last executing test programs: 47.65392684s ago: executing program 3 (id=683): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, 0x0, &(0x7f00000002c0)) 46.761494213s ago: executing program 3 (id=688): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x2, {0x0, 0xf0, 0x1}, 0xff}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r4, {0xfffd, 0x10}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x840) 45.357743921s ago: executing program 3 (id=692): sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, 0x0, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002212"], 0x0}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000000c0)={0x0, 0xc9, 0x6, &(0x7f0000000040)={0x21, "a8fd4950f88fdde3d44c00000000008000"}}) 43.183974225s ago: executing program 3 (id=698): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="08030000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0002000080e7000008000a00", @ANYRES32=r3, @ANYBLOB="140012800b00010067656e6576650000040002"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x6) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01"], 0x3c}}, 0x0) 42.555015597s ago: executing program 3 (id=700): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x988, &(0x7f0000000280)={0x0, 0x9bee, 0x8, 0xfffffffd, 0x25d}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x4000, 0x1}) io_uring_enter(r2, 0x52de, 0xf62e, 0x8, 0x0, 0x0) 41.307246236s ago: executing program 3 (id=705): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) capget(&(0x7f0000000180)={0x19980330, r3}, &(0x7f00000001c0)={0xd, 0x3, 0x3, 0x4, 0xfff, 0x6d}) sysfs$1(0x1, 0x0) syz_open_procfs(0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) listen(0xffffffffffffffff, 0x8) unlink(&(0x7f00000000c0)='./cgroup/cgroup.procs\x00') syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a440000104000109026000420100000009040000010209000005240600010524000000", @ANYBLOB="f7", @ANYRESDEC], 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)={0x10000004}) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x0, 0x9, @value=0x4}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8923, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) 27.206199269s ago: executing program 4 (id=741): syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000008903ce070200"/66, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c0000009078"], 0x0) r0 = openat$vcsu(0xffffff9c, &(0x7f0000000180), 0x88080, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) r1 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5d", 0x2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 26.616601284s ago: executing program 4 (id=743): r0 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7736, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) 26.301188489s ago: executing program 2 (id=744): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setresgid(0xee00, 0xee01, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket(0x2b, 0x1, 0x1) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x5) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) accept4$packet(r1, 0x0, 0x0, 0x80000) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 26.181932605s ago: executing program 32 (id=705): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) capget(&(0x7f0000000180)={0x19980330, r3}, &(0x7f00000001c0)={0xd, 0x3, 0x3, 0x4, 0xfff, 0x6d}) sysfs$1(0x1, 0x0) syz_open_procfs(0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) listen(0xffffffffffffffff, 0x8) unlink(&(0x7f00000000c0)='./cgroup/cgroup.procs\x00') syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a440000104000109026000420100000009040000010209000005240600010524000000", @ANYBLOB="f7", @ANYRESDEC], 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)={0x10000004}) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x0, 0x9, @value=0x4}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8923, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) 25.000629018s ago: executing program 1 (id=747): syz_open_dev$video(&(0x7f0000000100), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x0, 0x40000335}, &(0x7f0000000500)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x847ba, 0x0, 0xc, 0x0, 0x0) 24.71014363s ago: executing program 2 (id=748): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f0000001f40)=[{{&(0x7f0000000200)=@sco, 0x80, &(0x7f0000000280), 0x0, &(0x7f0000001600)=""/125, 0x7d}, 0x2}, {{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000001680)=""/182, 0xb6}, {&(0x7f0000001740)=""/198, 0xc6}, {&(0x7f0000001840)=""/153, 0x99}, {&(0x7f0000001900)=""/198, 0xc6}, {&(0x7f0000001a00)=""/184, 0xb8}], 0x5, &(0x7f0000001b40)=""/176, 0xb0}, 0x4}, {{&(0x7f0000001c00)=@phonet, 0x80, &(0x7f0000001e40)=[{&(0x7f0000000300)=""/21, 0x15}, {&(0x7f0000001c80)=""/37, 0x25}, {&(0x7f0000001cc0)=""/8, 0x8}, {&(0x7f0000001d00)=""/95, 0x5f}, {0x0}, {&(0x7f0000001dc0)=""/115, 0x73}], 0x6, &(0x7f0000001ec0)=""/67, 0x43}, 0x10001}], 0x3, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x235, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x1, 0x0, 0x0, r1}, 0x0, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x4081) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = syz_io_uring_setup(0x12ab, &(0x7f0000000140)={0x0, 0x7495, 0x0, 0x2, 0x1f7}, &(0x7f0000000380)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 24.705713449s ago: executing program 4 (id=749): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x44f}}]}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 24.07245501s ago: executing program 0 (id=750): syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c", @ANYRES32=0x41424344], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = add_key$user(&(0x7f0000000180), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f733e1a00000000", 0xe, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000055c0)=[{{&(0x7f00000001c0)={0xa, 0x4e22, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c, &(0x7f00000007c0)=[{&(0x7f0000000880)="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", 0x706}, {&(0x7f00000006c0)}, {&(0x7f0000001880)}], 0x3}}, {{0x0, 0x0, &(0x7f0000003200)}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000004c00)=[{0x0}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x6, 0x48010) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 23.541148373s ago: executing program 2 (id=751): socket$nl_netfilter(0x10, 0x3, 0xc) memfd_secret(0x80000) getgroups(0x1, &(0x7f0000002940)=[0x0]) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) accept4$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, &(0x7f00000001c0)=0x1c, 0x80000) 22.840776592s ago: executing program 0 (id=752): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4) r0 = socket$key(0xf, 0x3, 0x2) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x42342, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_test', 0xc3a01, 0x0) sendfile(r2, r1, &(0x7f0000002700)=0x1, 0x8) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000844, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x40}}}}}}, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000340)={0x2, 0x5, 0x0, 0x2, 0x2, 0x0, 0x0, 0x7}, 0x10}, 0x1, 0x400000000000000}, 0x0) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f00000001c0)={0xffffffffffffffff, 0x1, 0xfffffffffffff000, 0x1000000}) 22.778532737s ago: executing program 1 (id=753): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x10, 0x0, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x5, 0x0, 0x0, 0x5, &(0x7f0000000200)={0x77359400}, 0x1, 0x8}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)="bbf9dcc158f361ad9303805dba8706ca700ab7e7c8c8092e15c76d891bf36548e17c833ffe2696f603f02be8b9fcbe4694cd82e26b2bbc5f3513aa7df92768d6de670120fe4989fbe55d66e12d09481689ebf789ab17c3d965a4f6a7a5a6d28e723cdb90c28e77d851710a1c2a7f501f9be27d2207edb953606d6a91b95bbec414ac25ed0f249b386163a1934a422fae", 0x90}], 0x1, 0x0, 0x1170}, 0x8080) rename(0x0, 0x0) 22.479071816s ago: executing program 0 (id=754): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_io_uring_setup(0x49f, &(0x7f0000000400)={0x0, 0x805ce, 0x400, 0x2, 0x40024e}, &(0x7f0000000280)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r5 = eventfd2(0xff, 0x80001) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000300)=r5, 0x1) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r2, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r2, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0) 22.054386478s ago: executing program 2 (id=755): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="e0020000", @ANYRES16=r5, @ANYBLOB="0100feffffff000000003900000008000300", @ANYRES32=r6, @ANYBLOB="04005a80ec00"], 0x2e0}}, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r7) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) link(&(0x7f0000001240)='./file1\x00', &(0x7f0000000200)='./file0\x00') name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x8e79f0352167ea94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x14, 0x3, &(0x7f0000000240)=ANY=[@ANYRESHEX], 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r8, @ANYRES32=r8], 0x14) syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$ptys(0xc, 0x3, 0x1) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r9, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x0, @in={0x106, 0x4e20, @empty}, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}}}}, 0x118) r10 = socket(0x1e, 0x1, 0x0) connect$tipc(r10, &(0x7f0000000040)=@id, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 21.759156063s ago: executing program 4 (id=756): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x66, 0x0, 0xc, 0x6, 0x0, @rand_addr=0x64010100, @remote, {[@rr={0x7, 0x1b, 0x2e, [@empty, @initdev={0xac, 0x1e, 0xfc, 0x0}, @local, @dev={0xac, 0x14, 0x14, 0x36}, @rand_addr=0x64010100, @rand_addr=0x64010101]}, @noop]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0xffe}}}}}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={r3, 0x6, 0x30}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r6, 0x0, 0xc000) fcntl$getown(r0, 0x9) 20.600631806s ago: executing program 4 (id=757): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000007040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000007000)={0x20}, 0x0}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00'}, 0x10) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) 20.062157839s ago: executing program 2 (id=758): r0 = syz_usb_connect(0x5, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000700)={0x2c, &(0x7f0000000480)={0x0, 0x31}, 0x0, 0x0, 0x0, 0x0}) 19.964604509s ago: executing program 0 (id=759): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="280000002100110000000000000000000a000000000000", @ANYRES32=0x0], 0x28}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, r1, 0x15, 0x300, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0xc0c4) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) getpid() r2 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x8008af26, &(0x7f0000000680)={0x22f}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@link_local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @multicast1}, @address_request}}}}, 0x0) 19.544133815s ago: executing program 0 (id=760): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, 0x0) syz_open_dev$sndctrl(0x0, 0xfffffffffffffffc, 0x40000) syz_open_dev$sndctrl(&(0x7f00000000c0), 0x10000, 0x200000) creat(&(0x7f0000000040)='./bus\x00', 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x1c1000) ioctl$EVIOCSKEYCODE(r5, 0x40084504, &(0x7f0000000100)=[0xa1a, 0x1]) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x334, r6, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PEERS={0x2ec, 0x8, 0x0, 0x1, [{0x84, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @dev}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @multicast1}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}, {0x264, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0xd8, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev}}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2767b524f45e9dfaf001c414581741c92349c3b6661d9864680582bd184ef1a6"}, @WGPEER_A_ALLOWEDIPS={0x140, 0x9, 0x0, 0x1, [{0x13c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xe}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r7}]}, 0x334}}, 0x0) 19.471748687s ago: executing program 1 (id=761): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x44000004) r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0x2, 0x6, 0x801, 0x6c, 0x87400, {0x1}}, 0x14}, 0x1, 0x40afc, 0x0, 0x40010}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) msgctl$MSG_STAT(0x0, 0xb, &(0x7f00000000c0)=""/133) write$6lowpan_control(r0, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:11 2', 0x1e) syz_io_uring_setup(0x6a0a, &(0x7f0000000280)={0x0, 0x13b9, 0x20, 0x1, 0x3a3}, &(0x7f0000000080), &(0x7f0000000300)) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup, 0xffffffffffffffff, 0x6, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x8, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_io_uring_submit(0x0, 0x0, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x7a98, 0x0, 0x0, 0x0, 0x0) add_key(&(0x7f00000000c0)='keyring\x00', &(0x7f0000001000), &(0x7f0000001000)='.', 0x1, 0x0) 19.318391378s ago: executing program 4 (id=762): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x8) sched_setattr(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) read$FUSE(r2, 0x0, 0x0) capget(0x0, &(0x7f00000001c0)={0xd, 0x3, 0x3, 0x4, 0xfff, 0x6d}) sysfs$1(0x1, 0x0) syz_open_procfs(0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) listen(0xffffffffffffffff, 0x8) unlink(&(0x7f00000000c0)='./cgroup/cgroup.procs\x00') syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406", @ANYBLOB="f7"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x0, 0x9, @value=0x4}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0) mq_open(0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8923, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) 19.266780704s ago: executing program 1 (id=763): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4) r0 = socket$key(0xf, 0x3, 0x2) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x42342, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_test', 0xc3a01, 0x0) sendfile(r2, r1, &(0x7f0000002700)=0x1, 0x8) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000844, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x40}}}}}}, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000340)={0x2, 0x5, 0x0, 0x2, 0x2, 0x0, 0x0, 0x7}, 0x10}, 0x1, 0x400000000000000}, 0x0) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f00000001c0)={0xffffffffffffffff, 0x1, 0xfffffffffffff000, 0x1000000}) 18.755020776s ago: executing program 1 (id=764): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@empty, @in6=@dev={0xfe, 0x80, '\x00', 0x2f}, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@private0, 0x0, 0x6c}, 0x0, @in6=@empty, 0x3501, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) 17.503247872s ago: executing program 2 (id=765): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f1, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fd, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8000000, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xcf, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x7, 0x800, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x400000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x3c, r6, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7f}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48014}, 0x28000810) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x5, 0x7, 0xe51, 0x1, 0x5479, 0x103d, 0x6, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x5, 0x6a], 0x2000, 0x808d6}) write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x2, 0x0, 0x0, 0x1}, 0x8) ioctl$KVM_RUN(r4, 0xae80, 0x0) 17.031561365s ago: executing program 0 (id=766): socket$pppoe(0x18, 0x1, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00003e1000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000340)={[0x3ffffd, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x213f85fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x7, 0x7, 0x100000000], 0x3000, 0x280384}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000240)={0x4, 0x0, 0xdddd0000, 0x2000, &(0x7f000007a000/0x2000)=nil}) r4 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r4, 0x0) lseek(0xffffffffffffffff, 0xba7, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) 15.157363613s ago: executing program 1 (id=767): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175", 0xf1}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeebce00d4206147e56361d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d9", 0x65}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f8086f5c666dad31257fb48b66d940a3819d0809971ea827", 0x2b}], 0x3}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="acc870bde54caaeacb0000108cef4fa7bf44702b284b2e80cb32d33a86853c8c28797cd14c72c87f849f6ccbf3198d11a0b1ef000000000200000088e0e022b04dbd50d36f3c028c27ba00"/85, 0x55}, {&(0x7f0000000e80)="5be3b011e12323e4ab88c0472f", 0xd}], 0x2}}], 0x2, 0xc0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2000, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=ANY=[@ANYBLOB="300000001a00010028bd7000feffff248180800000f985000000000014000200"], 0x30}}, 0x884) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e0f30fa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 3.506906382s ago: executing program 33 (id=762): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x8) sched_setattr(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/asound/seq/clients\x00', 0x0, 0x0) read$FUSE(r2, 0x0, 0x0) capget(0x0, &(0x7f00000001c0)={0xd, 0x3, 0x3, 0x4, 0xfff, 0x6d}) sysfs$1(0x1, 0x0) syz_open_procfs(0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) listen(0xffffffffffffffff, 0x8) unlink(&(0x7f00000000c0)='./cgroup/cgroup.procs\x00') syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406", @ANYBLOB="f7"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x0, 0x9, @value=0x4}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0) mq_open(0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8923, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) 1.996360083s ago: executing program 34 (id=766): socket$pppoe(0x18, 