last executing test programs: 6m51.945188585s ago: executing program 4 (id=210): r0 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0x5307, 0x1000, 0x3, 0x235}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(0x0, 0x1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) socket$qrtr(0x2a, 0x2, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000080)={0xffffffff, "5e5c3446aa0ecd604c893eba3198600b1891109654fe9676d14574be70b6225c", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f00000000c0)={"ff87c89d4e3e6bd4ae7ee3551b880c0ac56cb2a58b7da498a7045278c8043bbe", r5}) 6m49.101413811s ago: executing program 4 (id=216): r0 = socket$nl_route(0x10, 0x3, 0x0) ftruncate(0xffffffffffffffff, 0x7000000) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newlink={0x38, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x190, 0x45230}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x7fffffff}]}}}]}, 0x38}}, 0x0) 6m48.459224209s ago: executing program 4 (id=218): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d0", 0x95}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29", 0xce}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784b", 0x4a}, {&(0x7f0000000800)}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c8", 0x59}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}], 0x48}}], 0x2, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)=0xfffffffe, 0x4) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 6m48.394662599s ago: executing program 4 (id=220): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) socket$packet(0x11, 0x2, 0x300) socket(0x840000000002, 0x3, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) clock_nanosleep(0x2, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0) 6m44.545825483s ago: executing program 4 (id=224): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x10200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x24, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "f4cb985d86dd6266b5efb88a2c87eda081bac8b2f9a49d564054f1c9218f47b3", "cf8743eb4d9e776f94a6a58d36e006ac614f6f7bce9217cbfea31675d4a860cf6003977b1e4dbb16dc31cc76522bf19d", "5043edd2a8cc8c41345f8feb1a7a8e23043b8a465b1ed5bf8bc91307", {"c7193f7edd1efc4742dc481e6f57f901", "948177bcc5dea4029ba4683a6bdcd7a1"}}}}}}}, 0x0) 6m41.841526605s ago: executing program 4 (id=234): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) socket$packet(0x11, 0x2, 0x300) socket(0x840000000002, 0x3, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) clock_nanosleep(0x2, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0) 6m26.039823177s ago: executing program 32 (id=234): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) socket$packet(0x11, 0x2, 0x300) socket(0x840000000002, 0x3, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) clock_nanosleep(0x2, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0) 8.544322111s ago: executing program 1 (id=1696): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$KEYCTL_MOVE(0x1e, r2, r2, r1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'vcan0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=@framed={{0x28, 0x2, 0x2, 0x0, 0x0, 0x71, 0x11, 0xb7}, [@ldst={0x6, 0x2}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x22) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x2b0, 0x0, 0x5802, 0x294, 0x140, 0x294, 0x230, 0x378, 0x378, 0x230, 0x378, 0x3, 0x0, {[{{@ipv6={@mcast2, @empty, [0xffffff00, 0xff, 0xff000000, 0xff000000], [0xff, 0xff, 0xff000000, 0xff000000], 'netpci0\x00', 'vlan0\x00', {0xff}, {0xff}, 0x32, 0x0, 0x0, 0x80}, 0x0, 0xa8, 0xf0, 0x52020000}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x7ff, 0x10000, 0x81, '\x00', {0x6}}}}, {{@ipv6={@loopback, @remote, [0x0, 0x0, 0xff, 0xffffff00], [0xff, 0x0, 0x0, 0xffffffff], 'ip6erspan0\x00', 'gre0\x00', {0xff}, {}, 0x16, 0x81, 0x3, 0x20}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x800, 0x401, 0x7, 'pptp\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) 8.288911554s ago: executing program 0 (id=1698): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000003f40), 0x2b01, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f0000003f80)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r0, 0x5, 0x4002) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x4, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') read$FUSE(r5, &(0x7f0000000280)={0x2020}, 0x2020) 7.889473801s ago: executing program 0 (id=1700): socket$inet6_sctp(0xa, 0x5, 0x84) syz_usbip_server_init(0x1) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$sndctrl(0x0, 0xa, 0x8000) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mq_open(0x0, 0x42, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x62, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) r2 = dup(0xffffffffffffffff) readahead(r2, 0xfff, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000140), r3, 0x0, 0x1, 0x4}}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 7.073446037s ago: executing program 2 (id=1706): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0xfd, 0x0, 0x7fffffff}]}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6000, 0x1) r2 = fsopen(&(0x7f0000000100)='squashfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r3, 0x89e4) 6.969491705s ago: executing program 1 (id=1708): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000380)=[0x0, 0x0, 0x0], 0x3}) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000000)={0x1, [0x9]}, 0x6) 6.22223117s ago: executing program 0 (id=1709): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000001000010000001a0000200000"], 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="3000000012"], 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7ff}, 0x1c, 0x0}}], 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS2(r1, 0x4068aea3, &(0x7f0000000200)={0xd5, 0x0, 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.79780116s ago: executing program 3 (id=1711): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) mprotect(&(0x7f00005b9000/0x1000)=nil, 0x1000, 0x1) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) bind$netlink(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0xd2, &(0x7f0000000900)=ANY=[], 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 5.671451281s ago: executing program 0 (id=1712): syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201100153a42908f00a71729188010203010902240001060000000904000002ffffff0009"], 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 5.656463634s ago: executing program 3 (id=1713): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7ff}, 0x1c, 0x0}}], 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS2(r2, 0x4068aea3, &(0x7f0000000200)={0xd5, 0x0, 0x2}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.100330747s ago: executing program 5 (id=1718): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$KEYCTL_MOVE(0x1e, r2, r2, r1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'vcan0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=@framed={{0x28, 0x2, 0x2, 0x0, 0x0, 0x71, 0x11, 0xb7}, [@ldst={0x6, 0x2}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x22) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x2b0, 0x0, 0x5802, 0x294, 0x140, 0x294, 0x230, 0x378, 0x378, 0x230, 0x378, 0x3, 0x0, {[{{@ipv6={@mcast2, @empty, [0xffffff00, 0xff, 0xff000000, 0xff000000], [0xff, 0xff, 0xff000000, 0xff000000], 'netpci0\x00', 'vlan0\x00', {0xff}, {0xff}, 0x32, 0x0, 0x0, 0x80}, 0x0, 0xa8, 0xf0, 0x52020000}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x7ff, 0x10000, 0x81, '\x00', {0x6}}}}, {{@ipv6={@loopback, @remote, [0x0, 0x0, 0xff, 0xffffff00], [0xff, 0x0, 0x0, 0xffffffff], 'ip6erspan0\x00', 'gre0\x00', {0xff}, {}, 0x16, 0x81, 0x3, 0x20}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x800, 0x401, 0x7, 'pptp\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) 4.852070849s ago: executing program 5 (id=1719): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300, {[@noop]}}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x2c, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) 4.782674591s ago: executing program 5 (id=1720): socket$inet6_sctp(0xa, 0x5, 0x84) syz_usbip_server_init(0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$sndctrl(0x0, 0xa, 0x8000) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mq_open(0x0, 0x42, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x62, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102400, 0x19000) r3 = dup(0xffffffffffffffff) readahead(r3, 0xfff, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080), 0x2, 0x6}}, 0x20) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="b700000050000008bca30000000000002403000040feffff7b1af0ff0000000079a4f0ff000000001f030000000000002e030200000000002604fdffffff000e61142000000000001d430000000000007a0a00fe0000001f6114140000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f2440000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c9494963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c88629a6c921c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fbf05b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71ca3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b60f132a2bf8a858392f34072d99aee0ec70aa6d75096e608d97ac4b7bfa2e0ae3e59718e7a7691a98b1334e34553300000000000000000000000000000000062c7cf52e9624806a4833e1c0059e5a703ab9c2e9b38779270dc5e80af75d509b1a31fe6ed3f8c0172659256dc88de4e377c8a07e95ec5549ae47dc43b93a159a201be254048b9e0857ea3c736c761e686f9b3d0690f035617a12055b2cb3a03794d67b95e7f4fc6af323120c09d0503c8ce92e869e22bb2590299ad76d541f844d32f96184f74d433793bbd75ec15fb1497ce835445212421cb4e3ce08395c9055a2"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 4.108902933s ago: executing program 3 (id=1721): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6(0xa, 0x3, 0x7) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r3, 0x800448d3, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r5 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000040), 0x208e24b) 3.817283762s ago: executing program 2 (id=1722): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000003f40), 0x2b01, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f0000003f80)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r0, 0x5, 0x4002) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x4, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') read$FUSE(r5, &(0x7f0000000280)={0x2020}, 0x2020) 3.58671644s ago: executing program 2 (id=1723): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000001000010000001a0000200000"], 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="3000000012"], 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7ff}, 0x1c, 0x0}}], 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS2(r1, 0x4068aea3, &(0x7f0000000200)={0xd5, 0x0, 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.565959194s ago: executing program 0 (id=1724): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2409c8c1, 0x0, 0x0) getpgrp(0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001a400)=""/102384, 0x18ff0) mremap(&(0x7f00000a5000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) 3.365727227s ago: executing program 1 (id=1725): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d0", 0x95}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29", 0xce}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb", 0x4f}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c8", 0x59}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}], 0x48}}], 0x2, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)=0xfffffffe, 0x4) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3.317605705s ago: executing program 2 (id=1726): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x131080, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x8000) openat$tun(0xffffffffffffff9c, 0x0, 0x20802, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'veth1_vlan\x00'}) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, 0x0, 0x4008080) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f00000007c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x5, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) connect$rose(r5, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) connect$rose(r5, &(0x7f00000000c0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x3, [@bcast, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x40) 3.160551832s ago: executing program 3 (id=1727): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d0", 0x95}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29", 0xce}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784b", 0x4a}, {&(0x7f0000000800)}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5ac", 0x54}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}], 0x48}}], 0x2, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)=0xfffffffe, 0x4) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3.120110298s ago: executing program 3 (id=1728): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) semget(0x3, 0x4, 0x205) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="5300030002"], 0x8) setsockopt$inet6_int(r1, 0x29, 0xb, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000400)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x24, 0xe, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x892}, 0x8800) sendmsg$NFT_BATCH(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELSET={0x1c, 0xb, 0xa, 0x201, 0x0, 0x0, {0x5}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x44}, 0x1, 0x0, 0x0, 0x20004004}, 0x20008000) 3.045586111s ago: executing program 2 (id=1729): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$KEYCTL_MOVE(0x1e, r2, r2, r1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'vcan0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=@framed={{0x28, 0x2, 0x2, 0x0, 0x0, 0x71, 0x11, 0xb7}, [@ldst={0x6, 0x2}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x22) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x1a6cc7, 0x2b0, 0x0, 0x5802, 0x294, 0x140, 0x294, 0x230, 0x378, 0x378, 0x230, 0x378, 0x3, 0x0, {[{{@ipv6={@mcast2, @empty, [0xffffff00, 0xff, 0xff000000, 0xff000000], [0xff, 0xff, 0xff000000, 0xff000000], 'netpci0\x00', 'vlan0\x00', {0xff}, {0xff}, 0x32, 0x0, 0x0, 0x80}, 0x0, 0xa8, 0xf0, 0x52020000}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x7ff, 0x10000, 0x81, '\x00', {0x6}}}}, {{@ipv6={@loopback, @remote, [0x0, 0x0, 0xff, 0xffffff00], [0xff, 0x0, 0x0, 0xffffffff], 'ip6erspan0\x00', 'gre0\x00', {0xff}, {}, 0x16, 0x81, 0x3, 0x20}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x800, 0x401, 0x7, 'pptp\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) 3.045285981s ago: executing program 1 (id=1730): socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000500), 0x0, 0x2) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000500)=0x2) ioctl$PPPIOCBRIDGECHAN(r3, 0x40047435, &(0x7f0000000200)=0x1) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfc, 0x7fff0026}]}) close_range(r4, 0xffffffffffffffff, 0x0) 2.234440227s ago: executing program 5 (id=1731): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300, {[@noop]}}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x2c, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) 1.242202792s ago: executing program 5 (id=1732): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, 0x0, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7ff}, 0x1c, 0x0}}], 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS2(r2, 0x4068aea3, &(0x7f0000000200)={0xd5, 0x0, 0x2}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.240152553s ago: executing program 2 (id=1733): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000003f40), 0x2b01, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f0000003f80)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r0, 0x5, 0x4002) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x4, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') read$FUSE(r5, &(0x7f0000000280)={0x2020}, 0x2020) 1.106047385s ago: executing program 1 (id=1734): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r5, 0x0, 0x43, &(0x7f00000002c0)={'IDLETIMER\x00'}, &(0x7f0000000300)=0x1e) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) 289.362482ms ago: executing program 3 (id=1735): syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201100153a42908f00a71729188010203010902240001060000000904000002ffffff0009"], 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 201.159027ms ago: executing program 0 (id=1736): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000380)=[0x0, 0x0, 0x0], 0x3}) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000000)={0x1, [0x9]}, 0x6) 149.043975ms ago: executing program 5 (id=1737): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6(0xa, 0x3, 0x7) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r3, 0x800448d3, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r5 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000040), 0x208e24b) 0s ago: executing program 1 (id=1738): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d0", 0x95}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29", 0xce}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784b", 0x4a}, {&(0x7f0000000800)}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7", 0x57}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}], 0x48}}], 0x2, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)=0xfffffffe, 0x4) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) kernel console output (not intermixed with test programs): packet: 8 [ 109.666857][ T21] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 110.017141][ T4781] usb 1-1: unable to read config index 0 descriptor/all [ 110.039247][ T4781] usb 1-1: can't read configurations, error -71 [ 110.786768][ T21] usb 2-1: Using ep0 maxpacket: 16 [ 111.627510][ T21] usb 2-1: config 0 has no interfaces? [ 111.627544][ T21] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 111.627568][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.630620][ T21] usb 2-1: config 0 descriptor?? [ 112.589937][ T21] usb 2-1: USB disconnect, device number 6 [ 114.911249][ T4902] trusted_key: encrypted_key: insufficient parameters specified [ 