last executing test programs: 10m24.696995017s ago: executing program 3 (id=4): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 10m22.557800455s ago: executing program 3 (id=6): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000140)={0x0, 0x5, 0x2, "6689"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000340)={0x40, 0x17, 0x27, "06a75db15dbe7d64ad96da9d648790a6206c25f4b4ac3bb4129859304f4002bfae92b543b57445"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 10m18.129651951s ago: executing program 3 (id=9): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysfs(0xffffff9c, 0x0, 0x80900, 0x10a) syz_init_net_socket$bt_rfcomm(0x1f, 0x2, 0x3) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)) r2 = openat$sndseq(0xffffff9c, &(0x7f0000000140), 0x2) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r2, 0x40505330, 0x0) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) pwrite64(r3, 0x0, 0x0, 0x3) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/67, 0x0, 0x4}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/57, 0xd000}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000004c0)=""/115}]}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="f00000001a00130400000000fb"], 0xf0}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f00000002c0)={0x1, r5}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 10m0.501310537s ago: executing program 32 (id=9): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysfs(0xffffff9c, 0x0, 0x80900, 0x10a) syz_init_net_socket$bt_rfcomm(0x1f, 0x2, 0x3) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)) r2 = openat$sndseq(0xffffff9c, &(0x7f0000000140), 0x2) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r2, 0x40505330, 0x0) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) pwrite64(r3, 0x0, 0x0, 0x3) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/67, 0x0, 0x4}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/57, 0xd000}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000004c0)=""/115}]}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="f00000001a00130400000000fb"], 0xf0}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f00000002c0)={0x1, r5}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 8m7.138967754s ago: executing program 2 (id=178): connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x1, 0x0, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0xfffffffffffffe05, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5}) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000001500)=@multiplanar_overlay={0xf8, 0x1, 0x4, 0x40, 0x3f7402, {}, {0x5, 0x1, 0x7, 0x1, 0x6, 0x8, "7bd4cf5c"}, 0x1000, 0x3, {0x0}, 0xfffffffc}) 8m2.837900202s ago: executing program 2 (id=182): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x110, 0x10, 0x7, 0x0, 0x0, {{@in6=@private0, @in=@multicast2, 0x4e20, 0x0, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x70bd25, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @mark={0xc, 0x15, {0x35075b, 0x3b}}]}, 0x110}}, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7831, 0x0, 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x200) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) syz_io_uring_setup(0x23d, &(0x7f0000000240)={0x0, 0x9c0e, 0x10100, 0x0, 0x200}, &(0x7f0000000000), &(0x7f00000001c0)) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000ac0)={r5, r6}, 0xc) 8m1.023319706s ago: executing program 2 (id=184): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x181100) openat$dma_heap(0xffffffffffffff9c, 0x0, 0xa2003, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xf, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000300)={r4}) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x3, r6, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) 7m53.56740633s ago: executing program 2 (id=191): connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x1, 0x0, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0xfffffffffffffe05, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5}) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000001500)=@multiplanar_overlay={0xf8, 0x1, 0x4, 0x40, 0x3f7402, {}, {0x5, 0x1, 0x7, 0x1, 0x6, 0x8, "7bd4cf5c"}, 0x1000, 0x3, {0x0}, 0xfffffffc}) 7m50.152547537s ago: executing program 2 (id=194): syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 7m49.802908118s ago: executing program 2 (id=195): connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x1, 0x0, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0xfffffffffffffe05, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5}) 7m33.418357842s ago: executing program 33 (id=195): connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x1, 0x0, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0xfffffffffffffe05, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5}) 4m53.715791862s ago: executing program 4 (id=379): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x401) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) 4m52.31421598s ago: executing program 4 (id=380): socket$kcm(0x10, 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)={0x14, 0x35, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 4m49.233245853s ago: executing program 4 (id=386): r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x40080, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @rand_addr=0x64010100}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r6, 0x84, 0xc, &(0x7f00000000c0), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000200), &(0x7f0000000080)=0x4) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, &(0x7f0000000040), &(0x7f0000000340)=0x8) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) read$FUSE(r1, 0x0, 0x9) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) capset(&(0x7f0000000280)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x139}, 0x48) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)=0x1e) 4m46.516374297s ago: executing program 4 (id=389): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x401) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) 4m40.81045572s ago: executing program 4 (id=395): connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x1, 0x0, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0xfffffffffffffe05, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5}) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000001500)=@multiplanar_overlay={0xf8, 0x1, 0x4, 0x40, 0x3f7402, {}, {0x5, 0x1, 0x7, 0x1, 0x6, 0x8, "7bd4cf5c"}, 0x1000, 0x3, {0x0}, 0xfffffffc}) 4m36.352435957s ago: executing program 4 (id=399): io_uring_setup(0x663, &(0x7f0000000000)={0x0, 0x8dd3, 0x1, 0x42, 0x20032c}) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, &(0x7f0000000100)={0x1, @pix={0x0, 0x0, 0x59455247}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) unshare(0x6a040000) syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) write$proc_mixer(r0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f00000000c0)={0xf0f041}) close_range(r4, 0xffffffffffffffff, 0x0) 4m20.231223455s ago: executing program 34 (id=399): io_uring_setup(0x663, &(0x7f0000000000)={0x0, 0x8dd3, 0x1, 0x42, 0x20032c}) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, &(0x7f0000000100)={0x1, @pix={0x0, 0x0, 0x59455247}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) unshare(0x6a040000) syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) write$proc_mixer(r0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f00000000c0)={0xf0f041}) close_range(r4, 0xffffffffffffffff, 0x0) 3m14.93121401s ago: executing program 1 (id=614): fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) open(&(0x7f0000000280)='./file1\x00', 0x14dc7e, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x100) fcntl$setlease(r0, 0x400, 0x0) 3m14.758355288s ago: executing program 1 (id=617): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r1, &(0x7f0000000b00)={'syz0\x00', {0x5, 0x7, 0x3, 0x7}, 0xc, [0x2, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x0, 0x0, 0x800008, 0xc, 0x3, 0x5, 0x1, 0xb, 0x93f, 0x7fffffff, 0x51, 0x8, 0x800, 0xfffffffa, 0x3ff, 0x2, 0x7, 0x10001, 0x7ff, 0x0, 0x8, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x5, 0x4, 0x1, 0x4, 0xa, 0x8, 0x3, 0x8, 0x1, 0x2, 0x8c00, 0x6, 0x939, 0x5, 0x9, 0x2, 0x2, 0x4, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x2, 0x56f00ca6, 0x5, 0x2a, 0x1, 0x23], [0x1, 0x9, 0x9, 0x1, 0x5, 0xe, 0x800, 0xc, 0xfffffffa, 0x2329, 0xfd8, 0x3, 0x5, 0x5, 0x0, 0x24e, 0x1, 0xfffffff7, 0x2, 0x3, 0x5, 0x9, 0x82, 0x8, 0x1, 0x40, 0xa3, 0x8, 0xffffffff, 0x5, 0x10000, 0x1, 0xffffff00, 0x7ff, 0x6, 0x7, 0x0, 0xe, 0xd, 0x10, 0x2, 0x9, 0x7, 0x8, 0x5, 0x8000, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xfffffff7, 0x3, 0x24c, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x7, 0x7], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x6, 0x5, 0x8001, 0x7, 0x5, 0x2, 0x7fffffff, 0x8000, 0x1, 0x1, 0x5, 0x4, 0x2, 0x2b0, 0x5, 0x97f82544, 0x8, 0x0, 0x9, 0x5, 0x5, 0x4, 0x10000, 0xc93, 0xffffff3c, 0x8b2, 0x7, 0x0, 0xff, 0x140, 0x2, 0x4, 0xb, 0x4, 0x6, 0x7, 0x7c13, 0x5, 0x1, 0x7, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x0, 0xffffff00, 0x100, 0x7, 0x2, 0x0, 0x9, 0xdd, 0x1, 0x9, 0xc3, 0x7751c64, 0x7a3], [0x9, 0x3889, 0xffff9a7f, 0x200, 0x6, 0x2, 0x3, 0x1, 0x5, 0x4, 0x3, 0x1f, 0x3, 0x6, 0x6, 0x2, 0x9, 0x101, 0x2, 0x66608000, 0x5, 0x7ff, 0x6, 0x5, 0xa476, 0x5, 0x9, 0xffff, 0xd, 0x0, 0xffffff81, 0x5, 0x10001, 0x61, 0x10, 0x1000, 0x8, 0x100, 0x7, 0x20000000, 0x8, 0x1d, 0xb32a, 0xec000000, 0x2, 0x1904, 0x4, 0x9, 0x8, 0x7ff, 0x80, 0x5, 0xfffffffb, 0x7, 0x6e79, 0x8, 0x10000, 0x9371, 0x4f89, 0x7, 0x580, 0x10001, 0x80, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000080)={0x0}) ioctl$I2C_FUNCS(r0, 0x705, &(0x7f0000000040)) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f0000000380)={&(0x7f0000000100)=[{0x2, 0x4000, 0x0, 0x0}], 0x1}) 3m13.337051593s ago: executing program 1 (id=618): r0 = memfd_create(&(0x7f0000000000)=',\xea\x00\xd4\xd7\x02\x8dmbs\x0f\xb9\x80\xb9\x13\x92\'\x94N\xc3\xe0m\xa4\x01\x00\x00\x00\x00\x00\x00\x00-\xb3\x8d\xa1v\xe5\x8a0h7\xa4\xed\x94 \x05q\xa4d\xda0y\xed\xdb\xf4\xeb\x85\x9b\xde\b\xa6\x1f\xaa\f\xa0\x16\xd3\xd6\x98\xf44Q\xae\x8c)\xcd\x1b\xecB\x0f', 0x4) ftruncate(r0, 0x7000000) r1 = dup(r0) read$FUSE(r1, &(0x7f00000063c0)={0x2020}, 0x2020) 3m13.178235444s ago: executing program 1 (id=619): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000001000210400000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067726574617000000000028008000700ac1e01010a000100aa"], 0x48}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000100)=[@in={0x2, 0x4e21, @remote}], 0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, 0x0, 0x0) listen(r2, 0xfff) getpeername(r2, 0x0, &(0x7f0000000140)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010800000000000000000a0000010900020073797a31000000000900010073797a31000000001400038010"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x3f, 0x40206}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}]}}}]}, 0x40}, 0x1, 0x4000, 0x0, 0x44000}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$getregset(0x4204, r6, 0x202, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000140)=0x7f) r8 = syz_open_dev$dri(0x0, 0x1ff, 0xa800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f0000000180)={0x0, 0x0, r9, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000180)={r10, 0x80000000, 0x7, 0x9, 0x1, [], [0xccb, 0x5, 0x9, 0x6], [0x4, 0x6, 0xfffffff9, 0x8], [0x100000000, 0xfffffffffffffff9, 0x3, 0xc]}) 3m12.933940692s ago: executing program 1 (id=621): munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0xc, 0x9c, &(0x7f0000001300)=""/156, 0x41000, 0xa}, 0x94) 3m12.82148466s ago: executing program 1 (id=622): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x1, {0x5, @raw_data="bde74c2bba504b1aa3d1702acb6f760275a3e873893bb5c0569db482f8aa53aa2d7d18f02bd899584fbbdf3ed02fbc3e4314ebce70d1b15dc042612d3f78305b0691727883b739a01c58d3b0dec3419517d95fc59c9f725a09dc795d85ef1362e54f6e40e744556f4c589efe8d0642775d3750a25881eaf5cbdcf2f3457cfb8aa14c33d725fb279900aaafbfc0e221774161e85270833d3d0e42915259cd3b9908ff46ea0f8bf5b3f99780d420992f95228f6623ef18293f53ed7216c5a3c3e2e46257bbbf84bd81"}}) 2m56.845690789s ago: executing program 35 (id=622): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x1, {0x5, @raw_data="bde74c2bba504b1aa3d1702acb6f760275a3e873893bb5c0569db482f8aa53aa2d7d18f02bd899584fbbdf3ed02fbc3e4314ebce70d1b15dc042612d3f78305b0691727883b739a01c58d3b0dec3419517d95fc59c9f725a09dc795d85ef1362e54f6e40e744556f4c589efe8d0642775d3750a25881eaf5cbdcf2f3457cfb8aa14c33d725fb279900aaafbfc0e221774161e85270833d3d0e42915259cd3b9908ff46ea0f8bf5b3f99780d420992f95228f6623ef18293f53ed7216c5a3c3e2e46257bbbf84bd81"}}) 35.962487127s ago: executing program 8 (id=1206): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) 35.650383711s ago: executing program 8 (id=1210): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010800000000000000000a0000010900020073797a31000000000900010073797a31000000001400038010"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 35.128251686s ago: executing program 8 (id=1212): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0) 35.016030599s ago: executing program 8 (id=1214): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 34.801712493s ago: executing program 8 (id=1218): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x2, @random="69177b0618bb", 'veth1_to_batadv\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, 0x0, 0x0) 33.594667894s ago: executing program 8 (id=1227): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x2) socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) 33.159784266s ago: executing program 36 (id=1227): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x2) socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) 8.615455091s ago: executing program 6 (id=1344): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) syz_usb_disconnect(r0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x2b, [0x8000, 0xc95a, 0xffffdff3, 0x1, 0x80, 0x6, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x1, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x800, 0x5, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0x24, 0x9, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x6, 0x7fff, 0x4c74, 0x80000000, 0x242, 0xc, 0xe, 0x0, 0x6d, 0x7, 0x7, 0x3, 0x2, 0x8005, 0xfff, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x3, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x1, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x9, 0x3, 0x3, 0x8000, 0x9, 0x400, 0x401, 0x6, 0x1, 0x8, 0x5, 0x10005, 0x5f31, 0x6, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x7, 0x28, 0x1, 0xfe000000, 0xffff, 0x2, 0x7, 0x9, 0x3ff, 0x3, 0x9, 0x1, 0x20000007, 0x3, 0x9, 0x48c93690, 0x12000000, 0x2], [0x100007, 0x4, 0x7, 0x5, 0xff7ffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x2, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x8, 0x8, 0x86, 0x10000003, 0x1000, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x5, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0x83, 0x4, 0x2950bfaf, 0x1000, 0x5, 0x7, 0x53cf697b, 0x5, 0x6, 0x2ac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0xb, 0x0, 0x4, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x240], [0x9, 0x6, 0x3, 0xb, 0x5, 0x934, 0x6, 0xe, 0x0, 0x100bdfe, 0xce7, 0x1ff, 0xfffffffe, 0x7, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x8003, 0x9, 0x81, 0xff, 0x5, 0x1, 0xfffffffe, 0x14c, 0x60a7, 0xa71d, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x3ff, 0x9602, 0x7, 0x2, 0x1, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa23, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0x2, 0x1, 0x4, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 5.926577844s ago: executing program 7 (id=1353): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x2a000, 0x1000, 0x0, 0x1}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r0, &(0x7f0000000300)={0x2c, 0x2, r2}, 0x10) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000100), &(0x7f00000001c0)=0x30) 5.679287223s ago: executing program 7 (id=1355): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f0000000280)="f30f1bf066b9034d564b0f32f30f7f0266b80500000066b9b4e963a60f01c166b96a09000066b81080000066ba000000000f30d3c23e0fc71f360f50c9ba4200ed66b80500000066b922cd00000f01d9", 0x50}], 0x1, 0x16, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f00000002c0)={0xbe, 0x0, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.378354886s ago: executing program 6 (id=1357): syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e402010902"], 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x2}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 4.41441969s ago: executing program 7 (id=1361): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) pwrite64(r2, 0x0, 0x0, 0x2000000000007) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, 0x0) 3.688659128s ago: executing program 0 (id=1363): capset(0x0, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x81, 0xfffffffb}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffffb9}, 0x48) 3.508255161s ago: executing program 0 (id=1364): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x2a000, 0x1000, 0x0, 0x1}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r0, &(0x7f0000000300)={0x2c, 0x2, r2}, 0x10) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000100), &(0x7f00000001c0)=0x30) 3.438425429s ago: executing program 9 (id=1228): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) 3.242465005s ago: executing program 0 (id=1365): sendmsg$sock(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000bc0)="104a5474086f70b63c95b47235892c5f7b70340d0d7121ab4766b3afb128a24a9e0d74b5a9c968e14040e7ae5dc3b938be404ee6a6c93a9fbaaa8de3a1897392c7250c278a5d7741633fa28405f88e7b385853c58c2adbf696072cb336f972b64306b8240562a009a8af8ab79a362d312ff78075eeb1c0fae29a95ef49d1f51bbe4b05963ec8", 0x86}], 0x1}, 0x804) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) write$P9_RVERSION(r0, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) 3.22016408s ago: executing program 9 (id=1366): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x20400, 0x180) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$tun(r0, &(0x7f0000000180)=ANY=[], 0x30) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)=[0x7], 0x0, 0x0, 0x1}}, 0x40) 3.203275534s ago: executing program 6 (id=1367): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000006c0)={0x34, &(0x7f0000000540)={0x40, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.98250978s ago: executing program 0 (id=1368): openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x8}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x5}]}, 