last executing test programs: 12.74744775s ago: executing program 3 (id=3448): socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) 11.882812957s ago: executing program 0 (id=3450): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x3d) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x35, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2404c8c0) r4 = syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r4, 0xc25c4110, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) 11.803573612s ago: executing program 1 (id=3451): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e00000004000280", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x4040840) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500, 0x1882}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x884) 11.204017802s ago: executing program 1 (id=3452): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x32, 0xf4, 0x49, 0x10, 0x9c0, 0x201, 0xaa4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe5, 0xa5, 0xc8}}]}}]}}, 0x0) openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3", 0x13}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}], 0x3, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)}, 0x40000300) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) socket$can_j1939(0x1d, 0x2, 0x7) modify_ldt$write2(0x11, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 10.738183103s ago: executing program 3 (id=3453): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x2, 0x6, 0x8000000000400, 0xe, 0x10003, 0x41, 0x400200cbf, 0xffd, 0x8006, 0x6, 0xfffffffffffffffc, 0x0, 0x5, 0x0, 0x69, 0x400], 0xeeee8000, 0x2011c0}) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x2c, 0xe, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20040804) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10.389192405s ago: executing program 3 (id=3454): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000540)={0x0, 0x4663, 0x400, 0x10000006, 0x2cc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_MKDIRAT={0x25, 0x59, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xa4}) io_uring_enter(r2, 0x40f9, 0x217, 0xa5, 0x0, 0x0) 9.086299811s ago: executing program 1 (id=3456): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000043242108d81301006230010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x7, @loopback, 0xe8a}}, 0xfdf7, 0x3, 0x6, 0x5c, 0xa}, &(0x7f0000000000)=0x98) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0x40045b0a, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000080)=0x200000000) r5 = dup2(r2, r2) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000300)=""/107, 0x0, 0x10000}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x5) read$FUSE(r5, &(0x7f0000004d80)={0x2020}, 0x2020) write$vhost_msg_v2(r5, &(0x7f0000000280)={0x2, 0x0, {&(0x7f0000000140)=""/128, 0x80, 0x0, 0x0, 0x2}}, 0x48) 8.521411179s ago: executing program 0 (id=3458): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd26, 0x8000006, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {}, {0x1, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x1, 0xffff}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x3c}}, 0x0) 8.186170881s ago: executing program 0 (id=3459): openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x141200, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000fc0)=0x2, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000006680)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xc7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000040)="13c6", 0x2}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x4e20, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0xe4010102}, 0x9c}, 0x1c, &(0x7f00000007c0)}}, {{&(0x7f00000002c0)={0xa, 0x4e21, 0x7, @empty, 0x2}, 0x1c, &(0x7f00000009c0), 0x0, &(0x7f0000004d40)=ANY=[@ANYBLOB="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"], 0x128}}], 0x3, 0x44) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0xfffff010}, {0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x1, 0xa1a}]}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x4000190, 0x0) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file1\x00') symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') 7.780060837s ago: executing program 3 (id=3460): semop(0x0, &(0x7f00000000c0)=[{0x4, 0xb}, {0x2}], 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r3 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b000100000000090400000101292000090509"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) shutdown(r0, 0x1) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) fsopen(&(0x7f0000000580)='overlay\x00', 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "268435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xf3d8}}}}}}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000340)=ANY=[@ANYBLOB="b8000000190001002dbd70000000000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0xb8}}, 0x0) syz_emit_ethernet(0x134, &(0x7f00000005c0)={@empty, @dev, @void, {@ipv6={0x86dd, @generic={0xe, 0x6, "44eb15", 0xfe, 0xc, 0xff, @mcast1, @remote, {[@fragment={0x87, 0x0, 0xb, 0x1, 0x0, 0xc, 0x64}, @hopopts={0x33, 0x2, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, @fragment={0xe2, 0x0, 0x2, 0x1, 0x0, 0x7, 0x64}, @routing={0x5c, 0x0, 0x1, 0x9}, @dstopts={0x89, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x930}]}, @srh={0x2b, 0x0, 0x4, 0x0, 0xff, 0x0, 0x100}], "0daab7d2b28ef00d83e4b460441001f11cf15c9005ba6ce12dfecc0ee12b143adfaddb00aedcb7d6c7f8e2834df7f15ed8e7f35248015307898fda9788281241e22a0333c2a86865657f3a60a1a99b8c85cc98860b287d769a01a74dae9856ace78c411f851571c97f3ac06410068deb781da8ae49af0ae2af57b577db1d9f7e12c36c1a73e207f8d16c07043c725b3cf3d4de712e8498e5e7f6632ee4066e372713bff02e7f8eb11707eab7f20d"}}}}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x81) socket$inet(0x10, 0x80000, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ip_mr_vif\x00') preadv(r7, &(0x7f00000009c0)=[{&(0x7f0000000140)=""/199, 0xc7}], 0x1, 0x43, 0x4) 7.002514559s ago: executing program 2 (id=3461): syz_usb_connect(0x0, 0x3f, &(0x7f0000000240)=ANY=[@ANYBLOB="12010002413b88400819151300000000000109022d00000000000009040000026bb22b000904fffffd1b070000091b40a10a14aa990809"], 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x14, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x2010}, 0x4001) writev(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f00000001c0)="84", 0x1}], 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 6.110257367s ago: executing program 0 (id=3463): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0), &(0x7f00000001c0)) r0 = gettid() pause() r1 = syz_open_procfs(r0, &(0x7f0000000180)='wchan\x00') pread64(r1, &(0x7f000001a240)=""/102400, 0x19000, 0x41e) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) 5.884745602s ago: executing program 4 (id=3464): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x4000000044402, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r1, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000280)) 5.820143417s ago: executing program 1 (id=3465): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000040), 0x10) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x40000c4) socket$caif_seqpacket(0x25, 0x5, 0x5) sendmsg(r1, 0x0, 0x40844) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='attr\x00') getdents64(r2, &(0x7f0000002f40)=""/4098, 0x1002) getdents64(r2, 0x0, 0x607a9e0a432a4785) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) recvmsg$can_bcm(r2, &(0x7f0000000580)={&(0x7f0000000180)=@ieee802154={0x24, @short}, 0x80, &(0x7f00000003c0)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4}, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5.342654308s ago: executing program 4 (id=3466): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) ioctl$BTRFS_IOC_SNAP_DESTROY(r2, 0x40305828, &(0x7f0000000200)={{r0}, "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"}) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7fe, 0xf83, 0x8}, 0x1c) bind$packet(r3, &(0x7f0000000040)={0x11, 0x18, r4, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}, 0x14) syz_emit_ethernet(0x11, &(0x7f00000000c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}, @void, {@llc={0x606, {@llc={0x6, 0xaa, '_'}}}}}, 0x0) write$FUSE_WRITE(r2, 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 5.129808282s ago: executing program 2 (id=3467): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000000c0)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) rt_sigaction(0x8, &(0x7f0000000080)={0x0, 0x88000007, 0x0}, 0x0, 0x8, &(0x7f0000000300)) lseek(0xffffffffffffffff, 0x9, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000100003800c00008008000340000000022c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a31000000001400000011006d"], 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000500000000000000010073797a300000000000000700000008000a40000000000900020073797a31000000000900010073797a2b0000000008000b40000000213c0000001e0a05010000000000000000070000070900020073797a31000000090001007304007b000000009a88353f91d7a08c0869be4000000022140000001000010000000000000000000084000a00f05115346170d8ffad7bc81b2e6dbcefe765e0f00178d99f4974a6ea216f24433194075ca870a836f260f7bbd057e09c775713b4e2fea06089c436cdd53305497c596efc782bc2c101aa4f51bc6d361c5da72c62c83dbdf759249a8879bc5f2401c5607874dc9fbc722b43776fb3d1cb90db28fe7ee67358ba2b4f020ba6e38b96360c2f18880b724d2d1cfc457493281d3af72addf60f38ddd0"], 0xc0}}, 0x0) r4 = inotify_init1(0x0) r5 = gettid() r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5991ee20139b401046a89606ffcf92e", "2c5be7c6", "a0ca05c0707e52f4"}, 0x28) ioctl$int_in(r6, 0x5452, &(0x7f0000000000)=0x7) recvfrom$inet6(r6, &(0x7f00000000c0)=""/3, 0x3, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) inotify_add_watch(r4, 0x0, 0x64000ba6) inotify_add_watch(r4, &(0x7f0000000180)='./control\x00', 0xa4000960) syz_open_dev$tty1(0xc, 0x4, 0x1) 5.040441998s ago: executing program 0 (id=3468): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x3d) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xd, 0x400009, 0x8, 0xa}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x35, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2404c8c0) r4 = syz_open_dev$sndpcmc(&(0x7f0000000a00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r4, 0xc25c4110, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) 5.028064908s ago: executing program 4 (id=3469): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd26, 0x8000006, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {}, {0x1, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x1, 0xffff}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x3c}}, 0x0) 4.834226342s ago: executing program 4 (id=3470): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000001600)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) recvmmsg(r0, &(0x7f0000000f00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=""/181, 0xb5}, 0x8000}], 0x1, 0x2, 0x0) 4.55200027s ago: executing program 4 (id=3471): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f"], 0x0) r2 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bond0\x00'}) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, 0x0, 0x20000000) timer_create(0x3, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{}, {0x0, 0x9}}, 0x0) syz_usb_disconnect(0xffffffffffffffff) bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e20, 0xf, @empty, 0x5}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000140)=[{{&(0x7f0000000440)={0xa, 0x4e20, 0x2, @empty, 0x6}, 0x1c, 0x0}}], 0x1, 0x20080058) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 3.93890509s ago: executing program 3 (id=3472): socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x5, 0xfa11, 0xffffffff}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, 0x0, 0x28200, 0x0) pread64(0xffffffffffffffff, &(0x7f000001a240)=""/102387, 0x18ff3, 0x100008) socket$nl_route(0x10, 0x3, 0x0) r3 = dup(r2) syz_io_uring_setup(0xc0f, &(0x7f00000000c0)={0x0, 0x6efd, 0x80, 0xffffffff, 0x1a}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0x1, 0x0, 0x4) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa08, 0x0) read$FUSE(r3, &(0x7f0000000fc0)={0x2020}, 0x2020) 3.706643796s ago: executing program 1 (id=3473): openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x141200, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000fc0)=0x2, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000006680)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xc7}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000040)="13c6", 0x2}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x4e20, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0xe4010102}, 0x9c}, 0x1c, &(0x7f00000007c0)}}, {{&(0x7f00000002c0)={0xa, 0x4e21, 0x7, @empty, 0x2}, 0x1c, &(0x7f00000009c0), 0x0, &(0x7f0000004d40)=ANY=[@ANYBLOB="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"], 0x128}}], 0x3, 0x44) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0xfffff010}, {0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x1, 0xa1a}]}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x4000190, 0x0) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file1\x00') symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') 2.306496178s ago: executing program 0 (id=3474): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0}) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0x0, 0x0, 0x102, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={0xffffffffffffffff, &(0x7f0000000300), 0x0}, 0x20) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x248400, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000002d0001000000000000000000040000800500"], 0x1c}], 0x1}, 0x310) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) io_setup(0x4, &(0x7f0000000340)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) syz_clone3(&(0x7f0000000980)={0x200, 0x0, 0x0, 0x0, {0x5}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0xd, &(0x7f0000000100)) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) 1.876492746s ago: executing program 2 (id=3475): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e000000040002800800", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x4040840) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500, 0x1882}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x884) 1.465825653s ago: executing program 1 (id=3476): setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000400)=0xffffffff, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$vbi(0x0, 0x0, 0x2) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(0xffffffffffffffff, 0x80044dfb, &(0x7f0000000100)) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000140)=@gcm_256={{0x303}, "b97ad606944eb94e", "4d36cef51ca13ebb3a9bc9793d6eb58c6f57e100", "069ea282", "27cc9aa51273fcd7"}, 0x38) r2 = io_uring_setup(0x2ef1, &(0x7f0000000000)={0x0, 0x5712, 0x10000, 0x0, 0x1}) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32, @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newtfilter={0x45c, 0x2c, 0xd27, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x0, 0x2}, {0x0, 0xffff}}, [@filter_kind_options=@f_route={{0xa}, {0x42c, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x30}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xcb}, @TCA_ROUTE4_TO={0x8, 0x2, 0xd9}, @TCA_ROUTE4_TO={0x8, 0x2, 0x77}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x400, 0x6, [@m_ife={0x104, 0x0, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @TCA_IFE_METALST={0x24, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x9}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x1}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x7}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x5}]}, @TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_DMAC={0xa, 0x3, @broadcast}, @TCA_IFE_METALST={0x20, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x7}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xdc7}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x5}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x81000, 0x14, 0xb, 0x24c}}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x2, 0x7, 0x6, 0x34}, 0x1}}]}, {0x3a, 0x6, "0ea71806f3e871fb2ea67b70aaf51cbd3a1b032a918b53df4ec82a4245c188246a2668940f5557b8f8f50f098e26f772f791aa3ff0d9"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_sample={0xa8, 0xd, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x5}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x7fffffff}]}, {0x61, 0x6, "55969814655b83225fb1b01058b504f5d42c17a6a81a416c3fc247c00069ca993c18a79ddbdc6262faeecb2159c1e8d10bad60d0f9c8cc95aa832d29894ac19cf5dd5c3b0b10e9beb22351f326014dbccf41ab0c19cb73c3a430a36d5d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_connmark={0x14c, 0x13, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffffd, 0x10001, 0xffffffffdffffff8, 0x4, 0x9}, 0x8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x9, 0x3, 0x16ce8f27, 0x3}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x5, 0xffffffffffffffff, 0x4, 0xbc}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x8, 0x0, 0x40cf, 0x5}, 0x1}}]}, {0xa9, 0x6, "8393ee2cb5d471dfd2617bad01c301e557bab9c54ec85b250567e712216ec78f954056b3d370a6d8fa91e7b8cf16571000bb8bb539d51c7d02535e285d630c47f5ce57953874bc2860c9b843b4504742eee6f27e87823f7d48d20c5c721b7d1630762009b7be7147753b2e65917813c7bc227855360167f58a10f1c0d4e3a7fb0d4a99aa8ee8cdcabc896f4fc8b871370867331daa5d5a29b49a6954452f62f73a5aa4253a"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ct={0x104, 0x10, 0x0, 0x0, {{0x7}, {0x64, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x5, 0x401}, @TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @TCA_CT_LABELS_MASK={0x14, 