last executing test programs: 18m47.960836729s ago: executing program 1 (id=1321): openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) creat(&(0x7f0000000540)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x6c) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x281, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000050}, 0x20000050) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r5, 0x0, 0x4, 0x0, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) sendmmsg$inet(r6, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040) inotify_rm_watch(0xffffffffffffffff, 0x0) 18m46.703077537s ago: executing program 1 (id=1333): sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x8010) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x70, 0x29, 0x4, {0x4, 0xa, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0x80, 0x14, "09e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad"}, @calipso={0x7, 0x8, {0x1, 0x0, 0x7a, 0x8001}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93}]}}}, @hoplimit={{0x14}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @rthdr={{0x18}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x3a, 0x2, 0x2, 0x70, 0x0, [@mcast1]}}}], 0x100}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46", 0xb5}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 18m44.861818469s ago: executing program 1 (id=1330): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)}}], 0x1, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="36c1fefc4a84", 0x6}], 0x1, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x100, 0x29, 0x4, {0x4, 0x1c, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x72, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5"}, @generic={0x80, 0x14, "09e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad"}, @calipso={0x7, 0x30, {0x1, 0xa, 0x7a, 0x8001, [0x5, 0x4, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @hao={0xc9, 0x10, @private2}, @generic={0x93}]}}}, @hoplimit={{0x14}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}], 0x198}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 18m43.628817226s ago: executing program 1 (id=1338): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x108, 0x29, 0x4, {0x4, 0x1d, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x72, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5"}, @generic={0x80, 0x14, "09e12e5f0b6bdcf72f2ec7008a15fa88b025e0ad"}, @calipso={0x7, 0x30, {0x1, 0xa, 0x7a, 0x8001, [0x5, 0x4, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @hao={0xc9, 0x10, @private2}, @generic={0x93}]}}}, @hoplimit={{0x14}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}], 0x1a0}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)=',8Z', 0x3) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 18m41.763327008s ago: executing program 1 (id=1344): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) umount2(0x0, 0x9) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0xff, 0x4a1, &(0x7f00000004c0)="$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") getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000340)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="b702000010000000bfa300000000000007030000f0ffffff7a0af0ff0000000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87867c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b2314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f86bb47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8dd63d4b77b206000000000000e254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad91935a6ddfa8f90e79321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f3813e2c25a61ec45c3af9948f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469600241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c12e28ef97d9ebd9c77f1774cf4683c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f011000000f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497a6103876843ee04ed9ff002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd1304202274f20675eb781925440578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e9338c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b96508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e25c89b552d7fcd116bce9c764c714c9402c21d1aac59efb28d4f91652f6000000000000000320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a575939206d0c0f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000ff0ffd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536607a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8000000edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db76cf059f40fa2640b6bfb74dd35391b8fa18479da9f4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847db97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ccfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000000000000000000003ba34b611569a451564d3a5400f9097ffe7a37e765be352be71ee24250d6828562c7e24cb763062d6000c409de6a6135eae8a00000000008d797190a26c933f933aff5c521eeb7a84a62d148a846e74e76b515b6b8be29e8b69310fa130cf6d6b74f33205d3cc218ca554ed8085ae044f5bf2e89a0000bde05c114e7a020fc1a5fd3eeeb822008b2d7d1cc062b51b0aca4956b557e51a1385cc572b0074b0950fb1437de2590bf99ec7ceb69e1fe2465fce099c992d57b804a22e148ae3411523814aee03ee2df877edfabf4aa94f07c6fdd127e57a8bf7975f2e606c25a299980a6e52fcf7849d45bb38573fbba8afef1aa7a24c805f7aee3e39a3000000000000000000000000000000000000878f88c4742ac490951c36c610a0d266588ec6a0bd300cf160b5a5d9e9fafa49ecc8430832d795e727b7fc2b76e7fc4141fdbb82f45d3cdd3fb8d4b443ab4954fdf5c1b9a6ab3e457f098329307ccb0a1989b6c37509692e952e7244f48bc12569ff8eb30d0f887b85b5ef44fb9a7571319190be0c226ed72f346cc4aa071ae0c72fa8bd00d5590c4f4ba65d0c8e1f4870fe3c414681e41b40163eb1aa2a7429a2208cd6e69c7d959e87da3fd0101159a03ab7fe78881ee7a1ee7a2edff75fb18a181e0c54352be2b7a5b5273198291c28d9141deeb3cdba5d414ae4b0000000000000000000000000009eacd83458d8a606be71970497a4fd4ca3b48ca482ab3804e2fac216b3ba613608b1a465456a33fd08491d337d7344c01cfc9e73"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2f00020b, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf4ec9f7b986", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(r0, 0x24, &(0x7f0000000000)={0x2, 0x2, 0x0, 0x800003fffffffffd}) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='task\x00') getdents64(r5, &(0x7f0000000000)=""/90, 0x5a) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$FIONCLEX(r0, 0x5450) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r5, 0xd000943d, &(0x7f0000002200)={0x80f3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x6, "bdcd8cb4efc6a7"}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f0000003200)={{r7, 0x7, 0x5, 0x800, 0xa1, 0x0, 0x3, 0x2e, 0x2, 0xf, 0x200, 0x8, 0x8, 0xa362, 0x4}}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 18m39.87769436s ago: executing program 1 (id=1351): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x800000, &(0x7f00000012c0)={[{@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'cp775'}}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@shortname_win95}, {@fat=@codepage={'codepage', 0x3d, '949'}}, {@shortname_winnt}, {@shortname_lower}, {@uni_xlateno}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@utf8no}, {@utf8no}]}, 0x26, 0x34c, &(0x7f0000001740)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0) pwrite64(r3, &(0x7f0000000300)="3590a5adc3d6102b705b69345f8726", 0xfffffffffffffff0, 0x8000c61) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000300)='lp', 0x2) r4 = socket$xdp(0x2c, 0x3, 0x0) getrlimit(0x4, &(0x7f00000001c0)) sched_setscheduler(0x0, 0x6, 0x0) io_setup(0x3, 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$UHID_CREATE2(r5, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) getsockopt$XDP_MMAP_OFFSETS(r4, 0x11b, 0x1, &(0x7f0000002200), &(0x7f0000000740)=0x80) 18m24.755108316s ago: executing program 32 (id=1351): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x800000, &(0x7f00000012c0)={[{@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'cp775'}}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@shortname_win95}, {@fat=@codepage={'codepage', 0x3d, '949'}}, {@shortname_winnt}, {@shortname_lower}, {@uni_xlateno}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@utf8no}, {@utf8no}]}, 0x26, 0x34c, &(0x7f0000001740)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0) pwrite64(r3, &(0x7f0000000300)="3590a5adc3d6102b705b69345f8726", 0xfffffffffffffff0, 0x8000c61) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000300)='lp', 0x2) r4 = socket$xdp(0x2c, 0x3, 0x0) getrlimit(0x4, &(0x7f00000001c0)) sched_setscheduler(0x0, 0x6, 0x0) io_setup(0x3, 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) write$UHID_CREATE2(r5, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) getsockopt$XDP_MMAP_OFFSETS(r4, 0x11b, 0x1, &(0x7f0000002200), &(0x7f0000000740)=0x80) 13.189569497s ago: executing program 3 (id=3831): syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100001d9167204f17316a3f2601020301090212"], 0x0) r0 = syz_io_uring_setup(0x237, &(0x7f0000000280)={0x0, 0x275, 0x400, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$rds(0xffffffffffffffff, 0x0, 0x4000008) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x12, 0x0, 0x3}, 0x9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x38, 0x0, @fd=r0, 0x100000001, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 11.747531387s ago: executing program 0 (id=3837): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_usb_connect(0x5, 0x27, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb7, 0x5c, 0x7f, 0x40, 0x547, 0x201, 0x1164, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa2, 0xcd, 0xd2}}]}}]}}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, r2, 0x6419aa27cadae9f1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x800) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, 0x0, 0xd1bd17c4b9ef5e5b, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x90) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00'}) 11.377271138s ago: executing program 3 (id=3840): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000000c0)) read$dsp(r1, &(0x7f00000001c0)=""/95, 0x5f) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) ioctl$PTP_ENABLE_PPS(r5, 0x40043d04, 0x0) 10.031021947s ago: executing program 4 (id=3843): r0 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x4, 0x7, 0x8, 0x5, 0x0, @local, @mcast2, 0x8, 0x7, 0x2, 0x1}}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000880)={0x118, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1e}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x62}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x24040052}, 0x45) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r2, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {0x0}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd4649", 0xc}], 0x3}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="36c1fefc4a84cb", 0x7}], 0x1, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x2c8}}], 0x1, 0x810) getpeername$l2tp6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @private2}, &(0x7f00000007c0)=0x20) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 8.880775804s ago: executing program 4 (id=3844): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x0, 0x0) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r2, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x14, 0x984995b43da11a79, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 8.868138064s ago: executing program 0 (id=3845): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) chmod(0x0, 0x3c8) 8.637329476s ago: executing program 4 (id=3846): r0 = syz_usb_connect(0x5, 0x3f, &(0x7f0000000140)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000500)={0x14, &(0x7f00000000c0)=ANY=[], 0x0}, 0x0) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) 8.429993737s ago: executing program 2 (id=3847): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x6f4, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000c80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELTABLE={0x34, 0x2, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0x94, 0x14, 0xa, 0x707, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_USERDATA={0x12, 0x8, "fde2a31ab89a37f787f7543eb3fe"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_USERDATA={0x4c, 0x8, "af825967bb421a92bb5649254365ae754fb3e033a3147708ae6e9a7c9980482fbbb957e5ef6f833d56fd2a07b7174f68cd740345410fb4f333fd22997b0e7e1bd0a95a36dc13e492"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xf0}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x8000) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000f000000050030000000000005002f000300000008000300", @ANYRES32=r3], 0x2c}}, 0x0) 7.651153812s ago: executing program 0 (id=3848): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() pipe(0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) sendto$inet(r5, &(0x7f00000006c0)="49b3df4f9f1aeb16fedcdcd91277af62f1bb597b6f033c53dfd8463e5ed8a391e49a5dfb02796df7c540e4fffc429aa7ee58ee066a393bb808d46741e8f86de44e7c085cf20ad1360970fd39f058f6a2a48e298f50820f48d75d86151b3e542728e08a31e10beee810bafd69cdc25bf458df711770aeca3a463c047c11062fdbbdfe5a656abe7a1abb6faea1b6c5", 0x8e, 0x20000000, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00'}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r7, 0x84, 0x78, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r9, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000000000500010007000000080009400000000114000880100007800a001100aa"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 7.650298472s ago: executing program 2 (id=3849): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000440)=""/247, 0x26) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f00000000c0)={0x31, @tick=0x40, 0x4, {0x0, 0x2}, 0xa, 0x0, 0x8}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, 0x0) tkill(r0, 0x7) 7.549486783s ago: executing program 3 (id=3850): syz_open_dev$vbi(0x0, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) creat(0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)={0x54, r3, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SCAN_SSIDS={0x1c, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0x4e, 0x0, @default_ap_ssid}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x2400c851}, 0x4) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)) 6.600282049s ago: executing program 0 (id=3851): syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x800) mkdir(0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x18) r1 = syz_clone3(&(0x7f00000005c0)={0x4802c100, &(0x7f00000001c0), &(0x7f00000002c0), &(0x7f0000000340), {0x2a}, &(0x7f0000000400)=""/73, 0x49, &(0x7f0000000480)=""/215, &(0x7f0000000580)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x8}, 0x58) prlimit64(r1, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) capset(0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000380), 0x0, 0x62001) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x5, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="ea00000003", 0xfffffffffffffffd, 0x0, 0x10010, 0x2, 0x0}) r6 = socket(0x1000000000000010, 0x80802, 0x0) sendmsg(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)}, 0x404c085) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000035c0)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x240000c0) 6.581200549s ago: executing program 2 (id=3852): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mount$9p_virtio(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0xc9e43) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000440)={r3, 0x2000, {0x0, 0x0, 0x0, 0x8, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03741250ceaac50104000041dd17c18e8438ef2a565ef1e833236500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a5e77a68e174f000300ffffffffff0fe200"}}) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='cgroup\x00') pread64(r5, &(0x7f000001a240)=""/102387, 0x18ff3, 0x100008) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x1}}}, 0x4) 6.537317289s ago: executing program 3 (id=3853): r0 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x4, 0x7, 0x8, 0x5, 0x0, @local, @mcast2, 0x8, 0x7, 0x2, 0x1}}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000880)={0x118, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1e}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x62}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x24040052}, 0x45) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r2, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {0x0}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd4649", 0xc}], 0x3}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="36c1fefc4a84cb", 0x7}], 0x1, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x2c8}}], 0x1, 0x810) getpeername$l2tp6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @private2}, &(0x7f00000007c0)=0x20) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 5.081132588s ago: executing program 0 (id=3854): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_usb_connect(0x5, 0x27, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb7, 0x5c, 0x7f, 0x40, 0x547, 0x201, 0x1164, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa2, 0xcd, 0xd2}}]}}]}}, 0x0) readv(0xffffffffffffffff, &(0x7f0000000140), 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x2c, r2, 