0x30}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) readv(r0, &(0x7f0000001840)=[{&(0x7f0000000200)=""/24, 0x18}], 0x1) 2.348963376s ago: executing program 5 (id=1369): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000180)=0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 2.030464156s ago: executing program 5 (id=1370): r0 = io_uring_setup(0x3c46, &(0x7f0000000880)={0x0, 0xeb7f, 0x3000, 0x2, 0x26c}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f0000000840)={0x7, 0x0, &(0x7f0000000900)=[{0x0}], 0x0, 0x1}, 0x20) 1.846538283s ago: executing program 5 (id=1371): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000003c0)=ANY=[@ANYRES16=r4, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r5, @ANYBLOB="140004006e696376663000000000000000000000080005000a"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x2400c890) 1.757153244s ago: executing program 9 (id=1372): creat(&(0x7f0000000400)='./bus\x00', 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xcd) ioctl$SIOCAX25GETINFOOLD(r0, 0x89e9, &(0x7f0000000040)) 1.299118875s ago: executing program 37 (id=1372): creat(&(0x7f0000000400)='./bus\x00', 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xcd) ioctl$SIOCAX25GETINFOOLD(r0, 0x89e9, &(0x7f0000000040)) 1.263937455s ago: executing program 0 (id=1374): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) dup(r0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec29, 0x0, 0x1, 0x40000337}, &(0x7f0000000dc0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1.260084513s ago: executing program 6 (id=1375): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)={0x638, 0x21, 0x800, 0x70bd28, 0x25dfdbfd, {0x17}, [@generic="6e3c16cb77f25034e763b9c97073e075bee897c43094cd164a0360c97f4e494640dedf33b5b9e7df3c4037d431dacce392f43291b4eb9fba039e6869c218a9d369b852a6db199d5d6a6919628201255eddb2853e778d43421e28c15a4b469eda6ff91ea166c27b645d1a280071d7103a6d8607cfa231f635c72956296084875285a54c6063ab9caf531ec5cac03f67839cecbcd0e780918dc56540", @typed={0xa, 0x46, 0x0, 0x0, @str='wlan0\x00'}, @typed={0x14, 0xca, 0x0, 0x0, @ipv6=@private2}, @typed={0x8, 0x44, 0x0, 0x0, @u32=0x1}, @nested={0x560, 0x132, 0x0, 0x1, [@nested={0x559, 0xb0, 0x0, 0x1, [@nested={0x34, 0x151, 0x0, 0x1, [@typed={0x19, 0xa2, 0x0, 0x0, @binary="37f6779274a4d87e9e8c7237dc3da2b113bc521c50"}, @typed={0x8, 0x23, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0x76, 0x0, 0x0, @ipv4=@broadcast}, @nested={0x4, 0x8f}]}, @nested={0xde, 0xab, 0x0, 0x1, [@generic="94ee644b9159afc8a4af0388e604e645c8b0a4b95e55450dffd7935d418c98534b13f94964b17289d26a138f50c3fd277ba0210d92071886afb681bc65111cb5767e2e84baa83545e1592afe586bf05f79ef683d512033119b2b71219e1970806afae7be38ef4f4a6b77828109ea86bd82acb893ada8ae", @typed={0x8, 0xaa, 0x0, 0x0, @ipv4=@local}, @typed={0x8, 0x117, 0x0, 0x0, @fd}, @generic="8a0bb62000f15e0c04ff7fda9589408e163ecec6dcbb51268ff040c2ad39b7892aca8f220b3856d17431917f266962d21603fbd4b35b68a1d1cf0f1c12c7607945fb86df55fafc13a1d1d7f31a5fa9c9bcbe9e"]}, @generic="8492c7c904f9fa689a5e91e390d68f32d53a55bc0285b3ec796a7af06dff5b44b016be35972f277e9f46f7101a3bb79e7b72c8e95c028f2a2d4bf4cc44e512d11686ae32f4f998e29b72fdc0f69bb679af350bcc75c2f44b404ec3289a9c4e7aefca3ef8c940570f2aabb78ba56fa87f7935ceb10a60524f264fa195efbbf1b7a23070b383acdb42a47d864a2e", @nested={0x165, 0x54, 0x0, 0x1, [@generic="e7e5e866fae0a8708c6ac7ccc6eb5cd17e361b39cd61946a5978420b2d116c1b7a579ebc548dca47cd982f8ace760e21d7c7cc6bcb935f186444b4f59165eceb7dd7c482060eb966be228a58443ee3acf093b382d0647c8ccfc2be8e1b67636cbe5a254123e4872405cb2815cfa77e578078c2f1c763b6eb9ec54fbe8370f0474c2cd4aacad7b51bbc0ac8418a8e88ec575aa649cae5864d763a5c0edcaddbf1c122e9fd84373543557b7a9e78f389d22e5ca6bf7ad2408ca3c23d929ffae4c5dce07e2a53ee6921", @generic="f0998ee814a2a93cc9297a3d3b084fa29724209b4361b922e70205a70b06a70c706835d1b42a5cb9f1bc9bce7cdeb61e6a67a9", @typed={0x6, 0x3c, 0x0, 0x0, @str='$\x00'}, @nested={0x4, 0xaf}, @generic="b8c8f1600e3c18b7b2c0bbba05db2f2fa24251f284f3d2dade39488cf8021951c1ae91a2f26c71da744b75fff0f8a19dd7b5e01312b9e599b71499", @generic="7bb66f6fd4f7f46dcc926ff745a4922dfce1665d98f559b8b585f29178a2be"]}, @nested={0x4, 0x101}, @nested={0x69, 0x12b, 0x0, 0x1, [@generic="8b3cfb8a2ac6f30b54128f79939c75d2e15fc82b1a5bdc3391e7ccee0fbdd23f58bce1398744d639860b5c9b24838bbb550eb6b98010f0eed4a7495e9dc419031077a1b04c", @typed={0x8, 0xf5, 0x0, 0x0, @u32=0x3}, @typed={0xf, 0x12d, 0x0, 0x0, @str='\':%:#(@--&\x00'}, @typed={0x8, 0x23, 0x0, 0x0, @ipv4=@loopback}]}, @nested={0x1d9, 0x7b, 0x0, 0x1, [@typed={0x8, 0x12c, 0x0, 0x0, @uid}, @nested={0x4, 0x10a}, @generic="a89c3e2f74fed5cae00c15cbd7e829b98190352cadf99de8d3ed26b1715eb7c06c95d36c220d2ec9461d4d401666f03e97ce1dc8f5dec3eb8d4083467f49609d01c124904ce7322f2d2a7d544e5aebc26d8b1e3b5271ff", @typed={0x8, 0x9c, 0x0, 0x0, @pid}, @generic="e70ace5299a325f2743efa26686c038ad19b488f9cf01a2ad06192a23cbcf07bf24bae93c3e3141f553c0ae64e73240415936339e1685a3567f04b753e540f68a8e4380711d2c32a30d6ece8ddc30199036af9606009bc1f5e1ec5d327386e3cad5942eb3289dec0349ca85ce2931f21752f1b59f2aa515addabb2fb4a13c39f3c2a9a2545975e165844ce53b0b538a95d10a4427e7c0d10f9ba5e09a179716982fdaf945eda", @typed={0x11, 0xa8, 0x0, 0x0, @binary="14787be38eb15a2bd4c500f584"}, @generic="5ad60ffb90f421a12523808bdeec06047ab21eb009da064d5bde58cf76993644e115d56dde18208f3ed735df9297e18f4912e2887efc2431fa2ef3d913980e7fa99fb24e4e9c1e8fab1b77b053fc03ea588869dceac0926c8edae03e68f3c7f7c42cb2f3d6c0a540669c67882ca22774497b6c263193854cabd3d5468953ebc74c28161b2bfb728c4f14da4749895f667bbae9d33763750c5dec2224db687b8d20d216923478aa2a07ade28e4b3053ea"]}]}]}]}, 0x638}, 0x1, 0x0, 0x0, 0x24841}, 0x24060050) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c00000040000701"], 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.259505637s ago: executing program 5 (id=1376): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x89901) 1.120120821s ago: executing program 5 (id=1377): syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e402010902"], 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x2}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1.024513843s ago: executing program 7 (id=1378): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x2404c0c0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x4, 0x4002004c2, 0x7ff, 0x9, 0x0, 0x400, 0x80, 0x89, 0x0, 0x8, 0x8d], 0x100000, 0x240046}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 545.475357ms ago: executing program 0 (id=1379): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="cf0400000000000000001300002008000300", @ANYRES32=r6, @ANYBLOB="040013000a00060008021100000100000600100080050000060012"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 522.976693ms ago: executing program 6 (id=1380): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000180)=0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 341.279947ms ago: executing program 7 (id=1381): prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x2, 0x0, 0x0, 0x7ffc0002}]}) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000200)={0x18, 0x2, {0xfeff, @local}}, 0x1e) connect$pptp(r0, &(0x7f0000000700)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/237) ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x40047459, 0x0) 298.698796ms ago: executing program 6 (id=1382): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', 0x20400, 0x180) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$tun(r0, &(0x7f0000000180)=ANY=[], 0x30) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)=[0x7], 0x0, 0x0, 0x1}}, 0x40) 203.60426ms ago: executing program 7 (id=1383): openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x8}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x5}]}, 0x30}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) readv(r0, &(0x7f0000001840)=[{&(0x7f0000000200)=""/24, 0x18}], 0x1) 0s ago: executing program 5 (id=1384): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4008890) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x0, 0x400, 0x80, 0x89, 0x0, 0x8, 0x8d], 0x100000, 0x240046}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): .627271][ T10] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 548.727935][ T10] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 548.744140][ T10] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 548.747667][ T10] usb 2-1: media controller created [ 548.912639][ T5908] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 548.937864][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 549.001886][ T5908] usb 1-1: cp210x converter now attached to ttyUSB0 [ 549.110365][ T10] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 549.110421][ T10] zl10353_read_register: readreg error (reg=127, ret==-71) [ 549.116124][ T50] usb 1-1: USB disconnect, device number 22 [ 549.118925][ T10] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 549.155820][ T50] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 549.230243][ T5815] Bluetooth: hci1: command tx timeout [ 549.292142][ T10] usb 2-1: USB disconnect, device number 30 [ 549.308050][ T50] cp210x 1-1:0.0: device disconnected [ 549.524349][ T8536] chnl_net:caif_netlink_parms(): no params data found [ 549.592534][ T8613] netlink: 12 bytes leftover after parsing attributes in process `syz.1.619'. [ 549.657470][ T8614] netlink: 12 bytes leftover after parsing attributes in process `syz.1.619'. [ 549.657520][ T8614] netlink: 12 bytes leftover after parsing attributes in process `syz.1.619'. [ 549.970330][ T5908] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 550.122462][ T5908] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 550.122489][ T5908] usb 1-1: config 0 has no interfaces? [ 550.128078][ T5908] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 550.128108][ T5908] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 550.128138][ T5908] usb 1-1: Product: syz [ 550.128154][ T5908] usb 1-1: Manufacturer: syz [ 550.128170][ T5908] usb 1-1: SerialNumber: syz [ 550.143608][ T5908] usb 1-1: config 0 descriptor?? [ 550.539182][ T8536] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.539392][ T8536] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.539633][ T8536] bridge_slave_0: entered allmulticast mode [ 550.570589][ T8536] bridge_slave_0: entered promiscuous mode [ 550.694297][ T8536] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.694497][ T8536] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.694884][ T8536] bridge_slave_1: entered allmulticast mode [ 550.733236][ T8536] bridge_slave_1: entered promiscuous mode [ 550.754391][ T8159] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 550.956738][ T5871] usb 1-1: USB disconnect, device number 23 [ 551.165100][ T8536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 551.274457][ T8536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 551.310271][ T5815] Bluetooth: hci1: command tx timeout [ 551.447031][ T1336] bridge_slave_1: left allmulticast mode [ 551.447062][ T1336] bridge_slave_1: left promiscuous mode [ 551.447320][ T1336] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.491995][ T1336] bridge_slave_0: left allmulticast mode [ 551.492027][ T1336] bridge_slave_0: left promiscuous mode [ 551.492287][ T1336] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.862476][ T1336] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 553.942037][ T1336] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 554.029523][ T1336] bond0 (unregistering): Released all slaves [ 554.696053][ T8536] team0: Port device team_slave_0 added [ 554.728622][ T8536] team0: Port device team_slave_1 added [ 554.870231][ T1336] hsr_slave_0: left promiscuous mode [ 554.895274][ T1336] hsr_slave_1: left promiscuous mode [ 554.911686][ T1336] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 554.931963][ T1336] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 555.048653][ T1336] veth1_macvtap: left promiscuous mode [ 555.048731][ T1336] veth0_macvtap: left promiscuous mode [ 555.048898][ T1336] veth1_vlan: left promiscuous mode [ 555.049013][ T1336] veth0_vlan: left promiscuous mode [ 555.060787][ T5908] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 555.225761][ T5908] usb 1-1: config 0 has an invalid interface number: 124 but max is 0 [ 555.225804][ T5908] usb 1-1: config 0 has no interface number 0 [ 555.226324][ T5908] usb 1-1: config 0 interface 124 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 555.226363][ T5908] usb 1-1: New USB device found, idVendor=5032, idProduct=0bb9, bcdDevice=41.0a [ 555.226383][ T5908] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.264410][ T5908] usb 1-1: config 0 descriptor?? [ 555.285084][ T8637] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 555.325773][ T5908] dvb-usb: found a 'Grandtec USB1.1 DVB-T' in warm state. [ 555.325833][ T5908] dvb-usb: bulk message failed: -22 (3/0) [ 555.409202][ T5908] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 555.431761][ T5908] dvbdev: DVB: registering new adapter (Grandtec USB1.1 DVB-T) [ 555.431825][ T5908] usb 1-1: media controller created [ 555.437887][ T5908] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 555.507750][ T5908] dvb-usb: bulk message failed: -22 (6/0) [ 555.507833][ T5908] dvb-usb: no frontend was attached by 'Grandtec USB1.1 DVB-T' [ 555.528870][ T5908] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input7 [ 555.601163][ T5908] dvb-usb: schedule remote query interval to 150 msecs. [ 555.601221][ T5908] dvb-usb: bulk message failed: -22 (3/0) [ 555.630716][ T5908] dvb-usb: Grandtec USB1.1 DVB-T successfully initialized and connected. [ 555.763934][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 555.763999][ T10] dvb-usb: error while querying for an remote control event. [ 555.934462][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 555.934502][ T10] dvb-usb: error while querying for an remote control event. [ 556.090202][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 556.090239][ T10] dvb-usb: error while querying for an remote control event. [ 556.250251][ T5908] dvb-usb: bulk message failed: -22 (1/0) [ 556.250289][ T5908] dvb-usb: error while querying for an remote control event. [ 556.410502][ T5908] dvb-usb: bulk message failed: -22 (1/0) [ 556.410538][ T5908] dvb-usb: error while querying for an remote control event. [ 556.570354][ T5908] dvb-usb: bulk message failed: -22 (1/0) [ 556.570390][ T5908] dvb-usb: error while querying for an remote control event. [ 556.731834][ T5908] dvb-usb: bulk message failed: -22 (1/0) [ 556.731862][ T5908] dvb-usb: error while querying for an remote control event. [ 556.893793][ T5908] dvb-usb: bulk message failed: -22 (1/0) [ 556.893829][ T5908] dvb-usb: error while querying for an remote control event. [ 557.058805][ T5908] dvb-usb: bulk message failed: -22 (1/0) [ 557.058833][ T5908] dvb-usb: error while querying for an remote control event. [ 557.219868][ T5908] dvb-usb: bulk message failed: -22 (1/0) [ 557.219896][ T5908] dvb-usb: error while querying for an remote control event. [ 557.381617][ T5908] dvb-usb: bulk message failed: -22 (1/0) [ 557.381680][ T5908] dvb-usb: error while querying for an remote control event. [ 557.540274][ T5908] dvb-usb: bulk message failed: -22 (1/0) [ 557.540334][ T5908] dvb-usb: error while querying for an remote control event. [ 557.714195][ T5908] dvb-usb: bulk message failed: -22 (1/0) [ 557.714233][ T5908] dvb-usb: error while querying for an remote control event. [ 557.800920][ T5908] usb 1-1: USB disconnect, device number 24 [ 558.047666][ T5908] dvb-usb: Grandtec USB1.1 DVB-T successfully deinitialized and disconnected. [ 558.431385][ T8648] overlayfs: failed to resolve './file1/file0': -2 [ 558.692546][ T1336] team0 (unregistering): Port device team_slave_1 removed [ 559.139055][ T1336] team0 (unregistering): Port device team_slave_0 removed [ 559.624818][ T8654] netlink: 12 bytes leftover after parsing attributes in process `syz.0.629'. [ 559.689387][ T8655] netlink: 12 bytes leftover after parsing attributes in process `syz.0.629'. [ 559.689412][ T8655] netlink: 12 bytes leftover after parsing attributes in process `syz.0.629'. [ 563.555654][ T8536] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 563.555676][ T8536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 563.555703][ T8536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 563.607438][ T8536] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 563.607456][ T8536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 563.607486][ T8536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 563.688989][ T8396] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 563.780266][ T50] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 563.925118][ T8396] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 563.958185][ T50] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 563.958225][ T50] usb 1-1: config 0 has no interfaces? [ 563.961466][ T50] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 563.961497][ T50] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 563.961518][ T50] usb 1-1: Product: syz [ 563.961534][ T50] usb 1-1: Manufacturer: syz [ 563.961548][ T50] usb 1-1: SerialNumber: syz [ 563.989400][ T50] usb 1-1: config 0 descriptor?? [ 564.181884][ T8396] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 564.294310][ T8536] hsr_slave_0: entered promiscuous mode [ 564.295589][ T8536] hsr_slave_1: entered promiscuous mode [ 564.296458][ T8536] debugfs: 'hsr0' already exists in 'hsr' [ 564.296481][ T8536] Cannot create hsr debugfs directory [ 564.342627][ T8396] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 565.112429][ T8159] veth0_vlan: entered promiscuous mode [ 565.136549][ T5908] usb 1-1: USB disconnect, device number 25 [ 565.247296][ T8159] veth1_vlan: entered promiscuous mode [ 566.418987][ T8159] veth0_macvtap: entered promiscuous mode [ 566.510564][ T8159] veth1_macvtap: entered promiscuous mode [ 566.832997][ T5814] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 566.839543][ T5814] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 566.843507][ T5814] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 566.876511][ T5814] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 566.902865][ T5814] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 567.113618][ T8159] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 567.182342][ T8396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 567.230777][ T8159] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 567.446044][ T68] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.493658][ T68] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.559089][ T68] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.579715][ T68] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.740243][ T805] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 567.795666][ T8396] 8021q: adding VLAN 0 to HW filter on device team0 [ 567.948610][ T805] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 567.948648][ T805] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 567.948690][ T805] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 567.948714][ T805] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.014861][ T805] usb 1-1: config 0 descriptor?? [ 568.367084][ T1467] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.367343][ T1467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 568.444659][ T805] cm6533_jd 0003:0D8C:0022.000A: unknown main item tag 0x0 [ 568.444815][ T805] cm6533_jd 0003:0D8C:0022.000A: unknown main item tag 0x0 [ 568.514583][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.514685][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.523131][ T1467] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.541095][ T1467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 568.552522][ T805] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.000A/input/input8 [ 568.883008][ T805] cm6533_jd 0003:0D8C:0022.000A: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 568.975955][ T6099] usb 1-1: USB disconnect, device number 26 [ 568.990707][ T5814] Bluetooth: hci5: command tx timeout [ 569.503525][ T5815] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 569.533207][ T5815] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 569.535907][ T5815] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 569.537360][ T8699] fido_id[8699]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 569.616197][ T5815] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 569.617098][ T5815] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 569.810711][ T8536] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 570.380251][ T805] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 570.434548][ T8536] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 570.504638][ T8536] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 570.532746][ T805] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 570.532784][ T805] usb 1-1: config 0 has no interfaces? [ 570.558789][ T805] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 570.558821][ T805] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 570.558842][ T805] usb 1-1: Product: syz [ 570.558857][ T805] usb 1-1: Manufacturer: syz [ 570.558872][ T805] usb 1-1: SerialNumber: syz [ 570.607028][ T805] usb 1-1: config 0 descriptor?? [ 570.830488][ T8536] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 571.070294][ T5814] Bluetooth: hci5: command tx timeout [ 571.491010][ T5908] usb 1-1: USB disconnect, device number 27 [ 571.519151][ T6113] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.598785][ T8679] chnl_net:caif_netlink_parms(): no params data found [ 571.717260][ T5815] Bluetooth: hci6: command tx timeout [ 571.974952][ T6113] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.825495][ T6113] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.150180][ T5815] Bluetooth: hci5: command tx timeout [ 573.543388][ T6113] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 573.800297][ T5815] Bluetooth: hci6: command tx timeout [ 573.876675][ T8679] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.878150][ T8679] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.878426][ T8679] bridge_slave_0: entered allmulticast mode [ 573.907718][ T8679] bridge_slave_0: entered promiscuous mode [ 573.995380][ T8679] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.995519][ T8679] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.995777][ T8679] bridge_slave_1: entered allmulticast mode [ 573.998456][ T8679] bridge_slave_1: entered promiscuous mode [ 574.476388][ T8679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 574.525747][ T8679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 575.062003][ T8743] netlink: 84 bytes leftover after parsing attributes in process `syz.0.645'. [ 575.181743][ T8679] team0: Port device team_slave_0 added [ 575.230396][ T5815] Bluetooth: hci5: command tx timeout [ 575.246892][ T8679] team0: Port device team_slave_1 added [ 575.508191][ T8396] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 575.871681][ T5815] Bluetooth: hci6: command tx timeout [ 575.921538][ T8679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 575.921557][ T8679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 575.921587][ T8679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 576.010503][ T8679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 576.010522][ T8679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 576.010552][ T8679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 576.166105][ T6113] bridge_slave_1: left allmulticast mode [ 576.166146][ T6113] bridge_slave_1: left promiscuous mode [ 576.166426][ T6113] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.259680][ T6113] bridge_slave_0: left allmulticast mode [ 576.259710][ T6113] bridge_slave_0: left promiscuous mode [ 576.259961][ T6113] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.950296][ T5815] Bluetooth: hci6: command tx timeout [ 579.540995][ T6113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 579.591183][ T6113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 579.613729][ T6113] bond0 (unregistering): Released all slaves [ 579.680380][ T8764] netlink: 72 bytes leftover after parsing attributes in process `syz.0.652'. [ 579.727528][ T8700] chnl_net:caif_netlink_parms(): no params data found [ 580.186200][ T8679] hsr_slave_0: entered promiscuous mode [ 580.188931][ T8679] hsr_slave_1: entered promiscuous mode [ 580.200474][ T8679] debugfs: 'hsr0' already exists in 'hsr' [ 580.200504][ T8679] Cannot create hsr debugfs directory [ 580.335718][ T6113] hsr_slave_0: left promiscuous mode [ 580.380336][ T6113] hsr_slave_1: left promiscuous mode [ 580.381443][ T6113] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 580.381469][ T6113] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 580.435068][ T6113] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 580.435099][ T6113] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 580.526993][ T6113] veth1_macvtap: left promiscuous mode [ 580.527116][ T6113] veth0_macvtap: left promiscuous mode [ 580.527429][ T6113] veth1_vlan: left promiscuous mode [ 580.527611][ T6113] veth0_vlan: left promiscuous mode [ 581.212071][ T8783] netlink: 'syz.0.660': attribute type 10 has an invalid length. [ 581.212098][ T8783] netlink: 40 bytes leftover after parsing attributes in process `syz.0.660'. [ 584.110983][ T6113] team0 (unregistering): Port device team_slave_1 removed [ 584.454807][ T6113] team0 (unregistering): Port device team_slave_0 removed [ 587.725974][ T8784] debugfs: 'netdev:nicvf0' already exists in 'phy9' [ 588.487964][ T8700] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.488173][ T8700] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.488406][ T8700] bridge_slave_0: entered allmulticast mode [ 588.518052][ T8700] bridge_slave_0: entered promiscuous mode [ 588.542311][ T8700] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.542453][ T8700] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.542683][ T8700] bridge_slave_1: entered allmulticast mode [ 588.544556][ T8700] bridge_slave_1: entered promiscuous mode [ 588.807040][ T8536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 588.989821][ T8700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 589.031995][ T8700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 589.410180][ T10] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 589.463040][ T8700] team0: Port device team_slave_0 added [ 589.560169][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 589.567130][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 589.567177][ T10] usb 1-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 589.567219][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 589.570573][ T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 589.570651][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 589.570701][ T10] usb 1-1: SerialNumber: syz [ 589.673921][ T10] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 589.673946][ T10] cdc_acm 1-1:1.0: This needs exactly 3 endpoints [ 589.673983][ T10] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -22 [ 589.715250][ T8700] team0: Port device team_slave_1 added [ 589.888525][ T6144] usb 1-1: USB disconnect, device number 28 [ 589.995004][ T8536] 8021q: adding VLAN 0 to HW filter on device team0 [ 590.164268][ T8396] veth0_vlan: entered promiscuous mode [ 590.179681][ T8700] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 590.179700][ T8700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 590.179729][ T8700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 590.240529][ T8700] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 590.240543][ T8700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 590.240563][ T8700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 590.362956][ T1016] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.363177][ T1016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 590.401766][ T512] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.402819][ T512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 590.430849][ T8396] veth1_vlan: entered promiscuous mode [ 590.877802][ T8700] hsr_slave_0: entered promiscuous mode [ 590.879265][ T8700] hsr_slave_1: entered promiscuous mode [ 590.891586][ T8700] debugfs: 'hsr0' already exists in 'hsr' [ 590.891664][ T8700] Cannot create hsr debugfs directory [ 591.235439][ T8679] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 591.363847][ T8679] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 591.444874][ T8679] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 591.532404][ T8679] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 591.886993][ T8396] veth0_macvtap: entered promiscuous mode [ 591.983520][ T8396] veth1_macvtap: entered promiscuous mode [ 592.413959][ T8396] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 592.474483][ T8396] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 592.689880][ T68] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.689933][ T68] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.689972][ T68] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.690009][ T68] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.358637][ T8536] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 593.484728][ T8679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 593.683072][ T8679] 8021q: adding VLAN 0 to HW filter on device team0 [ 594.122820][ T5814] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 594.127608][ T5814] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 594.128834][ T5814] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 594.150716][ T5814] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 594.151866][ T5814] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 594.322334][ T1346] bridge0: port 1(bridge_slave_0) entered blocking state [ 594.324375][ T1346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 594.387632][ T6113] bridge0: port 2(bridge_slave_1) entered blocking state [ 594.387813][ T6113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 594.474967][ T8700] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 594.730824][ T8700] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 594.790285][ T8700] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 594.826724][ T8867] netlink: 'syz.0.685': attribute type 10 has an invalid length. [ 594.826749][ T8867] netlink: 40 bytes leftover after parsing attributes in process `syz.0.685'. [ 595.057762][ T6113] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.125683][ T8700] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 595.208093][ T8868] debugfs: 'netdev:nicvf0' already exists in 'phy9' [ 595.449050][ T6113] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.845558][ T6113] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.158305][ T6113] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.200247][ T5814] Bluetooth: hci2: command tx timeout [ 596.396798][ T8891] netlink: 'syz.0.692': attribute type 10 has an invalid length. [ 596.396821][ T8891] netlink: 40 bytes leftover after parsing attributes in process `syz.0.692'. [ 596.478094][ T8891] debugfs: 'netdev:nicvf0' already exists in 'phy9' [ 596.725154][ T8536] veth0_vlan: entered promiscuous mode [ 597.080573][ T8536] veth1_vlan: entered promiscuous mode [ 597.177872][ T6113] bridge_slave_1: left allmulticast mode [ 597.177905][ T6113] bridge_slave_1: left promiscuous mode [ 597.178179][ T6113] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.241637][ T6113] bridge_slave_0: left allmulticast mode [ 597.241670][ T6113] bridge_slave_0: left promiscuous mode [ 597.241918][ T6113] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.280243][ T5814] Bluetooth: hci2: command tx timeout [ 598.388329][ T8922] loop2: detected capacity change from 0 to 7 [ 598.464712][ T8802] Dev loop2: unable to read RDB block 7 [ 598.464784][ T8802] loop2: unable to read partition table [ 598.465048][ T8802] loop2: partition table beyond EOD, truncated [ 598.512431][ T8922] Dev loop2: unable to read RDB block 7 [ 598.512491][ T8922] loop2: unable to read partition table [ 598.512726][ T8922] loop2: partition table beyond EOD, truncated [ 598.513361][ T8922] loop_reread_partitions: partition scan of loop2 (þè– ) failed (rc=-5) [ 599.941034][ T6113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 600.005066][ T6113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 600.024655][ T6113] bond0 (unregistering): Released all slaves [ 600.061071][ T8851] chnl_net:caif_netlink_parms(): no params data found [ 600.351816][ T5814] Bluetooth: hci2: command tx timeout [ 600.580747][ T6113] hsr_slave_0: left promiscuous mode [ 600.620240][ T6113] hsr_slave_1: left promiscuous mode [ 600.621127][ T6113] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 600.621147][ T6113] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 600.652300][ T6113] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 600.652330][ T6113] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 600.761806][ T6113] veth1_macvtap: left promiscuous mode [ 600.761883][ T6113] veth0_macvtap: left promiscuous mode [ 600.762063][ T6113] veth1_vlan: left promiscuous mode [ 600.762179][ T6113] veth0_vlan: left promiscuous mode [ 601.040256][ T805] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 601.210272][ T805] usb 1-1: Using ep0 maxpacket: 32 [ 601.212943][ T805] usb 1-1: unable to get BOS descriptor or descriptor too short [ 601.214584][ T805] usb 1-1: config 5 has an invalid interface number: 166 but max is 0 [ 601.214612][ T805] usb 1-1: config 5 has no interface number 0 [ 601.214665][ T805] usb 1-1: config 5 interface 166 altsetting 5 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 601.214686][ T805] usb 1-1: config 5 interface 166 altsetting 5 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 601.214722][ T805] usb 1-1: config 5 interface 166 has no altsetting 0 [ 601.217183][ T805] usb 1-1: New USB device found, idVendor=0846, idProduct=4301, bcdDevice=f7.91 [ 601.217204][ T805] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.217219][ T805] usb 1-1: Product: syz [ 601.217230][ T805] usb 1-1: Manufacturer: syz [ 601.217240][ T805] usb 1-1: SerialNumber: syz [ 601.523084][ T805] usb 1-1: Could not find all expected endpoints [ 601.551316][ T805] usb 1-1: USB disconnect, device number 29 [ 602.077569][ T8938] overlayfs: missing 'lowerdir' [ 602.440260][ T5814] Bluetooth: hci2: command tx timeout [ 603.168229][ T5815] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 603.179715][ T5815] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 603.198968][ T5815] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 603.221270][ T5815] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 603.245281][ T5815] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 603.460818][ T6113] team0 (unregistering): Port device team_slave_1 removed [ 603.670836][ T6113] team0 (unregistering): Port device team_slave_0 removed [ 605.322296][ T5814] Bluetooth: hci0: command tx timeout [ 606.279900][ T8679] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 606.756013][ T8851] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.756157][ T8851] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.756337][ T8851] bridge_slave_0: entered allmulticast mode [ 606.792362][ T8851] bridge_slave_0: entered promiscuous mode [ 606.830763][ T8851] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.830944][ T8851] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.831185][ T8851] bridge_slave_1: entered allmulticast mode [ 606.834094][ T8851] bridge_slave_1: entered promiscuous mode [ 607.147307][ T8851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 607.175452][ T8700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 607.214654][ T8851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 607.410246][ T5814] Bluetooth: hci0: command tx timeout [ 607.826095][ T8851] team0: Port device team_slave_0 added [ 607.844357][ T8851] team0: Port device team_slave_1 added [ 608.056871][ T8851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 608.056890][ T8851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 608.056919][ T8851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 608.158037][ T8851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 608.158058][ T8851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 608.158088][ T8851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 608.214333][ T8700] 8021q: adding VLAN 0 to HW filter on device team0 [ 608.275502][ T8973] overlayfs: missing 'lowerdir' [ 608.729770][ T3522] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.729967][ T3522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 609.017440][ T8851] hsr_slave_0: entered promiscuous mode [ 609.018482][ T8851] hsr_slave_1: entered promiscuous mode [ 609.109444][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.109595][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 609.475917][ T5815] Bluetooth: hci0: command tx timeout [ 609.495297][ T8679] veth0_vlan: entered promiscuous mode [ 609.778833][ T8945] chnl_net:caif_netlink_parms(): no params data found [ 610.297188][ T8679] veth1_vlan: entered promiscuous mode [ 610.703329][ T8992] netlink: 