0x8, "bccbb9d74753fdd2505d2cbd8f41cb33"}, @TCA_CT_LABELS_MASK={0x14, 0x8, "494a7b305693eca430aba99ef6780a96"}, @TCA_CT_MARK={0x8, 0x5, 0xc}, @TCA_CT_LABELS_MASK={0x14, 0x8, "8369b65ab69a189ba57c5439ca8aaf84"}]}, {0x7b, 0x6, "d6cbfada3d5f6e111b162f98e8f458e2f444fed36de384b677f577e65c44aece8239ae88c765f268ddda03f733f147439d1c71289b0eb58b48096144cb43477fcb92c0240cf2e42226bcb818877fe3d52bf5b73537127d51491e33be6085204cd14e743d1afc7c4234696620b36722a6a94cee51bb419c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x84}, 0x8000) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, 0x0) close_range(r2, r3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001d40)=ANY=[@ANYBLOB="101300002d00090036bd70000100000004000000cb011180c708605d8a0c9549f671af21be3edd7313f3b3cefa17"], 0x1310}, 0x1, 0x0, 0x0, 0x20000004}, 0x84) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x880) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r7, 0x40505412, &(0x7f0000000040)={0x2, 0x4, 0xa, 0x0, 0x11}) 1.036102392s ago: executing program 3 (id=3477): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r0, 0x6, 0x22, 0xffffffffffffffff, &(0x7f00000002c0)=0x49) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$vbi(0x0, 0x0, 0x2) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) ioctl$I2C_RDWR(r2, 0x707, &(0x7f00000002c0)={&(0x7f00000001c0)=[{0x2, 0x8411, 0x67, &(0x7f00000006c0)="0203204bdcc36cda8907f47563863d1428f47b34551c000bce0f6bc6584f11a7489c77086d578392f81c669f9b0578538b41faa64481c8fe1f043d56f3203ca184bdaf84f9d6f14d361b23c1d6ee71bfe0e705f9a8e61c4ffefc0ada1d224410ec6bdf884ee7ff"}, {0x6, 0x1a01, 0x0, 0x0}], 0x2}) 895.063151ms ago: executing program 2 (id=3478): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="180000002400010e000000007d1e6056401a2b0d0400ae"], 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x4000) syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x18) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000008a40)="7c72bf03f7d9c0fd0826786ffcfb99e55c1272594d5be5c7", 0x18}, {&(0x7f0000008c80)="9d", 0x1}], 0x2}, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_tracing={0x1a, 0x28, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_query, @generic={0x10, 0x2, 0x2, 0x3, 0x5}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffd}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff4}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @alu={0x7, 0x1, 0xb, 0x9, 0x8, 0xfffffffffffffff8, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000080)='syzkaller\x00', 0x6, 0xe, &(0x7f00000000c0)=""/14, 0x40f00, 0x4, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x1, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x572a, 0xffffffffffffffff, 0x3, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000240)=[{0x4, 0x5, 0x7}, {0x3, 0x3, 0xe, 0x6}, {0x2, 0x3, 0x0, 0x16}], 0x10, 0x7}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000280)={r0, r4}) 513.862116ms ago: executing program 2 (id=3479): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$tipc(0x1e, 0x2, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 398.056514ms ago: executing program 4 (id=3480): seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0xfe, 0x7fff0000}]}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) close(r2) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x32) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000040), 0x0) recvmmsg(r3, &(0x7f0000002ec0), 0x0, 0x2, 0x0) preadv2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4080, 0xff0}], 0x1, 0x0, 0x0, 0x0) dup(r3) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000240), 0xfdef) read$FUSE(0xffffffffffffffff, &(0x7f0000002540)={0x2020}, 0xfdef) syz_mount_image$fuse(&(0x7f00000002c0), &(0x7f0000000300)='./file1\x00', 0x40, &(0x7f00000003c0)=ANY=[@ANYBLOB="66643de3dbd6a4f3fe431f0186e6f6356b303091c69957eeb92a6ebfe4d3ee02580e76844fbd67e13c24bd25e0a32e50923d2d530ccc51622c1acd303ec9cbb6c0617537100e41d0ce5d41c861c6d3f04d39c9d7355f52ef88bcb369d110331355", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000120000,user_id=', @ANYRESDEC, @ANYBLOB=',grou', @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x0000000000000006,allow_other,blksize=0x0000000000000c'], 0x1, 0x0, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffc, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) setitimer(0x2, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) getitimer(0x2, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000001ac0)={r6, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1c, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e8336300", "a9103939c787a16c1ca43f80026d1f3c4da06963dd89d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0xfffffffffffffffe]}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000002140)={0x1, &(0x7f0000000200)=[{0x6}]}) 0s ago: executing program 2 (id=3481): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r2, &(0x7f0000000200)=ANY=[@ANYBLOB='lock io'], 0xc) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000000000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) kernel console output (not intermixed with test programs): nder of the config [ 918.943012][T14837] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 918.980091][T14837] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 919.034323][T14837] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 919.111218][T14837] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 919.119766][T15386] usb 3-1: device descriptor read/64, error -71 [ 919.249589][T15386] usb usb3-port1: attempt power cycle [ 919.284389][T15272] usb 4-1: USB disconnect, device number 42 [ 919.317217][T15272] aircable ttyUSB0: aircable converter now disconnected from ttyUSB0 [ 919.336862][T15851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 919.355663][T15851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 919.362415][T14837] usb 2-1: invalid MIDI out EP 0 [ 919.387589][T15272] aircable 4-1:5.52: device disconnected [ 919.398012][T15851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 919.472498][T15851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 919.489829][T15851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 919.557752][T15851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 919.577884][T14837] snd-usb-audio: probe of 2-1:27.0 failed with error -22 [ 919.643059][ T4439] udevd[4439]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 919.669110][T15386] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 919.724474][T15386] usb 3-1: device descriptor read/8, error -71 [ 920.008345][T15944] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3091'. [ 920.009181][T15386] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 920.037317][T15851] device hsr_slave_0 entered promiscuous mode [ 920.056703][T14837] usb 2-1: USB disconnect, device number 61 [ 920.078847][T15851] device hsr_slave_1 entered promiscuous mode [ 920.101824][T15851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 920.118254][T15851] Cannot create hsr debugfs directory [ 920.119871][T15386] usb 3-1: device descriptor read/8, error -71 [ 920.209252][T14396] Bluetooth: hci2: command 0x040f tx timeout [ 920.279486][T15386] usb usb3-port1: unable to enumerate USB device [ 920.383164][T14363] device hsr_slave_0 left promiscuous mode [ 920.412059][T14363] device hsr_slave_1 left promiscuous mode [ 920.455819][T14363] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 920.522685][T14363] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 920.589517][T14363] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 920.635620][T14363] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 920.686060][T14363] device bridge_slave_1 left promiscuous mode [ 920.700546][T14363] bridge0: port 2(bridge_slave_1) entered disabled state [ 920.731535][T14363] device bridge_slave_0 left promiscuous mode [ 920.737764][T14363] bridge0: port 1(bridge_slave_0) entered disabled state [ 920.788024][T14363] device veth1_macvtap left promiscuous mode [ 920.808747][T14363] device veth0_macvtap left promiscuous mode [ 920.823243][T14363] device veth1_vlan left promiscuous mode [ 920.836281][T14363] device veth0_vlan left promiscuous mode [ 921.287550][T14363] bond11 (unregistering): Released all slaves [ 921.557269][T14363] bond10 (unregistering): (slave bridge12): Releasing backup interface [ 921.641780][T14363] bond10 (unregistering): Released all slaves [ 921.965386][T14363] bond9 (unregistering): Released all slaves [ 922.085360][T14363] bond8 (unregistering): Released all slaves [ 922.242178][T14363] bond7 (unregistering): Released all slaves [ 922.279599][T14363] bond6 (unregistering): Released all slaves [ 922.289066][T14396] Bluetooth: hci2: command 0x0419 tx timeout [ 922.403594][T14363] bond5 (unregistering): (slave bridge1): Releasing active interface [ 922.481752][T14363] bond5 (unregistering): Released all slaves [ 922.517800][T14363] bond4 (unregistering): Released all slaves [ 922.568604][T14363] bond3 (unregistering): Released all slaves [ 922.600424][T14363] bond2 (unregistering): Released all slaves [ 922.633215][T14363] bond1 (unregistering): Released all slaves [ 924.195341][T14363] team0 (unregistering): Port device team_slave_1 removed [ 924.481741][T14363] team0 (unregistering): Port device team_slave_0 removed [ 924.690930][T14363] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 924.827429][T14363] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 924.979240][T15386] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 925.199045][T15386] usb 4-1: Using ep0 maxpacket: 32 [ 925.209978][T15386] usb 4-1: unable to get BOS descriptor or descriptor too short [ 925.250146][T15386] usb 4-1: config 5 has an invalid interface number: 52 but max is 0 [ 925.258533][T15386] usb 4-1: config 5 has no interface number 0 [ 925.274862][T15386] usb 4-1: config 5 interface 52 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 925.302130][T15386] usb 4-1: string descriptor 0 read error: -22 [ 925.308455][T15386] usb 4-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=51.58 [ 925.319020][T15386] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.358767][T15999] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 925.374086][T15386] aircable 4-1:5.52: aircable converter detected [ 925.424335][T15386] usb 4-1: aircable converter now attached to ttyUSB0 [ 925.770362][T15272] usb 4-1: USB disconnect, device number 43 [ 925.801292][T15272] aircable ttyUSB0: aircable converter now disconnected from ttyUSB0 [ 925.826484][T15272] aircable 4-1:5.52: device disconnected [ 926.082754][T14363] bond0 (unregistering): Released all slaves [ 926.259368][T16005] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3101'. [ 926.663855][T16019] tipc: Enabling of bearer rejected, failed to enable media [ 926.738495][T15386] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 926.909182][T15386] usb 1-1: device descriptor read/64, error -71 [ 927.011452][T16020] device syzkaller0 entered promiscuous mode [ 927.024403][T16020] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 927.179030][T13032] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 927.189014][T15386] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 927.349078][T15386] usb 1-1: device descriptor read/64, error -71 [ 927.421960][T13032] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 927.479157][T15386] usb usb1-port1: attempt power cycle [ 927.501561][T13032] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 927.558891][T13032] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 927.678304][T13032] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 927.748348][T13032] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.812455][T13032] usb 3-1: invalid MIDI out EP 0 [ 927.899389][T15386] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 927.960311][T15386] usb 1-1: device descriptor read/8, error -71 [ 927.975316][T13032] snd-usb-audio: probe of 3-1:27.0 failed with error -22 [ 928.132637][T15851] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 928.185535][T15851] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 928.245323][T15851] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 928.259223][T15386] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 928.276934][T16051] udevd[16051]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 928.299765][T15386] usb 1-1: device descriptor read/8, error -71 [ 928.315667][T15851] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 928.362545][T13032] usb 3-1: USB disconnect, device number 54 [ 928.439639][T15386] usb usb1-port1: unable to enumerate USB device [ 928.877108][T15851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 928.950341][T14363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 928.965472][T14363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 929.008764][T15851] 8021q: adding VLAN 0 to HW filter on device team0 [ 929.082397][T14361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 929.115803][T14361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 929.167224][T14361] bridge0: port 1(bridge_slave_0) entered blocking state [ 929.174371][T14361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 929.197141][T14361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 929.236410][T14361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 929.256747][T14361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 929.274591][T14361] bridge0: port 2(bridge_slave_1) entered blocking state [ 929.281775][T14361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 929.298510][T14361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 929.318555][T14361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 929.345035][T14361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 929.367364][T14361] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 929.409207][T14361] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 929.424653][T13032] usb 2-1: new low-speed USB device number 62 using dummy_hcd [ 929.436296][T14361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 929.522757][T14361] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 929.597616][T14361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 929.643163][T13032] usb 2-1: config index 0 descriptor too short (expected 36753, got 34) [ 929.678981][T13032] usb 2-1: config 189 has too many interfaces: 113, using maximum allowed: 32 [ 929.696847][T14361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 929.733602][T13032] usb 2-1: config 189 has 1 interface, different from the descriptor's value: 113 [ 929.746988][T14361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 929.756848][T14361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 929.765074][T13032] usb 2-1: config 189 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 929.780089][T15851] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 929.794645][T13032] usb 2-1: config 189 interface 0 altsetting 0 has an invalid endpoint with address 0x97, skipping [ 929.809163][T13032] usb 2-1: config 189 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 929.835736][T13032] usb 2-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 929.877616][T13032] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 929.915077][T16068] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 929.934731][T13032] metro_usb 2-1:189.0: required endpoints missing [ 930.146050][T16068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 930.181052][T16068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 930.236879][T16068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 930.279347][T16068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 930.347433][T15386] usb 2-1: USB disconnect, device number 62 [ 931.052026][T14361] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 931.093066][T14361] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 931.133817][T15851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 931.349041][T14915] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 931.401701][T16098] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3113'. [ 931.422649][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.429745][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.504590][T16099] random: crng reseeded on system resumption [ 931.549115][T14915] usb 2-1: Using ep0 maxpacket: 32 [ 931.555783][T14915] usb 2-1: unable to get BOS descriptor or descriptor too short [ 931.595895][T14915] usb 2-1: config 5 has an invalid interface number: 52 but max is 0 [ 931.615082][T14915] usb 2-1: config 5 has no interface number 0 [ 931.634028][T14915] usb 2-1: config 5 interface 52 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 931.662595][T14915] usb 2-1: string descriptor 0 read error: -22 [ 931.679050][T14915] usb 2-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=51.58 [ 931.698468][T14915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.724257][T16088] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 931.738833][T14915] aircable 2-1:5.52: aircable converter detected [ 931.763730][T14915] usb 2-1: aircable converter now attached to ttyUSB0 [ 933.018149][T16117] tipc: Enabling of bearer rejected, failed to enable media [ 933.045630][T13032] usb 2-1: USB disconnect, device number 63 [ 933.080184][T13032] aircable ttyUSB0: aircable converter now disconnected from ttyUSB0 [ 933.097491][T16120] device syzkaller0 entered promiscuous mode [ 933.120661][T13032] aircable 2-1:5.52: device disconnected [ 933.465092][T14355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 