last executing test programs: 12m34.778439233s ago: executing program 0 (id=232): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x11, 0x13}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x28001}, 0x8048802) 12m34.597068424s ago: executing program 0 (id=234): r0 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r0) socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f00000001c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c00078008000640"], 0x5c}}, 0x20084884) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f000005000700840000000600054044"], 0x74}, 0x1, 0x0, 0x0, 0x10040007}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) syz_usb_connect(0x5, 0x24, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') syz_genetlink_get_family_id$nl80211(0x0, r5) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) ioctl$PPPIOCSMRRU(0xffffffffffffffff, 0x4004743b, 0x0) socket(0x1, 0x803, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 12m33.849855188s ago: executing program 0 (id=239): openat$kvm(0xffffffffffffff9c, 0x0, 0x161283, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x584, 0x0, 0xfff}]}) r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00"/11], 0x50) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="050000007f000000f00e000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380), 0x0, 0xd39, r3}, 0x38) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0), &(0x7f00000002c0), 0x6, r3}, 0x38) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x200000}, {}, 0xfffffffc, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x0, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000, 0x4}}, 0xe8) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) 12m31.112993308s ago: executing program 0 (id=247): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000001e40), 0x0, 0x100, 0x0) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) r2 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$video(0x0, 0x1d24, 0x0) r5 = socket$inet(0x2b, 0x801, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x14, 0x0, 0x301, 0x70bd28, 0x25dfdbfe, {0x1c}}, 0x14}, 0x1, 0xffff000000000000}, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x48f, &(0x7f0000000000)={0x1, @private, 0x0, 0x0, 'sed\x00', 0xa, 0xfffffffb, 0x14}, 0x2c) r6 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, 0xffffffffffffffff, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0xa0000, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x11) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4000009c}]}) sendfile(r8, r8, 0x0, 0x2000fb) preadv2(r7, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) readv(r6, &(0x7f0000000340), 0x0) ioctl$IMADDTIMER(r6, 0x80044940, &(0x7f0000000000)) 12m29.570798018s ago: executing program 0 (id=253): mkdir(&(0x7f0000000380)='./file1\x00', 0xa) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000000)={[{@noauto_da_alloc}, {@init_itable_val={'init_itable', 0x3d, 0x4004}}, {@barrier_val={'barrier', 0x3d, 0x5}}]}, 0x43, 0x4e1, &(0x7f0000000740)="$eJzs3E9sVEUcAODf27a05Y+siCiIWkRjI7GFgsLBxGA08aCJERP12LSFIIUaWhIhaJbE4NGQeDcevXrwql6I8WTiFY8mhoQYLoCJcc3bfW93u91tadl2wX5fst2ZefvezOy8eTtvprsBrFtD6Z+kGr4WEVsjotD8gqHq0+2bFyfu3Lw4EaVy+dhfSWW3W2k8kx0mNmWR4UJE4fOkvqHB7PkLp8anp6fOZvHRudMfj86ev/DiyYEs5ciRQwcPHH557KXlV6pFfmm9bu36bGb3zjc/vPL2RG+enufWWI9OGYqhVkWpeK7TmXXZloZw0tvFgrAs6fmfNldfpf9vjZ5YrPFKa1gyYLWVy+Vyf/vNpXKzSwtSgAdWEt0uAdAd+Qd9ev+bP1oNBDaszvCj624crd4ApfW+nT0inq4k5vMgfU33t500FBEflP7+On3EKs1DAAA0+vFoPhJsGv8Vqysj/5y7+mr6/FC2hlKMiIcjYltEPBIR2yPi0YjYERGPRcTjTcfviYjyIvk3zzbX8q8tQhWud6iqLaXjv1eyta36+G9eAYo9WWxLRD5gntqfvSfD0dd//OT01IFF8vjp9d++bLetcfyXPtL887FgVo7rvU0TdJPjc+MrrnCTG5cidvU21z/pjUhqbZNExM6I2LWM4xYbwidf+HZ3LdI3/3VL17+i3HIdrQPrTOVvIp6vtn8p5rV/Pcdk3vrk6fETUyemzozV1idHB2J6av9oehbsb5nHL79efqdd/kvW//s/mnd54/APx7Kede/S9t/YcP5Hvn5br38xiUhq67Wzy8/j8u9ftL2nWen5vyF5rxLO70s/GZ+bO3sgYkPy1sL0sfq+eTx9jlK1/sN7W/f/bdk+6TvxRESkJ/GTEfFUVO8Q07LviYhnImLvIvX/+bVnP1p5/VdXWv/JputfteXntX99vb5dIMnWBqspg42bek7tuXanzcXj7tr/UCU0nKUsvP6lJUzmXSLalTT/tEtT/u3IOwgAAAD3v0JEbG6YS9ochcLISHUOaHtsLEzPzM7tOz5z7sxkui2iGH2FfKarOh/cl+Tzn8WG+FhT/GA2b/xVz2AlPjIxMz3Z1ZoDmyp9PimMRLzf09D/U392ZooZuJ/5vhasX4v1/3QQv+PKGhYGWFN3//l/9dNVLQiw5hr6f7tv+JdW8H9fwAPA/T9Qt/QP/bhmwIOvrC/Duras/r/PjwDC/0lvvFsLF7paEmCtGf/DurTk9/rvKVDub71pIBa+OAYWP2BPrKwYgy3y6kogHVl1JffBleyV/5pC29dEYXkH7I/OtOnxe3w3SmdnT+zo+Mlfzv5XvtMt+N2a9NNWga5cjgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADruvwAAAP//hS/gCQ==") 