0x1, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f00003e1000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000340)={[0x3ffffd, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x213f85fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x7, 0x7, 0x100000000], 0x3000, 0x280384}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000240)={0x4, 0x0, 0xdddd0000, 0x2000, &(0x7f000007a000/0x2000)=nil}) r4 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r4, 0x0) lseek(0xffffffffffffffff, 0xba7, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.928050833s ago: executing program 35 (id=765): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f1, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fd, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc80, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8000000, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xcf, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x7, 0x800, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x400000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4], 0x1, 0x400}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x3c, r6, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7f}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48014}, 0x28000810) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x5, 0x7, 0xe51, 0x1, 0x5479, 0x103d, 0x6, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x5, 0x6a], 0x2000, 0x808d6}) write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x2, 0x0, 0x0, 0x1}, 0x8) ioctl$KVM_RUN(r4, 0xae80, 0x0) 0s ago: executing program 36 (id=767): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175", 0xf1}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeebce00d4206147e56361d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d9", 0x65}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f8086f5c666dad31257fb48b66d940a3819d0809971ea827", 0x2b}], 0x3}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="acc870bde54caaeacb0000108cef4fa7bf44702b284b2e80cb32d33a86853c8c28797cd14c72c87f849f6ccbf3198d11a0b1ef000000000200000088e0e022b04dbd50d36f3c028c27ba00"/85, 0x55}, {&(0x7f0000000e80)="5be3b011e12323e4ab88c0472f", 0xd}], 0x2}}], 0x2, 0xc0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2000, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000980)=ANY=[@ANYBLOB="300000001a00010028bd7000feffff248180800000f985000000000014000200"], 0x30}}, 0x884) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e0f30fa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) kernel console output (not intermixed with test programs): om eth3 [ 92.067330][ T5851] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.090218][ T5851] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.103610][ T5851] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.118283][ T5851] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.139898][ T5836] Bluetooth: hci4: command tx timeout [ 92.139931][ T51] Bluetooth: hci1: command tx timeout [ 92.145432][ T5836] Bluetooth: hci3: command tx timeout [ 92.151397][ T5843] Bluetooth: hci0: command tx timeout [ 92.157012][ T5844] Bluetooth: hci2: command tx timeout [ 92.305848][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.319019][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.349756][ T5850] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.363328][ T5850] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.376348][ T5850] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.388356][ T5850] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.447619][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.468453][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.503192][ T1108] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.510534][ T1108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.524624][ T1108] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.531933][ T1108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.566000][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.573598][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.584333][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.591576][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.693773][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.796182][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.812002][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.841585][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.848743][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.870994][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.878171][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.911883][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.923718][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.934631][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.990844][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.998018][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.014277][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.028680][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.035886][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.046408][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.076325][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.083521][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.133929][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.141192][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.204028][ T5845] veth0_vlan: entered promiscuous mode [ 93.251569][ T5845] veth1_vlan: entered promiscuous mode [ 93.308688][ T5848] veth0_vlan: entered promiscuous mode [ 93.344549][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.375187][ T5848] veth1_vlan: entered promiscuous mode [ 93.400458][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.443148][ T5845] veth0_macvtap: entered promiscuous mode [ 93.482276][ T5845] veth1_macvtap: entered promiscuous mode [ 93.505687][ T5849] veth0_vlan: entered promiscuous mode [ 93.525789][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.541829][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.576773][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.592427][ T5845] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.603449][ T5845] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.616583][ T5845] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.625694][ T5845] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.653690][ T5848] veth0_macvtap: entered promiscuous mode [ 93.666150][ T5849] veth1_vlan: entered promiscuous mode [ 93.686213][ T5851] veth0_vlan: entered promiscuous mode [ 93.719062][ T5851] veth1_vlan: entered promiscuous mode [ 93.730421][ T5848] veth1_macvtap: entered promiscuous mode [ 93.786868][ T5850] veth0_vlan: entered promiscuous mode [ 93.828310][ T5850] veth1_vlan: entered promiscuous mode [ 93.839154][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.849133][ T5849] veth0_macvtap: entered promiscuous mode [ 93.895436][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.897091][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.921308][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.929151][ T5849] veth1_macvtap: entered promiscuous mode [ 93.955953][ T5848] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.964971][ T5848] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.974715][ T5848] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.983964][ T5848] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.005339][ T5851] veth0_macvtap: entered promiscuous mode [ 94.038873][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.047649][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.068436][ T5851] veth1_macvtap: entered promiscuous mode [ 94.116412][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.132630][ T5850] veth0_macvtap: entered promiscuous mode [ 94.138460][ T5845] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.153315][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.163353][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.198820][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.217482][ T5850] veth1_macvtap: entered promiscuous mode [ 94.225379][ T5844] Bluetooth: hci0: command tx timeout [ 94.233748][ T5836] Bluetooth: hci1: command tx timeout [ 94.239209][ T5836] Bluetooth: hci2: command tx timeout [ 94.239879][ T5843] Bluetooth: hci3: command tx timeout [ 94.246269][ T5844] Bluetooth: hci4: command tx timeout [ 94.303849][ T5849] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.317866][ T5849] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.336974][ T5849] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.346099][ T5849] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.358816][ T5851] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.368010][ T5851] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.376919][ T5851] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.387259][ T5851] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.420504][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.435188][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.525899][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.553202][ T5929] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.576127][ T5929] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 94.652216][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.687489][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.725142][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.845287][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.848943][ T5850] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.863200][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.922634][ T5850] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.944738][ T5850] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.953673][ T5850] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.083368][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.098849][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.227557][ T5932] warning: `syz.0.1' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 95.251177][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.259055][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.366379][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.375969][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.597475][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.682520][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.862850][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 95.893787][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.912988][ T5893] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 95.921981][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.104234][ T5893] usb 1-1: Using ep0 maxpacket: 32 [ 96.214949][ T5946] Zero length message leads to an empty skb [ 96.219769][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 96.249405][ T5893] usb 1-1: unable to get BOS descriptor or descriptor too short [ 96.323132][ T5844] Bluetooth: hci3: command tx timeout [ 96.328693][ T5844] Bluetooth: hci0: command tx timeout [ 96.334607][ T5836] Bluetooth: hci1: command tx timeout [ 96.340094][ T5836] Bluetooth: hci4: command tx timeout [ 96.345829][ T5836] Bluetooth: hci2: command tx timeout [ 96.388913][ T5893] usb 1-1: config 253 has an invalid interface number: 202 but max is 0 [ 96.477474][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 96.486642][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.536689][ T5893] usb 1-1: config 253 has no interface number 0 [ 96.671372][ T5893] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 96.683148][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 96.692883][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.701905][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 96.755740][ T5906] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 96.771542][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.786855][ T5893] usb 1-1: Product: syz [ 96.791850][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.800527][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 96.808857][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 96.838426][ T5893] usb 1-1: Manufacturer: syz [ 96.843291][ T5893] usb 1-1: SerialNumber: syz [ 96.930553][ T5906] usb 5-1: Using ep0 maxpacket: 32 [ 97.057759][ T5906] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.115811][ T5906] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 97.374292][ T5906] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 97.406395][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 97.457921][ T5906] usb 5-1: Product: syz [ 97.475908][ T5906] usb 5-1: Manufacturer: syz [ 97.503068][ T5892] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 97.555631][ T5906] usb 5-1: SerialNumber: syz [ 97.648256][ T5906] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input5 [ 97.689715][ T5892] usb 3-1: config 0 has no interfaces? [ 97.716664][ T5892] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 97.729550][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.737735][ T5892] usb 3-1: Product: syz [ 97.751725][ T5892] usb 3-1: Manufacturer: syz [ 97.777775][ T5892] usb 3-1: SerialNumber: syz [ 97.824972][ T5952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.836636][ T5892] usb 3-1: config 0 descriptor?? [ 97.854508][ T5952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.444982][ T5906] usb 5-1: USB disconnect, device number 2 [ 98.661178][ T5906] appletouch 5-1:1.0: input: appletouch disconnected [ 98.723577][ T5964] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.374674][ T30] audit: type=1326 audit(1750579708.510:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5965 comm="syz.4.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f6f8e929 code=0x7ffc0000 [ 99.461930][ T30] audit: type=1326 audit(1750579708.510:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5965 comm="syz.4.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=461 compat=0 ip=0x7f61f6f8e929 code=0x7ffc0000 [ 99.533924][ T30] audit: type=1326 audit(1750579708.510:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5965 comm="syz.4.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f6f8e929 code=0x7ffc0000 [ 99.677406][ T5893] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 99.689572][ T30] audit: type=1326 audit(1750579708.510:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5965 comm="syz.4.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f61f6f8e929 code=0x7ffc0000 [ 99.689598][ T36] usb 1-1: Failed to submit usb control message: -71 [ 99.735947][ T5893] usb 1-1: USB disconnect, device number 2 [ 99.800159][ T30] audit: type=1326 audit(1750579708.510:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5965 comm="syz.4.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f6f8e929 code=0x7ffc0000 [ 99.912036][ T36] usb 1-1: unable to send the bmi data to the device: -71 [ 100.039354][ T30] audit: type=1326 audit(1750579708.510:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5965 comm="syz.4.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f61f6f8e929 code=0x7ffc0000 [ 100.075615][ T36] usb 1-1: unable to get target info from device [ 100.116463][ T36] usb 1-1: could not get target info (-71) [ 100.139461][ T36] usb 1-1: could not probe fw (-71) [ 100.340726][ T30] audit: type=1326 audit(1750579708.510:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5965 comm="syz.4.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f6f8e929 code=0x7ffc0000 [ 100.576462][ T30] audit: type=1326 audit(1750579708.510:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5965 comm="syz.4.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f61f6f8e929 code=0x7ffc0000 [ 100.776128][ T30] audit: type=1326 audit(1750579708.510:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5965 comm="syz.4.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f6f8e929 code=0x7ffc0000 [ 100.959332][ T30] audit: type=1326 audit(1750579708.510:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5965 comm="syz.4.