933.499930][T14355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 933.555960][T14348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 933.568037][T14348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 933.593522][T14348] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 933.615625][T14348] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 933.647943][T15851] device veth0_vlan entered promiscuous mode [ 933.690800][T15851] device veth1_vlan entered promiscuous mode [ 933.766522][T14348] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 933.783083][T14348] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 933.811422][T14348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 933.827946][T14348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 933.854668][T15851] device veth0_macvtap entered promiscuous mode [ 933.875807][T15851] device veth1_macvtap entered promiscuous mode [ 933.929303][T15851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 933.952446][T15851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 933.972998][T15851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 934.007959][T15851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 934.019942][T15386] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 934.044450][T15851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 934.076419][T15851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 934.114701][T15851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 934.147877][T15851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 934.175647][T15851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 934.189049][T15386] usb 2-1: device descriptor read/64, error -71 [ 934.212900][T14348] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 934.233543][T14348] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 934.266142][T14348] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 934.279885][T14348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 934.300988][T15851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 934.313533][T15851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 934.335936][T15851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 934.366928][T15851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 934.385089][T15851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 934.409054][T15851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 934.419068][T15851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 934.439018][T15851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 934.461343][T15851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 934.469033][T15386] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 934.481444][T14348] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 934.500445][T14348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 934.529505][ T22] usb 4-1: new low-speed USB device number 44 using dummy_hcd [ 934.537268][T15851] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.559323][T15851] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.568086][T15851] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.578399][T15851] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 934.639407][T15386] usb 2-1: device descriptor read/64, error -71 [ 934.699069][ T22] usb 4-1: device descriptor read/64, error -71 [ 934.769262][T15386] usb usb2-port1: attempt power cycle [ 934.776401][T14363] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 934.789536][T14363] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 934.856724][T14348] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 934.884823][T14348] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 934.910184][T14348] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 934.967570][T14355] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 934.975110][ T22] usb 4-1: new low-speed USB device number 45 using dummy_hcd [ 935.063228][T16152] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3120'. [ 935.139101][ T22] usb 4-1: device descriptor read/64, error -71 [ 935.155874][T16157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3120'. [ 935.168462][T16157] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3120'. [ 935.189032][T15386] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 935.189464][T16156] tipc: Enabling of bearer rejected, failed to enable media [ 935.226363][T15386] usb 2-1: device descriptor read/8, error -71 [ 935.268287][T16156] device syzkaller0 entered promiscuous mode [ 935.280878][ T22] usb usb4-port1: attempt power cycle [ 935.509219][T15386] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 935.559750][T15386] usb 2-1: device descriptor read/8, error -71 [ 935.689134][ T22] usb 4-1: new low-speed USB device number 46 using dummy_hcd [ 935.699261][T15386] usb usb2-port1: unable to enumerate USB device [ 935.739584][ T22] usb 4-1: device descriptor read/8, error -71 [ 935.859189][T13032] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 936.019091][ T22] usb 4-1: new low-speed USB device number 47 using dummy_hcd [ 936.070934][T13032] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 936.089143][T13032] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 936.089527][ T22] usb 4-1: device descriptor read/8, error -71 [ 936.112922][T13032] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 936.134669][T13032] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 936.155864][T13032] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 936.249474][ T22] usb usb4-port1: unable to enumerate USB device [ 936.312592][T13032] usb 3-1: invalid MIDI out EP 0 [ 936.442436][T13032] snd-usb-audio: probe of 3-1:27.0 failed with error -22 [ 936.501754][T16011] udevd[16011]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 936.871951][T14837] usb 3-1: USB disconnect, device number 55 [ 938.161200][T14348] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.372180][T14361] tipc: Resetting bearer [ 938.439450][T16208] device syzkaller0 entered promiscuous mode [ 938.458136][T16204] tipc: Enabling of bearer rejected, failed to enable media [ 938.460844][T14396] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 938.485240][T14396] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 938.493719][T14396] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 938.502750][T14396] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 938.510381][T14396] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 938.517773][T14396] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 938.604508][T14348] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.749893][T14348] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.926489][T14348] team0: Port device netdevsim0 removed [ 938.983258][T14348] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 939.627402][T14348] tipc: Disabling bearer [ 939.634266][T14348] tipc: Disabling bearer [ 939.714067][T14348] tipc: Left network mode [ 939.978531][T16206] chnl_net:caif_netlink_parms(): no params data found [ 940.609198][ T48] Bluetooth: hci1: command 0x0409 tx timeout [ 940.653308][T16206] bridge0: port 1(bridge_slave_0) entered blocking state [ 940.661086][T16206] bridge0: port 1(bridge_slave_0) entered disabled state [ 940.669924][T16206] device bridge_slave_0 entered promiscuous mode [ 940.719490][T16244] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3132'. [ 940.805203][T16206] bridge0: port 2(bridge_slave_1) entered blocking state [ 940.830545][T16206] bridge0: port 2(bridge_slave_1) entered disabled state [ 940.893018][T16206] device bridge_slave_1 entered promiscuous mode [ 940.964970][T16246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3132'. [ 940.989004][T16246] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3132'. [ 941.173049][T16206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 941.417210][T16206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 941.490237][T16256] tipc: Enabling of bearer rejected, failed to enable media [ 941.537743][T16255] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3134'. [ 941.569123][T16255] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3134'. [ 941.602966][T16255] device bond0 entered promiscuous mode [ 941.618844][T16255] device bond_slave_0 entered promiscuous mode [ 941.635778][T16255] device bond_slave_1 entered promiscuous mode [ 941.647238][T16255] device bond0 left promiscuous mode [ 941.688439][T16255] device bond_slave_0 left promiscuous mode [ 941.718897][T16255] device bond_slave_1 left promiscuous mode [ 941.903779][T16206] team0: Port device team_slave_0 added [ 941.941857][T16257] device syzkaller0 entered promiscuous mode [ 941.967375][T16257] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 942.166350][T16206] team0: Port device team_slave_1 added [ 942.389066][T14915] usb 4-1: new low-speed USB device number 48 using dummy_hcd [ 942.559162][T14915] usb 4-1: device descriptor read/64, error -71 [ 942.628853][T16206] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 942.646693][T16206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 942.689093][ T48] Bluetooth: hci1: command 0x041b tx timeout [ 942.818959][T16206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 942.829899][T14915] usb 4-1: new low-speed USB device number 49 using dummy_hcd [ 942.989059][T14915] usb 4-1: device descriptor read/64, error -71 [ 943.109318][T14915] usb usb4-port1: attempt power cycle [ 943.395277][T16206] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 943.428647][T16206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 943.515640][T16206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 943.519685][T14915] usb 4-1: new low-speed USB device number 50 using dummy_hcd [ 943.536284][T16290] tipc: Enabling of bearer rejected, failed to enable media [ 943.560269][T16294] device syzkaller0 entered promiscuous mode [ 943.589586][T14915] usb 4-1: device descriptor read/8, error -71 [ 943.727446][T14348] device hsr_slave_0 left promiscuous mode [ 943.777716][T14348] device hsr_slave_1 left promiscuous mode [ 943.783912][ T14] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 943.864000][T14348] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 943.876236][T14348] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 943.899080][T14915] usb 4-1: new low-speed USB device number 51 using dummy_hcd [ 943.912255][T14348] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 943.923105][T14348] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 943.938213][T14348] device bridge_slave_1 left promiscuous mode [ 943.945715][T14915] usb 4-1: device descriptor read/8, error -71 [ 943.957226][T14348] bridge0: port 2(bridge_slave_1) entered disabled state [ 943.991677][T14348] device bridge_slave_0 left promiscuous mode [ 944.044714][T14348] bridge0: port 1(bridge_slave_0) entered disabled state [ 944.060943][ T14] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 944.079169][T14915] usb usb4-port1: unable to enumerate USB device [ 944.095484][ T14] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 944.167663][ T14] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 944.228455][ T14] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 944.257588][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 944.333883][ T14] usb 5-1: invalid MIDI out EP 0 [ 944.385390][T14348] device veth1_macvtap left promiscuous mode [ 944.398736][T14348] device veth0_macvtap left promiscuous mode [ 944.425666][T14348] device veth1_vlan left promiscuous mode [ 944.441106][T14348] device veth0_vlan left promiscuous mode [ 944.455529][ T14] snd-usb-audio: probe of 5-1:27.0 failed with error -22 [ 944.517629][T16011] udevd[16011]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 944.779207][ T48] Bluetooth: hci1: command 0x040f tx timeout [ 944.881232][T14348] bond8 (unregistering): Released all slaves [ 944.895048][T14837] usb 5-1: USB disconnect, device number 50 [ 944.906562][T14348] bond7 (unregistering): Released all slaves [ 944.935820][T14348] bond6 (unregistering): Released all slaves [ 944.966040][T14348] bond5 (unregistering): (slave bridge11): Releasing backup interface [ 945.042209][T14348] bond5 (unregistering): Released all slaves [ 945.434647][T14348] bond4 (unregistering): Released all slaves [ 945.466360][T14348] bond3 (unregistering): Released all slaves [ 945.587421][T14348] bond2 (unregistering): (slave bridge1): Releasing active interface [ 945.656988][T14348] bond2 (unregistering): Released all slaves [ 945.676324][T14348] bond1 (unregistering): Released all slaves [ 946.607235][T14348] team0 (unregistering): Port device team_slave_1 removed [ 946.691093][T14348] team0 (unregistering): Port device team_slave_0 removed [ 946.785697][T14348] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 946.853813][ T48] Bluetooth: hci1: command 0x0419 tx timeout [ 946.895347][T14348] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 947.387392][T14348] bond0 (unregistering): Released all slaves [ 947.698302][T16323] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3142'. [ 947.738848][T16206] device hsr_slave_0 entered promiscuous mode [ 947.879862][T16206] device hsr_slave_1 entered promiscuous mode [ 947.923436][T16206] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 947.949975][T16206] Cannot create hsr debugfs directory [ 948.104875][T16332] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3144'. [ 948.309099][T16336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3144'. [ 948.355699][T16336] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3144'. [ 948.397463][T16338] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3145'. [ 948.528138][T16338] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3145'. [ 948.802132][T16351] tipc: Enabling of bearer rejected, failed to enable media [ 948.869271][T16351] device syzkaller0 entered promiscuous mode [ 949.249878][T16365] netlink: 'syz.4.3149': attribute type 1 has an invalid length. [ 949.540552][T16206] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 949.550884][T16206] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 949.586067][T16206] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 949.606725][T16206] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 949.779095][T13032] usb 1-1: new low-speed USB device number 51 using dummy_hcd [ 949.899229][T16206] 8021q: adding VLAN 0 to HW filter on device bond0 [ 949.939562][T14357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 949.961538][T14357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 949.980576][T13032] usb 1-1: config index 0 descriptor too short (expected 36753, got 34) [ 950.007356][T13032] usb 1-1: config 189 has too many interfaces: 113, using maximum allowed: 32 [ 950.052418][T16206] 8021q: adding VLAN 0 to HW filter on device team0 [ 950.063528][T13032] usb 1-1: config 189 has 1 interface, different from the descriptor's value: 113 [ 950.092307][T14361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 950.117665][T14361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 950.126594][T13032] usb 1-1: config 189 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 950.148102][T14361] bridge0: port 1(bridge_slave_0) entered blocking state [ 950.155308][T14361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 950.173149][T13032] usb 1-1: config 189 interface 0 altsetting 0 has an invalid endpoint with address 0x97, skipping [ 950.187804][T13032] usb 1-1: config 189 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 950.225436][T13032] usb 1-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 950.234886][T14361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 950.248732][T14361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 950.258004][T13032] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 950.280748][T14361] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 950.294798][T16370] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 950.332651][T13032] metro_usb 1-1:189.0: required endpoints missing [ 950.351995][T14361] bridge0: port 2(bridge_slave_1) entered blocking state [ 950.359231][T14361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 950.383847][T14361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 950.400114][T14361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 950.438133][T14361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 950.478475][T14361] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 950.542799][T16370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 950.554856][T14361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 950.569348][T16370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 950.581977][T14361] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 950.611962][T16370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 950.632837][T14361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 950.648719][T16370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 950.653652][T14361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 950.685421][T14361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 950.713706][T14361] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 950.752498][T14361] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 950.792872][T16370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 950.887878][T16370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 951.623461][T16399] tipc: Enabling of bearer rejected, failed to enable media [ 951.657277][T16399] device syzkaller0 entered promiscuous mode [ 951.858352][T14348] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 