117.395143][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805f43b800: rx timeout, send abort [ 117.904507][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805f43b800: abort rx timeout. Force session deactivation [ 118.247588][ T4959] loop0: detected capacity change from 0 to 256 [ 119.027172][ T4961] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 119.036880][ T4961] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 119.046361][ T4961] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 119.058571][ T4961] syz.2.204 (4961) used greatest stack depth: 18224 bytes left [ 119.858397][ T26] kauditd_printk_skb: 65 callbacks suppressed [ 119.858415][ T26] audit: type=1800 audit(1776112834.923:78): pid=4961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.204" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 128.930986][ T5012] loop2: detected capacity change from 0 to 256 [ 132.758934][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.765367][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.106763][ T4237] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 134.836819][ T4237] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.187901][ T4237] usb 4-1: string descriptor 0 read error: -71 [ 135.194180][ T4237] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 135.205550][ T4237] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.307198][ T4237] usb 4-1: config 0 descriptor?? [ 135.341032][ T5054] binder: 5052:5054 unknown command 1074553619 [ 135.348025][ T5054] binder: 5052:5054 ioctl c0306201 200000000040 returned -22 [ 135.355961][ T5054] binder: 5052:5054 unknown command 1074553620 [ 135.362550][ T4237] usb 4-1: can't set config #0, error -71 [ 135.363581][ T4237] usb 4-1: USB disconnect, device number 3 [ 135.368608][ T5054] binder: 5052:5054 ioctl c0306201 200000000640 returned -22 [ 136.906816][ T4277] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 137.756995][ T4277] usb 2-1: too many configurations: 70, using maximum allowed: 8 [ 137.928340][ T4277] usb 2-1: config index 0 descriptor too short (expected 65505, got 72) [ 138.828876][ T4277] usb 2-1: config index 1 descriptor too short (expected 65505, got 72) [ 139.266960][ T4277] usb 2-1: config index 2 descriptor too short (expected 65505, got 72) [ 139.376915][ T4277] usb 2-1: config index 3 descriptor too short (expected 65505, got 72) [ 139.797203][ T4277] usb 2-1: unable to read config index 4 descriptor/all [ 139.829808][ T4277] usb 2-1: can't read configurations, error -71 [ 140.478609][ T5120] loop0: detected capacity change from 0 to 256 [ 143.467921][ T5144] netlink: 12 bytes leftover after parsing attributes in process `syz.2.257'. [ 143.660397][ T5144] bridge1: port 1(veth0_to_bond) entered blocking state [ 143.837315][ T5153] binder: Binderfs stats mode cannot be changed during a remount [ 144.842726][ T5144] bridge1: port 1(veth0_to_bond) entered disabled state [ 144.915331][ T5144] device veth0_to_bond entered promiscuous mode [ 148.513727][ T5204] bond0: ARP monitoring cannot be used with MII monitoring [ 148.847649][ T4229] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 149.096829][ T4229] usb 1-1: Using ep0 maxpacket: 16 [ 149.220490][ T4229] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.105174][ T4229] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 150.206764][ T4229] usb 1-1: config 0 interface 0 has no altsetting 0 [ 150.213701][ T4229] usb 1-1: New USB device found, idVendor=1038, idProduct=12c2, bcdDevice= 0.00 [ 150.223093][ T4229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.245939][ T4229] usb 1-1: config 0 descriptor?? [ 151.161859][ T4229] hid-generic 0003:1038:12C2.0003: unknown main item tag 0x0 [ 151.184686][ T4229] hid-generic 0003:1038:12C2.0003: unknown main item tag 0x0 [ 151.192677][ T4229] hid-generic 0003:1038:12C2.0003: unknown main item tag 0x0 [ 151.206808][ T4229] hid-generic 0003:1038:12C2.0003: unknown main item tag 0x0 [ 151.256814][ T4229] hid-generic 0003:1038:12C2.0003: unknown main item tag 0x0 [ 151.296820][ T4229] hid-generic 0003:1038:12C2.0003: unknown main item tag 0x0 [ 151.317709][ T4229] hid-generic 0003:1038:12C2.0003: unknown main item tag 0x0 [ 151.371340][ T4229] hid-generic 0003:1038:12C2.0003: unknown main item tag 0x0 [ 151.379370][ T4229] hid-generic 0003:1038:12C2.0003: unknown main item tag 0x0 [ 151.412018][ T4229] hid-generic 0003:1038:12C2.0003: unknown main item tag 0x0 [ 151.433001][ T4229] hid-generic 0003:1038:12C2.0003: unknown main item tag 0x0 [ 151.461708][ T4229] hid-generic 0003:1038:12C2.0003: unknown main item tag 0x0 [ 151.493897][ T4229] hid-generic 0003:1038:12C2.0003: unknown main item tag 0x0 [ 151.532452][ T4229] hid-generic 0003:1038:12C2.0003: unknown main item tag 0x0 [ 151.575978][ T4229] hid-generic 0003:1038:12C2.0003: unknown main item tag 0x0 [ 151.602726][ T4229] hid-generic 0003:1038:12C2.0003: unknown main item tag 0x0 [ 151.640393][ T4229] hid-generic 0003:1038:12C2.0003: unknown main item tag 0x0 [ 151.662042][ T4229] hid-generic 0003:1038:12C2.0003: unknown main item tag 0x0 [ 151.674264][ T4229] hid-generic 0003:1038:12C2.0003: unknown main item tag 0x0 [ 151.688834][ T4229] hid-generic 0003:1038:12C2.0003: unknown main item tag 0x0 [ 151.698263][ T4229] hid-generic 0003:1038:12C2.0003: unknown main item tag 0x0 [ 151.706157][ T4229] hid-generic 0003:1038:12C2.0003: unknown main item tag 0x0 [ 151.714162][ T4229] hid-generic 0003:1038:12C2.0003: unknown main item tag 0x0 [ 151.722383][ T4229] hid-generic 0003:1038:12C2.0003: unknown main item tag 0x0 [ 151.730954][ T4229] hid-generic 0003:1038:12C2.0003: unknown main item tag 0x0 [ 151.749944][ T4229] hid-generic 0003:1038:12C2.0003: unknown main item tag 0x0 [ 151.764652][ T4229] hid-generic 0003:1038:12C2.0003: unknown main item tag 0x0 [ 151.773384][ T4229] hid-generic 0003:1038:12C2.0003: unknown main item tag 0x0 [ 151.781301][ T4229] hid-generic 0003:1038:12C2.0003: unknown main item tag 0x0 [ 151.791316][ T4229] hid-generic 0003:1038:12C2.0003: unknown main item tag 0x0 [ 151.842446][ T4229] hid-generic 0003:1038:12C2.0003: unknown main item tag 0x0 [ 151.853256][ T4229] hid-generic 0003:1038:12C2.0003: unknown main item tag 0x0 [ 151.862457][ T4229] hid-generic 0003:1038:12C2.0003: unknown main item tag 0x0 [ 151.871306][ T4229] hid-generic 0003:1038:12C2.0003: unknown main item tag 0x0 [ 151.887549][ T4229] hid-generic 0003:1038:12C2.0003: unknown main item tag 0x0 [ 151.905334][ T4229] hid-generic 0003:1038:12C2.0003: unknown main item tag 0x0 [ 152.025166][ T5240] loop0: detected capacity change from 0 to 256 [ 152.149169][ T4229] hid-generic 0003:1038:12C2.0003: unknown main item tag 0x0 [ 152.485233][ T4229] hid-generic 0003:1038:12C2.0003: unknown main item tag 0x0 [ 152.661045][ T4229] hid-generic 0003:1038:12C2.0003: hidraw0: USB HID v0.08 Device [HID 1038:12c2] on usb-dummy_hcd.0-1/input0 [ 152.711522][ T4229] usb 1-1: USB disconnect, device number 6 [ 153.003216][ T5232] chnl_net:caif_netlink_parms(): no params data found [ 153.016444][ T5247] fido_id[5247]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 153.762668][ T4408] Bluetooth: hci5: command 0x0409 tx timeout [ 153.960427][ T5232] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.026770][ T5232] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.926792][ T4229] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 155.167183][ T5232] device bridge_slave_0 entered promiscuous mode [ 155.323860][ T5232] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.357122][ T5232] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.364958][ T26] audit: type=1326 audit(1776112871.253:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5276 comm="syz.1.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4693386819 code=0x7ffc0000 [ 155.473079][ T26] audit: type=1326 audit(1776112871.263:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5276 comm="syz.1.299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4693386819 code=0x7ffc0000 [ 155.518951][ T5232] device bridge_slave_1 entered promiscuous mode [ 155.558179][ T4229] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.608686][ T4229] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 155.662082][ T4229] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 155.837305][ T4229] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 155.856536][ T4229] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 155.866898][ T4229] usb 1-1: Product: syz [ 155.871237][ T4229] usb 1-1: Manufacturer: syz [ 155.876558][ T4229] usb 1-1: SerialNumber: syz [ 155.897330][ T4229] usb 1-1: config 0 descriptor?? [ 155.897415][ T13] Bluetooth: hci5: command 0x041b tx timeout [ 155.955425][ T4229] radio-si470x 1-1:0.0: could not find interrupt in endpoint [ 155.967198][ T4229] radio-si470x: probe of 1-1:0.0 failed with error -5 [ 155.976561][ T4229] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 156.079450][ T5232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.468302][ T5232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.624146][ T5232] team0: Port device team_slave_0 added [ 156.672846][ T5232] team0: Port device team_slave_1 added [ 156.724878][ T5232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.732146][ T5232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.837233][ T5232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.968562][ T5232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.977750][ T5232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.064376][ T5232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.121594][ T5232] device hsr_slave_0 entered promiscuous mode [ 157.129563][ T5232] device hsr_slave_1 entered promiscuous mode [ 157.137578][ T5232] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 157.148050][ T5232] Cannot create hsr debugfs directory [ 157.324939][ T4409] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.449670][ T4409] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.521509][ T4409] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.585652][ T4409] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.617880][ T4408] usb 1-1: USB disconnect, device number 7 [ 157.886722][ T4172] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 159.116998][ T4172] usb 3-1: unable to get BOS descriptor or descriptor too short [ 159.297099][ T4172] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 159.384039][ T4172] usb 3-1: can't read configurations, error -71 [ 159.386953][ T4781] Bluetooth: hci5: command 0x040f tx timeout [ 159.507025][ T5232] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 159.538190][ T5232] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 159.644330][ T5232] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 159.751673][ T5232] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 161.477104][ T4408] Bluetooth: hci5: command 0x0419 tx timeout [ 161.751828][ T5232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.770003][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 161.782839][ T4210] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 161.885503][ T5232] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.946225][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 161.978999][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 162.007427][ T4340] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.014878][ T4340] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.039970][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 162.066734][ T4227] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 162.074740][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 162.093909][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 162.103717][ T4340] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.111018][ T4340] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.122219][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 162.134928][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 162.155860][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 162.175951][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 162.184930][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 162.238862][ T5281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 162.273475][ T5281] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 162.340440][ T5281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 162.365626][ T5281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 162.402533][ T5281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 162.424795][ T5281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 162.456004][ T5232] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 162.464199][ T4227] usb 2-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 162.485393][ T4227] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 162.706956][ T4227] usb 2-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 162.761593][ T4227] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.806772][ T4227] usb 2-1: Product: syz [ 162.821412][ T4227] usb 2-1: Manufacturer: syz [ 162.834822][ T4409] device hsr_slave_0 left promiscuous mode [ 162.851187][ T4409] device hsr_slave_1 left promiscuous mode [ 162.852264][ T4227] usb 2-1: SerialNumber: syz [ 162.997177][ T4409] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.005920][ T4227] usb 2-1: config 0 descriptor?? [ 163.016428][ T4409] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.708553][ T4409] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.716010][ T4409] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.788346][ T4409] device bridge_slave_1 left promiscuous mode [ 163.813810][ T4409] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.886935][ T4227] mos7840 2-1:0.0: required endpoints missing [ 163.889629][ T4409] device bridge_slave_0 left promiscuous mode [ 163.916721][ T4227] usb 2-1: USB disconnect, device number 9 [ 163.928801][ T5393] fuse: Bad value for 'fd' [ 163.939847][ T4409] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.821387][ T4409] device veth1_macvtap left promiscuous mode [ 164.845299][ T4409] device veth0_macvtap left promiscuous mode [ 164.867064][ T4409] device veth1_vlan left promiscuous mode [ 164.883411][ T4409] device veth0_vlan left promiscuous mode [ 165.106856][ T4227] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 165.916726][ T4227] usb 2-1: Using ep0 maxpacket: 16 [ 166.136961][ T4227] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.156733][ T4227] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 166.177370][ T4227] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 166.190449][ T4227] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.212800][ T4227] usb 2-1: config 0 descriptor?? [ 166.957096][ T4227] usb 2-1: can't set config #0, error -71 [ 167.019067][ T4227] usb 2-1: USB disconnect, device number 10 [ 167.028054][ T4409] team0 (unregistering): Port device team_slave_1 removed [ 167.082716][ T4409] team0 (unregistering): Port device team_slave_0 removed [ 167.129844][ T4409] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.146288][ T4409] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.859298][ T4409] bond0 (unregistering): Released all slaves [ 167.937234][ T4553] Bluetooth: hci4: Frame reassembly failed (-84) [ 168.228057][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 168.244038][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 168.260807][ T5232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.644870][ T1107] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 168.957013][ T1107] usb 4-1: Using ep0 maxpacket: 16 [ 169.079780][ T1107] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.154398][ T1107] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 169.432567][ T1107] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 169.459571][ T1107] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.471455][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 169.491534][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 169.492204][ T1107] usb 4-1: config 0 descriptor?? [ 169.532335][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 169.542156][ T1107] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 169.554089][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 169.576481][ T5232] device veth0_vlan entered promiscuous mode [ 169.584111][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 169.600666][ T4411] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 169.608852][ T4232] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 169.632668][ T5232] device veth1_vlan entered promiscuous mode [ 169.705560][ T5281] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 169.737820][ T5281] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 169.755069][ T5281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 169.797115][ T5281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 169.822945][ T13] usb 4-1: USB disconnect, device number 4 [ 169.831688][ T5232] device veth0_macvtap entered promiscuous mode [ 169.857696][ T5232] device veth1_macvtap entered promiscuous mode [ 169.877120][ T4232] usb 1-1: Using ep0 maxpacket: 8 [ 169.929843][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.951799][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.962696][ T1107] Bluetooth: hci4: command 0xfc11 tx timeout [ 169.969867][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.970402][ T4194] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 169.980672][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.039086][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.096730][ T4232] usb 1-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 170.102918][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.106462][ T4232] usb 1-1: config 6 interface 0 altsetting 0 has an invalid endpoint with address 0xEC, skipping [ 170.213516][ T5490] netlink: 16211 bytes leftover after parsing attributes in process `syz.2.345'. [ 170.273682][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.317026][ T4232] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 170.335990][ T4232] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.347122][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.384862][ T4232] usb 1-1: Product: syz [ 170.404348][ T5232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.414250][ T4232] usb 1-1: Manufacturer: syz [ 170.431522][ T4232] usb 1-1: SerialNumber: syz [ 170.447032][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 170.466375][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 170.497735][ T4232] hso 1-1:6.0: Can't find BULK IN endpoint [ 170.517679][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 170.707456][ T4340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 170.727892][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.757092][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.895817][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.102451][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.330669][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.435824][ T21] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 171.443663][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.456013][ T5232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.515128][ T5232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.589943][ T5232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.629947][ T5281] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 171.647649][ T5281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 171.788082][ T5232] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.801284][ T5232] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.812118][ T5232] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.825466][ T5232] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.837153][ T21] usb 4-1: Using ep0 maxpacket: 32 [ 171.957969][ T4172] usb 1-1: USB disconnect, device number 8 [ 171.997507][ T21] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 255 [ 172.397988][ T21] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 172.463773][ T21] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 172.474977][ T21] usb 4-1: Product: syz [ 172.484957][ T21] usb 4-1: Manufacturer: syz [ 172.495304][ T21] usb 4-1: SerialNumber: syz [ 172.508757][ T21] usb 4-1: config 0 descriptor?? [ 172.583491][ T5496] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 172.776299][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.816680][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.834727][ T5281] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 172.889019][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.916961][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.920938][ T4231] usb 4-1: USB disconnect, device number 5 [ 172.965483][ T4553] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 173.146775][ T4781] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 174.177223][ T4781] usb 1-1: Using ep0 maxpacket: 8 [ 174.487178][ T4781] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.506728][ T4781] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 174.516467][ T4781] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 174.527009][ T4781] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.548105][ T4781] usb 1-1: config 0 descriptor?? [ 174.966975][ T4227] usb 1-1: USB disconnect, device number 9 [ 177.347153][ T5611] Zero length message leads to an empty skb [ 179.406779][ T4232] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 180.137009][ T4232] usb 3-1: too many configurations: 36, using maximum allowed: 8 [ 180.157255][ T5645] crypto_alloc_aead failed rc=-4 [ 180.616916][ T4227] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 180.917011][ T4227] usb 6-1: Using ep0 maxpacket: 32 [ 181.036851][ T4227] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.048352][ T4227] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.084454][ T4227] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 181.116985][ T4227] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.157121][ T4232] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 181.167190][ T4227] usb 6-1: config 0 descriptor?? [ 181.178153][ T4232] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.188371][ T4232] usb 3-1: Product: syz [ 181.192688][ T4232] usb 3-1: Manufacturer: syz [ 181.197551][ T4232] usb 3-1: SerialNumber: syz [ 181.224160][ T4172] Bluetooth: hci3: command 0x0406 tx timeout [ 181.231478][ T4227] hub 6-1:0.0: USB hub found [ 181.237821][ T4172] Bluetooth: hci1: command 0x0406 tx timeout [ 181.245075][ T4172] Bluetooth: hci2: command 0x0406 tx timeout [ 181.270304][ T4232] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 181.437093][ T4227] hub 6-1:0.0: 1 port detected [ 181.874242][ T4227] usb 6-1: USB disconnect, device number 2 [ 182.037509][ T4172] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 182.157939][ T4232] usb 3-1: USB disconnect, device number 9 [ 182.263922][ T4197] Bluetooth: Wrong link type (-71) [ 183.157009][ T4172] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 183.196717][ T4172] ath9k_htc: Failed to initialize the device [ 183.212585][ T4232] usb 3-1: ath9k_htc: USB layer deinitialized [ 183.394185][ T5745] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 183.401278][ T5745] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 183.454689][ T5743] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(6) [ 183.461337][ T5743] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 183.621083][ T5745] vhci_hcd vhci_hcd.0: Device attached [ 183.827115][ T4227] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 183.967815][ T5743] vhci_hcd vhci_hcd.0: Device attached [ 184.104037][ T5748] vhci_hcd: connection closed [ 184.108373][ T406] vhci_hcd: stop threads [ 184.125643][ T5746] vhci_hcd: connection reset by peer [ 184.145180][ T406] vhci_hcd: release socket [ 184.158994][ T406] vhci_hcd: disconnect device [ 184.184853][ T406] vhci_hcd: stop threads [ 184.255880][ T406] vhci_hcd: release socket [ 184.267745][ T406] vhci_hcd: disconnect device [ 184.279552][ T5757] netlink: 60 bytes leftover after parsing attributes in process `syz.1.408'. [ 184.306727][ T5757] netlink: 60 bytes leftover after parsing attributes in process `syz.1.408'. [ 184.333473][ T5757] netlink: 60 bytes leftover after parsing attributes in process `syz.1.408'. [ 185.862047][ T1107] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 186.122038][ T1107] usb 4-1: Using ep0 maxpacket: 8 [ 186.267146][ T1107] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 186.497564][ T1107] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 186.513915][ T1107] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 186.536686][ T1107] usb 4-1: Product: syz [ 186.541076][ T1107] usb 4-1: Manufacturer: syz [ 186.552928][ T1107] usb 4-1: SerialNumber: syz [ 186.829220][ T1107] usb 4-1: Invalid connection information received from device [ 187.052867][ T1107] usb 4-1: USB disconnect, device number 6 [ 189.820138][ T4227] vhci_hcd: vhci_device speed not set [ 194.199167][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.205831][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.173715][ T5979] netlink: 12 bytes leftover after parsing attributes in process `syz.3.464'. [ 197.268414][ T5979] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 197.343316][ T5982] device macvlan2 entered promiscuous mode [ 197.422678][ T5982] device bond1 entered promiscuous mode [ 197.455460][ T5982] device bridge1 entered promiscuous mode [ 197.475920][ T5982] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 197.516161][ T5982] device bond1 left promiscuous mode [ 197.536754][ T5982] device bridge1 left promiscuous mode [ 199.882285][ T6022] autofs4:pid:6022:autofs_fill_super: called with bogus options [ 203.616214][ T6050] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.623788][ T6050] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.860935][ T6050] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.947789][ T6050] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.320122][ T6050] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.343690][ T6050] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.412417][ T6050] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.480577][ T6050] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.618124][ T6109] netlink: 48 bytes leftover after parsing attributes in process `syz.0.496'. [ 208.247239][ T6086] (unnamed net_device) (uninitialized): ARP monitoring cannot be used with MII monitoring [ 218.647177][ T4172] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 219.246884][ T4172] usb 1-1: Using ep0 maxpacket: 8 [ 219.527050][ T4172] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 219.548614][ T4172] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 219.666926][ T4172] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 219.721007][ T4172] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 219.737173][ T4172] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 219.749138][ T4172] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.266847][ T4172] usb 1-1: GET_CAPABILITIES returned 0 [ 220.272418][ T4172] usbtmc 1-1:16.0: can't read capabilities [ 220.396830][ T6272] netlink: 4 bytes leftover after parsing attributes in process `syz.3.540'. [ 220.523361][ T13] usb 1-1: USB disconnect, device number 10 [ 223.187869][ T6331] NILFS (nullb0): couldn't find nilfs on the device [ 225.036772][ T13] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 225.977165][ T13] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 226.007390][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.077330][ T13] usb 2-1: config 0 descriptor?? [ 227.026898][ T4227] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 227.293864][ T13] [drm] vendor descriptor length:6 data:06 5f 01 74 75 6e 00 00 00 00 00 [ 227.303007][ T13] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 227.407039][ T4227] usb 6-1: config 128 has an invalid interface number: 148 but max is 0 [ 227.433339][ T4227] usb 6-1: config 128 has no interface number 0 [ 227.476322][ T4227] usb 6-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 227.536723][ T13] [drm:udl_init] *ERROR* Selecting channel failed [ 227.553666][ T13] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 227.556839][ T4227] usb 6-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 227.664764][ T4227] usb 6-1: config 128 interface 148 has no altsetting 0 [ 227.679383][ T13] [drm] Initialized udl on minor 2 [ 227.707172][ T13] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 227.724462][ T13] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 227.748791][ T13] usb 2-1: USB disconnect, device number 11 [ 227.761387][ T4408] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 227.774406][ T4408] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 227.815045][ T4408] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 227.856976][ T4227] usb 6-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 227.882936][ T4227] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.921194][ T4227] usb 6-1: Product: syz [ 227.941305][ T4227] usb 6-1: Manufacturer: syz [ 227.974745][ T4227] usb 6-1: SerialNumber: syz [ 228.353743][ T4227] usb 6-1: USB disconnect, device number 3 [ 228.826872][ T4227] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 229.097009][ T4227] usb 6-1: Using ep0 maxpacket: 8 [ 229.286852][ T4227] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 229.376512][ T4227] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 229.408615][ T4227] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 229.763887][ T4227] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 16 [ 230.014301][ T4227] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 230.046777][ T4227] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 230.056429][ T4227] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.086890][ T4227] usb 6-1: can't set config #16, error -71 [ 230.146814][ T4227] usb 6-1: USB disconnect, device number 4 [ 230.148517][ T6427] netlink: 4 bytes leftover after parsing attributes in process `syz.5.572'. [ 230.221907][ T6427] device team1 entered promiscuous mode [ 230.240242][ T6427] 8021q: adding VLAN 0 to HW filter on device team1 [ 230.426918][ T1110] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 231.027016][ T1110] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 231.051397][ T1110] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.080894][ T1110] usb 3-1: Product: syz [ 231.087052][ T1110] usb 3-1: Manufacturer: syz [ 231.091707][ T1110] usb 3-1: SerialNumber: syz [ 231.326929][ T13] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 232.777392][ T1110] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 232.862329][ T1110] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 232.876937][ T13] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 232.899369][ T1110] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 232.902904][ T13] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 232.921807][ T1110] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 232.949613][ T1110] lan78xx: probe of 3-1:1.0 failed with error -71 [ 232.986550][ T1110] usb 3-1: USB disconnect, device number 10 [ 233.087053][ T13] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 233.101798][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 233.126732][ T13] usb 1-1: SerialNumber: syz [ 233.402097][ T1110] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 233.656931][ T1110] usb 3-1: Using ep0 maxpacket: 8 [ 233.816806][ T1110] usb 3-1: unable to get BOS descriptor or descriptor too short [ 233.859416][ T13] usb 1-1: 0:2 : does not exist [ 233.894573][ T13] usb 1-1: USB disconnect, device number 11 [ 234.446581][ T6490] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 234.459143][ T6490] SQUASHFS error: Failed to read block 0x0: -5 [ 234.847126][ T1110] usb 3-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=2b.cd [ 234.857178][ T1110] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.865283][ T1110] usb 3-1: Product: syz [ 234.907022][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 234.984411][ T1110] usb 3-1: Manufacturer: syz [ 235.002453][ T1110] usb 3-1: SerialNumber: syz [ 235.377953][ T1110] kalmia: probe of 3-1:1.0 failed with error -22 [ 235.480300][ T1110] usb 3-1: USB disconnect, device number 11 [ 235.577350][ T4781] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 235.996964][ T4781] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 39, changing to 4 [ 236.030475][ T4781] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 236.484059][ T4781] usb 6-1: config 0 interface 0 has no altsetting 0 [ 237.236922][ T4781] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 237.265408][ T4781] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 237.274034][ T13] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 237.452059][ T6530] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 237.520660][ T4781] usb 6-1: Product: syz [ 237.963612][ T4781] usb 6-1: Manufacturer: syz [ 237.968521][ T4781] usb 6-1: SerialNumber: syz [ 237.983608][ T4781] usb 6-1: config 0 descriptor?? [ 237.996962][ T13] usb 3-1: too many configurations: 36, using maximum allowed: 8 [ 238.029911][ T4781] usb 6-1: selecting invalid altsetting 0 [ 238.990212][ T4227] usb 6-1: USB disconnect, device number 5 [ 239.018076][ T13] usb 3-1: unable to read config index 3 descriptor/start: -71 [ 239.040407][ T13] usb 3-1: can't read configurations, error -71 [ 239.976807][ T4781] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 240.477671][ T6568] netlink: 24 bytes leftover after parsing attributes in process `syz.2.609'. [ 241.779337][ T1107] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 242.071715][ T6581] netlink: 20 bytes leftover after parsing attributes in process `syz.5.614'. [ 242.081966][ T6581] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 242.089799][ T6581] IPv6: NLM_F_CREATE should be set when creating new route [ 242.116668][ T4781] usb 4-1: Using ep0 maxpacket: 8 [ 242.123905][ T6581] netlink: 20 bytes leftover after parsing attributes in process `syz.5.614'. [ 242.128766][ T1107] usb 1-1: Using ep0 maxpacket: 32 [ 242.142326][ T6581] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 242.448877][ T6583] netlink: 'syz.5.615': attribute type 1 has an invalid length. [ 242.476972][ T4781] usb 4-1: unable to get BOS descriptor or descriptor too short [ 242.523857][ T6588] input: syz0 as /devices/virtual/input/input7 [ 242.530884][ T1107] usb 1-1: unable to get BOS descriptor or descriptor too short [ 242.597184][ T4781] usb 4-1: config 4 interface 0 has no altsetting 0 [ 242.616816][ T1107] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 243.391031][ T1107] usb 1-1: can't read configurations, error -71 [ 243.769840][ T4781] usb 4-1: string descriptor 0 read error: -71 [ 243.878005][ T4781] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 243.945281][ T4781] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 244.086927][ T4781] usb 4-1: can't set config #4, error -71 [ 245.992570][ T4781] usb 4-1: USB disconnect, device number 7 [ 246.832222][ T150] block nbd3: Attempted send on invalid socket [ 246.839493][ T150] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 246.851180][ T6627] FAT-fs (nbd3): unable to read boot sector [ 247.077463][ T4230] Bluetooth: hci4: command 0x1003 tx timeout [ 247.087688][ T4194] Bluetooth: hci4: sending frame failed (-49) [ 247.257275][ T1107] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 247.647488][ T1107] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 247.656726][ T1107] usb 6-1: config 1 has no interface number 0 [ 247.664362][ T1107] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1023 [ 247.676474][ T1107] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 8 [ 247.686827][ T1107] usb 6-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 247.789259][ T6640] comedi: valid board names for 8255 driver are: [ 247.798983][ T6640] 8255 [ 247.801776][ T6640] comedi: valid board names for vmk80xx driver are: [ 247.808652][ T6640] vmk80xx [ 247.811788][ T6640] comedi: valid board names for