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f61f6f8e929 code=0x7ffc0000 [ 101.249335][ T5823] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 101.401692][ T5823] usb 4-1: Using ep0 maxpacket: 8 [ 101.567705][ T5823] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 101.578892][ T5823] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 101.590653][ T5823] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 101.605001][ T5823] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 101.638500][ T5823] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 101.658032][ T5823] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.693939][ T5892] usb 3-1: USB disconnect, device number 2 [ 102.155298][ T5823] usb 4-1: GET_CAPABILITIES returned 0 [ 102.174008][ T5991] loop8: detected capacity change from 0 to 16384 [ 102.238122][ T5823] usbtmc 4-1:16.0: can't read capabilities [ 102.323787][ T5992] loop8: detected capacity change from 16384 to 16320 [ 104.141983][ T6011] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 104.548980][ T5956] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 104.599781][ T6013] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15'. [ 104.611944][ T6013] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15'. [ 105.139671][ T5956] usb 1-1: Using ep0 maxpacket: 32 [ 105.150925][ T5956] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 105.224562][ T5956] usb 1-1: config 0 has no interface number 0 [ 106.251237][ T5823] usb 4-1: USB disconnect, device number 2 [ 106.899524][ T9] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 107.163051][ T6035] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 107.372427][ T9] usb 3-1: config 0 has no interfaces? [ 107.410866][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 107.434823][ T6035] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20'. [ 107.486381][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.689324][ T9] usb 3-1: Product: syz [ 107.693581][ T9] usb 3-1: Manufacturer: syz [ 107.813737][ T9] usb 3-1: SerialNumber: syz [ 107.855766][ T6040] mmap: syz.3.21 (6040) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 107.893957][ T9] usb 3-1: config 0 descriptor?? [ 107.996039][ T5956] usb 1-1: string descriptor 0 read error: -71 [ 108.002617][ T5956] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 108.031102][ T5956] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.180184][ T6040] pim6reg: entered allmulticast mode [ 108.346790][ T6046] pim6reg: left allmulticast mode [ 108.403963][ T5956] usb 1-1: config 0 descriptor?? [ 108.410471][ T5956] usb 1-1: can't set config #0, error -71 [ 108.428887][ T5956] usb 1-1: USB disconnect, device number 3 [ 108.577505][ T6051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.587480][ T6051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.335656][ T5940] usb 3-1: USB disconnect, device number 3 [ 111.376970][ T6070] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.27'. [ 111.487522][ T6076] netlink: 'syz.3.25': attribute type 13 has an invalid length. [ 111.508379][ T6076] gretap0: refused to change device tx_queue_len [ 111.535764][ T6076] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 113.438547][ T5956] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 113.792214][ T5956] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 113.865487][ T5956] usb 1-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 113.963992][ T6099] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 114.036337][ T5956] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 114.139047][ T5956] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.229427][ T5823] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 114.311600][ T6105] netlink: 20 bytes leftover after parsing attributes in process `syz.1.34'. [ 114.519449][ T6093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.529951][ T6093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.567672][ T5892] IPVS: starting estimator thread 0... [ 114.716410][ T6108] IPVS: using max 36 ests per chain, 86400 per kthread [ 114.763695][ T6113] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.35' sets config #0 [ 114.849403][ T5892] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 114.866005][ T5823] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 114.876863][ T5823] usb 3-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 114.911006][ T5823] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 115.465135][ T5892] usb 2-1: Using ep0 maxpacket: 32 [ 115.482299][ T5892] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.493250][ T5892] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 115.509797][ T5892] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.529784][ T5892] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 115.544765][ T5892] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.555422][ T5892] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 115.606258][ T5823] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.725394][ T5892] usb 2-1: New USB device found, idVendor=04e7, idProduct=6651, bcdDevice=ba.8a [ 115.743973][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.759428][ T5892] usb 2-1: Product: syz [ 115.891405][ T5892] usb 2-1: Manufacturer: syz [ 115.908425][ T5823] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 115.949798][ T5892] usb 2-1: SerialNumber: syz [ 116.195519][ T5892] usb 2-1: config 0 descriptor?? [ 116.233946][ T5892] usb 2-1: bad CDC descriptors [ 116.259101][ T5892] cdc_acm 2-1:0.0: Zero length descriptor references [ 116.288592][ T5892] cdc_acm 2-1:0.0: probe with driver cdc_acm failed with error -22 [ 116.304972][ T6031] udevd[6031]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 116.342795][ T5823] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 116.575346][ T6099] vlan2: entered promiscuous mode [ 116.580831][ T6099] bond0: entered promiscuous mode [ 116.586137][ T6099] bond_slave_0: entered promiscuous mode [ 116.599418][ T6099] bond_slave_1: entered promiscuous mode [ 116.749400][ T5892] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 116.879072][ T5914] usb 1-1: USB disconnect, device number 4 [ 116.922284][ T5892] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 116.938156][ T5892] usb 5-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 117.037838][ T5892] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 117.072634][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.103164][ T5892] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 117.322283][ T6118] delete_channel: no stack [ 117.434129][ T6031] udevd[6031]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 117.435876][ T5892] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 117.539454][ T5893] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 117.552507][ T5892] usb 5-1: USB disconnect, device number 3 [ 117.744974][ T5893] usb 1-1: config 0 has no interfaces? [ 117.756795][ T5893] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 117.766327][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.774714][ T5893] usb 1-1: Product: syz [ 117.796685][ T5892] usb 2-1: USB disconnect, device number 2 [ 117.951367][ T5893] usb 1-1: Manufacturer: syz [ 118.047886][ T6129] netlink: 60 bytes leftover after parsing attributes in process `syz.3.38'. [ 118.068346][ T5893] usb 1-1: SerialNumber: syz [ 118.189816][ T5893] usb 1-1: config 0 descriptor?? [ 118.409473][ T5914] usb 3-1: USB disconnect, device number 4 [ 118.948313][ T6123] netlink: 'syz.0.37': attribute type 21 has an invalid length. [ 118.956153][ T6123] netlink: 128 bytes leftover after parsing attributes in process `syz.0.37'. [ 118.965532][ T6123] netlink: 'syz.0.37': attribute type 4 has an invalid length. [ 118.973256][ T6123] netlink: 'syz.0.37': attribute type 3 has an invalid length. [ 118.989363][ T6123] netlink: 3 bytes leftover after parsing attributes in process `syz.0.37'. [ 119.160582][ T5823] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 119.276561][ T6141] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 119.300255][ T6141] macsec1: entered allmulticast mode [ 119.338124][ T6141] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 119.401832][ T6141] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 119.440913][ T6141] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 119.517190][ T5823] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 119.527878][ T5823] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 119.587470][ T5823] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 119.633993][ T5823] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 119.673508][ T5823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.807045][ T5823] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 119.816184][ T5823] usb 2-1: invalid MIDI out EP 0 [ 120.158902][ T5939] udevd[5939]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 120.323314][ T5823] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 121.656055][ T6132] delete_channel: no stack [ 121.675957][ T5914] usb 2-1: USB disconnect, device number 3 [ 122.761342][ T5892] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 122.941710][ T5893] usb 1-1: USB disconnect, device number 5 [ 123.031223][ T5892] usb 2-1: config 0 has no interfaces? [ 123.073685][ T5892] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 123.112616][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.149451][ T5892] usb 2-1: Product: syz [ 123.190605][ T6162] netlink: 'syz.4.45': attribute type 10 has an invalid length. [ 123.200707][ T5892] usb 2-1: Manufacturer: syz [ 123.249041][ T5892] usb 2-1: SerialNumber: syz [ 123.281704][ T5892] usb 2-1: config 0 descriptor?? [ 123.397590][ T6162] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.427035][ T6162] bond0: (slave team0): Enslaving as an active interface with an up link [ 123.625504][ T6160] program syz.1.44 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 123.663776][ T6160] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 123.684639][ T6180] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 124.968979][ T6190] capability: warning: `syz.4.49' uses deprecated v2 capabilities in a way that may be insecure [ 125.338583][ T5823] usb 2-1: USB disconnect, device number 4 [ 126.168989][ T6200] ipt_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 126.749364][ T5823] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 126.901970][ T5823] usb 4-1: config index 0 descriptor too short (expected 65187, got 12) [ 126.910624][ T5823] usb 4-1: config 138 has too many interfaces: 76, using maximum allowed: 32 [ 126.972096][ T5823] usb 4-1: config 138 has an invalid descriptor of length 123, skipping remainder of the config [ 127.014214][ T5823] usb 4-1: config 138 has 0 interfaces, different from the descriptor's value: 76 [ 127.062516][ T5823] usb 4-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=fb.16 [ 127.072206][ T5823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.113721][ T5823] usb 4-1: Product: syz [ 127.117953][ T5823] usb 4-1: Manufacturer: syz [ 127.192758][ T5823] usb 4-1: SerialNumber: syz [ 127.512757][ T6204] trusted_key: syz.3.52 sent an empty control message without MSG_MORE. [ 127.593798][ T6211] xt_NFQUEUE: number of total queues is 0 [ 127.723688][ T6207] ptrace attach of "./syz-executor exec"[5849] was attempted by "./syz-executor exec"[6207] [ 127.861095][ T6215] batadv_slave_1: entered promiscuous mode [ 128.453535][ T6194] batadv_slave_1: left promiscuous mode [ 129.084386][ T5823] usb 4-1: USB disconnect, device number 3 [ 129.849387][ T6237] pim6reg: entered allmulticast mode [ 129.862169][ T6237] pim6reg: left allmulticast mode [ 130.053401][ T6238] netlink: 8 bytes leftover after parsing attributes in process `syz.4.57'. [ 130.179733][ T5892] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 130.429908][ T6243] usb usb8: usbfs: process 6243 (syz.3.58) did not claim interface 0 before use [ 130.645377][ T5892] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 130.659794][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.731462][ T5823] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 130.749179][ T5892] usb 3-1: Product: syz [ 130.889264][ T5892] usb 3-1: Manufacturer: syz [ 131.089371][ T5823] usb 4-1: Using ep0 maxpacket: 32 [ 131.101233][ T5823] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.117537][ T5823] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 131.126884][ T5823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.137790][ T5823] usb 4-1: Product: syz [ 131.145800][ T5823] usb 4-1: Manufacturer: syz [ 131.150770][ T5823] usb 4-1: SerialNumber: syz [ 131.157667][ T5823] usb 4-1: config 0 descriptor?? [ 131.170374][ T5892] usb 3-1: SerialNumber: syz [ 131.777047][ T5892] usb 3-1: config 0 descriptor?? [ 132.324529][ T5892] usb 3-1: ignoring: probably an ADSL modem [ 132.734839][ T5892] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 132.758792][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.765422][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.982357][ T6235] program syz.2.56 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 133.000035][ T6235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.011359][ T6235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.254058][ T5923] usb 4-1: USB disconnect, device number 4 [ 134.429495][ T5823] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 134.631804][ T5823] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 134.686862][ T5823] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 134.709432][ T5823] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 134.737501][ T5823] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.797330][ T6264] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 134.852507][ T5823] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 134.884832][ T6272] netlink: 'syz.1.62': attribute type 12 has an invalid length. [ 135.289832][ T5923] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 135.519332][ T5923] usb 4-1: Using ep0 maxpacket: 16 [ 135.619535][ T5923] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 135.633795][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.641974][ T5923] usb 4-1: Product: syz [ 135.646225][ T5923] usb 4-1: Manufacturer: syz [ 135.754701][ T5923] usb 4-1: SerialNumber: syz [ 135.760111][ T5823] usb 3-1: USB disconnect, device number 5 [ 135.795349][ T5923] r8152-cfgselector 4-1: Unknown version 0x0000 [ 135.912487][ T5923] r8152-cfgselector 4-1: config 0 descriptor?? [ 136.140697][ T6268] netlink: 68 bytes leftover after parsing attributes in process `syz.3.63'. [ 136.170373][ T5923] r8152-cfgselector 4-1: Unknown version 0x0000 [ 136.176846][ T5923] r8152-cfgselector 4-1: bad CDC descriptors [ 136.186138][ T5923] r8152-cfgselector 4-1: USB disconnect, device number 5 [ 136.266304][ T6279] input: syz0 as /devices/virtual/input/input6 [ 137.278840][ T5940] usb 5-1: USB disconnect, device number 4 [ 137.760350][ T5892] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 138.140726][ T5892] usb 2-1: config 0 has no interfaces? [ 138.209921][ T5892] usb 2-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice=d7.3b [ 138.221845][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.262945][ T5892] usb 2-1: Product: syz [ 138.302959][ T5892] usb 2-1: Manufacturer: syz [ 138.500815][ T5892] usb 2-1: SerialNumber: syz [ 138.526634][ T5892] usb 2-1: config 0 descriptor?? [ 139.744447][ T6295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.757122][ T6295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.249303][ T5892] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 141.403398][ T5892] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 141.449742][ T5892] usb 5-1: config 220 has an invalid descriptor of length 1, skipping remainder of the config [ 141.565531][ T5892] usb 5-1: config 220 has no interface number 2 [ 141.574617][ T5892] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 141.587951][ T5892] usb 5-1: config 220 interface 0 has no altsetting 0 [ 141.595599][ T5892] usb 5-1: config 220 interface 76 has no altsetting 0 [ 141.606290][ T5892] usb 5-1: config 220 interface 1 has no altsetting 0 [ 141.877943][ T5892] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 141.949847][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.965001][ T5892] usb 5-1: Product: syz [ 142.029533][ T5892] usb 5-1: Manufacturer: syz [ 142.101964][ T5892] usb 5-1: SerialNumber: syz [ 142.456859][ T5892] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 142.463346][ T5892] usb 5-1: No valid video chain found. [ 142.529057][ T5823] usb 2-1: USB disconnect, device number 5 [ 142.581795][ T5892] usb 5-1: USB disconnect, device number 5 [ 144.038007][ T6343] input: syz0 as /devices/virtual/input/input8 [ 144.087467][ T6344] Failed to get privilege flags for destination (handle=0x2:0xd) [ 146.638337][ T5823] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 147.042492][ T5823] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 147.058127][ T5823] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 147.598134][ T5823] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 147.740399][ T5823] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.999505][ T5823] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.071115][ T5823] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 148.099297][ T5823] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 148.200577][ T5823] usb 5-1: Product: syz [ 148.229437][ T5823] usb 5-1: Manufacturer: syz [ 148.515913][ T5823] cdc_wdm 5-1:1.0: skipping garbage [ 148.673076][ T5823] cdc_wdm 5-1:1.0: skipping garbage [ 148.756387][ T5823] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 148.769386][ T5823] cdc_wdm 5-1:1.0: Unknown control protocol [ 148.770518][ T6372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.869988][ T6372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.080557][ T6372] netlink: 'syz.4.82': attribute type 27 has an invalid length. [ 149.443567][ T6372] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.452101][ T6372] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.051564][ T6403] netlink: 4 bytes leftover after parsing attributes in process `syz.2.88'. [ 151.354133][ T6372] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.386595][ T6372] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.571875][ T6372] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.596927][ T6372] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.665361][ T6372] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.909282][ T6372] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.199471][ T5892] usb 5-1: USB disconnect, device number 6 [ 152.254666][ T6398] geneve2: entered promiscuous mode [ 152.951547][ T5923] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 153.230461][ T5923] usb 5-1: config 0 has no interfaces? [ 153.244204][ T5923] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 153.254016][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.262678][ T5923] usb 5-1: Product: syz [ 153.267027][ T5923] usb 5-1: Manufacturer: syz [ 153.271991][ T5923] usb 5-1: SerialNumber: syz [ 153.286011][ T5923] usb 5-1: config 0 descriptor?? [ 154.089482][ T5940] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 154.323789][ T6437] input: syz1 as /devices/virtual/input/input9 [ 154.405168][ T5940] usb 4-1: config 0 has no interfaces? [ 154.441487][ T6438] netlink: 8 bytes leftover after parsing attributes in process `syz.1.94'. [ 154.680318][ T5940] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 154.702236][ T5940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.767855][ T6438] cgroup: fork rejected by pids controller in /syz1 [ 154.890845][ T5940] usb 4-1: Product: syz [ 154.895074][ T5940] usb 4-1: Manufacturer: syz [ 154.931591][ T5940] usb 4-1: SerialNumber: syz [ 154.942642][ T5940] usb 4-1: config 0 descriptor?? [ 155.290837][ T6834] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 156.479548][ T6835] netlink: 4 bytes leftover after parsing attributes in process `syz.0.96'. [ 156.699563][ T6835] netlink: 4 bytes leftover after parsing attributes in process `syz.0.96'. [ 156.813492][ T5923] usb 5-1: USB disconnect, device number 7 [ 158.211119][ T6853] netlink: 16 bytes leftover after parsing attributes in process `syz.0.99'. [ 158.239887][ T6853] syz.0.99 uses obsolete (PF_INET,SOCK_PACKET) [ 158.295392][ T6858] input: syz0 as /devices/virtual/input/input10 [ 158.381003][ T6859] Cannot find