12m29.001906692s ago: executing program 0 (id=254): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x1c}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x104}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r4 = memfd_create(&(0x7f0000000300)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d\xd4(\xa3\x84U\xc0\xe1\a\xb4\x0e_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\x10C\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe\f\x04\x99\xf6\xfc\x00'/302, 0x2) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x8000}) fcntl$dupfd(r5, 0x406, r1) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x5, &(0x7f0000000000)=0x5, 0x9, 0x3) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="180000001800599c6d0e0000ded6"], 0xfe33) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x7, 0x2261, 0x2}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r7, 0x0, 0x0}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'macvtap0\x00'}) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000240)={0x18, &(0x7f0000000000)={0x0, 0x9, 0x68, {0x68, 0x30, "85262928f95d38909e1db88ee37c17f86c5fa54189e442a79e3318622dff9bd97dfdf1a4122a53a4da136943ccd9a0e9db587161d4337d3ae09989088bf40e428a634cf8083245459c1cebfbf3cc8193892d6e21742dcd7cc5f1948846c8cd4b2f1a4a63c848"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f00000000c0)) socket$nl_netfilter(0x10, 0x3, 0xc) 12m27.947694894s ago: executing program 1 (id=258): syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000001300)="92", 0x2) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b40)={0x2c, &(0x7f0000000500)={0x40, 0x13}, 0x0, 0x0, 0x0, 0x0}) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x4008c002, 0x0) 12m24.846789365s ago: executing program 1 (id=268): r0 = syz_io_uring_setup(0x512, &(0x7f0000000280)={0x0, 0xc65d, 0x100, 0x8, 0x40}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x10000, 0x0, {0x3}}) io_uring_enter(r0, 0x47fa, 0x7c7e, 0x0, 0x0, 0x0) 12m24.660338437s ago: executing program 1 (id=269): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x1) landlock_create_ruleset(&(0x7f0000000040)={0x3342, 0x3}, 0x18, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) r4 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) r5 = userfaultfd(0x1) ioctl$UFFDIO_API(r5, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) close(0x3) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x0, 0x3, 0x8000288}, &(0x7f0000000200)=0x0, &(0x7f0000000280)) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r7, &(0x7f0000004d80)=[{{&(0x7f0000000300)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f00000002c0)=[{&(0x7f00000008c0)="cc41c5", 0x3}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0x3, @initdev={0xfe, 0x88, '\x00', 0xfc, 0x0}, 0x3}, 0x1c, &(0x7f0000003440)=[{&(0x7f00000000c0)="c61221b68a8b", 0x6}], 0x1}}], 0x2, 0x0) shutdown(r7, 0x1) getsockopt$bt_hci(r7, 0x84, 0x80, &(0x7f00000010c0)=""/4111, &(0x7f0000000000)=0x100f) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) 12m23.167007304s ago: executing program 1 (id=271): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) r2 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) r3 = shmat(r2, &(0x7f0000ff1000/0x3000)=nil, 0x400c) r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) mremap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmdt(r3) 12m21.777006636s ago: executing program 1 (id=275): mkdir(&(0x7f0000000380)='./file1\x00', 