12 bytes leftover after parsing attributes in process `syz.0.722'. [ 610.735995][ T8945] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.736211][ T8945] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.736429][ T8945] bridge_slave_0: entered allmulticast mode [ 610.747486][ T8945] bridge_slave_0: entered promiscuous mode [ 610.833940][ T8945] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.834097][ T8945] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.834289][ T8945] bridge_slave_1: entered allmulticast mode [ 610.839296][ T8945] bridge_slave_1: entered promiscuous mode [ 610.904417][ T8996] overlayfs: missing 'lowerdir' [ 611.225870][ T9002] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 611.313517][ T8945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 611.363007][ T8945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 611.550423][ T5814] Bluetooth: hci0: command tx timeout [ 611.692112][ T9007] netlink: 12 bytes leftover after parsing attributes in process `syz.0.729'. [ 611.763221][ T6113] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.878473][ T9011] overlayfs: missing 'workdir' [ 611.893246][ T8945] team0: Port device team_slave_0 added [ 611.979426][ T8945] team0: Port device team_slave_1 added [ 612.143973][ T9017] fuse: Bad value for 'user_id' [ 612.143994][ T9017] fuse: Bad value for 'user_id' [ 612.174986][ T6113] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.470931][ T9024] netlink: 12 bytes leftover after parsing attributes in process `syz.0.736'. [ 612.628408][ T9029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.738'. [ 612.628430][ T9029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.738'. [ 612.727594][ T6113] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.774047][ T8679] veth0_macvtap: entered promiscuous mode [ 612.777458][ T8945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 612.777476][ T8945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 612.777504][ T8945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 612.913595][ T8945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 612.913610][ T8945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 612.913631][ T8945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 613.127929][ T6113] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.183635][ T8679] veth1_macvtap: entered promiscuous mode [ 613.419270][ T8945] hsr_slave_0: entered promiscuous mode [ 613.422801][ T8945] hsr_slave_1: entered promiscuous mode [ 613.426712][ T8945] debugfs: 'hsr0' already exists in 'hsr' [ 613.426788][ T8945] Cannot create hsr debugfs directory [ 613.773370][ T8679] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 613.781773][ T8700] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 614.134372][ T8679] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 614.249790][ T8851] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 614.312779][ T8851] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 614.333942][ T68] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.416620][ T6113] bridge_slave_1: left allmulticast mode [ 614.416653][ T6113] bridge_slave_1: left promiscuous mode [ 614.416955][ T6113] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.481926][ T6113] bridge_slave_0: left allmulticast mode [ 614.481959][ T6113] bridge_slave_0: left promiscuous mode [ 614.482247][ T6113] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.543160][ T6113] bridge_slave_1: left allmulticast mode [ 614.543185][ T6113] bridge_slave_1: left promiscuous mode [ 614.543360][ T6113] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.601230][ T6113] bridge_slave_0: left allmulticast mode [ 614.601254][ T6113] bridge_slave_0: left promiscuous mode [ 614.601450][ T6113] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.573288][ T6113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 616.634302][ T6113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 616.652952][ T6113] bond0 (unregistering): Released all slaves [ 617.435449][ T6113] team0: Port device geneve0 removed [ 618.334187][ T6113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 618.391028][ T6113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 618.413326][ T6113] bond0 (unregistering): Released all slaves [ 618.460812][ T8851] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 618.529147][ T68] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.558704][ T68] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 618.558789][ T8851] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 618.639420][ T68] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.073220][ T9053] netlink: 12 bytes leftover after parsing attributes in process `syz.0.743'. [ 619.312183][ T8700] veth0_vlan: entered promiscuous mode [ 619.312671][ T1467] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 619.312691][ T1467] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 619.500513][ T8700] veth1_vlan: entered promiscuous mode [ 619.525811][ T3522] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 619.525833][ T3522] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 619.741020][ T8851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 619.742624][ T8700] veth0_macvtap: entered promiscuous mode [ 619.796068][ T8700] veth1_macvtap: entered promiscuous mode [ 620.006498][ T8851] 8021q: adding VLAN 0 to HW filter on device team0 [ 620.107329][ T8700] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 620.123533][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.124299][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 620.198548][ T8700] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 620.198647][ T8945] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 620.361326][ T8945] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 620.421329][ T8945] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 620.487711][ T1336] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.500337][ T1336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 620.564358][ T8945] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 620.608365][ T1336] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.609913][ T1336] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.649269][ T3522] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.663290][ T3522] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.166658][ T9077] netlink: 12 bytes leftover after parsing attributes in process `syz.8.750'. [ 621.598144][ T9085] syz_tun: entered allmulticast mode [ 621.665046][ T9086] dvmrp1: entered allmulticast mode [ 621.791986][ T6113] hsr_slave_0: left promiscuous mode [ 621.830238][ T6113] hsr_slave_1: left promiscuous mode [ 621.831161][ T6113] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 621.868213][ T6113] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 622.000345][ T5908] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 622.020273][ T6113] hsr_slave_0: left promiscuous mode [ 622.060340][ T6113] hsr_slave_1: left promiscuous mode [ 622.062104][ T6113] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 622.062130][ T6113] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 622.098469][ T6113] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 622.098492][ T6113] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 622.158437][ T5908] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 622.158469][ T5908] usb 1-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 622.158497][ T5908] usb 1-1: config 0 interface 0 has no altsetting 0 [ 622.158533][ T5908] usb 1-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 622.158557][ T5908] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.236675][ T5908] usb 1-1: config 0 descriptor?? [ 622.316728][ T6113] veth1_vlan: left promiscuous mode [ 622.316952][ T6113] veth0_vlan: left promiscuous mode [ 622.347647][ T6113] veth1_macvtap: left promiscuous mode [ 622.347742][ T6113] veth0_macvtap: left promiscuous mode [ 622.347956][ T6113] veth1_vlan: left promiscuous mode [ 622.348098][ T6113] veth0_vlan: left promiscuous mode [ 622.658050][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 622.658493][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 622.658897][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 622.659063][ T5908] usbhid 1-1:0.0: can't add hid device: -32 [ 622.659191][ T5908] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 622.722914][ T5908] usb 1-1: USB disconnect, device number 30 [ 624.351740][ T6113] team0 (unregistering): Port device team_slave_1 removed [ 624.620950][ T6113] team0 (unregistering): Port device team_slave_0 removed [ 629.130841][ T6113] team0 (unregistering): Port device team_slave_1 removed [ 629.392134][ T6113] team0 (unregistering): Port device team_slave_0 removed [ 629.948089][ T5815] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 629.964649][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.964714][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.969441][ T5815] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 629.979317][ T5815] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 630.006396][ T5815] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 630.007569][ T5815] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 632.110803][ T5814] Bluetooth: hci1: command tx timeout [ 632.143695][ T9085] dvmrp1: left allmulticast mode [ 632.293683][ T9084] syz_tun: left allmulticast mode [ 632.859457][ T9111] netlink: 12 bytes leftover after parsing attributes in process `syz.0.758'. [ 633.507064][ T8945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 633.724703][ T8945] 8021q: adding VLAN 0 to HW filter on device team0 [ 633.774212][ T8851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 633.828613][ T6011] bridge0: port 1(bridge_slave_0) entered blocking state [ 633.828834][ T6011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 633.879032][ T6011] bridge0: port 2(bridge_slave_1) entered blocking state [ 633.879223][ T6011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 634.046393][ T9096] chnl_net:caif_netlink_parms(): no params data found [ 634.190566][ T5814] Bluetooth: hci1: command tx timeout [ 634.711858][ T31] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 635.011030][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 635.021972][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 635.022026][ T31] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 635.022052][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.033376][ T31] usb 1-1: config 0 descriptor?? [ 635.097840][ T31] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 635.451703][ T9096] bridge0: port 1(bridge_slave_0) entered blocking state [ 635.451910][ T9096] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.452162][ T9096] bridge_slave_0: entered allmulticast mode [ 635.454901][ T9096] bridge_slave_0: entered promiscuous mode [ 635.459195][ T9096] bridge0: port 2(bridge_slave_1) entered blocking state [ 635.459324][ T9096] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.459499][ T9096] bridge_slave_1: entered allmulticast mode [ 635.466070][ T9096] bridge_slave_1: entered promiscuous mode [ 635.834530][ T9096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 635.877130][ T9096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 636.177793][ T9096] team0: Port device team_slave_0 added [ 636.193720][ T9096] team0: Port device team_slave_1 added [ 636.272317][ T5814] Bluetooth: hci1: command tx timeout [ 636.469420][ T9096] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 636.469440][ T9096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 636.469470][ T9096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 636.532750][ T9096] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 636.532769][ T9096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 636.532799][ T9096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 637.201432][ T9096] hsr_slave_0: entered promiscuous mode [ 637.202885][ T9096] hsr_slave_1: entered promiscuous mode [ 637.203948][ T9096] debugfs: 'hsr0' already exists in 'hsr' [ 637.203975][ T9096] Cannot create hsr debugfs directory [ 637.205561][ T8851] veth0_vlan: entered promiscuous mode [ 637.375265][ T31] usb 1-1: USB disconnect, device number 31 [ 637.596555][ T6113] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.747684][ T8945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 638.293471][ T6113] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.350574][ T5814] Bluetooth: hci1: command tx timeout [ 638.433977][ T8851] veth1_vlan: entered promiscuous mode [ 638.436042][ T9216] netlink: 12 bytes leftover after parsing attributes in process `syz.0.774'. [ 638.582316][ T9226] fuse: Bad value for 'rootmode' [ 638.806143][ T6113] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.930189][ T31] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 639.090568][ T31] usb 9-1: Using ep0 maxpacket: 32 [ 639.097819][ T31] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 639.097879][ T31] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 639.097904][ T31] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.145666][ T31] usb 9-1: config 0 descriptor?? [ 639.158988][ T31] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 639.196230][ T6113] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.653236][ T8851] veth0_macvtap: entered promiscuous mode [ 639.792046][ T8851] veth1_macvtap: entered promiscuous mode [ 640.144840][ T6113] bridge_slave_1: left allmulticast mode [ 640.144873][ T6113] bridge_slave_1: left promiscuous mode [ 640.145136][ T6113] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.245429][ T6113] bridge_slave_0: left allmulticast mode [ 640.245460][ T6113] bridge_slave_0: left promiscuous mode [ 640.245717][ T6113] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.687190][ T5908] usb 9-1: USB disconnect, device number 2 [ 642.711048][ T6113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 642.792263][ T6113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 642.837787][ T6113] bond0 (unregistering): Released all slaves [ 642.905261][ T8945] veth0_vlan: entered promiscuous mode [ 643.051691][ T8851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 643.117330][ T8851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 643.171379][ T8945] veth1_vlan: entered promiscuous mode [ 643.324633][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.512873][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.516036][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.541378][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.894706][ T6113] hsr_slave_0: left promiscuous mode [ 643.941599][ T6113] hsr_slave_1: left promiscuous mode [ 643.942400][ T6113] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 643.942431][ T6113] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 643.980756][ T805] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 643.981960][ T6113] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 643.982019][ T6113] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 644.126673][ T6113] veth1_macvtap: left promiscuous mode [ 644.126750][ T6113] veth0_macvtap: left promiscuous mode [ 644.126976][ T6113] veth1_vlan: left promiscuous mode [ 644.127095][ T6113] veth0_vlan: left promiscuous mode [ 644.155442][ T805] usb 9-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 644.155464][ T805] usb 9-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 644.155484][ T805] usb 9-1: config 0 interface 0 has no altsetting 0 [ 644.155508][ T805] usb 9-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 644.155532][ T805] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.218394][ T805] usb 9-1: config 0 descriptor?? [ 644.633337][ T805] usbhid 9-1:0.0: can't add hid device: -71 [ 644.633461][ T805] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 644.637631][ T805] usb 9-1: USB disconnect, device number 3 [ 644.751740][ T5908] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 644.910371][ T5908] usb 1-1: Using ep0 maxpacket: 32 [ 644.912479][ T5908] usb 1-1: no configurations [ 644.912491][ T5908] usb 1-1: can't read configurations, error -22 [ 645.040529][ T5908] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 645.195583][ T5908] usb 1-1: Using ep0 maxpacket: 32 [ 645.208365][ T5908] usb 1-1: no configurations [ 645.208380][ T5908] usb 1-1: can't read configurations, error -22 [ 645.208723][ T5908] usb usb1-port1: attempt power cycle [ 645.520286][ T6093] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 645.567243][ T5908] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 645.580882][ T5908] usb 1-1: Using ep0 maxpacket: 32 [ 645.587811][ T5908] usb 1-1: no configurations [ 645.587833][ T5908] usb 1-1: can't read configurations, error -22 [ 645.650889][ T6093] usb 9-1: device descriptor read/64, error -71 [ 645.710388][ T5908] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 645.731028][ T5908] usb 1-1: Using ep0 maxpacket: 32 [ 645.731855][ T5908] usb 1-1: no configurations [ 645.731868][ T5908] usb 1-1: can't read configurations, error -22 [ 645.732225][ T5908] usb usb1-port1: unable to enumerate USB device [ 645.900297][ T6093] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 646.041113][ T6093] usb 9-1: device descriptor read/64, error -71 [ 646.151667][ T6093] usb usb9-port1: attempt power cycle [ 646.490260][ T6093] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 646.512253][ T6093] usb 9-1: device descriptor read/8, error -71 [ 646.750349][ T6093] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 646.771034][ T6093] usb 9-1: device descriptor read/8, error -71 [ 646.880755][ T6093] usb usb9-port1: unable to enumerate USB device [ 646.971717][ T6113] team0 (unregistering): Port device team_slave_1 removed [ 647.210778][ T6113] team0 (unregistering): Port device team_slave_0 removed [ 647.880246][ T6093] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 648.063434][ T6093] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 648.063494][ T6093] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1 [ 648.063521][ T6093] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 10 [ 648.063549][ T6093] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 648.120683][ T6093] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 648.120713][ T6093] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 648.120734][ T6093] usb 1-1: Manufacturer: syz [ 648.126907][ T6093] usb 1-1: config 0 descriptor?? [ 649.954662][ T31] usb 1-1: USB disconnect, device number 36 [ 649.964451][ T9349] syzkaller0: entered promiscuous mode [ 649.964555][ T9349] syzkaller0: entered allmulticast mode [ 650.590681][ T8945] veth0_macvtap: entered promiscuous mode [ 650.622505][ T8945] veth1_macvtap: entered promiscuous mode [ 650.677493][ T9096] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 650.762777][ T9096] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 650.813337][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 650.813360][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 650.844992][ T9096] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 650.962603][ T9096] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 651.088940][ T8945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 651.118034][ T8945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 651.218513][ T9368] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 651.296765][ T68] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.296906][ T9374] netlink: 20 bytes leftover after parsing attributes in process `syz.0.803'. [ 651.335497][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 651.335521][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 651.336987][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.343944][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.366670][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.131353][ T6011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 652.131378][ T6011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 652.584631][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 652.584654][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 652.595544][ T9096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 652.829464][ T9096] 8021q: adding VLAN 0 to HW filter on device team0 [ 653.043584][ T6093] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 653.045183][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 653.045438][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 653.112817][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 653.112985][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 653.170266][ T6093] usb 9-1: device descriptor read/64, error -71 [ 653.430336][ T6093] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 653.475778][ T5814] Bluetooth: hci4: unexpected event for opcode 0x0c7b [ 653.570433][ T6093] usb 9-1: device descriptor read/64, error -71 [ 653.680764][ T6093] usb usb9-port1: attempt power cycle [ 654.968106][ T6093] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 655.014484][ T6093] usb 9-1: device descriptor read/8, error -71 [ 655.270241][ T6093] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 655.291054][ T6093] usb 9-1: device descriptor read/8, error -71 [ 655.411260][ T6093] usb usb9-port1: unable to enumerate USB device [ 656.279921][ T9440] netlink: 'syz.6.811': attribute type 10 has an invalid length. [ 656.279947][ T9440] netlink: 40 bytes leftover after parsing attributes in process `syz.6.811'. [ 656.408812][ T9440] team0: Failed to send options change via netlink (err -105) [ 656.408849][ T9440] team0: Port device geneve0 added [ 656.438166][ T9445] fuse: Unknown parameter '0x0000000000000003' [ 656.635765][ T9096] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 656.795165][ T9456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.815'. [ 656.795193][ T9456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.815'. [ 656.795252][ T9456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.815'. [ 657.256893][ T9472] netlink: 'syz.8.818': attribute type 46 has an invalid length. [ 657.256930][ T9472] netlink: 16 bytes leftover after parsing attributes in process `syz.8.818'. [ 657.485626][ T9] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 657.544849][ T9477] netlink: 12 bytes leftover after parsing attributes in process `syz.8.820'. [ 657.660383][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 657.662697][ T9] usb 8-1: config 0 has no interfaces? [ 657.665916][ T9] usb 8-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 657.665946][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.665967][ T9] usb 8-1: Product: syz [ 657.665982][ T9] usb 8-1: Manufacturer: syz [ 657.665998][ T9] usb 8-1: SerialNumber: syz [ 657.727139][ T9] usb 8-1: config 0 descriptor?? [ 658.178156][ T9096] veth0_vlan: entered promiscuous mode [ 658.247258][ T9096] veth1_vlan: entered promiscuous mode [ 658.448432][ T9505] netlink: 8 bytes leftover after parsing attributes in process `syz.6.826'. [ 658.448459][ T9505] netlink: 8 bytes leftover after parsing attributes in process `syz.6.826'. [ 658.448502][ T9505] netlink: 8 bytes leftover after parsing attributes in process `syz.6.826'. [ 658.646233][ T5814] Bluetooth: hci2: connection err: -111 [ 658.981208][ T9523] netlink: 12 bytes leftover after parsing attributes in process `syz.0.831'. [ 659.244866][ T9096] veth0_macvtap: entered promiscuous mode [ 659.262697][ T9096] veth1_macvtap: entered promiscuous mode [ 659.568691][ T9096] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 659.591425][ T9096] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 659.625641][ T1467] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.627032][ T1467] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.630374][ T1467] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 659.641271][ T512] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.212164][ T1016] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 660.212186][ T1016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 660.429476][ T6099] usb 8-1: USB disconnect, device number 2 [ 660.431332][ T9] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 660.585053][ T9] usb 7-1: config 0 interface 0 altsetting 10 endpoint 0x81 has invalid wMaxPacketSize 0 [ 660.585089][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 660.585123][ T9] usb 7-1: New USB device found, idVendor=056a, idProduct=0335, bcdDevice= 0.00 [ 660.585148][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.652007][ T9] usb 7-1: config 0 descriptor?? [ 660.787573][ T6011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 660.787598][ T6011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 661.063012][ T9] hid (null): usage index exceeded [ 661.145092][ T9] wacom 0003:056A:0335.000B: ignoring exceeding usage max [ 661.147208][ T9] wacom 0003:056A:0335.000B: ignoring exceeding usage max [ 661.147246][ T9] wacom 0003:056A:0335.000B: usage index exceeded [ 661.147275][ T9] wacom 0003:056A:0335.000B: item 0 0 2 2 parsing failed [ 661.148132][ T9] wacom 0003:056A:0335.000B: parse failed [ 661.148300][ T9] wacom 0003:056A:0335.000B: probe with driver wacom failed with error -22 [ 661.274248][ T6144] usb 7-1: USB disconnect, device number 2 [ 661.367751][ T9566] netlink: 12 bytes leftover after parsing attributes in process `syz.7.841'. [ 663.135613][ T9592] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 663.297159][ T50] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 663.440141][ T50] usb 7-1: Using ep0 maxpacket: 32 [ 663.445454][ T50] usb 7-1: config 0 has no interfaces? [ 663.449244][ T50] usb 7-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 663.449276][ T50] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.449299][ T50] usb 7-1: Product: syz [ 663.449315][ T50] usb 7-1: Manufacturer: syz [ 663.449331][ T50] usb 7-1: SerialNumber: syz [ 663.514289][ T50] usb 7-1: config 0 descriptor?? [ 664.097942][ T9612] netlink: 12 bytes leftover after parsing attributes in process `syz.5.853'. [ 664.264033][ T9619] tipc: Started in network mode [ 664.264067][ T9619] tipc: Node identity 3a3cea952a48, cluster identity 4711 [ 664.264974][ T9619] tipc: Enabled bearer , priority 0 [ 664.288005][ T9624] syzkaller0: entered promiscuous mode [ 664.288082][ T9624] syzkaller0: entered allmulticast mode [ 664.497860][ T9614] tipc: Resetting bearer [ 664.575349][ T9613] tipc: Resetting bearer [ 664.831856][ T9613] tipc: Disabling bearer [ 665.668996][ T9674] fuse: Bad value for 'fd' [ 666.191709][ T6099] usb 7-1: USB disconnect, device number 3 [ 666.695159][ T9697] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 666.837370][ T9702] fuse: Bad value for 'fd' [ 666.931192][ T9706] 9p: Bad value for 'rfdno' [ 666.960202][ T50] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 667.115982][ T50] usb 8-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 667.116016][ T50] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.116040][ T50] usb 8-1: Product: syz [ 667.116056][ T50] usb 8-1: Manufacturer: syz [ 667.116071][ T50] usb 8-1: SerialNumber: syz [ 667.165694][ T50] usb 8-1: config 0 descriptor?? [ 667.195841][ T9713] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 667.195879][ T9713] IPv6: NLM_F_CREATE should be set when creating new route [ 667.195906][ T9713] IPv6: NLM_F_CREATE should be set when creating new route [ 667.555047][ T50] usb 8-1: USB disconnect, device number 3 [ 667.620428][ T6001] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 667.685863][ T9724] comedi comedi3: 8255: I/O port conflict (0x40404f26,4) [ 667.708789][ T9545] udevd[9545]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 667.730276][ T5947] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 667.781103][ T6001] usb 7-1: Using ep0 maxpacket: 32 [ 667.786570][ T6001] usb 7-1: config 0 has no interfaces? [ 667.821172][ T6001] usb 7-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 667.821300][ T6001] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.821324][ T6001] usb 7-1: Product: syz [ 667.821340][ T6001] usb 7-1: Manufacturer: syz [ 667.821355][ T6001] usb 7-1: SerialNumber: syz [ 667.863835][ T6001] usb 7-1: config 0 descriptor?? [ 667.890156][ T5947] usb 9-1: Using ep0 maxpacket: 8 [ 667.893275][ T5947] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 667.893312][ T5947] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 667.893351][ T5947] usb 9-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 667.893374][ T5947] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.949064][ T5947] usb 9-1: config 0 descriptor?? [ 668.069304][ T9730] netlink: 20 bytes leftover after parsing attributes in process `syz.0.885'. [ 668.176875][ T9732] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 668.447654][ T5947] isku 0003:1E7D:319C.000C: unknown main item tag 0x0 [ 668.447694][ T5947] isku 0003:1E7D:319C.000C: unknown main item tag 0x0 [ 668.447722][ T5947] isku 0003:1E7D:319C.000C: unknown main item tag 0x0 [ 668.484942][ T9741] netlink: 'syz.0.888': attribute type 10 has an invalid length. [ 668.484965][ T9741] netlink: 40 bytes leftover after parsing attributes in process `syz.0.888'. [ 668.518270][ T5947] isku 0003:1E7D:319C.000C: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.8-1/input0 [ 668.661487][ T6099] usb 9-1: USB disconnect, device number 12 [ 668.687665][ T9743] fido_id[9743]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory [ 668.848149][ T9749] 9p: Bad value for 'rfdno' [ 669.241171][ T9760] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 669.241256][ T9760] IPv6: NLM_F_CREATE should be set when creating new route [ 669.241298][ T9760] IPv6: NLM_F_CREATE should be set when creating new route [ 669.452473][ T9769] fuse: Invalid rootmode [ 669.776069][ T9776] netlink: 20 bytes leftover after parsing attributes in process `syz.8.896'. [ 670.418975][ T9794] sg_write: data in/out 92/98 bytes for SCSI command 0x0-- guessing data in; [ 670.418975][ T9794] program syz.0.901 not setting count and/or reply_len properly [ 670.452171][ T9793] sctp: [Deprecated]: syz.8.902 (pid 9793) Use of int in maxseg socket option. [ 670.452171][ T9793] Use struct sctp_assoc_value instead [ 670.479258][ T6001] usb 7-1: USB disconnect, device number 4 [ 670.655104][ T9799] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 670.746361][ T9801] fuse: Invalid rootmode [ 670.792755][ T9805] syz_tun: entered allmulticast mode [ 670.824513][ T37] audit: type=1400 audit(1766593023.792:2): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=9804 comm="syz.8.906" daddr=224.0.3.0 netif=wpan0 [ 670.825911][ T37] audit: type=1400 audit(1766593023.802:3): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=9804 comm="syz.8.906" daddr=224.0.3.0 netif=wpan0 [ 670.880481][ T37] audit: type=1400 audit(1766593023.852:4): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=9804 comm="syz.8.906" daddr=224.0.3.0 [ 670.880588][ T9805] mroute: pending queue full, dropping entries [ 670.934588][ T9804] syz_tun: left allmulticast mode [ 671.094619][ T9815] netlink: 20 bytes leftover after parsing attributes in process `syz.6.908'. [ 671.280208][ T6709] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 671.388796][ T5947] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 671.434631][ T6709] usb 1-1: config 0 has no interfaces? [ 671.437873][ T6709] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 671.437905][ T6709] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 671.437926][ T6709] usb 1-1: Product: syz [ 671.437942][ T6709] usb 1-1: Manufacturer: syz [ 671.437957][ T6709] usb 1-1: SerialNumber: syz [ 671.500244][ T6709] usb 1-1: config 0 descriptor?? [ 671.520166][ T6001] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 671.530150][ T5947] usb 6-1: device descriptor read/64, error -71 [ 671.653263][ T6709] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 671.672722][ T6001] usb 7-1: unable to get BOS descriptor or descriptor too short [ 671.689450][ T6001] usb 7-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 671.704276][ T6001] usb 7-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 671.704311][ T6001] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.704334][ T6001] usb 7-1: Product: syz [ 671.704349][ T6001] usb 7-1: Manufacturer: syz [ 671.704366][ T6001] usb 7-1: SerialNumber: syz [ 671.751091][ T6099] usb 1-1: USB disconnect, device number 37 [ 671.770167][ T5947] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 671.810097][ T6709] usb 9-1: Using ep0 maxpacket: 32 [ 671.814716][ T6709] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 671.814747][ T6709] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 671.814794][ T6709] usb 9-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 671.814820][ T6709] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.901689][ T5947] usb 6-1: device descriptor read/64, error -71 [ 671.903365][ T6709] usb 9-1: config 0 descriptor?? [ 672.010807][ T5947] usb usb6-port1: attempt power cycle [ 672.350472][ T5947] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 672.370917][ T5947] usb 6-1: device descriptor read/8, error -71 [ 672.610182][ T5947] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 672.630922][ T5947] usb 6-1: device descriptor read/8, error -71 [ 672.744433][ T5947] usb usb6-port1: unable to enumerate USB device [ 672.845950][ T6001] usb 7-1: USB disconnect, device number 5 [ 673.152010][ T9860] netlink: 12 bytes leftover after parsing attributes in process `syz.0.918'. [ 673.710527][ T6709] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 673.860114][ T6709] usb 1-1: Using ep0 maxpacket: 32 [ 673.862696][ T6709] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 673.862727][ T6709] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 673.862748][ T6709] usb 1-1: config 0 has no interface number 0 [ 673.876110][ T6709] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 673.876150][ T6709] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.876172][ T6709] usb 1-1: Product: syz [ 673.876195][ T6709] usb 1-1: Manufacturer: syz [ 673.876230][ T6709] usb 1-1: SerialNumber: syz [ 673.952906][ T6709] usb 1-1: config 0 descriptor?? [ 674.250416][ T9884] netlink: 20 bytes leftover after parsing attributes in process `syz.7.923'. [ 674.375802][ T9889] fuse: Unknown parameter 'fd0x0000000000000003' [ 674.439379][ T9] usb 9-1: USB disconnect, device number 13 [ 674.764519][ T9903] netlink: 12 bytes leftover after parsing attributes in process `syz.5.929'. [ 674.940496][ T9913] netlink: 8 bytes leftover after parsing attributes in process `syz.8.931'. [ 674.940534][ T9913] netlink: 8 bytes leftover after parsing attributes in process `syz.8.931'. [ 674.940597][ T9913] netlink: 8 bytes leftover after parsing attributes in process `syz.8.931'. [ 675.412554][ T5947] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 675.490125][ T31] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 675.570264][ T5947] usb 9-1: Using ep0 maxpacket: 32 [ 675.573050][ T5947] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 675.573085][ T5947] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 675.573108][ T5947] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 675.573135][ T5947] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 36, changing to 9 [ 675.573163][ T5947] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 1025, setting to 1024 [ 675.575959][ T5947] usb 9-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 675.575988][ T5947] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.576010][ T5947] usb 9-1: Product: syz [ 675.576024][ T5947] usb 9-1: Manufacturer: syz [ 675.576040][ T5947] usb 9-1: SerialNumber: syz [ 675.584670][ T5947] usb 9-1: config 0 descriptor?? [ 675.624442][ T31] usb 8-1: device descriptor read/64, error -71 [ 675.688750][ T9916] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 675.735542][ T9927] netlink: 20 bytes leftover after parsing attributes in process `syz.5.936'. [ 675.772068][ T5947] input: Generic X-Box pad as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input13 [ 675.838726][ T5150] xpad 9-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 675.870462][ T31] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 675.990310][ T5947] usb 9-1: USB disconnect, device number 14 [ 676.020167][ T31] usb 8-1: device descriptor read/64, error -71 [ 676.131704][ T31] usb usb8-port1: attempt power cycle [ 676.310187][ T805] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 676.447144][ T9] usb 1-1: USB disconnect, device number 38 [ 676.480768][ T805] usb 6-1: Using ep0 maxpacket: 32 [ 676.490461][ T31] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 676.514642][ T31] usb 8-1: device descriptor read/8, error -71 [ 676.554874][ T805] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 676.554904][ T805] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 676.554943][ T805] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 676.554969][ T805] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.611731][ T805] usb 6-1: config 0 descriptor?? [ 676.796108][ T31] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 