae1f46f4a7866f302d91e3f7c2781f602220522e84602a939a8d5e4137ae31ccd397404dc72e06715a6503d4d865182803ee6725da7293b23daeebefd6fce7411c9624a7e8d5ba5a13e1c32adc4f3274497c6882a72475e4280a4d9a47c003c6ed3071330c58145be813a10788a720a6b5a498ca2b42496c479a0a71e2f6f9bad8c84bc6be20281bde0b348cf2c60538a505ad4a0510eebb023e4954c9eb6cd70627f5c03d867dbf3ad5d1f1dc852064dd0efafc3df20ec8faf3d194db76127f88f284fa1b71ab964fdd2474471da76373e65e9a8bf844bdfdd348bc7d00c4c7e7abc231f8cde79b7a6c5aafe954b8ba37818e40c14b36f2d7c23f9f614576b689436fef2f27f8b1e756e00262e22bca49c43fd73e7e99b2fa44a8c1df7ffffff735ad6c5fabf082e0df0f8ba7e24272165f2f5b28230c095162b82ceaeaae9b1713b5f2ee68e2b53d44bd84bf6960157e96bbb96b5e10d66c87e7a9a7d53c281d88ebb175a4dbb82130e6870980e47913110f091d21760d985afd3163f2e6880682432f9b3b97d57a9f980edfa1116a3d04d58872a07d6a7e12db673acd2f7b8988d833e71943fe2c1c65a3cf355e5b91114052f8a398d8e10c96b955c56b55bfd3ecf0af694c71a03f2996c15b1ba971de1cb9c7e6a0000000000000014783ef54c51199317413f98dca8ff3df3572a7d9ef5f6103997f1f9e4b0c3970bda50f6c0af58dbd6c031b1a5a7512c58965c514adfa17d31429c68db50a93d88199defd3b4625fea426ff9293a28a544a6a9e24d192d67a1b3c6b14c4ec6d164e902ce4913843d65d841973468729ea12bf6d3499036dbb66718f3497855c3baa6cc07c0fa388ec9df0617c1a28ef5a595ee267a76175b8a057e6efaf4fefe46def451f2858fe71a53e77b1a44e98843bb3a40102da3703dfb9f61bdcea2fb810b32d52e2157a150a63ea6135d1cf6f864c2e68884d7245bc5d61dc5a114d10ffb2200040000fc1e3865d17d128306d1b81884a934cb0000000000d367000098a4526e6468987dbc63bff7590eb388afaba43d811996333eef7e9f472bee293f0c40d434b8be07cbd52325296e22802493edb5c590ad208bac683a8b2d4c9d2d57ff846ae8c422e0b28546671f11d8157bb762c91f3fbcca8e21589c92446ae65d408c0637ffcc2d44b615ce003dd1e12b085e186d069a55c2e96efbe5024d61a56a36d988c0f530043a6cd72af0fcd540a9d4e293690c5e697b3a1480e46df5371bca1cfb28a57c1b3c956ec81397e81fbf870a673804220423f52ad8178b9fd04bff816e00000000000000000000000000000000000000000079aaf19bd1e18f582aac5b83d76bd57297512fdcdad18bcf2455bc80394d8f34e2ef84733038f4b6ef516d7baa99f24f2f100fc46aec9dc19b30fe9966b7ae563b6459d86fd3b4c7173f06387517e4189f3fb09c069e20220354b054f2391efe55a0cc7f738b3987ae033ceabddec65ec31f98c7e0858e8d411087889964b8fb3c31f74fa7b2e6e1c1d84a46d8be8afff1ac67eb2da30294d4a0f89978d4e2137319b6448da45bd00eb23aa5be1d566782b5a4aa291a854a4932bcbf472fd1175b521edb1763bb7dae4a124b0006e2ce4799519b3dbd3c0109b17fe2b4b87f6ad4b7176c9c1959669ef42cfce81fbc6dcdc7f9bde1a66c0b3cf9329bfecf0217bda1b72924ee9d90a3bd0be833f206244b5ba0648309018da5442ebd22bca0363183aae9d38f80638f52015cab5a8d772f9b92cb2f286783fa976f7d215136cae0b0b0539dc7dbd56035a69807514c732763f542f10401e65368b821b584fe2f82c94b2f5930246800000000000000000000000000000000000000c8ed77d8ac9f28a2e8f205900241ec8872fe3ecdf73abfc4024298a69649e17f3fe5ebba1e17f2f280e6d3f094cd3448700c5ee102b5d1b04f08ab2e5272990646eca26a62431e8c942ea2c0c621b4821eb5beceee6d53468852159452cf47aead473a8638a4d1ce2d4c6df1074e8cb3ec16149e6b4b7ec1a9aa1b63f41d08afd3d885b98330e25eedaaf5f361b2e81ce0c52ee84a2b340afdc59b177921e2f2a99132b82ed3291196038fe9a4f5a5dc734788c71bf46222d266a48628774c87b88bf3dcbea4574a87726345587e1e233fd4117063d183f477cc53c52a3fafcb998a96cf9f61cdd9ffa82d648880552ac506811accffc85ca34b262ed983d4645f4657522ed32b278891c26d5e70d41f9a5c8df8dc163fd84a81af0020a10fe53ce940d350d62b526f198620abdad179a273682175da1d9d82fde7eb9a45b566e78904238d00908b5876b4ebfca376d631b9b0caf3f1ef32ae87507aace4715efaf840ebda28e741a8b6b29eed5861168b4e1b3842f6db4443974dd0f0d4ceed9ca62fd2a839a8150335dc2b9640825b83c8bf4f931a51b093bf2dc84809af7c14f04b58d64e4f852bc49cf1126567e11f61774559bdbcc500000000000000000000000000eab10c8c592cb6f1ebccd9eb16c155a0666189eb16cea09f164363456645c9b7c168bc214615a7e94ff3d53f85c6396c42050f3205cef3009458f33949efa6a583d87795448b8b21ab6a7ca4bd8b0da30dee0af8b3a0f3cfd0ad9a8e7819b2057e2e5d8b453b6f743f8fc4dee677658958c4d4663ddcdfd0fc44e996665ab5586a4eb40a959fb0dababa05e776c29cf2443ad1d2fa0920288db88e645033ae1a4357078810d20bd93b8194214554c3f8c6efd61bc40000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f00000002c0)="f6eb094549002060009b8538a4ba", 0x0, 0x806, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001"], 0xc4}}, 0x20050890) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v\x00'], 0x1c}}, 0x4000004) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x4e, &(0x7f00000005c0)={@multicast, @random="aa08a9d9da08", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0xc2, 0x0, 0x0, 0xfffe}}}}}}}, 0x0) 4.067357996s ago: executing program 0 (id=3844): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x13, 0x4}) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, 0x0) r2 = mq_open(&(0x7f0000000040)='a\x7f\x00\xca\x06x\a\x00\x00\x00\x00\x00g\xd4\xb8\xcd\x18\xbb', 0xc3, 0x48, 0x0) mq_timedreceive(r2, 0x0, 0xfffffffffffffee3, 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000340)={0x0, 0x80000}) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r0, 0x40026f34, &(0x7f0000000040)=0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3.408121338s ago: executing program 1 (id=3845): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000140)=""/43, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffb2, 0x0, 0x0, 0x10, 0x5}, 0x94) 3.32204797s ago: executing program 0 (id=3846): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x96ca, 0x1000000000, 0x5, 0x3, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x0, 0x0, 0x3, 0x2, 0xffffffffffffffff], 0x10000, 0x202}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000140)={0x5, 0x0, [{0x1, 0x2, 0x1, 0x0, @msi={0x5, 0x4ec6}}, {0x9, 0x3, 0x1, 0x0, @adapter={0xd4ff}}, {0x0, 0x0, 0x0, 0x0, @msi}, {0x0, 0x0, 0x0, 0x0, @msi}, {0x0, 0x0, 0x0, 0x0, @msi}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000004c0)={0xb5, 0x0, [{0x47d60022, 0xf88690f3, 0xec7f29e1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x200}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xa52}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0xc0011023}]}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x80000000, 0x4, 0xc2, 0x4f, 0x40, 0x44, 0x80, 0x3, 0x3, 0x44, 0x8, 0xff, 0x100000000009}, {0xb, 0xa6f2, 0x6, 0x8, 0x9, 0xff, 0x4, 0x3, 0xa, 0x13, 0x7, 0x6, 0x1}, {0x1ff, 0x1, 0xd, 0x10, 0x25, 0x9, 0x0, 0xfb, 0x7, 0x15, 0x0, 0x2, 0x200000000004}], 0x9}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x1067a, 0x6, 0xf3b8, 0x0, 0x1000, 0x400, 0x4002004c4, 0x1000, 0xfffffffffffffffd, 0x97, 0x10, 0x0, 0x3, 0x4], 0xeeee8000, 0x400}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.185355459s ago: executing program 3 (id=3847): socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0xfffe, 0x8, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) ptrace$setsig(0x4203, r3, 0x10, &(0x7f0000000200)={0x3e, 0x6, 0xfffffffb}) 2.939195384s ago: executing program 0 (id=3848): openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0xc8b, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = fsmount(r0, 0x0, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r5, &(0x7f0000000140)={[{0x2b, 'cpu'}]}, 0x5) ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000040)={0x2, 0x991, &(0x7f0000000940)="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"}) 2.915932489s ago: executing program 1 (id=3849): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) r0 = getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) gettid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) 1.874278757s ago: executing program 3 (id=3850): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000010000000000000000", @ANYBLOB="000000000000000066000200000000041800"/31], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) clock_gettime(0x0, &(0x7f0000000300)) 554.615683ms ago: executing program 1 (id=3851): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xf}, @ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1138}}, 0xc000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014004000000035c1f61c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cee0090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc5", 0xb2}], 0x1}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8e, 0x8e, 0x8, [@float={0xc, 0x0, 0x0, 0x10, 0x10}, @enum={0x5, 0x1, 0x0, 0x6, 0x4, [{0x4, 0x100}]}, @enum64={0x10, 0x2, 0x0, 0x13, 0x0, 0x1, [{0x9, 0x3, 0x8}, {0x6, 0x4}]}, @fwd={0x5}, @restrict={0x10, 0x0, 0x0, 0xb, 0x5}, @datasec={0xa, 0x3, 0x0, 0xf, 0x2, [{0x4, 0x10000, 0x6}, {0x1, 0x53f5, 0x100}, {0x1, 0x2, 0xc}], "81d1"}]}, {0x0, [0x5f, 0x0, 0x2e, 0x61, 0x2e, 0x5f]}}, &(0x7f0000000640)=""/160, 0xb0, 0xa0, 0x1, 0xfffffff8}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000001"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)="ef16", 0x0}, 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x20, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}, @nested={0x4, 0x2}]}, 0x20}}, 0xc000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 422.062274ms ago: executing program 0 (id=3852): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_emit_ethernet(0x27, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}, @void, {@arp={0x806, @generic={0x205, 0x9200, 0x6, 0x4, 0x9, @remote, "0f0f8c26", @broadcast, "e0"}}}}, &(0x7f00000000c0)={0x5da7, 0x3, [0xbab, 0xd10, 0xdf3, 0x319]}) syz_open_dev$usbmon(&(0x7f0000000140), 0x8000000000, 0x40a01) r0 = syz_io_uring_setup(0x88d, &(0x7f0000000300)={0x0, 0xd54b, 0x8, 0xfefffffd, 0x1a6}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x4, 0x0, 0x0) syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001140)=ANY=[@ANYBLOB], 0x50) 0s ago: executing program 0 (id=3853): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000e00)=0x7) r0 = getpid() timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=r0}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x7, 0x0) syz_clone(0x1222080, 0x0, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) clock_nanosleep(0x2, 0x0, &(0x7f0000000000)={r3, r4+60000000}, 0xfffffffffffffffe) unshare(0x20060400) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000800)={r5, &(0x7f00000006c0), 0x0}, 0x20) kernel console output (not intermixed with test programs): attribute type 1 has an invalid length. [ 634.038409][T11662] __nla_validate_parse: 3 callbacks suppressed [ 634.038427][T11662] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1878'. [ 634.060552][T11663] overlayfs: failed to clone lowerpath [ 634.069695][T11663] overlayfs: failed to clone lowerpath [ 634.077011][T11662] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1878'. [ 634.764099][T11662] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1878'. [ 634.888506][T11662] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1878'. [ 635.232961][T11671] netlink: 'syz.3.1883': attribute type 1 has an invalid length. [ 635.688099][T11688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1889'. [ 635.706702][T11688] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1889'. [ 635.718499][T11688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1889'. [ 635.734824][T11688] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1889'. [ 635.756701][T11689] overlayfs: failed to clone lowerpath [ 635.852831][T11690] overlayfs: failed to clone lowerpath [ 636.825159][T11703] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1895'. [ 636.989948][T11712] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1898'. [ 637.773652][T11726] overlayfs: failed to clone lowerpath [ 639.914062][T11749] __nla_validate_parse: 4 callbacks suppressed [ 639.914075][T11749] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1910'. [ 640.626515][T11763] overlayfs: failed to clone lowerpath [ 642.513045][T11783] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1921'. [ 642.803576][T11794] overlayfs: failed to clone lowerpath [ 648.180424][T11838] overlayfs: failed to clone lowerpath [ 648.336052][T11840] 9pnet_fd: Insufficient options for proto=fd [ 649.243931][T11850] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1940'. [ 650.433011][T11867] 9pnet_fd: Insufficient options for proto=fd [ 650.881785][T11877] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1951'. [ 652.042081][T11884] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1954'. [ 652.078662][T11886] overlayfs: failed to clone lowerpath [ 652.142365][T11884] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1954'. [ 654.303906][T11903] 9pnet_fd: Insufficient options for proto=fd [ 654.647907][T11910] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1960'. [ 656.576178][T11929] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1969'. [ 656.660002][T11929] bridge0: entered promiscuous mode [ 656.679861][T11929] macvtap1: entered promiscuous mode [ 656.700000][T11929] macvtap1: entered allmulticast mode [ 656.729671][T11929] bridge0: entered allmulticast mode [ 656.768543][T11931] 9pnet_fd: Insufficient options for proto=fd [ 657.656116][T11938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1971'. [ 657.665556][T11938] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1971'. [ 659.265136][T11953] overlayfs: failed to clone lowerpath [ 661.462989][T11959] netlink: 'syz.2.1978': attribute type 10 has an invalid length. [ 661.494000][T11963] 9pnet_fd: Insufficient options for proto=fd [ 661.500901][T11959] syz_tun: entered promiscuous mode [ 661.576249][T11959] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 662.869677][T11980] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1984'. [ 662.878693][T11980] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1984'. [ 664.941182][T11992] overlayfs: failed to clone lowerpath [ 665.038762][T11993] overlayfs: failed to clone lowerpath [ 666.178270][T12005] tipc: Failed to remove unknown binding: 66,1,1/0:3606023042/3606023044 [ 666.192782][T12005] tipc: Failed to remove unknown binding: 66,1,1/0:3606023042/3606023044 [ 666.679743][T12011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1995'. [ 666.688924][T12011] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1995'. [ 671.575807][T12052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2009'. [ 671.584992][T12052] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2009'. [ 674.789783][T12090] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2024'. [ 674.798772][T12090] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2024'. [ 676.462248][T12102] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2029'. [ 678.597815][T12125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2036'. [ 678.606941][T12125] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2036'. [ 679.628668][T12130] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2041'. [ 679.738546][T12134] netlink: 'syz.0.2030': attribute type 1 has an invalid length. [ 679.776450][T12134] netlink: 'syz.0.2030': attribute type 4 has an invalid length. [ 680.882539][T12147] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2045'. [ 680.893285][T12147] bridge_slave_1: left allmulticast mode [ 680.899163][T12147] bridge_slave_1: left promiscuous mode [ 680.905188][T12147] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.246488][T12147] bridge_slave_0: left allmulticast mode [ 681.278262][T12147] bridge_slave_0: left promiscuous mode [ 681.287824][T12147] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.408574][T12147] bridge0 (unregistering): left promiscuous mode [ 683.445085][T12147] team0: Port device bridge0 removed [ 683.653185][T12159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2048'. [ 683.662159][T12159] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2048'. [ 686.493282][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.500071][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 689.216788][T12218] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2065'. [ 696.239665][T12283] overlayfs: failed to clone lowerpath [ 696.327952][T12285] overlayfs: failed to clone lowerpath [ 699.181799][T12302] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2095'. [ 699.209263][T12302] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2095'. [ 