0xa) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000000)={[{@noauto_da_alloc}, {@init_itable_val={'init_itable', 0x3d, 0x4004}}, {@barrier_val={'barrier', 0x3d, 0x5}}]}, 0x43, 0x4e1, &(0x7f0000000740)="$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") 12m21.443207125s ago: executing program 1 (id=276): syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000001300)="92", 0x2) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b40)={0x2c, &(0x7f0000000500)={0x40, 0x13}, 0x0, 0x0, 0x0, 0x0}) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x4008c002, 0x0) 12m13.792048934s ago: executing program 32 (id=254): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x1c}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x104}) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r4 = memfd_create(&(0x7f0000000300)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\x10\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d\xd4(\xa3\x84U\xc0\xe1\a\xb4\x0e_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\x10C\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe\f\x04\x99\xf6\xfc\x00'/302, 0x2) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x8000}) fcntl$dupfd(r5, 0x406, r1) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x5, &(0x7f0000000000)=0x5, 0x9, 0x3) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="180000001800599c6d0e0000ded6"], 0xfe33) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x7, 0x2261, 0x2}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r7, 0x0, 0x0}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'macvtap0\x00'}) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000240)={0x18, &(0x7f0000000000)={0x0, 0x9, 0x68, {0x68, 0x30, "85262928f95d38909e1db88ee37c17f86c5fa54189e442a79e3318622dff9bd97dfdf1a4122a53a4da136943ccd9a0e9db587161d4337d3ae09989088bf40e428a634cf8083245459c1cebfbf3cc8193892d6e21742dcd7cc5f1948846c8cd4b2f1a4a63c848"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f00000000c0)) socket$nl_netfilter(0x10, 0x3, 0xc) 12m6.387422668s ago: executing program 33 (id=276): syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000001300)="92", 0x2) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b40)={0x2c, &(0x7f0000000500)={0x40, 0x13}, 0x0, 0x0, 0x0, 0x0}) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x4008c002, 0x0) 8.837690673s ago: executing program 4 (id=3403): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000a00)={0x70, 0x7, r1, 0x0, 0xfffffffffffffffc, 0x1000}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x8, 0xffffffffffffffff, 0x0, 0x7, 0x1, &(0x7f0000000180)="ca", 0x1}) 8.597609598s ago: executing program 3 (id=3404): r0 = syz_io_uring_setup(0x8d2, &(0x7f00000002c0)={0x0, 0x0, 0x1000, 0x6}, 0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r2 = socket(0x1e, 0x1, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2afd, 0x308b, 0xc, 0x0, 0x0) 8.55219915s ago: executing program 4 (id=3405): getpeername$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40080) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, 0xffffffffffffffff, 0x0) sigaltstack(&(0x7f0000000000)={&(0x7f0000000280)=""/4124, 0x80000001, 0x101c}, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 8.222258549s ago: executing program 3 (id=3406): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0x82, &(0x7f0000000200)={0x7939, 0x2, 0x8000, 0x84, 0xe2, 0x0, 0xff, 0x3575}, &(0x7f0000000080)=0x20) 8.21467362s ago: executing program 3 (id=3407): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) accept$unix(r1, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8008}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x4}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0x1}]}}}]}, 0x44}}, 0x8000) madvise(&(0x7f000072a000/0x4000)=nil, 0x4000, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @multicast1}}}], 0x20}}], 0x1, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r4, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x0, 0x0, 0x0, 