951.888719][T14348] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 951.926079][T16206] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 951.994396][T14361] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 952.017316][T14361] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 952.133539][T14348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 952.166506][T14348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 952.222473][T14348] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 952.254292][T14348] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 952.293951][T16409] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3153'. [ 952.321861][T16206] device veth0_vlan entered promiscuous mode [ 952.409974][T16206] device veth1_vlan entered promiscuous mode [ 952.475720][T14348] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 952.496026][T14348] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 952.558752][T14348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 952.598696][ T14] usb 1-1: USB disconnect, device number 51 [ 952.622775][T14348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 952.688238][T16206] device veth0_macvtap entered promiscuous mode [ 952.716777][T16206] device veth1_macvtap entered promiscuous mode [ 952.847433][T16206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 952.877624][T16206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 952.913510][T16206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 952.948532][T16206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 952.988394][T16206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 953.029896][T16206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.071280][T16206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 953.103858][T16206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.170328][T16206] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 953.208534][T14355] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 953.237052][T14355] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 953.277297][T14355] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 953.298165][T14355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 953.343295][T16206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 953.374625][T16206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.412021][T16206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 953.433363][T16206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.452347][T16206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 953.471005][T16206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.505060][T16206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 953.544133][T16206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.578462][T16206] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 953.609485][T14357] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 953.638192][T14357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 953.695394][T16206] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.724850][T16206] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.741664][T16206] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.758548][T16206] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.778591][T16427] netlink: 'syz.3.3158': attribute type 10 has an invalid length. [ 953.843365][T16427] team0: Port device netdevsim0 added [ 954.266684][T14359] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 954.305450][T14359] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 954.401341][T14357] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 954.453035][T16439] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3160'. [ 954.454037][T14357] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 954.478577][T16439] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3160'. [ 954.491911][T14357] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 954.791170][T14348] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 955.049120][T14837] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 955.261953][T14837] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 955.282666][T14837] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 955.329511][T14837] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 955.375935][T14837] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 955.413534][T14837] usb 3-1: config 0 descriptor?? [ 955.923360][T16456] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3163'. [ 956.596522][T16472] netlink: 'syz.4.3166': attribute type 1 has an invalid length. [ 956.640713][T16472] device macvlan2 entered promiscuous mode [ 957.119135][T14915] usb 4-1: new low-speed USB device number 52 using dummy_hcd [ 957.187695][T16479] netlink: 'syz.1.3170': attribute type 1 has an invalid length. [ 957.279062][T14915] usb 4-1: device descriptor read/64, error -71 [ 957.548984][T14915] usb 4-1: new low-speed USB device number 53 using dummy_hcd [ 957.719025][T14915] usb 4-1: device descriptor read/64, error -71 [ 957.849273][T14915] usb usb4-port1: attempt power cycle [ 957.901389][ T22] usb 3-1: USB disconnect, device number 56 [ 958.291736][T14915] usb 4-1: new low-speed USB device number 54 using dummy_hcd [ 958.331993][T14915] usb 4-1: device descriptor read/8, error -71 [ 958.389128][ T22] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 958.409107][T16496] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3175'. [ 958.581080][ T22] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 958.607903][ T22] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 958.615645][T14915] usb 4-1: new low-speed USB device number 55 using dummy_hcd [ 958.643060][ T22] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 958.659955][T14915] usb 4-1: device descriptor read/8, error -71 [ 958.677666][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 958.716241][ T22] usb 3-1: config 0 descriptor?? [ 958.741487][T16503] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3177'. [ 958.755358][T16503] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3177'. [ 958.780729][T14915] usb usb4-port1: unable to enumerate USB device [ 959.098172][T16507] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3179'. [ 959.108011][T16507] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3179'. [ 959.140714][ T22] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 959.171507][ T22] cp2112 0003:10C4:EA90.0012: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 959.339445][ T22] cp2112 0003:10C4:EA90.0012: error requesting version [ 959.386017][ T22] cp2112: probe of 0003:10C4:EA90.0012 failed with error -5 [ 959.554588][T16515] netlink: 'syz.0.3181': attribute type 1 has an invalid length. [ 959.634732][T16517] bond2: (slave bridge1): making interface the new active one [ 959.673159][T16517] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 959.717452][T16515] device macvlan2 entered promiscuous mode [ 959.742495][T16515] device bond2 entered promiscuous mode [ 959.748292][T16515] device bridge1 entered promiscuous mode [ 959.761044][T16515] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 959.778765][T16515] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 959.806230][T16515] device bond2 left promiscuous mode [ 959.829113][T16515] device bridge1 left promiscuous mode [ 960.399275][T14915] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 960.477283][T16533] hub 9-0:1.0: USB hub found [ 960.484316][T16533] hub 9-0:1.0: 1 port detected [ 960.559257][T14837] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 960.602727][T14915] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 960.621105][T14915] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 960.634684][T14915] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 960.645666][T14915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 960.658881][T14915] usb 2-1: config 0 descriptor?? [ 960.719221][T14837] usb 4-1: device descriptor read/64, error -71 [ 960.989072][T14837] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 961.159459][T14837] usb 4-1: device descriptor read/64, error -71 [ 961.290515][T14837] usb usb4-port1: attempt power cycle [ 961.296499][T16541] netlink: 'syz.4.3185': attribute type 1 has an invalid length. [ 961.395978][T16541] device macvlan2 entered promiscuous mode [ 961.699130][T14837] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 961.743303][T14837] usb 4-1: device descriptor read/8, error -71 [ 961.764829][T16018] usb 3-1: USB disconnect, device number 57 [ 962.019124][T14837] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 962.059528][T14837] usb 4-1: device descriptor read/8, error -71 [ 962.179570][T14837] usb usb4-port1: unable to enumerate USB device [ 963.220070][T16018] usb 2-1: USB disconnect, device number 68 [ 963.659111][ T22] usb 4-1: new low-speed USB device number 60 using dummy_hcd [ 963.792503][T16018] usb 2-1: new low-speed USB device number 69 using dummy_hcd [ 963.870545][ T22] usb 4-1: config index 0 descriptor too short (expected 36753, got 34) [ 963.906078][ T22] usb 4-1: config 189 has too many interfaces: 113, using maximum allowed: 32 [ 963.925637][ T22] usb 4-1: config 189 has 1 interface, different from the descriptor's value: 113 [ 963.935435][ T22] usb 4-1: config 189 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 963.948009][ T22] usb 4-1: config 189 interface 0 altsetting 0 has an invalid endpoint with address 0x97, skipping [ 963.959168][ T22] usb 4-1: config 189 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 963.969444][T16018] usb 2-1: device descriptor read/64, error -71 [ 963.989035][ T22] usb 4-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 964.017265][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 964.044199][T16564] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 964.072305][ T22] metro_usb 4-1:189.0: required endpoints missing [ 964.217519][ T48] Bluetooth: hci0: command 0x0406 tx timeout [ 964.239482][T16573] netlink: 'syz.2.3194': attribute type 1 has an invalid length. [ 964.269102][T16018] usb 2-1: new low-speed USB device number 70 using dummy_hcd [ 964.288813][T16564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 964.363729][T16564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 964.425914][T16575] bond2: (slave bridge4): making interface the new active one [ 964.439021][T16018] usb 2-1: device descriptor read/64, error -71 [ 964.445648][T16564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 964.508715][T16564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 964.511435][T16575] bond2: (slave bridge4): Enslaving as an active interface with an up link [ 964.554903][T16564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 964.573494][T16018] usb usb2-port1: attempt power cycle [ 964.580787][T16564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 964.597404][T16573] device macvlan2 entered promiscuous mode [ 964.640256][T16573] device bond2 entered promiscuous mode [ 964.657382][T16573] device bridge4 entered promiscuous mode [ 964.689328][T16573] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 964.714512][T16573] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 964.807822][T16573] device bond2 left promiscuous mode [ 964.817676][T16573] device bridge4 left promiscuous mode [ 964.999785][T16018] usb 2-1: new low-speed USB device number 71 using dummy_hcd [ 965.039692][T16018] usb 2-1: device descriptor read/8, error -71 [ 965.267375][T16588] hub 9-0:1.0: USB hub found [ 965.272253][T14837] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 965.284074][T16588] hub 9-0:1.0: 1 port detected [ 965.309130][T16018] usb 2-1: new low-speed USB device number 72 using dummy_hcd [ 965.359679][T16018] usb 2-1: device descriptor read/8, error -71 [ 965.481063][T16018] usb usb2-port1: unable to enumerate USB device [ 965.511345][T14837] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 965.527938][T14837] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 965.558673][T14837] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 965.586275][T14837] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 965.606321][T14837] usb 3-1: config 0 descriptor?? [ 966.033483][T14837] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0 [ 966.055198][T14837] cp2112 0003:10C4:EA90.0013: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 966.241932][T14837] cp2112 0003:10C4:EA90.0013: error requesting version [ 966.258386][T14837] cp2112: probe of 0003:10C4:EA90.0013 failed with error -5 [ 966.457366][ T22] usb 4-1: USB disconnect, device number 60 [ 966.956277][T16600] random: crng reseeded on system resumption [ 967.383520][T16613] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3202'. [ 967.403032][T16613] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3202'. [ 968.139020][T13032] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 968.329174][T13032] usb 1-1: Using ep0 maxpacket: 32 [ 968.337777][T13032] usb 1-1: unable to get BOS descriptor or descriptor too short [ 968.385266][T13032] usb 1-1: config 5 has an invalid interface number: 52 but max is 0 [ 968.415859][T13032] usb 1-1: config 5 has no interface number 0 [ 968.438328][T13032] usb 1-1: config 5 interface 52 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 968.467057][T13032] usb 1-1: string descriptor 0 read error: -22 [ 968.507059][T13032] usb 1-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=51.58 [ 968.551599][T13032] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.589344][T16607] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 968.623172][T13032] aircable 1-1:5.52: aircable converter detected [ 968.679335][T13032] usb 1-1: aircable converter now attached to ttyUSB0 [ 968.691070][ T14] usb 3-1: USB disconnect, device number 58 [ 969.074162][ T14] usb 1-1: USB disconnect, device number 52 [ 969.087276][ T14] aircable ttyUSB0: aircable converter now disconnected from ttyUSB0 [ 969.114284][ T14] aircable 1-1:5.52: device disconnected [ 970.118998][ T33] usb 1-1: new low-speed USB device number 53 using dummy_hcd [ 970.334138][ T33] usb 1-1: config index 0 descriptor too short (expected 36753, got 34) [ 970.375288][ T33] usb 1-1: config 189 has too many interfaces: 113, using maximum allowed: 32 [ 970.408183][ T33] usb 1-1: config 189 has an invalid descriptor of length 0, skipping remainder of the config [ 970.437887][ T33] usb 1-1: config 189 has 0 interfaces, different from the descriptor's value: 113 [ 970.477903][ T33] usb 1-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 970.514983][ T33] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 970.562164][T16653] hub 9-0:1.0: USB hub found [ 970.594620][T16653] hub 9-0:1.0: 1 port detected [ 970.773372][ T33] usb 1-1: USB disconnect, device number 53 [ 972.499131][ T33] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 972.644875][T16679] netlink: 'syz.3.3217': attribute type 1 has an invalid length. [ 972.672127][T13032] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 972.712648][ T33] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 972.748765][ T33] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 972.818297][ T33] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 972.848804][T16680] bond3: (slave bridge3): making interface the new active one [ 972.874670][T16680] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 972.887945][T16681] device macvlan2 entered promiscuous mode [ 972.912157][ T33] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 972.914811][T16681] device bond3 entered promiscuous mode [ 972.940951][T13032] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 972.970122][ T33] usb 2-1: config 0 descriptor?? [ 972.976532][T13032] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 973.034001][T13032] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 973.048273][T13032] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 973.057671][T16681] device bridge3 entered promiscuous mode [ 973.068451][T16681] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 973.075730][T13032] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 973.107938][T16681] bond3: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 973.141194][T13032] usb 5-1: invalid MIDI out EP 0 [ 973.391974][T16681] device bond3 left promiscuous mode [ 973.401600][T13032] snd-usb-audio: probe of 5-1:27.0 failed with error -22 [ 973.408815][T16681] device bridge3 left promiscuous mode [ 973.423244][ T33] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 973.436496][ T33] cp2112 0003:10C4:EA90.0014: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 973.624189][ T33] cp2112 0003:10C4:EA90.0014: Part Number: 0x82 Device Version: 0xFE [ 973.824774][ T33] cp2112 0003:10C4:EA90.0014: error requesting SMBus config [ 973.851898][ T33] cp2112: probe of 0003:10C4:EA90.0014 failed with error -32 [ 973.877710][T14837] usb 5-1: USB disconnect, device number 51 [ 974.092384][T16700] udevd[16700]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 975.674533][T13032] usb 2-1: USB disconnect, device number 73 [ 976.932372][T16728] hub 9-0:1.0: USB hub found [ 976.988976][T16728] hub 9-0:1.0: 1 port detected [ 979.149181][T16018] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 979.349154][T16018] usb 5-1: Using ep0 maxpacket: 32 [ 979.360797][T16018] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 979.411005][T16018] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 979.477281][T16018] usb 5-1: config 0 descriptor?? [ 979.693835][T16018] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 979.714704][T16018] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 