del_set index 1 as target [ 158.548542][ T5823] usb 4-1: USB disconnect, device number 6 [ 158.945444][ T6863] netlink: 12 bytes leftover after parsing attributes in process `syz.3.101'. [ 159.250456][ T6863] vlan2: entered promiscuous mode [ 159.255700][ T6863] hsr0: entered promiscuous mode [ 159.655723][ T6868] netlink: 44 bytes leftover after parsing attributes in process `syz.2.102'. [ 161.084452][ T5823] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 161.188254][ T5892] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 161.502751][ T5956] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 161.654491][ T6878] pim6reg: entered allmulticast mode [ 161.677637][ T6878] pim6reg: left allmulticast mode [ 161.809334][ T5956] usb 5-1: Using ep0 maxpacket: 8 [ 161.819584][ T5823] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 161.897629][ T5892] usb 1-1: config 0 has no interfaces? [ 161.924121][ T5892] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 161.943741][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.999391][ T5823] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 162.034240][ T5892] usb 1-1: Product: syz [ 162.038467][ T5892] usb 1-1: Manufacturer: syz [ 162.062750][ T5892] usb 1-1: SerialNumber: syz [ 162.102704][ T5892] usb 1-1: config 0 descriptor?? [ 162.238221][ T5823] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 162.321284][ T5823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.356602][ T6875] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 162.382163][ T5823] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 162.474134][ T6892] capability: warning: `syz.0.104' uses 32-bit capabilities (legacy support in use) [ 162.523511][ T6892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.791369][ T6893] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 162.817834][ T5956] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 162.829800][ T5956] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 162.850830][ T6892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.066554][ T5956] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 163.362502][ T5956] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 163.390750][ T5956] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 163.406044][ T5956] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.653097][ T5956] usb 5-1: GET_CAPABILITIES returned 0 [ 163.658826][ T5956] usbtmc 5-1:16.0: can't read capabilities [ 163.910287][ C1] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 163.921316][ T6886] usbtmc 5-1:16.0: Unable to send data, error -71 [ 164.529366][ T5923] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 164.703036][ T5923] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 164.731620][ T5923] usb 3-1: config 27 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 164.990502][ T5823] usb 2-1: USB disconnect, device number 6 [ 165.009150][ T5923] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 165.043391][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.723914][ T5923] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 165.954858][ T6915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.110'. [ 165.972985][ T6915] netlink: 28 bytes leftover after parsing attributes in process `syz.1.110'. [ 166.631403][ T5923] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 166.643323][ T5923] usb 3-1: USB disconnect, device number 6 [ 166.702916][ T6901] delete_channel: no stack [ 166.804854][ T5962] udevd[5962]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 167.568767][ T5940] usb 5-1: USB disconnect, device number 8 [ 169.377750][ T6953] netlink: 156 bytes leftover after parsing attributes in process `syz.4.115'. [ 169.586354][ T5823] usb 1-1: USB disconnect, device number 6 [ 169.588076][ T5956] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 169.953073][ T5956] usb 3-1: config 0 has no interfaces? [ 169.983557][ T5956] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 170.007641][ T5956] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.048488][ T5956] usb 3-1: Product: syz [ 170.097402][ T5956] usb 3-1: Manufacturer: syz [ 170.144233][ T5956] usb 3-1: SerialNumber: syz [ 170.229314][ T5956] usb 3-1: config 0 descriptor?? [ 170.494199][ T6951] program syz.2.114 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 170.510597][ T6951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.520999][ T6951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.668331][ T6993] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.118'. [ 173.158384][ T7002] veth0_to_team: entered promiscuous mode [ 173.195606][ T7002] veth0_to_team: entered allmulticast mode [ 173.632626][ T5923] usb 3-1: USB disconnect, device number 7 [ 173.763228][ T7010] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6tnl0, syncid = 3, id = 0 [ 174.597444][ T7019] batman_adv: batadv0: Adding interface: dummy0 [ 174.603963][ T7019] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.708229][ T7019] batman_adv: batadv0: Interface activated: dummy0 [ 174.881316][ T7020] batadv0: mtu less than device minimum [ 174.889106][ T7020] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 174.900797][ T7020] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 174.912309][ T7020] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 174.923831][ T7020] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 174.935364][ T7020] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 174.946885][ T7020] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 174.958376][ T7020] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 174.969905][ T7020] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 174.981409][ T7020] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 176.940044][ T7053] Failed to get privilege flags for destination (handle=0x2:0xd) [ 177.129624][ T7060] process 'syz.1.126' launched './file1' with NULL argv: empty string added [ 181.256429][ T7112] netlink: 4 bytes leftover after parsing attributes in process `syz.0.133'. [ 181.278150][ T7112] netlink: 4 bytes leftover after parsing attributes in process `syz.0.133'. [ 182.023361][ T7112] kthread_run failed with err -4 [ 182.462273][ T7130] loop6: detected capacity change from 0 to 524287999 [ 182.480199][ T7130] Buffer I/O error on dev loop6, logical block 0, async page read [ 182.490056][ T7130] Buffer I/O error on dev loop6, logical block 0, async page read [ 182.498097][ T7130] Buffer I/O error on dev loop6, logical block 0, async page read [ 182.562268][ T7130] Buffer I/O error on dev loop6, logical block 0, async page read [ 182.571193][ T7130] Buffer I/O error on dev loop6, logical block 0, async page read [ 182.580171][ T7130] Buffer I/O error on dev loop6, logical block 0, async page read [ 182.592352][ T7130] Buffer I/O error on dev loop6, logical block 0, async page read [ 182.669579][ T7130] Buffer I/O error on dev loop6, logical block 0, async page read [ 182.706513][ T7130] ldm_validate_partition_table(): Disk read failed. [ 182.736165][ T7130] Buffer I/O error on dev loop6, logical block 0, async page read [ 183.109588][ T7130] Buffer I/O error on dev loop6, logical block 0, async page read [ 183.198429][ T7130] Dev loop6: unable to read RDB block 0 [ 183.745395][ T7130] loop6: unable to read partition table [ 183.755457][ T7130] loop_reread_partitions: partition scan of loop6 (3Я ╛x│ШC╓) failed (rc=-5) [ 183.774542][ T7140] netlink: 'syz.3.136': attribute type 3 has an invalid length. [ 183.792435][ T7140] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.136'. [ 184.119412][ T5823] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 184.367165][ T5823] usb 2-1: config 0 has no interfaces? [ 184.403354][ T5823] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 184.413347][ T5823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.426145][ T5823] usb 2-1: Product: syz [ 184.440344][ T7144] netlink: 24 bytes leftover after parsing attributes in process `syz.3.138'. [ 184.444321][ T5823] usb 2-1: Manufacturer: syz [ 184.467471][ T5823] usb 2-1: SerialNumber: syz [ 184.495882][ T7148] netlink: 24 bytes leftover after parsing attributes in process `syz.3.138'. [ 184.512974][ T5823] usb 2-1: config 0 descriptor?? [ 184.786869][ T7141] netlink: 'syz.1.135': attribute type 2 has an invalid length. [ 184.911939][ T7154] fuse: Unknown parameter '0xffffffffffffffff0000000000000000000000000000000000000000' [ 185.626060][ T5956] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 185.696732][ T7169] netlink: 12 bytes leftover after parsing attributes in process `syz.3.142'. [ 185.803485][ T5956] usb 3-1: Using ep0 maxpacket: 16 [ 185.840028][ T5956] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.892039][ T5956] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 185.924945][ T5956] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.941088][ T5956] usb 3-1: config 0 descriptor?? [ 186.202697][ T5940] usb 2-1: USB disconnect, device number 7 [ 188.479610][ T5823] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 188.482907][ T5956] usbhid 3-1:0.0: can't add hid device: -71 [ 188.501480][ T5956] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 188.566221][ T5956] usb 3-1: USB disconnect, device number 8 [ 188.700926][ T5823] usb 2-1: Using ep0 maxpacket: 32 [ 188.714989][ T7199] netlink: 65051 bytes leftover after parsing attributes in process `syz.4.146'. [ 188.733963][ T5823] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 188.742396][ T5823] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.758546][ T5823] usb 2-1: config 0 has no interface number 0 [ 188.797329][ T5823] usb 2-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 188.834424][ T5823] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 188.843819][ T5823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.084977][ T5823] usb 2-1: Product: syz [ 189.089443][ T5823] usb 2-1: Manufacturer: syz [ 189.106735][ T5823] usb 2-1: SerialNumber: syz [ 189.137774][ T5823] usb 2-1: config 0 descriptor?? [ 189.162682][ T5823] radio-si470x 2-1:0.35: could not find interrupt in endpoint [ 189.185697][ T5823] radio-si470x 2-1:0.35: probe with driver radio-si470x failed with error -5 [ 189.721668][ T5823] radio-raremono 2-1:0.35: this is not Thanko's Raremono. [ 189.767374][ T5823] usbhid 2-1:0.35: couldn't find an input interrupt endpoint [ 189.928118][ T7179] netlink: 'syz.1.143': attribute type 13 has an invalid length. [ 190.279028][ T7179] net_ratelimit: 10 callbacks suppressed [ 190.279042][ T7179] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 191.719647][ T5823] usb 2-1: USB disconnect, device number 8 [ 192.025899][ T7224] netlink: 4 bytes leftover after parsing attributes in process `syz.1.150'. [ 192.037334][ T7224] netlink: 4 bytes leftover after parsing attributes in process `syz.1.150'. [ 193.763805][ T7230] netlink: 60 bytes leftover after parsing attributes in process `syz.0.151'. [ 193.805341][ T7246] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 193.813673][ T5893] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 193.990873][ T5893] usb 5-1: config 0 has an invalid interface number: 29 but max is 0 [ 193.999478][ T5893] usb 5-1: config 0 has no interface number 0 [ 194.020217][ T5893] usb 5-1: config 0 interface 29 has no altsetting 0 [ 194.080470][ T5893] usb 5-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 194.089765][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.097902][ T5893] usb 5-1: Product: syz [ 194.103451][ T5893] usb 5-1: Manufacturer: syz [ 194.152942][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.170595][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.179399][ T5893] usb 5-1: SerialNumber: syz [ 194.203000][ T5893] usb 5-1: config 0 descriptor?? [ 194.682109][ T7242] IPVS: Error connecting to the multicast addr [ 195.373001][ T7256] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 195.379635][ T7256] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 195.397579][ T7256] vhci_hcd vhci_hcd.0: Device attached [ 195.569963][ T5892] vhci_hcd: vhci_device speed not set [ 195.794159][ T7263] netlink: 14 bytes leftover after parsing attributes in process `syz.0.156'. [ 196.393346][ T5892] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 196.551875][ T7257] vhci_hcd: connection reset by peer [ 196.559530][ T1164] vhci_hcd: stop threads [ 196.564767][ T1164] vhci_hcd: release socket [ 196.580701][ T1164] vhci_hcd: disconnect device [ 197.098541][ T5960] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 198.120132][ T5960] usb 3-1: config 0 has no interfaces? [ 198.147410][ T5960] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 198.156986][ T5960] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.179474][ T5960] usb 3-1: Product: syz [ 198.183668][ T5960] usb 3-1: Manufacturer: syz [ 198.238903][ T5960] usb 3-1: SerialNumber: syz [ 198.287624][ T5960] usb 3-1: config 0 descriptor?? [ 198.464453][ T5893] peak_usb 5-1:0.29 can0: unable to request usb[type=0 value=1] err=-71 [ 198.479323][ T5893] peak_usb 5-1:0.29: unable to read PCAN-USB X6 firmware info (err -71) [ 198.553468][ T7268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.563568][ T7268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.597316][ T7294] netlink: 44 bytes leftover after parsing attributes in process `syz.4.161'. [ 199.748455][ T7283] netlink: 'syz.0.159': attribute type 13 has an invalid length. [ 199.756503][ T7283] netlink: 28 bytes leftover after parsing attributes in process `syz.0.159'. [ 199.927004][ T5893] peak_usb 5-1:0.29: probe with driver peak_usb failed with error -71 [ 199.942166][ T5893] usb 5-1: USB disconnect, device number 9 [ 200.891229][ T7308] tipc: Failed to remove unknown binding: 66,1,1/0:593736510/593736512 [ 201.097782][ T7308] tipc: Failed to remove unknown binding: 66,1,1/0:593736510/593736512 [ 201.106576][ T7308] tipc: Failed to remove unknown binding: 66,1,1/0:593736510/593736512 [ 201.584706][ T5892] vhci_hcd: vhci_device speed not set [ 201.811808][ T5893] usb 3-1: USB disconnect, device number 9 [ 201.898790][ T7317] netlink: 4 bytes leftover after parsing attributes in process `syz.4.166'. [ 203.599393][ T5892] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 203.769453][ T5823] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 203.863694][ T5892] usb 5-1: Using ep0 maxpacket: 16 [ 203.933377][ T5823] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 203.948465][ T5823] usb 4-1: config 0 interface 0 has no altsetting 0 [ 203.982786][ T7337] netlink: 4 bytes leftover after parsing attributes in process `syz.4.169'. [ 204.057559][ T5823] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 204.106591][ T5823] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 204.118367][ T5823] usb 4-1: Product: syz [ 204.125160][ T5823] usb 4-1: Manufacturer: syz [ 204.142442][ T5823] usb 4-1: SerialNumber: syz [ 204.174043][ T5823] usb 4-1: config 0 descriptor?? [ 204.434915][ T7345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.447579][ T5823] usb 4-1: selecting invalid altsetting 0 [ 204.560294][ T7345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.629749][ T5956] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 204.803672][ T5956] usb 2-1: config 0 has no interfaces? [ 204.822901][ T5956] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 204.833344][ T5956] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.847374][ T5956] usb 2-1: Product: syz [ 204.851866][ T5956] usb 2-1: Manufacturer: syz [ 204.864438][ T5956] usb 2-1: SerialNumber: syz [ 204.880266][ T5956] usb 2-1: config 0 descriptor?? [ 204.937112][ T5893] usb 4-1: USB disconnect, device number 7 [ 204.990961][ T6143] udevd[6143]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 205.205212][ T7337] macvlan2: entered promiscuous mode [ 205.210872][ T7337] bridge0: entered promiscuous mode [ 205.278235][ T7352] netlink: 8 bytes leftover after parsing attributes in process `syz.4.169'. [ 205.569163][ T5823] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 205.891419][ T5823] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 2056, setting to 64 [ 205.909937][ T5823] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0093, bcdDevice=23.5a [ 205.928519][ T5823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.021743][ T5823] usb 3-1: Product: syz [ 206.028148][ T5823] usb 3-1: Manufacturer: syz [ 206.044839][ T5823] usb 3-1: SerialNumber: syz [ 206.066865][ T5823] usb 3-1: config 0 descriptor?? [ 206.890922][ T7363] netlink: 468 bytes leftover after parsing attributes in process `syz.0.175'. [ 206.946586][ T5823] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-8 [ 206.961926][ T5823] dvb_usb_af9035 3-1:0.0: probe with driver dvb_usb_af9035 failed with error -8 [ 207.126413][ T5823] usb 3-1: USB disconnect, device number 10 [ 207.457659][ T5892] usb 5-1: unable to get BOS descriptor or descriptor too short [ 207.472858][ T5892] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 207.514049][ T5892] usb 5-1: can't read configurations, error -71 [ 207.624170][ T5823] usb 2-1: USB disconnect, device number 9 [ 207.744803][ T7375] netlink: 468 bytes leftover after parsing attributes in process `syz.4.176'. [ 207.959418][ T5893] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 208.110110][ T5914] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 208.133763][ T5893] usb 3-1: Using ep0 maxpacket: 8 [ 208.144383][ T5893] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 208.153733][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.161866][ T5893] usb 3-1: Product: syz [ 208.169065][ T5893] usb 3-1: Manufacturer: syz [ 208.178903][ T5893] usb 3-1: SerialNumber: syz [ 208.202688][ T5893] usb 3-1: config 0 descriptor?? [ 208.227605][ T5893] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 208.266816][ T5914] usb 4-1: config 0 has no interfaces? [ 208.308017][ T5914] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 208.383760][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.509464][ T5914] usb 4-1: Product: syz [ 208.519427][ T5914] usb 4-1: Manufacturer: syz [ 208.559333][ T5914] usb 4-1: SerialNumber: syz [ 208.863904][ T5914] usb 4-1: config 0 descriptor?? [ 208.923969][ T7389] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 208.934340][ T7388] Invalid option length (1243) for dns_resolver