676.810782][ T9949] netlink: 12 bytes leftover after parsing attributes in process `syz.8.942'. [ 676.812128][ T31] usb 8-1: device descriptor read/8, error -71 [ 676.920613][ T31] usb usb8-port1: unable to enumerate USB device [ 676.964958][ T9954] netlink: 8 bytes leftover after parsing attributes in process `syz.8.943'. [ 676.964987][ T9954] netlink: 8 bytes leftover after parsing attributes in process `syz.8.943'. [ 676.965030][ T9954] netlink: 8 bytes leftover after parsing attributes in process `syz.8.943'. [ 677.000210][ T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 677.150252][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 677.169155][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 677.169204][ T9] usb 7-1: New USB device found, idVendor=05ac, idProduct=026c, bcdDevice= 0.00 [ 677.169229][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.198016][ T9] usb 7-1: config 0 descriptor?? [ 677.830981][ T9] usbhid 7-1:0.0: can't add hid device: -71 [ 677.831120][ T9] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 677.875185][ T9] usb 7-1: USB disconnect, device number 6 [ 678.381257][ T9989] netlink: 8 bytes leftover after parsing attributes in process `syz.7.954'. [ 678.381285][ T9989] netlink: 8 bytes leftover after parsing attributes in process `syz.7.954'. [ 679.086906][ T6093] usb 6-1: USB disconnect, device number 6 [ 679.490203][ T9] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 679.540506][ T6093] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 679.647383][ T9] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 679.647416][ T9] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 679.647439][ T9] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 679.647454][ T9] usb 1-1: config 220 has no interface number 2 [ 679.647509][ T9] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 679.647530][ T9] usb 1-1: config 220 interface 0 has no altsetting 0 [ 679.647543][ T9] usb 1-1: config 220 interface 76 has no altsetting 0 [ 679.647556][ T9] usb 1-1: config 220 interface 1 has no altsetting 0 [ 679.649905][ T9] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 679.649934][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.649949][ T9] usb 1-1: Product: syz [ 679.649959][ T9] usb 1-1: Manufacturer: syz [ 679.649970][ T9] usb 1-1: SerialNumber: syz [ 679.693640][ T6093] usb 6-1: Using ep0 maxpacket: 16 [ 679.759359][ T6093] usb 6-1: config 0 has no interfaces? [ 679.778621][ T6093] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 679.778654][ T6093] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.778669][ T6093] usb 6-1: Product: syz [ 679.778679][ T6093] usb 6-1: Manufacturer: syz [ 679.778690][ T6093] usb 6-1: SerialNumber: syz [ 679.872467][ T6093] usb 6-1: config 0 descriptor?? [ 680.122482][ T9] usb 1-1: selecting invalid altsetting 0 [ 680.176241][ T9] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 680.176285][ T9] uvcvideo 1-1:220.0: No valid video chain found. [ 680.257396][ T9] usb 1-1: selecting invalid altsetting 0 [ 680.257442][ T9] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 680.282846][ T9] usb 1-1: USB disconnect, device number 39 [ 680.838052][T10068] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 680.970127][ T31] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 681.120128][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 681.126865][ T31] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 681.126898][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.126919][ T31] usb 1-1: Product: syz [ 681.126935][ T31] usb 1-1: Manufacturer: syz [ 681.126949][ T31] usb 1-1: SerialNumber: syz [ 681.203663][ T31] r8152-cfgselector 1-1: Unknown version 0x0000 [ 681.203692][ T31] r8152-cfgselector 1-1: config 0 descriptor?? [ 681.997465][T10107] mmap: syz.6.983 (10107) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 682.057805][ T31] r8152-cfgselector 1-1: Unknown version 0x0000 [ 682.075492][ T31] r8152-cfgselector 1-1: bad CDC descriptors [ 682.124795][ T31] r8152-cfgselector 1-1: USB disconnect, device number 40 [ 682.303081][ T6001] usb 6-1: USB disconnect, device number 7 [ 683.330137][ T6024] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 683.480189][ T6024] usb 9-1: Using ep0 maxpacket: 32 [ 683.503070][ T6024] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 683.503107][ T6024] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 683.503149][ T6024] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 683.503180][ T6024] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.674496][ T6024] usb 9-1: config 0 descriptor?? [ 684.129507][ T6024] savu 0003:1E7D:2D5A.000D: unknown main item tag 0x0 [ 684.129546][ T6024] savu 0003:1E7D:2D5A.000D: unknown main item tag 0x0 [ 684.129574][ T6024] savu 0003:1E7D:2D5A.000D: unknown main item tag 0x0 [ 684.129602][ T6024] savu 0003:1E7D:2D5A.000D: unknown main item tag 0x0 [ 684.129630][ T6024] savu 0003:1E7D:2D5A.000D: unknown main item tag 0x0 [ 684.129657][ T6024] savu 0003:1E7D:2D5A.000D: unknown main item tag 0x0 [ 684.129685][ T6024] savu 0003:1E7D:2D5A.000D: unknown main item tag 0x0 [ 684.129713][ T6024] savu 0003:1E7D:2D5A.000D: unknown main item tag 0x0 [ 684.185267][ T6024] savu 0003:1E7D:2D5A.000D: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.8-1/input0 [ 684.360199][ T9] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 684.378420][ T6024] usb 9-1: USB disconnect, device number 15 [ 684.520395][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 684.520723][T10179] fido_id[10179]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 684.527364][ T9] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 684.527412][ T9] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 684.527438][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.584407][ T9] usb 1-1: config 0 descriptor?? [ 684.718788][T10186] fuse: Unknown parameter 'user_i00000000000000000000' [ 686.246619][T10231] fuse: Unknown parameter 'user_id00000000000000000000' [ 686.780231][ T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 686.810447][ T31] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 686.933770][ T9] usb 6-1: config 0 has no interfaces? [ 686.943722][ T9] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 686.943816][ T9] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 686.943872][ T9] usb 6-1: Product: syz [ 686.943915][ T9] usb 6-1: Manufacturer: syz [ 686.943966][ T9] usb 6-1: SerialNumber: syz [ 686.990486][ T31] usb 7-1: Using ep0 maxpacket: 8 [ 686.992626][ T9] usb 6-1: config 0 descriptor?? [ 687.013175][ T31] usb 7-1: config 0 has an invalid interface number: 96 but max is 0 [ 687.013205][ T31] usb 7-1: config 0 has no interface number 0 [ 687.013255][ T31] usb 7-1: config 0 interface 96 altsetting 3 endpoint 0x88 has an invalid bInterval 254, changing to 11 [ 687.013284][ T31] usb 7-1: config 0 interface 96 has no altsetting 0 [ 687.061353][ T31] usb 7-1: New USB device found, idVendor=0b57, idProduct=2a8d, bcdDevice=33.74 [ 687.061385][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.061407][ T31] usb 7-1: Product: syz [ 687.061422][ T31] usb 7-1: Manufacturer: syz [ 687.061437][ T31] usb 7-1: SerialNumber: syz [ 687.116168][ T31] usb 7-1: config 0 descriptor?? [ 687.164182][ T9] usb 1-1: USB disconnect, device number 41 [ 687.233827][ T6001] usb 6-1: USB disconnect, device number 8 [ 687.571632][ T6709] usb 7-1: USB disconnect, device number 7 [ 687.760291][ T6001] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 687.925499][ T6001] usb 9-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 687.925531][ T6001] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.925552][ T6001] usb 9-1: Product: syz [ 687.925664][ T6001] usb 9-1: Manufacturer: syz [ 687.925681][ T6001] usb 9-1: SerialNumber: syz [ 687.969568][ T6001] usb 9-1: config 0 descriptor?? [ 688.132284][ T5908] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 688.260166][ T5908] usb 6-1: device descriptor read/64, error -71 [ 688.500124][ T5908] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 688.630243][ T5908] usb 6-1: device descriptor read/64, error -71 [ 688.740843][ T5908] usb usb6-port1: attempt power cycle [ 688.758265][ T6709] usb 9-1: USB disconnect, device number 16 [ 689.087780][ T5908] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 689.100905][ T5908] usb 6-1: device descriptor read/8, error -71 [ 689.260117][ T31] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 689.370148][ T5908] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 689.396226][ T5908] usb 6-1: device descriptor read/8, error -71 [ 689.420135][ T31] usb 9-1: Using ep0 maxpacket: 32 [ 689.422749][ T31] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 689.422796][ T31] usb 9-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 689.422821][ T31] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.469262][ T31] usb 9-1: config 0 descriptor?? [ 689.500815][ T5908] usb usb6-port1: unable to enumerate USB device [ 689.626597][T10308] can0: slcan on ttyS3. [ 690.020266][ T6001] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 690.101773][T10317] can0 (unregistered): slcan off ttyS3. [ 690.207590][ T6001] usb 7-1: config 0 has no interfaces? [ 690.211234][ T6001] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 690.211317][ T6001] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 690.211371][ T6001] usb 7-1: Product: syz [ 690.211411][ T6001] usb 7-1: Manufacturer: syz [ 690.211453][ T6001] usb 7-1: SerialNumber: syz [ 690.275449][ T6001] usb 7-1: config 0 descriptor?? [ 690.506426][ T6001] usb 7-1: USB disconnect, device number 8 [ 691.244585][ T31] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 691.404120][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.404187][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.428171][ T31] usb 8-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 691.428206][ T31] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.428226][ T31] usb 8-1: Product: syz [ 691.428241][ T31] usb 8-1: Manufacturer: syz [ 691.428258][ T31] usb 8-1: SerialNumber: syz [ 691.466366][ T31] usb 8-1: config 0 descriptor?? [ 692.026190][ T31] usb 9-1: USB disconnect, device number 17 [ 692.217434][ T6709] usb 8-1: USB disconnect, device number 8 [ 693.190232][ T31] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 693.204769][ T5908] kernel write not supported for file bpf-prog (pid: 5908 comm: kworker/0:6) [ 693.350155][ T31] usb 7-1: Using ep0 maxpacket: 8 [ 693.352827][ T31] usb 7-1: config 0 has an invalid interface number: 96 but max is 0 [ 693.352856][ T31] usb 7-1: config 0 has no interface number 0 [ 693.352904][ T31] usb 7-1: config 0 interface 96 altsetting 3 endpoint 0x88 has an invalid bInterval 254, changing to 11 [ 693.352935][ T31] usb 7-1: config 0 interface 96 has no altsetting 0 [ 693.355937][ T31] usb 7-1: New USB device found, idVendor=0b57, idProduct=2a8d, bcdDevice=33.74 [ 693.355968][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.355990][ T31] usb 7-1: Product: syz [ 693.356004][ T31] usb 7-1: Manufacturer: syz [ 693.356020][ T31] usb 7-1: SerialNumber: syz [ 693.448107][T10423] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 693.460622][ T31] usb 7-1: config 0 descriptor?? [ 693.480133][ T5814] Bluetooth: hci5: command 0x0406 tx timeout [ 693.560153][ T5908] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 693.720227][ T5908] usb 6-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 693.720260][ T5908] usb 6-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 693.720289][ T5908] usb 6-1: config 0 interface 0 has no altsetting 0 [ 693.720325][ T5908] usb 6-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 693.720359][ T5908] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.759773][ T5908] usb 6-1: config 0 descriptor?? [ 693.904910][ T31] usb 7-1: USB disconnect, device number 9 [ 694.301447][ T5908] hid-led 0003:0FC5:B080.000E: item fetching failed at offset 3/5 [ 694.302356][ T5908] hid-led 0003:0FC5:B080.000E: probe with driver hid-led failed with error -22 [ 694.427006][T10449] netlink: 'syz.8.1081': attribute type 10 has an invalid length. [ 694.427024][T10449] __nla_validate_parse: 1 callbacks suppressed [ 694.427033][T10449] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1081'. [ 694.630594][T10449] team0: Failed to send options change via netlink (err -105) [ 694.630624][T10449] team0: Port device geneve0 added [ 694.885123][T10464] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1086'. [ 694.885149][T10464] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1086'. [ 694.887316][T10464] netlink: 'syz.8.1086': attribute type 12 has an invalid length. [ 694.999290][ T512] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 694.999460][T10464] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1086'. [ 694.999480][T10464] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1086'. [ 694.999507][T10464] netlink: 'syz.8.1086': attribute type 12 has an invalid length. [ 694.999665][ T512] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 695.076405][ T512] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 695.076830][ T512] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 695.200917][T10471] overlayfs: failed to resolve './bus': -2 [ 695.497172][T10481] loop6: detected capacity change from 0 to 7 [ 695.518231][T10481] Dev loop6: unable to read RDB block 7 [ 695.518281][T10481] loop6: unable to read partition table [ 695.518492][T10481] loop6: partition table beyond EOD, truncated [ 695.518533][T10481] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 695.891478][T10493] netlink: 'syz.8.1096': attribute type 10 has an invalid length. [ 695.891502][T10493] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1096'. [ 696.268542][ T6024] usb 6-1: USB disconnect, device number 13 [ 696.416713][T10512] autofs: Unknown parameter '00000000000000000000' [ 696.896753][T10531] netlink: 'syz.5.1108': attribute type 10 has an invalid length. [ 696.896777][T10531] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1108'. [ 697.075646][T10531] team0: Failed to send options change via netlink (err -105) [ 697.075676][T10531] team0: Port device geneve0 added [ 697.119305][T10539] netlink: 'syz.6.1109': attribute type 4 has an invalid length. [ 697.176974][T10536] tipc: Started in network mode [ 697.177007][T10536] tipc: Node identity a6bd3f2a1648, cluster identity 4711 [ 697.177194][T10536] tipc: Enabled bearer , priority 0 [ 697.178236][T10536] syzkaller0: entered promiscuous mode [ 697.178260][T10536] syzkaller0: entered allmulticast mode [ 697.416888][T10543] tipc: Resetting bearer [ 697.530953][T10533] tipc: Resetting bearer [ 697.568106][T10550] autofs: Unknown parameter '00000000000000000000' [ 697.723875][T10533] tipc: Disabling bearer [ 697.851352][T10557] can0: slcan on ttyS3. [ 698.042402][T10559] can0 (unregistered): slcan off ttyS3. [ 698.335852][T10574] netlink: 'syz.7.1122': attribute type 4 has an invalid length. [ 698.563139][ T6093] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 698.710216][ T6093] usb 9-1: Using ep0 maxpacket: 32 [ 698.722056][ T6093] usb 9-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 698.722164][ T6093] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 698.748030][ T6093] usb 9-1: config 0 descriptor?? [ 698.793171][ T6093] gspca_main: sunplus-2.14.0 probing 041e:400b [ 699.357067][ T6093] gspca_sunplus: reg_r err -32 [ 699.357187][ T6093] sunplus 9-1:0.0: probe with driver sunplus failed with error -32 [ 699.411972][ T6093] usb 9-1: USB disconnect, device number 18 [ 699.457315][T10601] fuse: Unknown parameter '0x0000000000000004' [ 699.518197][T10599] can0: slcan on ttyS3. [ 699.701303][T10610] netlink: 'syz.5.1135': attribute type 4 has an invalid length. [ 699.840315][T10599] can0 (unregistered): slcan off ttyS3. [ 700.240313][ T6093] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 700.316023][T10625] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 700.392383][ T6093] usb 1-1: Using ep0 maxpacket: 8 [ 700.394659][ T6093] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 700.394720][ T6093] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 700.394745][ T6093] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.647286][T10634] fuse: Unknown parameter '0x0000000000000004' [ 701.726429][T10668] netlink: 'syz.6.1156': attribute type 10 has an invalid length. [ 701.726453][T10668] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1156'. [ 701.800293][T10671] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1156'. [ 701.842127][T10675] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1158'. [ 702.259610][T10688] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 703.008614][ T6001] usb 1-1: USB disconnect, device number 42 [ 703.024006][T10712] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1170'. [ 703.239027][T10718] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 703.253012][T10720] netlink: 'syz.0.1171': attribute type 10 has an invalid length. [ 703.253037][T10720] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1171'. [ 703.291838][T10720] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1171'. [ 704.190920][ T6024] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 704.240532][T10761] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1184'. [ 704.354460][ T6024] usb 8-1: Using ep0 maxpacket: 8 [ 704.356836][ T6024] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 704.356896][ T6024] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 704.356921][ T6024] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.456228][T10765] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 705.563591][T10809] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1199'. [ 706.273296][ T6709] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 706.430360][ T6709] usb 7-1: Using ep0 maxpacket: 32 [ 706.437837][ T6709] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 706.437867][ T6709] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 706.437901][ T6709] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 706.437921][ T6709] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.491958][ T6709] usb 7-1: config 0 descriptor?? [ 706.991359][ T6709] savu 0003:1E7D:2D5A.000F: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.6-1/input0 [ 707.042169][ T31] usb 8-1: USB disconnect, device number 9 [ 707.245737][ T6001] usb 7-1: USB disconnect, device number 10 [ 707.413888][T10862] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1210'. [ 707.542659][T10852] fido_id[10852]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 