979.765556][T16018] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 979.786779][T16018] usb 5-1: media controller created [ 979.848274][T16758] random: crng reseeded on system resumption [ 979.869518][T16018] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 980.029762][T16018] DVB: Unable to find symbol dib7000p_attach() [ 980.036244][T16018] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 980.209402][T16018] rc_core: IR keymap rc-dib0700-rc5 not found [ 980.218581][T16018] Registered IR keymap rc-empty [ 980.247248][T16018] dvb-usb: could not initialize remote control. [ 980.326377][T16018] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 980.449239][T16018] usb 5-1: USB disconnect, device number 52 [ 980.562965][T16018] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 981.909789][T13032] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 981.918736][T15386] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 982.112863][T13032] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 982.138575][T13032] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 982.160646][T13032] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 982.191320][T15386] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 982.219121][T15386] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 982.231560][T13032] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 982.252018][T15386] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 982.265638][T13032] usb 4-1: config 0 descriptor?? [ 982.321802][T15386] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 982.343623][T15386] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 982.397113][T15386] usb 5-1: invalid MIDI out EP 0 [ 982.628884][T15386] snd-usb-audio: probe of 5-1:27.0 failed with error -22 [ 982.680526][T13032] cp2112 0003:10C4:EA90.0015: unknown main item tag 0x0 [ 982.700380][T13032] cp2112 0003:10C4:EA90.0015: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 982.734369][T16355] udevd[16355]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 982.888735][T13032] cp2112 0003:10C4:EA90.0015: Part Number: 0x82 Device Version: 0xFE [ 982.960386][T14837] usb 5-1: USB disconnect, device number 53 [ 983.089783][T13032] cp2112 0003:10C4:EA90.0015: error requesting SMBus config [ 983.112214][T13032] cp2112: probe of 0003:10C4:EA90.0015 failed with error -32 [ 983.747022][T16809] hub 9-0:1.0: USB hub found [ 983.788220][T16809] hub 9-0:1.0: 1 port detected [ 983.847765][T16812] device syzkaller0 entered promiscuous mode [ 984.175619][T16815] device syzkaller0 entered promiscuous mode [ 984.903054][T13032] usb 4-1: USB disconnect, device number 61 [ 984.969209][ T4357] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 985.032415][T16825] netlink: 'syz.3.3246': attribute type 1 has an invalid length. [ 985.179148][ T4357] usb 3-1: Using ep0 maxpacket: 32 [ 985.191838][ T4357] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 985.230922][T16825] bond4: (slave bridge4): making interface the new active one [ 985.248703][T16825] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 985.258317][ T4357] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.296861][ T4357] usb 3-1: config 0 descriptor?? [ 985.372471][T16827] device macvlan2 entered promiscuous mode [ 985.390208][T16827] device bond4 entered promiscuous mode [ 985.414360][T16827] device bridge4 entered promiscuous mode [ 985.451770][T16827] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 985.510425][T16827] bond4: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 985.547640][ T4357] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 985.602172][ T4357] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 985.613400][T16827] device bond4 left promiscuous mode [ 985.619195][T16827] device bridge4 left promiscuous mode [ 985.644801][ T4357] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 985.676123][ T4357] usb 3-1: media controller created [ 985.708492][T16837] random: crng reseeded on system resumption [ 985.734268][ T4357] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 986.680741][ T4357] DVB: Unable to find symbol dib7000p_attach() [ 986.692957][ T4357] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 986.923014][T16840] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3249'. [ 986.998990][ T4357] rc_core: IR keymap rc-dib0700-rc5 not found [ 987.005134][ T4357] Registered IR keymap rc-empty [ 987.052566][ T4357] dvb-usb: could not initialize remote control. [ 987.058879][ T4357] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 987.180016][ T4357] usb 3-1: USB disconnect, device number 59 [ 987.319849][ T4357] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 988.229232][T16863] device syzkaller0 entered promiscuous mode [ 988.793527][T16873] netlink: 'syz.0.3257': attribute type 1 has an invalid length. [ 988.990046][T16884] hub 9-0:1.0: USB hub found [ 989.030561][T16884] hub 9-0:1.0: 1 port detected [ 989.389282][T16885] device macvlan2 entered promiscuous mode [ 989.543444][T16885] device bond3 entered promiscuous mode [ 989.685763][T16885] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 989.809002][ T48] Bluetooth: hci3: command 0x0406 tx timeout [ 989.877119][T16885] device bond3 left promiscuous mode [ 991.559025][ T4357] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 991.759045][ T4357] usb 3-1: Using ep0 maxpacket: 16 [ 991.767898][ T4357] usb 3-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 991.808017][ T4357] usb 3-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 991.834197][ T4357] usb 3-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 991.863079][ T4357] usb 3-1: config 1 interface 0 has no altsetting 0 [ 991.886604][ T4357] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 991.899007][T14837] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 991.899315][ T4357] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 991.932869][ T4357] usb 3-1: Product: syz [ 991.945295][ T4357] usb 3-1: Manufacturer: syz [ 991.958588][ T4357] usb 3-1: SerialNumber: syz [ 992.109152][T14837] usb 5-1: Using ep0 maxpacket: 32 [ 992.117898][T14837] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 992.159207][T16916] random: crng reseeded on system resumption [ 992.166144][T14837] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 992.190437][ T4357] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 60 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 992.272350][T14837] usb 5-1: config 0 descriptor?? [ 992.481952][T14837] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 992.494911][T14837] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 992.535411][T14837] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 992.545268][T16919] usblp0:failed reading printer status (-32) [ 992.575163][T14837] usb 5-1: media controller created [ 992.588096][T15386] usb 3-1: USB disconnect, device number 60 [ 992.605479][T15386] usblp0: removed [ 992.674024][T14837] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 992.851801][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.858195][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.020354][T14837] DVB: Unable to find symbol dib7000p_attach() [ 993.029107][T14837] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 993.319366][T14837] rc_core: IR keymap rc-dib0700-rc5 not found [ 993.331512][T14837] Registered IR keymap rc-empty [ 993.344895][T14837] dvb-usb: could not initialize remote control. [ 993.358327][T14837] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 993.386045][T14837] usb 5-1: USB disconnect, device number 54 [ 993.488506][T14837] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 994.580987][T16949] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3272'. [ 994.759483][T16951] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3272'. [ 995.812420][T16957] hub 9-0:1.0: USB hub found [ 995.819644][T16968] netlink: 'syz.1.3277': attribute type 1 has an invalid length. [ 995.838053][T16957] hub 9-0:1.0: 1 port detected [ 995.869648][T16968] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3277'. [ 995.902588][T16968] bond1: (slave bridge3): making interface the new active one [ 996.020932][T16968] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 996.110685][T16968] device macvlan2 entered promiscuous mode [ 996.130055][T16968] device bond1 entered promiscuous mode [ 996.149937][T16968] device bridge3 entered promiscuous mode [ 996.185602][T16968] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 996.211199][T16968] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 996.263553][T16968] device bond1 left promiscuous mode [ 996.279417][T16968] device bridge3 left promiscuous mode [ 996.509123][T15386] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 996.518994][T16018] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 996.709004][T16018] usb 5-1: Using ep0 maxpacket: 32 [ 996.715804][T16018] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 996.724858][T15386] usb 1-1: Using ep0 maxpacket: 16 [ 996.726526][T15386] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 996.749265][T16018] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 996.771865][T15386] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 996.777041][T16018] usb 5-1: config 0 descriptor?? [ 996.814806][T15386] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 996.829021][T14837] usb 2-1: new low-speed USB device number 74 using dummy_hcd [ 996.847981][T15386] usb 1-1: config 1 interface 0 has no altsetting 0 [ 996.875596][T15386] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 996.893578][T15386] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 996.902831][T15386] usb 1-1: Product: syz [ 996.907209][T15386] usb 1-1: Manufacturer: syz [ 996.917379][T15386] usb 1-1: SerialNumber: syz [ 996.994848][T16018] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 997.026072][T16018] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 997.037442][T14837] usb 2-1: config index 0 descriptor too short (expected 36753, got 34) [ 997.048982][T14837] usb 2-1: config 189 has too many interfaces: 113, using maximum allowed: 32 [ 997.069305][T16018] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 997.088533][T14837] usb 2-1: config 189 has 1 interface, different from the descriptor's value: 113 [ 997.098235][T16018] usb 5-1: media controller created [ 997.119005][T14837] usb 2-1: config 189 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 997.149125][T15386] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 54 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 997.152747][T16018] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 997.170558][T14837] usb 2-1: config 189 interface 0 altsetting 0 has an invalid endpoint with address 0x97, skipping [ 997.215722][T14837] usb 2-1: config 189 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 997.266643][T14837] usb 2-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 997.286640][T14837] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.303174][T16981] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 997.328571][T14837] metro_usb 2-1:189.0: required endpoints missing [ 997.493458][T16018] DVB: Unable to find symbol dib7000p_attach() [ 997.500066][T16018] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 997.511210][T16985] usblp0:failed reading printer status (-32) [ 997.529562][T14915] usb 1-1: USB disconnect, device number 54 [ 997.539781][T16981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 997.541023][T14915] usblp0: removed [ 997.585013][T16981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 997.628729][T16981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 997.678866][T16981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 997.709126][T16018] rc_core: IR keymap rc-dib0700-rc5 not found [ 997.715660][T16018] Registered IR keymap rc-empty [ 997.732334][T16981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 997.737027][T16018] dvb-usb: could not initialize remote control. [ 997.753427][T16981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 997.755324][T16018] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 997.775909][ T22] usb 2-1: USB disconnect, device number 74 [ 997.807166][T16018] usb 5-1: USB disconnect, device number 55 [ 997.837652][T16994] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3283'. [ 997.867810][T16018] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 997.916659][T16998] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3283'. [ 998.265189][T17009] device syzkaller0 entered promiscuous mode [ 998.919234][T13032] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 999.133374][T13032] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 999.173578][T13032] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 999.227743][T13032] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 999.263815][T13032] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 999.315158][T13032] usb 3-1: config 0 descriptor?? [ 999.352316][T13032] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 999.875128][T17032] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3294'. [ 999.921034][T17032] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3294'. [ 999.983585][T17032] device bond0 entered promiscuous mode [ 1000.024797][T17032] device bond_slave_0 entered promiscuous mode [ 1000.061876][T17032] device bond_slave_1 entered promiscuous mode [ 1000.103259][T17032] device bond0 left promiscuous mode [ 1000.127854][T17032] device bond_slave_0 left promiscuous mode [ 1000.167065][T17032] device bond_slave_1 left promiscuous mode [ 1001.229129][T14915] usb 1-1: new low-speed USB device number 55 using dummy_hcd [ 1001.389140][T16018] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1001.421017][T14915] usb 1-1: config index 0 descriptor too short (expected 36753, got 34) [ 1001.435484][T14915] usb 1-1: config 189 has too many interfaces: 113, using maximum allowed: 32 [ 1001.448262][T14915] usb 1-1: config 189 has 1 interface, different from the descriptor's value: 113 [ 1001.466152][T14915] usb 1-1: config 189 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1001.481304][T14915] usb 1-1: config 189 interface 0 altsetting 0 has an invalid endpoint with address 0x97, skipping [ 1001.500898][T14915] usb 1-1: config 189 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1001.522068][T14915] usb 1-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 1001.534854][T14915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1001.564410][T17050] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1001.568557][T17063] netlink: 'syz.4.3304': attribute type 1 has an invalid length. [ 1001.585970][T14915] metro_usb 1-1:189.0: required endpoints missing [ 1001.599131][T16018] usb 2-1: Using ep0 maxpacket: 32 [ 1001.606478][T16018] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1001.631374][T17065] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3304'. [ 1001.677103][T16018] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1001.714393][T16018] usb 2-1: config 0 descriptor?? [ 1001.756183][T14915] usb 3-1: USB disconnect, device number 61 [ 1001.757992][T17063] bond1: (slave bridge3): making interface the new active one [ 1001.772260][T17063] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 1001.806079][T17065] device macvlan2 entered promiscuous mode [ 1001.813961][T17050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1001.831092][T17065] device bond1 entered promiscuous mode [ 1001.837798][T17050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1001.848294][T17065] device bridge3 entered promiscuous mode [ 1001.861114][T17050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1001.884554][T17050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1001.885638][T17065] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1001.909508][T17065] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1001.946968][T17050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1001.956055][T17065] device bond1 left promiscuous mode [ 1001.960180][T16018] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1001.974646][T17065] device bridge3 left promiscuous mode [ 1001.985279][T17050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1001.993718][T16018] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1002.005453][T13032] usb 1-1: USB disconnect, device number 55 [ 1002.043651][T16018] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1002.054459][T16018] usb 2-1: media controller created [ 1002.080521][T16018] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1002.257865][T16018] DVB: Unable to find symbol dib7000p_attach() [ 1002.271730][T16018] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 1002.414859][T17077] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3306'. [ 1002.435006][T17077] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3306'. [ 1002.476646][T17077] device bond0 entered promiscuous mode [ 1002.493871][T17077] device bond_slave_0 entered promiscuous mode [ 1002.503769][T17077] device bond_slave_1 entered promiscuous mode [ 1002.521242][T16018] rc_core: IR keymap rc-dib0700-rc5 not found [ 1002.527680][T16018] Registered IR keymap rc-empty [ 1002.541301][T16018] dvb-usb: could not initialize remote control. [ 1002.574825][T16018] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 1002.642175][T17077] device bond0 left promiscuous mode [ 1002.647721][T17077] device bond_slave_0 left promiscuous mode [ 1002.659260][T17077] device bond_slave_1 left promiscuous mode [ 1002.673282][T16018] usb 2-1: USB disconnect, device number 75 [ 