key [ 209.100379][ T7380] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.110078][ T7380] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.023594][ T7391] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 210.082528][ T5893] gspca_sonixj: i2c_w8 err -71 [ 210.119584][ T5893] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 210.135050][ T5893] usb 3-1: USB disconnect, device number 11 [ 211.543322][ T5914] usb 4-1: USB disconnect, device number 8 [ 211.685637][ T5841] Bluetooth: hci0: command 0x0406 tx timeout [ 211.692451][ T5841] Bluetooth: hci1: command 0x0406 tx timeout [ 211.698966][ T5841] Bluetooth: hci3: command 0x0406 tx timeout [ 211.705222][ T5841] Bluetooth: hci2: command 0x0406 tx timeout [ 211.711712][ T5841] Bluetooth: hci4: command 0x0406 tx timeout [ 212.339745][ T5914] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 212.829292][ T5914] usb 5-1: Using ep0 maxpacket: 16 [ 214.359378][ T5923] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 214.642202][ T7440] geneve2: entered promiscuous mode [ 214.655907][ T5923] usb 3-1: config 0 has an invalid interface number: 224 but max is 0 [ 214.821639][ T5923] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.833176][ T5923] usb 3-1: config 0 has no interface number 0 [ 214.852051][ T5923] usb 3-1: New USB device found, idVendor=0f11, idProduct=2000, bcdDevice=c7.bc [ 214.861506][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.869797][ T5923] usb 3-1: Product: syz [ 214.874227][ T5923] usb 3-1: Manufacturer: syz [ 214.885494][ T5923] usb 3-1: SerialNumber: syz [ 214.892779][ T5923] usb 3-1: config 0 descriptor?? [ 214.914369][ T5923] ldusb 3-1:0.224: Interrupt in endpoint not found [ 215.061233][ T7441] netlink: 'syz.3.191': attribute type 7 has an invalid length. [ 215.230733][ T7441] : entered promiscuous mode [ 215.295693][ T7447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.398671][ T7447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.993663][ T7451] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 216.047670][ T7433] syz.3.191 (7433): drop_caches: 2 [ 216.344893][ T5914] usb 5-1: unable to get BOS descriptor or descriptor too short [ 216.489799][ T5914] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 216.521046][ T5914] usb 5-1: can't read configurations, error -71 [ 216.959311][ T5893] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 217.168751][ T5893] usb 4-1: config 0 has no interfaces? [ 217.226910][ T5893] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 217.276697][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.308365][ T5893] usb 4-1: Product: syz [ 217.318283][ T5893] usb 4-1: Manufacturer: syz [ 217.328552][ T5893] usb 4-1: SerialNumber: syz [ 217.336701][ T5893] usb 4-1: config 0 descriptor?? [ 217.409866][ T5893] usb 3-1: USB disconnect, device number 12 [ 217.581584][ T7456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.591610][ T7456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.909127][ T7480] bridge1: entered promiscuous mode [ 219.504014][ T7504] program syz.1.216 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 219.752802][ T7509] bridge1: entered promiscuous mode [ 221.428674][ T5914] usb 4-1: USB disconnect, device number 9 [ 222.809371][ T5893] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 223.029311][ T5893] usb 2-1: Using ep0 maxpacket: 16 [ 223.094602][ T5893] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 223.105684][ T5893] usb 2-1: config 0 has no interface number 0 [ 223.244757][ T5893] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 223.272717][ T5893] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 223.292081][ T5893] usb 2-1: config 0 interface 41 has no altsetting 0 [ 223.389448][ T5893] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 223.398557][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.489662][ T5893] usb 2-1: Product: syz [ 223.538729][ T5893] usb 2-1: Manufacturer: syz [ 223.550366][ T5893] usb 2-1: SerialNumber: syz [ 223.623538][ T5893] usb 2-1: config 0 descriptor?? [ 223.630738][ T7546] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 223.638357][ T7546] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 225.397975][ T5893] dm9601 2-1:0.41: probe with driver dm9601 failed with error -71 [ 225.407302][ T5893] sr9700 2-1:0.41: probe with driver sr9700 failed with error -71 [ 225.473018][ T5893] usb 2-1: USB disconnect, device number 10 [ 226.125430][ T7573] netlink: 12 bytes leftover after parsing attributes in process `syz.1.236'. [ 230.093577][ T7630] bridge0: left promiscuous mode [ 231.089320][ T5914] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 231.160917][ T7650] usb usb8: usbfs: process 7650 (syz.3.261) did not claim interface 0 before use [ 231.258464][ T7651] netlink: 468 bytes leftover after parsing attributes in process `syz.0.264'. [ 231.273713][ T5914] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 231.282894][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.359318][ T5914] usb 5-1: Product: syz [ 231.363696][ T5914] usb 5-1: Manufacturer: syz [ 231.368343][ T5914] usb 5-1: SerialNumber: syz [ 231.507230][ T5914] usb 5-1: config 0 descriptor?? [ 231.943961][ T5956] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 232.339778][ T5956] usb 2-1: Using ep0 maxpacket: 32 [ 232.352595][ T5956] usb 2-1: unable to get BOS descriptor or descriptor too short [ 232.383444][ T5956] usb 2-1: config 7 has an invalid interface number: 111 but max is 0 [ 232.443612][ T5956] usb 2-1: config 7 has no interface number 0 [ 232.476211][ T5956] usb 2-1: New USB device found, idVendor=0481, idProduct=9f2e, bcdDevice=75.5b [ 232.514342][ T5956] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.539345][ T5956] usb 2-1: Product: syz [ 232.576741][ T5956] usb 2-1: Manufacturer: syz [ 232.598454][ T5956] usb 2-1: SerialNumber: syz [ 232.847200][ T5914] usb 5-1: non-Atmel transceiver xxxx0008 [ 233.131588][ T5914] usb 5-1: Firmware version (0.0) predates our first public release. [ 233.145738][ T5914] usb 5-1: Please update to version 0.2 or newer [ 233.156300][ T5914] usb 5-1: atusb_probe: initialization failed, error = -19 [ 233.178858][ T5956] usb 2-1: bad CDC descriptors [ 233.197620][ T5914] usb 5-1: USB disconnect, device number 14 [ 233.299610][ T5956] usb 2-1: USB disconnect, device number 11 [ 234.282042][ T7686] netlink: 'syz.3.278': attribute type 9 has an invalid length. [ 234.629601][ T7693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.279'. [ 234.669603][ T7693] openvswitch: netlink: nsh attribute has 5276 unknown bytes. [ 234.718288][ T7693] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 235.488828][ T7714] xt_hashlimit: max too large, truncated to 1048576 [ 235.949452][ T5823] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 236.130556][ T5823] usb 3-1: config index 0 descriptor too short (expected 65187, got 12) [ 236.151406][ T5823] usb 3-1: config 138 has too many interfaces: 76, using maximum allowed: 32 [ 236.173585][ T5823] usb 3-1: config 138 has an invalid descriptor of length 123, skipping remainder of the config [ 236.202246][ T5823] usb 3-1: config 138 has 0 interfaces, different from the descriptor's value: 76 [ 236.214787][ T5823] usb 3-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=fb.16 [ 236.229268][ T5823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.237322][ T5823] usb 3-1: Product: syz [ 236.249682][ T5823] usb 3-1: Manufacturer: syz [ 236.262262][ T5823] usb 3-1: SerialNumber: syz [ 236.449868][ T5914] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 236.574970][ T5823] usb 3-1: USB disconnect, device number 13 [ 236.714474][ T7742] netlink: 468 bytes leftover after parsing attributes in process `syz.0.296'. [ 236.745853][ T5914] usb 2-1: Using ep0 maxpacket: 8 [ 236.786955][ T5914] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 236.805159][ T5914] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 236.814534][ T5914] usb 2-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3 [ 236.834780][ T5914] usb 2-1: Product: syz [ 236.918784][ T5914] usb 2-1: Manufacturer: syz [ 236.933789][ T5914] usb 2-1: SerialNumber: syz [ 236.953907][ T5914] usb 2-1: config 0 descriptor?? [ 236.983505][ T5914] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 237.262342][ T5914] gspca_zc3xx: reg_w_i err -71 [ 237.939271][ T5914] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 237.945779][ T5914] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 237.984034][ T5914] usb 2-1: USB disconnect, device number 12 [ 238.120841][ T7756] netlink: 56 bytes leftover after parsing attributes in process `syz.4.304'. [ 238.149434][ T7756] netlink: 56 bytes leftover after parsing attributes in process `syz.4.304'. [ 238.559434][ T5914] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 238.619440][ T5956] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 238.669834][ T7776] netlink: 16 bytes leftover after parsing attributes in process `syz.3.311'. [ 238.720695][ T5914] usb 2-1: Using ep0 maxpacket: 16 [ 238.751329][ T5914] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=f4.9b [ 238.789318][ T5956] usb 5-1: Using ep0 maxpacket: 8 [ 238.799328][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 238.800833][ T5956] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 238.807438][ T5914] usb 2-1: Product: syz [ 238.807464][ T5914] usb 2-1: SerialNumber: syz [ 238.832719][ T5914] usb 2-1: config 0 descriptor?? [ 238.838396][ T5956] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.846848][ T5956] usb 5-1: Product: syz [ 238.857934][ T5956] usb 5-1: Manufacturer: syz [ 238.868430][ T5914] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 238.878845][ T5956] usb 5-1: SerialNumber: syz [ 238.883372][ T5914] dvb_usb_af9015 2-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 238.911051][ T5956] usb 5-1: config 0 descriptor?? [ 238.926075][ T5914] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 238.941514][ T5914] dvb_usb_af9035 2-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 239.076719][ T5914] usb 2-1: USB disconnect, device number 13 [ 239.138553][ T5956] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 239.350102][ T5956] usb write operation failed. (-71) [ 239.371726][ T5956] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 239.475003][ T5956] dvbdev: DVB: registering new adapter (Terratec H7) [ 239.527029][ T5956] usb 5-1: media controller created [ 239.543798][ T5956] usb read operation failed. (-71) [ 239.586124][ T5956] usb write operation failed. (-71) [ 239.656496][ T5956] dvb_usb_az6007 5-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 239.689628][ T5956] usb 5-1: USB disconnect, device number 15 [ 240.131030][ T7813] kernel read not supported for file /╜ lhObэё~х╤h■╡РУ3ЮПJ╟╚y√x╨ю├№vўLк=QфR·n┴╖FGrВеЄПqЁ╧В├╗~QV7╢╖"qHсЧ╔d0Э·Ж°И╣Й¤%Nny╡Г▌D (pid: 7813 comm: syz.2.325) [ 240.180533][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 240.180548][ T30] audit: type=1804 audit(1750579849.350:34): pid=7815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.325" name=BD16206C684F62EDF17EE501D168FEB51D9093339E8F064AC7C879FB78D0EEC3FC76F74CAA3D51E452FA6EC1B746477282A5F28F71F0CF82C3BB7E517F567F37B6B7227148E11197C964309DFA86F888B989FD254E6E79B503831CDD4402 dev="mqueue" ino=13270 res=1 errno=0 [ 240.339542][ T5823] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 240.444428][ T30] audit: type=1800 audit(1750579849.540:35): pid=7813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.325" name=BD16206C684F62EDF17EE501D168FEB51D9093339E8F064AC7C879FB78D0EEC3FC76F74CAA3D51E452FA6EC1B746477282A5F28F71F0CF82C3BB7E517F567F37B6B7227148E11197C964309DFA86F888B989FD254E6E79B503831CDD4402 dev="mqueue" ino=13270 res=0 errno=0 [ 240.501700][ T5823] usb 2-1: Using ep0 maxpacket: 32 [ 240.527686][ T5823] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 240.539629][ T5823] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 240.550935][ T5823] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 240.574644][ T5823] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 240.614099][ T5823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.668868][ T5823] usb 2-1: config 0 descriptor?? [ 240.695384][ T7812] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 240.705644][ T5823] hub 2-1:0.0: USB hub found [ 241.079734][ T5823] hub 2-1:0.0: config failed, hub has too many ports! (err -19) [ 241.145471][ T7828] netlink: 12 bytes leftover after parsing attributes in process `syz.3.330'. [ 241.290139][ T5823] usbhid 2-1:0.0: can't add hid device: -71 [ 241.303358][ T5823] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 241.380964][ T5823] usb 2-1: USB disconnect, device number 14 [ 241.528886][ T7835] Failed to get privilege flags for destination (handle=0x2:0xd) [ 241.701638][ T7842] tipc: Started in network mode [ 241.708061][ T7842] tipc: Node identity 6, cluster identity 4711 [ 241.716369][ T7842] tipc: Node number set to 6 [ 241.728890][ T7842] tipc: Cannot configure node identity twice [ 242.797582][ T7866] netlink: 'syz.3.343': attribute type 4 has an invalid length. [ 242.959392][ T7866] netlink: 17 bytes leftover after parsing attributes in process `syz.3.343'. [ 243.342908][ T7881] netlink: 'syz.4.350': attribute type 11 has an invalid length. [ 244.343749][ T30] audit: type=1326 audit(1750579853.510:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7917 comm="syz.4.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f6f8e929 code=0x7ffc0000 [ 244.558807][ T30] audit: type=1326 audit(1750579853.510:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7917 comm="syz.4.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f6f8e929 code=0x7ffc0000 [ 244.649375][ T30] audit: type=1326 audit(1750579853.510:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7917 comm="syz.4.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7f61f6f8e929 code=0x7ffc0000 [ 244.698378][ T30] audit: type=1326 audit(1750579853.750:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7917 comm="syz.4.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f6f8e929 code=0x7ffc0000 [ 244.812869][ T30] audit: type=1326 audit(1750579853.750:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7917 comm="syz.4.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61f6f8e929 code=0x7ffc0000 [ 244.967514][ T7931] Failed to get privilege flags for destination (handle=0x2:0xd) [ 245.108956][ T7935] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 245.115553][ T7935] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 245.242123][ T7935] vhci_hcd vhci_hcd.0: Device attached [ 245.904048][ T5940] vhci_hcd: vhci_device speed not set [ 246.042948][ T7943] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.372'. [ 246.079312][ T5940] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 246.375284][ T7936] vhci_hcd: connection reset by peer [ 246.395906][ T12] vhci_hcd: stop threads [ 246.400369][ T12] vhci_hcd: release socket [ 246.421200][ T12] vhci_hcd: disconnect device [ 247.009389][ T5906] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 247.189361][ T5906] usb 4-1: Using ep0 maxpacket: 8 [ 247.218283][ T5906] usb 4-1: unable to get BOS descriptor or descriptor too short [ 247.261483][ T5906] usb 4-1: config 10 has an invalid interface number: 223 but max is 2 [ 247.314754][ T5906] usb 4-1: config 10 has an invalid interface number: 79 but max is 2 [ 247.331209][ T5906] usb 4-1: config 10 has an invalid descriptor of length 0, skipping remainder of the config [ 247.415945][ T5906] usb 4-1: config 10 has 2 interfaces, different from the descriptor's value: 3 [ 247.459906][ T5906] usb 4-1: config 10 has no interface number 0 [ 247.487440][ T5906] usb 4-1: config 10 has no interface number 1 [ 247.518853][ T5906] usb 4-1: config 10 interface 223 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 15 [ 247.601360][ T7960] netlink: 32 bytes leftover after parsing attributes in process `syz.1.378'. [ 247.612814][ T5906] usb 4-1: config 10 interface 79 altsetting 73 endpoint 0x1 has invalid wMaxPacketSize 0 [ 247.643234][ T5906] usb 4-1: config 10 interface 79 altsetting 73 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 247.721858][ T5906] usb 4-1: config 10 interface 223 has no altsetting 0 [ 247.811891][ T5906] usb 4-1: config 10 interface 79 has no altsetting 0 [ 247.832938][ T5906] usb 4-1: New USB device found, idVendor=2013, idProduct=025d, bcdDevice=a3.4b [ 247.852399][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.871547][ T5906] usb 4-1: Product: syz [ 247.882436][ T5906] usb 4-1: Manufacturer: syz [ 247.894996][ T5906] usb 4-1: SerialNumber: syz [ 248.183056][ T5906] dvb-usb: found a 'PCTV 2002e SE' in cold state, will try to load a firmware [ 248.192504][ T7968] No such timeout policy "syz1" [ 248.240817][ T5906] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 248.261793][ T5906] dib0700: firmware download failed at 7 with -8 [ 248.306737][ T5906] dvb-usb: found a 'PCTV 2002e SE' in cold state, will try to load a firmware [ 248.348871][ T5906] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 248.365923][ T5906] dib0700: firmware download failed at 7 with -8 [ 248.483905][ T5906] usb 4-1: USB disconnect, device number 10 [ 248.864225][ T7982] netlink: 24 bytes leftover after parsing attributes in process `syz.4.385'. [ 250.179429][ T5906] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 250.351483][ T5906] usb 3-1: config index 0 descriptor too short (expected 65187, got 12) [ 250.364498][ T5906] usb 3-1: config 138 has too many interfaces: 76, using maximum allowed: 32 [ 250.414406][ T5906] usb 3-1: config 138 has an invalid descriptor of length 123, skipping remainder of the config [ 250.468223][ T5906] usb 3-1: config 138 has 0 interfaces, different from the descriptor's value: 76 [ 250.503372][ T5906] usb 3-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=fb.16 [ 250.514369][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.532714][ T5906] usb 3-1: Product: syz [ 250.557336][ T5906] usb 3-1: Manufacturer: syz [ 250.597097][ T5906] usb 3-1: SerialNumber: syz [ 250.832861][ T5906] usb 3-1: USB disconnect, device number 14 [ 251.188093][ T5940] vhci_hcd: vhci_device speed not set [ 251.295027][ T8023] netlink: 468 bytes leftover after parsing attributes in process `syz.4.400'. [ 254.335257][ T8074] ipvlan2: entered promiscuous mode [ 254.344660][ T8074] ipvlan2: entered allmulticast mode [ 254.358197][ T8074] macvlan1: entered allmulticast mode [ 254.389486][ T8074] veth1_vlan: entered allmulticast mode [ 255.112555][ T8104] netlink: 'syz.0.432': attribute type 12 has an invalid length. [ 255.120925][ T8106] netlink: 20 bytes leftover after parsing attributes in process `syz.2.433'. [ 255.130158][ T8104] netlink: 'syz.0.432': attribute type 29 has an invalid length. [ 255.138021][ T8104] netlink: 148 bytes leftover after parsing attributes in process `syz.0.432'. [ 255.158281][ T8104] netlink: 59 bytes leftover after parsing attributes in process `syz.0.432'. [ 255.171974][ T5893] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 255.187877][ T8108] netlink: 8 bytes leftover after parsing attributes in process `syz.4.434'. [ 255.311303][ T5823] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 255.346194][ T5893] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.369277][ T5893] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.383827][ T5893] usb 4-1: config 0 interface 0 has no altsetting 0 [ 255.394357][ T5893] usb 4-1: New USB device found, idVendor=0c70, idProduct=f010, bcdDevice= 0.00 [ 255.405737][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.456491][ T5893] usb 4-1: config 0 descriptor?? [ 255.495736][ T5823] usb 2-1: config index 0 descriptor too short (expected 65187, got 12) [ 255.519335][ T5823] usb 2-1: config 138 has too many interfaces: 76, using maximum allowed: 32 [ 255.567536][ T5823] usb 2-1: config 138 has an invalid descriptor of length 123, skipping remainder of the config [ 255.583130][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.590451][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.612385][ T5823] usb 2-1: config 138 has 0 interfaces, different from the descriptor's value: 76 [ 255.635118][ T5823] usb 2-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=fb.16 [ 255.645455][ T5823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.668083][ T5823] usb 2-1: Product: syz [ 255.675647][ T5823] usb 2-1: Manufacturer: syz [ 255.682039][ T5823] usb 2-1: SerialNumber: syz [ 255.912478][ T5893] aquacomputer_d5next 0003:0C70:F010.0001: hidraw0: USB HID v0.00 Device [HID 0c70:f010] on usb-dummy_hcd.3-1/input0 [ 255.945609][ T5823] usb 2-1: USB disconnect, device number 15 [ 256.110572][ T5893] usb 4-1: USB disconnect, device number 11 [ 256.238985][ T8129] fido_id[8129]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 256.645330][ T8145] loop9: detected capacity change from 0 to 8 [ 256.695942][ T8145] Dev loop9: unable to read RDB block 8 [ 256.729565][ T8145] loop9: unable to read partition table [ 256.735484][ T8145] loop9: partition table beyond EOD, truncated [ 256.769486][ T8145] loop_reread_partitions: partition scan of loop9 (■швлx№        ) failed (rc=-5) [ 257.343918][ T8167] netlink: 20 bytes leftover after parsing attributes in process `syz.4.461'. [ 257.395756][ T8171] netlink: 20 bytes leftover after parsing attributes in process `syz.4.461'. [ 257.661965][ T8181] Failed to get privilege flags for destination (handle=0x2:0xd) [ 257.949112][ T5914] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 258.119964][ T8188] netlink: 'syz.4.468': attribute type 9 has an invalid length. [ 258.173708][ T5914] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 258.190900][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.348457][ T8193] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.467'. [ 258.369529][ T5914] usb 3-1: Product: syz [ 258.380186][ T5914] usb 3-1: Manufacturer: syz [ 258.425191][ T5914] usb 3-1: SerialNumber: syz [ 258.448775][ T5914] usb 3-1: config 0 descriptor?? [ 258.451106][ T8197] netlink: 8 bytes leftover after parsing attributes in process `syz.0.471'. [ 259.096561][ T8206] bridge1: entered promiscuous mode [ 259.780638][ T5914] usb 3-1: non-Atmel transceiver xxxx0008 [ 260.391410][ T5914] usb 3-1: Firmware version (0.0) predates our first public release. [ 260.399740][ T5914] usb 3-1: Please update to version 0.2 or newer [ 260.436023][ T5914] usb 3-1: atusb_probe: initialization failed, error = -19 [ 260.507061][ T5914] usb 3-1: USB disconnect, device number 15 [ 260.689951][ T5835] Bluetooth: hci3: unexpected event for opcode 0x0c1b [ 263.400593][ T8252] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.488'. [ 264.359636][ T5914] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 264.553543][ T5914] usb 4-1: Using ep0 maxpacket: 8 [ 264.575268][ T5914] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 264.604609][ T5914] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 264.629706][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.667665][ T5914] usb 4-1: config 0 descriptor?? [ 264.696246][ T5914] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 264.749436][ T5893] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 264.905721][ T5914] gspca_vc032x: reg_r err -32 [ 264.929499][ T5914] vc032x 4-1:0.0: probe with driver vc032x failed with error -32 [ 264.953147][ T5914] usb 4-1: USB disconnect, device number 12 [ 265.002916][ T5893] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 265.039017][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.055098][ T5893] usb 2-1: Product: syz [ 265.060000][ T5893] usb 2-1: Manufacturer: syz [ 265.064725][ T5893] usb 2-1: SerialNumber: syz [ 265.087538][ T5893] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 265.143466][ T5956] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 265.227925][ T8273] input: syz0 as /devices/virtual/input/input12 [ 265.272672][ T8273] fuse: Bad value for 'fd' [ 265.640034][ T8264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.649116][ T8264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.898964][ T5940] usb 2-1: USB disconnect, device number 16 [ 266.207244][ T8287] netlink: 4 bytes leftover after parsing attributes in process `syz.3.501'. [ 266.482987][ T5956] usb 2-1: Service connection timeout for: 256 [ 266.489920][ T5956] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 266.500548][ T5956] ath9k_htc: Failed to initialize the device [ 266.858997][ T5940] usb 2-1: ath9k_htc: USB layer deinitialized [ 267.687452][ T8303] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.507'. [ 268.895633][ T8203] Set syz1 is full, maxelem 65536 reached [ 269.216860][ T8289] syz.0.502 (8289): drop_caches: 2 [ 269.491997][ T8292] syz.0.502 (8292): drop_caches: 2 [ 269.529564][ T8301] syz.1.506 (8301): drop_caches: 2 [ 269.786840][ T8298] syz.1.506 (8298): drop_caches: 2 [ 270.001262][ T8324] netlink: 4 bytes leftover after parsing attributes in process `syz.4.513'. [ 270.011937][ T8324] netlink: 12 bytes leftover after parsing attributes in process `syz.4.513'. [ 271.509404][ T8339] input: syz0 as /devices/virtual/input/input13 [ 271.546682][ T8339] fuse: Unknown parameter '0x0000000000000006' [ 272.191549][ T8358] Failed to get privilege flags for destination (handle=0x2:0xd) [ 272.916844][ T8368] tipc: Started in network mode [ 272.922834][ T8368] tipc: Node identity 8, cluster identity 3 [ 272.931588][ T8368] tipc: Node number set to 8 [ 273.019259][ T5923] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 273.144888][ T8372] netlink: 'syz.0.531': attribute type 39 has an invalid length. [ 273.212563][ T5923] usb 3-1: config 0 has no interfaces? [ 273.223004][ T5923] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 273.232216][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.286310][ T5923] usb 3-1: Product: syz [ 273.324967][ T5923] usb 3-1: Manufacturer: syz [ 273.350516][ T5923] usb 3-1: SerialNumber: syz [ 273.455922][ T5923] usb 3-1: config 0 descriptor?? [ 273.938464][ T8361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.956714][ T8361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.928865][ T8408] netlink: 277 bytes leftover after parsing attributes in process `syz.1.544'. [ 275.385882][ T8413] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 275.565799][ T5893] usb 3-1: USB disconnect, device number 16 [ 276.413898][ T8433] Failed to get privilege flags for destination (handle=0x2:0xd) [ 276.475329][ T5835] Bluetooth: hci0: unexpected event for opcode 0x0803 [ 277.459254][ T5956] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 277.653019][ T5956] usb 3-1: config index 0 descriptor too short (expected 65187, got 12) [ 277.669375][ T5956] usb 3-1: config 138 has too many interfaces: 76, using maximum allowed: 32 [ 277.759209][ T5956] usb 3-1: config 138 has an invalid descriptor of length 123, skipping remainder of the config [ 277.785988][ T5956] usb 3-1: config 138 has 0 interfaces, different from the descriptor's value: 76 [ 277.852404][ T5956] usb 3-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=fb.16 [ 277.878838][ T5956] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.897587][ T5956] usb 3-1: Product: syz [ 277.938286][ T5956] usb 3-1: Manufacturer: syz [ 277.954125][ T5956] usb 3-1: SerialNumber: syz [ 278.342010][ T5956] usb 3-1: USB disconnect, device number 17 [ 279.569684][ T5823] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 279.579586][ T5956] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 279.780796][ T5823] usb 5-1: config 0 has no interfaces? [ 279.858170][ T5893] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 279.917052][ T5823] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 279.935662][ T5823] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.945075][ T5823] usb 5-1: Product: syz [ 279.949746][ T5823] usb 5-1: Manufacturer: syz [ 279.954587][ T5823] usb 5-1: SerialNumber: syz [ 280.027869][ T5956] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 280.040836][ T5823] usb 5-1: config 0 descriptor?? [ 280.138350][ T5956] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 280.204866][ T5956] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 280.224398][ T5956] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 280.248277][ T5956] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 280.285317][ T8487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.299201][ T8487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.541379][ T5835] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 280.551364][ T5835] Bluetooth: hci0: Injecting HCI hardware error event [ 280.559813][ T5843] Bluetooth: hci0: hardware error 0x00 [ 280.576401][ T5956] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.586584][ T5893] usb 2-1: config 0 has no interfaces? [ 280.634647][ T5956] usb 3-1: config 0 descriptor?? [ 280.644846][ T5893] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 280.659235][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.683868][ T8489] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 280.716342][ T5893] usb 2-1: Product: syz [ 280.733591][ T5893] usb 2-1: Manufacturer: syz [ 280.755479][ T5893] usb 2-1: SerialNumber: syz [ 280.799651][ T5893] usb 2-1: config 0 descriptor?? [ 281.108547][ T5956] plantronics 0003:047F:FFFF.0002: reserved main item tag 0xd [ 281.154568][ T5956] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 281.236823][ T5956] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 281.283461][ T8502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.292859][ T8502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.384003][ T5956] usb 3-1: USB disconnect, device number 18 [ 281.507854][ T8503] fido_id[8503]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 282.301308][ T5956] usb 5-1: USB disconnect, device number 16 [ 282.628248][ T5843] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 282.834865][ T5956] usb 2-1: USB disconnect, device number 17 [ 283.142240][ T5823] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 283.380979][ T5823] usb 5-1: config index 0 descriptor too short (expected 65187, got 12) [ 283.389667][ T5823] usb 5-1: config 138 has too many interfaces: 76, using maximum allowed: 32 [ 283.398496][ T5823] usb 5-1: config 138 has an invalid descriptor of length 123, skipping remainder of the config [ 283.434011][ T5823] usb 5-1: config 138 has 0 interfaces, different from the descriptor's value: 76 [ 283.464490][ T5823] usb 5-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=fb.16 [ 283.476336][ T5823] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.493080][ T5823] usb 5-1: Product: syz [ 283.497290][ T5823] usb 5-1: Manufacturer: syz [ 283.513038][ T5823] usb 5-1: SerialNumber: syz [ 284.115739][ T5823] usb 5-1: USB disconnect, device number 17 [ 285.414280][ T8539] netlink: 'syz.0.587': attribute type 12 has an invalid length. [ 286.590489][ T8549] netlink: 12 bytes leftover after parsing attributes in process `syz.3.590'. [ 286.649306][ T5923] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 286.851131][ T5923] usb 3-1: config 0 has no interfaces? [ 286.859598][ T5923] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 286.886127][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.929024][ T5923] usb 3-1: Product: syz [ 286.949604][ T5923] usb 3-1: Manufacturer: syz [ 286.957012][ T5923] usb 3-1: SerialNumber: syz [ 287.022126][ T5923] usb 3-1: config 0 descriptor?? [ 287.189266][ T5914] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 287.353466][ T8542] netlink: 'syz.2.588': attribute type 2 has an invalid length. [ 287.439271][ T5914] usb 4-1: Using ep0 maxpacket: 8 [ 287.499984][ T5914] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.535635][ T5914] usb 4-1: config 0 has no interfaces? [ 287.581814][ T5914] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 287.601795][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.647995][ T5914] usb 4-1: config 0 descriptor?? [ 287.679268][ T5893] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 287.864114][ T5893] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 287.897235][ T8551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.912593][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 287.913481][ T8551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.938653][ T5914] usb 4-1: USB disconnect, device number 13 [ 287.964716][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 287.996821][ T5893] usb 5-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 288.006485][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.015350][ T5893] usb 5-1: Product: syz [ 288.021258][ T5893] usb 5-1: Manufacturer: syz [ 288.026421][ T8570] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 288.032947][ T8570] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 288.040856][ T5893] usb 5-1: SerialNumber: syz [ 288.050430][ T5893] usb 5-1: config 0 descriptor?? [ 288.057744][ T8570] vhci_hcd vhci_hcd.0: Device attached [ 288.259737][ T5940] vhci_hcd: vhci_device speed not set [ 288.342482][ T5940] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 288.644749][ T5956] usb 3-1: USB disconnect, device number 19 [ 288.801340][ T8571] vhci_hcd: connection reset by peer [ 288.811467][ T36] vhci_hcd: stop threads [ 288.828430][ T36] vhci_hcd: release socket [ 288.843675][ T36] vhci_hcd: disconnect device [ 290.444377][ T8591] netlink: 28 bytes leftover after parsing attributes in process `syz.0.603'. [ 291.223243][ T8602] netlink: 708 bytes leftover after parsing attributes in process `syz.0.606'. [ 292.799882][ T5914] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 293.005048][ T5914] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 293.084634][ T5914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 293.114990][ T5914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 293.148944][ T5914] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 293.199334][ T5914] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 293.228351][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.300337][ T5914] usb 4-1: config 0 descriptor?? [ 293.309724][ T8609] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 293.489430][ T5940] vhci_hcd: vhci_device speed not set [ 293.700565][ T8627] input: syz0 as /devices/virtual/input/input16 [ 293.784209][ T5914] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 293.822816][ T5914] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 293.854626][ T5914] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 293.891522][ T5914] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 293.944828][ T5914] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 293.990802][ T5914] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 294.029901][ T5914] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 294.106428][ T5914] usb 4-1: USB disconnect, device number 14 [ 294.381838][ T8633] fido_id[8633]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 295.504432][ T8649] bridge_slave_0: left allmulticast mode [ 295.577807][ T8649] bridge_slave_0: left promiscuous mode [ 295.670317][ T8649] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.924235][ T8649] bridge_slave_1: left allmulticast mode [ 295.983449][ T8649] bridge_slave_1: left promiscuous mode [ 296.026935][ T8649] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.180682][ T8649] bond0: (slave bond_slave_0): Releasing backup interface [ 296.274927][ T8649] bond0: (slave bond_slave_1): Releasing backup interface [ 296.353275][ T8649] team0: Port device team_slave_0 removed [ 296.404913][ T8649] team0: Port device team_slave_1 removed [ 296.453216][ T8649] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 296.505897][ T8649] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 296.531329][ T8649] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 296.538781][ T8649] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 297.533615][ T8663] Failed to get privilege flags for destination (handle=0x2:0xd) [ 298.486046][ T8673] input: syz0 as /devices/virtual/input/input18 [ 298.673020][ T8676] delete_channel: no stack [ 299.079240][ T30] audit: type=1326 audit(1750579908.240:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8679 comm="syz.0.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd07af8e929 code=0x7ffc0000 [ 299.249445][ T30] audit: type=1326 audit(1750579908.240:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8679 comm="syz.0.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd07af8e929 code=0x7ffc0000 [ 299.373468][ T30] audit: type=1326 audit(1750579908.290:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8679 comm="syz.0.