708.539402][T10896] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1222'. [ 708.603012][ T6093] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 708.760196][ T6093] usb 7-1: Using ep0 maxpacket: 8 [ 708.764926][ T6093] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 708.764976][ T6093] usb 7-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 708.765017][ T6093] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 708.765039][ T6093] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.840348][ T6093] usbtmc 7-1:16.0: bulk endpoints not found [ 709.260189][ T50] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 709.416428][ T50] usb 1-1: config 0 interface 0 altsetting 10 endpoint 0x81 has invalid wMaxPacketSize 0 [ 709.416463][ T50] usb 1-1: config 0 interface 0 has no altsetting 0 [ 709.416497][ T50] usb 1-1: New USB device found, idVendor=056a, idProduct=0335, bcdDevice= 0.00 [ 709.416522][ T50] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.474568][ T50] usb 1-1: config 0 descriptor?? [ 709.911586][ T50] usbhid 1-1:0.0: can't add hid device: -71 [ 709.911722][ T50] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 709.937879][ T50] usb 1-1: USB disconnect, device number 43 [ 710.236212][ T5814] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 710.239700][ T5814] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 710.261593][ T5814] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 710.312652][ T5814] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 710.319744][ T5814] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 710.343774][ T12] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 710.343812][ T12] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.571626][T10943] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1234'. [ 710.822000][ T5815] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 710.822059][ T5815] CPU: 0 UID: 0 PID: 5815 Comm: kworker/u9:6 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 710.822086][ T5815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 710.822101][ T5815] Workqueue: hci4 hci_rx_work [ 710.822134][ T5815] Call Trace: [ 710.822146][ T5815] [ 710.822157][ T5815] dump_stack_lvl+0xe8/0x150 [ 710.822195][ T5815] sysfs_create_dir_ns+0x259/0x280 [ 710.822230][ T5815] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 710.822266][ T5815] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 710.822305][ T5815] ? rt_spin_unlock+0x161/0x200 [ 710.822346][ T5815] kobject_add_internal+0x6b1/0xcd0 [ 710.822381][ T5815] kobject_add+0x155/0x220 [ 710.822412][ T5815] ? __pfx_kobject_add+0x10/0x10 [ 710.822446][ T5815] ? get_device_parent+0x370/0x3a0 [ 710.822476][ T5815] device_add+0x408/0xb80 [ 710.822504][ T5815] hci_conn_add_sysfs+0xd5/0x210 [ 710.822544][ T5815] le_conn_complete_evt+0xf1d/0x1420 [ 710.822584][ T5815] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 710.822614][ T5815] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 710.822638][ T5815] ? lockdep_hardirqs_on+0x7b/0x110 [ 710.822663][ T5815] ? skb_pull_data+0xfb/0x200 [ 710.822701][ T5815] hci_le_conn_complete_evt+0x187/0x480 [ 710.822737][ T5815] hci_event_packet+0x78f/0x1260 [ 710.822779][ T5815] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 710.822810][ T5815] ? __pfx_hci_event_packet+0x10/0x10 [ 710.822848][ T5815] ? rt_spin_unlock+0x150/0x200 [ 710.822893][ T5815] ? hci_send_to_monitor+0xe2/0x590 [ 710.822928][ T5815] hci_rx_work+0x3ee/0x1060 [ 710.822960][ T5815] ? process_scheduled_works+0x9ef/0x1770 [ 710.822992][ T5815] process_scheduled_works+0xad1/0x1770 [ 710.823051][ T5815] ? __pfx_process_scheduled_works+0x10/0x10 [ 710.823077][ T5815] ? do_raw_spin_lock+0x121/0x290 [ 710.823122][ T5815] worker_thread+0x8a0/0xda0 [ 710.823181][ T5815] kthread+0x711/0x8a0 [ 710.823220][ T5815] ? __pfx_worker_thread+0x10/0x10 [ 710.823248][ T5815] ? __pfx_kthread+0x10/0x10 [ 710.823279][ T5815] ? rt_spin_unlock+0x150/0x200 [ 710.823324][ T5815] ? rt_spin_unlock+0x161/0x200 [ 710.823356][ T5815] ? __pfx_kthread+0x10/0x10 [ 710.823392][ T5815] ret_from_fork+0x510/0xa50 [ 710.823422][ T5815] ? __pfx_ret_from_fork+0x10/0x10 [ 710.823447][ T5815] ? __switch_to+0xc9e/0x1480 [ 710.823489][ T5815] ? __pfx_kthread+0x10/0x10 [ 710.823527][ T5815] ret_from_fork_asm+0x1a/0x30 [ 710.823584][ T5815] [ 710.823620][ T5815] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 710.823663][ T5815] Bluetooth: hci4: failed to register connection device [ 711.362754][ T6093] usb 7-1: USB disconnect, device number 11 [ 711.429048][ T12] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 711.429088][ T12] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.860277][ T6093] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 711.930355][ T12] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 711.930394][ T12] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.010137][ T6093] usb 8-1: Using ep0 maxpacket: 8 [ 712.015851][ T6093] usb 8-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 712.015884][ T6093] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.015906][ T6093] usb 8-1: Product: syz [ 712.015922][ T6093] usb 8-1: Manufacturer: syz [ 712.015938][ T6093] usb 8-1: SerialNumber: syz [ 712.067752][ T6093] usb 8-1: config 0 descriptor?? [ 712.082208][ T6093] gspca_main: sq905-2.14.0 probing 2770:9120 [ 712.350451][ T5815] Bluetooth: hci3: command tx timeout [ 712.386653][T10978] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1244'. [ 712.477807][ T6093] gspca_sq905: sq905_command: usb_control_msg failed 2 (-32) [ 712.477905][ T6093] sq905 8-1:0.0: probe with driver sq905 failed with error -32 [ 712.658902][ T12] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 712.658931][ T12] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.210288][ T6024] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 713.308009][T10935] chnl_net:caif_netlink_parms(): no params data found [ 713.397283][ T6024] usb 6-1: config 0 has no interfaces? [ 713.416648][ T6024] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 713.416681][ T6024] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 713.416707][ T6024] usb 6-1: Product: syz [ 713.416718][ T6024] usb 6-1: Manufacturer: syz [ 713.416728][ T6024] usb 6-1: SerialNumber: syz [ 713.486498][ T6024] usb 6-1: config 0 descriptor?? [ 713.800131][ T5947] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 713.824957][ T12] bridge_slave_1: left allmulticast mode [ 713.824988][ T12] bridge_slave_1: left promiscuous mode [ 713.844089][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.844612][ T31] usb 6-1: USB disconnect, device number 14 [ 713.935166][ T12] bridge_slave_0: left allmulticast mode [ 713.935190][ T12] bridge_slave_0: left promiscuous mode [ 713.935426][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.958794][ T5947] usb 7-1: Using ep0 maxpacket: 32 [ 713.966471][ T5947] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 713.966512][ T5947] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 713.966540][ T5947] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 713.966557][ T5947] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.013208][ T5947] usb 7-1: config 0 descriptor?? [ 714.435574][ T5815] Bluetooth: hci3: command tx timeout [ 714.543654][ T5947] savu 0003:1E7D:2D5A.0010: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.6-1/input0 [ 714.715719][ T5947] usb 7-1: USB disconnect, device number 12 [ 714.765946][ T50] usb 8-1: USB disconnect, device number 10 [ 714.895049][T11017] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1255'. [ 714.911496][T11010] fido_id[11010]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 715.408431][T11025] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1258'. [ 716.006793][ T12] team0: Port device geneve0 removed [ 716.541849][ T5814] Bluetooth: hci3: command tx timeout [ 716.855654][ T6093] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 717.038136][ T6093] usb 6-1: config 0 has no interfaces? [ 717.060910][ T6093] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 717.060941][ T6093] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 717.060963][ T6093] usb 6-1: Product: syz [ 717.060980][ T6093] usb 6-1: Manufacturer: syz [ 717.060995][ T6093] usb 6-1: SerialNumber: syz [ 717.066237][ T6093] usb 6-1: config 0 descriptor?? [ 717.220818][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 717.280920][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 717.320319][ T5815] Bluetooth: hci4: command 0x0406 tx timeout [ 717.323522][ T12] bond0 (unregistering): Released all slaves [ 717.408689][ T50] usb 6-1: USB disconnect, device number 15 [ 717.681657][T10935] bridge0: port 1(bridge_slave_0) entered blocking state [ 717.689180][T10935] bridge0: port 1(bridge_slave_0) entered disabled state [ 717.689434][T10935] bridge_slave_0: entered allmulticast mode [ 717.695079][T10935] bridge_slave_0: entered promiscuous mode [ 717.697261][T11044] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1265'. [ 717.749173][T10935] bridge0: port 2(bridge_slave_1) entered blocking state [ 717.749404][T10935] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.749673][T10935] bridge_slave_1: entered allmulticast mode [ 717.776691][T10935] bridge_slave_1: entered promiscuous mode [ 717.900505][ T6709] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 718.050295][ T6709] usb 1-1: Using ep0 maxpacket: 8 [ 718.057446][ T6709] usb 1-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 718.057478][ T6709] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.057500][ T6709] usb 1-1: Product: syz [ 718.057516][ T6709] usb 1-1: Manufacturer: syz [ 718.057532][ T6709] usb 1-1: SerialNumber: syz [ 718.080104][ T5947] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 718.120729][ T6709] usb 1-1: config 0 descriptor?? [ 718.126693][ T6709] gspca_main: sq905-2.14.0 probing 2770:9120 [ 718.227649][T10935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 718.270745][ T5947] usb 7-1: Using ep0 maxpacket: 32 [ 718.275086][ T5947] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 718.275179][ T5947] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 718.275221][ T5947] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 718.275245][ T5947] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.307317][T10935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 718.337274][ T5947] usb 7-1: config 0 descriptor?? [ 718.583787][ T6709] gspca_sq905: sq905_command: usb_control_msg failed 2 (-32) [ 718.583954][ T6709] sq905 1-1:0.0: probe with driver sq905 failed with error -32 [ 718.590171][ T61] Bluetooth: hci3: command tx timeout [ 718.808942][ T5947] savu 0003:1E7D:2D5A.0011: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.6-1/input0 [ 718.907770][T10935] team0: Port device team_slave_0 added [ 718.931970][T10935] team0: Port device team_slave_1 added [ 718.985940][T11066] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1272'. [ 719.022858][ T6441] usb 7-1: USB disconnect, device number 13 [ 719.070190][ T61] Bluetooth: hci2: command 0x0406 tx timeout [ 719.415379][T10935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 719.415399][T10935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 719.415429][T10935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 719.454240][T10935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 719.454259][T10935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 719.454304][T10935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 719.787486][T11083] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1276'. [ 720.170292][ T6441] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 720.322180][ T6441] usb 7-1: config 0 has no interfaces? [ 720.327747][ T6441] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 720.327780][ T6441] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 720.327802][ T6441] usb 7-1: Product: syz [ 720.327818][ T6441] usb 7-1: Manufacturer: syz [ 720.327833][ T6441] usb 7-1: SerialNumber: syz [ 720.376080][ T6441] usb 7-1: config 0 descriptor?? [ 720.593228][T11100] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1284'. [ 720.595107][T10935] hsr_slave_0: entered promiscuous mode [ 720.597626][T10935] hsr_slave_1: entered promiscuous mode [ 720.598767][T10935] debugfs: 'hsr0' already exists in 'hsr' [ 720.598793][T10935] Cannot create hsr debugfs directory [ 720.745013][ T5908] usb 1-1: USB disconnect, device number 44 [ 720.936786][ T6144] usb 7-1: USB disconnect, device number 14 [ 721.040250][ T6099] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 721.191220][ T6099] usb 8-1: Using ep0 maxpacket: 32 [ 721.193806][ T6099] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 721.193841][ T6099] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 721.193880][ T6099] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 721.193905][ T6099] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.270335][ T6099] usb 8-1: config 0 descriptor?? [ 721.732670][ T6099] savu 0003:1E7D:2D5A.0012: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.7-1/input0 [ 721.990583][ T6144] usb 8-1: USB disconnect, device number 11 [ 722.023561][T11122] loop6: detected capacity change from 0 to 7 [ 722.076693][T11122] Dev loop6: unable to read RDB block 7 [ 722.076753][T11122] loop6: unable to read partition table [ 722.076981][T11122] loop6: partition table beyond EOD, truncated [ 722.077000][T11122] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 722.138590][T11120] fido_id[11120]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 722.491324][T11130] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1296'. [ 722.650272][ T9] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 722.719273][ T12] hsr_slave_0: left promiscuous mode [ 722.760169][ T12] hsr_slave_1: left promiscuous mode [ 722.764122][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 722.764152][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 722.800174][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 722.806160][ T9] usb 7-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 722.806193][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.806214][ T9] usb 7-1: Product: syz [ 722.806230][ T9] usb 7-1: Manufacturer: syz [ 722.806247][ T9] usb 7-1: SerialNumber: syz [ 722.853427][ T9] usb 7-1: config 0 descriptor?? [ 722.854907][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 722.854936][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 722.905048][ T9] gspca_main: sq905-2.14.0 probing 2770:9120 [ 722.994226][ T6144] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 723.022923][ T12] veth1_macvtap: left promiscuous mode [ 723.023049][ T12] veth0_macvtap: left promiscuous mode [ 723.026835][ T12] veth1_vlan: left promiscuous mode [ 723.027030][ T12] veth0_vlan: left promiscuous mode [ 723.144253][ T6144] usb 1-1: config 0 has no interfaces? [ 723.148061][ T6144] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 723.148094][ T6144] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 723.148115][ T6144] usb 1-1: Product: syz [ 723.148130][ T6144] usb 1-1: Manufacturer: syz [ 723.148144][ T6144] usb 1-1: SerialNumber: syz [ 723.171877][ T6144] usb 1-1: config 0 descriptor?? [ 723.264575][ T9] gspca_sq905: sq905_command: usb_control_msg failed 2 (-32) [ 723.264673][ T9] sq905 7-1:0.0: probe with driver sq905 failed with error -32 [ 723.529156][ T5947] usb 1-1: USB disconnect, device number 45 [ 725.424530][ T6144] usb 7-1: USB disconnect, device number 15 [ 725.444254][T11153] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 725.922167][T11162] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 726.780381][ T5908] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 726.950538][ T5908] usb 7-1: config 0 has no interfaces? [ 726.961721][ T5908] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 726.961813][ T5908] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 726.961875][ T5908] usb 7-1: Product: syz [ 726.961917][ T5908] usb 7-1: Manufacturer: syz [ 726.961959][ T5908] usb 7-1: SerialNumber: syz [ 726.983879][ T5908] usb 7-1: config 0 descriptor?? [ 727.222532][ T12] team0 (unregistering): Port device team_slave_1 removed [ 727.367489][ T5947] usb 7-1: USB disconnect, device number 16 [ 727.420221][ T5908] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 727.510777][ T12] team0 (unregistering): Port device team_slave_0 removed [ 727.570213][ T5908] usb 1-1: Using ep0 maxpacket: 8 [ 727.575025][ T5908] usb 1-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 727.575054][ T5908] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.575068][ T5908] usb 1-1: Product: syz [ 727.575079][ T5908] usb 1-1: Manufacturer: syz [ 727.575090][ T5908] usb 1-1: SerialNumber: syz [ 727.579204][ T5908] usb 1-1: config 0 descriptor?? [ 727.647355][ T5908] gspca_main: sq905-2.14.0 probing 2770:9120 [ 728.093817][ T5908] gspca_sq905: sq905_command: usb_control_msg failed 2 (-32) [ 728.093922][ T5908] sq905 1-1:0.0: probe with driver sq905 failed with error -32 [ 729.330937][ T5814] Bluetooth: hci0: command 0x0406 tx timeout [ 730.025536][T11194] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1319'. [ 730.259372][ T9] usb 1-1: USB disconnect, device number 46 [ 730.877785][T11199] tipc: Enabled bearer , priority 0 [ 730.878266][T11200] syzkaller0: entered promiscuous mode [ 730.878292][T11200] syzkaller0: entered allmulticast mode [ 730.960996][ T512] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 731.024874][ T512] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 731.077066][T11196] tipc: Resetting bearer [ 731.215824][T11196] tipc: Disabling bearer [ 731.362124][T11221] overlayfs: missing 'lowerdir' [ 731.367625][ T512] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 731.367714][ T512] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 731.371308][ T6709] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 731.572005][ T6709] usb 7-1: config 0 has no interfaces? [ 731.577883][ T6709] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 731.577916][ T6709] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 731.577940][ T6709] usb 7-1: Product: syz [ 731.577956][ T6709] usb 7-1: Manufacturer: syz [ 731.577971][ T6709] usb 7-1: SerialNumber: syz [ 731.631958][ T6709] usb 7-1: config 0 descriptor?? [ 732.313119][ T5908] usb 7-1: USB disconnect, device number 17 [ 733.266783][T11262] overlayfs: missing 'lowerdir' [ 733.372789][T10935] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 733.444625][T10935] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 