1002.783323][T16018] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 1004.855491][T17120] netlink: 'syz.3.3317': attribute type 1 has an invalid length. [ 1004.941623][T17125] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3317'. [ 1005.079923][T17120] bond6: (slave bridge5): making interface the new active one [ 1005.132310][T17120] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 1005.163422][T17125] device macvlan2 entered promiscuous mode [ 1005.170712][T14396] Bluetooth: hci4: command 0x0406 tx timeout [ 1005.179254][T13032] usb 2-1: new low-speed USB device number 76 using dummy_hcd [ 1005.188129][T17125] device bond6 entered promiscuous mode [ 1005.209121][T17125] device bridge5 entered promiscuous mode [ 1005.215931][T17125] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1005.234542][T17125] bond6: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1005.292137][T17125] device bond6 left promiscuous mode [ 1005.308422][T17125] device bridge5 left promiscuous mode [ 1005.391138][T13032] usb 2-1: config index 0 descriptor too short (expected 36753, got 34) [ 1005.412560][T13032] usb 2-1: config 189 has too many interfaces: 113, using maximum allowed: 32 [ 1005.454608][T13032] usb 2-1: config 189 has 1 interface, different from the descriptor's value: 113 [ 1005.473794][T13032] usb 2-1: config 189 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1005.498411][T13032] usb 2-1: config 189 interface 0 altsetting 0 has an invalid endpoint with address 0x97, skipping [ 1005.551609][T13032] usb 2-1: config 189 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1005.576114][T13032] usb 2-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 1005.586852][T13032] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1005.628124][T17123] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1005.665034][T13032] metro_usb 2-1:189.0: required endpoints missing [ 1005.882007][T17123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1005.909318][T17123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1005.932350][T17123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1005.961759][T17123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1005.995532][T17123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1006.009228][T17123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1006.055470][ T22] usb 2-1: USB disconnect, device number 76 [ 1006.084320][T13032] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1006.285222][T13032] usb 4-1: Using ep0 maxpacket: 32 [ 1006.295179][T13032] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1006.318796][T13032] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1006.347171][T13032] usb 4-1: config 0 descriptor?? [ 1006.432440][T17150] device syzkaller0 entered promiscuous mode [ 1006.567701][T13032] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1006.589619][T13032] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1006.658044][T13032] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1006.678144][T13032] usb 4-1: media controller created [ 1006.734287][T13032] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1006.904132][T17163] netlink: 'syz.2.3331': attribute type 1 has an invalid length. [ 1006.949504][T13032] DVB: Unable to find symbol dib7000p_attach() [ 1006.956331][T13032] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 1007.029264][T14837] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1007.089013][ T4357] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1007.148826][T17164] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3331'. [ 1007.233116][T17167] bond4: (slave bridge5): making interface the new active one [ 1007.239147][T14837] usb 2-1: Using ep0 maxpacket: 8 [ 1007.256444][T17167] bond4: (slave bridge5): Enslaving as an active interface with an up link [ 1007.257179][T14837] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1007.275671][T17163] device macvlan2 entered promiscuous mode [ 1007.287810][ T4357] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1007.302272][T17163] device bond4 entered promiscuous mode [ 1007.313026][ T4357] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1007.322419][T13032] rc_core: IR keymap rc-dib0700-rc5 not found [ 1007.329685][T13032] Registered IR keymap rc-empty [ 1007.337010][T17163] device bridge5 entered promiscuous mode [ 1007.343337][T13032] dvb-usb: could not initialize remote control. [ 1007.349968][ T4357] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1007.361181][T17163] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1007.368254][T13032] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 1007.378500][ T4357] usb 5-1: Product: syz [ 1007.393178][T17163] bond4: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1007.413678][ T4357] usb 5-1: Manufacturer: syz [ 1007.431669][T14837] usb 2-1: config 0 has no interface number 0 [ 1007.443686][T13032] usb 4-1: USB disconnect, device number 62 [ 1007.452012][ T4357] usb 5-1: SerialNumber: syz [ 1007.474924][ T4357] usb 5-1: config 0 descriptor?? [ 1007.516126][T14837] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1007.550981][T13032] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 1007.555040][T14837] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1007.657527][T14837] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.700650][T14837] usb 2-1: config 0 descriptor?? [ 1007.806878][T17163] device bond4 left promiscuous mode [ 1007.816394][T17163] device bridge5 left promiscuous mode [ 1007.894179][T14837] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1008.402829][T17184] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3334'. [ 1009.753003][T14837] usb 2-1: USB disconnect, device number 77 [ 1010.111880][T17200] ======================================================= [ 1010.111880][T17200] WARNING: The mand mount option has been deprecated and [ 1010.111880][T17200] and is ignored by this kernel. Remove the mand [ 1010.111880][T17200] option from the mount to silence this warning. [ 1010.111880][T17200] ======================================================= [ 1010.153048][T17200] fuse: Bad value for 'fd' [ 1010.204236][T13032] usb 5-1: USB disconnect, device number 56 [ 1011.399009][T14837] usb 5-1: new low-speed USB device number 57 using dummy_hcd [ 1011.600638][T14837] usb 5-1: config index 0 descriptor too short (expected 36753, got 34) [ 1011.653518][T14837] usb 5-1: config 189 has too many interfaces: 113, using maximum allowed: 32 [ 1011.694189][T14837] usb 5-1: config 189 has 1 interface, different from the descriptor's value: 113 [ 1011.734504][T14837] usb 5-1: config 189 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1011.782241][T14837] usb 5-1: config 189 interface 0 altsetting 0 has an invalid endpoint with address 0x97, skipping [ 1011.826786][T14837] usb 5-1: config 189 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1011.872834][T14837] usb 5-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 1011.912549][T14837] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1011.954482][T17212] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1011.983701][T14837] metro_usb 5-1:189.0: required endpoints missing [ 1012.195205][T17212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1012.236622][T17212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1012.274324][T17212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1012.319721][T17212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1012.359387][T17212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1012.444527][T17212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1012.485017][T14837] usb 5-1: USB disconnect, device number 57 [ 1013.099163][T13032] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1013.152027][ T4357] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1013.289210][T13032] usb 2-1: Using ep0 maxpacket: 32 [ 1013.300528][T13032] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1013.341505][ T4357] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 1013.359092][T13032] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1013.368678][ T4357] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 1013.389929][ T4357] usb 3-1: config 0 has no interfaces? [ 1013.397801][T13032] usb 2-1: config 0 descriptor?? [ 1013.403192][ T4357] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 1013.434209][ T4357] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1013.484696][ T4357] usb 3-1: config 0 descriptor?? [ 1013.526317][T17231] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3345'. [ 1013.617124][T13032] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1013.633392][T13032] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1013.659638][T13032] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1013.675930][T13032] usb 2-1: media controller created [ 1013.726874][T13032] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1013.863833][T14837] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1013.884317][T16018] usb 3-1: USB disconnect, device number 62 [ 1014.000917][T13032] DVB: Unable to find symbol dib7000p_attach() [ 1014.007561][T13032] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 1014.069081][T14837] usb 5-1: Using ep0 maxpacket: 16 [ 1014.084598][T14837] usb 5-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 1014.114960][T14837] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.138155][T14837] usb 5-1: Product: syz [ 1014.148998][T14837] usb 5-1: Manufacturer: syz [ 1014.153637][T14837] usb 5-1: SerialNumber: syz [ 1014.191129][T14837] usb 5-1: config 0 descriptor?? [ 1014.204350][T14837] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 1014.219239][T13032] rc_core: IR keymap rc-dib0700-rc5 not found [ 1014.230513][T13032] Registered IR keymap rc-empty [ 1014.271446][T13032] dvb-usb: could not initialize remote control. [ 1014.295348][T13032] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 1014.363503][T13032] usb 2-1: USB disconnect, device number 78 [ 1014.503401][T13032] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 1014.910065][T14837] gp8psk: usb in 128 operation failed. [ 1014.939057][T14837] gp8psk: usb in 137 operation failed. [ 1014.960680][T14837] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1014.999260][T14837] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 1015.034949][T14837] usb 5-1: media controller created [ 1015.109238][T14837] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1015.183377][T14837] gp8psk_fe: Frontend revision 1 attached [ 1015.219995][T14837] usb 5-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 1015.251497][T14837] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 1015.414422][T14837] gp8psk: usb in 138 operation failed. [ 1015.450240][T14837] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 1015.470377][T14837] gp8psk: found Genpix USB device pID = 201 (hex) [ 1015.509075][T14837] usb 5-1: USB disconnect, device number 58 [ 1015.711212][T14837] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 1018.239732][T16018] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1018.498969][T16018] usb 2-1: Using ep0 maxpacket: 32 [ 1018.517418][T16018] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1018.575039][T16018] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1018.597571][T16018] usb 2-1: config 0 descriptor?? [ 1018.806734][T16018] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1018.867565][T16018] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1018.946342][T16018] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1019.098416][T17303] netlink: 'syz.0.3363': attribute type 1 has an invalid length. [ 1019.109128][T16018] usb 2-1: media controller created [ 1019.149303][T16018] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1019.203944][T17303] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3363'. [ 1019.257435][T17303] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3363'. [ 1019.387777][T17308] bond4: (slave bridge4): making interface the new active one [ 1019.411595][T17308] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 1019.420483][T16018] DVB: Unable to find symbol dib7000p_attach() [ 1019.426659][T16018] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 1019.506827][T17310] device macvlan2 entered promiscuous mode [ 1019.560901][T17310] device bond4 entered promiscuous mode [ 1019.588870][T17310] device bridge4 entered promiscuous mode [ 1019.684334][T17310] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1019.722212][T17300] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3362'. [ 1019.755850][T17310] bond4: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1019.835781][T17310] device bond4 left promiscuous mode [ 1019.856472][T17310] device bridge4 left promiscuous mode [ 1019.889176][T16018] rc_core: IR keymap rc-dib0700-rc5 not found [ 1019.896484][T16018] Registered IR keymap rc-empty [ 1019.910965][T16018] dvb-usb: could not initialize remote control. [ 1019.963056][T16018] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 1020.031251][T16018] usb 2-1: USB disconnect, device number 79 [ 1020.206341][T16018] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 1020.539173][T14837] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1020.728965][T14837] usb 1-1: Using ep0 maxpacket: 16 [ 1020.741730][T14837] usb 1-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 1020.794267][T14837] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.840678][T14837] usb 1-1: Product: syz [ 1020.860583][T14837] usb 1-1: Manufacturer: syz [ 1020.882595][T14837] usb 1-1: SerialNumber: syz [ 1020.926372][T14837] usb 1-1: config 0 descriptor?? [ 1020.980533][T14837] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 1021.724038][T14837] gp8psk: usb in 128 operation failed. [ 1021.734527][T14837] gp8psk: usb in 137 operation failed. [ 1021.759256][T14837] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1021.819737][T14837] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 1021.869014][T14837] usb 1-1: media controller created [ 1021.907012][T14837] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1022.007439][T14837] gp8psk_fe: Frontend revision 1 attached [ 1022.035580][T14837] usb 1-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 1022.084987][T14837] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 1022.203826][T14837] gp8psk: usb in 138 operation failed. [ 1022.215314][T14837] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 1022.269067][T14837] gp8psk: found Genpix USB device pID = 201 (hex) [ 1022.318566][T14837] usb 1-1: USB disconnect, device number 56 [ 1022.447941][T14837] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 1022.647793][T17344] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3373'. [ 1022.699292][T17344] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3373'. [ 1022.743073][T17344] device bond0 entered promiscuous mode [ 1022.763857][T17344] device bond_slave_0 entered promiscuous mode [ 1022.789334][T17344] device bond_slave_1 entered promiscuous mode [ 1022.842921][T17344] device bond0 left promiscuous mode [ 1022.870418][T17344] device bond_slave_0 left promiscuous mode [ 1022.954911][T17344] device bond_slave_1 left promiscuous mode [ 1023.603772][T17357] netlink: 'syz.1.3376': attribute type 1 has an invalid length. [ 1023.684604][T17353] random: crng reseeded on system resumption [ 1023.699087][ T33] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1023.715067][T17357] bond2: (slave bridge4): making interface the new active one [ 1023.835437][T17357] bond2: (slave bridge4): Enslaving as an active interface with an up link [ 1023.913680][ T33] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1023.932667][ T33] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1023.946024][T17358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3376'. [ 1023.959955][T17358] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3376'. [ 1023.976730][ T33] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1023.993243][T17361] device macvlan2 entered promiscuous mode [ 1024.016009][ T33] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1024.035802][T17361] device bond2 entered promiscuous mode [ 1024.061059][ T33] usb 3-1: config 0 descriptor?? [ 1024.070454][T17361] device bridge4 entered promiscuous mode [ 1024.090079][T17361] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1024.117854][T17361] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1024.165921][T17361] device bond2 left promiscuous mode [ 1024.185380][T17361] device bridge4 left promiscuous mode [ 1024.486780][ T33] cp2112 0003:10C4:EA90.0016: unknown main item tag 0x0 [ 1024.507675][ T33] cp2112 0003:10C4:EA90.0016: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 1024.685925][ T33] cp2112 0003:10C4:EA90.0016: Part Number: 0x82 Device Version: 0xFE [ 1024.886449][ T33] cp2112 0003:10C4:EA90.0016: error requesting SMBus config [ 1024.921930][ T33] cp2112: probe of 0003:10C4:EA90.0016 failed with error -32 [ 1025.479283][ T33] usb 4-1: new low-speed USB device number 63 using dummy_hcd [ 1025.671874][ T33] usb 4-1: config index 0 descriptor too short (expected 36753, got 34) [ 1025.687107][ T33] usb 4-1: config 189 has too many interfaces: 113, using maximum allowed: 32 [ 1025.724277][ T33] usb 4-1: config 189 has 1 interface, different from the descriptor's value: 113 [ 1025.761547][ T33] usb 4-1: config 189 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1025.818100][ T33] usb 4-1: config 189 interface 0 altsetting 0 has an invalid endpoint with address 0x97, skipping [ 1025.862787][ T33] usb 4-1: config 