699.240455][T12302] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2095'. [ 699.272780][T12302] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2095'. [ 700.352320][T12321] overlayfs: failed to clone lowerpath [ 700.406279][T12320] overlayfs: failed to clone lowerpath [ 703.234539][T12354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2113'. [ 703.282880][T12354] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2113'. [ 703.332128][T12354] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 703.341124][T12354] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 703.351181][T12354] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 703.360210][T12354] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 703.472447][T12356] netlink: 'syz.2.2114': attribute type 1 has an invalid length. [ 703.581510][T12354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2113'. [ 703.612693][T12354] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2113'. [ 705.613672][T12373] overlayfs: failed to clone lowerpath [ 705.643284][T12373] overlayfs: failed to clone lowerpath [ 706.379066][T12386] netlink: 'syz.3.2124': attribute type 1 has an invalid length. [ 708.023415][T12397] ip6_vti0 speed is unknown, defaulting to 1000 [ 708.651716][T12397] lo speed is unknown, defaulting to 1000 [ 709.957330][T12413] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2131'. [ 709.979430][T12413] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2131'. [ 710.076603][T12417] netlink: 'syz.3.2134': attribute type 1 has an invalid length. [ 713.077659][T12446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2142'. [ 713.092138][T12446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2142'. [ 713.641646][T12450] netlink: 'syz.1.2144': attribute type 1 has an invalid length. [ 713.825030][T12454] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2146'. [ 714.372083][T12471] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2151'. [ 714.406306][T12471] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2151'. [ 715.197960][T12484] trusted_key: encrypted_key: key user:syz not found [ 716.054661][T12489] netlink: 'syz.1.2157': attribute type 1 has an invalid length. [ 716.338096][T12503] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2163'. [ 716.359173][T12503] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2163'. [ 716.618127][T12514] netlink: 'syz.3.2170': attribute type 1 has an invalid length. [ 718.821663][T12532] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2175'. [ 718.840822][T12532] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2175'. [ 718.980190][T12539] netlink: 'syz.2.2179': attribute type 1 has an invalid length. [ 719.557299][T12555] overlayfs: failed to clone lowerpath [ 719.594237][T12555] overlayfs: failed to clone lowerpath [ 720.983827][T12565] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2187'. [ 721.022531][T12565] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2187'. [ 721.638458][T12587] overlayfs: failed to clone lowerpath [ 721.656850][T12587] overlayfs: failed to clone lowerpath [ 724.414673][T12618] overlayfs: failed to clone lowerpath [ 724.435059][T12618] overlayfs: failed to clone lowerpath [ 725.327291][T12628] batadv_slave_1: entered promiscuous mode [ 725.373963][T12627] batadv_slave_1: left promiscuous mode [ 725.598395][T12639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2216'. [ 725.624448][T12639] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2216'. [ 725.644607][T12639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2216'. [ 725.659977][T12639] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2216'. [ 728.842388][T12678] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2229'. [ 728.854545][T12678] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2229'. [ 728.868739][T12678] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2229'. [ 728.878610][T12678] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2229'. [ 729.082408][T12682] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 729.730481][T12701] trusted_key: encrypted_key: key user:syz not found [ 731.254643][T12707] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2241'. [ 731.271256][T12707] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2241'. [ 731.281440][T12707] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2241'. [ 731.290655][T12707] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2241'. [ 735.798606][T12780] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2264'. [ 752.294340][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.301178][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 759.793189][T13002] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2344'. [ 761.797288][T10332] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 761.823925][T10332] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 761.840122][T10332] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 761.863730][T10332] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 761.874666][T10332] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 761.882407][T10332] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 761.943473][T13006] ip6_vti0 speed is unknown, defaulting to 1000 [ 762.114245][T13006] lo speed is unknown, defaulting to 1000 [ 762.534639][T12638] infiniband syz1: set down [ 762.598700][T12638] syz_tun (unregistering): left allmulticast mode [ 762.614122][T12638] syz_tun (unregistering): left promiscuous mode [ 762.634009][T12638] bridge0: port 3(syz_tun) entered disabled state [ 763.601340][ T5829] infiniband syz1: ib_query_port failed (-19) [ 763.983290][ T6656] smc: removing ib device syz1 [ 764.065944][T10332] Bluetooth: hci4: command tx timeout [ 767.164201][T10332] Bluetooth: hci4: command tx timeout [ 767.204768][T13039] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2353'. [ 768.983254][T13006] chnl_net:caif_netlink_parms(): no params data found [ 769.981235][T10332] Bluetooth: hci4: command tx timeout [ 770.101819][T13065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2362'. [ 770.181343][T13065] team_slave_0: entered promiscuous mode [ 770.187297][T13065] team_slave_1: entered promiscuous mode [ 770.241717][T13065] vlan2: entered promiscuous mode [ 770.246904][T13065] team0: entered promiscuous mode [ 770.657201][T13006] bridge0: port 1(bridge_slave_0) entered blocking state [ 770.699874][T13006] bridge0: port 1(bridge_slave_0) entered disabled state [ 770.722026][T13006] bridge_slave_0: entered allmulticast mode [ 770.813510][T13006] bridge_slave_0: entered promiscuous mode [ 770.865465][T13006] bridge0: port 2(bridge_slave_1) entered blocking state [ 770.925558][T13006] bridge0: port 2(bridge_slave_1) entered disabled state [ 770.975298][T13006] bridge_slave_1: entered allmulticast mode [ 771.061181][T13006] bridge_slave_1: entered promiscuous mode [ 771.389183][T13073] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2364'. [ 771.968211][T13078] lo: entered allmulticast mode [ 772.095580][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 772.126336][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.161783][T13082] 9pnet_fd: Insufficient options for proto=fd [ 772.197623][T10332] Bluetooth: hci4: command tx timeout [ 772.241094][T13006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 772.309328][T13006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 772.360199][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 772.384981][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.497902][T13006] team0: Port device team_slave_0 added [ 772.542665][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 772.555026][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.582448][T13006] team0: Port device team_slave_1 added [ 773.783938][T13006] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 773.799865][T13006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 773.848372][T13006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 773.878685][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 773.891282][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 773.911923][T13006] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 773.934959][T13006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 773.999135][T13006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 775.057427][T13006] hsr_slave_0: entered promiscuous mode [ 775.075355][T13006] hsr_slave_1: entered promiscuous mode [ 775.090298][T13006] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 775.410477][T13006] Cannot create hsr debugfs directory [ 775.598360][T13107] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2373'. [ 775.884388][T13109] netlink: 'syz.1.2377': attribute type 1 has an invalid length. [ 776.545995][ T11] tipc: Left network mode [ 778.071680][ T11] bond3: (slave gretap1): Releasing active interface [ 778.123176][T13006] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 778.136618][T13006] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 778.148262][T13006] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 778.159041][T13006] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 778.987570][T13153] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2385'. [ 779.411521][T13162] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2388'. [ 779.425251][T13162] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2388'. [ 779.446229][T13162] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2388'. [ 779.564640][T13162] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2388'. [ 781.429026][T13006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 781.596376][T13006] 8021q: adding VLAN 0 to HW filter on device team0 [ 781.795217][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 781.803730][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 781.955116][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 781.962398][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 782.776704][T13188] infiniband sz1: set active [ 782.783738][T13188] syz_tun: left promiscuous mode [ 782.795061][T13188] batadv_slave_0: left promiscuous mode [ 782.807290][T13188] macvtap1: left promiscuous mode [ 783.224211][T11769] lo speed is unknown, defaulting to 1000 [ 783.481490][ T11] hsr_slave_0: left promiscuous mode [ 783.516180][ T11] hsr_slave_1: left promiscuous mode [ 783.535674][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 783.543754][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 783.591947][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 783.605460][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 783.616127][ T11] bridge_slave_1: left allmulticast mode [ 783.622545][ T11] bridge_slave_1: left promiscuous mode [ 783.630164][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 783.646343][ T11] bridge_slave_0: left allmulticast mode [ 783.652079][ T11] bridge_slave_0: left promiscuous mode [ 783.668313][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 783.719206][ T11] team0: left promiscuous mode [ 783.742677][ T11] team_slave_0: left promiscuous mode [ 783.759819][ T11] team_slave_1: left promiscuous mode [ 783.784290][ T11] veth1_macvtap: left promiscuous mode [ 783.800489][ T11] veth0_macvtap: left promiscuous mode [ 784.075846][ T11] veth1_vlan: left promiscuous mode [ 784.108992][ T11] veth0_vlan: left promiscuous mode [ 784.797080][ T11] bond10 (unregistering): Released all slaves [ 784.832849][ T11] bond9 (unregistering): Released all slaves [ 784.859743][ T11] bond8 (unregistering): Released all slaves [ 784.906577][ T11] bond7 (unregistering): Released all slaves [ 784.947801][ T11] bond6 (unregistering): Released all slaves [ 784.969189][ T11] bond5 (unregistering): Released all slaves [ 784.998582][ T11] bond4 (unregistering): Released all slaves [ 785.028087][ T11] bond3 (unregistering): (slave bridge3): Releasing active interface [ 785.187788][ T11] bond3 (unregistering): Released all slaves [ 785.217366][ T11] bond2 (unregistering): Released all slaves [ 785.510449][ T11] bond1 (unregistering): Released all slaves [ 786.621506][ T11] team0 (unregistering): Port device team_slave_1 removed [ 786.674562][ T11] team0 (unregistering): Port device team_slave_0 removed [ 786.732547][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 786.787762][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 787.155910][ T11] bond0 (unregistering): Released all slaves [ 787.269433][T13199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2399'. [ 787.280250][T13199] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2399'. [ 787.290502][T13199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2399'. [ 787.302957][T13199] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2399'. [ 787.403392][T13207] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2397'. [ 787.643710][T13006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 787.763095][T13006] veth0_vlan: entered promiscuous mode [ 787.801297][T13006] veth1_vlan: entered promiscuous mode [ 787.885549][T13006] veth0_macvtap: entered promiscuous mode [ 787.913246][T13006] veth1_macvtap: entered promiscuous mode [ 787.949693][T13006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 787.961241][T13006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.000311][T13006] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 788.000613][T13224] overlay: Unknown parameter '\' [ 788.028204][T13006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 788.041038][T13006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.053049][T13006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 788.064565][T13006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.075180][T13006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 788.096847][T13006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 788.110146][T13006] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 788.139517][T13006] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.156437][T13006] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.161609][ T27] kauditd_printk_skb: 35 callbacks suppressed [ 788.161623][ T27] audit: type=1326 audit(1772003986.734:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13225 comm="syz.0.2406" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f564f59c629 code=0x0 [ 788.167558][T13006] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.204364][T13006] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 788.355971][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 788.396790][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 788.445163][ T2985] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 788.454168][ T2985] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 788.521487][T13232] sctp: [Deprecated]: syz.2.2408 (pid 13232) Use of struct sctp_assoc_value in delayed_ack socket option. [ 788.521487][T13232] Use struct sctp_sack_info instead [ 789.616519][ T5773] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 789.648441][ T5773] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 789.657091][ T5773] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 790.026132][ T5773] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 790.180211][ T5773] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 790.241996][ T5773] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 790.261714][ T7446] bond0: (slave syz_tun): Releasing backup interface [ 790.292283][ T7446] syz_tun (unregistering): left promiscuous mode [ 790.586607][ T56] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 790.616456][ T56] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.685547][T13254] ip6_vti0 speed is unknown, defaulting to 1000 [ 790.780374][ T56] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 790.808442][ T56] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.940521][ T56] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 