733.558514][T10935] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 733.647912][T10935] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 733.710675][T11276] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1341'. [ 733.740358][ T5908] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 733.804955][T11276] 8021q: adding VLAN 0 to HW filter on device bond1 [ 733.834626][T11280] macvlan2: entered promiscuous mode [ 733.834654][T11280] macvlan2: entered allmulticast mode [ 733.836129][T11280] bond1: (slave macvlan2): Opening slave failed [ 733.890231][ T5908] usb 8-1: Using ep0 maxpacket: 16 [ 733.901171][ T5908] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 733.901200][ T5908] usb 8-1: config 1 has no interface number 1 [ 733.901252][ T5908] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 733.901283][ T5908] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 733.903955][ T5908] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 733.903988][ T5908] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.904010][ T5908] usb 8-1: Product: syz [ 733.904026][ T5908] usb 8-1: Manufacturer: syz [ 733.904042][ T5908] usb 8-1: SerialNumber: syz [ 734.060233][ T5947] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 734.223283][ T5947] usb 1-1: config 0 has no interfaces? [ 734.242079][ T5947] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 734.242112][ T5947] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 734.242134][ T5947] usb 1-1: Product: syz [ 734.242148][ T5947] usb 1-1: Manufacturer: syz [ 734.242164][ T5947] usb 1-1: SerialNumber: syz [ 734.286703][ T5947] usb 1-1: config 0 descriptor?? [ 734.351539][ T5908] usb 8-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 734.586426][ T9] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 734.720195][ T9] usb 7-1: device descriptor read/64, error -71 [ 734.760976][ T5947] usb 8-1: USB disconnect, device number 12 [ 734.794288][ T9099] udevd[9099]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 734.899435][T10935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 734.970147][ T9] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 735.027889][T10935] 8021q: adding VLAN 0 to HW filter on device team0 [ 735.070923][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 735.071072][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 735.073159][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 735.073249][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 735.121799][ T9] usb 7-1: device descriptor read/64, error -71 [ 735.162918][ T6709] usb 1-1: USB disconnect, device number 47 [ 735.230688][ T9] usb usb7-port1: attempt power cycle [ 735.260166][ T6099] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 735.396318][T11311] loop6: detected capacity change from 0 to 7 [ 735.398074][T11311] Dev loop6: unable to read RDB block 7 [ 735.398122][T11311] loop6: unable to read partition table [ 735.398343][T11311] loop6: partition table beyond EOD, truncated [ 735.398362][T11311] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 735.440295][ T6099] usb 6-1: config 0 interface 0 altsetting 10 endpoint 0x81 has invalid wMaxPacketSize 0 [ 735.440331][ T6099] usb 6-1: config 0 interface 0 has no altsetting 0 [ 735.440367][ T6099] usb 6-1: New USB device found, idVendor=056a, idProduct=0335, bcdDevice= 0.00 [ 735.440391][ T6099] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.502050][ T6099] usb 6-1: config 0 descriptor?? [ 735.580389][ T9] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 735.601036][ T9] usb 7-1: device descriptor read/8, error -71 [ 735.840178][ T9] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 735.861000][ T9] usb 7-1: device descriptor read/8, error -71 [ 735.922209][ T6099] usbhid 6-1:0.0: can't add hid device: -71 [ 735.922349][ T6099] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 735.960546][ T6099] usb 6-1: USB disconnect, device number 16 [ 735.986422][ T9] usb usb7-port1: unable to enumerate USB device [ 736.270177][ T9] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 736.325511][T10935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 736.460173][ T9] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 736.460206][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.465567][ T9] usb 1-1: config 0 descriptor?? [ 736.489490][ T9] cp210x 1-1:0.0: cp210x converter detected [ 736.898918][ T9] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 736.899438][ T9] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 736.899490][ T9] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 736.972010][ T9] usb 1-1: cp210x converter now attached to ttyUSB0 [ 737.014271][ T9] usb 1-1: USB disconnect, device number 48 [ 737.038227][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 737.039034][ T9] cp210x 1-1:0.0: device disconnected [ 737.416577][T10935] veth0_vlan: entered promiscuous mode [ 737.488785][T10935] veth1_vlan: entered promiscuous mode [ 737.672529][T10935] veth0_macvtap: entered promiscuous mode [ 737.702676][T10935] veth1_macvtap: entered promiscuous mode [ 737.820419][ T5947] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 737.864591][T10935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 737.892378][T10935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 737.930222][ T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.933422][ T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.946661][ T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.982971][ T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.002419][ T5947] usb 7-1: config 0 has no interfaces? [ 738.006075][ T5947] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 738.006106][ T5947] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 738.006127][ T5947] usb 7-1: Product: syz [ 738.006143][ T5947] usb 7-1: Manufacturer: syz [ 738.006159][ T5947] usb 7-1: SerialNumber: syz [ 738.049170][ T5947] usb 7-1: config 0 descriptor?? [ 738.060469][T11367] binder_alloc: 11360: binder_alloc_buf, no vma [ 738.743988][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 738.744012][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 738.979070][ T6709] usb 7-1: USB disconnect, device number 22 [ 739.004737][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 739.004759][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 739.970126][ T5908] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 740.124728][ T5908] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 740.124761][ T5908] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.173558][ T5908] usb 7-1: config 0 descriptor?? [ 740.179085][ T5908] cp210x 7-1:0.0: cp210x converter detected [ 740.632588][ T5908] cp210x 7-1:0.0: failed to get vendor val 0x0010 size 3: -121 [ 740.836396][ T5908] cp210x 7-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 740.836453][ T5908] cp210x 7-1:0.0: GPIO initialisation failed: -71 [ 740.841533][ T5908] usb 7-1: cp210x converter now attached to ttyUSB0 [ 740.872892][ T5908] usb 7-1: USB disconnect, device number 23 [ 740.900659][ T5908] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 740.901452][ T5908] cp210x 7-1:0.0: device disconnected [ 741.016405][T11415] netlink: 'syz.5.1371': attribute type 10 has an invalid length. [ 741.016423][T11415] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1371'. [ 741.908970][ T512] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.997852][ T5814] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 742.028656][ T5814] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 742.038472][ T5814] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 742.048567][ T5814] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 742.049508][ T5814] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 742.437714][T11441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1379'. [ 742.805596][T11441] ------------[ cut here ]------------ [ 742.805622][T11441] WARNING: net/mac80211/rate.c:53 at rate_control_rate_init+0x653/0x6e0, CPU#0: syz.0.1379/11441 [ 742.805679][T11441] Modules linked in: [ 742.805701][T11441] CPU: 0 UID: 0 PID: 11441 Comm: syz.0.1379 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 742.805727][T11441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 742.805742][T11441] RIP: 0010:rate_control_rate_init+0x653/0x6e0 [ 742.805779][T11441] Code: 02 02 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 b9 9f 78 f7 90 0f 0b 90 eb e1 e8 ae 9f 78 f7 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 87 00 00 00 [ 742.805799][T11441] RSP: 0018:ffffc9000492ef60 EFLAGS: 00010287 [ 742.805818][T11441] RAX: ffffffff8a470a42 RBX: ffff88802800c000 RCX: 0000000000080000 [ 742.805836][T11441] RDX: ffffc9000f8b6000 RSI: 0000000000000569 RDI: 000000000000056a [ 742.805851][T11441] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 742.805864][T11441] R10: dffffc0000000000 R11: ffffed1005001841 R12: 1ffff1100500180a [ 742.805881][T11441] R13: ffff888060041060 R14: 0000000000000001 R15: ffffffff8a470553 [ 742.805898][T11441] FS: 00007f4460cd56c0(0000) GS:ffff888126cef000(0000) knlGS:0000000000000000 [ 742.805918][T11441] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 742.805934][T11441] CR2: 00005555696ac808 CR3: 00000000695f0000 CR4: 00000000003526f0 [ 742.805955][T11441] Call Trace: [ 742.805965][T11441] [ 742.805984][T11441] rate_control_rate_init_all_links+0x109/0x1a0 [ 742.806030][T11441] sta_apply_auth_flags+0x1c2/0x400 [ 742.806064][T11441] sta_apply_parameters+0xe27/0x1570 [ 742.806105][T11441] ieee80211_add_station+0x424/0x6a0 [ 742.806143][T11441] rdev_add_station+0xfc/0x270 [ 742.806179][T11441] nl80211_new_station+0x1755/0x1b70 [ 742.806234][T11441] ? __pfx_nl80211_new_station+0x10/0x10 [ 742.806262][T11441] ? netdev_run_todo+0xe1b/0xea0 [ 742.806327][T11441] ? nl80211_pre_doit+0x4f1/0x930 [ 742.806360][T11441] genl_family_rcv_msg_doit+0x215/0x300 [ 742.806392][T11441] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 742.806415][T11441] ? rcu_is_watching+0x15/0xb0 [ 742.806452][T11441] ? bpf_lsm_capable+0x9/0x20 [ 742.806474][T11441] ? security_capable+0x7e/0x2e0 [ 742.806505][T11441] genl_rcv_msg+0x60e/0x790 [ 742.806535][T11441] ? __pfx_genl_rcv_msg+0x10/0x10 [ 742.806557][T11441] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 742.806578][T11441] ? __pfx_nl80211_new_station+0x10/0x10 [ 742.806605][T11441] ? __pfx_nl80211_post_doit+0x10/0x10 [ 742.806631][T11441] ? __asan_memcpy+0x40/0x70 [ 742.806661][T11441] ? __pfx_ref_tracker_free+0x10/0x10 [ 742.806692][T11441] ? __skb_clone+0x63/0x7a0 [ 742.806731][T11441] netlink_rcv_skb+0x208/0x470 [ 742.806763][T11441] ? __pfx_genl_rcv_msg+0x10/0x10 [ 742.806787][T11441] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 742.806836][T11441] ? netlink_deliver_tap+0x2e/0x1b0 [ 742.806867][T11441] ? netlink_deliver_tap+0x2e/0x1b0 [ 742.806904][T11441] genl_rcv+0x28/0x40 [ 742.806923][T11441] netlink_unicast+0x846/0xa10 [ 742.806960][T11441] ? __pfx_netlink_unicast+0x10/0x10 [ 742.806987][T11441] ? __alloc_skb+0x198/0x3a0 [ 742.807014][T11441] ? netlink_sendmsg+0x642/0xb30 [ 742.807045][T11441] ? skb_put+0x11b/0x210 [ 742.807078][T11441] netlink_sendmsg+0x805/0xb30 [ 742.807122][T11441] ? __pfx_netlink_sendmsg+0x10/0x10 [ 742.807165][T11441] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 742.807197][T11441] ? __pfx_netlink_sendmsg+0x10/0x10 [ 742.807237][T11441] __sock_sendmsg+0x21c/0x270 [ 742.807279][T11441] ____sys_sendmsg+0x508/0x810 [ 742.807317][T11441] ? __pfx_____sys_sendmsg+0x10/0x10 [ 742.807359][T11441] ? import_iovec+0x74/0xa0 [ 742.807386][T11441] ___sys_sendmsg+0x21f/0x2a0 [ 742.807420][T11441] ? __pfx____sys_sendmsg+0x10/0x10 [ 742.807459][T11441] ? futex_wait+0x285/0x360 [ 742.807516][T11441] ? __fget_files+0x2a/0x420 [ 742.807540][T11441] ? __fget_files+0x3a6/0x420 [ 742.807578][T11441] __x64_sys_sendmsg+0x1a1/0x260 [ 742.807612][T11441] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 742.807655][T11441] ? rcu_is_watching+0x15/0xb0 [ 742.807691][T11441] do_syscall_64+0xec/0xf80 [ 742.807714][T11441] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.807736][T11441] ? trace_irq_disable+0x37/0x100 [ 742.807760][T11441] ? clear_bhb_loop+0x60/0xb0 [ 742.807790][T11441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.807813][T11441] RIP: 0033:0x7f4462a8f749 [ 742.807840][T11441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 742.807860][T11441] RSP: 002b:00007f4460cd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 742.807883][T11441] RAX: ffffffffffffffda RBX: 00007f4462ce6090 RCX: 00007f4462a8f749 [ 742.807900][T11441] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000007 [ 742.807915][T11441] RBP: 00007f4462b13f91 R08: 0000000000000000 R09: 0000000000000000 [ 742.807930][T11441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 742.807945][T11441] R13: 00007f4462ce6128 R14: 00007f4462ce6090 R15: 00007ffeb05c4948 [ 742.807984][T11441] [ 742.808005][T11441] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 742.808023][T11441] CPU: 0 UID: 0 PID: 11441 Comm: syz.0.1379 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 742.808049][T11441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 742.808063][T11441] Call Trace: [ 742.808072][T11441] [ 742.808082][T11441] vpanic+0x1e0/0x670 [ 742.808120][T11441] panic+0xb9/0xc0 [ 742.808152][T11441] ? __pfx_panic+0x10/0x10 [ 742.808211][T11441] __warn+0x317/0x4b0 [ 742.808244][T11441] ? rate_control_rate_init+0x653/0x6e0 [ 742.808284][T11441] ? rate_control_rate_init+0x653/0x6e0 [ 742.808320][T11441] __report_bug+0x288/0x500 [ 742.808359][T11441] ? rate_control_rate_init+0x653/0x6e0 [ 742.808402][T11441] ? __pfx___report_bug+0x10/0x10 [ 742.808439][T11441] ? __lock_acquire+0x6b6/0x2cf0 [ 742.808475][T11441] ? __lock_acquire+0x6b6/0x2cf0 [ 742.808518][T11441] ? rate_control_rate_init+0x653/0x6e0 [ 742.808554][T11441] report_bug+0x16a/0x220 [ 742.808589][T11441] ? rate_control_rate_init+0x653/0x6e0 [ 742.808622][T11441] ? rate_control_rate_init+0x655/0x6e0 [ 742.808654][T11441] handle_bug+0x98/0x200 [ 742.808681][T11441] exc_invalid_op+0x1a/0x50 [ 742.808708][T11441] asm_exc_invalid_op+0x1a/0x20 [ 742.808729][T11441] RIP: 0010:rate_control_rate_init+0x653/0x6e0 [ 742.808764][T11441] Code: 02 02 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 b9 9f 78 f7 90 0f 0b 90 eb e1 e8 ae 9f 78 f7 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 87 00 00 00 [ 742.808784][T11441] RSP: 0018:ffffc9000492ef60 EFLAGS: 00010287 [ 742.808803][T11441] RAX: ffffffff8a470a42 RBX: ffff88802800c000 RCX: 0000000000080000 [ 742.808818][T11441] RDX: ffffc9000f8b6000 RSI: 0000000000000569 RDI: 000000000000056a [ 742.808833][T11441] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 742.808846][T11441] R10: dffffc0000000000 R11: ffffed1005001841 R12: 1ffff1100500180a [ 742.808863][T11441] R13: ffff888060041060 R14: 0000000000000001 R15: ffffffff8a470553 [ 742.808878][T11441] ? rate_control_rate_init+0x163/0x6e0 [ 742.808919][T11441] ? rate_control_rate_init+0x652/0x6e0 [ 742.808969][T11441] rate_control_rate_init_all_links+0x109/0x1a0 [ 742.809011][T11441] sta_apply_auth_flags+0x1c2/0x400 [ 742.809043][T11441] sta_apply_parameters+0xe27/0x1570 [ 742.809084][T11441] ieee80211_add_station+0x424/0x6a0 [ 742.809121][T11441] rdev_add_station+0xfc/0x270 [ 742.809155][T11441] nl80211_new_station+0x1755/0x1b70 [ 742.809210][T11441] ? __pfx_nl80211_new_station+0x10/0x10 [ 742.809237][T11441] ? netdev_run_todo+0xe1b/0xea0 [ 742.809299][T11441] ? nl80211_pre_doit+0x4f1/0x930 [ 742.809331][T11441] genl_family_rcv_msg_doit+0x215/0x300 [ 742.809362][T11441] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 742.809385][T11441] ? rcu_is_watching+0x15/0xb0 [ 742.809422][T11441] ? bpf_lsm_capable+0x9/0x20 [ 742.809444][T11441] ? security_capable+0x7e/0x2e0 [ 742.809475][T11441] genl_rcv_msg+0x60e/0x790 [ 742.809505][T11441] ? __pfx_genl_rcv_msg+0x10/0x10 [ 742.809526][T11441] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 742.809547][T11441] ? __pfx_nl80211_new_station+0x10/0x10 [ 742.809572][T11441] ? __pfx_nl80211_post_doit+0x10/0x10 [ 742.809598][T11441] ? __asan_memcpy+0x40/0x70 [ 742.809645][T11441] ? __pfx_ref_tracker_free+0x10/0x10 [ 742.809678][T11441] ? __skb_clone+0x63/0x7a0 [ 742.809715][T11441] netlink_rcv_skb+0x208/0x470 [ 742.809749][T11441] ? __pfx_genl_rcv_msg+0x10/0x10 [ 742.809773][T11441] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 742.809821][T11441] ? netlink_deliver_tap+0x2e/0x1b0 [ 742.809852][T11441] ? netlink_deliver_tap+0x2e/0x1b0 [ 742.809887][T11441] genl_rcv+0x28/0x40 [ 742.809905][T11441] netlink_unicast+0x846/0xa10 [ 742.809942][T11441] ? __pfx_netlink_unicast+0x10/0x10 [ 742.809968][T11441] ? __alloc_skb+0x198/0x3a0 [ 742.809998][T11441] ? netlink_sendmsg+0x642/0xb30 [ 742.810028][T11441] ? skb_put+0x11b/0x210 [ 742.810058][T11441] netlink_sendmsg+0x805/0xb30 [ 742.810098][T11441] ? __pfx_netlink_sendmsg+0x10/0x10 [ 742.810140][T11441] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 742.810171][T11441] ? __pfx_netlink_sendmsg+0x10/0x10 [ 742.810210][T11441] __sock_sendmsg+0x21c/0x270 [ 742.810250][T11441] ____sys_sendmsg+0x508/0x810 [ 742.810285][T11441] ? __pfx_____sys_sendmsg+0x10/0x10 [ 742.810326][T11441] ? import_iovec+0x74/0xa0 [ 742.810352][T11441] ___sys_sendmsg+0x21f/0x2a0 [ 742.810383][T11441] ? __pfx____sys_sendmsg+0x10/0x10 [ 742.810422][T11441] ? futex_wait+0x285/0x360 [ 742.810477][T11441] ? __fget_files+0x2a/0x420 [ 742.810501][T11441] ? __fget_files+0x3a6/0x420 [ 742.810541][T11441] __x64_sys_sendmsg+0x1a1/0x260 [ 742.810574][T11441] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 742.810615][T11441] ? rcu_is_watching+0x15/0xb0 [ 742.810651][T11441] do_syscall_64+0xec/0xf80 [ 742.810673][T11441] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.810696][T11441] ? trace_irq_disable+0x37/0x100 [ 742.810719][T11441] ? clear_bhb_loop+0x60/0xb0 [ 742.810746][T11441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.810769][T11441] RIP: 0033:0x7f4462a8f749 [ 742.810788][T11441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 742.810808][T11441] RSP: 002b:00007f4460cd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 742.810830][T11441] RAX: ffffffffffffffda RBX: 00007f4462ce6090 RCX: 00007f4462a8f749 [ 742.810847][T11441] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000007 [ 742.810862][T11441] RBP: 00007f4462b13f91 R08: 0000000000000000 R09: 0000000000000000 [ 742.810877][T11441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 742.810890][T11441] R13: 00007f4462ce6128 R14: 00007f4462ce6090 R15: 00007ffeb05c4948 [ 742.810929][T11441] [ 742.811569][T11441] Kernel Offset: disabled