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57) setsockopt$inet_mreqsrc(r3, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 7.567427908s ago: executing program 4 (id=3408): munmap(&(0x7f0000cb1000/0x2000)=nil, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f000002eff0)={0x20d, &(0x7f0000000000)=[{0x4, 0xd, 0x8, 0x7fff}, {0x9000, 0x2, 0x12, 0x8}]}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) sched_setscheduler(0x0, 0x1, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r6, &(0x7f0000000100)=ANY=[], 0xfce1) ioctl$TCFLSH(r5, 0x540b, 0x2) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000080)=0x5f3a, 0x4) write$tun(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0xbe) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000001680)={0x48, 0x2, r8}) ioctl$IOMMU_VFIO_SET_IOMMU(r2, 0x3b66, 0x1) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r8, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3000001, 0x11, r1, 0xf1711000) ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, &(0x7f0000000040)={0x18, r8}) 7.094787486s ago: executing program 4 (id=3410): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, 0x0, 0x0) connect$l2tp6(r2, 0x0, 0x0) r3 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c0000904000002070101000905010200"], 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r4, 0x0, 0x0, 0xfffff, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r5, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r5, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1, 0x1}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 6.181130059s ago: executing program 3 (id=3412): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) syz_open_procfs$userns(0x0, 0x0) mknod$loop(0x0, 0x8fff, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f00000005c0)={[&(0x7f0000000ec0)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000180)='\x7f\xbf\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000380)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000080)='\xf6\x98l_\xf5<\x1a_6:', &(0x7f0000000480)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000bc0)='\x7f\xb7\xc3\x7f\xa5a\xd6\xd3\x18\xd0\xe0\xd8R\xf02b\xefA|uiWb\x8f\xee\x1ch\x83\x94y\x89\xf1Y{\x87\xd5\xf7\xccMr\xc5\xbdT\x9e\xd4\x84\x06\xcd\x8b\xcd\t\x01\x11\xbc\x86<\x8b\xad\xc4\x80B\xce\x86\x86g\x92\x92w\x89\xfe\xba\xbeeC\x96Ad\t\xc2\xc8\xed\xf3\x1e\x84Ot\x12`=\x98r\x94[\xc8\x91r\xbaG3\xd6a\xca\x05\xd5\xec\xfd\xfa\xaa\xa1\xa7\xcc\x85\xf5D_\xb4$r\xca\x8f\xcf[T\xb9\x0f\xaf\x00\xbc\xa4\xba\xb6=]\x8a\xfb\xaa\xdc+\xbe\a\x06>\r\xe5,i\xa2\xa8\xa2M\xc7\xfb\x11\xd1U\xe5H\xd6\x1b\xf7\xf6B\xcbG\xe4\xe6\xc3{\xf5\xf9_F\x02\x8ah\x15G`+\xf9\xb9\x95V\xa3\xb0\x1b\x0e\xafle%/K\xbb\x9d\x17\xde0\xc2\xa41\x9aS\xe6M\x1e\xb9\xc9\xe8\xf7i\x02e\x8c\xce\xa9\xe7\xc9\x13\xa4\xe8\xf4\x1c\xff\x82\xe13\x89\xeex\xb5\xcf\xce\x108j#\xabH\xc3RU\x00M?\xca\x9c\xefT\xaaJ8*\xe0S\rV\x9c\xaf\xb3yh\x15\xa2\xce>>f\x16\x8d(\xeaot\x83\xe5\x13\xf2bA\xc1O\xbb~\xe5p\x83\xb3\x9d\x1c}\xe7\xd7\x811\x15\x9eP\xea\x00\x00\x00\x00\x00\xfd\x8c\x96\xebw\xdeg\"\xe4\xf6\xfc\x96N\xaf>!\xd9\xaf\x1be\xfa\xedJ\"\xab\x18xK5?\xec\xa0\xc2<\xa8\xdbo\xb1l\nn\xdb#\x97\xbcd\x0e\x93\x9e\xea\xb9\x9d-\xb6u\x7f\xe0\xa6\xef\xb4#\x1b@N\x04\xa0s\xa0\xe1\x90k8\xc3\r\xd0\x1b70b\xda\xe5\xb0\xa8\x01\x14N\xcf\x8dJ\xad\xc69\v\xbc[\xec\x97\xe7\xb2\x90j\xbd\xb1GX\xf2\xed\x15\xceK\xac\x19`a\x1e\x15\x90\x8d\xf4r\xd4Q\xd5\xc19|\xf7\x99\xed\x0e\xaf\xf7\xefR\xa6\xd0:\xe2yB\xfdpG\xf5\xc5\x919\x0f\xfa\xd1R\xc7\x8b\xbc)l\x11\xa8h2V\xe8\x1a\xf7\x8e\x14\xcbF\r\xa7w\xd3\xd3\xb7\xa5\x88\"\xa8\xa4>\xf0*\xbeM\x02\xf0i\x10m(7\xb64\xf5\xa1aZ\x16^\xde\a\xfae\xae\xe7{1\xd0\xa2\t\f\x85\x98\xdaK4]Hi1J\x95\x0e\xa37\x86ch\xcb\xeb\xbfq\xc6\xd3\x98\xd3\x8c_R\xe4oN\xa7\xab\x03\x1c\xc5}\xf1\x92\x82\xe3\xa5~jy<\xf7T\xaf\xabYQ\x82EI\xf0P\x96', &(0x7f0000000000)='\xc1r\x9dnyb`\x00\xa2\xabCg\x13\b\x8f*\xdaA\x822\xf7\xaf\xf6U\xad\xb0\xb2\f\x88s\x19\xa3D\xa9\x82\x8a\xa3\x94\xab\"|\xcf\x1f\x12\x8d\xe1\xe5\xc3\x01\x03\x003\xa9p^\x01^\x16>tnF', &(0x7f00000007c0)='\x00', &(0x7f0000000840)='\x10!