790.962065][ T56] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.094342][ T56] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 791.115528][ T56] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.139346][T13254] lo speed is unknown, defaulting to 1000 [ 792.447422][ T5773] Bluetooth: hci2: command tx timeout [ 793.019927][T13254] chnl_net:caif_netlink_parms(): no params data found [ 793.539150][ T56] IPVS: stopping master sync thread 11585 ... [ 795.272317][ T5773] Bluetooth: hci2: command tx timeout [ 795.289726][T13254] bridge0: port 1(bridge_slave_0) entered blocking state [ 795.296957][T13254] bridge0: port 1(bridge_slave_0) entered disabled state [ 795.321750][T13254] bridge_slave_0: entered allmulticast mode [ 795.329350][T13254] bridge_slave_0: entered promiscuous mode [ 795.351521][T13254] bridge0: port 2(bridge_slave_1) entered blocking state [ 795.361483][T13254] bridge0: port 2(bridge_slave_1) entered disabled state [ 795.370639][T13254] bridge_slave_1: entered allmulticast mode [ 795.378563][T13254] bridge_slave_1: entered promiscuous mode [ 795.651866][T13254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 795.700150][T13254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 795.940851][T13254] team0: Port device team_slave_0 added [ 795.975570][T13254] team0: Port device team_slave_1 added [ 796.111094][T13254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 796.161285][T13254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 796.294359][T13254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 796.443152][T13254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 796.461995][T13254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 796.571856][T13254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 796.716457][ T56] bond0: left promiscuous mode [ 796.721374][ T56] bond_slave_0: left promiscuous mode [ 796.726977][ T56] bond_slave_1: left promiscuous mode [ 796.805641][ T56] batadv0: left promiscuous mode [ 796.851462][ T56] hsr_slave_0: left promiscuous mode [ 796.870268][ T56] hsr_slave_1: left promiscuous mode [ 796.934835][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 796.945854][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 796.968079][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 796.975912][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 797.060650][ T56] veth1_macvtap: left promiscuous mode [ 797.074476][ T56] veth0_macvtap: left promiscuous mode [ 797.080213][ T56] veth1_vlan: left promiscuous mode [ 797.103870][ T56] veth0_vlan: left promiscuous mode [ 797.467634][ T56] bond10 (unregistering): Released all slaves [ 797.503312][ T5773] Bluetooth: hci2: command tx timeout [ 797.521915][ T56] bond9 (unregistering): Released all slaves [ 797.559984][ T56] bond8 (unregistering): Released all slaves [ 797.582253][ T56] bond7 (unregistering): Released all slaves [ 797.665486][ T56] bond6 (unregistering): Released all slaves [ 797.792796][ T56] bond5 (unregistering): Released all slaves [ 797.902720][ T56] bond4 (unregistering): Released all slaves [ 797.930653][ T56] bond3 (unregistering): Released all slaves [ 797.973256][ T56] bond2 (unregistering): Released all slaves [ 798.026495][ T56] bond1 (unregistering): Released all slaves [ 799.251750][ T56] team_slave_1 (unregistering): left promiscuous mode [ 799.269252][ T56] team0 (unregistering): Port device team_slave_1 removed [ 799.335037][ T56] team_slave_0 (unregistering): left promiscuous mode [ 799.343846][ T56] team0 (unregistering): Port device team_slave_0 removed [ 799.431657][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 799.508481][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 799.713806][ T5773] Bluetooth: hci2: command tx timeout [ 800.094136][ T56] bond0 (unregistering): Released all slaves [ 800.295951][T13254] hsr_slave_0: entered promiscuous mode [ 800.353313][T13254] hsr_slave_1: entered promiscuous mode [ 800.915198][T13417] No source specified [ 803.326795][T13429] netlink: 'syz.1.2468': attribute type 1 has an invalid length. [ 806.522535][T13254] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 806.598714][T13254] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 806.625240][T13467] netlink: 'syz.3.2476': attribute type 1 has an invalid length. [ 806.653781][T13254] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 806.684424][T13254] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 806.951531][T13254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 807.013810][T13254] 8021q: adding VLAN 0 to HW filter on device team0 [ 807.049747][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 807.057047][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 807.120156][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 807.127443][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 807.255179][T13254] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 807.308309][T13254] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 807.757584][T13497] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2484'. [ 808.525833][T13503] netlink: 'syz.1.2487': attribute type 1 has an invalid length. [ 808.853040][T13254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 809.609628][T13254] veth0_vlan: entered promiscuous mode [ 809.671020][T13254] veth1_vlan: entered promiscuous mode [ 809.826992][T13254] veth0_macvtap: entered promiscuous mode [ 809.879590][T13254] veth1_macvtap: entered promiscuous mode [ 809.947639][T13254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 810.005163][T13254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.037983][T13254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 810.081534][T13254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 810.114552][T13254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.138023][T13254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 810.159882][T13254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.175390][T13254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 810.204657][T13254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.245082][T13254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 810.281262][T13254] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.322244][T13254] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.342207][T13254] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.360712][ T5829] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 810.382014][T13254] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.397024][T13535] netlink: 'syz.1.2496': attribute type 1 has an invalid length. [ 810.572676][ T5829] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 810.595342][ T5829] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 810.624475][ T5829] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 810.644128][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 810.655081][ T5829] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.694154][ T5829] usb 4-1: config 0 descriptor?? [ 810.723717][T13532] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 810.732327][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 810.906122][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 810.925772][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 811.814078][ T5829] kone 0003:1E7D:2CED.0002: hidraw0: USB HID v1.41 Device [HID 1e7d:2ced] on usb-dummy_hcd.3-1/input0 [ 812.094699][ T5829] usb 4-1: USB disconnect, device number 2 [ 812.212219][T13568] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2409'. [ 812.689477][T13560] fido_id[13560]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 813.179589][T13576] netlink: 'syz.0.2506': attribute type 1 has an invalid length. [ 813.285273][T13573] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2504'. [ 815.146001][T13600] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2511'. [ 815.345478][T12464] bond0: (slave syz_tun): Releasing backup interface [ 815.568409][T13614] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2513'. [ 816.451975][T10332] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 816.463879][T10332] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 816.484443][T10332] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 816.571407][T10332] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 816.622387][T10332] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 816.646331][T10332] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 817.232193][T13617] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2515'. [ 817.334473][T13611] ip6_vti0 speed is unknown, defaulting to 1000 [ 817.603287][T13623] netlink: 'syz.3.2516': attribute type 1 has an invalid length. [ 817.762887][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 817.769444][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 817.786013][T13627] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 817.804487][T13627] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 817.821011][T13627] bond1: (slave ip6gre1): making interface the new active one [ 817.834785][T13627] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 817.844427][T13611] lo speed is unknown, defaulting to 1000 [ 819.782420][ T5773] Bluetooth: hci0: command tx timeout [ 819.814328][T13648] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2521'. [ 820.272236][T13657] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2523'. [ 820.470445][T13611] chnl_net:caif_netlink_parms(): no params data found [ 821.092696][T13611] bridge0: port 1(bridge_slave_0) entered blocking state [ 821.100774][T13611] bridge0: port 1(bridge_slave_0) entered disabled state [ 821.109133][T13611] bridge_slave_0: entered allmulticast mode [ 821.117154][T13611] bridge_slave_0: entered promiscuous mode [ 821.127771][T13611] bridge0: port 2(bridge_slave_1) entered blocking state [ 821.135586][T13611] bridge0: port 2(bridge_slave_1) entered disabled state [ 821.146183][T13611] bridge_slave_1: entered allmulticast mode [ 821.154377][T13611] bridge_slave_1: entered promiscuous mode [ 821.200880][T13611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 821.240502][T13611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 821.415465][T13611] team0: Port device team_slave_0 added [ 821.456601][T13611] team0: Port device team_slave_1 added [ 821.754374][T13611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 821.784602][T13611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 821.842800][T13611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 821.876752][T13611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 821.883769][T13611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 821.918416][T13611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 821.940548][ T5773] Bluetooth: hci0: command tx timeout [ 822.048519][T13611] hsr_slave_0: entered promiscuous mode [ 822.055676][T13611] hsr_slave_1: entered promiscuous mode [ 822.072259][T13611] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 822.080075][T13611] Cannot create hsr debugfs directory [ 822.391395][T13611] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 822.403441][T13611] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.547198][T13611] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 822.576186][T13611] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.103887][T13611] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 823.341360][T13611] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.661523][T13705] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2529'. [ 823.975256][T13611] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 823.999140][T13611] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.163225][ T5773] Bluetooth: hci0: command tx timeout [ 824.377220][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 824.754697][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 824.793804][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 824.821125][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 824.853599][T13611] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 824.860813][ T9] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 824.872665][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.886078][T13611] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 824.896982][ T9] usb 3-1: config 0 descriptor?? [ 825.071724][T13611] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 825.104481][T13611] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 825.512386][ T9] ath6kl: Failed to submit usb control message: -71 [ 825.524257][ T9] ath6kl: unable to send the bmi data to the device: -71 [ 825.532479][ T9] ath6kl: Unable to send get target info: -71 [ 825.565040][ T9] ath6kl: Failed to init ath6kl core: -71 [ 825.586857][ T9] ath6kl_usb: probe of 3-1:0.0 failed with error -71 [ 825.598816][ T9] usb 3-1: USB disconnect, device number 2 [ 825.993115][T13611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 826.035648][T13611] 8021q: adding VLAN 0 to HW filter on device team0 [ 826.050177][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 826.057542][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 826.197010][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 826.204331][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 826.387329][ T5773] Bluetooth: hci0: command tx timeout [ 827.173364][T13611] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 827.461203][T13745] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2538'. [ 827.509939][T13747] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2540'. [ 828.770459][T13611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 829.841416][T13611] veth0_vlan: entered promiscuous mode [ 830.037734][T13611] veth1_vlan: entered promiscuous mode [ 830.114479][T13611] veth0_macvtap: entered promiscuous mode [ 830.126248][T13611] veth1_macvtap: entered promiscuous mode [ 830.148143][T13611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 830.160480][T13611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.171715][T13611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 830.182384][T13611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.200312][T13611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 830.485160][T13611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 830.718961][T13611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.885745][T13611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 830.929510][T13611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 830.968943][T13611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 831.000662][T13611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 831.011089][T13611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 831.021622][T13611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 831.033406][T13611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 831.046103][T13611] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.054966][T13611] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.064259][T13611] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.073082][T13611] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 832.229364][ T6656] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 832.287284][ T6656] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 832.342363][ T2985] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 832.358441][ T2985] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 832.411654][T13779] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2548'. [ 833.027005][T13789] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2550'. [ 834.303422][T13794] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 837.006844][T10332] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 837.022590][T10332] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 