0x6419aa27cadae9f1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x800) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, 0x0, 0xd1bd17c4b9ef5e5b, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x90) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00'}) 4.930720079s ago: executing program 4 (id=3855): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000640)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}, 0x1}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0xfe, 0x0, 0x0, 0x1, 0x0, 0xfd, 0x0, 0x4, 0x88, 0x1, 0xfd, 0x3}, 0xe) shutdown(r0, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) 3.944886155s ago: executing program 2 (id=3856): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0x36b78000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x104}}, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x38, 0x30, 0x0, 0x62, 0x86cc4097e8288a3a, 0x0, 0x0, 0x39, 0x34, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64]}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x1d) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 2.907857591s ago: executing program 2 (id=3857): prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680)) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0xf3, 0x130c17, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80d02, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, &(0x7f0000000000)=0x18, 0x4) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) fremovexattr(r0, &(0x7f0000000480)=ANY=[]) syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) 2.882253312s ago: executing program 3 (id=3858): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000000c0)) read$dsp(r1, &(0x7f00000001c0)=""/95, 0x5f) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) ioctl$PTP_ENABLE_PPS(r5, 0x40043d04, 0x0) 876.760404ms ago: executing program 0 (id=3859): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {0x0}}, 0x18) 844.376424ms ago: executing program 4 (id=3860): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r1, &(0x7f0000000440)=""/247, 0x26) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f00000000c0)={0x31, @tick=0x40, 0x4, {0x0, 0x2}, 0xa, 0x0, 0x8}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, 0x0) tkill(r0, 0x7) 701.404635ms ago: executing program 2 (id=3861): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r2, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x0, 0x0, 0x0}) 665.157666ms ago: executing program 3 (id=3862): r0 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x4, 0x7, 0x8, 0x5, 0x0, @local, @mcast2, 0x8, 0x7, 0x2, 0x1}}) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000880)={0x13c, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1e}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x62}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x24040052}, 0x45) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$sock(r2, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {0x0}, {&(0x7f00000005c0)="f2b314c96d500b66f7fd4649", 0xc}], 0x3}}], 0x1, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)="36c1fefc4a84cb34adfedaf4648e", 0xe}], 0x1, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x2c8}}], 0x1, 0x810) getpeername$l2tp6(0xffffffffffffffff, &(0x7f0000000780)={0xa, 0x0, 0x0, @private2}, &(0x7f00000007c0)=0x20) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 0s ago: executing program 4 (id=3863): syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x800) mkdir(0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x18) r1 = syz_clone3(&(0x7f00000005c0)={0x4802c100, &(0x7f00000001c0), &(0x7f00000002c0), &(0x7f0000000340), {0x2a}, &(0x7f0000000400)=""/73, 0x49, &(0x7f0000000480)=""/215, &(0x7f0000000580)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x8}, 0x58) prlimit64(r1, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) capset(0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000380), 0x0, 0x62001) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x5, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="ea00000003", 0xfffffffffffffffd, 0x0, 0x10010, 0x2, 0x0}) r6 = socket(0x1000000000000010, 0x80802, 0x0) sendmsg(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)}, 0x404c085) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000035c0)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x240000c0) kernel console output (not intermixed with test programs): [ 1253.208894][ T1130] veth1_vlan: left promiscuous mode [ 1253.226645][ T1130] veth0_vlan: left promiscuous mode [ 1253.413166][ T28] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1253.614639][ T28] usb 1-1: Using ep0 maxpacket: 8 [ 1253.636077][ T28] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1253.684920][ T28] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1253.723094][ T28] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1253.891911][T16659] fuse: Bad value for 'fd' [ 1254.978271][T16672] overlayfs: missing 'lowerdir' [ 1255.626315][ T1130] team0 (unregistering): Port device team_slave_1 removed [ 1255.722211][ T1130] team0 (unregistering): Port device team_slave_0 removed [ 1255.827440][ T1130] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1255.918270][ T1130] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1256.141331][ T9] usb 1-1: USB disconnect, device number 18 [ 1257.236878][ T1130] bond0 (unregistering): Released all slaves [ 1257.592974][ T23] usb 4-1: USB disconnect, device number 24 [ 1259.884047][T16730] overlayfs: failed to clone upperpath [ 1260.342713][T16739] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2724'. [ 1261.403771][T14336] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1261.433008][ T9] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 1261.994033][T14336] usb 3-1: Using ep0 maxpacket: 8 [ 1262.214790][ T9] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1262.232948][T14336] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1262.259573][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1262.267541][T14336] usb 3-1: config 246 has an invalid interface number: 144 but max is 0 [ 1262.277516][T14336] usb 3-1: config 246 has no interface number 0 [ 1262.285510][T14336] usb 3-1: config 246 interface 144 has no altsetting 0 [ 1262.294468][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1262.303831][ T9] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1262.315129][T14336] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=c6.3d [ 1262.332948][ T9] usb 1-1: Product: syz [ 1262.341841][T14336] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1262.350160][ T9] usb 1-1: Manufacturer: syz [ 1262.359082][ T9] usb 1-1: SerialNumber: syz [ 1262.370120][T14336] usb 3-1: Product: syz [ 1262.378009][ T9] usb 1-1: config 0 descriptor?? [ 1262.393400][T14336] usb 3-1: Manufacturer: syz [ 1262.467214][T14336] usb 3-1: SerialNumber: syz [ 1262.525937][ T9] usb 1-1: selecting invalid altsetting 0 [ 1263.866171][T14336] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1263.895999][T16766] overlayfs: failed to clone upperpath [ 1263.931898][T14336] r8152-cfgselector 3-1: USB disconnect, device number 17 [ 1263.978944][T16768] overlayfs: failed to resolve './file1': -2 [ 1264.086995][T16772] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1264.096259][T16772] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1264.108666][T16772] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1264.780875][T16793] netlink: 'syz.4.2740': attribute type 10 has an invalid length. [ 1264.789146][T16793] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2740'. [ 1264.833211][T16793] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1264.840146][T16793] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1265.413129][T14336] usb 1-1: USB disconnect, device number 19 [ 1265.523866][T16797] overlayfs: failed to resolve './file1': -2 [ 1265.798097][T16799] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2743'. [ 1266.046410][T16801] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1266.163030][T16801] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1266.189869][T16801] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1267.474156][T16831] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1267.497327][T16831] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 1267.509164][ T23] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 1267.542168][T16831] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1267.674776][T16835] netlink: 'syz.2.2755': attribute type 10 has an invalid length. [ 1267.682880][T16835] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2755'. [ 1267.714955][T16835] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1267.721732][T16835] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1267.843712][ T23] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1268.047485][ T23] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1268.311190][ T23] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1268.330318][ T23] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1268.350179][ T23] usb 1-1: Product: syz [ 1268.360308][ T23] usb 1-1: Manufacturer: syz [ 1268.370327][ T23] usb 1-1: SerialNumber: syz [ 1268.405907][ T23] usb 1-1: config 0 descriptor?? [ 1268.421492][ T23] usb 1-1: selecting invalid altsetting 0 [ 1268.663287][ T5782] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 1269.679056][ T27] kauditd_printk_skb: 19 callbacks suppressed [ 1269.679075][ T27] audit: type=1326 audit(1762529003.685:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16845 comm="syz.4.2764" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdbea38f6c9 code=0x0 [ 1269.746221][ T5782] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1269.785467][ T5782] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1269.807364][ T5782] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1269.822453][ T5782] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1269.837283][ T5782] usb 3-1: Product: syz [ 1269.841952][ T5782] usb 3-1: Manufacturer: syz [ 1269.847151][ T5782] usb 3-1: SerialNumber: syz [ 1269.861082][ T5782] usb 3-1: config 0 descriptor?? [ 1269.890501][ T5782] usb 3-1: selecting invalid altsetting 0 [ 1270.112294][T16856] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1271.203179][ T23] usb 1-1: USB disconnect, device number 20 [ 1272.195399][T14336] usb 3-1: USB disconnect, device number 18 [ 1272.526043][T16876] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2773'. [ 1273.750710][T14336] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1274.120860][T16890] overlayfs: missing 'lowerdir' [ 1274.182980][T14336] usb 1-1: Using ep0 maxpacket: 8 [ 1274.193982][T14336] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1274.206956][T14336] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1274.223010][T14336] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1274.238984][T14336] usb 1-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1274.259043][T14336] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1274.269106][T14336] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1274.292049][T14336] usbtmc 1-1:16.0: bulk endpoints not found [ 1274.583702][T14336] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 1275.375548][T14336] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1275.385860][T14336] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1275.397625][T14336] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1275.406989][T14336] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1275.415574][T14336] usb 3-1: Product: syz [ 1275.419916][T14336] usb 3-1: Manufacturer: syz [ 1275.424901][T14336] usb 3-1: SerialNumber: syz [ 1275.433119][T14336] usb 3-1: config 0 descriptor?? [ 1275.449551][T14336] usb 3-1: selecting invalid altsetting 0 [ 1276.720502][ T5782] usb 1-1: USB disconnect, device number 21 [ 1278.658830][T15954] usb 3-1: USB disconnect, device number 19 [ 1280.099147][ T5861] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1280.597034][ T5861] usb 4-1: config 0 has no interfaces? [ 1280.678770][ T5861] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1280.713683][ T5861] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1280.721762][ T5861] usb 4-1: Product: syz [ 1280.736438][ T5861] usb 4-1: Manufacturer: syz [ 1280.741112][ T5861] usb 4-1: SerialNumber: syz [ 1280.831705][ T5861] usb 4-1: config 0 descriptor?? [ 1280.903873][T16928] overlayfs: missing 'lowerdir' [ 1282.319013][ T23] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1282.436717][ T5782] usb 4-1: USB disconnect, device number 25 [ 1282.614315][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 1282.648449][ T23] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1282.698131][ T23] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1282.750460][ T23] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1282.792493][ T23] usb 3-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1282.837844][ T23] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1282.859189][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1282.967492][ T23] usbtmc 3-1:16.0: bulk endpoints not found [ 1284.543018][ T5861] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 1284.706285][T16956] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2797'. [ 1284.756299][ T5861] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1284.771709][ T5861] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1284.783769][ T5861] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1284.799136][ T5861] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1284.808124][ T5861] usb 1-1: Product: syz [ 1284.812467][ T5861] usb 1-1: Manufacturer: syz [ 1284.822616][ T5861] usb 1-1: SerialNumber: syz [ 1284.832527][ T5861] usb 1-1: config 0 descriptor?? [ 1284.846154][ T5861] usb 1-1: selecting invalid altsetting 0 [ 1286.324617][T15954] usb 3-1: USB disconnect, device number 20 [ 1286.838800][ T23] usb 1-1: USB disconnect, device number 22 [ 1288.519732][T16990] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2808'. [ 1289.133026][ T5861] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1289.322979][ T5861] usb 3-1: Using ep0 maxpacket: 8 [ 1289.330814][ T5861] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1289.346574][ T5861] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1289.358142][ T5861] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1289.368576][ T5861] usb 3-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1289.400356][ T5861] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1289.421076][ T5861] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1289.447568][ T5861] usbtmc 3-1:16.0: bulk endpoints not found [ 1289.488844][T16999] overlayfs: missing 'workdir' [ 1290.132403][ T23] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 1290.470310][ T23] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1290.480679][ T23] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1290.510113][ T23] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1290.519377][ T23] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1290.532019][ T23] usb 4-1: Product: syz [ 1290.538398][ T23] usb 4-1: Manufacturer: syz [ 1290.545420][ T23] usb 4-1: SerialNumber: syz [ 1290.561497][ T23] usb 4-1: config 0 descriptor?? [ 1290.612893][ T23] usb 4-1: selecting invalid altsetting 0 [ 1291.071674][T17021] overlayfs: missing 'workdir' [ 1291.881327][T15954] usb 3-1: USB disconnect, device number 21 [ 1292.571023][T17034] siw: device registration error -23 [ 1292.883446][T15954] usb 4-1: USB disconnect, device number 26 [ 1294.492897][T14336] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 1294.686006][T14336] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1294.732477][T14336] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1294.766999][T14336] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1294.793090][T14336] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1294.820229][T14336] usb 1-1: Product: syz [ 1294.834454][T14336] usb 1-1: Manufacturer: syz [ 1294.856140][T14336] usb 1-1: SerialNumber: syz [ 1294.880899][T14336] usb 1-1: config 0 descriptor?? [ 1294.898017][T17077] fuse: Bad value for 'fd' [ 1294.912399][T14336] usb 1-1: selecting invalid altsetting 0 [ 1295.113045][T17079] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2840'. [ 1296.922885][T17093] netlink: 'syz.2.2844': attribute type 10 has an invalid length. [ 1296.931523][T17093] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2844'. [ 1297.723641][ T5782] usb 1-1: USB disconnect, device number 23 [ 1297.918184][T17099] fuse: Bad value for 'fd' [ 1298.192879][ T23] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1298.414241][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 1298.430283][ T23] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1298.442099][ T23] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1298.452486][ T23] usb 3-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1298.463404][ T23] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1298.476632][ T23] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1298.497391][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1298.523843][ T23] usbtmc 3-1:16.0: bulk endpoints not found [ 1299.306453][T17122] overlayfs: failed to clone upperpath [ 1299.663108][T17129] netlink: 'syz.0.2855': attribute type 10 has an invalid length. [ 1299.671096][T17129] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2855'. [ 1299.702289][T17129] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1299.709144][T17129] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1300.338610][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.359257][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.507881][ T5861] usb 3-1: USB disconnect, device number 22 [ 1301.592014][T17154] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2863'. [ 1303.184344][T17184] netlink: 'syz.3.2867': attribute type 10 has an invalid length. [ 1303.192401][T17184] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2867'. [ 1303.289631][T17184] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1303.297103][T17184] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1303.323209][T17184] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1304.853016][T17202] fuse: Bad value for 'fd' [ 1306.656420][T17213] mkiss: ax0: crc mode is auto. [ 1307.327034][T17216] xt_connbytes: Forcing CT accounting to be enabled [ 1307.349725][T17216] Cannot find set identified by id 0 to match [ 1307.446994][T17218] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2883'. [ 1309.459978][T17238] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2889'. [ 1309.970172][T17253] gfs2: gfs2 mount does not exist [ 1311.796721][T17268] process 'syz.4.2899' launched './file1' with NULL argv: empty string added [ 1311.860249][T17271] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2900'. [ 1313.396118][T17297] fuse: Bad value for 'fd' [ 1313.606249][T17303] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2912'. [ 1315.098055][T17315] netlink: 'syz.4.2915': attribute type 10 has an invalid length. [ 1315.106307][T17315] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2915'. [ 1316.640811][T17329] fuse: Bad value for 'fd' [ 1316.734160][T15954] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 1316.945087][T15954] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1316.962452][T15954] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1316.974472][T15954] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1316.990490][T15954] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1316.999511][T15954] usb 3-1: Product: syz [ 1317.019155][T15954] usb 3-1: Manufacturer: syz [ 1317.026862][T15954] usb 3-1: SerialNumber: syz [ 1317.891509][T15954] usb 3-1: config 0 descriptor?? [ 1317.907403][T15954] usb 3-1: selecting invalid altsetting 0 [ 1318.653342][T17344] gfs2: gfs2 mount does not exist [ 1321.899956][T14336] usb 3-1: USB disconnect, device number 23 [ 1322.336494][T17360] fuse: Unknown parameter 'grou00000000000000000000' [ 1322.796357][T17368] overlayfs: missing 'lowerdir' [ 1322.948418][T17375] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2936'. [ 1323.048610][T17379] fuse: Unknown parameter 'grou00000000000000000000' [ 1323.162043][T17372] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2935'. [ 1324.765119][T17399] overlayfs: missing 'lowerdir' [ 1325.299267][T17406] fuse: Bad value for 'fd' [ 1325.812944][ T5861] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 1326.083988][ T5861] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1326.187753][ T5861] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1326.315330][ T5861] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1326.343914][ T5861] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1326.367709][ T5861] usb 1-1: Product: syz [ 1326.371950][ T5861] usb 1-1: Manufacturer: syz [ 1326.390874][ T5861] usb 1-1: SerialNumber: syz [ 1326.426857][ T5861] usb 1-1: config 0 descriptor?? [ 1326.458195][ T5861] usb 1-1: selecting invalid altsetting 0 [ 1327.895797][T17428] overlayfs: missing 'lowerdir' [ 1328.176719][T17437] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2959'. [ 1328.533101][ T5861] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1328.622026][T17449] netlink: 'syz.4.2962': attribute type 10 has an invalid length. [ 1328.630390][T17449] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2962'. [ 1329.291993][T17447] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2961'. [ 1329.313697][ T5861] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1329.348355][ T5861] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1329.358007][ T5861] usb 3-1: Product: syz [ 1329.362292][ T5861] usb 3-1: Manufacturer: syz [ 1329.367747][ T5861] usb 3-1: SerialNumber: syz [ 1329.375143][ T5861] usb 3-1: config 0 descriptor?? [ 1329.395847][ T8] usb 1-1: USB disconnect, device number 24 [ 1329.464163][ T5861] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1329.486374][ T5861] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1329.496625][ T5861] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1329.508026][ T5861] usb 3-1: media controller created [ 1329.755721][ T5861] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1331.014683][ T5861] DVB: Unable to find symbol mt352_attach() [ 1331.680336][ T5861] DVB: Unable to find symbol nxt6000_attach() [ 1331.721611][ T5861] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1332.480865][ T5861] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input12 [ 1332.532436][ T5861] dvb-usb: schedule remote query interval to 1000 msecs. [ 1332.559976][ T5861] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1332.607637][ T5861] dvb-usb: bulk message failed: -22 (7/0) [ 1332.631016][ T5861] dvb-usb: bulk message failed: -22 (7/0) [ 1332.662067][ T5861] usb 3-1: USB disconnect, device number 24 [ 1333.329789][ T5861] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1334.951731][T17487] netlink: 'syz.4.2972': attribute type 10 has an invalid length. [ 1334.959842][T17487] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2972'. [ 1336.530983][T17499] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2977'. [ 1338.084382][T17520] netlink: 'syz.3.2983': attribute type 10 has an invalid length. [ 1338.092499][T17520] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2983'. [ 1339.319904][T17536] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2988'. [ 1341.078241][T17563] netlink: 'syz.0.2994': attribute type 10 has an invalid length. [ 1341.087308][T17563] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2994'. [ 1341.879555][T17574] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3003'. [ 1341.899878][T17575] fuse: Bad value for 'fd' [ 1344.226746][ T5861] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 1344.611324][ T5861] usb 3-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 1344.623028][ T5861] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1344.631086][ T5861] usb 3-1: Product: syz [ 1344.664266][ T5861] usb 3-1: Manufacturer: syz [ 1344.669995][ T5861] usb 3-1: SerialNumber: syz [ 1344.685555][ T5861] usb 3-1: config 0 descriptor?? [ 1344.705580][ T5861] gspca_main: sq930x-2.14.0 probing 2770:930c [ 1344.713898][T17600] fuse: Bad value for 'fd' [ 1344.805524][T17602] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1344.853031][T17602] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1345.042401][T17607] fuse: Bad value for 'fd' [ 1345.528941][ T5861] gspca_sq930x: ucbus_write failed -71 [ 1345.802906][ T5861] gspca_sq930x: Sensor ov9630 not yet treated [ 1345.837790][ T5861] sq930x: probe of 3-1:0.0 failed with error -22 [ 1345.893474][ T5861] usb 3-1: USB disconnect, device number 25 [ 1347.652240][T17633] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1347.693425][T17633] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1347.839176][T17637] fuse: Bad value for 'fd' [ 1348.572842][T17625] Bluetooth: hci3: command 0x0406 tx timeout [ 1348.862074][T17650] fuse: Bad value for 'fd' [ 1349.073477][T17655] overlayfs: missing 'lowerdir' [ 1349.194053][T17657] netlink: 'syz.0.3032': attribute type 10 has an invalid length. [ 1349.243641][T17657] syz_tun: entered promiscuous mode [ 1349.284247][T17657] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1349.448662][T17662] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3035'. [ 1349.553186][T17663] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1351.721710][T17677] fuse: Bad value for 'fd' [ 1351.955466][T17684] overlayfs: missing 'lowerdir' [ 1352.834326][T17696] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3047'. [ 1355.644510][T17709] fuse: Bad value for 'fd' [ 1358.697742][T17722] overlayfs: missing 'lowerdir' [ 1360.386180][T17737] netlink: 'syz.4.3059': attribute type 10 has an invalid length. [ 1360.434902][T17737] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1360.464277][T17736] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1361.002940][T17745] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3062'. [ 1361.168988][T17745] tc_dump_action: action bad kind [ 1361.784263][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.790645][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.817532][T17753] netlink: 'syz.3.3065': attribute type 10 has an invalid length. [ 1361.825558][T17753] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3065'. [ 1363.013891][T17770] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1363.827469][T17773] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3071'. [ 1364.212900][ T5906] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1364.869122][ T5906] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1365.118328][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1365.167739][ T5906] usb 4-1: Product: syz [ 1365.182365][ T5906] usb 4-1: Manufacturer: syz [ 1365.209666][ T5906] usb 4-1: SerialNumber: syz [ 1365.234726][ T5906] usb 4-1: config 0 descriptor?? [ 1365.258504][ T5906] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1365.309178][ T5906] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1365.342578][ T5906] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1365.387875][ T5906] usb 4-1: media controller created [ 1365.637528][ T5906] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1366.707351][ T5906] DVB: Unable to find symbol mt352_attach() [ 1366.791606][T17797] overlayfs: failed to clone upperpath [ 1366.854394][ T5906] DVB: Unable to find symbol nxt6000_attach() [ 1366.862621][ T5906] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1366.890186][ T5906] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input13 [ 1366.952208][ T5906] dvb-usb: schedule remote query interval to 1000 msecs. [ 1366.963764][ T5906] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1366.987609][ T5906] dvb-usb: bulk message failed: -22 (7/0) [ 1367.002771][ T5906] dvb-usb: bulk message failed: -22 (7/0) [ 1367.350311][T17804] fuse: Bad value for 'fd' [ 1367.622399][ T5861] usb 4-1: USB disconnect, device number 27 [ 1367.721396][ T5861] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1369.033252][T17826] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3087'. [ 1369.346933][T17833] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3090'. [ 1369.733442][ T23] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1370.072970][ T23] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1370.142936][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1370.163996][ T23] usb 3-1: Product: syz [ 1370.207166][ T23] usb 3-1: Manufacturer: syz [ 1370.546376][ T23] usb 3-1: SerialNumber: syz [ 1370.585118][ T23] usb 3-1: config 0 descriptor?? [ 1370.635813][ T23] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1370.714634][ T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1370.733856][ T23] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1370.749581][ T23] usb 3-1: media controller created [ 1370.807237][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1370.865604][T17854] overlayfs: failed to clone upperpath [ 1371.318588][ T23] DVB: Unable to find symbol mt352_attach() [ 1372.244584][T17864] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3099'. [ 1372.617638][ T23] DVB: Unable to find symbol nxt6000_attach() [ 1372.625379][ T23] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1372.650596][ T23] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input14 [ 1372.677118][ T23] dvb-usb: schedule remote query interval to 1000 msecs. [ 1372.687021][ T23] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1372.698034][ T23] dvb-usb: bulk message failed: -22 (7/0) [ 1372.713499][ T23] dvb-usb: bulk message failed: -22 (7/0) [ 1372.833525][T17866] fuse: Invalid rootmode [ 1373.071748][ T5906] usb 3-1: USB disconnect, device number 26 [ 1373.193953][ T5906] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1374.317218][T17888] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3109'. [ 1374.539801][T17896] fuse: Invalid rootmode [ 1374.683335][ T5861] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1374.977870][ T5861] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1375.338981][T14336] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1375.385073][ T5861] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1375.402366][ T5861] usb 1-1: Product: syz [ 1375.407025][ T5861] usb 1-1: Manufacturer: syz [ 1375.412982][ T5861] usb 1-1: SerialNumber: syz [ 1375.421735][ T5861] usb 1-1: config 0 descriptor?? [ 1375.439642][ T5861] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1375.464441][ T5861] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1375.483304][ T5861] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1375.493919][ T5861] usb 1-1: media controller created [ 1375.526448][ T5861] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1375.572969][T14336] usb 3-1: Using ep0 maxpacket: 16 [ 1375.581085][T14336] usb 3-1: config 0 has an invalid interface number: 126 but max is 0 [ 1375.599312][T14336] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1375.625570][T14336] usb 3-1: config 0 has no interface number 0 [ 1375.851553][ T5861] DVB: Unable to find symbol mt352_attach() [ 1375.859070][T14336] usb 3-1: config 0 interface 126 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 1375.873617][T14336] usb 3-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 1375.892919][T14336] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1375.914586][T14336] usb 3-1: config 0 descriptor?? [ 1376.598269][T14336] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 1376.641598][ T5861] DVB: Unable to find symbol nxt6000_attach() [ 1376.654166][ T5861] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1376.706473][ T5861] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input15 [ 1376.785602][ T5861] dvb-usb: schedule remote query interval to 1000 msecs. [ 1376.818429][ T5861] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1377.817380][ T5861] dvb-usb: bulk message failed: -22 (7/0) [ 1377.868392][ T5861] dvb-usb: bulk message failed: -22 (7/0) [ 1377.880318][T14336] snd-usb-audio: probe of 3-1:0.126 failed with error -2 [ 1377.891160][ T9] dvb-usb: bulk message failed: -22 (7/0) [ 1377.898534][ T5861] usb 1-1: USB disconnect, device number 25 [ 1377.904909][ T9] dvb-usb: error while querying for an remote control event. [ 1377.919661][T14336] usb 3-1: USB disconnect, device number 27 [ 1377.949316][T17931] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3123'. [ 1377.959580][T17931] bridge_slave_1: left allmulticast mode [ 1377.972830][T17931] bridge_slave_1: left promiscuous mode [ 1377.978698][T17931] bridge0: port 2(bridge_slave_1) entered disabled state [ 1378.028379][ T5861] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1378.198891][T17931] bridge_slave_0: left allmulticast mode [ 1378.223199][T17931] bridge_slave_0: left promiscuous mode [ 1378.541114][T17931] bridge0: port 1(bridge_slave_0) entered disabled state [ 1379.146704][T17930] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3124'. [ 1382.480484][T17976] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1383.278344][ T23] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1383.493131][ T23] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 1383.501332][ T23] usb 3-1: config 0 has no interface number 0 [ 1383.526168][ T23] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1383.542774][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1383.550872][ T23] usb 3-1: Product: syz [ 1383.573147][ T23] usb 3-1: Manufacturer: syz [ 1383.578573][ T23] usb 3-1: SerialNumber: syz [ 1383.601884][T17985] fuse: Bad value for 'fd' [ 1383.615815][ T23] usb 3-1: config 0 descriptor?? [ 1383.645845][ T23] yurex 3-1:0.50: Could not find endpoints [ 1383.663015][ T5861] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 1384.075042][ T5861] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1384.211407][ T23] usb 3-1: USB disconnect, device number 28 [ 1384.344883][T17625] Bluetooth: hci1: command 0x0406 tx timeout [ 1384.775085][ T5861] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1384.819080][ T5861] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1384.833808][T17996] fuse: Bad value for 'group_id' [ 1384.845446][ T5861] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1384.946896][ T5861] usb 4-1: Product: syz [ 1385.145096][ T5861] usb 4-1: Manufacturer: syz [ 1385.208751][ T5861] usb 4-1: SerialNumber: syz [ 1385.505874][ T5861] usb 4-1: config 0 descriptor?? [ 1385.519282][ T5861] usb 4-1: selecting invalid altsetting 0 [ 1385.607956][T18000] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3148'. [ 1385.636018][T18001] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3147'. [ 1386.285188][T18007] netlink: 'syz.2.3151': attribute type 10 has an invalid length. [ 1386.345829][T18007] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3151'. [ 1387.451395][T18022] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3155'. [ 1387.526628][T18024] fuse: Bad value for 'fd' [ 1387.835786][T18030] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3159'. [ 1387.895644][T18032] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3160'. [ 1388.089188][ T23] usb 4-1: USB disconnect, device number 28 [ 1389.006111][T18045] fuse: Bad value for 'group_id' [ 1389.613885][T18055] netlink: 'syz.4.3166': attribute type 10 has an invalid length. [ 1389.622589][T18055] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3166'. [ 1391.095640][T18067] fuse: Bad value for 'fd' [ 1391.610311][ T23] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 1391.795822][ T23] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1391.832265][ T23] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1391.862387][ T23] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1391.936592][ T23] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1392.024766][ T23] usb 3-1: Product: syz [ 1392.072785][ T23] usb 3-1: Manufacturer: syz [ 1392.092228][ T23] usb 3-1: SerialNumber: syz [ 1392.123021][ T23] usb 3-1: config 0 descriptor?? [ 1392.152111][ T23] usb 3-1: selecting invalid altsetting 0 [ 1394.173818][T18090] fuse: Bad value for 'fd' [ 1396.524008][ T9] usb 3-1: USB disconnect, device number 29 [ 1397.669082][T18104] fuse: Unknown parameter 'user_i00000000000000000000' [ 1399.562967][ T23] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 1400.210714][ T23] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1400.231227][ T23] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1400.264407][ T23] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1400.276007][ T23] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1400.285060][ T23] usb 4-1: Product: syz [ 1400.289597][ T23] usb 4-1: Manufacturer: syz [ 1400.298325][ T23] usb 4-1: SerialNumber: syz [ 1400.336557][ T23] usb 4-1: config 0 descriptor?? [ 1400.356833][ T23] usb 4-1: selecting invalid altsetting 0 [ 1402.366921][T18141] fuse: Bad value for 'fd' [ 1402.817505][ T8] usb 4-1: USB disconnect, device number 29 [ 1403.729534][T18154] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3198'. [ 1403.957890][T18160] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3200'. [ 1405.288674][T18178] fuse: Bad value for 'fd' [ 1406.129837][T18193] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3211'. [ 1406.916137][T18196] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3212'. [ 1407.222160][T18203] fuse: Unknown parameter 'user_id00000000000000000000' [ 1407.854054][ T8] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1407.941652][T18223] fuse: Bad value for 'fd' [ 1408.892861][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 1408.899223][T18221] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3220'. [ 1409.026951][ T8] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1409.209135][ T8] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1409.219540][ T8] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1409.237912][ T8] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1409.256420][ T8] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1409.270049][ T8] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1409.280631][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1409.508904][ T8] usb 3-1: usb_control_msg returned -32 [ 1409.514903][ T8] usbtmc 3-1:16.0: can't read capabilities [ 1410.172775][T18238] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3231'. [ 1410.418457][T18239] usbtmc 3-1:16.0: CHECK_CLEAR_STATUS returned 3 [ 1410.679322][ T8] usb 3-1: USB disconnect, device number 30 [ 1411.176361][T18241] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3224'. [ 1411.243581][T18243] fuse: Unknown parameter 'user_id00000000000000000000' [ 1412.739245][T18264] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3234'. [ 1412.857110][T18267] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3233'. [ 1412.871217][T18267] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 1413.162969][T18273] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3235'. [ 1413.248990][T18275] fuse: Unknown parameter 'user_id00000000000000000000' [ 1413.838757][T18293] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3242'. [ 1417.374186][T18306] fuse: Bad value for 'fd' [ 1417.520594][T18308] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3247'. [ 1417.760517][T18310] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3248'. [ 1418.066007][T18319] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3252'. [ 1418.999896][T18328] fuse: Bad value for 'fd' [ 1419.219410][T18334] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3258'. [ 1419.726447][T18338] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3259'. [ 1423.228064][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.264560][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.924925][T18356] fuse: Bad value for 'fd' [ 1424.293758][T18363] netlink: 'syz.2.3268': attribute type 10 has an invalid length. [ 1424.301680][T18363] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3268'. [ 1424.894296][T18373] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3271'. [ 1425.536349][T18384] fuse: Unknown parameter '0x0000000000000003' [ 1425.864965][T18392] netlink: 4456 bytes leftover after parsing attributes in process `syz.3.3279'. [ 1426.418134][T18401] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3281'. [ 1427.799724][T18424] fuse: Bad value for 'fd' [ 1428.627622][ T5782] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1428.834639][ T5782] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 1428.844592][ T5782] usb 3-1: config 0 has no interface number 0 [ 1428.851039][ T5782] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1428.874911][ T5782] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1428.885192][ T5782] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1428.893554][ T5782] usb 3-1: Product: syz [ 1428.899082][ T5782] usb 3-1: Manufacturer: syz [ 1428.904049][ T5782] usb 3-1: SerialNumber: syz [ 1428.933741][ T5782] usb 3-1: config 0 descriptor?? [ 1429.015856][ T5782] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 1431.583360][ T5906] usb 3-1: USB disconnect, device number 31 [ 1431.613175][ T5906] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 1432.515644][T18468] netlink: 'syz.4.3301': attribute type 10 has an invalid length. [ 1432.523583][T18468] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3301'. [ 1435.124434][T18498] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3312'. [ 1435.142459][T18498] gretap0: entered promiscuous mode [ 1436.192785][T18510] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3316'. [ 1440.872076][T18535] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 1441.122807][ T5782] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 1441.395367][ T5782] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 1441.404744][ T5782] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1441.424028][T18545] netlink: 'syz.4.3326': attribute type 10 has an invalid length. [ 1441.431961][T18545] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3326'. [ 1441.445661][ T5782] usb 1-1: config 0 descriptor?? [ 1443.253799][ T5782] pegasus 1-1:0.0: can't reset MAC [ 1443.296039][ T5782] pegasus: probe of 1-1:0.0 failed with error -5 [ 1443.349706][ T5782] usb 1-1: USB disconnect, device number 26 [ 1443.783689][ T5802] Bluetooth: hci1: unexpected event for opcode 0x200c [ 1447.772917][ T5906] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 1448.003781][T18593] fuse: Bad value for 'fd' [ 1448.864534][ T5906] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1448.875005][ T5906] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1448.895456][ T5906] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1448.906224][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1448.918230][ T5906] usb 4-1: Product: syz [ 1448.922449][ T5906] usb 4-1: Manufacturer: syz [ 1448.927483][ T5906] usb 4-1: SerialNumber: syz [ 1448.942744][ T5906] usb 4-1: config 0 descriptor?? [ 1449.123359][ T5906] usb 4-1: selecting invalid altsetting 0 [ 1449.413957][ T8] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 1450.105122][ T8] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1450.130266][ T8] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1450.826323][ T8] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1450.838465][ T8] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1450.851468][ T8] usb 3-1: Product: syz [ 1450.861655][ T8] usb 3-1: Manufacturer: syz [ 1450.868995][ T8] usb 3-1: SerialNumber: syz [ 1450.886340][ T8] usb 3-1: config 0 descriptor?? [ 1450.914397][ T8] usb 3-1: selecting invalid altsetting 0 [ 1450.986991][ T8] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x4 [ 1450.996789][ T8] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x2 [ 1451.021763][ T8] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 1451.031138][ T8] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 1451.043995][ T8] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 1451.051794][ T8] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 1451.063050][ T8] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 1451.071212][ T8] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 1451.079205][ T8] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 1451.088285][ T8] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 1451.096085][ T8] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 1451.107248][ T8] hid-generic 0000:3000000:0000.0011: unknown main item tag 0x0 [ 1451.126183][ T8] hid-generic 0000:3000000:0000.0011: hidraw0: HID v0.00 Device [sy] on syz0 [ 1451.352137][T18610] fido_id[18610]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1452.121571][ T23] usb 4-1: USB disconnect, device number 30 [ 1452.302955][ T5841] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1452.420992][T18625] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3350'. [ 1452.502950][ T5841] usb 1-1: Using ep0 maxpacket: 16 [ 1452.518083][ T5841] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 1452.540320][ T5841] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1452.551730][ T5841] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1452.565343][ T5841] usb 1-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 1452.575452][ T5841] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1452.590384][ T5841] usb 1-1: config 0 descriptor?? [ 1452.737751][T18633] fuse: Bad value for 'fd' [ 1452.923019][ T5906] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1453.119479][ T5841] logitech 0003:046D:C298.0012: item fetching failed at offset 2/5 [ 1453.121550][ T23] usb 3-1: USB disconnect, device number 32 [ 1453.128826][ T5841] logitech 0003:046D:C298.0012: parse failed [ 1453.140367][ T5841] logitech: probe of 0003:046D:C298.0012 failed with error -22 [ 1453.893060][ T28] usb 1-1: USB disconnect, device number 27 [ 1453.910965][ T5906] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 1453.965605][ T5906] usb 4-1: config 0 has no interface number 0 [ 1453.980143][ T5906] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1454.006132][ T5906] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1454.016803][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1454.025501][ T5906] usb 4-1: Product: syz [ 1454.030416][ T5906] usb 4-1: Manufacturer: syz [ 1454.035928][ T5906] usb 4-1: SerialNumber: syz [ 1454.042562][ T5906] usb 4-1: config 0 descriptor?? [ 1454.055170][ T5906] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 1455.391064][ T23] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 1455.616147][ T23] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1455.628847][ T23] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1455.655382][ T23] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1455.666873][ T23] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1455.677813][ T23] usb 3-1: Product: syz [ 1455.682440][ T23] usb 3-1: Manufacturer: syz [ 1455.687555][ T23] usb 3-1: SerialNumber: syz [ 1455.740113][ T23] usb 3-1: config 0 descriptor?? [ 1455.768773][ T23] usb 3-1: selecting invalid altsetting 0 [ 1456.995213][T18654] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3360'. [ 1457.088171][ T5906] usb 4-1: USB disconnect, device number 31 [ 1457.127193][ T5906] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 1458.269919][ T5841] usb 3-1: USB disconnect, device number 33 [ 1458.662925][ T5906] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 1458.855316][ T5906] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1458.865465][ T5906] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1458.878264][ T5906] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1458.887490][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1458.896053][ T5906] usb 4-1: Product: syz [ 1458.900342][ T5906] usb 4-1: Manufacturer: syz [ 1458.905109][ T5906] usb 4-1: SerialNumber: syz [ 1458.939790][ T5906] usb 4-1: config 0 descriptor?? [ 1458.961536][ T5906] usb 4-1: selecting invalid altsetting 0 [ 1459.024872][ T5841] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1459.061252][T18676] tipc: Started in network mode [ 1459.066499][T18676] tipc: Node identity 4, cluster identity 4711 [ 1459.078834][T18676] tipc: Node number set to 4 [ 1459.244851][ T5841] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 1459.256298][ T5841] usb 3-1: config 0 has no interface number 0 [ 1459.262598][ T5841] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1459.320563][ T5841] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1459.685108][ T5841] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1459.997358][ T5841] usb 3-1: Product: syz [ 1460.003109][ T5841] usb 3-1: Manufacturer: syz [ 1460.009410][ T5841] usb 3-1: SerialNumber: syz [ 1460.366599][ T5841] usb 3-1: config 0 descriptor?? [ 1460.864130][T18682] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3371'. [ 1461.367385][ T5841] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 1462.584703][ T9] usb 4-1: USB disconnect, device number 32 [ 1463.838551][ T28] usb 3-1: USB disconnect, device number 34 [ 1463.880109][ T28] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 1464.746191][T18716] tipc: Started in network mode [ 1464.751195][T18716] tipc: Node identity 4, cluster identity 4711 [ 1464.767858][T18716] tipc: Node number set to 4 [ 1464.972886][ T28] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 1465.191837][ T28] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1465.299365][T18720] delete_channel: no stack [ 1465.305786][ T28] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1465.321048][ T28] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1465.330478][ T28] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1465.341414][ T28] usb 1-1: Product: syz [ 1465.346653][ T28] usb 1-1: Manufacturer: syz [ 1465.352012][ T28] usb 1-1: SerialNumber: syz [ 1466.083284][ T28] usb 1-1: config 0 descriptor?? [ 1466.245614][ T28] usb 1-1: selecting invalid altsetting 0 [ 1468.180614][T18738] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3385'. [ 1468.800308][T18752] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3391'. [ 1468.936743][ T23] usb 1-1: USB disconnect, device number 28 [ 1471.362777][ T23] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1471.574746][ T23] usb 1-1: config 0 has an invalid interface number: 69 but max is 0 [ 1471.587221][ T23] usb 1-1: config 0 has no interface number 0 [ 1471.593799][ T23] usb 1-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 1471.604460][ T23] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1471.619327][ T23] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1471.628967][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1471.637759][ T23] usb 1-1: Product: syz [ 1471.643101][ T23] usb 1-1: Manufacturer: syz [ 1471.648958][ T23] usb 1-1: SerialNumber: syz [ 1471.658293][ T23] usb 1-1: config 0 descriptor?? [ 1471.666499][T18771] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1472.512202][ T23] cyberjack 1-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1472.533267][ T23] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1472.703107][ C1] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 1472.784466][T18787] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3403'. [ 1473.036124][ T5841] usb 1-1: USB disconnect, device number 29 [ 1473.057758][ T5841] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1473.077288][ T5841] cyberjack 1-1:0.69: device disconnected [ 1473.103666][ T9] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 1473.957382][ T9] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1473.981770][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1474.239643][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1474.342827][ T9] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1474.575784][ T9] usb 4-1: Product: syz [ 1474.580306][ T9] usb 4-1: Manufacturer: syz [ 1474.592534][ T9] usb 4-1: SerialNumber: syz [ 1474.632945][ T9] usb 4-1: config 0 descriptor?? [ 1474.647882][ T9] usb 4-1: selecting invalid altsetting 0 [ 1475.111145][T18804] netlink: 'syz.4.3407': attribute type 10 has an invalid length. [ 1475.119201][T18804] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3407'. [ 1476.513583][T18821] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3414'. [ 1476.771939][ T23] usb 4-1: USB disconnect, device number 33 [ 1477.516457][ T9] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1477.746981][ T9] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1478.023144][ T23] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1478.583687][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1478.591765][ T9] usb 3-1: Product: syz [ 1478.602693][ T9] usb 3-1: Manufacturer: syz [ 1478.618020][ T9] usb 3-1: SerialNumber: syz [ 1478.636305][ T9] usb 3-1: config 0 descriptor?? [ 1478.654544][ T9] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1478.698018][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1478.719802][ T9] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1478.729695][ T9] usb 3-1: media controller created [ 1478.754073][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1478.823073][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 1478.835321][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1479.023837][ T23] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1479.042358][ T23] usb 4-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1479.082703][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1479.971712][ T23] usb 4-1: Product: syz [ 1480.018804][ T23] usb 4-1: Manufacturer: syz [ 1480.052401][ T9] DVB: Unable to find symbol mt352_attach() [ 1480.077856][ T23] usb 4-1: SerialNumber: syz [ 1480.126577][ T9] DVB: Unable to find symbol nxt6000_attach() [ 1480.136863][ T23] usb 4-1: config 0 descriptor?? [ 1480.146572][ T9] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1480.157810][T18850] fuse: Bad value for 'fd' [ 1480.177021][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input16 [ 1480.250564][ T9] dvb-usb: schedule remote query interval to 1000 msecs. [ 1480.259319][ T9] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1480.274072][ T9] dvb-usb: bulk message failed: -22 (7/0) [ 1480.280001][ T9] dvb-usb: bulk message failed: -22 (7/0) [ 1480.417023][T18840] [U]  [ 1480.537792][T18853] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3424'. [ 1481.362219][ T9] usb 3-1: USB disconnect, device number 35 [ 1482.654727][ T9] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1483.287554][T18828] delete_channel: no stack [ 1483.301339][ T5841] usb 4-1: USB disconnect, device number 34 [ 1484.677190][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.694480][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1486.472794][ T5841] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1486.752833][ T5841] usb 3-1: Using ep0 maxpacket: 8 [ 1486.844076][ T5841] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1487.617225][ T5841] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1487.715746][ T5841] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1487.752111][ T5841] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1487.782059][ T5841] usb 3-1: Product: syz [ 1487.786607][ T5841] usb 3-1: Manufacturer: syz [ 1487.791800][ T5841] usb 3-1: SerialNumber: syz [ 1487.974819][ T8] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1487.987810][ T5841] usb 3-1: config 0 descriptor?? [ 1488.701048][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1488.712048][ T8] usb 4-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 1488.722072][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1488.734911][ T8] usb 4-1: config 0 descriptor?? [ 1488.773466][ T8] ttusbir 4-1:0.0: cannot find expected altsetting [ 1488.800254][T18887] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1489.522873][ T8] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 1489.558955][T18888] delete_channel: no stack [ 1489.574858][ T23] usb 3-1: USB disconnect, device number 36 [ 1489.599984][T18887] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1489.740316][ T8] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1489.750616][ T8] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1489.754449][T18887] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1489.761999][ T8] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1489.780430][ T8] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1489.789780][ T8] usb 1-1: Product: syz [ 1489.797796][ T8] usb 1-1: Manufacturer: syz [ 1489.803533][ T8] usb 1-1: SerialNumber: syz [ 1489.824111][ T8] usb 1-1: config 0 descriptor?? [ 1489.847374][ T8] usb 1-1: selecting invalid altsetting 0 [ 1490.001006][T18887] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1490.403785][T18907] netlink: 240 bytes leftover after parsing attributes in process `syz.2.3439'. [ 1490.477189][T18887] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1490.517360][T18887] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1490.545889][T18887] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1490.569147][T18887] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1490.625634][ T5782] usb 4-1: USB disconnect, device number 35 [ 1492.399091][ T28] usb 1-1: USB disconnect, device number 30 [ 1496.561590][T17625] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1496.590912][T17625] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1496.611091][T17625] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1496.622125][T17625] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1496.632792][T17625] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1496.640413][T17625] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1496.766202][T18914] [U]  [ 1497.020799][T17625] Bluetooth: hci3: hcon ffff88804cea0000 sent 1 < count 1023 [ 1497.029512][T17625] Bluetooth: hci3: hcon ffff88804cea0000 sent 0 < count 2 [ 1497.042910][T17625] Bluetooth: hci3: hcon ffff88804cea0000 sent 0 < count 8 [ 1497.178292][T18947] chnl_net:caif_netlink_parms(): no params data found [ 1497.261742][T11041] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1497.668363][T11041] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1497.867539][T11041] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1497.968792][T18947] bridge0: port 1(bridge_slave_0) entered blocking state [ 1497.980886][T18966] fuse: Unknown parameter 'use00000000000000000000' [ 1497.988377][T18947] bridge0: port 1(bridge_slave_0) entered disabled state [ 1498.039627][T18947] bridge_slave_0: entered allmulticast mode [ 1498.150196][T18947] bridge_slave_0: entered promiscuous mode [ 1498.464363][ T5782] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1498.733061][T17625] Bluetooth: hci2: command tx timeout [ 1498.871844][ T5782] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1498.895676][ T5782] usb 3-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 1498.927722][ T5782] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1498.965134][T18964] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1498.968247][ T5782] usb 3-1: config 0 descriptor?? [ 1499.010444][ T5782] ttusbir 3-1:0.0: cannot find expected altsetting [ 1499.051088][T18947] bridge0: port 2(bridge_slave_1) entered blocking state [ 1499.061645][T18947] bridge0: port 2(bridge_slave_1) entered disabled state [ 1499.071074][T18947] bridge_slave_1: entered allmulticast mode [ 1499.093819][T18947] bridge_slave_1: entered promiscuous mode [ 1499.113297][ T9] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 1499.243329][T18964] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1499.307893][ T9] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1499.327500][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1499.351380][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1499.362877][ T9] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1499.378407][ T9] usb 4-1: Product: syz [ 1499.383005][ T9] usb 4-1: Manufacturer: syz [ 1499.394130][ T9] usb 4-1: SerialNumber: syz [ 1499.427249][ T9] usb 4-1: config 0 descriptor?? [ 1499.443826][ T9] usb 4-1: selecting invalid altsetting 0 [ 1499.924037][T18964] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1500.068687][T18947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1500.303196][T18947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1500.599911][T18964] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1500.694303][T18947] team0: Port device team_slave_0 added [ 1500.705165][T18947] team0: Port device team_slave_1 added [ 1500.822766][T17625] Bluetooth: hci2: command tx timeout [ 1502.902758][T17625] Bluetooth: hci2: command tx timeout [ 1503.199877][ T8] usb 4-1: USB disconnect, device number 36 [ 1503.493151][T18947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1503.575250][T18947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1503.626919][T18947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1503.698909][T18947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1503.792722][T18947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1503.838290][T18947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1503.856986][T11041] tipc: Left network mode [ 1503.920870][T18964] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1503.991520][T18964] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1504.072318][T18947] hsr_slave_0: entered promiscuous mode [ 1504.085943][T18947] hsr_slave_1: entered promiscuous mode [ 1504.117354][T18964] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1504.125886][ T8] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1504.197102][T18964] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1504.279470][ T5861] usb 3-1: USB disconnect, device number 37 [ 1504.322832][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 1504.357165][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1504.393802][ T8] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1504.419632][ T8] usb 4-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1504.455301][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1504.493111][ T8] usb 4-1: Product: syz [ 1504.497359][ T8] usb 4-1: Manufacturer: syz [ 1504.501993][ T8] usb 4-1: SerialNumber: syz [ 1504.529265][ T8] usb 4-1: config 0 descriptor?? [ 1504.617748][T11041] bond1: (slave xfrm1): Releasing backup interface [ 1504.662459][T19004] fuse: Unknown parameter 'use00000000000000000000' [ 1504.670914][T11041] bond1: Destroying bond [ 1504.775760][T11041] bond1 (unregistering): Released all slaves [ 1504.975440][T17625] Bluetooth: hci2: command tx timeout [ 1505.571838][T18987] delete_channel: no stack [ 1505.605723][ T8] usb 4-1: USB disconnect, device number 37 [ 1509.384436][T11041] IPVS: stopping master sync thread 18535 ... [ 1509.727218][T11041] bond0: (slave wlan1): Releasing backup interface [ 1510.041089][T11041] hsr_slave_0: left promiscuous mode [ 1510.052764][T15954] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 1510.061499][T11041] hsr_slave_1: left promiscuous mode [ 1510.071715][T11041] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1510.079400][T11041] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1510.101845][T11041] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1510.118474][T11041] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1510.132904][ T5906] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1510.150522][T11041] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 1510.161086][T11041] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1510.192268][T11041] bridge_slave_1: left allmulticast mode [ 1510.214460][T11041] bridge_slave_1: left promiscuous mode [ 1510.220280][T11041] bridge0: port 2(bridge_slave_1) entered disabled state [ 1510.242276][T11041] bridge_slave_0: left allmulticast mode [ 1510.249419][T15954] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1510.252435][T11041] bridge_slave_0: left promiscuous mode [ 1510.271081][T15954] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1510.274934][T11041] bridge0: port 1(bridge_slave_0) entered disabled state [ 1510.285918][T15954] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1510.302826][T15954] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1510.321502][T15954] usb 3-1: Product: syz [ 1510.326192][T15954] usb 3-1: Manufacturer: syz [ 1510.330841][T15954] usb 3-1: SerialNumber: syz [ 1510.349263][ T5906] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1510.365208][T15954] usb 3-1: config 0 descriptor?? [ 1510.384141][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1510.384374][T11041] veth1_macvtap: left promiscuous mode [ 1510.398641][T11041] veth0_macvtap: left promiscuous mode [ 1510.398991][T15954] usb 3-1: selecting invalid altsetting 0 [ 1510.404773][T11041] veth1_vlan: left promiscuous mode [ 1510.417773][T11041] veth0_vlan: left promiscuous mode [ 1510.431855][ T5906] usb 4-1: Product: syz [ 1510.453019][ T5906] usb 4-1: Manufacturer: syz [ 1510.457695][ T5906] usb 4-1: SerialNumber: syz [ 1510.484953][ T5906] usb 4-1: config 0 descriptor?? [ 1510.504576][ T5906] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1510.547221][ T5906] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1510.579924][ T5906] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1510.628889][ T5906] usb 4-1: media controller created [ 1511.099059][ T5906] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1511.965066][ T5906] DVB: Unable to find symbol mt352_attach() [ 1512.123124][T14336] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1512.226428][ T5906] DVB: Unable to find symbol nxt6000_attach() [ 1512.240964][ T5906] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1512.293915][ T5906] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input19 [ 1512.339124][T14336] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1512.346928][ T5906] dvb-usb: schedule remote query interval to 1000 msecs. [ 1512.364631][ T5906] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1512.368565][T14336] usb 1-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 1512.414895][ T5906] dvb-usb: bulk message failed: -22 (7/0) [ 1512.429529][T14336] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1512.430773][ T5906] dvb-usb: bulk message failed: -22 (7/0) [ 1512.451169][T14336] usb 1-1: config 0 descriptor?? [ 1512.556999][T14336] ttusbir 1-1:0.0: cannot find expected altsetting [ 1512.884268][T14336] usb 3-1: USB disconnect, device number 38 [ 1512.913687][T15954] usb 4-1: USB disconnect, device number 38 [ 1514.075679][T15954] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1516.135014][T11041] team0 (unregistering): Port device team_slave_1 removed [ 1516.571437][T11041] team0 (unregistering): Port device team_slave_0 removed [ 1516.964876][T11041] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1517.361463][T11041] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1518.898123][T11041] bond0 (unregistering): Released all slaves [ 1519.099985][T19056] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1519.303894][T18947] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1519.328447][T18947] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1519.350352][T18947] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1520.436444][T19056] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1520.525633][T18947] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1520.834665][T19056] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1521.826758][T19056] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1521.860525][T19056] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1521.885078][T19056] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1521.964596][T19056] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1522.126717][T15954] usb 1-1: USB disconnect, device number 31 [ 1522.148768][T18947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1522.231448][T18947] 8021q: adding VLAN 0 to HW filter on device team0 [ 1522.269244][ T1082] bridge0: port 1(bridge_slave_0) entered blocking state [ 1522.276671][ T1082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1522.520459][ T1082] bridge0: port 2(bridge_slave_1) entered blocking state [ 1522.527723][ T1082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1523.401815][T18947] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1524.759411][T18947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1525.083394][T19198] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3501'. [ 1525.488217][T18947] veth0_vlan: entered promiscuous mode [ 1525.529291][T18947] veth1_vlan: entered promiscuous