%{@{+\x00', &(0x7f0000000880)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00', &(0x7f00000008c0)='-\xf3\x00', &(0x7f0000000980)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000780)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00', &(0x7f0000000a80)='::-$[]#:{\x00']}, &(0x7f0000000b80)={[&(0x7f0000000800)='.-\\:!\x00\x00\x00\x00\x00y\xa5\x91\x9d:)\x0f\x9d/\xf8\f\xad\xdb|\xcf\x1cHB\xc8\xa3Qo{\xc5|\xa5z\x0e\x0f\xdee\xc2>\xb6\xfe\xeaZ~\xa3\x15\x16l\x00\x00\x00\x00\x00', &(0x7f00000000c0)='-\xf3\x00']}) 5.612913352s ago: executing program 3 (id=3414): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000280)={@multicast2, @multicast2, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae", 0x1000000}, 0x3c) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000080)={@multicast2, @multicast2, 0x0, "b18c89f8ec85752dace37a71e337f670bfac54f9a317850eaa73a3eb92f19456", 0x8, 0x8, 0x8, 0x1ff}, 0x3c) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x6, 0x80000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000100)={@my=0x1}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000240)="f56ed7", 0x3, 0xfffffffffffffffe) r7 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) r8 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, r7) r9 = add_key$user(&(0x7f00000003c0), &(0x7f0000000040), &(0x7f0000000400)="aeab5d807f5516dbb1f55e6aea685058f8705f3686230ec127aede9f807eef92532cd7f96ff46f08de8b1f42fc80143b5c5a72e819b5b33ec380d8788496c2b5aa1381ad40065f1491d6dc493da6927fed6c2330da6df2a7f051444561e8dfe0b36c64e31421b87ab46f00b50c5d57146b341b3d4a240f2e123421875e27bc16785046bba6737217b0737bb7a9dc576dc7aea1ad4cc4f6b8c7b0bdac57598936633dfde48248183f614a19f4f0f495aba7c3c2b61fc565807fb771ccf584bd25", 0xc0, r8) keyctl$dh_compute(0x17, &(0x7f0000000140)={r6, r9, r6}, 0x0, 0x0, 0x0) ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000000040)=""/17) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=r10, @ANYBLOB="b6c903f27000000014002b800c000800", @ANYRES32, @ANYBLOB="080003000200000008001b"], 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 3.443779709s ago: executing program 3 (id=3418): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) eventfd(0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x1}, 0x6e) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = syz_open_dev$I2C(0x0, 0x1, 0x2603) ioctl$I2C_RDWR(r3, 0x707, &(0x7f00000001c0)={&(0x7f0000000180)=[{0x1, 0x8000, 0x0, &(0x7f0000000100)}], 0x1}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x87, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0xaf, 0x0, 0xfffffe0000000001, 0x7, 0xffffffff}, 0x0) keyctl$dh_compute(0x17, 0x0, &(0x7f00000000c0)=""/83, 0x53, 0x0) bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff, 0x11, 0x0, @val=@kprobe_multi=@syms={0x1, 0x0, 0x0, 0x0, 0x100000001}}, 0x30) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffc}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 3.367134453s ago: executing program 2 (id=3419): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000640)="ad3292ea54881ba60842bd62653cb5c7beef915d564c90c2", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000380)="41aa28582b394161813fb891a55632fe35000acc7905af0e2c99673411fbdd7b7e5cfc50be4165263aeb91bb3cbb9a06b1c9c8b9bf72d99be61e9fcf00c557612eff61f6c11e1abd823d1a1dc6e749764ccf6b55c076c2db746e79961bea77266be1375c0aa25f6f967336439c3e15df7e4ac1e1067f9eaeb4c3e13fcdc3e3325d220c31b432410e5d66b1b7f76861", 0x8f}, {&(0x7f0000000880)="2562c5e99b9f6b5b44a9134b31756fba3253e5c295e19e3eef3f95b43a5a85c30cdecee06a0c88cf592081cdc5d091a4b2142a75c7ee2565b93a9eb072cbc3f48a8b04e0f610a5480d74551f6db105ae6a2bba2dacf91e5dcc384111fb5014d432e6f82951d0ce5991609d6654502ef9ee34b57e8d971466c54176dd13de4afac8520d51ac7c14", 0x87}, {&(0x7f0000000300)="184866553f80fc", 