837.038641][T10332] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 837.063149][T10332] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 837.073099][T10332] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 837.081953][T10332] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 837.176034][T13812] ip6_vti0 speed is unknown, defaulting to 1000 [ 837.207929][T13817] overlayfs: failed to resolve './file0': -2 [ 837.396932][T12765] bridge0: port 3(syz_tun) entered disabled state [ 837.462889][T13819] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2558'. [ 837.541660][T12765] syz_tun (unregistering): left allmulticast mode [ 837.556757][T12765] syz_tun (unregistering): left promiscuous mode [ 837.574542][T12765] bridge0: port 3(syz_tun) entered disabled state [ 837.832451][T13812] lo speed is unknown, defaulting to 1000 [ 838.146874][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 838.172608][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.551158][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 839.296425][T10332] Bluetooth: hci1: command tx timeout [ 839.455037][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 839.478352][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.493280][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 839.709655][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 839.736611][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.769712][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 840.000065][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 840.038193][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 840.059977][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 840.521156][T13812] chnl_net:caif_netlink_parms(): no params data found [ 841.352929][T13812] bridge0: port 1(bridge_slave_0) entered blocking state [ 841.393771][T13812] bridge0: port 1(bridge_slave_0) entered disabled state [ 841.418953][T13812] bridge_slave_0: entered allmulticast mode [ 841.429978][T13812] bridge_slave_0: entered promiscuous mode [ 841.495215][T13812] bridge0: port 2(bridge_slave_1) entered blocking state [ 841.520300][T10332] Bluetooth: hci1: command tx timeout [ 841.534231][T13812] bridge0: port 2(bridge_slave_1) entered disabled state [ 841.551587][T13812] bridge_slave_1: entered allmulticast mode [ 841.572430][T13812] bridge_slave_1: entered promiscuous mode [ 841.628633][ T6656] smc: removing ib device syz2 [ 841.634984][ T5807] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 841.734421][T13812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 841.788857][T13812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 841.850623][ T5807] usb 4-1: Using ep0 maxpacket: 8 [ 841.873995][ T5807] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 841.908609][ T5807] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 841.927874][ T5807] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 841.954288][ T5807] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 841.968542][T13812] team0: Port device team_slave_0 added [ 841.994160][ T5807] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 842.014435][ T5807] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.038553][T13812] team0: Port device team_slave_1 added [ 842.054465][T13865] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2567'. [ 842.185629][T13812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 842.201373][T13812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 842.254470][T13812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 842.300556][ T5807] usb 4-1: usb_control_msg returned -32 [ 842.306239][ T5807] usbtmc 4-1:16.0: can't read capabilities [ 842.355053][T13812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 842.397673][T13812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 842.512128][T13812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 842.907752][T13812] hsr_slave_0: entered promiscuous mode [ 842.948206][T13812] hsr_slave_1: entered promiscuous mode [ 842.956134][T13812] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 842.974602][T13812] Cannot create hsr debugfs directory [ 843.027124][T13873] rtc_cmos 00:00: Alarms can be up to one day in the future [ 843.742232][T10332] Bluetooth: hci1: command tx timeout [ 845.966185][T10332] Bluetooth: hci1: command tx timeout [ 846.109544][T13902] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2575'. [ 846.129884][ T5829] usb 4-1: USB disconnect, device number 3 [ 846.143945][T13812] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 846.205061][T13812] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 846.377051][T13812] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 846.443970][T13812] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 847.521972][T13812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 847.655301][T13812] 8021q: adding VLAN 0 to HW filter on device team0 [ 847.722893][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 847.730162][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 847.824103][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 847.831468][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 847.961052][ T49] macvlan0: left promiscuous mode [ 848.019743][ T49] dummy0: left promiscuous mode [ 848.135707][ T49] hsr_slave_0: left promiscuous mode [ 848.155764][ T49] hsr_slave_1: left promiscuous mode [ 848.396453][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 848.412009][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 848.419747][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 848.428834][ T49] bridge_slave_1: left allmulticast mode [ 848.435208][ T49] bridge_slave_1: left promiscuous mode [ 848.441644][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 849.360559][ T49] bridge_slave_0: left allmulticast mode [ 849.388677][ T49] bridge_slave_0: left promiscuous mode [ 849.424016][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 849.494924][ T49] veth1_macvtap: left promiscuous mode [ 849.520894][ T49] veth0_macvtap: left promiscuous mode [ 849.537698][ T49] veth1_vlan: left allmulticast mode [ 849.554864][ T49] veth1_vlan: left promiscuous mode [ 849.564461][ T49] veth0_vlan: left promiscuous mode [ 849.606793][T13948] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2584'. [ 849.812127][ T49] bond8 (unregistering): Released all slaves [ 849.851956][ T49] bond7 (unregistering): Released all slaves [ 849.876097][ T49] bond6 (unregistering): Released all slaves [ 849.908670][ T49] bond5 (unregistering): Released all slaves [ 849.955916][ T49] bond4 (unregistering): Released all slaves [ 850.004955][ T49] bond3 (unregistering): Released all slaves [ 850.042343][ T49] bond2 (unregistering): Released all slaves [ 850.073267][ T49] bond1 (unregistering): Released all slaves [ 851.193103][ T49] team_slave_1 (unregistering): left promiscuous mode [ 851.226677][ T49] team0 (unregistering): Port device team_slave_1 removed [ 851.329005][ T49] team_slave_0 (unregistering): left promiscuous mode [ 851.348280][ T49] team0 (unregistering): Port device team_slave_0 removed [ 851.431390][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 851.533333][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 852.194602][ T49] bond0 (unregistering): Released all slaves [ 852.306850][ T49] lo (unregistering): left allmulticast mode [ 852.483185][ T5772] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 852.717283][ T5772] usb 2-1: Using ep0 maxpacket: 8 [ 852.730740][ T5772] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 852.761905][ T5772] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 852.797559][ T5772] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 852.825109][ T5772] usb 2-1: Product: syz [ 852.831832][ T5772] usb 2-1: Manufacturer: syz [ 852.843785][ T5772] usb 2-1: SerialNumber: syz [ 853.413162][ T5772] usb 2-1: palm_os_3_probe - error -110 getting connection information [ 853.496419][ T49] IPVS: stop unused estimator thread 0... [ 853.503057][ T5772] visor: probe of 2-1:1.0 failed with error -110 [ 853.761347][T13812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 853.887895][T13812] veth0_vlan: entered promiscuous mode [ 853.905587][T13812] veth1_vlan: entered promiscuous mode [ 854.071333][T13812] veth0_macvtap: entered promiscuous mode [ 854.102828][T13812] veth1_macvtap: entered promiscuous mode [ 854.177543][T13812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 854.243685][T13812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 854.273965][T13812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 854.297831][T13812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 854.316757][T13812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 854.352257][T13812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 854.384956][T13812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 854.482323][T13812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 854.564934][T13812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 854.586316][T13812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 854.625734][T13812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 854.654561][T13812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 854.676891][T13812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 854.689417][T13812] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 854.701426][T13812] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 854.713646][T13812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 854.743546][T13812] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.758937][T13812] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.789694][T13812] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.802043][T13812] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.985099][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 854.999141][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 855.097936][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 855.120395][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 855.327571][T14021] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2596'. [ 855.416326][T14023] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2552'. [ 855.498122][T11505] usb 2-1: USB disconnect, device number 3 [ 858.732773][T14056] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2607'. [ 861.404450][T14080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2617'. [ 863.231507][ T787] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 863.662732][ T787] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 863.701868][ T787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 863.809009][ T787] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 863.822316][ T787] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 863.831942][ T787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.174876][ T787] usb 2-1: config 0 descriptor?? [ 864.755095][ T787] ath6kl: Failed to submit usb control message: -71 [ 864.779483][ T787] ath6kl: unable to send the bmi data to the device: -71 [ 864.806317][ T787] ath6kl: Unable to send get target info: -71 [ 864.814319][T14104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2628'. [ 864.824077][ T787] ath6kl: Failed to init ath6kl core: -71 [ 864.842088][ T787] ath6kl_usb: probe of 2-1:0.0 failed with error -71 [ 864.919046][ T787] usb 2-1: USB disconnect, device number 4 [ 867.721619][T14131] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2638'. [ 868.221473][T14145] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2644'. [ 868.456823][T13229] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 868.596843][T14156] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2649'. [ 868.602187][T14157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2650'. [ 868.606682][T14156] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2649'. [ 868.679733][T13229] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 868.722516][T13229] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 868.744805][T13229] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 868.777148][T13229] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 868.786813][T13229] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.830582][T13229] usb 3-1: config 0 descriptor?? [ 868.841685][ T5772] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 868.909012][T14164] Bluetooth: MGMT ver 1.22 [ 870.679784][T13229] ath6kl: Failed to submit usb control message: -110 [ 870.690310][T13229] ath6kl: unable to send the bmi data to the device: -110 [ 870.697643][T13229] ath6kl: Unable to send get target info: -110 [ 870.724031][ T5772] usb 1-1: Using ep0 maxpacket: 8 [ 870.757455][T13229] ath6kl: Failed to init ath6kl core: -110 [ 870.769120][ T5772] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 870.787821][T13229] ath6kl_usb: probe of 3-1:0.0 failed with error -110 [ 870.827973][ T5772] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 870.840476][T13229] usb 3-1: USB disconnect, device number 3 [ 870.856137][ T5772] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 870.867445][ T5772] usb 1-1: Product: syz [ 870.875505][ T5772] usb 1-1: Manufacturer: syz [ 870.880224][ T5772] usb 1-1: SerialNumber: syz [ 871.127113][ T5772] usb 1-1: Handspring Visor / Palm OS: No valid connect info available [ 871.152939][ T5772] usb 1-1: Handspring Visor / Palm OS: port 76, is for unknown use [ 871.171115][ T5772] usb 1-1: Handspring Visor / Palm OS: port 111, is for HotSync use [ 871.179501][ T5772] usb 1-1: Handspring Visor / Palm OS: Number of ports: 2 [ 871.342506][ T5772] usb 1-1: palm_os_3_probe - error -71 getting bytes available request [ 871.375129][ T5772] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 871.551521][ T5772] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 871.599487][ T5772] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 871.679675][ T5772] usb 1-1: USB disconnect, device number 2 [ 871.711185][ T5772] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 871.725216][T14181] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2660'. [ 871.759745][ T5772] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 871.804186][ T5772] visor 1-1:1.0: device disconnected [ 871.845671][T14184] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 871.905630][T14183] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2659'. [ 871.930119][T14183] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2659'. [ 872.421756][ T5772] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 872.592321][ T5772] usb 4-1: device descriptor read/64, error -71 [ 872.635149][ T5807] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 872.782911][T14197] lo speed is unknown, defaulting to 1000 [ 872.840969][ T5807] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 872.859598][ T5807] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 872.880835][ T5807] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 872.891774][ T5772] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 872.902581][ T5807] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 872.911764][ T5807] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.936383][ T5807] usb 1-1: config 0 descriptor?? [ 873.084054][ T5772] usb 4-1: device descriptor read/64, error -71 [ 873.158213][ T5807] ath6kl: Failed to submit usb control message: -71 [ 873.169342][ T5807] ath6kl: unable to send the bmi data to the device: -71 [ 873.190461][ T5807] ath6kl: Unable to send get target info: -71 [ 873.220239][ T5807] ath6kl: Failed to init ath6kl core: -71 [ 873.237073][ T5772] usb usb4-port1: attempt power cycle [ 873.240985][ T5807] ath6kl_usb: probe of 1-1:0.0 failed with error -71 [ 873.274697][ T5807] usb 1-1: USB disconnect, device number 3 [ 873.443402][T14209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2669'. [ 873.530604][T14211] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2671'. [ 