usbduxsigma driver are: [ 247.819187][ T6640] usbduxsigma [ 247.822563][ T6640] comedi: valid board names for usbduxfast driver are: [ 247.829439][ T6640] usbduxfast [ 247.832777][ T6640] comedi: valid board names for usbdux driver are: [ 247.839458][ T6640] usbdux [ 247.842486][ T6640] comedi: valid board names for ni6501 driver are: [ 247.849061][ T6640] ni6501 [ 247.852001][ T6640] comedi: valid board names for dt9812 driver are: [ 247.857113][ T1107] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 247.860878][ T6640] dt9812 [ 247.870845][ T6640] comedi: valid board names for ni_labpc_cs driver are: [ 247.874711][ T1107] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.878354][ T6640] ni_labpc_cs [ 247.890041][ T6640] comedi: valid board names for ni_daq_700 driver are: [ 247.896956][ T6640] ni_daq_700 [ 247.897417][ T1107] usb 6-1: Product: syz [ 247.900327][ T6640] comedi: valid board names for labpc_pci driver are: [ 247.900339][ T6640] labpc_pci [ 247.900346][ T6640] comedi: valid board names for adl_pci9118 driver are: [ 247.900355][ T6640] pci9118dg [ 247.900361][ T6640] pci9118hg [ 247.900368][ T6640] pci9118hr [ 247.900374][ T6640] comedi: valid board names for 8255_pci driver are: [ 247.900382][ T6640] 8255_pci [ 247.900389][ T6640] comedi: valid board names for s526 driver are: [ 247.900397][ T6640] s526 [ 247.900404][ T6640] comedi: valid board names for multiq3 driver are: [ 247.900412][ T6640] multiq3 [ 247.900419][ T6640] comedi: valid board names for pcmuio driver are: [ 247.900428][ T6640] pcmuio48 [ 247.900436][ T6640] pcmuio96 [ 247.900441][ T6640] comedi: valid board names for pcmmio driver are: [ 247.900450][ T6640] pcmmio [ 247.900456][ T6640] comedi: valid board names for pcmda12 driver are: [ 247.904866][ T1107] usb 6-1: Manufacturer: syz [ 247.911433][ T6640] pcmda12 [ 247.911446][ T6640] comedi: valid board names for pcmad driver are: [ 247.911456][ T6640] pcmad12 [ 247.911464][ T6640] pcmad16 [ 247.911470][ T6640] comedi: valid board names for ni_labpc driver are: [ 247.911478][ T6640] lab-pc-1200 [ 247.911484][ T6640] lab-pc-1200ai [ 247.911491][ T6640] lab-pc+ [ 247.911497][ T6640] comedi: valid board names for atmio16 driver are: [ 247.911506][ T6640] atmio16 [ 247.911513][ T6640] atmio16d [ 247.911520][ T6640] comedi: valid board names for ni_at_ao driver are: [ 247.911529][ T6640] at-ao-6 [ 247.911534][ T6640] at-ao-10 [ 247.911540][ T6640] comedi: valid board names for ni_at_a2150 driver are: [ 247.911547][ T6640] ni_at_a2150 [ 247.911553][ T6640] comedi: valid board names for adq12b driver are: [ 247.911560][ T6640] adq12b [ 247.911566][ T6640] comedi: valid board names for mpc624 driver are: [ 247.911573][ T6640] mpc624 [ 247.911579][ T6640] comedi: valid board names for c6xdigio driver are: [ 247.911587][ T6640] c6xdigio [ 247.911594][ T6640] comedi: valid board names for aio_iiro_16 driver are: [ 247.911602][ T6640] aio_iiro_16 [ 247.911609][ T6640] comedi: valid board names for aio_aio12_8 driver are: [ 247.911617][ T6640] aio_aio12_8 [ 247.911623][ T6640] aio_ai12_8 [ 247.911629][ T6640] aio_ao12_4 [ 247.911637][ T6640] comedi: valid board names for fl512 driver are: [ 247.911644][ T6640] fl512 [ 247.911649][ T6640] comedi: valid board names for dmm32at driver are: [ 247.911657][ T6640] dmm32at [ 247.911663][ T6640] comedi: valid board names for dt282x driver are: [ 247.911671][ T6640] dt2821 [ 247.923466][ T1107] usb 6-1: SerialNumber: syz [ 247.928703][ T6640] dt2821-f [ 247.928715][ T6640] dt2821-g [ 247.928721][ T6640] dt2823 [ 247.928727][ T6640] dt2824-pgh [ 247.928734][ T6640] dt2824-pgl [ 247.928741][ T6640] dt2825 [ 247.928747][ T6640] dt2827 [ 247.928754][ T6640] dt2828 [ 247.928760][ T6640] dt2829 [ 247.928766][ T6640] dt21-ez [ 247.928772][ T6640] dt23-ez [ 247.928777][ T6640] dt24-ez [ 247.928784][ T6640] dt24-ez-pgl [ 247.928791][ T6640] comedi: valid board names for dt2817 driver are: [ 247.928800][ T6640] dt2817 [ 247.928806][ T6640] comedi: valid board names for dt2815 driver are: [ 247.966986][ T6630] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 247.969400][ T6640] dt2815 [ 247.971708][ T6630] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 247.973311][ T6640] comedi: valid board names for dt2814 driver are: [ 248.008989][ T1107] usb 6-1: Expected 3 endpoints, found: 2 [ 248.010355][ T6640] dt2814 [ 248.010367][ T6640] comedi: valid board names for dt2811 driver are: [ 248.010376][ T6640] dt2811-pgh [ 248.239301][ T1107] usb 6-1: USB disconnect, device number 6 [ 248.243915][ T6640] dt2811-pgl [ 248.261523][ T6640] comedi: valid board names for dt2801 driver are: [ 248.268527][ T6640] dt2801 [ 248.271490][ T6640] comedi: valid board names for das6402 driver are: [ 248.278552][ T6640] das6402-12 [ 248.281853][ T6640] das6402-16 [ 248.285151][ T6640] comedi: valid board names for das1800 driver are: [ 248.292518][ T6640] das-1701st [ 248.295815][ T6640] das-1701st-da [ 248.299414][ T6640] das-1702st [ 248.302782][ T6640] das-1702st-da [ 248.306400][ T6640] das-1702hr [ 248.309748][ T6640] das-1702hr-da [ 248.313290][ T6640] das-1701ao [ 248.316760][ T6640] das-1702ao [ 248.320044][ T6640] das-1801st [ 248.323325][ T6640] das-1801st-da [ 248.326921][ T6640] das-1802st [ 248.330243][ T6640] das-1802st-da [ 248.333781][ T6640] das-1802hr [ 248.337201][ T6640] das-1802hr-da [ 248.340738][ T6640] das-1801hc [ 248.344052][ T6640] das-1802hc [ 248.349693][ T6640] das-1801ao [ 248.352990][ T6640] das-1802ao [ 248.356257][ T6640] comedi: valid board names for das800 driver are: [ 248.362887][ T6640] das-800 [ 248.365906][ T6640] cio-das800 [ 248.369298][ T6640] das-801 [ 248.372323][ T6640] cio-das801 [ 248.375745][ T6640] das-802 [ 248.378909][ T6640] cio-das802 [ 248.382217][ T6640] cio-das802/16 [ 248.385752][ T6640] comedi: valid board names for isa-das08 driver are: [ 248.393113][ T6640] isa-das08 [ 248.396319][ T6640] das08-pgm [ 248.399567][ T6640] das08-pgh [ 248.402768][ T6640] das08-pgl [ 248.405954][ T6640] das08-aoh [ 248.409201][ T6640] das08-aol [ 248.412394][ T6640] das08-aom [ 248.415600][ T6640] das08/jr-ao [ 248.419193][ T6640] das08jr-16-ao [ 248.422752][ T6640] pc104-das08 [ 248.426350][ T6640] das08jr/16 [ 248.429699][ T6640] comedi: valid board names for das16m1 driver are: [ 248.436367][ T6640] das16m1 [ 248.439492][ T6640] comedi: valid board names for dac02 driver are: [ 248.445900][ T6640] dac02 [ 248.448907][ T6640] comedi: valid board names for rti802 driver are: [ 248.455403][ T6640] rti802 [ 248.460223][ T6640] comedi: valid board names for rti800 driver are: [ 248.466781][ T6640] rti800 [ 248.469714][ T6640] rti815 [ 248.472738][ T6640] comedi: valid board names for pcm3724 driver are: [ 248.479374][ T6640] pcm3724 [ 248.482481][ T6640] comedi: valid board names for pcl818 driver are: [ 248.489012][ T6640] pcl818l [ 248.492030][ T6640] pcl818h [ 248.495356][ T6640] pcl818hd [ 248.498553][ T6640] pcl818hg [ 248.501786][ T6640] pcl818 [ 248.504756][ T6640] pcl718 [ 248.507840][ T6640] pcm3718 [ 248.510856][ T6640] comedi: valid board names for pcl816 driver are: [ 248.517409][ T6640] pcl816 [ 248.520341][ T6640] pcl814b [ 248.523364][ T6640] comedi: valid board names for pcl812 driver are: [ 248.529923][ T6640] pcl812 [ 248.532888][ T6640] pcl812pg [ 248.536207][ T6640] acl8112pg [ 248.539462][ T6640] acl8112dg [ 248.542835][ T6640] acl8112hg [ 248.546135][ T6640] a821pgl [ 248.549190][ T6640] a821pglnda [ 248.552471][ T6640] a821pgh [ 248.555481][ T6640] a822pgl [ 248.559093][ T6640] a822pgh [ 248.562124][ T6640] a823pgl [ 248.565143][ T6640] a823pgh [ 248.570611][ T6640] pcl813 [ 248.581451][ T6640] pcl813b [ 248.586516][ T6640] acl8113 [ 248.589668][ T6640] iso813 [ 248.592614][ T6640] acl8216 [ 248.595741][ T6640] a826pg [ 248.603776][ T6640] comedi: valid board names for pcl730 driver are: [ 248.617525][ T6640] pcl730 [ 248.620647][ T6640] iso730 [ 248.623598][ T6640] acl7130 [ 248.632391][ T6640] pcm3730 [ 248.635644][ T6640] pcl725 [ 248.640610][ T6640] p8r8dio [ 248.644081][ T6640] acl7225b [ 248.656736][ T6640] p16r16dio [ 248.660272][ T6640] pcl733 [ 248.663357][ T6640] pcl734 [ 248.666359][ T6640] opmm-1616-xt [ 248.670556][ T6640] pearl-mm-p [ 248.674019][ T6640] ir104-pbf [ 248.677342][ T6640] comedi: valid board names for pcl726 driver are: [ 248.684290][ T6640] pcl726 [ 248.687989][ T6640] pcl727 [ 248.690987][ T6640] pcl728 [ 248.693995][ T6640] acl6126 [ 248.697521][ T6640] acl6128 [ 248.701130][ T6640] comedi: valid board names for pcl724 driver are: [ 248.708142][ T6640] pcl724 [ 248.711160][ T6640] pcl722 [ 248.714147][ T6640] pcl731 [ 248.718001][ T6640] acl7122 [ 248.721413][ T6640] acl7124 [ 248.724483][ T6640] pet48dio [ 248.727788][ T6640] pcmio48 [ 248.730857][ T6640] onyx-mm-dio [ 248.734586][ T6640] comedi: valid board names for pcl711 driver are: [ 248.744374][ T6640] pcl711 [ 248.756683][ T6640] pcl711b [ 248.766780][ T6640] acl8112hg [ 248.836132][ T6640] acl8112dg [ 248.848314][ T6640] comedi: valid board names for amplc_pc263 driver are: [ 248.855384][ T6640] pc263 [ 248.871335][ T6640] comedi: valid board names for amplc_pc236 driver are: [ 248.927141][ T6640] pc36at [ 248.930811][ T6640] comedi: valid board names for amplc_dio200 driver are: [ 248.974598][ T6640] pc212e [ 248.983316][ T6640] pc214e [ 249.030773][ T6640] pc215e [ 249.033797][ T6640] pc218e [ 249.052789][ T6640] pc272e [ 249.055948][ T6640] comedi: valid board names for comedi_parport driver are: [ 249.094512][ T6640] comedi_parport [ 249.132223][ T6640] comedi: valid board names for comedi_test driver are: [ 249.151041][ T6640] comedi_test [ 249.154696][ T6640] comedi: valid board names for comedi_bond driver are: [ 249.162287][ T1107] Bluetooth: hci4: command 0x1001 tx timeout [ 249.177677][ T4194] Bluetooth: hci4: sending frame failed (-49) [ 249.246687][ T6640] comedi_bond [ 249.568945][ T1107] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 250.426970][ T1107] usb 6-1: config 0 has no interfaces? [ 250.506987][ T1107] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 250.517094][ T1107] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 250.525419][ T1107] usb 6-1: Manufacturer: syz [ 250.534470][ T1107] usb 6-1: config 0 descriptor?? [ 250.786148][ T1107] usb 6-1: USB disconnect, device number 7 [ 251.236880][ T6596] Bluetooth: hci4: command 0x1009 tx timeout [ 251.417802][ T1107] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 251.419498][ T6680] netlink: 'syz.5.646': attribute type 1 has an invalid length. [ 251.433384][ T6680] netlink: 32 bytes leftover after parsing attributes in process `syz.5.646'. [ 251.442488][ T6680] bridge0: port 2(bridge_slave_1) entered listening state [ 251.601962][ T6686] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 251.676723][ T1107] usb 4-1: Using ep0 maxpacket: 8 [ 251.797088][ T1107] usb 4-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 251.812777][ T1107] usb 4-1: config 6 interface 0 altsetting 0 has an invalid endpoint with address 0xEC, skipping [ 251.976797][ T1107] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 251.985983][ T1107] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.006940][ T1107] usb 4-1: Product: syz [ 252.011568][ T1107] usb 4-1: Manufacturer: syz [ 252.016280][ T1107] usb 4-1: SerialNumber: syz [ 252.068573][ T1107] hso 4-1:6.0: Can't find BULK IN endpoint [ 252.153341][ T6694] kvm [6693]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 252.172959][ T6694] kvm [6693]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 252.836011][ T6596] usb 4-1: USB disconnect, device number 8 [ 254.412148][ T4230] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 254.776897][ T4230] usb 3-1: config 0 has no interfaces? [ 254.857099][ T4230] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 254.870052][ T4230] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 254.878976][ T4230] usb 3-1: Manufacturer: syz [ 254.885009][ T4230] usb 3-1: config 0 descriptor?? [ 255.135884][ T4172] usb 3-1: USB disconnect, device number 14 [ 255.378669][ T1110] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 256.113953][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.128249][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.004208][ T1110] usb 2-1: Using ep0 maxpacket: 8 [ 257.246759][ T1110] usb 2-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 257.256465][ T1110] usb 2-1: config 6 interface 0 altsetting 0 has an invalid endpoint with address 0xEC, skipping [ 257.282619][ T6760] netlink: 8 bytes leftover after parsing attributes in process `syz.0.677'. [ 257.336740][ T6760] netlink: 'syz.0.677': attribute type 5 has an invalid length. [ 257.470225][ T6760] netlink: 48 bytes leftover after parsing attributes in process `syz.0.677'. [ 257.603907][ T6760] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 51912 - 0 [ 257.678027][ T1110] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 257.805791][ T1110] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.860487][ T1110] usb 2-1: Product: syz [ 257.885036][ T1110] usb 2-1: Manufacturer: syz [ 257.912131][ T1110] usb 2-1: SerialNumber: syz [ 258.134893][ T6760] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 51912 - 0 [ 258.228323][ T1110] usb 2-1: can't set config #6, error -71 [ 258.248582][ T6760] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 51912 - 0 [ 258.250819][ T1110] usb 2-1: USB disconnect, device number 12 [ 258.277018][ T6760] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 51912 - 0 [ 258.306764][ T6760] device geneve2 entered promiscuous mode [ 258.736900][ T1110] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 259.147072][ T1110] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 259.191608][ T1110] usb 2-1: config 0 has no interface number 0 [ 259.208170][ T1110] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 260.106155][ T6790] xt_CT: No such helper "pptp" [ 260.287073][ T1110] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 261.456331][ T6797] netlink: 48 bytes leftover after parsing attributes in process `syz.2.687'. [ 261.482534][ T1110] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 261.566864][ T1110] usb 2-1: Manufacturer: syz [ 261.571517][ T1110] usb 2-1: SerialNumber: syz [ 261.642878][ T1110] usb 2-1: config 0 descriptor?? [ 261.686894][ T1110] usb 2-1: can't set config #0, error -71 [ 261.697039][ T1110] usb 2-1: USB disconnect, device number 13 [ 261.826450][ T6811] kvm [6807]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x0 [ 261.876738][ T6596] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 262.121876][ T6596] usb 6-1: Using ep0 maxpacket: 8 [ 262.246927][ T6596] usb 6-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 262.267929][ T6596] usb 6-1: config 6 interface 0 altsetting 0 has an invalid endpoint with address 0xEC, skipping [ 262.355106][ T6826] syz.2.696 sent an empty control message without MSG_MORE. [ 262.486961][ T6596] usb 6-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 262.496040][ T6596] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.535032][ T6596] usb 6-1: Product: syz [ 262.540531][ T6596] usb 6-1: Manufacturer: syz [ 262.545307][ T6596] usb 6-1: SerialNumber: syz [ 262.585080][ T6832] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.699'. [ 262.605604][ T6596] hso 6-1:6.0: Can't find BULK IN endpoint [ 262.612055][ T6832] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.699'. [ 263.600733][ T6859] binder: Binderfs stats mode cannot be changed during a remount [ 264.446774][ T6596] usb 6-1: USB disconnect, device number 8 [ 267.314934][ T6919] netlink: 56 bytes leftover after parsing attributes in process `syz.3.723'. [ 267.325391][ T6919] netlink: 12 bytes leftover after parsing attributes in process `syz.3.723'. [ 267.334888][ T6919] netlink: 43 bytes leftover after parsing attributes in process `syz.3.723'. [ 267.344246][ T6919] netlink: 43 bytes leftover after parsing attributes in process `syz.3.723'. [ 267.980215][ T4230] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 268.226674][ T4230] usb 1-1: Using ep0 maxpacket: 32 [ 268.267503][ T4230] usb 1-1: too many configurations: 17, using maximum allowed: 8 [ 268.356954][ T4230] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 268.378295][ T4230] usb 1-1: config 0 has no interface number 0 [ 268.496896][ T4230] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 268.514522][ T4230] usb 1-1: config 0 has no interface number 0 [ 268.566730][ T6596] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 268.616959][ T4230] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 268.631727][ T4230] usb 1-1: config 0 has no interface number 0 [ 268.767000][ T4230] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 268.782301][ T4230] usb 1-1: config 0 has no interface number 0 [ 268.786854][ T4172] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 268.826740][ T6596] usb 3-1: Using ep0 maxpacket: 16 [ 268.907011][ T4230] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 268.929271][ T4230] usb 1-1: config 0 has no interface number 0 [ 268.977148][ T6596] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.018305][ T6596] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.036704][ T4172] usb 4-1: Using ep0 maxpacket: 8 [ 269.046984][ T4230] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 269.065280][ T4230] usb 1-1: config 0 has no interface number 0 [ 269.071970][ T6596] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 269.102890][ T6596] usb 3-1: New USB device found, idVendor=05a4, idProduct=2000, bcdDevice= 0.00 [ 269.116713][ T6596] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.136923][ T6596] usb 3-1: config 0 descriptor?? [ 269.156972][ T4172] usb 4-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 269.196782][ T4230] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 270.071705][ T4230] usb 1-1: config 0 has no interface number 0 [ 270.092306][ T4172] usb 4-1: config 6 interface 0 altsetting 0 has an invalid endpoint with address 0xEC, skipping [ 270.156844][ T4230] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 270.164986][ T4230] usb 1-1: config 0 has no interface number 0 [ 270.188320][ T6596] usbhid 3-1:0.0: can't add hid device: -71 [ 270.286790][ T6596] usbhid: probe of 3-1:0.0 failed with error -71 [ 270.298565][ T6596] usb 3-1: USB disconnect, device number 15 [ 270.304710][ T4172] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 270.334656][ T4172] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.857615][ T4172] usb 4-1: Product: syz [ 270.898688][ T4172] usb 4-1: Manufacturer: syz [ 270.945210][ T4172] usb 4-1: SerialNumber: syz [ 271.006803][ T4230] usb 1-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 271.047825][ T4172] hso 4-1:6.0: Can't find BULK IN endpoint [ 271.097534][ T4230] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.117685][ T4230] usb 1-1: config 0 descriptor?? [ 271.146818][ T4230] usb 1-1: can't set config #0, error -71 [ 271.255652][ T4230] usb 1-1: USB disconnect, device number 14 [ 272.201683][ T6596] usb 4-1: USB disconnect, device number 9 [ 272.267007][ T6965] netlink: 56 bytes leftover after parsing attributes in process `syz.1.740'. [ 272.276066][ T6965] netlink: 12 bytes leftover after parsing attributes in process `syz.1.740'. [ 272.285185][ T6965] netlink: 43 bytes leftover after parsing attributes in process `syz.1.740'. [ 272.294243][ T6965] netlink: 43 bytes leftover after parsing attributes in process `syz.1.740'. [ 274.087877][ T4172] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 274.446876][ T4172] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 274.676928][ T4172] usb 3-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 274.696098][ T4172] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.733542][ T4172] usb 3-1: Product: syz [ 274.737230][ T6979] kvm [6978]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x81 [ 274.754083][ T4172] usb 3-1: Manufacturer: syz [ 274.757282][ T6979] kvm [6978]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 274.759276][ T4172] usb 3-1: SerialNumber: syz [ 274.789246][ T6979] kvm [6978]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x1 [ 274.800738][ T6979] kvm [6978]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 274.809411][ T4172] usb 3-1: config 0 descriptor?? [ 274.857050][ T6967] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 274.878373][ T4172] powermate: probe of 3-1:0.0 failed with error -22 [ 276.513892][ T7008] input: syz0 as /devices/virtual/input/input10 [ 276.598220][ T1107] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 276.977362][ T1107] usb 1-1: Using ep0 maxpacket: 8 [ 277.347199][ T1107] usb 1-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 277.452872][ T1107] usb 1-1: config 6 interface 0 altsetting 0 has an invalid endpoint with address 0xEC, skipping [ 277.644931][ T4265] usb 3-1: USB disconnect, device number 16 [ 277.797586][ T1107] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 277.817587][ T1107] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.969360][ T4227] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 278.048836][ T4172] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 278.126340][ T7035] kvm [7034]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x81 [ 278.141354][ T7035] kvm [7034]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 278.151095][ T7035] kvm [7034]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x1 [ 278.165960][ T7035] kvm [7034]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 278.195316][ T1107] usb 1-1: Product: syz [ 278.199670][ T1107] usb 1-1: Manufacturer: syz [ 278.204285][ T1107] usb 1-1: SerialNumber: syz [ 278.247679][ T1107] hso 1-1:6.0: Can't find BULK IN endpoint [ 278.350066][ T4227] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 278.363495][ T4227] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 278.381634][ T4227] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 278.436975][ T4172] usb 6-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 278.446195][ T4172] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 278.577281][ T4227] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 278.591148][ T4227] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 278.603932][ T4227] usb 2-1: Product: syz [ 278.612373][ T4227] usb 2-1: Manufacturer: syz [ 278.620065][ T4227] usb 2-1: SerialNumber: syz [ 278.642806][ T4172] usb 6-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 278.654380][ T4227] usb 2-1: config 0 descriptor?? [ 278.665152][ T4172] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.674227][ T4172] usb 6-1: Product: syz [ 278.678997][ T4172] usb 6-1: Manufacturer: syz [ 278.683680][ T4172] usb 6-1: SerialNumber: syz [ 278.692223][ T4172] usb 6-1: config 0 descriptor?? [ 278.709243][ T4227] radio-si470x 2-1:0.0: could not find interrupt in endpoint [ 278.717091][ T4227] radio-si470x: probe of 2-1:0.0 failed with error -5 [ 278.724385][ T4227] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 278.865202][ T1107] usb 1-1: USB disconnect, device number 15 [ 279.456822][ T4197] Bluetooth: hci5: link tx timeout [ 279.464890][ T4197] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 279.805940][ T7057] kvm [7056]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0 [ 279.821687][ T7057] kvm [7056]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 279.834874][ T7057] kvm [7056]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 279.944729][ T4172] mos7840 6-1:0.0: required endpoints missing [ 279.953680][ T4172] usb 6-1: USB disconnect, device number 9 [ 280.064321][ T7068] netlink: 56 bytes leftover after parsing attributes in process `syz.3.773'. [ 280.073530][ T7068] netlink: 12 bytes leftover after parsing attributes in process `syz.3.773'. [ 280.082541][ T7068] netlink: 55 bytes leftover after parsing attributes in process `syz.3.773'. [ 280.713237][ T1110] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 280.863884][ T4265] usb 2-1: USB disconnect, device number 14 [ 281.096974][ T21] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 281.396945][ T4265] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 281.477043][ T4230] Bluetooth: hci5: command 0x0406 tx timeout [ 281.646788][ T4265] usb 2-1: Using ep0 maxpacket: 8 [ 281.775718][ T1110] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 281.786867][ T4265] usb 2-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 281.804296][ T4265] usb 2-1: config 6 interface 0 altsetting 0 has an invalid endpoint with address 0xEC, skipping [ 281.845683][ T1110] usb 1-1: config 0 has no interface number 0 [ 281.906808][ T4172] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 281.968206][ T4265] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 281.982917][ T4265] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.992506][ T4265] usb 2-1: Product: syz [ 282.001122][ T4265] usb 2-1: Manufacturer: syz [ 282.006080][ T4265] usb 2-1: SerialNumber: syz [ 282.095358][ T4265] hso 2-1:6.0: Can't find BULK IN endpoint [ 282.107038][ T1110] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 282.116306][ T1110] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.124607][ T1110] usb 1-1: Product: syz [ 282.129094][ T1110] usb 1-1: Manufacturer: syz [ 282.133946][ T1110] usb 1-1: SerialNumber: syz [ 282.140546][ T1110] usb 1-1: config 0 descriptor?? [ 282.202550][ T4172] usb 6-1: Using ep0 maxpacket: 32 [ 282.338161][ T4172] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 255 [ 282.428130][ T1110] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 282.548339][ T21] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 282.561507][ T4229] usb 2-1: USB disconnect, device number 15 [ 282.610419][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.657734][ T4172] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 282.737100][ T1110] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 282.749715][ T4172] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 282.758954][ T21] usb 3-1: Product: syz [ 282.763221][ T21] usb 3-1: Manufacturer: syz [ 282.768678][ T1110] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 282.778512][ T4172] usb 6-1: Product: syz [ 282.782863][ T21] usb 3-1: SerialNumber: syz [ 282.813369][ T4172] usb 6-1: Manufacturer: syz [ 282.819338][ T1110] usb 1-1: media controller created [ 282.827770][ T4172] usb 6-1: SerialNumber: syz [ 282.834356][ T4172] usb 6-1: config 0 descriptor?? [ 282.849475][ T1110] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 282.858831][ T7076] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 283.104777][ T4230] usb 6-1: USB disconnect, device number 10 [ 283.193441][ T4265] usb 1-1: USB disconnect, device number 16 [ 283.326813][ T21] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 284.169643][ T7128] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 284.441871][ T7144] loop2: detected capacity change from 0 to 7 [ 284.467271][ T4175] Dev loop2: unable to read RDB block 7 [ 284.483247][ T21] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -71 [ 284.500585][ T4175] loop2: unable to read partition table [ 284.526366][ T21] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 284.541777][ T4175] loop2: partition table beyond EOD, truncated [ 284.566349][ T21] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 284.611407][ T21] lan78xx: probe of 3-1:1.0 failed with error -71 [ 284.647080][ T21] usb 3-1: USB disconnect, device number 17 [ 284.688900][ T7144] Dev loop2: unable to read RDB block 7 [ 284.694539][ T7144] loop2: unable to read partition table [ 284.705897][ T7144] loop2: partition table beyond EOD, truncated [ 284.721338][ T7144] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑච) failed (rc=-5) [ 285.528988][ T1107] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 285.607603][ T4265] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 285.858543][ T1107] usb 1-1: Using ep0 maxpacket: 32 [ 286.220317][ T4265] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 286.230828][ T1107] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 255 [ 286.263158][ T4265] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 286.273497][ T4265] usb 6-1: config 1 has no interface number 0 [ 286.281275][ T4265] usb 6-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 286.419332][ T1107] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 286.439723][ T1107] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 286.448515][ T4265] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 286.476720][ T4265] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.491861][ T1107] usb 1-1: Product: syz [ 286.497350][ T4265] usb 6-1: Product: syz [ 286.502700][ T1107] usb 1-1: Manufacturer: syz [ 286.508549][ T4265] usb 6-1: Manufacturer: syz [ 286.513185][ T4265] usb 6-1: SerialNumber: syz [ 286.518309][ T1107] usb 1-1: SerialNumber: syz [ 286.708225][ T406] Bluetooth: hci4: Frame reassembly failed (-84) [ 286.724702][ T406] Bluetooth: hci4: Frame reassembly failed (-84) [ 287.858865][ T1107] usb 1-1: config 0 descriptor?? [ 288.755328][ T4230] Bluetooth: hci4: command 0x1003 tx timeout [ 288.761771][ T4194] Bluetooth: hci4: sending frame failed (-49) [ 288.768661][ T1107] usb 1-1: can't set config #0, error -71 [ 288.775698][ T1107] usb 1-1: USB disconnect, device number 17 [ 288.806829][ T4265] usb 6-1: can't set config #1, error -71 [ 288.821208][ T4265] usb 6-1: USB disconnect, device number 11 [ 290.785797][ T7210] xt_CT: No such helper "pptp" [ 290.950876][ T1107] Bluetooth: hci4: command 0x1001 tx timeout [ 290.958046][ T4194] Bluetooth: hci4: sending frame failed (-49) [ 291.333912][ T7219] kvm [7216]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x80 [ 291.349377][ T7219] kvm [7216]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 291.364832][ T7219] kvm [7216]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x0 [ 291.379089][ T7219] kvm [7216]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0xbe702111 [ 291.401961][ T7219] kvm [7216]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x80 [ 291.412893][ T7219] kvm [7216]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0xbe702111 [ 291.626863][ T7219] kvm [7216]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0x80 [ 292.016693][ T7219] kvm [7216]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x0 [ 292.043452][ T7219] kvm [7216]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0xbe702111 [ 293.202812][ T1107] Bluetooth: hci4: command 0x1009 tx timeout [ 294.045843][ T7242] xt_CT: No such helper "pptp" [ 295.341104][ T7253] fuse: Bad value for 'fd' [ 298.689340][ T7297] fuse: Bad value for 'fd' [ 298.915423][ T7315] netlink: 'syz.2.853': attribute type 12 has an invalid length. [ 298.974367][ T7315] netlink: 'syz.2.853': attribute type 29 has an invalid length. [ 299.010831][ T7315] netlink: 148 bytes leftover after parsing attributes in process `syz.2.853'. [ 299.101166][ T7315] netlink: 'syz.2.853': attribute type 2 has an invalid length. [ 299.148652][ T7315] netlink: 23 bytes leftover after parsing attributes in process `syz.2.853'. [ 299.159164][ T7309] xt_CT: No such helper "pptp" [ 301.093116][ T7338] fuse: Bad value for 'fd' [ 301.266003][ T4409] Bluetooth: hci4: Frame reassembly failed (-84) [ 303.316876][ T4781] Bluetooth: hci4: command 0x1003 tx timeout [ 303.323531][ T4194] Bluetooth: hci4: sending frame failed (-49) [ 303.336943][ T7352] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 303.343527][ T7352] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 303.361907][ T7352] vhci_hcd vhci_hcd.0: Device attached [ 303.391047][ T7355] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(6) [ 303.396953][ T13] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 303.397907][ T7355] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 303.464423][ T7355] vhci_hcd vhci_hcd.0: Device attached [ 303.495214][ T7356] vhci_hcd: connection closed [ 303.496890][ T5286] vhci_hcd: stop threads [ 303.506956][ T5286] vhci_hcd: release socket [ 303.511423][ T5286] vhci_hcd: disconnect device [ 303.517037][ T7353] vhci_hcd: connection closed [ 303.532813][ T5286] vhci_hcd: stop threads [ 303.548176][ T5286] vhci_hcd: release socket [ 303.553280][ T5286] vhci_hcd: disconnect device [ 303.906684][ T7366] xt_CT: No such helper "pptp" [ 304.386843][ T13] usb 2-1: unable to read config index 0 descriptor/all [ 304.393957][ T13] usb 2-1: can't read configurations, error -71 [ 305.479133][ T4781] Bluetooth: hci4: command 0x1001 tx timeout [ 305.485302][ T4194] Bluetooth: hci4: sending frame failed (-49) [ 307.663226][ T4781] Bluetooth: hci4: command 0x1009 tx timeout [ 311.524672][ T7486] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 313.273704][ T1107] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 313.657281][ T1107] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 313.686082][ T1107] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 313.740099][ T1107] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 313.889684][ T1107] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.072876][ T1107] usb 6-1: config 0 descriptor?? [ 314.386447][ T7502] udc-core: couldn't find an available UDC or it's busy [ 314.401551][ T7502] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 314.432382][ T7502] udc-core: couldn't find an available UDC or it's busy [ 314.444995][ T7502] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 314.466519][ T1110] usb 6-1: USB disconnect, device number 12 [ 314.842382][ T7497] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 315.867876][ T7537] xt_CT: No such helper "pptp" [ 317.079521][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.118084][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.036457][ T7586] xt_CT: No such helper "pptp" [ 321.618908][ T7610] kvm [7608]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 321.656105][ T7610] kvm [7608]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 321.691060][ T4172] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 321.716239][ T7610] kvm [7608]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 321.727811][ T7610] kvm [7608]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 321.739152][ T7610] kvm [7608]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 321.751002][ T7610] kvm [7608]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 321.762608][ T7610] kvm [7608]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 321.774145][ T7610] kvm [7608]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 321.785453][ T7610] kvm [7608]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 321.796930][ T7610] kvm [7608]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 322.358671][ T7627] xt_CT: No such helper "pptp" [ 322.396769][ T4172] usb 3-1: Using ep0 maxpacket: 8 [ 322.703755][ T4172] usb 3-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 322.715258][ T4172] usb 3-1: config 6 interface 0 altsetting 0 has an invalid endpoint with address 0xEC, skipping [ 322.918305][ T4172] usb 3-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 322.998554][ T4172] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.142576][ T4172] usb 3-1: Product: syz [ 323.244904][ T4172] usb 3-1: Manufacturer: syz [ 323.557669][ T4172] usb 3-1: SerialNumber: syz [ 323.586853][ T4172] usb 3-1: can't set config #6, error -71 [ 323.601421][ T4172] usb 3-1: USB disconnect, device number 18 [ 323.826560][ T7655] fuse: Bad value for 'fd' [ 324.016936][ T4172] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 324.339334][ T7661] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 324.457019][ T4172] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 324.594027][ T4172] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x4F, skipping [ 324.620294][ T7672] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.629711][ T7672] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.638677][ T7672] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.647405][ T7672] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.680484][ T7672] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 324.689540][ T7672] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 324.698745][ T7672] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 324.707668][ T7672] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 