0x7}, {&(0x7f0000000a40)="134f04935c0bb6b3125fcaeaad07413b34f26e8ae834f29fe91f659871d6776b328f1dd8990a4745c426517669e1725e1eb7979a854ada6da00301244e48a6a3fc3c5edba971aba6ef9d7c4dde9f70d12be5df6f8c4690a4da77e5b463eecfac7b36237819a736fed32c729874a1ca658e08916b4f87992d0fad90d49dbe8314bd52ca2bf820223bfb825cd277330f7a8255b7471aceb6f5a169de47924477374ed3d246", 0xa4}, {&(0x7f0000000940)="fe0cefd07d48c4295cec8de23ea8bfc17f7f2f838be40584f6c96e957f2a218c112afd27d43a83b9b1bc7eb63f0e230cc43fb9f7", 0x34}, {&(0x7f0000000c40)="b8a2e6a91c2c4fffd4b2e86301adc30d6ad6ef812294b03c2ac12c280dadc09fc9836117e9cc8d66f829bc0e7ef004fe435c0dd8aaaea8b6d5cd41b7f39c26d26424a76d056605230e09184a16214ca5164f07cd69b65b2b1449b67f09ae68bb73f966c9ccd69d88a32c488763cc5404980d4dd22b98bc5e2a00f3020eb5936cc35a2f11003407d6e8515e79e71ab77736ac3bc8a50a0c15e6482efa944478536b270ad38a3e9e39ebd72ef6b7363b51b61d5980994fe09af1fd22d799bfa5e10a1dca390d", 0xc5}], 0x6, &(0x7f0000000dc0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x51}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 3.272188119s ago: executing program 2 (id=3420): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) accept$unix(r1, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8008}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x4}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0x1}]}}}]}, 0x44}}, 0x8000) madvise(&(0x7f000072a000/0x4000)=nil, 0x4000, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @multicast1}}}], 0x20}}], 0x1, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r4, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x0, 0x0, 0x0, 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57) setsockopt$inet_mreqsrc(r3, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 2.57131482s ago: executing program 5 (id=3424): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r1, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x8, r2, 0x0, 0x7, 0x1, &(0x7f0000000180)="ca", 0x1}) 2.511199154s ago: executing program 5 (id=3425): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8080, 0x8400}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OKEY={0x8}]}}}]}, 0x40}}, 0x0) 2.298490146s ago: executing program 5 (id=3426): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800008080b634280100"/20, @ANYRES32, @ANYRESDEC=r1], 0x0, 0x7, 0xffffffffffffffd2, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0xfffffffc, {{@in6=@private0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4e20, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x3, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4000000000000000, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000, 0x1ff}, 0x800, 0x6e6bba, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x2c000010) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000001800", [0x0, 0x2000000000001]}}) r7 = syz_open_dev$vim2m(&(0x7f0000000080), 0xffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f00000000c0)=@mmap={0x1, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x5, 0x0, 0x1, "bf631e4b"}}) ioctl$vim2m_VIDIOC_QBUF(r7, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0xd, {0x0, 0x2710}, {0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, "a730ba01"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0x40045612, &(0x7f0000000000)=0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa000, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x103400, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48}) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x2c, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0x4, 0x1c}, @typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0xd2a727af3cb3995f, &(0x7f0000000900)}, 0x10) 2.024025602s ago: executing program 4 (id=3427): r0 = io_uring_setup(0x177f, &(0x7f0000000140)={0x0, 0xfffffffa, 0x0, 0x0, 0x2b4}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000009968810524711004f320102030109021b00010000000009040000"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.390915809s ago: executing program 2 (id=3428): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000640)="ad3292ea54881ba60842bd62653cb5c7beef915d564c90c2", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000380)="41aa28582b394161813fb891a55632fe35000acc7905af0e2c99673411fbdd7b7e5cfc50be4165263aeb91bb3cbb9a06b1c9c8b9bf72d99be61e9fcf00c557612eff61f6c11e1abd823d1a1dc6e749764ccf6b55c076c2db746e79961bea77266be1375c0aa25f6f967336439c3e15df7e4ac1e1067f9eaeb4c3e13fcdc3e3325d220c31b432410e5d66b1b7f76861", 0x8f}, {&(0x7f0000000880)="2562c5e99b9f6b5b44a9134b31756fba3253e5c295e19e3eef3f95b43a5a85c30cdecee06a0c88cf592081cdc5d091a4b2142a75c7ee2565b93a9eb072cbc3f48a8b04e0f610a5480d74551f6db105ae6a2bba2dacf91e5dcc384111fb5014d432e6f82951d0ce5991609d6654502ef9ee34b57e8d971466c54176dd13de4afac8520d51ac7c14", 0x87}, {&(0x7f0000000300)="184866553f80fc7b5778", 0xa}, {&(0x7f0000000a40)="134f04935c0bb6b3125fcaeaad07413b34f26e8ae834f29fe91f659871d6776b328f1dd8990a4745c426517669e1725e1eb7979a854ada6da00301244e48a6a3fc3c5edba971aba6ef9d7c4dde9f70d12be5df6f8c4690a4da77e5b463eecfac7b36237819a736fed32c729874a1ca658e08916b4f87992d0fad90d49dbe8314bd52ca2bf820223bfb825cd277330f7a8255b7471aceb6f5a169de47924477374ed3d246", 0xa4}, {&(0x7f0000000940)="fe0cefd07d48c4295cec8de23ea8bfc17f7f2f838be40584f6c96e957f2a218c112afd27d43a83b9b1bc7eb63f0e230cc43fb9f7", 0x34}, {&(0x7f0000000c40)="b8a2e6a91c2c4fffd4b2e86301adc30d6ad6ef812294b03c2ac12c280dadc09fc9836117e9cc8d66f829bc0e7ef004fe435c0dd8aaaea8b6d5cd41b7f39c26d26424a76d056605230e09184a16214ca5164f07cd69b65b2b1449b67f09ae68bb73f966c9ccd69d88a32c488763cc5404980d4dd22b98bc5e2a00f3020eb5936cc35a2f11003407d6e8515e79e71ab77736ac3bc8a50a0c15e6482efa944478536b270ad38a3e9e39ebd72ef6b7363b51b61d5980994fe09af1fd22d799bfa5e10a1dca390d", 0xc5}], 0x6, &(0x7f0000000dc0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x51}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 1.192356891s ago: executing program 2 (id=3429): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88c00, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000d00)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x1, 0x0, 0x0, 0x1000, 0x9b}) 868.96442ms ago: executing program 2 (id=3430): socket$inet(0x2, 0x4000000000000001, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8401) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="0303000000000000000011000600080003006af35a84b963c8905ced0eb5f6e6a9d036dd2a8ddaae930ba7ca", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, 0x0}, 0x24040084) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WOWLAN(r2, 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) process_mrelease(0xffffffffffffffff, 0x0) request_key(&(0x7f00000011c0)='big_key\x00', &(0x7f0000001200)={'syz', 0x1}, &(0x7f0000001240)='\x00', 0x0) add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980)="475a251bdb1e4c438649cdf2", 0xc, 0xfffffffffffffffb) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 631.692253ms ago: executing program 5 (id=3431): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x4e24, @multicast2}}}, 0x88) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 554.498098ms ago: executing program 2 (id=3432): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x3, r1, 0x0, &(0x7f0000000000/0x800000)=nil, 0x800000, 0x1004000}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 527.83598ms ago: executing program 5 (id=3433): munmap(&(0x7f0000cb1000/0x2000)=nil, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f000002eff0)={0x20d, &(0x7f0000000000)=[{0x4, 0xd, 0x8, 0x7fff}, {0x9000, 0x2, 0x12, 0x8}]}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) sched_setscheduler(0x0, 0x1, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r6, &(0x7f0000000100)=ANY=[], 0xfce1) ioctl$TCFLSH(r5, 0x540b, 0x2) r7 = socket$packet(0x11, 0x2, 0x300) recvfrom(r7, 0x0, 0x0, 0x2, 0x0, 