189 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1025.911652][ T33] usb 4-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 1025.939976][ T33] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1025.986174][T17372] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1026.000597][ T33] metro_usb 4-1:189.0: required endpoints missing [ 1026.023272][T17382] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3380'. [ 1026.115331][T17385] tipc: Started in network mode [ 1026.126078][T17385] tipc: Node identity 3a7d21e55a0a, cluster identity 4711 [ 1026.145079][T17385] tipc: Enabled bearer , priority 0 [ 1026.195766][T17385] tipc: Resetting bearer [ 1026.212449][T17372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1026.259719][T17372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1026.288565][T17372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1026.305901][T17384] tipc: Disabling bearer [ 1026.309309][T17372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1026.368710][T13032] usb 4-1: USB disconnect, device number 63 [ 1026.560700][ T33] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1026.736143][ T4357] usb 3-1: USB disconnect, device number 63 [ 1026.760549][ T33] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1026.793748][ T33] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1026.833169][ T33] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1026.870718][ T33] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.900763][ T33] usb 5-1: config 0 descriptor?? [ 1026.934685][ T33] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1027.124442][T17400] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.3385' sets config #1 [ 1027.280740][ T4357] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1027.489052][ T4357] usb 3-1: Using ep0 maxpacket: 16 [ 1027.502000][ T4357] usb 3-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 1027.545227][ T4357] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.585193][ T4357] usb 3-1: Product: syz [ 1027.600909][ T4357] usb 3-1: Manufacturer: syz [ 1027.605711][ T4357] usb 3-1: SerialNumber: syz [ 1027.624949][ T4357] usb 3-1: config 0 descriptor?? [ 1027.656595][ T4357] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 1028.058200][T17415] netlink: 'syz.1.3389': attribute type 1 has an invalid length. [ 1028.190934][T17417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3389'. [ 1028.209788][T17417] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3389'. [ 1028.280864][ T4357] gp8psk: usb in 128 operation failed. [ 1028.296092][ T4357] gp8psk: usb in 137 operation failed. [ 1028.312521][T17419] bond3: (slave bridge5): making interface the new active one [ 1028.331488][T17419] bond3: (slave bridge5): Enslaving as an active interface with an up link [ 1028.332959][ T4357] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1028.365725][ T4357] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 1028.385312][T17415] device macvlan2 entered promiscuous mode [ 1028.406118][ T4357] usb 3-1: media controller created [ 1028.415299][T17415] device bond3 entered promiscuous mode [ 1028.444457][T17415] device bridge5 entered promiscuous mode [ 1028.474135][T17415] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1028.486560][ T4357] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1028.495613][T17415] bond3: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1028.558468][ T4357] gp8psk_fe: Frontend revision 1 attached [ 1028.575991][T17415] device bond3 left promiscuous mode [ 1028.582242][ T4357] usb 3-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 1028.604966][T17415] device bridge5 left promiscuous mode [ 1028.609478][ T4357] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 1028.680448][ T4357] gp8psk: usb in 138 operation failed. [ 1028.687800][ T4357] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 1028.699500][ T4357] gp8psk: found Genpix USB device pID = 201 (hex) [ 1028.722081][ T4357] usb 3-1: USB disconnect, device number 64 [ 1028.794565][ T4357] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 1029.318658][T15386] usb 5-1: USB disconnect, device number 59 [ 1029.807722][T17439] random: crng reseeded on system resumption [ 1029.949007][T14837] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1030.155439][T14837] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1030.202894][T14837] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1030.233242][T14837] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1030.246371][T14837] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1030.266376][T14837] usb 5-1: config 0 descriptor?? [ 1030.685458][T14837] cp2112 0003:10C4:EA90.0017: unknown main item tag 0x0 [ 1030.752945][T14837] cp2112 0003:10C4:EA90.0017: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 1030.893661][T14837] cp2112 0003:10C4:EA90.0017: Part Number: 0x82 Device Version: 0xFE [ 1031.100187][T14837] cp2112 0003:10C4:EA90.0017: error requesting SMBus config [ 1031.128686][T14837] cp2112: probe of 0003:10C4:EA90.0017 failed with error -32 [ 1031.399731][T15386] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1031.459099][T14837] usb 2-1: new low-speed USB device number 80 using dummy_hcd [ 1031.615000][T15386] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 1031.649200][T15386] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 1031.679985][T15386] usb 1-1: config 0 has no interfaces? [ 1031.685620][T15386] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 1031.691113][T14837] usb 2-1: config index 0 descriptor too short (expected 36753, got 34) [ 1031.723478][T14837] usb 2-1: config 189 has too many interfaces: 113, using maximum allowed: 32 [ 1031.743754][T15386] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1031.764025][T14837] usb 2-1: config 189 has 1 interface, different from the descriptor's value: 113 [ 1031.794477][T15386] usb 1-1: config 0 descriptor?? [ 1031.799747][T14837] usb 2-1: config 189 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1031.831185][T14837] usb 2-1: config 189 interface 0 altsetting 0 has an invalid endpoint with address 0x97, skipping [ 1031.860867][T14837] usb 2-1: config 189 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1031.917645][T14837] usb 2-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 1031.956891][T14837] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1031.992458][T17441] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1032.002085][T14837] metro_usb 2-1:189.0: required endpoints missing [ 1032.152390][T14837] usb 1-1: USB disconnect, device number 57 [ 1032.216945][T17441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1032.239243][T17441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1032.296974][T17441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1032.321657][T17441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1032.363970][T14915] usb 2-1: USB disconnect, device number 80 [ 1032.413861][T17463] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3398'. [ 1032.930646][T15386] usb 5-1: USB disconnect, device number 60 [ 1033.254405][T17477] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3404'. [ 1033.269394][T17477] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3404'. [ 1033.339028][T16018] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1033.350833][T17477] device bond0 entered promiscuous mode [ 1033.372847][T17477] device bond_slave_0 entered promiscuous mode [ 1033.393345][T17477] device bond_slave_1 entered promiscuous mode [ 1033.416256][T17477] device bond0 left promiscuous mode [ 1033.436463][T17477] device bond_slave_0 left promiscuous mode [ 1033.454727][T17477] device bond_slave_1 left promiscuous mode [ 1033.499203][T15272] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1033.528997][T16018] usb 2-1: Using ep0 maxpacket: 16 [ 1033.559881][T16018] usb 2-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 1033.639250][T16018] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1033.672814][T16018] usb 2-1: Product: syz [ 1033.682954][T16018] usb 2-1: Manufacturer: syz [ 1033.693088][T16018] usb 2-1: SerialNumber: syz [ 1033.714717][T16018] usb 2-1: config 0 descriptor?? [ 1033.734767][T16018] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 1033.765583][T15272] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1033.830384][T15272] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1033.884831][T15272] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1033.980521][T15272] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1034.129912][T15272] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1034.327971][T16018] gp8psk: usb in 128 operation failed. [ 1034.334199][T16018] gp8psk: usb in 137 operation failed. [ 1034.385294][T15272] usb 5-1: invalid MIDI out EP 0 [ 1034.438700][T16018] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1034.663033][T16018] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 1034.743594][T16018] usb 2-1: media controller created [ 1034.795792][T15272] snd-usb-audio: probe of 5-1:27.0 failed with error -22 [ 1034.960804][T16592] udevd[16592]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1035.013639][T16018] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1035.065992][T17421] usb 5-1: USB disconnect, device number 61 [ 1035.124856][T16018] gp8psk_fe: Frontend revision 1 attached [ 1035.167607][T16018] usb 2-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 1035.204847][T16018] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 1035.408413][T16018] gp8psk: usb in 138 operation failed. [ 1035.458684][T16018] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 1035.548494][T16018] gp8psk: found Genpix USB device pID = 201 (hex) [ 1035.598905][T16018] usb 2-1: USB disconnect, device number 81 [ 1035.795421][T16018] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 1036.056364][T17511] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3411'. [ 1036.569009][T17421] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1036.780806][T17421] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1036.821135][T17421] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1036.875953][T17421] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1036.947004][T17421] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1037.016870][T17421] usb 3-1: config 0 descriptor?? [ 1037.446116][T17421] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0 [ 1037.474818][T17421] cp2112 0003:10C4:EA90.0018: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 1037.646549][T17421] cp2112 0003:10C4:EA90.0018: Part Number: 0x82 Device Version: 0xFE [ 1037.855545][T17421] cp2112 0003:10C4:EA90.0018: error requesting SMBus config [ 1037.885698][T17421] cp2112: probe of 0003:10C4:EA90.0018 failed with error -32 [ 1038.402486][T17537] netlink: 'syz.4.3420': attribute type 1 has an invalid length. [ 1038.588996][T16018] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1038.626528][T17539] device macvlan2 entered promiscuous mode [ 1038.655757][T17539] device bond2 entered promiscuous mode [ 1038.694761][T17539] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1038.748034][T17539] device bond2 left promiscuous mode [ 1038.799064][T16018] usb 2-1: Using ep0 maxpacket: 16 [ 1038.807938][T16018] usb 2-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 1038.827225][T16018] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.841355][T16018] usb 2-1: Product: syz [ 1038.846536][T16018] usb 2-1: Manufacturer: syz [ 1038.853829][T16018] usb 2-1: SerialNumber: syz [ 1038.870931][T16018] usb 2-1: config 0 descriptor?? [ 1038.896206][T16018] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 1039.395122][T16018] gp8psk: usb in 128 operation failed. [ 1039.407297][T16018] gp8psk: usb in 137 operation failed. [ 1039.417556][T16018] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1039.437515][T16018] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 1039.454274][T16018] usb 2-1: media controller created [ 1039.522440][T16018] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1039.553415][T16018] gp8psk_fe: Frontend revision 1 attached [ 1039.564172][T16018] usb 2-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 1039.591540][T16018] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 1039.683454][T16018] gp8psk: usb in 138 operation failed. [ 1039.692610][T16018] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 1039.703684][T16018] gp8psk: found Genpix USB device pID = 201 (hex) [ 1039.719182][T16018] usb 2-1: USB disconnect, device number 82 [ 1039.775094][T16018] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 1039.809004][T14915] usb 3-1: USB disconnect, device number 65 [ 1040.370032][T17567] program syz.1.3425 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1041.009000][ T48] Bluetooth: hci2: command 0x0406 tx timeout [ 1041.028964][T14915] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1041.221401][T14915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1041.278109][T14915] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1041.329020][T14915] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1041.348663][T14915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1041.374226][T14915] usb 5-1: config 0 descriptor?? [ 1041.405454][T14915] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1043.417429][T17594] bond0: Removing last ns target with arp_interval on [ 1043.417528][T14353] bond0: (slave bond_slave_0): interface is now down [ 1043.437612][T14353] bond0: (slave bond_slave_1): interface is now down [ 1043.479499][T14361] bond0: (slave bond_slave_0): interface is now down [ 1043.492748][T14361] bond0: (slave bond_slave_1): interface is now down [ 1043.539071][T14361] bond0: (slave bond_slave_0): interface is now down [ 1043.552764][T14361] bond0: (slave bond_slave_1): interface is now down [ 1043.596046][T14361] bond0: now running without any active interface! [ 1043.850728][ T4357] usb 5-1: USB disconnect, device number 62 [ 1043.886187][T17600] netlink: 'syz.3.3434': attribute type 1 has an invalid length. [ 1044.497367][T17604] device macvlan2 entered promiscuous mode [ 1044.519108][T14915] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1044.688393][T17604] device bond7 entered promiscuous mode [ 1044.714227][T14915] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1044.720121][T17604] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1044.735908][T14915] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1044.751751][T14915] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1044.766479][T14915] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1044.790790][T14915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1044.895691][T14915] usb 5-1: invalid MIDI out EP 0 [ 1044.977278][T17604] device bond7 left promiscuous mode [ 1045.028098][T14915] snd-usb-audio: probe of 5-1:27.0 failed with error -22 [ 1045.089704][T16592] udevd[16592]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1045.350669][T14915] usb 5-1: USB disconnect, device number 63 [ 1045.569116][T17620] netlink: 'syz.1.3438': attribute type 1 has an invalid length. [ 1045.652335][T17622] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3438'. [ 1045.704318][T17620] bond4: (slave bridge6): making interface the new active one [ 1045.715815][T17620] bond4: (slave bridge6): Enslaving as an active interface with an up link [ 1045.736091][T17620] device macvlan2 entered promiscuous mode [ 1045.744714][T17620] device bond4 entered promiscuous mode [ 1045.750775][T17620] device bridge6 entered promiscuous mode [ 1045.757136][T17620] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1045.765616][T17620] bond4: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1045.790904][T17620] device bond4 left promiscuous mode [ 1045.799683][T17620] device bridge6 left promiscuous mode [ 1046.369352][T15386] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1046.581684][T15386] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1046.615108][T15386] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1046.655290][T15386] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.704996][T15386] usb 1-1: Product: syz [ 1046.719686][T15386] usb 1-1: Manufacturer: syz [ 1046.741070][T15386] usb 1-1: SerialNumber: syz [ 1046.775017][T15386] usb 1-1: config 0 descriptor?? [ 1046.789202][T14915] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1046.989114][T14915] usb 2-1: Using ep0 maxpacket: 8 [ 1046.998349][T14915] usb 2-1: config 0 has no interfaces? [ 1047.029955][T14915] usb 2-1: config 0 has no interfaces? [ 1047.060214][T14915] usb 2-1: config 0 has no interfaces? [ 1047.135544][T14915] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1047.171809][T14915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1047.227227][T14915] usb 2-1: Product: syz [ 1047.242147][T14915] usb 2-1: Manufacturer: syz [ 1047.289038][T14915] usb 2-1: SerialNumber: syz [ 1047.319412][T14915] usb 2-1: config 0 descriptor?? [ 1047.669000][T15386] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1047.746474][T17635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1047.780999][T17635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1047.838378][T17421] usb 2-1: USB disconnect, device number 83 [ 1047.867165][T15386] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 1047.885718][T15386] usb 3-1: config 0 has no interface number 0 [ 1047.925506][T15386] usb 3-1: config 0 interface 34 altsetting 187 has 0 endpoint descriptors, different from the interface descriptor's value: 30 [ 1048.014201][T15386] usb 3-1: config 0 interface 34 has