324.836799][ T4172] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 324.852401][ T4172] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.880033][ T4172] usb 3-1: Product: syz [ 324.885050][ T4172] usb 3-1: Manufacturer: syz [ 324.891618][ T4172] usb 3-1: SerialNumber: syz [ 324.906389][ T4172] usb 3-1: config 0 descriptor?? [ 324.928273][ T7644] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 325.029378][ T13] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 325.177607][ T4172] usb 3-1: ucan: probing device on interface #0 [ 325.184805][ T4172] usb 3-1: ucan: invalid EP count (1) [ 325.194871][ T4172] usb 3-1: ucan: probe failed; try to update the device firmware [ 325.230183][ T4172] usb 3-1: USB disconnect, device number 19 [ 325.278936][ T13] usb 6-1: Using ep0 maxpacket: 8 [ 325.407442][ T13] usb 6-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 325.417361][ T13] usb 6-1: config 6 interface 0 altsetting 0 has an invalid endpoint with address 0xEC, skipping [ 325.543476][ T7691] fuse: Bad value for 'fd' [ 325.566670][ T4229] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 325.586993][ T13] usb 6-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 325.596044][ T13] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.624709][ T13] usb 6-1: Product: syz [ 325.631751][ T13] usb 6-1: Manufacturer: syz [ 325.636468][ T13] usb 6-1: SerialNumber: syz [ 325.677611][ T13] hso 6-1:6.0: Can't find BULK IN endpoint [ 326.641442][ T4229] usb 4-1: Using ep0 maxpacket: 16 [ 326.767521][ T4229] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.790755][ T4229] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 326.822216][ T4229] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 326.865648][ T4229] usb 4-1: New USB device found, idVendor=05a4, idProduct=2000, bcdDevice= 0.00 [ 326.886735][ T6596] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 326.920078][ T4229] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.016046][ T1110] usb 6-1: USB disconnect, device number 13 [ 327.022933][ T4229] usb 4-1: config 0 descriptor?? [ 327.786822][ T6596] usb 1-1: Using ep0 maxpacket: 8 [ 327.917717][ T6596] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 328.177828][ T6596] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 328.293712][ T6596] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.447079][ T6596] usb 1-1: Product: syz [ 328.451282][ T6596] usb 1-1: Manufacturer: syz [ 328.517969][ T6596] usb 1-1: SerialNumber: syz [ 328.568052][ T6596] usb 1-1: config 0 descriptor?? [ 328.636719][ T4229] usbhid 4-1:0.0: can't add hid device: -71 [ 328.642735][ T4229] usbhid: probe of 4-1:0.0 failed with error -71 [ 328.663821][ T6596] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 328.668356][ T4229] usb 4-1: USB disconnect, device number 10 [ 328.701181][ T6596] usb 1-1: setting power ON [ 328.706299][ T6596] dvb-usb: bulk message failed: -22 (2/0) [ 328.723578][ T6596] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 328.756982][ T6596] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 328.765646][ T6596] usb 1-1: media controller created [ 328.794987][ T6596] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 328.850406][ T6596] usb 1-1: selecting invalid altsetting 6 [ 328.896280][ T6596] usb 1-1: digital interface selection failed (-22) [ 328.934626][ T7701] dvb-usb: bulk message failed: -22 (3/0) [ 328.956843][ T6596] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 328.964544][ T7701] dvb-usb: bulk message failed: -22 (4/0) [ 329.008211][ T7701] cxusb: i2c read failed [ 329.032671][ T6596] usb 1-1: setting power OFF [ 329.040827][ T7733] dvb-usb: bulk message failed: -22 (3/0) [ 329.049560][ T6596] dvb-usb: bulk message failed: -22 (2/0) [ 329.078828][ T6596] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 329.091635][ T7738] fuse: Bad value for 'fd' [ 329.122448][ T6596] (NULL device *): no alternate interface [ 329.208583][ T6596] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 329.298367][ T6596] usb 1-1: USB disconnect, device number 18 [ 330.209848][ T21] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 332.216668][ T21] usb 6-1: Using ep0 maxpacket: 8 [ 332.298484][ T7775] trusted_key: encrypted_key: keylen parameter is missing [ 333.146869][ T21] usb 6-1: device descriptor read/all, error -71 [ 333.816866][ T4197] Bluetooth: hci5: link tx timeout [ 333.822703][ T4197] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 333.832106][ T4197] Bluetooth: hci5: link tx timeout [ 333.837478][ T4197] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 334.826681][ T6596] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 335.076899][ T6596] usb 1-1: Using ep0 maxpacket: 8 [ 335.156804][ T4172] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 335.227254][ T6596] usb 1-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 335.256661][ T6596] usb 1-1: config 6 interface 0 altsetting 0 has an invalid endpoint with address 0xEC, skipping [ 335.487016][ T6596] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 335.508766][ T6596] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.518568][ T6596] usb 1-1: Product: syz [ 335.522878][ T6596] usb 1-1: Manufacturer: syz [ 335.529079][ T6596] usb 1-1: SerialNumber: syz [ 335.597297][ T6596] hso 1-1:6.0: Can't find BULK IN endpoint [ 335.691965][ T4172] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 335.721451][ T4172] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.655801][ T4172] usb 4-1: Product: syz [ 336.692034][ T4172] usb 4-1: Manufacturer: syz [ 336.726691][ T4172] usb 4-1: SerialNumber: syz [ 336.764314][ T4229] Bluetooth: hci5: command 0x0406 tx timeout [ 336.871469][ T21] usb 1-1: USB disconnect, device number 19 [ 337.124693][ T7861] kvm_set_msr_common: 9 callbacks suppressed [ 337.124712][ T7861] kvm [7858]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 337.194908][ T7861] kvm [7858]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x80 [ 337.222524][ T7861] kvm [7858]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x80 [ 337.286558][ T7861] kvm [7858]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x80 [ 337.316915][ T4172] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 337.388582][ T7861] kvm [7858]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0xb41000000080 [ 337.453951][ T7861] kvm [7858]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x8e4900000080 [ 337.504826][ T7861] kvm [7858]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x918d00000000 [ 337.636901][ T7861] kvm [7858]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x719000000000 [ 337.665218][ T7861] kvm [7858]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x4bc900000000 [ 337.698790][ T7861] kvm [7858]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0xd40d00000080 [ 338.706809][ T4172] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 338.756810][ T4172] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -71 [ 338.806733][ T4172] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71 [ 338.866736][ T4172] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 338.909426][ T4172] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 338.956715][ T4172] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 339.069064][ T4172] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 339.237179][ T4172] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 339.417745][ T4172] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -71 [ 339.686925][ T4172] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 339.806264][ T4172] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 339.883518][ T4172] lan78xx: probe of 4-1:1.0 failed with error -71 [ 339.961491][ T4172] usb 4-1: USB disconnect, device number 11 [ 340.436916][ T4172] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 340.476541][ T7923] Unsupported ieee802154 address type: 0 [ 340.887624][ T4172] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.922385][ T4172] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 340.981707][ T4172] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 341.024182][ T4172] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.068092][ T4172] usb 4-1: config 0 descriptor?? [ 342.866837][ T4172] arvo 0003:1E7D:30D4.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0 [ 342.917524][ T4172] arvo 0003:1E7D:30D4.0004: couldn't init struct arvo_device [ 342.927481][ T4172] arvo 0003:1E7D:30D4.0004: couldn't install keyboard [ 342.987837][ T4172] arvo: probe of 0003:1E7D:30D4.0004 failed with error -71 [ 343.047903][ T4172] usb 4-1: USB disconnect, device number 12 [ 343.432235][ T7939] fido_id[7939]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 344.316750][ T6596] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 345.376952][ T6596] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 345.992382][ T7975] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1043'. [ 346.580890][ T6596] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x4F, skipping [ 346.767158][ T6596] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 346.799391][ T6596] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.826638][ T6596] usb 2-1: Product: syz [ 346.830849][ T6596] usb 2-1: Manufacturer: syz [ 346.835454][ T6596] usb 2-1: SerialNumber: syz [ 346.943927][ T6596] usb 2-1: config 0 descriptor?? [ 346.987154][ T7957] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 347.068774][ T6596] usb 2-1: ucan: probing device on interface #0 [ 347.092579][ T6596] usb 2-1: ucan: invalid EP count (1) [ 347.230409][ T6596] usb 2-1: ucan: probe failed; try to update the device firmware [ 347.274192][ T6596] usb 2-1: USB disconnect, device number 18 [ 350.067259][ T8032] tmpfs: Unknown parameter 'usrquota' [ 364.727768][ T8140] syz.2.1086 (8140) used greatest stack depth: 16944 bytes left [ 365.428129][ T8178] tipc: Started in network mode [ 365.439154][ T8178] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 365.452561][ T8178] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000 [ 365.462332][ T8178] tipc: Enabled bearer , priority 10 [ 365.474732][ T26] audit: type=1326 audit(1776113081.373:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8179 comm="syz.3.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e75733819 code=0x7ffc0000 [ 365.497731][ C1] vkms_vblank_simulate: vblank timer overrun [ 365.568215][ T26] audit: type=1326 audit(1776113081.373:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8179 comm="syz.3.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f9e75733819 code=0x7ffc0000 [ 365.590868][ T26] audit: type=1326 audit(1776113081.373:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8179 comm="syz.3.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e75733819 code=0x7ffc0000 [ 365.641177][ T26] audit: type=1326 audit(1776113081.373:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8179 comm="syz.3.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f9e75733819 code=0x7ffc0000 [ 365.743076][ T26] audit: type=1326 audit(1776113081.373:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8179 comm="syz.3.1096" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e75733819 code=0x7ffc0000 [ 365.765599][ C1] vkms_vblank_simulate: vblank timer overrun [ 366.471093][ T4230] tipc: Node number set to 1 [ 367.178374][ T8208] xt_CT: No such helper "pptp" [ 367.536739][ T4230] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 368.507040][ T4230] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 368.517890][ T4230] usb 4-1: config 1 has no interface number 0 [ 368.524116][ T4230] usb 4-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0xDB, skipping [ 368.535698][ T4230] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.636747][ T4230] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 370.652803][ T4230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.747329][ T4230] usb 4-1: Product: syz [ 370.756287][ T4230] usb 4-1: Manufacturer: syz [ 370.817280][ T4230] usb 4-1: can't set config #1, error -71 [ 370.856430][ T8256] kvm [8253]: vcpu0, guest rIP: 0x18e vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x1, nop [ 370.868116][ T4230] usb 4-1: USB disconnect, device number 13 [ 370.908235][ T8256] kvm [8253]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0x81 [ 370.932049][ T8256] kvm [8253]: vcpu0, guest rIP: 0x1b8 ignored wrmsr: 0x11e data 0xbe702111 [ 370.984292][ T8256] kvm_set_msr_common: 12 callbacks suppressed [ 370.984311][ T8256] kvm [8253]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0x1 [ 371.222307][ T8268] xt_CT: No such helper "pptp" [ 374.506272][ T8312] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1134'. [ 374.515545][ T8312] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1134'. [ 374.524818][ T8312] netlink: 31 bytes leftover after parsing attributes in process `syz.3.1134'. [ 374.534081][ T8312] netlink: 'syz.3.1134': attribute type 2 has an invalid length. [ 374.542187][ T8312] netlink: 31 bytes leftover after parsing attributes in process `syz.3.1134'. [ 377.522367][ T8339] xt_CT: No such helper "pptp" [ 378.618834][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.625526][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.283229][ T8389] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 382.289778][ T8389] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 383.116759][ T1107] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 383.634654][ T8389] vhci_hcd vhci_hcd.0: Device attached [ 384.372278][ T8390] vhci_hcd: connection reset by peer [ 384.378234][ T4340] vhci_hcd: stop threads [ 384.382929][ T4340] vhci_hcd: release socket [ 385.476788][ T4340] vhci_hcd: disconnect device [ 387.408974][ T8429] xt_CT: No such helper "pptp" [ 387.499391][ T6596] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 388.756756][ T6596] usb 6-1: Using ep0 maxpacket: 8 [ 389.004069][ T6596] usb 6-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 389.017786][ T6596] usb 6-1: config 6 interface 0 altsetting 0 has an invalid endpoint with address 0xEC, skipping [ 389.761958][ T8454] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 390.901970][ T1107] vhci_hcd: vhci_device speed not set [ 391.528491][ T8468] xt_CT: No such helper "pptp" [ 391.856794][ T6596] usb 6-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 391.866341][ T6596] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.057736][ T6596] usb 6-1: can't set config #6, error -71 [ 392.117293][ T6596] usb 6-1: USB disconnect, device number 16 [ 394.101831][ T4227] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 395.147125][ T4227] usb 4-1: Using ep0 maxpacket: 8 [ 396.376721][ T4227] usb 4-1: unable to read config index 0 descriptor/all [ 396.391809][ T4227] usb 4-1: can't read configurations, error -71 [ 396.861834][ T8519] xt_CT: No such helper "pptp" [ 398.802850][ T8538] fuse: root generation should be zero [ 401.226852][ T8564] xt_CT: No such helper "pptp" [ 404.136675][ T1107] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 404.347020][ T1110] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 405.126729][ T1107] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 405.176871][ T1110] usb 4-1: Using ep0 maxpacket: 8 [ 405.189445][ T8604] loop2: detected capacity change from 0 to 7 [ 405.204770][ T4186] Dev loop2: unable to read RDB block 7 [ 405.210742][ T4186] loop2: unable to read partition table [ 405.217342][ T4186] loop2: partition table beyond EOD, truncated [ 405.228149][ T8604] Dev loop2: unable to read RDB block 7 [ 405.233763][ T8604] loop2: unable to read partition table [ 405.253128][ T8604] loop2: partition table beyond EOD, truncated [ 405.273079][ T8604] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 405.323028][ T3559] Dev loop2: unable to read RDB block 7 [ 405.381897][ T1110] usb 4-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 405.408846][ T3559] loop2: unable to read partition table [ 405.414760][ T3559] loop2: partition table beyond EOD, truncated [ 405.415669][ T1110] usb 4-1: config 6 interface 0 altsetting 0 has an invalid endpoint with address 0xEC, skipping [ 405.436757][ T1107] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 405.452285][ T1107] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.471042][ T1107] usb 1-1: Product: syz [ 405.496854][ T1107] usb 1-1: Manufacturer: syz [ 405.531179][ T1107] usb 1-1: config 0 descriptor?? [ 405.549034][ T1107] usb 1-1: can't set config #0, error -71 [ 405.574772][ T8609] xt_CT: No such helper "pptp" [ 405.596872][ T1110] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 405.606308][ T1110] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.633326][ T1107] usb 1-1: USB disconnect, device number 20 [ 405.713828][ T1110] usb 4-1: Product: syz [ 405.735076][ T1110] usb 4-1: Manufacturer: syz [ 405.763781][ T1110] usb 4-1: SerialNumber: syz [ 405.858268][ T1110] hso 4-1:6.0: Can't find BULK IN endpoint [ 405.933269][ T8626] kvm [8624]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x100000000 [ 405.974573][ T8626] kvm [8624]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc1 data 0x0 [ 406.063858][ T1110] usb 4-1: USB disconnect, device number 16 [ 406.776759][ T4172] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 407.606797][ T4172] usb 1-1: config 0 has no interfaces? [ 407.768854][ T4172] usb 1-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 407.785982][ T4172] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.825106][ T4172] usb 1-1: Product: syz [ 407.849019][ T4172] usb 1-1: Manufacturer: syz [ 407.869327][ T4172] usb 1-1: SerialNumber: syz [ 407.902297][ T4172] usb 1-1: config 0 descriptor?? [ 409.052729][ T1110] usb 1-1: USB disconnect, device number 21 [ 409.432344][ T8663] xt_CT: No such helper "pptp" [ 409.468598][ T4197] Bluetooth: hci1: hcon ffff888017a28000 sent 1 < count 2047 [ 409.480315][ T4197] Bluetooth: hci1: hcon ffff888017a28000 sent 0 < count 9 [ 410.646792][ T23] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 410.896721][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 411.046918][ T23] usb 4-1: config 