873.559607][T14211] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2671'. [ 873.842574][ T5772] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 873.909593][ T5772] usb 4-1: device descriptor read/8, error -71 [ 873.996222][T14223] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 874.216600][ T5772] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 874.272893][ T5772] usb 4-1: device descriptor read/8, error -71 [ 874.421661][ T5772] usb usb4-port1: unable to enumerate USB device [ 874.743615][T14233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2680'. [ 874.881662][T14235] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2681'. [ 874.893356][T14235] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2681'. [ 875.370873][T13229] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 875.606149][T13229] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 875.633363][T13229] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 875.651553][T13229] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 875.667745][T13229] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 875.686425][T13229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.701429][T13229] usb 1-1: config 0 descriptor?? [ 875.753663][T14257] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2689'. [ 875.845875][T14259] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2691'. [ 875.855985][T14259] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2691'. [ 875.934390][T13229] ath6kl: Failed to submit usb control message: -71 [ 875.962858][T13229] ath6kl: unable to send the bmi data to the device: -71 [ 875.999927][T13229] ath6kl: Unable to send get target info: -71 [ 876.026590][T13229] ath6kl: Failed to init ath6kl core: -71 [ 876.038778][T13229] ath6kl_usb: probe of 1-1:0.0 failed with error -71 [ 876.068743][T13229] usb 1-1: USB disconnect, device number 4 [ 877.086205][T14280] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2700'. [ 877.166643][T14281] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 877.837500][ T5829] IPVS: starting estimator thread 0... [ 878.031551][T14290] IPVS: using max 18 ests per chain, 43200 per kthread [ 878.988839][T14307] __nla_validate_parse: 1 callbacks suppressed [ 878.988859][T14307] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2710'. [ 879.069172][T14307] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2710'. [ 881.240024][T14330] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2720'. [ 881.266340][T14330] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2720'. [ 881.586385][T14336] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 881.601063][T14339] sctp: [Deprecated]: syz.3.2724 (pid 14339) Use of struct sctp_assoc_value in delayed_ack socket option. [ 881.601063][T14339] Use struct sctp_sack_info instead [ 883.121311][T14362] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 883.578249][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 883.584875][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 884.792785][T14395] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 884.921561][ T787] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 885.120368][ T787] usb 3-1: Using ep0 maxpacket: 8 [ 885.138524][ T787] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 885.167945][ T787] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 885.194858][ T787] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 885.210766][ T787] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 885.281055][ T787] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 885.320624][ T787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.769868][ T787] usb 3-1: usb_control_msg returned -32 [ 885.775824][ T787] usbtmc 3-1:16.0: can't read capabilities [ 885.831170][ T787] usb 3-1: USB disconnect, device number 4 [ 888.525593][T14425] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 891.838021][ T23] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 892.083831][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 892.117494][ T23] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 892.130400][ T23] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 892.141684][ T23] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 892.152738][ T23] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 892.254799][ T23] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 892.264906][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.607354][ T23] usb 3-1: usb_control_msg returned -32 [ 892.612988][ T23] usbtmc 3-1:16.0: can't read capabilities [ 892.665132][ T23] usb 3-1: USB disconnect, device number 5 [ 897.085943][ T5773] Bluetooth: hci4: command 0x0406 tx timeout [ 897.562947][T14496] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 897.854261][ T787] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 898.057208][ T787] usb 4-1: Using ep0 maxpacket: 8 [ 898.085502][ T787] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 898.102351][ T787] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 898.248992][ T787] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 898.262438][ T787] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 898.278435][ T787] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 898.291196][ T787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 898.688492][ T787] usb 4-1: usb_control_msg returned -32 [ 898.712544][ T787] usbtmc 4-1:16.0: can't read capabilities [ 898.773745][ T787] usb 4-1: USB disconnect, device number 8 [ 899.741304][T14513] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 899.972971][T14513] team0: Port device batadv1 added [ 900.618622][T14529] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 903.122522][T11505] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 903.261283][ T5829] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 903.336502][T11505] usb 3-1: Using ep0 maxpacket: 8 [ 903.343902][T11505] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 903.356278][T11505] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 903.372117][T11505] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 903.388875][T11505] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 903.415512][T11505] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 903.680472][ T5829] usb 4-1: Using ep0 maxpacket: 16 [ 903.725322][T11505] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.929015][ T5829] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 904.044552][ T5829] usb 4-1: config 0 interface 0 has no altsetting 0 [ 904.064342][ T5829] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 904.088649][ T5829] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.282560][ T5829] usb 4-1: config 0 descriptor?? [ 904.294826][T11505] usb 3-1: usb_control_msg returned -32 [ 904.303994][T11505] usbtmc 3-1:16.0: can't read capabilities [ 904.312533][T14559] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 904.366471][T11505] usb 3-1: USB disconnect, device number 6 [ 905.406790][ T5829] nzxt-smart2 0003:1E71:2009.0003: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 906.014962][T13261] usb 4-1: USB disconnect, device number 9 [ 907.803566][T14593] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 907.920483][ T5829] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 908.146965][ T5829] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 908.192796][ T5829] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=10.85 [ 908.209049][ T5829] usb 2-1: New USB device strings: Mfr=153, Product=195, SerialNumber=0 [ 908.217540][ T5829] usb 2-1: Product: syz [ 908.224744][ T5829] usb 2-1: Manufacturer: syz [ 908.285762][ T5829] usb 2-1: config 0 descriptor?? [ 908.334278][ T5829] pwc: Askey VC010 type 2 USB webcam detected. [ 909.298931][T11505] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 909.353445][ T5829] pwc: recv_control_msg error -71 req 02 val 2700 [ 909.374806][ T5829] pwc: recv_control_msg error -71 req 02 val 2c00 [ 909.390793][ T5829] pwc: recv_control_msg error -71 req 04 val 1000 [ 909.404791][ T5829] pwc: recv_control_msg error -71 req 04 val 1300 [ 909.419548][ T5829] pwc: recv_control_msg error -71 req 04 val 1400 [ 909.446974][ T5829] pwc: recv_control_msg error -71 req 02 val 2000 [ 909.459750][ T5829] pwc: recv_control_msg error -71 req 02 val 2100 [ 909.470475][ T5829] pwc: recv_control_msg error -71 req 04 val 1500 [ 909.488648][ T5829] pwc: recv_control_msg error -71 req 02 val 2500 [ 909.500329][ T5829] pwc: recv_control_msg error -71 req 02 val 2400 [ 909.512671][T11505] usb 3-1: Using ep0 maxpacket: 8 [ 909.524298][ T5829] pwc: recv_control_msg error -71 req 02 val 2600 [ 909.535121][T11505] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 909.555892][ T5829] pwc: recv_control_msg error -71 req 02 val 2900 [ 909.562532][T11505] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 909.576966][T11505] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 909.587401][ T5829] pwc: recv_control_msg error -71 req 02 val 2800 [ 909.594943][ T5829] pwc: recv_control_msg error -71 req 04 val 1100 [ 909.601733][T11505] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 909.616377][ T5829] pwc: recv_control_msg error -71 req 04 val 1200 [ 909.628531][T11505] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 909.637965][T11505] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.657934][ T5829] pwc: Registered as video103. [ 909.676378][ T5829] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input5 [ 909.751815][ T5829] usb 2-1: USB disconnect, device number 5 [ 909.923048][T11505] usb 3-1: usb_control_msg returned -71 [ 909.930788][T11505] usbtmc 3-1:16.0: can't read capabilities [ 909.987435][T11505] usb 3-1: USB disconnect, device number 7 [ 911.597992][T14626] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 913.198261][T14634] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2817'. [ 913.240409][T14634] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 913.249777][T14634] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 913.259353][T14634] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 913.268855][T14634] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 913.331967][T14634] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2817'. [ 915.058645][ T787] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 915.307096][T14655] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 915.347223][ T787] usb 2-1: Using ep0 maxpacket: 8 [ 915.359263][ T787] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 915.373704][ T787] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 915.386485][ T787] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 915.428484][ T787] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 915.467129][ T787] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 915.764264][ T787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 916.054601][ T787] usb 2-1: usb_control_msg returned -71 [ 916.076011][ T787] usbtmc 2-1:16.0: can't read capabilities [ 916.970800][ T787] usb 2-1: USB disconnect, device number 6 [ 920.043443][T14691] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 921.961901][T11505] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 922.247272][T11505] usb 1-1: Using ep0 maxpacket: 8 [ 922.558609][T11505] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 922.714978][T11505] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 922.753761][T11505] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 922.773949][T11505] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 922.817707][T11505] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 922.827014][T11505] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.127726][T11505] usb 1-1: usb_control_msg returned -71 [ 923.133396][T11505] usbtmc 1-1:16.0: can't read capabilities [ 923.182189][T11505] usb 1-1: USB disconnect, device number 5 [ 924.698122][ T5773] Bluetooth: hci2: command 0x0406 tx timeout [ 927.813390][T14748] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 929.880564][ T788] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 930.126242][ T788] usb 4-1: Using ep0 maxpacket: 8 [ 930.145878][ T788] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 930.179420][ T788] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 930.200765][ T788] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 930.210840][ T788] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 930.243470][ T788] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 930.252660][ T788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 930.524285][ T788] usb 4-1: usb_control_msg returned -32 [ 930.529965][ T788] usbtmc 4-1:16.0: can't read capabilities [ 930.631588][ T788] usb 4-1: USB disconnect, device number 10 [ 931.023891][T13261] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 931.635712][T13261] usb 2-1: no configurations [ 931.701260][T13261] usb 2-1: can't read configurations, error -22 [ 932.019445][T13261] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 932.235961][T13261] usb 2-1: no configurations [ 932.241160][T13261] usb 2-1: can't read configurations, error -22 [ 932.250030][T13261] usb usb2-port1: attempt power cycle [ 932.536943][T14788] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 932.915388][T13261] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 933.077022][T13261] usb 2-1: no configurations [ 933.243403][T13261] usb 2-1: can't read configurations, error -22 [ 933.438891][T13261] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 933.484786][T13261] usb 2-1: no configurations [ 933.489749][T13261] usb 2-1: can't read configurations, error -22 [ 933.513745][T13261] usb usb2-port1: unable to enumerate USB device [ 934.945572][T13261] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 935.656586][T13261] usb 3-1: Using ep0 maxpacket: 8 [ 935.764840][T13261] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 935.849698][T13261] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 935.864586][T13261] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 935.876648][T13261] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 935.890118][T13261] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 935.921179][T13261] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 936.374719][T13261] usb 3-1: usb_control_msg returned -32 [ 936.381453][T13261] usbtmc 3-1:16.0: can't read capabilities [ 936.499030][T13261] usb 3-1: USB disconnect, device number 8 [ 937.128672][T13261] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 937.397320][T13261] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 937.440264][T13261] usb 4-1: can't read configurations, error -61 [ 937.521069][ T5807] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 937.653379][T13261] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 937.800735][ T5807] usb 1-1: Using ep0 maxpacket: 16 [ 937.819661][ T5807] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 937.890694][ T5807] usb 1-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 937.927448][ T5807] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.948679][T13261] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 937.970930][T13261] usb 4-1: can't read configurations, error -61 [ 937.978670][ T5807] usb 1-1: config 0 descriptor?? [ 937.988958][T13261] usb usb4-port1: attempt power cycle [ 938.474131][T13261] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 938.567312][ T5807] steelseries 0003:1038:1410.0004: missing HID_OUTPUT_REPORT 0 [ 938.698412][T13261] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 938.890900][T13261] usb 4-1: can't read configurations, error -61 [ 938.925549][ T5807] usb 1-1: USB disconnect, device number 6 [ 939.177099][T13261] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 939.250687][T13261] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 939.275095][T13261] usb 4-1: can't read configurations, error -61 [ 939.304828][T13261] usb usb4-port1: unable to enumerate USB device [ 939.489373][T14845] kvm: user requested TSC rate below hardware speed [ 939.512605][T14845] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4068521576 (4068521576 ns) > initial count (2794446801 ns). Using initial count to start timer. [ 940.641143][ T5807] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 940.985570][ T5807] usb 3-1: Using ep0 maxpacket: 8 [ 941.025016][ T5807] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 941.101797][ T5807] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 941.239394][ T5807] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 941.249854][ T5807] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 941.268437][ T5807] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 941.290838][ T5807] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.538833][ T5807] usb 3-1: usb_control_msg returned -32 [ 941.544688][ T5807] usbtmc 3-1:16.0: can't read capabilities [ 941.577917][ T5807] usb 3-1: USB disconnect, device number 9 [ 941.788549][ T23] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 942.091665][ T23] usb 1-1: device descriptor read/64, error -71 [ 942.211913][ T788] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 942.875078][T10332] Bluetooth: hci1: link tx timeout [ 942.910845][T10332] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 942.970403][ T788] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 942.995975][ T788] usb 4-1: can't read configurations, error -61 [ 943.259102][ T788] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 943.417348][ T23] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 943.454519][ T788] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 943.462914][ T788] usb 4-1: can't read configurations, error -61 [ 943.469821][ T788] usb usb4-port1: attempt power cycle [ 943.602332][ T23] usb 1-1: device descriptor read/64, error -71 [ 943.790336][ T23] usb usb1-port1: attempt power cycle [ 943.934296][ T788] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 944.049214][ T788] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 944.067495][ T788] usb 4-1: can't read configurations, error -61 [ 944.285409][ T23] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 944.340037][ T788] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 944.391825][ T23] usb 1-1: device descriptor read/8, error -71 [ 944.410968][ T788] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 944.432593][ T788] usb 4-1: can't read configurations, error -61 [ 944.456374][ T788] usb usb4-port1: unable to enumerate USB device [ 944.701881][ T23] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 944.755575][ T23] usb 1-1: device descriptor read/8, error -71 [ 944.896929][ T23] usb usb1-port1: unable to enumerate USB device [ 945.134792][T10332] Bluetooth: hci1: command 0x0406 tx timeout [ 945.824291][T11505] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 945.962795][T13261] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 946.048206][T11505] usb 4-1: device descriptor read/64, error -71 [ 946.197878][T13261] usb 2-1: Using ep0 maxpacket: 8 [ 946.220260][T13261] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 946.232346][T13261] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 946.243001][T13261] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 946.253320][T13261] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 946.268103][T13261] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 946.286578][T13261] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.401755][T11505] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 946.578074][T13261] usb 2-1: usb_control_msg returned -32 [ 946.586476][T13261] usbtmc 2-1:16.0: can't read capabilities [ 946.603481][T13261] usb 2-1: USB disconnect, device number 11 [ 946.633773][T11505] usb 4-1: device descriptor read/64, error -71 [ 947.347573][T11505] usb usb4-port1: attempt power cycle [ 947.852475][T11505] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 947.876710][T14917] bridge0: port 2(bridge_slave_1) entered disabled state [ 947.884456][T14917] bridge0: port 1(bridge_slave_0) entered disabled state [ 947.893063][T14917] bridge0: entered allmulticast mode [ 947.899009][T11505] usb 4-1: device descriptor read/8, error -71 [ 947.983031][T13261] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 948.121364][ T787] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 948.142853][T13261] usb 1-1: device descriptor read/64, error -71 [ 948.196073][T11505] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 948.248118][T11505] usb 4-1: device descriptor read/8, error -71 [ 948.335773][ T787] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 948.343665][ T787] usb 2-1: can't read configurations, error -61 [ 948.378873][T11505] usb usb4-port1: unable to enumerate USB device [ 948.431236][T13261] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 948.506238][ T787] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 948.602442][T13261] usb 1-1: device descriptor read/64, error -71 [ 948.723606][ T787] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 948.741418][T13261] usb usb1-port1: attempt power cycle [ 948.747376][ T787] usb 2-1: can't read configurations, error -61 [ 948.765359][ T787] usb usb2-port1: attempt power cycle [ 949.068215][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 949.079033][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 949.403845][ T787] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 949.411932][T13261] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 949.458398][T13261] usb 1-1: device descriptor read/8, error -71 [ 949.472081][ T787] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 949.488443][ T787] usb 2-1: can't read configurations, error -61 [ 949.671976][ T787] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 949.756384][ T787] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 949.778649][ T787] usb 2-1: can't read configurations, error -61 [ 949.797252][ T787] usb usb2-port1: unable to enumerate USB device [ 949.843057][T13261] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 949.915436][T13261] usb 1-1: device descriptor read/8, error -71 [ 950.121461][T13261] usb usb1-port1: unable to enumerate USB device [ 950.661347][T14943] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2927'. [ 950.760922][ T5772] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 950.974401][ T5772] usb 3-1: Using ep0 maxpacket: 8 [ 950.988249][ T5772] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 951.006618][ T5772] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 951.017020][ T5772] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 951.059986][ T5772] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 951.078978][ T5772] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 951.115573][ T5772] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 951.289137][T10332] Bluetooth: hci0: command 0x0406 tx timeout [ 951.338002][ T787] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 951.363414][ T5772] usb 3-1: usb_control_msg returned -32 [ 951.369319][ T5772] usbtmc 3-1:16.0: can't read capabilities [ 951.411564][ T5772] usb 3-1: USB disconnect, device number 10 [ 951.530317][ T787] usb 1-1: device descriptor read/64, error -71 [ 951.606234][T14452] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 951.840156][ T787] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 951.864456][T14452] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 951.887174][T14452] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 951.898670][T14452] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.906928][T14452] usb 2-1: Product: syz [ 951.911350][T14452] usb 2-1: Manufacturer: syz [ 951.916048][T14452] usb 2-1: SerialNumber: syz [ 951.943982][T14950] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 952.033111][ T787] usb 1-1: device descriptor read/64, error -71 [ 952.558244][ T787] usb usb1-port1: attempt power cycle [ 952.584544][T14452] cdc_ether: probe of 2-1:1.0 failed with error -71 [ 952.600556][T14452] usb 2-1: USB disconnect, device number 16 [ 953.090273][ T5772] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 953.094149][ T787] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 953.141723][ T787] usb 1-1: device descriptor read/8, error -71 [ 953.261610][ T5772] usb 3-1: device descriptor read/64, error -71 [ 953.445065][ T787] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 953.466319][T14452] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 953.495928][ T787] usb 1-1: device descriptor read/8, error -71 [ 953.560568][ T5772] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 953.636986][ T787] usb usb1-port1: unable to enumerate USB device [ 953.669558][T14452] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 953.682459][T14452] usb 4-1: can't read configurations, error -61 [ 953.743533][ T5772] usb 3-1: device descriptor read/64, error -71 [ 953.849028][T14452] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 953.881430][ T5772] usb usb3-port1: attempt power cycle [ 954.055164][T14452] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 954.063332][T14452] usb 4-1: can't read configurations, error -61 [ 954.070159][T14452] usb usb4-port1: attempt power cycle [ 954.319173][ T5772] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 954.374126][ T5772] usb 3-1: device descriptor read/8, error -71 [ 954.543833][T14452] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 954.605773][T14452] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 954.620817][T14452] usb 4-1: can't read configurations, error -61 [ 954.662470][ T5772] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 954.695107][ T5772] usb 3-1: device descriptor read/8, error -71 [ 954.760094][ T23] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 954.781315][T14452] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 954.821627][ T5772] usb usb3-port1: unable to enumerate USB device [ 954.840846][T14452] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 954.849094][T14452] usb 4-1: can't read configurations, error -61 [ 954.856506][T14452] usb usb4-port1: unable to enumerate USB device [ 954.960398][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 954.967906][ T23] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 954.979357][ T23] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 954.989513][ T23] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 954.999752][ T23] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 955.013306][ T23] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 955.023703][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 955.268420][ T23] usb 1-1: usb_control_msg returned -32 [ 955.274495][ T23] usbtmc 1-1:16.0: can't read capabilities [ 955.290341][ T23] usb 1-1: USB disconnect, device number 19 [ 957.525132][T15028] overlayfs: overlapping lowerdir path [ 957.624056][T15029] overlayfs: overlapping lowerdir path [ 959.611204][T15065] overlayfs: overlapping lowerdir path [ 959.710212][T15066] overlayfs: overlapping lowerdir path [ 960.841012][ T5772] kernel write not supported for file /input/event2 (pid: 5772 comm: kworker/0:3) [ 960.907277][T15070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2971'. [ 960.937861][T15070] bridge_slave_1: left allmulticast mode [ 960.948526][T15070] bridge_slave_1: left promiscuous mode [ 960.954521][T15070] bridge0: port 2(bridge_slave_1) entered disabled state [ 961.021998][T15070] bridge_slave_0: left allmulticast mode [ 961.031268][T15070] bridge_slave_0: left promiscuous mode [ 961.068676][T15070] bridge0: port 1(bridge_slave_0) entered disabled state [ 962.169714][T15096] overlayfs: overlapping lowerdir path [ 962.232306][T15097] overlayfs: overlapping lowerdir path [ 963.683223][T15116] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2987'. [ 964.307818][T15136] overlayfs: overlapping lowerdir path [ 964.405695][T15137] overlayfs: overlapping lowerdir path [ 965.645566][T15145] sctp: [Deprecated]: syz.0.2995 (pid 15145) Use of struct sctp_assoc_value in delayed_ack socket option. [ 965.645566][T15145] Use struct sctp_sack_info instead [ 965.839823][T15140] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 965.941077][ T27] audit: type=1804 audit(1772004153.101:50): pid=15154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2997" name="bus" dev="ramfs" ino=33386 res=1 errno=0 [ 966.195181][T15163] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2999'. [ 966.671082][T15172] vivid-007: disconnect [ 967.167101][T15177] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 967.982135][T15164] vivid-007: reconnect [ 968.307961][T15185] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3004'. [ 968.634240][T15181] lo speed is unknown, defaulting to 1000 [ 968.733387][T11505] kernel write not supported for file /444/projid_map (pid: 11505 comm: kworker/0:0) [ 969.270312][T15203] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3012'. [ 970.937109][T15212] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 972.362394][T15227] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3022'. [ 972.886062][T15240] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 973.814510][T15244] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3026'. [ 975.183562][T15268] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3036'. [ 977.166392][T15300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3047'. [ 977.283853][ T787] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 977.499078][ T787] usb 4-1: config 0 has no interfaces? [ 977.506964][ T787] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 977.527752][ T787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 977.551286][ T787] usb 4-1: SerialNumber: syz [ 977.563841][ T787] usb 4-1: config 0 descriptor?? [ 977.808206][ T787] usb 4-1: USB disconnect, device number 27 [ 978.091986][T15329] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3060'. [ 978.803180][T15341] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 980.072552][T15354] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3070'. [ 981.672080][T15377] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 984.150149][T15392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3083'. [ 984.443108][ T787] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 984.680497][ T787] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 984.699147][ T787] usb 4-1: config 0 has no interfaces? [ 984.712298][ T787] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 984.731943][ T787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.755957][ T787] usb 4-1: config 0 descriptor?? [ 985.648558][T15404] ubi31: attaching mtd0 [ 985.742879][T15404] ubi31: scanning is finished [ 985.747776][T15404] ubi31: empty MTD device detected [ 986.650307][ T5772] usb 4-1: USB disconnect, device number 28 [ 986.662050][T15404] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 987.130472][T15411] overlayfs: missing 'lowerdir' [ 987.232833][T15412] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 988.859226][T15427] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3093'. [ 991.678170][ T5772] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 992.400212][T15447] overlayfs: missing 'lowerdir' [ 992.410149][T15447] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 992.877969][ T5772] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 992.895933][ T5772] usb 4-1: config 0 has no interfaces? [ 992.901496][ T5772] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 992.917776][ T5772] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 992.928952][ T5772] usb 4-1: config 0 descriptor?? [ 993.152376][ T787] usb 4-1: USB disconnect, device number 29 [ 993.238309][T15465] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3106'. [ 