no altsetting 0 [ 1048.060775][T15386] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1048.113480][T15386] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1048.179496][T15386] usb 3-1: config 0 descriptor?? [ 1048.619042][T14915] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1048.779044][T15272] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1048.810934][T14915] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 1048.846681][T14915] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 1048.900201][T14915] usb 5-1: config 0 has no interfaces? [ 1048.912609][T14915] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 1048.944191][T14915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1048.971128][T15272] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1048.994639][T14915] usb 5-1: config 0 descriptor?? [ 1049.005508][T15272] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1049.035424][T15272] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1049.070496][T15272] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1049.097222][T15272] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1049.142297][T15272] usb 2-1: config 0 descriptor?? [ 1049.463495][T17421] usb 5-1: USB disconnect, device number 64 [ 1049.556655][ C0] raw-gadget.3 gadget.1: ignoring, device is not running [ 1049.564338][ C0] raw-gadget.3 gadget.1: ignoring, device is not running [ 1049.571596][T15272] usbhid 2-1:0.0: can't add hid device: -32 [ 1049.577772][T15272] usbhid: probe of 2-1:0.0 failed with error -32 [ 1049.611677][T15272] usb 2-1: USB disconnect, device number 84 [ 1050.044923][T17421] usb 1-1: USB disconnect, device number 58 [ 1050.304172][T17662] netlink: 'syz.1.3451': attribute type 1 has an invalid length. [ 1050.419255][T17669] bond5: (slave bridge7): making interface the new active one [ 1050.430694][T17669] bond5: (slave bridge7): Enslaving as an active interface with an up link [ 1050.444289][T17666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3451'. [ 1050.856278][T17671] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3449'. [ 1051.101163][T17421] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1051.301066][T17421] usb 2-1: Using ep0 maxpacket: 16 [ 1051.313136][T17421] usb 2-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 1051.353396][T17421] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.381339][T17421] usb 2-1: Product: syz [ 1051.385694][T17421] usb 2-1: Manufacturer: syz [ 1051.405942][T17421] usb 2-1: SerialNumber: syz [ 1051.433122][T17421] usb 2-1: config 0 descriptor?? [ 1051.496508][T17421] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 1051.606837][T15386] usb 3-1: string descriptor 0 read error: -71 [ 1051.623084][T15386] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1051.657477][T15386] gspca_cpia1: usb_control_msg 05, error -71 [ 1051.713992][T15386] gspca_cpia1: usb_control_msg 01, error -71 [ 1051.727556][T15386] cpia1 3-1:0.34: only firmware version 1 is supported (got: 0) [ 1051.792905][T15386] usb 3-1: USB disconnect, device number 66 [ 1052.092702][T17421] gp8psk: usb in 128 operation failed. [ 1052.099880][T17421] gp8psk: usb in 137 operation failed. [ 1052.118219][T17421] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1052.145836][T17421] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 1052.176561][T17421] usb 2-1: media controller created [ 1052.318061][T17421] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1052.410874][T17421] gp8psk_fe: Frontend revision 1 attached [ 1052.428217][T17421] usb 2-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 1052.458765][T17421] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 1052.583754][T17421] gp8psk: usb in 138 operation failed. [ 1052.618298][T17421] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 1052.629090][T16018] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1052.648959][T17421] gp8psk: found Genpix USB device pID = 201 (hex) [ 1052.747211][T17421] usb 2-1: USB disconnect, device number 85 [ 1052.840506][T16018] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1052.927559][T17421] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 1052.968993][T16018] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1053.019372][T16018] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1053.065068][T16018] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1053.105674][T16018] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1053.137248][T16018] usb 3-1: invalid MIDI out EP 0 [ 1053.244512][T16018] snd-usb-audio: probe of 3-1:27.0 failed with error -22 [ 1053.288205][T16592] udevd[16592]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1053.489004][T17421] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1053.634824][T16018] usb 3-1: USB disconnect, device number 67 [ 1053.649177][T17421] usb 2-1: device descriptor read/64, error -71 [ 1053.931575][T17421] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1054.112323][T17421] usb 2-1: device descriptor read/64, error -71 [ 1054.259213][T17421] usb usb2-port1: attempt power cycle [ 1054.293416][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.300201][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.679007][T17421] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1054.750717][T17421] usb 2-1: device descriptor read/8, error -71 [ 1054.849126][T16018] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1055.018961][T17421] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1055.040913][T16018] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1055.071797][T16018] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1055.085206][T16018] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1055.094291][T16018] usb 4-1: Product: syz [ 1055.098481][T16018] usb 4-1: Manufacturer: syz [ 1055.104032][T17421] usb 2-1: device descriptor read/8, error -71 [ 1055.127761][T16018] usb 4-1: SerialNumber: syz [ 1055.165042][T16018] usb 4-1: config 0 descriptor?? [ 1055.189244][T17710] netlink: 'syz.4.3462': attribute type 1 has an invalid length. [ 1055.249566][T17421] usb usb2-port1: unable to enumerate USB device [ 1055.499106][T14915] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1055.512589][T17710] bond3: (slave bridge5): making interface the new active one [ 1055.546573][T17710] bond3: (slave bridge5): Enslaving as an active interface with an up link [ 1055.585252][T17715] device macvlan2 entered promiscuous mode [ 1055.626141][T17715] device bond3 entered promiscuous mode [ 1055.713082][T17715] device bridge5 entered promiscuous mode [ 1055.740576][T14915] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 1055.789120][T14915] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255 [ 1055.819201][T17715] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1055.870758][T17715] bond3: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1055.887368][T14915] usb 3-1: config 0 has no interfaces? [ 1055.897577][T17715] device bond3 left promiscuous mode [ 1055.900183][T14915] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 1055.905110][T17715] device bridge5 left promiscuous mode [ 1055.952983][T14915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1055.981295][T14915] usb 3-1: config 0 descriptor?? [ 1056.302344][T14915] usb 3-1: USB disconnect, device number 68 [ 1057.512863][T17742] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3467'. [ 1057.951688][ T4357] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1058.007271][T15386] usb 4-1: USB disconnect, device number 64 [ 1058.193619][ T4357] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1058.218625][ T4357] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1058.255888][ T4357] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1058.339171][ T4357] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1058.368659][ T4357] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1058.651124][ T4357] usb 5-1: invalid MIDI out EP 0 [ 1058.809663][ T4357] snd-usb-audio: probe of 5-1:27.0 failed with error -22 [ 1058.873420][T16521] udevd[16521]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1059.477090][T15273] usb 5-1: USB disconnect, device number 65 [ 1060.226955][T17770] netlink: 'syz.2.3475': attribute type 1 has an invalid length. [ 1060.545683][T17770] bond5: (slave bridge6): making interface the new active one [ 1060.587786][T17770] bond5: (slave bridge6): Enslaving as an active interface with an up link [ 1060.650112][T17772] device macvlan2 entered promiscuous mode [ 1060.683768][T17772] device bond5 entered promiscuous mode [ 1060.695945][T17772] device bridge6 entered promiscuous mode [ 1060.727968][T17772] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1060.769466][T17772] bond5: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1060.823599][T17772] device bond5 left promiscuous mode [ 1060.835855][T17772] device bridge6 left promiscuous mode [ 1061.318993][ T4357] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1061.489192][ T48] Bluetooth: hci1: command 0x0406 tx timeout [ 1061.529264][ T4357] usb 4-1: Using ep0 maxpacket: 32 [ 1061.536556][ T4357] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 1061.647182][ T4357] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1061.671111][ T4357] usb 4-1: config 0 descriptor?? [ 1061.878736][ T4357] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 1061.929823][ T4357] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1061.956438][T17793] fuse: Bad value for 'fd' [ 1062.010298][ T4357] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 1062.075699][ T4357] usb 4-1: media controller created [ 1062.150951][ T4357] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1062.432284][T17799] ------------[ cut here ]------------ [ 1062.438236][T17799] usb 4-1: BOGUS control dir, pipe 80004180 doesn't match bRequestType c0 [ 1062.490268][ T4357] DVB: Unable to find symbol dib7000p_attach() [ 1062.496509][ T4357] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 1062.515134][T17799] WARNING: CPU: 1 PID: 17799 at drivers/usb/core/urb.c:413 usb_submit_urb+0x11a5/0x1910 [ 1062.525219][T17799] Modules linked in: [ 1062.529502][T17799] CPU: 1 PID: 17799 Comm: syz.3.3477 Not tainted syzkaller #0 [ 1062.536976][T17799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1062.547120][T17799] RIP: 0010:usb_submit_urb+0x11a5/0x1910 [ 1062.552908][T17799] Code: ff df 0f b6 44 05 00 84 c0 0f 85 6f 06 00 00 45 0f b6 07 48 c7 c7 60 3f 2e 8b 48 8b 74 24 18 4c 89 e2 44 89 f1 e8 9b 41 37 fb <0f> 0b 49 bc 00 00 00 00 00 fc ff df e9 93 f3 ff ff 89 e9 80 e1 07 [ 1062.572604][T17799] RSP: 0018:ffffc900062ef868 EFLAGS: 00010246 [ 1062.578692][T17799] RAX: f980c50c296b8f00 RBX: ffff888023835000 RCX: 0000000000080000 [ 1062.586739][T17799] RDX: ffffc9001c74c000 RSI: 0000000000004a25 RDI: 0000000000004a26 [ 1062.595707][T17799] RBP: 1ffff1100508b6c3 R08: dffffc0000000000 R09: fffff52000c5de9d [ 1062.604390][T17799] R10: fffff52000c5de9d R11: 1ffff92000c5de9c R12: ffff88814c8e0ca8 [ 1062.612694][T17799] R13: ffff888054b820f8 R14: 0000000080004180 R15: ffff88802845b618 [ 1062.620749][T17799] FS: 00007ff04c1926c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1062.629717][T17799] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1062.636307][T17799] CR2: 00007f492abcee9c CR3: 0000000027648000 CR4: 00000000003506e0 [ 1062.644322][T17799] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1062.652341][T17799] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1062.660353][T17799] Call Trace: [ 1062.663647][T17799] [ 1062.666593][T17799] usb_start_wait_urb+0x111/0x4b0 [ 1062.671697][T17799] ? usb_api_blocking_completion+0xb0/0xb0 [ 1062.677554][T17799] ? __kmalloc+0xe1/0x240 [ 1062.681988][T17799] usb_control_msg+0x22f/0x3e0 [ 1062.686790][T17799] dib0700_i2c_xfer+0xbbd/0xf80 [ 1062.691752][T17799] ? rt_mutex_slowlock+0x35a/0x710 [ 1062.696908][T17799] ? dib0700_set_gpio+0x1f0/0x1f0 [ 1062.702020][T17799] __i2c_transfer+0x864/0x2260 [ 1062.706857][T17799] ? i2c_cmd+0x110/0x110 [ 1062.711164][T17799] ? __might_fault+0xa6/0x120 [ 1062.715875][T17799] ? i2c_transfer+0x117/0x390 [ 1062.720627][T17799] i2c_transfer+0x24c/0x390 [ 1062.725170][T17799] ? __i2c_transfer+0x2260/0x2260 [ 1062.730275][T17799] ? __might_fault+0xc2/0x120 [ 1062.734983][T17799] ? __might_fault+0xa6/0x120 [ 1062.739724][T17799] ? _copy_from_user+0x10b/0x170 [ 1062.744676][T17799] i2cdev_ioctl_rdwr+0x3da/0x6c0 [ 1062.749716][T17799] i2cdev_ioctl+0x5ba/0x750 [ 1062.754348][T17799] ? i2cdev_write+0x120/0x120 [ 1062.759118][T17799] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1062.764095][T17799] ? security_file_ioctl+0x7c/0xa0 [ 1062.769311][T17799] ? i2cdev_write+0x120/0x120 [ 1062.774031][T17799] __se_sys_ioctl+0xfa/0x170 [ 1062.778661][T17799] do_syscall_64+0x4c/0xa0 [ 1062.783146][T17799] ? clear_bhb_loop+0x60/0xb0 [ 1062.787861][T17799] ? clear_bhb_loop+0x60/0xb0 [ 1062.792933][T17799] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1062.798862][T17799] RIP: 0033:0x7ff04b38eec9 [ 1062.803396][T17799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1062.823053][T17799] RSP: 002b:00007ff04c192038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1062.831555][T17799] RAX: ffffffffffffffda RBX: 00007ff04b5e6090 RCX: 00007ff04b38eec9 [ 1062.839591][T17799] RDX: 00002000000002c0 RSI: 0000000000000707 RDI: 0000000000000005 [ 1062.847569][T17799] RBP: 00007ff04b411f91 R08: 0000000000000000 R09: 0000000000000000 [ 1062.855596][T17799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1062.863616][T17799] R13: 00007ff04b5e6128 R14: 00007ff04b5e6090 R15: 00007ffdee054378 [ 1062.871633][T17799] [ 1062.874682][T17799] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1062.881967][T17799] CPU: 1 PID: 17799 Comm: syz.3.3477 Not tainted syzkaller #0 [ 1062.889437][T17799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1062.899492][T17799] Call Trace: [ 1062.902771][T17799] [ 1062.905702][T17799] dump_stack_lvl+0x168/0x22e [ 1062.910397][T17799] ? memcpy+0x3c/0x60 [ 1062.914392][T17799] ? show_regs_print_info+0x12/0x12 [ 1062.919593][T17799] ? load_image+0x3b0/0x3b0 [ 1062.924115][T17799] panic+0x2c9/0x710 [ 1062.928042][T17799] ? bpf_jit_dump+0xd0/0xd0 [ 1062.932560][T17799] __warn+0x2f8/0x4f0 [ 1062.936559][T17799] ? usb_submit_urb+0x11a5/0x1910 [ 1062.941604][T17799] ? usb_submit_urb+0x11a5/0x1910 [ 1062.946633][T17799] report_bug+0x2ba/0x4f0 [ 1062.950964][T17799] ? usb_submit_urb+0x11a5/0x1910 [ 1062.956011][T17799] handle_bug+0x3a/0x70 [ 1062.960194][T17799] exc_invalid_op+0x16/0x40 [ 1062.964720][T17799] asm_exc_invalid_op+0x16/0x20 [ 1062.969568][T17799] RIP: 0010:usb_submit_urb+0x11a5/0x1910 [ 1062.975213][T17799] Code: ff df 0f b6 44 05 00 84 c0 0f 85 6f 06 00 00 45 0f b6 07 48 c7 c7 60 3f 2e 8b 48 8b 74 24 18 4c 89 e2 44 89 f1 e8 9b 41 37 fb <0f> 0b 49 bc 00 00 00 00 00 fc ff df e9 93 f3 ff ff 89 e9 80 e1 07 [ 1062.994942][T17799] RSP: 0018:ffffc900062ef868 EFLAGS: 00010246 [ 1063.001029][T17799] RAX: f980c50c296b8f00 RBX: ffff888023835000 RCX: 0000000000080000 [ 1063.009013][T17799] RDX: ffffc9001c74c000 RSI: 0000000000004a25 RDI: 0000000000004a26 [ 1063.017002][T17799] RBP: 1ffff1100508b6c3 R08: dffffc0000000000 R09: fffff52000c5de9d [ 1063.024976][T17799] R10: fffff52000c5de9d R11: 1ffff92000c5de9c R12: ffff88814c8e0ca8 [ 1063.032952][T17799] R13: ffff888054b820f8 R14: 0000000080004180 R15: ffff88802845b618 [ 1063.040955][T17799] ? usb_submit_urb+0x11a5/0x1910 [ 1063.045994][T17799] usb_start_wait_urb+0x111/0x4b0 [ 1063.051029][T17799] ? usb_api_blocking_completion+0xb0/0xb0 [ 1063.056855][T17799] ? __kmalloc+0xe1/0x240 [ 1063.061198][T17799] usb_control_msg+0x22f/0x3e0 [ 1063.065984][T17799] dib0700_i2c_xfer+0xbbd/0xf80 [ 1063.070856][T17799] ? rt_mutex_slowlock+0x35a/0x710 [ 1063.075974][T17799] ? dib0700_set_gpio+0x1f0/0x1f0 [ 1063.081024][T17799] __i2c_transfer+0x864/0x2260 [ 1063.085805][T17799] ? i2c_cmd+0x110/0x110 [ 1063.090056][T17799] ? __might_fault+0xa6/0x120 [ 1063.094769][T17799] ? i2c_transfer+0x117/0x390 [ 1063.099454][T17799] i2c_transfer+0x24c/0x390 [ 1063.103964][T17799] ? __i2c_transfer+0x2260/0x2260 [ 1063.109007][T17799] ? __might_fault+0xc2/0x120 [ 1063.113695][T17799] ? __might_fault+0xa6/0x120 [ 1063.118402][T17799] ? _copy_from_user+0x10b/0x170 [ 1063.123364][T17799] i2cdev_ioctl_rdwr+0x3da/0x6c0 [ 1063.128336][T17799] i2cdev_ioctl+0x5ba/0x750 [ 1063.132861][T17799] ? i2cdev_write+0x120/0x120 [ 1063.137586][T17799] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1063.142563][T17799] ? security_file_ioctl+0x7c/0xa0 [ 1063.147725][T17799] ? i2cdev_write+0x120/0x120 [ 1063.152468][T17799] __se_sys_ioctl+0xfa/0x170 [ 1063.157096][T17799] do_syscall_64+0x4c/0xa0 [ 1063.161523][T17799] ? clear_bhb_loop+0x60/0xb0 [ 1063.166225][T17799] ? clear_bhb_loop+0x60/0xb0 [ 1063.170910][T17799] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1063.176810][T17799] RIP: 0033:0x7ff04b38eec9 [ 1063.181234][T17799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1063.200862][T17799] RSP: 002b:00007ff04c192038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1063.209284][T17799] RAX: ffffffffffffffda RBX: 00007ff04b5e6090 RCX: 00007ff04b38eec9 [ 1063.217269][T17799] RDX: 00002000000002c0 RSI: 0000000000000707 RDI: 0000000000000005 [ 1063.225258][T17799] RBP: 00007ff04b411f91 R08: 0000000000000000 R09: 0000000000000000 [ 1063.233237][T17799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1063.241212][T17799] R13: 00007ff04b5e6128 R14: 00007ff04b5e6090 R15: 00007ffdee054378 [ 1063.249201][T17799] [ 1063.252500][T17799] Kernel Offset: disabled [ 1063.257010][T17799] Rebooting in 86400 seconds..