6 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 411.077541][ T23] usb 4-1: config 6 interface 0 altsetting 0 has an invalid endpoint with address 0xEC, skipping [ 411.287254][ T23] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 411.327722][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.370283][ T23] usb 4-1: Product: syz [ 411.393415][ T23] usb 4-1: Manufacturer: syz [ 411.514110][ T23] usb 4-1: SerialNumber: syz [ 412.500297][ T23] hso 4-1:6.0: Can't find BULK IN endpoint [ 412.697382][ T23] usb 4-1: USB disconnect, device number 17 [ 416.125510][ T8776] process 'syz.1.1254' launched '/dev/fd/3' with NULL argv: empty string added [ 416.408211][ T8788] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1257'. [ 416.427015][ T8788] netlink: 'syz.1.1257': attribute type 3 has an invalid length. [ 416.446086][ T8788] netlink: 208 bytes leftover after parsing attributes in process `syz.1.1257'. [ 417.433108][ T8809] netlink: 'syz.5.1263': attribute type 12 has an invalid length. [ 417.529979][ T8809] netlink: 'syz.5.1263': attribute type 29 has an invalid length. [ 417.555438][ T8809] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1263'. [ 417.583261][ T8809] netlink: 59 bytes leftover after parsing attributes in process `syz.5.1263'. [ 417.766408][ T8818] xt_CT: No such helper "pptp" [ 417.971335][ T8823] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1267'. [ 418.031571][ T8823] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1267'. [ 418.087074][ T8823] device gretap0 entered promiscuous mode [ 418.120738][ T8823] device gretap0 left promiscuous mode [ 418.162852][ T8816] tipc: Started in network mode [ 418.168075][ T8816] tipc: Node identity 4, cluster identity 4711 [ 418.204696][ T8816] tipc: Node number set to 4 [ 419.486661][ T6596] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 419.596666][ T4230] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 419.789140][ T8855] xt_CT: No such helper "pptp" [ 420.230077][ T6596] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 26232, setting to 64 [ 420.254258][ T6596] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 420.283165][ T6596] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.316713][ T4230] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 420.333579][ T4230] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice= 0.03 [ 420.351586][ T6596] usb 1-1: config 0 descriptor?? [ 420.357883][ T4230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.371515][ T4230] usb 4-1: config 0 descriptor?? [ 420.429030][ T4230] pwc: Askey VC010 type 2 USB webcam detected. [ 420.626727][ T6596] ath6kl: Failed to submit usb control message: -71 [ 420.636771][ T6596] ath6kl: unable to send the bmi data to the device: -71 [ 420.643851][ T6596] ath6kl: Unable to send get target info: -71 [ 420.653629][ T6596] ath6kl: Failed to init ath6kl core: -71 [ 420.659841][ T4230] pwc: send_video_command error -71 [ 420.665220][ T4230] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 420.702781][ T4230] Philips webcam: probe of 4-1:0.0 failed with error -71 [ 420.986302][ T4230] usb 4-1: USB disconnect, device number 18 [ 421.412782][ T6596] ath6kl_usb: probe of 1-1:0.0 failed with error -71 [ 421.426965][ T6596] usb 1-1: USB disconnect, device number 22 [ 421.669633][ T8885] xt_CT: No such helper "pptp" [ 426.254367][ T8943] xt_CT: No such helper "pptp" [ 430.975272][ T9001] Process accounting resumed [ 431.416929][ T8996] xt_CT: No such helper "pptp" [ 431.747728][ T9029] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1325'. [ 431.758704][ T9029] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1325'. [ 431.906639][ T4230] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 432.227481][ T4230] usb 6-1: too many configurations: 70, using maximum allowed: 8 [ 433.167119][ T4230] usb 6-1: config index 0 descriptor too short (expected 65505, got 72) [ 433.872986][ T4230] usb 6-1: config index 1 descriptor too short (expected 65505, got 72) [ 434.037253][ T4230] usb 6-1: config index 2 descriptor too short (expected 65505, got 72) [ 434.222614][ T9068] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1338'. [ 434.238485][ T4230] usb 6-1: config index 3 descriptor too short (expected 65505, got 72) [ 434.255828][ T9068] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1338'. [ 435.156691][ T4230] usb 6-1: unable to read config index 4 descriptor/all [ 435.164500][ T4230] usb 6-1: can't read configurations, error -71 [ 435.173290][ T9080] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 435.185530][ T9080] SQUASHFS error: Failed to read block 0x0: -5 [ 437.304889][ T9097] trusted_key: encrypted_key: keylen parameter is missing [ 438.268025][ T9115] mmap: syz.3.1352 (9115) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 439.691893][ T9130] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 439.703400][ T9130] SQUASHFS error: Failed to read block 0x0: -5 [ 439.914771][ T9135] trusted_key: encrypted_key: keylen parameter is missing [ 439.959959][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.969136][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.972157][ T7449] Bluetooth: hci4: Frame reassembly failed (-84) [ 441.019607][ T7449] Bluetooth: hci4: Frame reassembly failed (-84) [ 442.996719][ T4230] Bluetooth: hci4: command 0x1003 tx timeout [ 443.009579][ T4197] Bluetooth: hci4: sending frame failed (-49) [ 443.176965][ T4230] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 444.026726][ T4230] usb 2-1: Using ep0 maxpacket: 32 [ 444.237102][ T4230] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 255 [ 444.247565][ T9173] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 444.259205][ T9173] SQUASHFS error: Failed to read block 0x0: -5 [ 444.426924][ T4230] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 444.453441][ T4230] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 444.714866][ T4230] usb 2-1: Product: syz [ 444.719432][ T4230] usb 2-1: Manufacturer: syz [ 444.724134][ T4230] usb 2-1: SerialNumber: syz [ 444.732807][ T4230] usb 2-1: config 0 descriptor?? [ 444.766982][ T9158] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 445.078618][ T6596] Bluetooth: hci4: command 0x1001 tx timeout [ 445.084865][ T4197] Bluetooth: hci4: sending frame failed (-49) [ 446.805959][ T21] usb 2-1: USB disconnect, device number 19 [ 446.875846][ T26] audit: type=1326 audit(1776113162.773:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9205 comm="syz.1.1375" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4693386819 code=0x0 [ 447.167377][ T6596] Bluetooth: hci4: command 0x1009 tx timeout [ 449.616623][ T4172] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 449.984482][ T9266] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 449.997975][ T9266] SQUASHFS error: Failed to read block 0x0: -5 [ 450.055102][ T9270] trusted_key: encrypted_key: keylen parameter is missing [ 450.197170][ T4172] usb 6-1: unable to get BOS descriptor or descriptor too short [ 451.021720][ T4172] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 451.032528][ T4172] usb 6-1: config 1 interface 0 has no altsetting 0 [ 451.080606][ T9229] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 451.154424][ T9286] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 451.166457][ T9286] SQUASHFS error: Failed to read block 0x0: -5 [ 451.916762][ T4172] usb 6-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 451.925929][ T4172] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.071123][ T4172] usb 6-1: Product: syz [ 452.083012][ T4172] usb 6-1: Manufacturer: syz [ 452.866628][ T4172] usb 6-1: SerialNumber: syz [ 452.870149][ T9301] vivid-001: disconnect [ 453.346808][ T4172] usb 6-1: can't set config #1, error -71 [ 453.353670][ T4172] usb 6-1: USB disconnect, device number 19 [ 456.971626][ T9292] vivid-001: reconnect [ 457.202860][ T9325] blk_update_request: I/O error, dev loop11, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 457.214229][ T9325] SQUASHFS error: Failed to read block 0x0: -5 [ 457.309963][ T9332] trusted_key: encrypted_key: keylen parameter is missing [ 458.065712][ T9344] autofs4:pid:9344:autofs_fill_super: called with bogus options [ 458.179660][ T9348] tipc: Enabled bearer , priority 10 [ 462.477113][ T9378] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 462.488352][ T9378] SQUASHFS error: Failed to read block 0x0: -5 [ 464.536732][ T4230] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 465.639268][ T7] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 465.746581][ T4230] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 466.198976][ T7] Bluetooth: hci5: Injecting HCI hardware error event [ 466.206351][ T4230] usb 1-1: config 0 interface 0 has no altsetting 0 [ 466.215348][ T4194] Bluetooth: hci5: hardware error 0x00 [ 466.377866][ T9447] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1430'. [ 466.387525][ T4230] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 466.405657][ T4230] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.474890][ T4230] usb 1-1: Product: syz [ 466.495227][ T4230] usb 1-1: Manufacturer: syz [ 466.515707][ T4230] usb 1-1: SerialNumber: syz [ 466.559600][ T4230] usb 1-1: config 0 descriptor?? [ 466.572446][ T9454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1432'. [ 466.616789][ T9454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1432'. [ 466.618270][ T4230] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 466.635732][ T9454] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1432'. [ 466.669505][ T4230] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 466.696955][ T4230] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 466.730213][ T4230] usb 1-1: media controller created [ 466.770025][ T4230] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 466.871711][ T4230] DVB: Unable to find symbol tda10046_attach() [ 466.878459][ T4230] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 466.894031][ T4230] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 467.144524][ T9466] trusted_key: encrypted_key: keylen parameter is missing [ 467.817042][ T4230] dvb_usb_m920x: probe of 1-1:0.0 failed with error -71 [ 467.944307][ T4230] usb 1-1: USB disconnect, device number 23 [ 469.544888][ T9511] trusted_key: encrypted_key: keylen parameter is missing [ 469.706635][ T4230] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 470.878948][ T4230] usb 1-1: device descriptor read/64, error -71 [ 470.909863][ T9518] 9pnet: Insufficient options for proto=fd [ 471.168036][ T4230] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 471.566734][ T4230] usb 1-1: device descriptor read/64, error -71 [ 471.693914][ T4230] usb usb1-port1: attempt power cycle [ 473.746187][ T9549] trusted_key: encrypted_key: keylen parameter is missing [ 475.341269][ T4172] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 475.623316][ T9581] xt_CT: No such helper "pptp" [ 476.084266][ T4172] usb 2-1: device descriptor read/64, error -71 [ 476.356839][ T4172] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 476.556682][ T4172] usb 2-1: device descriptor read/64, error -71 [ 476.677395][ T4172] usb usb2-port1: attempt power cycle [ 477.112497][ T4172] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 477.123735][ T9601] blk_update_request: I/O error, dev loop11, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 477.135219][ T9601] SQUASHFS error: Failed to read block 0x0: -5 [ 477.267095][ T4172] usb 2-1: device descriptor read/8, error -71 [ 477.333100][ T9605] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1478'. [ 477.362461][ T9605] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1478'. [ 477.459303][ T9605] device bond0 entered promiscuous mode [ 477.464961][ T9605] device bond_slave_0 entered promiscuous mode [ 477.482724][ T9605] device bond_slave_1 entered promiscuous mode [ 477.491616][ T9605] device bond0 left promiscuous mode [ 477.499198][ T9605] device bond_slave_0 left promiscuous mode [ 477.505630][ T9605] device bond_slave_1 left promiscuous mode [ 477.558919][ T4172] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 477.666871][ T4172] usb 2-1: device descriptor read/8, error -71 [ 477.798107][ T4172] usb usb2-port1: unable to enumerate USB device [ 478.522149][ T9627] xt_CT: No such helper "pptp" [ 481.578298][ T9672] xt_CT: No such helper "pptp" [ 481.657017][ T23] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 481.846622][ T23] usb 6-1: device descriptor read/64, error -71 [ 482.116669][ T23] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 482.936625][ T23] usb 6-1: device descriptor read/64, error -71 [ 483.056784][ T23] usb usb6-port1: attempt power cycle [ 483.496584][ T23] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 483.627268][ T23] usb 6-1: device descriptor read/8, error -71 [ 483.926867][ T23] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 484.155636][ T23] usb 6-1: device descriptor read/8, error -71 [ 484.297281][ T23] usb usb6-port1: unable to enumerate USB device [ 486.650459][ T9736] fuse: Bad value for 'fd' [ 488.466740][ T13] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 488.696689][ T13] usb 2-1: device descriptor read/64, error -71 [ 488.966760][ T13] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 489.186759][ T13] usb 2-1: device descriptor read/64, error -71 [ 489.326941][ T13] usb usb2-port1: attempt power cycle [ 489.406336][ T9776] trusted_key: encrypted_key: keylen parameter is missing [ 489.893800][ T9780] fuse: Bad value for 'fd' [ 491.382003][ T9802] xt_CT: No such helper "pptp" [ 492.771419][ T9823] fuse: Bad value for 'fd' [ 493.037438][ T21] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 493.287007][ T21] usb 1-1: device descriptor read/64, error -71 [ 493.616710][ T21] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 493.778702][ T9829] trusted_key: encrypted_key: keylen parameter is missing [ 493.826804][ T21] usb 1-1: device descriptor read/64, error -71 [ 493.961596][ T21] usb usb1-port1: attempt power cycle [ 494.386623][ T21] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 494.498022][ T21] usb 1-1: device descriptor read/8, error -71 [ 494.700549][ T9833] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1545'. [ 494.722027][ T9833] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1545'. [ 494.762660][ T9833] device bond0 entered promiscuous mode [ 494.776603][ T9833] device bond_slave_0 entered promiscuous mode [ 494.776681][ T21] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 494.787295][ T9833] device bond_slave_1 entered promiscuous mode [ 494.817429][ T9833] device bond0 left promiscuous mode [ 494.826245][ T9833] device bond_slave_0 left promiscuous mode [ 494.839845][ T9833] device bond_slave_1 left promiscuous mode [ 494.897014][ T21] usb 1-1: device descriptor read/8, error -71 [ 495.599004][ T21] usb usb1-port1: unable to enumerate USB device [ 497.307454][ T9867] trusted_key: encrypted_key: keylen parameter is missing [ 499.896068][ T9863] xt_CT: No such helper "pptp" [ 501.410312][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.416675][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.666619][ T1107] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 502.478636][ T9913] trusted_key: encrypted_key: keylen parameter is missing [ 502.576613][ T1107] usb 1-1: device descriptor read/64, error -71 [ 502.846759][ T1107] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 505.036793][ T1107] usb 1-1: device descriptor read/64, error -71 [ 505.157202][ T1107] usb usb1-port1: attempt power cycle [ 505.797741][ T9951] trusted_key: encrypted_key: keylen parameter is missing [ 507.780160][ T9958] xt_CT: No such helper "pptp" [ 508.090409][ T4231] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 508.344887][ T4231] usb 3-1: Using ep0 maxpacket: 8 [ 509.466767][ T4231] usb 3-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 509.513477][ T4231] usb 3-1: config 6 has 0 interfaces, different from the descriptor's value: 1 [ 509.706897][ T4231] usb 3-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 509.733206][ T4231] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.774852][ T4231] usb 3-1: Product: syz [ 509.806224][ T4231] usb 3-1: Manufacturer: syz [ 509.826289][ T4231] usb 3-1: SerialNumber: syz [ 510.091754][ T4231] usb 3-1: USB disconnect, device number 20 [ 510.589494][T10001] trusted_key: encrypted_key: keylen parameter is missing [ 514.136701][ T23] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 514.386607][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 514.506769][ T23] usb 1-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 514.536757][ T23] usb 1-1: config 6 has 0 interfaces, different from the descriptor's value: 1 [ 514.563329][T10055] trusted_key: encrypted_key: keylen parameter is missing [ 514.762017][ T23] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 514.788958][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.820509][ T23] usb 1-1: Product: syz [ 514.824876][ T23] usb 1-1: Manufacturer: syz [ 514.850170][ T23] usb 1-1: SerialNumber: syz [ 514.972242][T10067] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1612'. [ 514.996027][T10067] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1612'. [ 515.181557][ T4227] usb 1-1: USB disconnect, device number 34 [ 516.266882][T10096] trusted_key: encrypted_key: keylen parameter is missing [ 517.028614][T10119] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1629'. [ 517.183093][T10119] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1629'. [ 518.283721][T10152] trusted_key: encrypted_key: keylen parameter is missing [ 518.843344][T10175] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1643'. [ 519.039978][T10175] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1643'. [ 520.142369][T10194] trusted_key: encrypted_key: keylen parameter is missing [ 520.903427][T10221] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 520.909985][T10221] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 521.301855][T10221] vhci_hcd vhci_hcd.0: Device attached [ 521.406055][T10228] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1659'. [ 