995.304946][T15493] trusted_key: encrypted_key: key user:syz not found [ 996.587570][T15506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3117'. [ 1005.015629][T11505] IPVS: starting estimator thread 0... [ 1005.280901][T15579] IPVS: using max 34 ests per chain, 81600 per kthread [ 1014.722783][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1015.357935][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1027.995717][T15822] overlayfs: overlapping lowerdir path [ 1028.797589][ T27] audit: type=1326 audit(1772004211.925:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15829 comm="syz.2.3183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb55039c629 code=0x7ffc0000 [ 1028.996983][ T27] audit: type=1326 audit(1772004211.925:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15829 comm="syz.2.3183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb55039c2bb code=0x7ffc0000 [ 1029.072192][ T27] audit: type=1326 audit(1772004211.925:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15829 comm="syz.2.3183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb55039c2bb code=0x7ffc0000 [ 1029.128910][ T27] audit: type=1326 audit(1772004211.925:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15829 comm="syz.2.3183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb55039c2bb code=0x7ffc0000 [ 1029.151282][ C1] vkms_vblank_simulate: vblank timer overrun [ 1029.169573][ T27] audit: type=1326 audit(1772004211.925:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15829 comm="syz.2.3183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb55039c2bb code=0x7ffc0000 [ 1029.217588][ T27] audit: type=1326 audit(1772004211.925:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15829 comm="syz.2.3183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb55039c2bb code=0x7ffc0000 [ 1029.240961][ C1] vkms_vblank_simulate: vblank timer overrun [ 1029.268856][ T27] audit: type=1326 audit(1772004211.925:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15829 comm="syz.2.3183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb55039c2bb code=0x7ffc0000 [ 1029.292059][ C1] vkms_vblank_simulate: vblank timer overrun [ 1029.330699][ T27] audit: type=1326 audit(1772004211.925:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15829 comm="syz.2.3183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb55039c2bb code=0x7ffc0000 [ 1029.361835][ T27] audit: type=1326 audit(1772004211.925:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15829 comm="syz.2.3183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb55039c2bb code=0x7ffc0000 [ 1029.384355][ C1] vkms_vblank_simulate: vblank timer overrun [ 1029.400312][ T27] audit: type=1326 audit(1772004211.925:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15829 comm="syz.2.3183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb55039c2bb code=0x7ffc0000 [ 1030.917079][T14700] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 1031.154228][T14700] usb 4-1: config 0 has no interfaces? [ 1031.163639][T14700] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1031.172854][T14700] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1031.202741][T14700] usb 4-1: SerialNumber: syz [ 1031.237358][T14700] usb 4-1: config 0 descriptor?? [ 1031.481364][T14700] usb 4-1: USB disconnect, device number 30 [ 1033.107832][T14452] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1033.331894][T14452] usb 1-1: Using ep0 maxpacket: 8 [ 1033.414336][T14452] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1033.439446][T14452] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 7 [ 1033.464996][T14452] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1033.474968][T14452] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1033.485554][T14452] usb 1-1: Product: syz [ 1033.490309][T14452] usb 1-1: Manufacturer: syz [ 1033.495174][T14452] usb 1-1: SerialNumber: syz [ 1034.379095][ T5807] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 1034.585882][ T5807] usb 3-1: config 0 has no interfaces? [ 1034.597181][ T5807] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1034.611567][ T5807] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1034.620588][ T5807] usb 3-1: SerialNumber: syz [ 1034.629615][ T5807] usb 3-1: config 0 descriptor?? [ 1034.949351][ T5772] usb 3-1: USB disconnect, device number 15 [ 1036.014933][T14700] usb 1-1: USB disconnect, device number 20 [ 1038.941859][ T5807] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1039.489223][ T5807] usb 2-1: Using ep0 maxpacket: 8 [ 1039.548370][ T5807] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 7 [ 1040.188376][ T5807] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1040.416627][ T5807] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1040.427235][ T5807] usb 2-1: Product: syz [ 1040.435873][ T5807] usb 2-1: Manufacturer: syz [ 1040.452692][ T5807] usb 2-1: SerialNumber: syz [ 1043.379023][ T5829] usb 2-1: USB disconnect, device number 17 [ 1044.591669][T11505] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 1045.116301][T11505] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1045.155729][T11505] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1045.206329][T11505] usb 4-1: config 0 descriptor?? [ 1045.224850][T11505] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1045.472255][T11505] gp8psk: usb in 128 operation failed. [ 1045.698943][T11505] gp8psk: usb in 146 operation failed. [ 1045.704758][T11505] gp8psk: failed to get FW version [ 1045.759450][T11505] gp8psk: FPGA Version = 153 [ 1045.964821][T11505] gp8psk: usb in 138 operation failed. [ 1045.985963][T11505] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1046.009549][T11505] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1046.036048][T11505] usb 4-1: USB disconnect, device number 31 [ 1046.347565][ T23] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1046.582539][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 1046.597917][ T23] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 7 [ 1046.622375][ T23] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1046.701164][ T23] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1046.904728][ T23] usb 3-1: Product: syz [ 1047.006712][ T23] usb 3-1: Manufacturer: syz [ 1047.178847][ T23] usb 3-1: SerialNumber: syz [ 1048.553749][T16048] netlink: 'syz.0.3256': attribute type 3 has an invalid length. [ 1049.049510][T16058] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3261'. [ 1049.286597][T16062] syzkaller1: entered promiscuous mode [ 1049.311821][ T787] usb 3-1: USB disconnect, device number 16 [ 1049.345780][T16062] syzkaller1: entered allmulticast mode [ 1052.267376][ T5829] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1052.567661][ T5829] usb 3-1: Using ep0 maxpacket: 8 [ 1052.586612][ T5829] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 7 [ 1052.614885][ T5829] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1052.640012][ T5829] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1052.661778][ T5829] usb 3-1: Product: syz [ 1052.673536][ T5829] usb 3-1: Manufacturer: syz [ 1052.685776][ T5829] usb 3-1: SerialNumber: syz [ 1055.199967][ T5807] usb 3-1: USB disconnect, device number 17 [ 1056.479089][T16122] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3285'. [ 1056.561716][T16122] bridge0: port 2(bridge_slave_1) entered disabled state [ 1056.569239][T16122] bridge0: port 1(bridge_slave_0) entered disabled state [ 1056.659954][T16123] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3285'. [ 1056.669393][T16123] bridge0: port 2(bridge_slave_1) entered blocking state [ 1056.676747][T16123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1056.684376][T16123] bridge0: port 1(bridge_slave_0) entered blocking state [ 1056.691768][T16123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1056.854637][T16123] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3285'. [ 1056.895372][T16123] bridge0: port 2(bridge_slave_1) entered disabled state [ 1056.902847][T16123] bridge0: port 1(bridge_slave_0) entered disabled state [ 1063.370368][ T5807] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 1063.626659][ T5807] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1063.637612][ T5807] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1063.670406][ T5807] usb 4-1: config 0 descriptor?? [ 1063.696660][ T5807] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1063.911524][ T5807] gp8psk: usb in 128 operation failed. [ 1064.185737][ T5807] gp8psk: usb in 146 operation failed. [ 1064.192508][ T5807] gp8psk: failed to get FW version [ 1064.235955][ T5807] gp8psk: usb in 149 operation failed. [ 1064.416225][ T5807] gp8psk: failed to get FPGA version [ 1064.515792][ T5807] gp8psk: usb in 138 operation failed. [ 1064.616524][ T5807] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1064.925681][ T5807] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1065.018587][ T5807] usb 4-1: USB disconnect, device number 32 [ 1065.550452][T16208] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3313'. [ 1069.119335][ T5807] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 1069.326731][ T5807] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1069.354343][ T5807] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1069.397503][ T5807] usb 4-1: config 0 descriptor?? [ 1069.435977][ T5807] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1069.720721][ T5807] gp8psk: usb in 128 operation failed. [ 1070.227079][ T5807] gp8psk: usb in 146 operation failed. [ 1070.288444][ T5807] gp8psk: failed to get FW version [ 1070.317180][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 1070.341170][ T5807] gp8psk: usb in 149 operation failed. [ 1070.346826][ T5807] gp8psk: failed to get FPGA version [ 1070.586541][ T5807] gp8psk: usb in 138 operation failed. [ 1070.592253][ T5807] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1070.604033][ T5807] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1070.618830][ T5807] usb 4-1: USB disconnect, device number 33 [ 1073.159630][T16268] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3334'. [ 1073.291112][T16268] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3334'. [ 1077.295143][T10332] Bluetooth: hci1: command 0x0406 tx timeout [ 1079.047993][T16305] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3346'. [ 1079.060087][T16305] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3346'. [ 1080.378467][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1080.387572][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1103.393713][T16549] syzkaller1: entered promiscuous mode [ 1103.414057][T16549] syzkaller1: entered allmulticast mode [ 1111.479935][T16625] kvm: kvm [16622]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x10000a000 [ 1111.521932][T16625] kvm: kvm [16622]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x7ee1 [ 1111.598228][T16625] kvm: kvm [16622]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xe0 [ 1111.649906][T16625] kvm: kvm [16622]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1116.960657][T16669] overlay: Unknown parameter '\' [ 1121.910543][ T23] IPVS: starting estimator thread 0... [ 1121.915467][T16716] kvm: kvm [16715]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x10000a000 [ 1121.956816][T16716] kvm: kvm [16715]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x7ee1 [ 1121.997934][T16716] kvm: kvm [16715]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xe0 [ 1122.047488][T16728] IPVS: using max 34 ests per chain, 81600 per kthread [ 1122.640172][T16745] syzkaller1: entered promiscuous mode [ 1122.661503][T16745] syzkaller1: entered allmulticast mode [ 1124.312796][T11505] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1124.544760][T11505] usb 4-1: Using ep0 maxpacket: 8 [ 1124.585379][T11505] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1124.621548][T11505] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1124.661411][T11505] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1124.670236][T11505] usb 4-1: Product: syz [ 1124.691490][T11505] usb 4-1: Manufacturer: syz [ 1124.707516][T11505] usb 4-1: SerialNumber: syz [ 1125.251581][T11505] usb 4-1: Handspring Visor / Palm OS: No valid connect info available [ 1125.292617][T11505] usb 4-1: Handspring Visor / Palm OS: port 76, is for unknown use [ 1125.363874][T11505] usb 4-1: Handspring Visor / Palm OS: port 111, is for HotSync use [ 1125.400419][T11505] usb 4-1: Handspring Visor / Palm OS: Number of ports: 2 [ 1125.460988][T11505] usb 4-1: palm_os_3_probe - error -32 getting bytes available request [ 1125.525619][T11505] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 1125.581896][T11505] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1125.662955][T11505] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1125.711772][T11505] usb 4-1: USB disconnect, device number 34 [ 1125.739079][T11505] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1125.802947][T11505] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1126.114868][T11505] visor 4-1:1.0: device disconnected [ 1128.779448][ T23] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1129.029253][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 1129.101433][ T23] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1129.143884][ T23] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1129.185586][ T23] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1129.193986][ T23] usb 3-1: Product: syz [ 1129.208972][ T23] usb 3-1: Manufacturer: syz [ 1129.213828][ T23] usb 3-1: SerialNumber: syz [ 1129.473537][ T23] usb 3-1: Handspring Visor / Palm OS: No valid connect info available [ 1129.500619][ T23] usb 3-1: Handspring Visor / Palm OS: port 76, is for unknown use [ 1129.522675][ T23] usb 3-1: Handspring Visor / Palm OS: port 111, is for HotSync use [ 1129.542927][ T23] usb 3-1: Handspring Visor / Palm OS: Number of ports: 2 [ 1129.699944][ T23] usb 3-1: palm_os_3_probe - error -32 getting bytes available request [ 1129.725458][ T23] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 1129.737163][ T23] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1129.749921][ T23] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1129.768751][ T23] usb 3-1: USB disconnect, device number 18 [ 1129.780072][ T23] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1129.839011][ T23] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1129.912686][ T23] visor 3-1:1.0: device disconnected [ 1131.269367][ T5829] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1131.699830][ T5829] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1131.919032][ T5829] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1131.940862][ T5829] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1131.964890][ T5829] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 1132.033298][ T5829] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1132.082547][ T5829] usb 3-1: config 0 descriptor?? [ 1132.314853][ T5829] ath6kl: Failed to submit usb control message: -71 [ 1132.323046][ T5829] ath6kl: unable to send the bmi data to the device: -71 [ 1132.349171][ T5829] ath6kl: Unable to send get target info: -71 [ 1132.365392][ T5829] ath6kl: Failed to init ath6kl core: -71 [ 1132.385359][ T5829] ath6kl_usb: probe of 3-1:0.0 failed with error -71 [ 1132.440760][ T5829] usb 3-1: USB disconnect, device number 19 [ 1140.696717][T16876] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1140.892759][T16876] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1141.218056][T14452] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1141.486913][T14452] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1141.535166][T14452] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1141.555962][T14452] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1141.580256][T14452] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 