mode [ 1526.001898][T18947] veth0_macvtap: entered promiscuous mode [ 1526.275119][T18947] veth1_macvtap: entered promiscuous mode [ 1526.583465][T18947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1526.627654][T18947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1526.641379][T18947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1526.671341][T18947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1526.687413][T18947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1526.698535][T18947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1526.740472][T18947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1526.773282][T18947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1526.798806][T18947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1526.809554][T18947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1526.821670][T18947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1526.832103][T18947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1526.857791][T18947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1526.870555][T18947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1526.891622][T18947] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1526.907625][T18947] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1526.917125][T18947] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1526.932934][T18947] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1527.040519][T19241] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3511'. [ 1527.320510][ T1074] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1527.344834][ T1074] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1527.459171][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1527.468976][T19246] Bluetooth: hci0: invalid length 0, exp 2 for type 15 [ 1527.512888][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1528.022685][T19256] Bluetooth: hci0: invalid length 0, exp 2 for type 15 [ 1528.940530][ T9] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 1529.194614][ T9] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1529.232955][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1529.258577][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1529.277531][ T9] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1529.300425][ T9] usb 5-1: Product: syz [ 1529.305112][ T9] usb 5-1: Manufacturer: syz [ 1529.309760][ T9] usb 5-1: SerialNumber: syz [ 1529.333383][ T9] usb 5-1: config 0 descriptor?? [ 1529.349349][T19287] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3520'. [ 1529.354429][ T9] usb 5-1: selecting invalid altsetting 0 [ 1529.573619][T15954] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1529.778842][T15954] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1529.806278][T15954] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1529.819321][T15954] usb 1-1: Product: syz [ 1529.825204][T15954] usb 1-1: Manufacturer: syz [ 1529.832051][T15954] usb 1-1: SerialNumber: syz [ 1529.842651][T15954] usb 1-1: config 0 descriptor?? [ 1529.861638][T15954] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1529.888058][T15954] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1529.937326][T15954] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1529.982867][T15954] usb 1-1: media controller created [ 1530.275186][T15954] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1531.036717][T19307] Bluetooth: hci0: invalid length 0, exp 2 for type 14 [ 1531.154656][ T5861] usb 5-1: USB disconnect, device number 5 [ 1531.172880][T15954] DVB: Unable to find symbol mt352_attach() [ 1531.281922][T19314] syz.2.3528: attempt to access beyond end of device [ 1531.281922][T19314] nbd2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1531.296670][T19314] syz.2.3528: attempt to access beyond end of device [ 1531.296670][T19314] nbd2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1531.309820][T19314] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1531.320329][T19314] syz.2.3528: attempt to access beyond end of device [ 1531.320329][T19314] nbd2: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1531.333681][T19314] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1531.349970][T19314] syz.2.3528: attempt to access beyond end of device [ 1531.349970][T19314] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1531.365892][T19314] syz.2.3528: attempt to access beyond end of device [ 1531.365892][T19314] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1531.379452][T19314] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1531.389382][T19314] syz.2.3528: attempt to access beyond end of device [ 1531.389382][T19314] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1531.402691][T19314] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1531.413165][T19314] syz.2.3528: attempt to access beyond end of device [ 1531.413165][T19314] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1531.426552][T19314] syz.2.3528: attempt to access beyond end of device [ 1531.426552][T19314] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1531.439734][T19314] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1531.450496][T19314] syz.2.3528: attempt to access beyond end of device [ 1531.450496][T19314] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1531.459127][T15954] DVB: Unable to find symbol nxt6000_attach() [ 1531.464522][T19314] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1531.480521][T19314] syz.2.3528: attempt to access beyond end of device [ 1531.480521][T19314] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1531.495412][T19314] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1531.505221][T19314] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1531.514834][T19314] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 1531.538358][T15954] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1531.760270][T15954] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input21 [ 1531.891543][T15954] dvb-usb: schedule remote query interval to 1000 msecs. [ 1531.898963][T15954] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1531.954094][T15954] dvb-usb: bulk message failed: -22 (7/0) [ 1532.003409][T15954] dvb-usb: bulk message failed: -22 (7/0) [ 1532.030068][ T5861] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1532.290080][ T5861] usb 5-1: Using ep0 maxpacket: 8 [ 1532.336486][ T5861] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1532.359442][T15954] usb 1-1: USB disconnect, device number 32 [ 1532.388738][ T5861] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1532.448332][ T5861] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1532.475275][ T5861] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1532.522529][ T5861] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1532.523688][T15954] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1532.573685][ T5861] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1532.758766][ T5861] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1533.014996][ T5861] usb 5-1: usb_control_msg returned -32 [ 1533.027741][ T5861] usbtmc 5-1:16.0: can't read capabilities [ 1533.335317][T19335] netlink: 'syz.0.3535': attribute type 10 has an invalid length. [ 1533.343451][T19335] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3535'. [ 1533.433027][ T8] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 1534.098021][ T8] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1534.130155][ T8] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1534.149552][ T8] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1534.159566][ T8] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1534.168512][ T8] usb 4-1: Product: syz [ 1534.173408][ T8] usb 4-1: Manufacturer: syz [ 1534.179747][ T8] usb 4-1: SerialNumber: syz [ 1534.194592][ T8] usb 4-1: config 0 descriptor?? [ 1534.210827][ T8] usb 4-1: selecting invalid altsetting 0 [ 1534.579719][T19342] usbtmc 5-1:16.0: usb_clear_halt returned -32 [ 1534.782350][ T8] usb 5-1: USB disconnect, device number 6 [ 1536.015428][ T5861] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1536.229585][ T8] usb 4-1: USB disconnect, device number 39 [ 1536.253719][ T5861] usb 3-1: Using ep0 maxpacket: 8 [ 1536.277686][ T5861] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1536.300155][ T5861] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1536.321084][ T5861] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1536.334804][ T5861] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1536.343343][ T5861] usb 3-1: Product: syz [ 1536.349496][ T5861] usb 3-1: Manufacturer: syz [ 1536.360967][ T5861] usb 3-1: SerialNumber: syz [ 1536.382832][T15954] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1536.437279][ T5861] usb 3-1: config 0 descriptor?? [ 1537.728288][T15954] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1537.829419][T15954] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1537.829866][T19343] delete_channel: no stack [ 1537.844351][T15954] usb 5-1: Product: syz [ 1537.848596][T15954] usb 5-1: Manufacturer: syz [ 1537.858021][ T28] usb 3-1: USB disconnect, device number 39 [ 1537.867009][T15954] usb 5-1: SerialNumber: syz [ 1537.879824][T15954] usb 5-1: config 0 descriptor?? [ 1537.901575][T15954] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1537.921740][T15954] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1537.935098][T15954] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1537.949789][T15954] usb 5-1: media controller created [ 1539.704952][T15954] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1540.464138][T15954] DVB: Unable to find symbol mt352_attach() [ 1540.630736][T15954] DVB: Unable to find symbol nxt6000_attach() [ 1540.646741][T15954] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1540.707313][T15954] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input22 [ 1540.838104][T15954] dvb-usb: schedule remote query interval to 1000 msecs. [ 1540.846913][T15954] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1540.858307][T15954] dvb-usb: bulk message failed: -22 (7/0) [ 1540.865430][T15954] dvb-usb: bulk message failed: -22 (7/0) [ 1540.876807][T15954] usb 5-1: USB disconnect, device number 7 [ 1541.250142][T15954] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1543.025501][T19399] autofs4:pid:19399:autofs_fill_super: could not open pipe file descriptor [ 1543.114386][ T5861] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1543.398789][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1543.541769][ T5861] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 1543.579519][ T5861] usb 4-1: config 0 has no interface number 0 [ 1543.661344][ T5861] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1543.672738][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 1543.753446][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1543.947756][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1543.983058][ T5861] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1544.071596][ T5861] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1544.107506][ T9] usb 5-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1544.216255][ T5861] usb 4-1: Product: syz [ 1544.257674][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1544.308375][ T5861] usb 4-1: Manufacturer: syz [ 1544.322784][ T5861] usb 4-1: SerialNumber: syz [ 1544.327583][ T9] usb 5-1: Product: syz [ 1544.331834][ T9] usb 5-1: Manufacturer: syz [ 1544.350356][ T9] usb 5-1: SerialNumber: syz [ 1544.355595][ T5861] usb 4-1: config 0 descriptor?? [ 1544.367738][ T9] usb 5-1: config 0 descriptor?? [ 1544.379167][ T5861] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 1544.702928][ T5861] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1545.107152][ T5861] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1545.354683][ T5861] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1545.498727][ T5861] usb 1-1: Product: syz [ 1545.508510][ T5861] usb 1-1: Manufacturer: syz [ 1545.513916][ T5861] usb 1-1: SerialNumber: syz [ 1546.072996][ T5861] usb 1-1: config 0 descriptor?? [ 1546.117623][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.118001][ T5861] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1546.158782][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.186597][ T5861] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1546.204566][ T5861] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1546.216159][T19400] delete_channel: no stack [ 1546.216598][ T5861] usb 1-1: media controller created [ 1546.233582][T15954] usb 5-1: USB disconnect, device number 8 [ 1546.261741][ T5861] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1546.371493][ T5861] DVB: Unable to find symbol mt352_attach() [ 1546.586455][ T9] usb 4-1: USB disconnect, device number 40 [ 1546.608150][ T9] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 1546.675461][ T5861] DVB: Unable to find symbol nxt6000_attach() [ 1546.681978][ T5861] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1546.698087][ T5861] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input23 [ 1546.719817][ T5861] dvb-usb: schedule remote query interval to 1000 msecs. [ 1546.727424][ T5861] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1546.738330][ T5861] dvb-usb: bulk message failed: -22 (7/0) [ 1546.745369][ T5861] dvb-usb: bulk message failed: -22 (7/0) [ 1547.815097][ T23] usb 1-1: USB disconnect, device number 33 [ 1548.482638][ T23] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1549.472740][ T23] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 1549.480464][T19021] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1549.562770][T15954] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1549.687813][ T23] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1549.698010][ T23] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1549.704803][T19021] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 1549.713257][T19021] usb 5-1: config 0 has no interface number 0 [ 1549.719939][T19021] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1549.734360][ T23] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1549.745161][ T23] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1549.754850][T19021] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1549.819619][T19460] fuse: Bad value for 'fd' [ 1550.614231][ T23] usb 4-1: Product: syz [ 1550.618480][ T23] usb 4-1: Manufacturer: syz [ 1550.631258][T19021] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1550.639755][ T23] usb 4-1: SerialNumber: syz [ 1550.646596][T19021] usb 5-1: Product: syz [ 1550.652294][T15954] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1550.662642][T19021] usb 5-1: Manufacturer: syz [ 1550.668446][ T23] usb 4-1: config 0 descriptor?? [ 1550.673495][T19021] usb 5-1: SerialNumber: syz [ 1550.680350][T15954] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1550.689432][T15954] usb 1-1: Product: syz [ 1550.695543][T15954] usb 1-1: Manufacturer: syz [ 1550.703744][T19021] usb 5-1: config 0 descriptor?? [ 1550.713887][T15954] usb 1-1: SerialNumber: syz [ 1550.720121][ T23] usb 4-1: selecting invalid altsetting 0 [ 1550.736837][T15954] usb 1-1: config 0 descriptor?? [ 1550.743286][T19021] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 1550.756768][T15954] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1550.823198][T15954] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1550.861675][T15954] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1550.894110][T15954] usb 1-1: media controller created [ 1551.295589][T15954] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1552.138204][T15954] DVB: Unable to find symbol mt352_attach() [ 1552.206359][T15954] DVB: Unable to find symbol nxt6000_attach() [ 1552.213987][T15954] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1552.240284][T15954] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input24 [ 1552.259095][T15954] dvb-usb: schedule remote query interval to 1000 msecs. [ 1552.273536][T15954] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1552.288388][T15954] dvb-usb: bulk message failed: -22 (7/0) [ 1552.295659][T15954] dvb-usb: bulk message failed: -22 (7/0) [ 1552.724944][T15954] usb 1-1: USB disconnect, device number 34 [ 1553.355308][ T5782] usb 4-1: USB disconnect, device number 41 [ 1553.458081][ T5861] usb 5-1: USB disconnect, device number 9 [ 1553.470065][ T5861] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 1553.612794][T15954] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1554.176699][T19492] netlink: 'syz.0.3583': attribute type 10 has an invalid length. [ 1554.184837][T19492] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3583'. [ 1555.218645][T19497] fuse: Unknown parameter '0x0000000000000004' [ 1556.242681][ T5861] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1556.262757][T15954] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1556.432756][ T5861] usb 3-1: Using ep0 maxpacket: 8 [ 1556.440137][ T5861] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1556.450054][ T5861] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1556.469000][T15954] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1556.475623][ T5861] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1556.489062][T15954] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1556.490211][ T5861] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1556.502997][T15954] usb 4-1: Product: syz [ 1556.510676][T15954] usb 4-1: Manufacturer: syz [ 1556.521892][ T5861] usb 3-1: Product: syz [ 1556.522194][T15954] usb 4-1: SerialNumber: syz [ 1556.531742][ T5861] usb 3-1: Manufacturer: syz [ 1556.538284][T15954] usb 4-1: config 0 descriptor?? [ 1556.542798][ T5861] usb 3-1: SerialNumber: syz [ 1556.570411][T15954] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1556.575310][ T5861] usb 3-1: config 0 descriptor?? [ 1556.623132][T15954] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1556.649714][T15954] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1556.665546][T15954] usb 4-1: media controller created [ 1556.981436][T15954] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1558.106793][T19504] delete_channel: no stack [ 1558.117322][ T5861] usb 3-1: USB disconnect, device number 40 [ 1558.263356][T15954] DVB: Unable to find symbol mt352_attach() [ 1558.399268][T15954] DVB: Unable to find symbol nxt6000_attach() [ 1558.406055][T15954] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1558.444795][T15954] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input25 [ 1558.478963][T15954] dvb-usb: schedule remote query interval to 1000 msecs. [ 1558.489720][T15954] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1558.500392][T15954] dvb-usb: bulk message failed: -22 (7/0) [ 1558.506629][T15954] dvb-usb: bulk message failed: -22 (7/0) [ 1558.622880][ T5841] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 1558.824826][ T5841] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1558.837559][ T5841] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1558.848836][ T5841] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1558.858206][ T5841] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1558.868115][ T5841] usb 1-1: Product: syz [ 1558.872788][ T5841] usb 1-1: Manufacturer: syz [ 1558.877585][ T5841] usb 1-1: SerialNumber: syz [ 1558.885302][ T5841] usb 1-1: config 0 descriptor?? [ 1558.897999][ T5841] usb 1-1: selecting invalid altsetting 0 [ 1559.039951][ T5841] usb 4-1: USB disconnect, device number 42 [ 1559.102804][ T5861] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1559.391750][T19529] netlink: 'syz.4.3594': attribute type 10 has an invalid length. [ 1559.400809][T19529] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3594'. [ 1559.545889][T19529] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1559.552731][T19529] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1559.578597][T19529] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1559.873322][T19533] fuse: Unknown parameter '0x0000000000000004' [ 1560.387106][ T5861] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 1560.503420][ T5861] usb 3-1: config 0 has no interface number 0 [ 1560.514860][ T5841] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1560.526497][ T5861] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1561.045548][ T5861] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1561.062621][ T5861] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1561.070868][ T5861] usb 3-1: Product: syz [ 1561.076170][ T5861] usb 3-1: Manufacturer: syz [ 1561.081023][ T5861] usb 3-1: SerialNumber: syz [ 1561.094659][ T5861] usb 3-1: config 0 descriptor?? [ 1561.104011][ T5861] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 1561.710968][ T5861] usb 1-1: USB disconnect, device number 35 [ 1562.011487][ T5782] usb 3-1: USB disconnect, device number 41 [ 1562.057903][ T5782] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 1562.573421][ T5782] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1563.462708][ T5782] usb 3-1: Using ep0 maxpacket: 8 [ 1563.463831][T19568] fuse: Unknown parameter '0x0000000000000004' [ 1563.473727][ T5782] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1563.572843][ T5782] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1563.626166][ T5782] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1563.642871][ T5782] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1563.672475][ T5782] usb 3-1: Product: syz [ 1563.682011][ T5782] usb 3-1: Manufacturer: syz [ 1563.692289][ T5782] usb 3-1: SerialNumber: syz [ 1563.718665][ T5782] usb 3-1: config 0 descriptor?? [ 1564.102722][ T23] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 1564.360635][ T23] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1564.395477][ T23] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1564.698297][ T23] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1564.708683][ T23] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1564.742674][ T23] usb 1-1: Product: syz [ 1564.746957][ T23] usb 1-1: Manufacturer: syz [ 1564.751588][ T23] usb 1-1: SerialNumber: syz [ 1564.761495][T19554] delete_channel: no stack [ 1564.778173][ T5861] usb 3-1: USB disconnect, device number 42 [ 1564.781475][ T23] usb 1-1: config 0 descriptor?? [ 1564.873616][ T23] usb 1-1: selecting invalid altsetting 0 [ 1565.664556][T15954] usb 1-1: USB disconnect, device number 36 [ 1565.798438][T19583] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1565.821553][T19583] bridge0: port 2(bridge_slave_1) entered disabled state [ 1565.830448][T19583] bridge0: port 1(bridge_slave_0) entered disabled state [ 1567.241093][T19597] fuse: Unknown parameter '0x0000000000000004' [ 1568.162241][T19606] fuse: Unknown parameter 'group_i00000000000000000000' [ 1569.463829][T19623] fuse: Unknown parameter 'fd0x0000000000000004' [ 1569.628509][ T5841] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1570.622064][ T5841] usb 5-1: Using ep0 maxpacket: 8 [ 1570.774386][ T5841] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1570.808314][ T5841] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1570.821594][ T5841] usb 5-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1570.835995][ T5841] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1570.844588][ T5841] usb 5-1: Product: syz [ 1570.851141][ T5841] usb 5-1: Manufacturer: syz [ 1570.864930][ T5841] usb 5-1: SerialNumber: syz [ 1570.899871][ T5841] usb 5-1: config 0 descriptor?? [ 1570.995316][T19632] fuse: Unknown parameter 'group_i00000000000000000000' [ 1572.256343][T19616] delete_channel: no stack [ 1572.271758][ T5841] usb 5-1: USB disconnect, device number 10 [ 1572.635743][T19651] fuse: Unknown parameter 'fd0x0000000000000004' [ 1573.072734][ T786] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1573.252983][ T786] usb 3-1: Using ep0 maxpacket: 16 [ 1573.262243][ T786] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1573.278880][ T786] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1574.022678][ T786] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1574.031932][ T786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1574.063770][ T786] usb 3-1: config 0 descriptor?? [ 1575.932878][T19021] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1576.092432][ T786] nzxt-smart2 0003:1E71:2009.0013: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 1576.139842][T19021] usb 1-1: Using ep0 maxpacket: 16 [ 1576.180581][T19021] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1576.220105][T19021] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1576.232449][T19021] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1576.248665][T19021] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1576.259808][T19021] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1576.283692][T19021] usb 1-1: config 0 descriptor?? [ 1576.482364][ T786] usb 3-1: USB disconnect, device number 43 [ 1576.644037][T19681] fido_id[19681]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1576.685033][T19685] fuse: Unknown parameter 'fd0x0000000000000004' [ 1576.739626][T19021] HID 045e:07da: Invalid code 65791 type 1 [ 1576.775449][T19021] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0014/input/input26 [ 1577.158047][T19690] netlink: 'syz.2.3647': attribute type 10 has an invalid length. [ 1577.166094][T19690] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3647'. [ 1577.743076][T19021] microsoft 0003:045E:07DA.0014: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 1577.759002][T19021] usb 1-1: USB disconnect, device number 37 [ 1578.594828][T19697] fido_id[19697]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1583.373066][ T5861] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1583.563299][ T5861] usb 1-1: Using ep0 maxpacket: 8 [ 1583.623159][T19021] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 1583.649510][ T5861] usb 1-1: config 0 has an invalid interface number: 246 but max is 0 [ 1583.805504][ T5861] usb 1-1: config 0 has no interface number 0 [ 1583.877475][ T5861] usb 1-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3 [ 1583.886976][ T5861] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1583.896449][ T5861] usb 1-1: Product: syz [ 1583.901783][ T5861] usb 1-1: Manufacturer: syz [ 1583.908089][ T5861] usb 1-1: SerialNumber: syz [ 1583.952397][T19757] netlink: 'syz.4.3668': attribute type 10 has an invalid length. [ 1583.960483][T19757] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3668'. [ 1584.042896][ T5861] usb 1-1: config 0 descriptor?? [ 1584.765863][T19021] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1584.790951][T19021] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1584.811441][T19021] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1584.831053][T19021] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1584.849802][T19021] usb 4-1: Product: syz [ 1584.854419][T19021] usb 4-1: Manufacturer: syz [ 1584.859065][T19021] usb 4-1: SerialNumber: syz [ 1586.570243][T19021] usb 4-1: config 0 descriptor?? [ 1586.576096][T19021] usb 4-1: can't set config #0, error -71 [ 1586.583991][T19021] usb 4-1: USB disconnect, device number 43 [ 1586.643651][ T5861] msi2500 1-1:0.246: Registered as swradio24 [ 1586.649737][ T5861] msi2500 1-1:0.246: SDR API is still slightly experimental and functionality changes may follow [ 1586.723173][ T5861] usb 1-1: USB disconnect, device number 38 [ 1587.712569][T19786] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3674'. [ 1588.705090][T19796] netlink: 'syz.3.3677': attribute type 10 has an invalid length. [ 1588.713186][T19796] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3677'. [ 1592.819785][T19839] netlink: 'syz.3.3689': attribute type 10 has an invalid length. [ 1592.827834][T19839] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3689'. [ 1594.045085][ T5861] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1594.871575][ T5861] usb 3-1: Using ep0 maxpacket: 8 [ 1594.896477][ T5861] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1594.927179][ T5861] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1594.958187][ T5861] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1595.007224][ T5861] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1595.036861][ T5861] usb 3-1: Product: syz [ 1595.045028][ T5861] usb 3-1: Manufacturer: syz [ 1595.049992][ T5861] usb 3-1: SerialNumber: syz [ 1595.064922][ T5861] usb 3-1: config 0 descriptor?? [ 1596.473430][T19877] netlink: 'syz.4.3700': attribute type 10 has an invalid length. [ 1596.481489][T19877] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3700'. [ 1598.359912][T19847] delete_channel: no stack [ 1598.366960][ T28] usb 3-1: USB disconnect, device number 44 [ 1598.620562][T19879] loop2: detected capacity change from 0 to 7 [ 1598.768996][T19879] Dev loop2: unable to read RDB block 7 [ 1598.779288][T19879] loop2: unable to read partition table [ 1598.791062][T19879] loop2: partition table beyond EOD, truncated [ 1598.815803][T19879] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1600.207908][ T5159] Dev loop2: unable to read RDB block 7 [ 1600.233446][ T5159] loop2: unable to read partition table [ 1600.274393][ T5159] loop2: partition table beyond EOD, truncated [ 1600.563722][ T786] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1600.762731][ T786] usb 3-1: Using ep0 maxpacket: 16 [ 1600.798940][ T786] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 1601.003917][ T786] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1601.092260][T19905] netlink: 'syz.0.3710': attribute type 10 has an invalid length. [ 1601.100393][T19905] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3710'. [ 1601.456337][ T786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1601.603566][ T786] usb 3-1: Product: syz [ 1601.670621][ T786] usb 3-1: Manufacturer: syz [ 1601.682705][ T786] usb 3-1: SerialNumber: syz [ 1601.823810][ T786] usb 3-1: config 0 descriptor?? [ 1603.784046][T19932] netlink: 'syz.3.3719': attribute type 10 has an invalid length. [ 1603.792028][T19932] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3719'. [ 1604.522619][ T28] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1604.530456][ T5861] usb 3-1: USB disconnect, device number 45 [ 1604.716825][ T28] usb 1-1: Using ep0 maxpacket: 8 [ 1604.739184][ T28] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1604.749100][ T28] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1604.772438][ T28] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1604.782437][ T28] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1604.797256][ T28] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1604.812075][ T28] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1604.824520][ T28] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1604.993748][ T786] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 1605.216935][ T28] usb 1-1: usb_control_msg returned -32 [ 1605.223210][ T28] usbtmc 1-1:16.0: can't read capabilities [ 1605.295840][ T786] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1605.311710][ T786] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1605.323874][ T786] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1605.335319][ T786] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1605.344118][ T786] usb 4-1: Product: syz [ 1605.348356][ T786] usb 4-1: Manufacturer: syz [ 1605.358075][ T786] usb 4-1: SerialNumber: syz [ 1605.365549][ T786] usb 4-1: config 0 descriptor?? [ 1605.388554][ T786] usb 4-1: selecting invalid altsetting 0 [ 1607.159289][T19962] netlink: 'syz.2.3728': attribute type 10 has an invalid length. [ 1607.167307][T19962] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3728'. [ 1607.384959][ T5841] usb 1-1: USB disconnect, device number 39 [ 1607.536903][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.543422][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1609.312218][T19987] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3737'. [ 1609.690647][ T5841] usb 4-1: USB disconnect, device number 44 [ 1609.734283][ T786] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1609.936121][ T786] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 1609.944882][ T786] usb 5-1: config 0 has no interface number 0 [ 1609.953347][ T786] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1609.976278][ T786] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1610.008122][ T786] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1610.019973][ T786] usb 5-1: Product: syz [ 1610.033369][ T786] usb 5-1: Manufacturer: syz [ 1610.045135][ T786] usb 5-1: SerialNumber: syz [ 1610.054881][ T786] usb 5-1: config 0 descriptor?? [ 1610.080591][ T786] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 1610.929873][T19997] netlink: 'syz.3.3740': attribute type 10 has an invalid length. [ 1610.937937][T19997] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3740'. [ 1613.632678][T19021] usb 5-1: USB disconnect, device number 11 [ 1613.675228][T19021] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 1613.724933][T20004] loop2: detected capacity change from 0 to 7 [ 1613.781743][T20004] Dev loop2: unable to read RDB block 7 [ 1613.789005][T20004] loop2: unable to read partition table [ 1613.808114][T20004] loop2: partition table beyond EOD, truncated [ 1613.815186][T20004] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1614.500008][T20031] netlink: 'syz.4.3750': attribute type 10 has an invalid length. [ 1614.508185][T20031] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3750'. [ 1615.810291][T20039] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3753'. [ 1617.896370][T20062] fuse: Unknown parameter '00000000000000000000' [ 1619.214268][T20075] netlink: 'syz.3.3763': attribute type 10 has an invalid length. [ 1619.222252][T20075] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3763'. [ 1619.892725][T17625] Bluetooth: hci2: command 0x0406 tx timeout [ 1621.279853][T20091] loop2: detected capacity change from 0 to 7 [ 1621.299374][T20091] Dev loop2: unable to read RDB block 7 [ 1621.308580][T20091] loop2: unable to read partition table [ 1621.322702][T20091] loop2: partition table beyond EOD, truncated [ 1621.422784][T20091] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1621.505010][ T5159] Dev loop2: unable to read RDB block 7 [ 1621.510654][ T5159] loop2: unable to read partition table [ 1621.532844][ T5159] loop2: partition table beyond EOD, truncated [ 1621.750539][ T5159] Dev loop2: unable to read RDB block 7 [ 1621.761571][ T5159] loop2: unable to read partition table [ 1621.808409][ T5159] loop2: partition table beyond EOD, truncated [ 1623.262115][ T5159] Dev loop2: unable to read RDB block 7 [ 1623.267817][ T5159] loop2: unable to read partition table [ 1623.305054][ T5159] loop2: partition table beyond EOD, truncated [ 1623.752704][T15954] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1623.995398][T20123] netlink: set zone limit has 8 unknown bytes [ 1624.715669][T15954] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1624.771176][T15954] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1624.815795][T15954] usb 3-1: Product: syz [ 1624.841828][T15954] usb 3-1: Manufacturer: syz [ 1624.862003][T15954] usb 3-1: SerialNumber: syz [ 1624.897816][T15954] usb 3-1: config 0 descriptor?? [ 1624.925966][T15954] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1624.978761][T15954] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1625.023593][T15954] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1625.057133][T15954] usb 3-1: media controller created [ 1625.193507][T15954] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1625.476067][T15954] DVB: Unable to find symbol mt352_attach() [ 1625.616585][T15954] DVB: Unable to find symbol nxt6000_attach() [ 1625.665500][T15954] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1625.713643][T15954] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input27 [ 1625.766119][T15954] dvb-usb: schedule remote query interval to 1000 msecs. [ 1625.807377][T15954] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1625.836548][T15954] dvb-usb: bulk message failed: -22 (7/0) [ 1625.861041][T15954] dvb-usb: bulk message failed: -22 (7/0) [ 1625.903368][T15954] usb 3-1: USB disconnect, device number 46 [ 1627.950238][T20149] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1627.950238][T20149] program syz.0.3783 not setting count and/or reply_len properly [ 1628.217857][T15954] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1630.821815][T20187] netlink: 'syz.0.3797': attribute type 10 has an invalid length. [ 1630.829956][T20187] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3797'. [ 1633.881327][T20215] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1633.881327][T20215] program syz.4.3807 not setting count and/or reply_len properly [ 1633.892753][ T23] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1634.682602][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 1634.693180][ T23] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1634.757513][T20222] netlink: 'syz.2.3808': attribute type 10 has an invalid length. [ 1634.767592][T20222] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3808'. [ 1635.480935][ T23] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1635.492569][ T23] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1635.503879][ T23] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1635.513998][ T23] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1635.531427][ T23] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1635.543515][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1635.881247][ T23] usb 1-1: usb_control_msg returned -71 [ 1635.917617][ T23] usbtmc 1-1:16.0: can't read capabilities [ 1635.978235][ T23] usb 1-1: USB disconnect, device number 40 [ 1636.323154][T15954] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1636.654951][T15954] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1636.746566][T15954] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1636.852616][T15954] usb 5-1: Product: syz [ 1636.856945][T15954] usb 5-1: Manufacturer: syz [ 1636.865736][T15954] usb 5-1: SerialNumber: syz [ 1636.873395][T15954] usb 5-1: config 0 descriptor?? [ 1636.906768][T15954] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1636.963463][T15954] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1636.991199][T15954] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1637.001146][T15954] usb 5-1: media controller created [ 1637.038718][T15954] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1637.509256][T15954] DVB: Unable to find symbol mt352_attach() [ 1637.609599][T15954] DVB: Unable to find symbol nxt6000_attach() [ 1637.617768][T15954] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1637.653989][T15954] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input28 [ 1637.680460][T15954] dvb-usb: schedule remote query interval to 1000 msecs. [ 1637.688922][T15954] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1637.701704][T15954] dvb-usb: bulk message failed: -22 (7/0) [ 1637.709581][T15954] dvb-usb: bulk message failed: -22 (7/0) [ 1637.732164][T15954] usb 5-1: USB disconnect, device number 12 [ 1638.549163][ T9] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1638.869996][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 1638.872064][T15954] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1639.633589][ T9] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1639.644093][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1639.654254][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1639.664157][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1639.674251][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1639.688342][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1639.704290][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1639.938320][ T9] usb 3-1: usb_control_msg returned -32 [ 1639.953870][ T9] usbtmc 3-1:16.0: can't read capabilities [ 1640.592617][ T9] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1640.645213][T20291] usbtmc 3-1:16.0: usb_clear_halt returned -32 [ 1640.802684][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 1640.838037][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1640.850924][ T23] usb 3-1: USB disconnect, device number 47 [ 1640.864688][ T9] usb 4-1: config 0 has no interfaces? [ 1640.883502][ T9] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1640.900648][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1640.910479][ T9] usb 4-1: Product: syz [ 1640.917915][ T9] usb 4-1: Manufacturer: syz [ 1640.940865][ T9] usb 4-1: SerialNumber: syz [ 1640.980654][ T9] usb 4-1: config 0 descriptor?? [ 1641.328280][ T9] usb 4-1: USB disconnect, device number 45 [ 1642.073275][ T23] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1642.279409][ T23] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1642.299931][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1642.484552][ T23] usb 1-1: Product: syz [ 1642.488948][ T23] usb 1-1: Manufacturer: syz [ 1642.494230][ T23] usb 1-1: SerialNumber: syz [ 1642.570069][T20322] netlink: 'syz.4.3841': attribute type 10 has an invalid length. [ 1642.578102][T20322] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3841'. [ 1643.266209][ T23] usb 1-1: config 0 descriptor?? [ 1643.312689][ T23] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1643.368764][ T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1643.434687][ T23] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1643.469778][ T23] usb 1-1: media controller created [ 1643.819771][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1644.025554][ T23] DVB: Unable to find symbol mt352_attach() [ 1644.142011][ T23] DVB: Unable to find symbol nxt6000_attach() [ 1644.171395][ T23] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1644.230940][ T23] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input29 [ 1644.286839][ T23] dvb-usb: schedule remote query interval to 1000 msecs. [ 1644.314925][ T23] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1644.380139][ T23] dvb-usb: bulk message failed: -22 (7/0) [ 1644.472231][ T23] dvb-usb: bulk message failed: -22 (7/0) [ 1644.522876][ T23] usb 1-1: USB disconnect, device number 41 [ 1644.979280][ T23] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1645.662753][ T5861] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1645.909854][ T5861] usb 5-1: Using ep0 maxpacket: 8 [ 1646.034351][ T5861] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1646.098870][ T5861] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1646.117268][ T5861] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1646.137363][ T5861] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1646.267452][T20351] Set syz0 is full, maxelem 0 reached [ 1646.521137][ T5861] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1646.896056][ T5861] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1646.924215][ T5861] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1647.250630][ T5861] usb 5-1: usb_control_msg returned -32 [ 1647.260841][ T5861] usbtmc 5-1:16.0: can't read capabilities [ 1647.353167][T20361] netlink: 'syz.0.3851': attribute type 10 has an invalid length. [ 1647.361682][T20361] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3851'. [ 1648.474895][T15954] usb 5-1: USB disconnect, device number 13 [ 1648.822642][ T23] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1649.754865][ T23] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1650.579471][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1650.612562][ T23] usb 1-1: Product: syz [ 1650.637174][ T23] usb 1-1: Manufacturer: syz [ 1650.641845][ T23] usb 1-1: SerialNumber: syz [ 1650.676519][ T23] usb 1-1: config 0 descriptor?? [ 1650.699589][ T23] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 1650.761276][ T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1650.787623][ T23] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 1650.815212][ T23] usb 1-1: media controller created [ 1650.883100][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1650.886612][ T5861] libceph: connect (1)[c::]:6789 error -101 [ 1650.898777][ T5861] libceph: mon0 (1)[c::]:6789 connect error [ 1651.163028][ T5861] libceph: connect (1)[c::]:6789 error -101 [ 1651.220137][ T5861] libceph: mon0 (1)[c::]:6789 connect error [ 1651.286877][ T23] DVB: Unable to find symbol mt352_attach() [ 1651.370898][ T23] DVB: Unable to find symbol nxt6000_attach() [ 1651.374717][T20381] ceph: No mds server is up or the cluster is laggy [ 1651.402611][ T23] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 1651.445757][ T23] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input30 [ 1651.563780][ T23] dvb-usb: schedule remote query interval to 1000 msecs. [ 1651.596110][ T23] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 1651.662561][ T23] dvb-usb: bulk message failed: -22 (7/0) [ 1651.689492][ T23] dvb-usb: bulk message failed: -22 (7/0) [ 1651.795027][ T23] usb 1-1: USB disconnect, device number 42 [ 1652.266664][ T23] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 1653.504816][ T49] ------------[ cut here ]------------ [ 1653.511039][ T49] wlan1: Dropped data frame as no usable bitrate found while scanning and associated. Target station: 08:02:11:00:00:00 on 5 GHz band [ 1653.525833][ T49] WARNING: CPU: 1 PID: 49 at net/mac80211/tx.c:769 ieee80211_tx_h_rate_ctrl+0xc7e/0x1770 [ 1653.535799][ T49] Modules linked in: [ 1653.539734][ T49] CPU: 1 PID: 49 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 1653.547171][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1653.557292][ T49] Workqueue: events_unbound cfg80211_wiphy_work [ 1653.563633][ T49] RIP: 0010:ieee80211_tx_h_rate_ctrl+0xc7e/0x1770 [ 1653.570085][ T49] Code: 8b 36 45 31 f6 83 e6 07 41 0f 95 c6 31 ff e8 29 8e 97 f7 43 8d 4c 76 02 48 c7 c7 e0 d3 be 8b 48 89 de 4c 89 fa e8 c2 07 62 f7 <0f> 0b 41 bf 01 00 00 00 e9 eb 02 00 00 e8 50 8a 97 f7 e9 70 fa ff [ 1653.589763][ T49] RSP: 0018:ffffc90000ba74e0 EFLAGS: 00010246 [ 1653.595926][ T49] RAX: e1ddb8f777581500 RBX: ffff88801e7d95b0 RCX: ffff88801bed8000 [ 1653.603979][ T49] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 1653.612006][ T49] RBP: ffffc90000ba7650 R08: ffffc90000ba70e7 R09: 1ffff92000174e1c [ 1653.620088][ T49] R10: dffffc0000000000 R11: fffff52000174e1d R12: dffffc0000000000 [ 1653.628135][ T49] R13: ffffc90000ba7808 R14: 0000000000000001 R15: ffff8880565ae444 [ 1653.636174][ T49] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1653.645170][ T49] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1653.651787][ T49] CR2: 0000200000034000 CR3: 000000001c76b000 CR4: 00000000003526e0 [ 1653.659835][ T49] Call Trace: [ 1653.663233][ T49] [ 1653.666237][ T49] ? ieee80211_tx_h_select_key+0x19e0/0x19e0 [ 1653.672300][ T49] ? ieee80211_is_bufferable_mmpdu+0xfb/0x1f0 [ 1653.678481][ T49] invoke_tx_handlers_late+0xb6/0x1810 [ 1653.684129][ T49] ? invoke_tx_handlers_early+0xa11/0x1cf0 [ 1653.690020][ T49] ieee80211_tx+0x2ad/0x420 [ 1653.694667][ T49] ? ieee80211_skb_resize+0x630/0x630 [ 1653.700129][ T49] ? ieee80211_set_qos_hdr+0x1ca/0x510 [ 1653.705715][ T49] ? ieee80211_xmit+0x2ea/0x3f0 [ 1653.710642][ T49] ? ieee80211_xmit+0x310/0x3f0 [ 1653.715601][ T49] ? __ieee80211_tx_skb_tid_band+0x490/0x610 [ 1653.721635][ T49] __ieee80211_tx_skb_tid_band+0x4d5/0x610 [ 1653.727540][ T49] ? ieee80211_scan_state_send_probe+0x4b4/0x930 [ 1653.733953][ T49] ieee80211_scan_state_send_probe+0x560/0x930 [ 1653.740178][ T49] ieee80211_scan_work+0x4e8/0x1c30 [ 1653.745494][ T49] cfg80211_wiphy_work+0x225/0x260 [ 1653.750672][ T49] ? process_scheduled_works+0x957/0x15b0 [ 1653.756507][ T49] process_scheduled_works+0xa45/0x15b0 [ 1653.762136][ T49] ? assign_work+0x400/0x400 [ 1653.766821][ T49] ? assign_work+0x39e/0x400 [ 1653.771466][ T49] worker_thread+0xa55/0xfc0 [ 1653.776226][ T49] kthread+0x2fa/0x390 [ 1653.780348][ T49] ? pr_cont_work+0x560/0x560 [ 1653.785127][ T49] ? kthread_blkcg+0xd0/0xd0 [ 1653.789773][ T49] ret_from_fork+0x48/0x80 [ 1653.794286][ T49] ? kthread_blkcg+0xd0/0xd0 [ 1653.798922][ T49] ret_from_fork_asm+0x11/0x20 [ 1653.803826][ T49] [ 1653.806895][ T49] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1653.814210][ T49] CPU: 1 PID: 49 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 1653.821623][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1653.832067][ T49] Workqueue: events_unbound cfg80211_wiphy_work [ 1653.838378][ T49] Call Trace: [ 1653.841701][ T49] [ 1653.844670][ T49] dump_stack_lvl+0x16c/0x230 [ 1653.849420][ T49] ? show_regs_print_info+0x20/0x20 [ 1653.854679][ T49] ? load_image+0x3b0/0x3b0 [ 1653.859327][ T49] panic+0x2c0/0x710 [ 1653.863272][ T49] ? bpf_jit_dump+0xd0/0xd0 [ 1653.867828][ T49] ? ret_from_fork_asm+0x11/0x20 [ 1653.872822][ T49] __warn+0x2e0/0x470 [ 1653.876846][ T49] ? ieee80211_tx_h_rate_ctrl+0xc7e/0x1770 [ 1653.882688][ T49] ? ieee80211_tx_h_rate_ctrl+0xc7e/0x1770 [ 1653.888533][ T49] report_bug+0x2be/0x4f0 [ 1653.892911][ T49] ? ieee80211_tx_h_rate_ctrl+0xc7e/0x1770 [ 1653.898755][ T49] ? ieee80211_tx_h_rate_ctrl+0xc7e/0x1770 [ 1653.904690][ T49] ? ieee80211_tx_h_rate_ctrl+0xc80/0x1770 [ 1653.910541][ T49] handle_bug+0xcf/0x120 [ 1653.914838][ T49] exc_invalid_op+0x1a/0x50 [ 1653.919396][ T49] asm_exc_invalid_op+0x1a/0x20 [ 1653.924287][ T49] RIP: 0010:ieee80211_tx_h_rate_ctrl+0xc7e/0x1770 [ 1653.930742][ T49] Code: 8b 36 45 31 f6 83 e6 07 41 0f 95 c6 31 ff e8 29 8e 97 f7 43 8d 4c 76 02 48 c7 c7 e0 d3 be 8b 48 89 de 4c 89 fa e8 c2 07 62 f7 <0f> 0b 41 bf 01 00 00 00 e9 eb 02 00 00 e8 50 8a 97 f7 e9 70 fa ff [ 1653.950505][ T49] RSP: 0018:ffffc90000ba74e0 EFLAGS: 00010246 [ 1653.956622][ T49] RAX: e1ddb8f777581500 RBX: ffff88801e7d95b0 RCX: ffff88801bed8000 [ 1653.964631][ T49] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 1653.972638][ T49] RBP: ffffc90000ba7650 R08: ffffc90000ba70e7 R09: 1ffff92000174e1c [ 1653.980654][ T49] R10: dffffc0000000000 R11: fffff52000174e1d R12: dffffc0000000000 [ 1653.988764][ T49] R13: ffffc90000ba7808 R14: 0000000000000001 R15: ffff8880565ae444 [ 1653.996811][ T49] ? ieee80211_tx_h_select_key+0x19e0/0x19e0 [ 1654.002840][ T49] ? ieee80211_is_bufferable_mmpdu+0xfb/0x1f0 [ 1654.008954][ T49] invoke_tx_handlers_late+0xb6/0x1810 [ 1654.014467][ T49] ? invoke_tx_handlers_early+0xa11/0x1cf0 [ 1654.020339][ T49] ieee80211_tx+0x2ad/0x420 [ 1654.024896][ T49] ? ieee80211_skb_resize+0x630/0x630 [ 1654.030343][ T49] ? ieee80211_set_qos_hdr+0x1ca/0x510 [ 1654.035844][ T49] ? ieee80211_xmit+0x2ea/0x3f0 [ 1654.040861][ T49] ? ieee80211_xmit+0x310/0x3f0 [ 1654.045776][ T49] ? __ieee80211_tx_skb_tid_band+0x490/0x610 [ 1654.051812][ T49] __ieee80211_tx_skb_tid_band+0x4d5/0x610 [ 1654.057705][ T49] ? ieee80211_scan_state_send_probe+0x4b4/0x930 [ 1654.064171][ T49] ieee80211_scan_state_send_probe+0x560/0x930 [ 1654.070402][ T49] ieee80211_scan_work+0x4e8/0x1c30 [ 1654.075666][ T49] cfg80211_wiphy_work+0x225/0x260 [ 1654.080800][ T49] ? process_scheduled_works+0x957/0x15b0 [ 1654.086535][ T49] process_scheduled_works+0xa45/0x15b0 [ 1654.092156][ T49] ? assign_work+0x400/0x400 [ 1654.096805][ T49] ? assign_work+0x39e/0x400 [ 1654.101435][ T49] worker_thread+0xa55/0xfc0 [ 1654.106108][ T49] kthread+0x2fa/0x390 [ 1654.110206][ T49] ? pr_cont_work+0x560/0x560 [ 1654.114999][ T49] ? kthread_blkcg+0xd0/0xd0 [ 1654.119630][ T49] ret_from_fork+0x48/0x80 [ 1654.124098][ T49] ? kthread_blkcg+0xd0/0xd0 [ 1654.128730][ T49] ret_from_fork_asm+0x11/0x20 [ 1654.133567][ T49] [ 1654.136991][ T49] Kernel Offset: disabled [ 1654.141480][ T49] Rebooting in 86400 seconds..