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd07af8e929 code=0x7ffc0000 [ 299.519270][ T30] audit: type=1326 audit(1750579908.290:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8679 comm="syz.0.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd07af8e929 code=0x7ffc0000 [ 299.608758][ T8682] vlan2: entered allmulticast mode [ 299.629299][ T30] audit: type=1326 audit(1750579908.290:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8679 comm="syz.0.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd07af8e929 code=0x7ffc0000 [ 299.649517][ T8682] vlan1: entered allmulticast mode [ 299.653254][ T30] audit: type=1326 audit(1750579908.300:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8679 comm="syz.0.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fd07af8e929 code=0x7ffc0000 [ 299.656692][ T8682] veth0_vlan: entered allmulticast mode [ 299.679130][ T30] audit: type=1326 audit(1750579908.300:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8679 comm="syz.0.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd07af8e929 code=0x7ffc0000 [ 299.707393][ T30] audit: type=1326 audit(1750579908.300:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8679 comm="syz.0.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd07af8e929 code=0x7ffc0000 [ 299.746889][ T30] audit: type=1326 audit(1750579908.300:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8679 comm="syz.0.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fd07af8e929 code=0x7ffc0000 [ 299.837414][ T30] audit: type=1326 audit(1750579908.300:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8679 comm="syz.0.631" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd07af8e929 code=0x7ffc0000 [ 300.064377][ T8682] syz.0.632 (8682) used greatest stack depth: 19832 bytes left [ 301.145524][ T8694] netlink: 4 bytes leftover after parsing attributes in process `syz.1.636'. [ 302.481937][ T8724] netlink: 4 bytes leftover after parsing attributes in process `syz.1.643'. [ 302.492971][ T8724] netlink: 12 bytes leftover after parsing attributes in process `syz.1.643'. [ 303.617350][ T5956] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 303.811348][ T5956] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 303.839526][ T5956] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 303.892547][ T5956] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 303.994006][ T5956] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 304.118368][ T5956] usb 3-1: SerialNumber: syz [ 304.393681][ T5956] usb 3-1: 0:2 : does not exist [ 304.541367][ T5956] usb 3-1: USB disconnect, device number 20 [ 304.660042][ T5962] udevd[5962]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 304.681397][ T8743] netlink: 708 bytes leftover after parsing attributes in process `syz.3.648'. [ 308.347918][ T8777] netlink: 4 bytes leftover after parsing attributes in process `syz.0.657'. [ 308.364876][ T8777] netlink: 12 bytes leftover after parsing attributes in process `syz.0.657'. [ 308.699951][ T5893] iguanair 5-1:0.0: failed to get version [ 308.719032][ T5893] iguanair 5-1:0.0: probe with driver iguanair failed with error -110 [ 308.779719][ T5893] usb 5-1: USB disconnect, device number 18 [ 308.792150][ T8779] kvm: pic: non byte write [ 308.796974][ T8779] kvm: pic: non byte write [ 308.849542][ T8779] kvm: pic: non byte write [ 308.937187][ T8779] kvm: pic: non byte write [ 308.960674][ T8779] kvm: pic: non byte write [ 308.975827][ T8779] kvm: pic: non byte write [ 308.989674][ T8779] kvm: pic: non byte write [ 309.015031][ T8779] kvm: pic: non byte write [ 309.047651][ T8779] kvm: pic: non byte write [ 309.084830][ T8779] kvm: pic: non byte write [ 310.169463][ T5893] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 310.182972][ T8807] netlink: 161716 bytes leftover after parsing attributes in process `syz.0.668'. [ 310.194516][ T8807] netlink: zone id is out of range [ 310.238566][ T8807] netlink: zone id is out of range [ 310.256735][ T8807] netlink: zone id is out of range [ 310.264964][ T8807] netlink: zone id is out of range [ 310.270416][ T8807] netlink: zone id is out of range [ 310.276028][ T8807] netlink: zone id is out of range [ 310.282688][ T8807] netlink: zone id is out of range [ 310.289401][ T8807] netlink: zone id is out of range [ 310.294991][ T8807] netlink: zone id is out of range [ 310.300580][ T8807] netlink: zone id is out of range [ 310.329314][ T5893] usb 4-1: Using ep0 maxpacket: 32 [ 310.339984][ T5893] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 310.362219][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.424770][ T5893] usb 4-1: config 0 descriptor?? [ 310.658581][ T5893] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 310.665459][ T5960] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 310.737586][ T5893] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 310.831306][ T5893] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 310.982405][ T5893] usb 4-1: media controller created [ 311.051679][ T8802] az6027: more than 2 i2c messages at a time is not handled yet. TODO. [ 311.071519][ T5960] usb 2-1: config index 0 descriptor too short (expected 65187, got 12) [ 311.109556][ T5960] usb 2-1: config 138 has too many interfaces: 76, using maximum allowed: 32 [ 311.248357][ T5960] usb 2-1: config 138 has an invalid descriptor of length 123, skipping remainder of the config [ 311.271141][ T5893] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 311.289230][ T5960] usb 2-1: config 138 has 0 interfaces, different from the descriptor's value: 76 [ 311.408176][ T8821] geneve2: entered promiscuous mode [ 311.453849][ T5960] usb 2-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=fb.16 [ 311.524829][ T5960] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.546239][ T5960] usb 2-1: Product: syz [ 311.556461][ T5960] usb 2-1: Manufacturer: syz [ 311.572145][ T5960] usb 2-1: SerialNumber: syz [ 311.582194][ T5893] az6027: usb out operation failed. (-71) [ 311.648792][ T5893] az6027: usb out operation failed. (-71) [ 311.659342][ T5893] stb0899_attach: Driver disabled by Kconfig [ 311.677184][ T5893] az6027: no front-end attached [ 311.677184][ T5893] [ 312.012029][ T5960] usb 2-1: USB disconnect, device number 18 [ 312.033036][ T5893] az6027: usb out operation failed. (-71) [ 312.059634][ T5893] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 312.136881][ T5893] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input19 [ 312.189734][ T5893] dvb-usb: schedule remote query interval to 400 msecs. [ 312.196760][ T5893] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 312.275186][ T5893] usb 4-1: USB disconnect, device number 15 [ 312.845310][ T5893] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 313.169240][ T5893] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 313.352994][ T5893] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 313.366803][ T5893] usb 4-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 313.377518][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.386049][ T5893] usb 4-1: Product: syz [ 313.390685][ T5893] usb 4-1: Manufacturer: syz [ 313.395372][ T5893] usb 4-1: SerialNumber: syz [ 313.443489][ T5893] usb 4-1: config 0 descriptor?? [ 313.571162][ T5893] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 313.648302][ T5893] dvb-usb: bulk message failed: -22 (3/0) [ 313.701970][ T5893] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 313.741603][ T5893] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 313.785578][ T5893] usb 4-1: media controller created [ 313.809016][ T5893] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 313.825799][ T8845] input: syz0 as /devices/virtual/input/input20 [ 313.862012][ T5893] dvb-usb: bulk message failed: -22 (6/0) [ 313.911196][ T5893] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 313.966166][ T5893] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input21 [ 314.025828][ T5893] dvb-usb: schedule remote query interval to 150 msecs. [ 314.059557][ T5893] dvb-usb: bulk message failed: -22 (3/0) [ 314.299019][ T5960] dvb-usb: bulk message failed: -22 (1/0) [ 314.311557][ T5960] dvb-usb: error while querying for an remote control event. [ 314.322962][ T5893] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 314.341301][ T5893] usb 4-1: USB disconnect, device number 16 [ 314.431405][ T5893] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 315.487456][ T5893] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 315.723790][ T8877] netlink: 4 bytes leftover after parsing attributes in process `syz.3.688'. [ 315.741877][ T5893] usb 5-1: config 0 has no interfaces? [ 315.865271][ T5893] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 315.897888][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.913487][ T5893] usb 5-1: Product: syz [ 315.925342][ T5893] usb 5-1: Manufacturer: syz [ 315.934099][ T5893] usb 5-1: SerialNumber: syz [ 315.994821][ T5893] usb 5-1: config 0 descriptor?? [ 316.374645][ T8869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.390851][ T8869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.054583][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.061212][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.149515][ T5906] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 317.345848][ T5906] usb 4-1: Using ep0 maxpacket: 16 [ 317.349342][ T5960] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 317.370362][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.402756][ T5906] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 317.439293][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.488987][ T5906] usb 4-1: config 0 descriptor?? [ 317.549483][ T5960] usb 3-1: Using ep0 maxpacket: 8 [ 317.622849][ T5960] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 317.637710][ T5960] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 317.648624][ T5960] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 317.737700][ T5960] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 317.807318][ T5960] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 317.822600][ T5960] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.857439][ T5960] hub 3-1:1.0: bad descriptor, ignoring hub [ 317.877335][ T5960] hub 3-1:1.0: probe with driver hub failed with error -5 [ 317.923316][ T5960] cdc_wdm 3-1:1.0: skipping garbage [ 317.932355][ T5906] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 317.941344][ T5960] cdc_wdm 3-1:1.0: skipping garbage [ 317.994405][ T5960] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 317.995188][ T5906] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 318.001872][ T5960] cdc_wdm 3-1:1.0: Unknown control protocol [ 318.105157][ T5906] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 318.155311][ T5906] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 318.182187][ T5960] usb 5-1: USB disconnect, device number 19 [ 318.186290][ T5906] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 318.296849][ T5906] mcp2221 0003:04D8:00DD.0004: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 318.437356][ T5906] usb 4-1: USB disconnect, device number 17 [ 318.524271][ T8908] fuse: Bad value for 'fd' [ 318.721504][ T8896] usb 3-1: reset high-speed USB device number 21 using dummy_hcd [ 319.030774][ T8916] netlink: 'syz.3.698': attribute type 1 has an invalid length. [ 319.058268][ T8917] input: syz0 as /devices/virtual/input/input22 [ 319.150371][ T8920] netlink: 28 bytes leftover after parsing attributes in process `syz.3.698'. [ 319.192309][ T8916] bond1: entered promiscuous mode [ 319.197377][ T8916] bond1: entered allmulticast mode [ 319.216221][ T8920] bond1: left promiscuous mode [ 319.298149][ T977] usb 3-1: USB disconnect, device number 21 [ 319.305354][ T5906] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 319.340553][ T8920] bond1: left allmulticast mode [ 319.351808][ T8920] 8021q: adding VLAN 0 to HW filter on device bond1 [ 319.383270][ T8919] geneve2: entered allmulticast mode [ 319.459742][ T8919] bond1: (slave geneve2): making interface the new active one [ 319.474686][ T8919] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 319.494968][ T5906] usb 2-1: Using ep0 maxpacket: 8 [ 319.515868][ T5906] usb 2-1: config 135 has an invalid interface number: 230 but max is 0 [ 319.524538][ T5906] usb 2-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 319.541884][ T5906] usb 2-1: config 135 has no interface number 0 [ 319.558022][ T5906] usb 2-1: config 135 interface 230 has no altsetting 0 [ 319.581511][ T5906] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 319.604874][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.627739][ T5906] usb 2-1: Product: syz [ 319.648967][ T5906] usb 2-1: Manufacturer: syz [ 319.660471][ T5906] usb 2-1: SerialNumber: syz [ 320.223692][ T5960] usb 2-1: USB disconnect, device number 19 [ 320.574161][ T5893] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 320.751981][ T5893] usb 3-1: Using ep0 maxpacket: 16 [ 320.763033][ T5893] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 320.872895][ T5893] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 320.895084][ T5893] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.976943][ T5893] usb 3-1: Product: syz [ 321.040222][ T5893] usb 3-1: Manufacturer: syz [ 321.057874][ T5893] usb 3-1: SerialNumber: syz [ 321.074373][ T5893] usb 3-1: config 0 descriptor?? [ 321.116454][ T5893] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 321.135966][ T5893] usb 3-1: Detected FT232R [ 321.329403][ T5893] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 321.331583][ T8935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.392173][ T8935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.521781][ T5956] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 321.641889][ T5893] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 321.654301][ T5893] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 321.665332][ T5893] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 321.684638][ T5956] usb 4-1: config 0 has no interfaces? [ 321.830407][ T5956] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 321.849443][ T5956] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.901427][ T5956] usb 4-1: Product: syz [ 321.908221][ T5956] usb 4-1: Manufacturer: syz [ 321.921313][ T8953] Failed to get privilege flags for destination (handle=0x2:0xd) [ 321.964368][ T5956] usb 4-1: SerialNumber: syz [ 321.974007][ T5893] usb 3-1: USB disconnect, device number 22 [ 321.987435][ T5956] usb 4-1: config 0 descriptor?? [ 322.003967][ T5893] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 322.021275][ T5893] ftdi_sio 3-1:0.0: device disconnected [ 322.391652][ T8946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.401910][ T8946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.593339][ T8964] input: syz0 as /devices/virtual/input/input23 [ 324.619351][ T5843] Bluetooth: hci2: command 0x0406 tx timeout [ 324.626199][ T5893] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 324.648243][ T5893] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 324.984124][ T8979] input: syz0 as /devices/virtual/input/input24 [ 325.622300][ T8988] ptrace attach of "./syz-executor exec"[5848] was attempted by "./syz-executor exec"[8988] [ 326.439269][ T5892] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 326.592954][ T5892] usb 2-1: config index 0 descriptor too short (expected 65187, got 12) [ 326.643300][ T5892] usb 2-1: config 138 has too many interfaces: 76, using maximum allowed: 32 [ 326.675272][ T5892] usb 2-1: config 138 has an invalid descriptor of length 123, skipping remainder of the config [ 326.686697][ T5892] usb 2-1: config 138 has 0 interfaces, different from the descriptor's value: 76 [ 326.698570][ T5892] usb 2-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=fb.16 [ 326.715965][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.724502][ T5892] usb 2-1: Product: syz [ 326.728787][ T5892] usb 2-1: Manufacturer: syz [ 326.744739][ T5892] usb 2-1: SerialNumber: syz [ 326.779499][ T5893] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 326.780076][ T5843] Bluetooth: hci1: command 0x0406 tx timeout [ 326.832291][ T5893] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 327.056255][ T5892] usb 2-1: USB disconnect, device number 20 [ 329.019274][ T5843] Bluetooth: hci3: command 0x0406 tx timeout [ 329.028202][ T5893] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 329.252115][ T5893] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 330.907004][ T5892] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 331.143727][ T5892] usb 3-1: config index 0 descriptor too short (expected 31, got 27) [ 331.173339][ T5892] usb 3-1: config 1 interface 0 has no altsetting 0 [ 331.223202][ T5892] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= b.72 [ 331.240797][ T5892] usb 3-1: New USB device strings: Mfr=28, Product=37, SerialNumber=3 [ 331.249995][ T5892] usb 3-1: Product: syz [ 331.254175][ T5892] usb 3-1: Manufacturer: syz [ 331.258775][ T5892] usb 3-1: SerialNumber: syz [ 331.499302][ T5843] Bluetooth: hci4: command 0x0406 tx timeout [ 331.636952][ T5893] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 331.655197][ T5893] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 331.923361][ T5892] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 23 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 332.199269][ T977] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 332.441434][ T977] usb 2-1: config index 0 descriptor too short (expected 65187, got 12) [ 332.459230][ T977] usb 2-1: config 138 has too many interfaces: 76, using maximum allowed: 32 [ 332.468089][ T977] usb 2-1: config 138 has an invalid descriptor of length 123, skipping remainder of the config [ 332.499210][ T977] usb 2-1: config 138 has 0 interfaces, different from the descriptor's value: 76 [ 332.522247][ T977] usb 2-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=fb.16 [ 332.552874][ T977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.569657][ T977] usb 2-1: Product: syz [ 332.573870][ T977] usb 2-1: Manufacturer: syz [ 332.589505][ T977] usb 2-1: SerialNumber: syz [ 332.859856][ T977] usb 2-1: USB disconnect, device number 21 [ 333.402826][ T9066] Failed to get privilege flags for destination (handle=0x2:0xd) [ 333.525486][ T9069] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 333.532075][ T9069] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 333.649047][ T9069] vhci_hcd vhci_hcd.0: Device attached [ 333.720684][ T10] usb 3-1: USB disconnect, device number 23 [ 333.743716][ T10] usblp0: removed [ 333.904390][ T5940] vhci_hcd: vhci_device speed not set [ 333.989231][ T5940] usb 35-1: new full-speed USB device number 3 using vhci_hcd [ 334.389314][ T9070] vhci_hcd: connection reset by peer [ 334.400373][ T13] vhci_hcd: stop threads [ 334.404644][ T13] vhci_hcd: release socket [ 334.431463][ T13] vhci_hcd: disconnect device [ 338.137021][ T10] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 338.358781][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 338.415620][ T10] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 338.460461][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.520502][ T10] usb 5-1: config 0 descriptor?? [ 338.539908][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 339.003733][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 339.029409][ T10] pwc: recv_control_msg error -32 req 02 val 2700 [ 339.079851][ T10] pwc: recv_control_msg error -32 req 02 val 2c00 [ 339.091950][ T10] pwc: recv_control_msg error -32 req 04 val 1000 [ 339.103545][ T10] pwc: recv_control_msg error -32 req 04 val 1300 [ 339.122538][ T10] pwc: recv_control_msg error -32 req 04 val 1400 [ 339.132722][ T10] pwc: recv_control_msg error -32 req 02 val 2000 [ 339.163034][ T10] pwc: recv_control_msg error -32 req 02 val 2100 [ 339.209542][ T10] pwc: recv_control_msg error -32 req 04 val 1500 [ 339.220813][ T5940] vhci_hcd: vhci_device speed not set [ 339.234400][ T10] pwc: recv_control_msg error -32 req 02 val 2500 [ 339.250825][ T10] pwc: recv_control_msg error -32 req 02 val 2400 [ 339.484979][ T10] pwc: recv_control_msg error -71 req 02 val 2900 [ 339.497885][ T10] pwc: recv_control_msg error -71 req 02 val 2800 [ 339.511197][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 339.518173][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 339.576591][ T10] pwc: Registered as video103. [ 339.626073][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input26 [ 340.206707][ T10] usb 5-1: USB disconnect, device number 20 [ 340.587353][ T9137] netlink: 468 bytes leftover after parsing attributes in process `syz.2.755'. [ 342.249295][ T9148] netlink: 12 bytes leftover after parsing attributes in process `syz.0.759'. [ 342.296345][ T9148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.759'. [ 342.539267][ T5940] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 342.721394][ T5940] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 342.732441][ T5940] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 342.779282][ T5940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.849815][ T5940] usb 3-1: config 0 descriptor?? [ 342.866357][ T5940] pwc: Askey VC010 type 2 USB webcam detected. [ 343.364302][ T5940] pwc: recv_control_msg error -32 req 02 val 2b00 [ 343.372917][ T5960] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 343.424847][ T5940] pwc: recv_control_msg error -32 req 02 val 2700 [ 343.467358][ T5940] pwc: recv_control_msg error -32 req 02 val 2c00 [ 343.574750][ T5960] usb 5-1: config 0 has no interfaces? [ 343.589113][ T5940] pwc: recv_control_msg error -32 req 04 val 1000 [ 343.599699][ T5940] pwc: recv_control_msg error -32 req 04 val 1300 [ 343.607866][ T5940] pwc: recv_control_msg error -32 req 04 val 1400 [ 343.615693][ T5940] pwc: recv_control_msg error -32 req 02 val 2000 [ 343.623487][ T5940] pwc: recv_control_msg error -32 req 02 val 2100 [ 343.632157][ T5940] pwc: recv_control_msg error -32 req 04 val 1500 [ 343.639633][ T5940] pwc: recv_control_msg error -32 req 02 val 2500 [ 343.646862][ T5940] pwc: recv_control_msg error -32 req 02 val 2400 [ 343.684733][ T5960] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 343.699220][ T5960] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.717587][ T5960] usb 5-1: Product: syz [ 343.727829][ T5960] usb 5-1: Manufacturer: syz [ 343.755731][ T5960] usb 5-1: SerialNumber: syz [ 343.782768][ T5960] usb 5-1: config 0 descriptor?? [ 343.871370][ T5940] pwc: recv_control_msg error -71 req 02 val 2900 [ 343.882916][ T5940] pwc: recv_control_msg error -71 req 02 val 2800 [ 343.890203][ T5940] pwc: recv_control_msg error -71 req 04 val 1100 [ 343.897322][ T5940] pwc: recv_control_msg error -71 req 04 val 1200 [ 343.922016][ T5940] pwc: Registered as video103. [ 343.954785][ T5940] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input27 [ 344.030637][ T9164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.041944][ T9164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.119629][ T5940] usb 3-1: USB disconnect, device number 24 [ 378.463620][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.466755][ C0] net_ratelimit: 674 callbacks suppressed [ 378.466778][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 378.472252][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.902595][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.908934][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 471.909435][ T31] INFO: task kworker/1:6:5956 blocked for more than 143 seconds. [ 471.917229][ T31] Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 [ 471.925067][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 471.933846][ T31] task:kworker/1:6 state:D stack:19480 pid:5956 tgid:5956 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 471.945952][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 471.952900][ T31] Call Trace: [ 471.956222][ T31] [ 471.960625][ T31] __schedule+0x16f5/0x4d00 [ 471.965211][ T31] ? schedule+0x165/0x360 [ 471.969701][ T31] ? __pfx___schedule+0x10/0x10 [ 471.974616][ T31] ? schedule+0x91/0x360 [ 471.978905][ T31] schedule+0x165/0x360 [ 471.983356][ T31] schedule_preempt_disabled+0x13/0x30 [ 471.988874][ T31] __mutex_lock+0x724/0xe80 [ 471.993528][ T31] ? look_up_lock_class+0x74/0x170 [ 471.998688][ T31] ? __mutex_lock+0x51b/0xe80 [ 472.003449][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 472.009932][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 472.015012][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 472.021103][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 472.026848][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 472.033223][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 472.038992][ T31] process_scheduled_works+0xae1/0x17b0 [ 472.044698][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 472.050840][ T31] worker_thread+0x8a0/0xda0 [ 472.055450][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 472.062010][ T31] ? __kthread_parkme+0x7b/0x200 [ 472.066997][ T31] kthread+0x70e/0x8a0 [ 472.071247][ T31] ? __pfx_worker_thread+0x10/0x10 [ 472.076418][ T31] ? __pfx_kthread+0x10/0x10 [ 472.081099][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 472.086383][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 472.091900][ T31] ? __pfx_kthread+0x10/0x10 [ 472.096555][ T31] ret_from_fork+0x3f9/0x770 [ 472.101262][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 472.106425][ T31] ? __switch_to_asm+0x39/0x70 [ 472.111275][ T31] ? __switch_to_asm+0x33/0x70 [ 472.116074][ T31] ? __pfx_kthread+0x10/0x10 [ 472.120806][ T31] ret_from_fork_asm+0x1a/0x30 [ 472.125623][ T31] [ 472.128673][ T31] INFO: task syz.3.705:8945 blocked for more than 143 seconds. [ 472.136309][ T31] Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 [ 472.144049][ T31] Blocked by coredump. [ 472.148656][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 472.157440][ T31] task:syz.3.705 state:D stack:24504 pid:8945 tgid:8941 ppid:5851 task_flags:0x40044c flags:0x00004006 [ 472.169452][ T31] Call Trace: [ 472.172737][ T31] [ 472.175674][ T31] __schedule+0x16f5/0x4d00 [ 472.180302][ T31] ? schedule+0x165/0x360 [ 472.184681][ T31] ? __pfx___schedule+0x10/0x10 [ 472.189634][ T31] ? schedule+0x91/0x360 [ 472.193920][ T31] schedule+0x165/0x360 [ 472.198095][ T31] schedule_preempt_disabled+0x13/0x30 [ 472.203804][ T31] __mutex_lock+0x724/0xe80 [ 472.208365][ T31] ? kobject_put+0x43f/0x480 [ 472.213068][ T31] ? __mutex_lock+0x51b/0xe80 [ 472.218231][ T31] ? rfkill_unregister+0xc8/0x220 [ 472.223475][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 472.228552][ T31] ? __pfx_device_del+0x10/0x10 [ 472.233482][ T31] rfkill_unregister+0xc8/0x220 [ 472.238522][ T31] nfc_unregister_device+0x96/0x2a0 [ 472.243824][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 472.249649][ T31] virtual_ncidev_close+0x56/0x90 [ 472.254706][ T31] __fput+0x44c/0xa70 [ 472.258709][ T31] task_work_run+0x1d1/0x260 [ 472.263405][ T31] ? __pfx_task_work_run+0x10/0x10 [ 472.268558][ T31] do_exit+0x6ad/0x22e0 [ 472.272793][ T31] ? do_raw_spin_lock+0x121/0x290 [ 472.277851][ T31] ? __pfx_do_exit+0x10/0x10 [ 472.282627][ T31] do_group_exit+0x21c/0x2d0 [ 472.287257][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 472.292547][ T31] get_signal+0x1286/0x1340 [ 472.297118][ T31] arch_do_signal_or_restart+0x9a/0x750 [ 472.302779][ T31] ? count_memcg_event_mm+0x21/0x260 [ 472.308142][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 472.314649][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 472.320223][ T31] exit_to_user_mode_loop+0x75/0x110 [ 472.325544][ T31] do_syscall_64+0x2bd/0x3b0 [ 472.330205][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 472.335441][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.341605][ T31] ? clear_bhb_loop+0x60/0xb0 [ 472.346325][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.352396][ T31] RIP: 0033:0x7f958b18e929 [ 472.356844][ T31] RSP: 002b:00007f958bf40038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 472.365339][ T31] RAX: 0000000000010106 RBX: 00007f958b3b6080 RCX: 00007f958b18e929 [ 472.373399][ T31] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 472.381680][ T31] RBP: 00007f958b210b39 R08: 0000000000000000 R09: 0000000000000000 [ 472.389900][ T31] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 472.397902][ T31] R13: 0000000000000001 R14: 00007f958b3b6080 R15: 00007f958b4dfa28 [ 472.405957][ T31] [ 472.409016][ T31] [ 472.409016][ T31] Showing all locks held in the system: [ 472.417159][ T31] 1 lock held by khungtaskd/31: [ 472.422261][ T31] #0: ffffffff8e13eda0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 472.432333][ T31] 2 locks held by getty/5592: [ 472.437032][ T31] #0: ffff88814c3610a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 472.446889][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 472.457113][ T31] 4 locks held by kworker/1:4/5893: [ 472.462376][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 472.473482][ T31] #1: ffffc900044ffbc0 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 472.484590][ T31] #2: ffffffff8f7eac28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_epo+0x4c/0x180 [ 472.494213][ T31] #3: ffff88807b1b6100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 472.503992][ T31] 3 locks held by kworker/1:6/5956: [ 472.509285][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 472.520590][ T31] #1: ffffc9000496fbc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 472.534361][ T31] #2: ffffffff8f7eac28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 472.545882][ T31] 1 lock held by syz.0.137/7159: [ 472.550893][ T31] #0: ffffffff8f7eac28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_release+0x4b/0x220 [ 472.561310][ T31] 1 lock held by syz.1.195/7445: [ 472.566301][ T31] #0: ffffffff8f7eac28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_release+0x4b/0x220 [ 472.576577][ T31] 1 lock held by syz.3.286/7715: [ 472.581564][ T31] #0: ffffffff8f7eac28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 472.591775][ T31] 2 locks held by syz.3.705/8945: [ 472.596829][ T31] #0: ffff88807b1b6100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 472.606671][ T31] #1: ffffffff8f7eac28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 472.616855][ T31] 2 locks held by syz-executor/9096: [ 472.622218][ T31] #0: ffff8880348f3918 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 472.632366][ T31] #1: ffffffff8f7eac28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 472.642632][ T31] 3 locks held by syz.4.762/9164: [ 472.647674][ T31] #0: ffffffff8e9c2748 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 472.656213][ T31] #1: ffff8880306b7100 (&dev->mutex){....}-{4:4}, at: nfc_register_device+0xa1/0x320 [ 472.665885][ T31] #2: ffffffff8f7eac28 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 472.675902][ T31] 1 lock held by syz.2.765/9178: [ 472.680902][ T31] #0: ffffffff8e9c2748 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 472.689463][ T31] 1 lock held by syz.0.766/9182: [ 472.694419][ T31] #0: ffffffff8e9c2748 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 472.702937][ T31] 1 lock held by syz.1.767/9224: [ 472.707895][ T31] #0: ffffffff8e9c2748 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 472.716885][ T31] 1 lock held by syz-executor/9227: [ 472.722248][ T31] #0: ffffffff8e9c2748 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 472.730823][ T31] 1 lock held by syz-executor/9228: [ 472.736055][ T31] #0: ffffffff8e9c2748 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 472.744627][ T31] 1 lock held by syz-executor/9229: [ 472.750106][ T31] #0: ffffffff8e9c2748 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 472.758615][ T31] 1 lock held by syz-executor/9230: [ 472.763874][ T31] #0: ffffffff8e9c2748 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 472.772425][ T31] [ 472.774756][ T31] ============================================= [ 472.774756][ T31] [ 472.783388][ T31] NMI backtrace for cpu 0 [ 472.783410][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 472.783433][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 472.783445][ T31] Call Trace: [ 472.783453][ T31] [ 472.783461][ T31] dump_stack_lvl+0x189/0x250 [ 472.783493][ T31] ? __wake_up_klogd+0xd9/0x110 [ 472.783518][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 472.783549][ T31] ? __pfx__printk+0x10/0x10 [ 472.783583][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 472.783612][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 472.783635][ T31] ? _printk+0xcf/0x120 [ 472.783660][ T31] ? __pfx__printk+0x10/0x10 [ 472.783684][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 472.783714][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 472.783743][ T31] watchdog+0xfee/0x1030 [ 472.783772][ T31] ? watchdog+0x1de/0x1030 [ 472.783811][ T31] kthread+0x70e/0x8a0 [ 472.783855][ T31] ? __pfx_watchdog+0x10/0x10 [ 472.783883][ T31] ? __pfx_kthread+0x10/0x10 [ 472.783909][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 472.783939][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 472.783969][ T31] ? __pfx_kthread+0x10/0x10 [ 472.783994][ T31] ret_from_fork+0x3f9/0x770 [ 472.784029][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 472.784066][ T31] ? __switch_to_asm+0x39/0x70 [ 472.784087][ T31] ? __switch_to_asm+0x33/0x70 [ 472.784108][ T31] ? __pfx_kthread+0x10/0x10 [ 472.784134][ T31] ret_from_fork_asm+0x1a/0x30 [ 472.784173][ T31] [ 472.784181][ T31] Sending NMI from CPU 0 to CPUs 1: [ 472.941452][ C1] NMI backtrace for cpu 1 [ 472.941468][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 472.941490][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 472.941502][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 472.941534][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 23 d6 21 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 472.941551][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 472.941567][ C1] RAX: 20bd6b36d0542200 RBX: ffffffff81975d58 RCX: 20bd6b36d0542200 [ 472.941582][ C1] RDX: 0000000000000001 RSI: ffffffff8d981f7e RDI: ffffffff8be28ac0 [ 472.941595][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f5b R09: 1ffff110170e65eb [ 472.941609][ C1] R10: dffffc0000000000 R11: ffffed10170e65ec R12: ffffffff8fa108f0 [ 472.941622][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003a58b40 [ 472.941634][ C1] FS: 0000000000000000(0000) GS:ffff888125d51000(0000) knlGS:0000000000000000 [ 472.941649][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 472.941662][ C1] CR2: 000055d09be6c168 CR3: 000000000df38000 CR4: 00000000003526f0 [ 472.941678][ C1] Call Trace: [ 472.941685][ C1] [ 472.941691][ C1] default_idle+0x13/0x20 [ 472.941710][ C1] default_idle_call+0x74/0xb0 [ 472.941729][ C1] do_idle+0x1e8/0x510 [ 472.941749][ C1] ? __pfx_do_idle+0x10/0x10 [ 472.941774][ C1] cpu_startup_entry+0x44/0x60 [ 472.941791][ C1] start_secondary+0x101/0x110 [ 472.941814][ C1] common_startup_64+0x13e/0x147 [ 472.941842][ C1] [ 472.942490][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 473.111632][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00318-g739a6c93cc75 #0 PREEMPT(full) [ 473.123622][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 473.133685][ T31] Call Trace: [ 473.136972][ T31] [ 473.139918][ T31] dump_stack_lvl+0x99/0x250 [ 473.144533][ T31] ? __asan_memcpy+0x40/0x70 [ 473.149154][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 473.154382][ T31] ? __pfx__printk+0x10/0x10 [ 473.158993][ T31] panic+0x2db/0x790 [ 473.162910][ T31] ? __pfx_panic+0x10/0x10 [ 473.167351][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 473.173181][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 473.178574][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 473.184760][ T31] watchdog+0x102d/0x1030 [ 473.189113][ T31] ? watchdog+0x1de/0x1030 [ 473.193552][ T31] kthread+0x70e/0x8a0 [ 473.197638][ T31] ? __pfx_watchdog+0x10/0x10 [ 473.202343][ T31] ? __pfx_kthread+0x10/0x10 [ 473.206950][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 473.212165][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 473.217380][ T31] ? __pfx_kthread+0x10/0x10 [ 473.221984][ T31] ret_from_fork+0x3f9/0x770 [ 473.226597][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 473.231735][ T31] ? __switch_to_asm+0x39/0x70 [ 473.236516][ T31] ? __switch_to_asm+0x33/0x70 [ 473.241293][ T31] ? __pfx_kthread+0x10/0x10 [ 473.245906][ T31] ret_from_fork_asm+0x1a/0x30 [ 473.250699][ T31] [ 473.254070][ T31] Kernel Offset: disabled [ 473.258407][ T31] Rebooting in 86400 seconds..