1141.656958][T14452] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1141.677711][T14452] usb 4-1: config 0 descriptor?? [ 1141.944642][T14452] ath6kl: Failed to submit usb control message: -71 [ 1141.983574][T14452] ath6kl: unable to send the bmi data to the device: -71 [ 1141.998019][T14452] ath6kl: Unable to send get target info: -71 [ 1142.025584][T14452] ath6kl: Failed to init ath6kl core: -71 [ 1142.064685][T14452] ath6kl_usb: probe of 4-1:0.0 failed with error -71 [ 1143.062540][T14452] usb 4-1: USB disconnect, device number 35 [ 1143.537711][T16876] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1143.547028][T16876] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1143.591549][T16876] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1143.600770][T16876] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1146.355186][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1146.367991][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1149.713635][T11505] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1149.934588][T11505] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1149.971075][T11505] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1149.993785][T11505] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1150.034028][T11505] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 1150.043300][T11505] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1150.146294][T11505] usb 2-1: config 0 descriptor?? [ 1151.086291][T11505] ath6kl: Failed to submit usb control message: -71 [ 1151.103013][T11505] ath6kl: unable to send the bmi data to the device: -71 [ 1151.111014][T11505] ath6kl: Unable to send get target info: -71 [ 1151.138477][T11505] ath6kl: Failed to init ath6kl core: -71 [ 1151.144817][T11505] ath6kl_usb: probe of 2-1:0.0 failed with error -71 [ 1151.193926][T11505] usb 2-1: USB disconnect, device number 18 [ 1156.188204][ T23] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1157.127048][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1157.162303][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1157.204271][ T23] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1157.236434][ T23] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 1157.277553][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1157.332999][ T23] usb 3-1: config 0 descriptor?? [ 1157.605548][ T23] ath6kl: Failed to submit usb control message: -71 [ 1157.621052][ T23] ath6kl: unable to send the bmi data to the device: -71 [ 1157.632132][ T23] ath6kl: Unable to send get target info: -71 [ 1157.654344][ T23] ath6kl: Failed to init ath6kl core: -71 [ 1157.660960][ T23] ath6kl_usb: probe of 3-1:0.0 failed with error -71 [ 1157.698154][ T23] usb 3-1: USB disconnect, device number 20 [ 1167.872155][T17150] netlink: 'syz.3.3626': attribute type 12 has an invalid length. [ 1171.556605][T11769] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1171.823199][T11769] usb 4-1: Using ep0 maxpacket: 16 [ 1171.836778][T11769] usb 4-1: config 251 has an invalid interface number: 202 but max is 0 [ 1171.903499][T11769] usb 4-1: config 251 has no interface number 0 [ 1171.990537][T11769] usb 4-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 1172.067411][T11769] usb 4-1: config 251 interface 202 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 1172.089361][T11769] usb 4-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 1172.122498][T11769] usb 4-1: config 251 interface 202 altsetting 1 has an invalid endpoint with address 0xC1, skipping [ 1172.143929][T11769] usb 4-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1172.175800][T11769] usb 4-1: config 251 interface 202 has no altsetting 0 [ 1172.216314][T11769] usb 4-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 1172.239958][T11769] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1172.261036][T11769] usb 4-1: Product: syz [ 1172.279360][T11769] usb 4-1: Manufacturer: syz [ 1172.287280][T11769] usb 4-1: SerialNumber: syz [ 1172.310190][T17186] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1172.318577][T17186] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1172.656998][T11769] cxacru 4-1:251.202: usbatm_usb_probe: bind failed: -19! [ 1172.730839][T11769] usb 4-1: USB disconnect, device number 36 [ 1188.573776][T17376] kvm: kvm [17375]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100003050 [ 1188.622987][T17376] kvm: kvm [17375]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x678b [ 1188.673628][T17376] kvm: kvm [17375]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 1188.715139][T17376] kvm: kvm [17375]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x571f [ 1189.069103][T17388] warning: `syz.3.3707' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1196.883914][ T5829] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1197.248188][ T5829] usb 3-1: Using ep0 maxpacket: 8 [ 1197.336732][ T5829] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1197.351904][ T5829] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1197.380064][ T5829] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1197.397515][ T5829] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1197.447393][ T5829] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1197.459980][ T5829] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1198.129360][ T5829] usb 3-1: GET_CAPABILITIES returned 0 [ 1198.135195][ T5829] usbtmc 3-1:16.0: can't read capabilities [ 1199.912531][ T5829] usb 3-1: USB disconnect, device number 21 [ 1202.814705][T11505] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1203.039073][T11505] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1203.069421][T11505] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1203.091501][T11505] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1203.113182][T11505] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1203.121345][T11505] usb 4-1: SerialNumber: syz [ 1204.816735][T11505] usb 4-1: 0:2 : does not exist [ 1204.823834][T11505] usb 4-1: unit 5: unexpected type 0x09 [ 1204.885770][T11505] usb 4-1: USB disconnect, device number 37 [ 1205.003722][T17525] udevd[17525]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1212.328448][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1212.335608][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1217.099926][T17641] syzkaller1: entered promiscuous mode [ 1217.136374][T17641] syzkaller1: entered allmulticast mode [ 1223.838409][T11769] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 1224.069081][T11769] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1224.152509][T11769] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1224.174054][T11769] usb 4-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 1224.183672][T11769] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1224.214853][T11769] usb 4-1: config 0 descriptor?? [ 1224.757406][T11769] nti 0003:0757:0A00.0005: item fetching failed at offset 1/5 [ 1224.787689][T11769] nti: probe of 0003:0757:0A00.0005 failed with error -22 [ 1225.651222][T11505] usb 4-1: USB disconnect, device number 38 [ 1353.795266][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1353.802444][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P13611/1:b..l [ 1353.811075][ C0] rcu: (detected by 0, t=10502 jiffies, g=88397, q=76 ncpus=2) [ 1353.818772][ C0] task:syz-executor state:R running task stack:21704 pid:13611 ppid:13563 flags:0x00004002 [ 1353.831585][ C0] Call Trace: [ 1353.834911][ C0] [ 1353.837874][ C0] __schedule+0x1553/0x45a0 [ 1353.842452][ C0] ? asan.module_dtor+0x20/0x20 [ 1353.847342][ C0] ? mark_lock+0x94/0x320 [ 1353.851885][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1353.858163][ C0] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1353.864439][ C0] ? preempt_schedule_irq+0xb4/0x150 [ 1353.869766][ C0] preempt_schedule_irq+0xbf/0x150 [ 1353.874918][ C0] ? preempt_schedule_notrace+0x110/0x110 [ 1353.880692][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 1353.886788][ C0] irqentry_exit+0x67/0x70 [ 1353.891246][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1353.897344][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x60 [ 1353.903452][ C0] Code: 00 0f 0b 0f 1f 80 00 00 00 00 f3 0f 1e fa 53 48 89 fb e8 13 00 00 00 48 8b 3d cc cb 03 0d 48 89 de 5b e9 d3 5f 57 00 cc cc cc 0f 1e fa 48 8b 04 24 65 48 8b 0d a0 a0 7c 7e 65 8b 15 a1 a0 7c [ 1353.923262][ C0] RSP: 0018:ffffc9000499f378 EFLAGS: 00000246 [ 1353.929453][ C0] RAX: ffffffff813b6926 RBX: ffffc9000499f3e8 RCX: 0000000000000000 [ 1353.937465][ C0] RDX: ffff88802e618000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1353.945584][ C0] RBP: 0000000000000000 R08: ffffc9000499f401 R09: 0000000000000000 [ 1353.953580][ C0] R10: ffffc9000499f3e8 R11: fffff52000933e89 R12: ffffc9000499f380 [ 1353.961836][ C0] R13: ffffc9000499f408 R14: ffffc9000499f410 R15: 1ffff92000933e82 [ 1353.970017][ C0] ? __unwind_start+0x496/0x7e0 [ 1353.974907][ C0] __unwind_start+0x532/0x7e0 [ 1353.979823][ C0] ? stack_trace_save+0x100/0x100 [ 1353.984984][ C0] arch_stack_walk+0xf8/0x190 [ 1353.989711][ C0] ? __unwind_start+0x2d2/0x7e0 [ 1353.994685][ C0] stack_trace_save+0xaa/0x100 [ 1353.999567][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 1354.004806][ C0] save_stack+0x125/0x230 [ 1354.009206][ C0] ? __reset_page_owner+0x190/0x190 [ 1354.014498][ C0] ? page_ext_get+0x22/0x2b0 [ 1354.019482][ C0] ? page_ext_get+0x1e2/0x2b0 [ 1354.024197][ C0] __reset_page_owner+0x4e/0x190 [ 1354.029257][ C0] ? rcu_is_watching+0x15/0xb0 [ 1354.034143][ C0] free_unref_page_prepare+0x7b2/0x8c0 [ 1354.039751][ C0] free_unref_page_list+0xbe/0x860 [ 1354.044918][ C0] ? __folio_memcg+0x63/0x160 [ 1354.049639][ C0] ? folio_memcg+0x127/0x480 [ 1354.054360][ C0] release_pages+0x1f7a/0x2200 [ 1354.059170][ C0] ? lru_cache_disable+0x30/0x30 [ 1354.064143][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 1354.069471][ C0] __folio_batch_release+0x71/0xe0 [ 1354.074613][ C0] shmem_undo_range+0x630/0x1b20 [ 1354.079672][ C0] ? shmem_truncate_range+0xa0/0xa0 [ 1354.084928][ C0] ? inode_wait_for_writeback+0x1e3/0x230 [ 1354.090778][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 1354.095917][ C0] ? do_raw_spin_lock+0x11f/0x2c0 [ 1354.101079][ C0] shmem_evict_inode+0x245/0x9e0 [ 1354.106140][ C0] ? inode_wait_for_writeback+0x1e3/0x230 [ 1354.113664][ C0] ? shmem_free_in_core_inode+0xb0/0xb0 [ 1354.119355][ C0] ? sb_clear_inode_writeback+0x360/0x360 [ 1354.125138][ C0] ? do_raw_spin_lock+0x11f/0x2c0 [ 1354.130579][ C0] ? bit_waitqueue+0x30/0x30 [ 1354.135220][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 1354.140466][ C0] ? shmem_free_in_core_inode+0xb0/0xb0 [ 1354.146147][ C0] evict+0x4ca/0x8d0 [ 1354.150178][ C0] ? proc_nr_inodes+0x230/0x230 [ 1354.155160][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 1354.160397][ C0] ? _raw_spin_unlock+0x28/0x40 [ 1354.165309][ C0] ? iput+0x706/0x920 [ 1354.169360][ C0] do_unlinkat+0x38c/0x590 [ 1354.173907][ C0] ? fsnotify_link_count+0xf0/0xf0 [ 1354.179141][ C0] ? getname_flags+0x20a/0x500 [ 1354.183959][ C0] __x64_sys_unlink+0x49/0x50 [ 1354.188752][ C0] do_syscall_64+0x55/0xa0 [ 1354.193198][ C0] ? clear_bhb_loop+0x40/0x90 [ 1354.197918][ C0] ? clear_bhb_loop+0x40/0x90 [ 1354.202670][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1354.208600][ C0] RIP: 0033:0x7fd6dc39b717 [ 1354.213061][ C0] RSP: 002b:00007fff34d53bf8 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 1354.221699][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd6dc39b717 [ 1354.229704][ C0] RDX: 00007fff34d53c20 RSI: 00007fff34d53cb0 RDI: 00007fff34d53cb0 [ 1354.237713][ C0] RBP: 00007fff34d53cb0 R08: 00007fff34d54cb0 R09: 00000000ffffffff [ 1354.245902][ C0] R10: 0000000000000100 R11: 0000000000000206 R12: 00007fff34d54d40 [ 1354.253896][ C0] R13: 00007fd6dc431ef0 R14: 0000000000125d43 R15: 00007fff34d54d80 [ 1354.261998][ C0] [ 1354.265041][ C0] rcu: rcu_preempt kthread starved for 10525 jiffies! g88397 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1354.276258][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1354.286431][ C0] rcu: RCU grace-period kthread stack dump: [ 1354.292699][ C0] task:rcu_preempt state:R running task stack:27496 pid:17 ppid:2 flags:0x00004000 [ 1354.303600][ C0] Call Trace: [ 1354.307002][ C0] [ 1354.310054][ C0] __schedule+0x1553/0x45a0 [ 1354.314810][ C0] ? asan.module_dtor+0x20/0x20 [ 1354.320231][ C0] ? enqueue_timer+0x23d/0x550 [ 1354.325032][ C0] ? __mod_timer+0x984/0xdb0 [ 1354.329759][ C0] schedule+0xbd/0x170 [ 1354.333947][ C0] schedule_timeout+0x188/0x2d0 [ 1354.338823][ C0] ? console_conditional_schedule+0x40/0x40 [ 1354.344933][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 1354.350976][ C0] ? update_process_times+0x1b0/0x1b0 [ 1354.356716][ C0] ? prepare_to_swait_event+0x339/0x360 [ 1354.362384][ C0] rcu_gp_fqs_loop+0x313/0x1590 [ 1354.367283][ C0] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 1354.373558][ C0] ? rcu_gp_init+0x1560/0x1560 [ 1354.378434][ C0] ? rcu_gp_cleanup+0xb41/0xc90 [ 1354.383406][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1354.388639][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1354.393877][ C0] rcu_gp_kthread+0x9d/0x3b0 [ 1354.398497][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1354.403645][ C0] ? __kthread_parkme+0x7a/0x1c0 [ 1354.408707][ C0] ? __kthread_parkme+0x162/0x1c0 [ 1354.413759][ C0] kthread+0x2fa/0x390 [ 1354.417873][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1354.423049][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1354.427866][ C0] ret_from_fork+0x48/0x80 [ 1354.432339][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1354.436957][ C0] ret_from_fork_asm+0x11/0x20 [ 1354.441768][ C0] [ 1354.444814][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1354.451153][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 1354.458199][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1354.468895][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 1354.474647][ C0] Code: c7 22 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d 83 d1 43 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2e 41 89 de 80 [ 1354.494461][ C0] RSP: 0018:ffffffff8ce07d80 EFLAGS: 000002c2 [ 1354.500558][ C0] RAX: 2c699cec2e698200 RBX: ffffffff8162a490 RCX: 2c699cec2e698200 [ 1354.508563][ C0] RDX: 0000000000000001 RSI: ffffffff8acac900 RDI: ffffffff8b1c82e0 [ 1354.516658][ C0] RBP: ffffffff8ce07eb8 R08: ffff8880b8e36b2b R09: 1ffff110171c6d65 [ 1354.524658][ C0] R10: dffffc0000000000 R11: ffffed10171c6d66 R12: 1ffffffff19d2688 [ 1354.532923][ C0] R13: 1ffffffff19c0fbc R14: 0000000000000000 R15: dffffc0000000000 [ 1354.541009][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1354.550064][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1354.556673][ C0] CR2: 00007fbcce621bbc CR3: 000000002faee000 CR4: 00000000003506f0 [ 1354.564681][ C0] Call Trace: [ 1354.568418][ C0] [ 1354.571374][ C0] default_idle+0x13/0x20 [ 1354.575736][ C0] default_idle_call+0x6c/0xa0 [ 1354.580740][ C0] do_idle+0x1f0/0x4e0 [ 1354.584882][ C0] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1354.590847][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 1354.596264][ C0] ? do_idle+0x5/0x4e0 [ 1354.600367][ C0] cpu_startup_entry+0x43/0x60 [ 1354.605248][ C0] rest_init+0x2e2/0x300 [ 1354.609989][ C0] ? time_init+0x40/0x40 [ 1354.614357][ C0] arch_call_rest_init+0xe/0x10 [ 1354.619412][ C0] start_kernel+0x459/0x4e0 [ 1354.623956][ C0] x86_64_start_reservations+0x2a/0x30 [ 1354.629445][ C0] x86_64_start_kernel+0x60/0x60 [ 1354.634516][ C0] secondary_startup_64_no_verify+0x179/0x17b [ 1354.640913][ C0] [ 1355.459141][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1355.465837][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1355.475359][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1355.481716][ T1290] ieee802154 phy1 wpan1: encryption failed: -22