521.455244][T10228] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1659'. [ 521.461368][T10222] vhci_hcd: connection closed [ 521.465909][ T4257] vhci_hcd: stop threads [ 521.485755][T10228] device bond0 entered promiscuous mode [ 521.495005][ T4257] vhci_hcd: release socket [ 521.505130][T10228] device bond_slave_0 entered promiscuous mode [ 521.511976][ T4257] vhci_hcd: disconnect device [ 521.536991][T10228] device bond_slave_1 entered promiscuous mode [ 521.619074][T10228] device bond0 left promiscuous mode [ 521.633120][T10228] device bond_slave_0 left promiscuous mode [ 521.644814][T10228] device bond_slave_1 left promiscuous mode [ 521.794958][T10243] trusted_key: encrypted_key: keylen parameter is missing [ 524.213721][T10274] trusted_key: encrypted_key: keylen parameter is missing [ 526.596578][T10297] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 526.707396][T10297] SQUASHFS error: Failed to read block 0x0: -5 [ 526.760963][T10300] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 526.767517][T10300] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 526.880843][T10300] vhci_hcd vhci_hcd.0: Device attached [ 527.165782][ T4231] usb 43-1: new low-speed USB device number 3 using vhci_hcd [ 527.412605][T10301] vhci_hcd: connection closed [ 527.416779][ T4269] vhci_hcd: stop threads [ 527.425731][ T4269] vhci_hcd: release socket [ 527.470987][ T4269] vhci_hcd: disconnect device [ 527.758288][ T4237] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 527.780685][T10321] trusted_key: encrypted_key: keylen parameter is missing [ 528.156584][ T4237] usb 4-1: Using ep0 maxpacket: 8 [ 528.276898][ T4237] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 528.312358][ T4237] usb 4-1: config 6 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 528.496891][ T4237] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 528.516216][ T4237] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.536432][ T4237] usb 4-1: Product: syz [ 528.552263][ T4237] usb 4-1: Manufacturer: syz [ 528.572312][ T4237] usb 4-1: SerialNumber: syz [ 528.643071][ T4237] hso 4-1:6.0: Can't find BULK IN endpoint [ 528.849466][ T7] usb 4-1: USB disconnect, device number 19 [ 529.441422][T10351] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 529.447962][T10351] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 529.762859][T10351] vhci_hcd vhci_hcd.0: Device attached [ 530.197107][ T13] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 530.301941][T10352] vhci_hcd: connection reset by peer [ 530.308445][ T4826] vhci_hcd: stop threads [ 530.312836][ T4826] vhci_hcd: release socket [ 530.338292][ T4826] vhci_hcd: disconnect device [ 530.587214][T10374] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 530.625291][T10374] SQUASHFS error: Failed to read block 0x0: -5 [ 531.886672][T10121] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 532.166768][T10121] usb 1-1: Using ep0 maxpacket: 8 [ 532.376743][T10121] usb 1-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 532.426215][T10121] usb 1-1: config 6 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 532.501845][T10409] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 532.508398][T10409] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 532.527348][T10409] vhci_hcd vhci_hcd.0: Device attached [ 532.737328][T10121] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 532.756825][T10121] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.766133][T10121] usb 1-1: Product: syz [ 532.770620][T10121] usb 1-1: Manufacturer: syz [ 532.778129][T10121] usb 1-1: SerialNumber: syz [ 532.939117][T10121] hso 1-1:6.0: Can't find BULK IN endpoint [ 533.146409][ T7] usb 1-1: USB disconnect, device number 35 [ 533.689836][T10410] vhci_hcd: connection reset by peer [ 533.695560][ T4826] vhci_hcd: stop threads [ 533.700375][ T4826] vhci_hcd: release socket [ 533.756734][ T4826] vhci_hcd: disconnect device [ 535.396745][ T13] vhci_hcd: vhci_device speed not set [ 537.236828][ C0] ================================================================== [ 537.245497][ C0] BUG: KASAN: use-after-free in rose_timer_expiry+0x470/0x490 [ 537.253059][ C0] Read of size 2 at addr ffff88805e5ab82a by task syz-executor/4185 [ 537.261110][ C0] [ 537.263446][ C0] CPU: 0 PID: 4185 Comm: syz-executor Not tainted syzkaller #0 [ 537.271063][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 537.281263][ C0] Call Trace: [ 537.284546][ C0] [ 537.287387][ C0] dump_stack_lvl+0x188/0x250 [ 537.292103][ C0] ? show_regs_print_info+0x20/0x20 [ 537.297288][ C0] ? _printk+0xda/0x130 [ 537.301433][ C0] ? rose_timer_expiry+0x470/0x490 [ 537.306553][ C0] ? load_image+0x400/0x400 [ 537.311103][ C0] print_address_description+0x60/0x2d0 [ 537.316663][ C0] ? rose_timer_expiry+0x470/0x490 [ 537.321842][ C0] kasan_report+0xdf/0x130 [ 537.326244][ C0] ? rose_timer_expiry+0x470/0x490 [ 537.331606][ C0] rose_timer_expiry+0x470/0x490 [ 537.336669][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 537.341790][ C0] call_timer_fn+0x17b/0x540 [ 537.346381][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 537.351397][ C0] ? __run_timers+0x800/0x800 [ 537.356747][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 537.361970][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 537.367196][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 537.372225][ C0] __run_timers+0x53e/0x800 [ 537.376728][ C0] ? detach_timer+0x2b0/0x2b0 [ 537.381401][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 537.387613][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 537.392644][ C0] ? ktime_get_real_ts64+0x440/0x440 [ 537.398144][ C0] run_timer_softirq+0x63/0xf0 [ 537.402915][ C0] handle_softirqs+0x339/0x830 [ 537.407690][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 537.412679][ C0] ? do_softirq+0x210/0x210 [ 537.417183][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 537.422397][ C0] __irq_exit_rcu+0x13b/0x230 [ 537.427062][ C0] ? irq_exit_rcu+0x20/0x20 [ 537.431804][ C0] irq_exit_rcu+0x5/0x20 [ 537.436138][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 537.441767][ C0] [ 537.444682][ C0] [ 537.447594][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 537.453574][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x7a/0x80 [ 537.460413][ C0] Code: c1 e0 05 4d 8d 50 28 4d 39 ca 77 1e 4a c7 44 02 08 07 00 00 00 4a 89 7c 02 10 4a 89 74 02 18 4a 89 44 02 20 48 ff c1 48 89 0a 0f 1f 44 00 00 48 8b 4e 08 48 83 c1 f8 48 c1 c1 3d 48 83 f9 08 [ 537.480446][ C0] RSP: 0018:ffffc90002f2f698 EFLAGS: 00000293 [ 537.486511][ C0] RAX: ffffffff81ad5b32 RBX: 0000000000000000 RCX: ffff88807bcc1dc0 [ 537.495025][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 537.503259][ C0] RBP: ffffc90002f2f950 R08: ffffea00019284f3 R09: 1ffffd400032509e [ 537.511355][ C0] R10: dffffc0000000000 R11: fffff9400032509f R12: 00007f4691f47000 [ 537.519417][ C0] R13: 1ffffd4000325099 R14: 00fff0000000000a R15: 0000000000000000 [ 537.527614][ C0] ? copy_page_range+0x1752/0x3230 [ 537.533109][ C0] copy_page_range+0x1752/0x3230 [ 537.538142][ C0] ? copy_process+0x17eb/0x3e20 [ 537.542995][ C0] ? kernel_clone+0x23f/0x990 [ 537.547677][ C0] ? pfn_valid+0x380/0x380 [ 537.552582][ C0] ? validate_mm_rb+0x1fd/0x230 [ 537.557543][ C0] ? vma_gap_callbacks_rotate+0x196/0x1f0 [ 537.563268][ C0] copy_mm+0xc86/0x13f0 [ 537.567435][ C0] ? copy_signal+0x640/0x640 [ 537.572106][ C0] ? __init_rwsem+0x11e/0x160 [ 537.576974][ C0] ? copy_signal+0x537/0x640 [ 537.581550][ C0] copy_process+0x17eb/0x3e20 [ 537.586349][ C0] ? __pidfd_prepare+0x140/0x140 [ 537.591295][ C0] kernel_clone+0x23f/0x990 [ 537.595807][ C0] ? create_io_thread+0x180/0x180 [ 537.600848][ C0] __x64_sys_clone+0x19a/0x210 [ 537.605628][ C0] ? __ia32_sys_vfork+0x130/0x130 [ 537.610672][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 537.615949][ C0] do_syscall_64+0x4c/0xa0 [ 537.620619][ C0] ? clear_bhb_loop+0x30/0x80 [ 537.625306][ C0] ? clear_bhb_loop+0x30/0x80 [ 537.630006][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 537.635906][ C0] RIP: 0033:0x7f46933af292 [ 537.640695][ C0] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 537.660325][ C0] RSP: 002b:00007ffd8c544360 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 537.668737][ C0] RAX: ffffffffffffffda RBX: 00007ffd8c544360 RCX: 00007f46933af292 [ 537.676791][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 537.684869][ C0] RBP: 00007ffd8c5444ec R08: 0000000000000000 R09: 0000000000000001 [ 537.692841][ C0] R10: 000055558a8aa7d0 R11: 0000000000000246 R12: 0000000000000001 [ 537.700814][ C0] R13: 00000000000927c0 R14: 00000000000830f1 R15: 00007ffd8c544540 [ 537.708788][ C0] [ 537.711824][ C0] [ 537.714135][ C0] Allocated by task 6686: [ 537.718449][ C0] __kasan_kmalloc+0xb5/0xf0 [ 537.723077][ C0] rose_add_node+0x227/0xdb0 [ 537.727660][ C0] rose_rt_ioctl+0xa2b/0xe70 [ 537.732448][ C0] rose_ioctl+0x2a7/0x7d0 [ 537.736788][ C0] sock_do_ioctl+0xfb/0x320 [ 537.741285][ C0] sock_ioctl+0x4d2/0x710 [ 537.745766][ C0] __se_sys_ioctl+0xfa/0x170 [ 537.750539][ C0] do_syscall_64+0x4c/0xa0 [ 537.754947][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 537.760840][ C0] [ 537.763199][ C0] Last potentially related work creation: [ 537.768905][ C0] kasan_save_stack+0x35/0x60 [ 537.773757][ C0] kasan_record_aux_stack+0xb8/0x100 [ 537.779024][ C0] kvfree_call_rcu+0x105/0x7d0 [ 537.783771][ C0] __ipv6_dev_mc_dec+0x2bf/0x320 [ 537.788688][ C0] __ipv6_ifa_notify+0x75a/0xe60 [ 537.794193][ C0] addrconf_ifdown+0xdff/0x19c0 [ 537.799096][ C0] addrconf_notify+0x445/0xf00 [ 537.804186][ C0] raw_notifier_call_chain+0xcb/0x160 [ 537.809547][ C0] __dev_notify_flags+0x158/0x300 [ 537.814661][ C0] dev_change_flags+0xe3/0x1a0 [ 537.819432][ C0] do_setlink+0xcdb/0x3d60 [ 537.823847][ C0] rtnl_newlink+0xf8d/0x1a50 [ 537.828423][ C0] rtnetlink_rcv_msg+0x844/0xf30 [ 537.833342][ C0] netlink_rcv_skb+0x1f5/0x440 [ 537.838454][ C0] netlink_unicast+0x774/0x920 [ 537.843222][ C0] netlink_sendmsg+0x8ba/0xbe0 [ 537.847971][ C0] ____sys_sendmsg+0x5b7/0x8f0 [ 537.852732][ C0] ___sys_sendmsg+0x236/0x2e0 [ 537.857434][ C0] __se_sys_sendmsg+0x1af/0x290 [ 537.862281][ C0] do_syscall_64+0x4c/0xa0 [ 537.866711][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 537.872596][ C0] [ 537.874936][ C0] The buggy address belongs to the object at ffff88805e5ab800 [ 537.874936][ C0] which belongs to the cache kmalloc-512 of size 512 [ 537.889083][ C0] The buggy address is located 42 bytes inside of [ 537.889083][ C0] 512-byte region [ffff88805e5ab800, ffff88805e5aba00) [ 537.902547][ C0] The buggy address belongs to the page: [ 537.908262][ C0] page:ffffea0001796a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88805e5ab800 pfn:0x5e5a8 [ 537.919702][ C0] head:ffffea0001796a00 order:2 compound_mapcount:0 compound_pincount:0 [ 537.928014][ C0] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 537.936212][ C0] raw: 00fff00000010200 ffffea000181aa08 ffffea00008fa608 ffff888016c41c80 [ 537.944805][ C0] raw: ffff88805e5ab800 0000000000100003 00000001ffffffff 0000000000000000 [ 537.953393][ C0] page dumped because: kasan: bad access detected [ 537.959905][ C0] page_owner tracks the page as allocated [ 537.965602][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4191, ts 63806372245, free_ts 20123165586 [ 537.985104][ C0] get_page_from_freelist+0x1bbd/0x1ca0 [ 537.990687][ C0] __alloc_pages+0x1ee/0x480 [ 537.995280][ C0] new_slab+0xc0/0x4b0 [ 537.999363][ C0] ___slab_alloc+0x80a/0xdd0 [ 538.004371][ C0] __kmalloc+0x1cd/0x330 [ 538.008626][ C0] fib6_info_alloc+0x2e/0xe0 [ 538.013223][ C0] ip6_route_info_create+0x44f/0x1210 [ 538.018610][ C0] ip6_route_add+0x24/0x130 [ 538.023200][ C0] addrconf_add_dev+0x295/0x3c0 [ 538.028215][ C0] inet6_addr_add+0x18d/0x9c0 [ 538.032886][ C0] inet6_rtm_newaddr+0x64c/0x8f0 [ 538.037802][ C0] rtnetlink_rcv_msg+0x844/0xf30 [ 538.042816][ C0] netlink_rcv_skb+0x1f5/0x440 [ 538.047683][ C0] netlink_unicast+0x774/0x920 [ 538.052554][ C0] netlink_sendmsg+0x8ba/0xbe0 [ 538.057480][ C0] __sys_sendto+0x46d/0x620 [ 538.062081][ C0] page last free stack trace: [ 538.066838][ C0] free_unref_page_prepare+0x637/0x6c0 [ 538.072286][ C0] free_unref_page+0x8f/0x2a0 [ 538.077017][ C0] free_contig_range+0x96/0xf0 [ 538.081940][ C0] destroy_args+0xf0/0xa00 [ 538.086355][ C0] debug_vm_pgtable+0x321/0x380 [ 538.091566][ C0] do_one_initcall+0x272/0x730 [ 538.096413][ C0] do_initcall_level+0x137/0x1f0 [ 538.101526][ C0] do_initcalls+0x4b/0x90 [ 538.105847][ C0] kernel_init_freeable+0x3e9/0x570 [ 538.111037][ C0] kernel_init+0x19/0x1b0 [ 538.115374][ C0] ret_from_fork+0x1f/0x30 [ 538.119939][ C0] [ 538.122253][ C0] Memory state around the buggy address: [ 538.128323][ C0] ffff88805e5ab700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 538.136810][ C0] ffff88805e5ab780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 538.144973][ C0] >ffff88805e5ab800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 538.153200][ C0] ^ [ 538.158566][ C0] ffff88805e5ab880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 538.166892][ C0] ffff88805e5ab900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 538.175120][ C0] ================================================================== [ 538.183431][ C0] Disabling lock debugging due to kernel taint [ 538.189729][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 538.197385][ C0] CPU: 0 PID: 4185 Comm: syz-executor Tainted: G B syzkaller #0 [ 538.206505][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 538.216668][ C0] Call Trace: [ 538.220029][ C0] [ 538.222945][ C0] dump_stack_lvl+0x188/0x250 [ 538.227698][ C0] ? show_regs_print_info+0x20/0x20 [ 538.232939][ C0] ? load_image+0x400/0x400 [ 538.237446][ C0] panic+0x2e5/0x810 [ 538.241432][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 538.245912][ C0] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 538.251791][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 538.257679][ C0] ? _raw_spin_unlock+0x40/0x40 [ 538.262515][ C0] ? print_memory_metadata+0x314/0x400 [ 538.268132][ C0] ? rose_timer_expiry+0x470/0x490 [ 538.273222][ C0] check_panic_on_warn+0x80/0xa0 [ 538.278156][ C0] ? rose_timer_expiry+0x470/0x490 [ 538.283253][ C0] end_report+0x6d/0xf0 [ 538.287460][ C0] kasan_report+0x102/0x130 [ 538.292029][ C0] ? rose_timer_expiry+0x470/0x490 [ 538.297254][ C0] rose_timer_expiry+0x470/0x490 [ 538.302292][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 538.307321][ C0] call_timer_fn+0x17b/0x540 [ 538.311906][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 538.317065][ C0] ? __run_timers+0x800/0x800 [ 538.322094][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 538.327281][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 538.332630][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 538.337650][ C0] __run_timers+0x53e/0x800 [ 538.342233][ C0] ? detach_timer+0x2b0/0x2b0 [ 538.346892][ C0] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 538.352874][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 538.358152][ C0] ? ktime_get_real_ts64+0x440/0x440 [ 538.363794][ C0] run_timer_softirq+0x63/0xf0 [ 538.368671][ C0] handle_softirqs+0x339/0x830 [ 538.373546][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 538.378390][ C0] ? do_softirq+0x210/0x210 [ 538.382877][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 538.388059][ C0] __irq_exit_rcu+0x13b/0x230 [ 538.392719][ C0] ? irq_exit_rcu+0x20/0x20 [ 538.397217][ C0] irq_exit_rcu+0x5/0x20 [ 538.401442][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 538.407577][ C0] [ 538.410492][ C0] [ 538.413403][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 538.419367][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x7a/0x80 [ 538.426203][ C0] Code: c1 e0 05 4d 8d 50 28 4d 39 ca 77 1e 4a c7 44 02 08 07 00 00 00 4a 89 7c 02 10 4a 89 74 02 18 4a 89 44 02 20 48 ff c1 48 89 0a 0f 1f 44 00 00 48 8b 4e 08 48 83 c1 f8 48 c1 c1 3d 48 83 f9 08 [ 538.445983][ C0] RSP: 0018:ffffc90002f2f698 EFLAGS: 00000293 [ 538.452047][ C0] RAX: ffffffff81ad5b32 RBX: 0000000000000000 RCX: ffff88807bcc1dc0 [ 538.460095][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 538.468054][ C0] RBP: ffffc90002f2f950 R08: ffffea00019284f3 R09: 1ffffd400032509e [ 538.476014][ C0] R10: dffffc0000000000 R11: fffff9400032509f R12: 00007f4691f47000 [ 538.483998][ C0] R13: 1ffffd4000325099 R14: 00fff0000000000a R15: 0000000000000000 [ 538.492068][ C0] ? copy_page_range+0x1752/0x3230 [ 538.497189][ C0] copy_page_range+0x1752/0x3230 [ 538.502370][ C0] ? copy_process+0x17eb/0x3e20 [ 538.507198][ C0] ? kernel_clone+0x23f/0x990 [ 538.511866][ C0] ? pfn_valid+0x380/0x380 [ 538.516301][ C0] ? validate_mm_rb+0x1fd/0x230 [ 538.521326][ C0] ? vma_gap_callbacks_rotate+0x196/0x1f0 [ 538.527141][ C0] copy_mm+0xc86/0x13f0 [ 538.531394][ C0] ? copy_signal+0x640/0x640 [ 538.535965][ C0] ? __init_rwsem+0x11e/0x160 [ 538.540818][ C0] ? copy_signal+0x537/0x640 [ 538.545412][ C0] copy_process+0x17eb/0x3e20 [ 538.550090][ C0] ? __pidfd_prepare+0x140/0x140 [ 538.555144][ C0] kernel_clone+0x23f/0x990 [ 538.559736][ C0] ? create_io_thread+0x180/0x180 [ 538.565549][ C0] __x64_sys_clone+0x19a/0x210 [ 538.570310][ C0] ? __ia32_sys_vfork+0x130/0x130 [ 538.575335][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 538.580782][ C0] do_syscall_64+0x4c/0xa0 [ 538.585334][ C0] ? clear_bhb_loop+0x30/0x80 [ 538.590007][ C0] ? clear_bhb_loop+0x30/0x80 [ 538.594769][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 538.600659][ C0] RIP: 0033:0x7f46933af292 [ 538.605146][ C0] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 538.625037][ C0] RSP: 002b:00007ffd8c544360 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 538.633443][ C0] RAX: ffffffffffffffda RBX: 00007ffd8c544360 RCX: 00007f46933af292 [ 538.641469][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 538.649445][ C0] RBP: 00007ffd8c5444ec R08: 0000000000000000 R09: 0000000000000001 [ 538.657406][ C0] R10: 000055558a8aa7d0 R11: 0000000000000246 R12: 0000000000000001 [ 538.665375][ C0] R13: 00000000000927c0 R14: 00000000000830f1 R15: 00007ffd8c544540 [ 538.673346][ C0] [ 538.676466][ C0] Kernel Offset: disabled [ 538.680809][ C0] Rebooting in 86400 seconds..