0x0) write$tun(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="0800080000000000000014000000456f00b000660000401190780a010102ac14143c4e204e20009c9078010000000400000031150048d5e06bdc339f0b82e56e05e9a3f461bd8f01c60ff304e7fee8a3221bb54970b8807c69e8aba2815e90ed451c3c1a9dff75f0f264e44cbb999c8f292e5aa143fd63ea1886e0cd425df0d8e5e72bed86cd87cd326b66a3ca343e29e347dc61214ad793ad9f48b4d287b15c14be998215153aaf76bbf0aead9a5cd7bcd4dc8e1acb0a78f4793cfd119c238784cc0b9d8d5cf13b647865fb63f42ff6fd174406372c98ed8ae3005083c4a05940d15bac912e8dbd0585c2f91bcd99d4962f6b9d5f6477e5b0471d3ec5f2c1c1890ac406beb106f30d52f45bfcce5e7e6c03458181a85c9a65f800d0d2e06547611c74eb0d51214e48aba0cf3f8cc3d7afe8520b0aaaf5fa48b83fb143eda264474c1a37a24eb1828d6ce9fe9a882c28e1e41c827bdb909a"], 0xbe) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000001680)={0x48, 0x2, r8}) ioctl$IOMMU_VFIO_SET_IOMMU(r2, 0x3b66, 0x1) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r8, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x3000001, 0x11, r1, 0xf1711000) ioctl$IOMMU_IOAS_UNMAP$ALL(r2, 0x3b86, &(0x7f0000000040)={0x18, r8}) 30.297478ms ago: executing program 5 (id=3434): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r1, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000a00)={0x70, 0x7, r1, 0x0, 0xfffffffffffffffc, 0x1000}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, 0x0) 0s ago: executing program 4 (id=3435): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r2, 0x0, 0x0) connect$l2tp6(r2, 0x0, 0x0) r3 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c0000904000002070101000905010200"], 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r4, 0x0, 0x0, 0xfffff, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r5, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r5, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1, 0x1}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r6, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): vhci_hcd.0: pdev(5) rhport(0) sockfd(17) [ 648.184916][T14961] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 648.201133][T14961] vhci_hcd vhci_hcd.0: Device attached [ 648.203067][T14983] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 648.207539][T14966] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 648.254893][T14961] vhci_hcd vhci_hcd.0: pdev(5) rhport(7) sockfd(22) [ 648.261551][T14961] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 648.300254][T14966] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 648.330911][T14961] vhci_hcd vhci_hcd.0: Device attached [ 648.373712][T14942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 648.411927][T14979] vhci_hcd: connection closed [ 648.412138][T14974] vhci_hcd: connection closed [ 648.417300][T14962] vhci_hcd: connection reset by peer [ 648.430088][T14970] vhci_hcd: connection closed [ 648.438159][T14967] vhci_hcd: connection closed [ 648.444288][T14991] vhci_hcd: connection closed [ 648.448428][ T2932] vhci_hcd: stop threads [ 648.450139][T14981] vhci_hcd: connection closed [ 648.463517][ T2932] vhci_hcd: release socket [ 648.487055][T14942] 8021q: adding VLAN 0 to HW filter on device team0 [ 648.509016][ T2932] vhci_hcd: disconnect device [ 648.522636][ T2932] vhci_hcd: stop threads [ 648.540056][ T2993] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.545489][ T2932] vhci_hcd: release socket [ 648.547241][ T2993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 648.571500][ T2932] vhci_hcd: disconnect device [ 648.586916][ T2932] vhci_hcd: stop threads [ 648.591216][ T2932] vhci_hcd: release socket [ 648.612628][ T5783] Bluetooth: hci0: command tx timeout [ 648.615537][ T2932] vhci_hcd: disconnect device [ 648.646599][ T1311] bridge0: port 2(bridge_slave_1) entered blocking state [ 648.653792][ T1311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 648.682536][ T2932] vhci_hcd: stop threads [ 648.686860][ T2932] vhci_hcd: release socket [ 648.701588][ T2932] vhci_hcd: disconnect device [ 648.721824][ T2932] vhci_hcd: stop threads [ 648.726102][ T2932] vhci_hcd: release socket [ 648.755199][ T2932] vhci_hcd: disconnect device [ 648.782348][ T2932] vhci_hcd: stop threads [ 648.786827][ T2932] vhci_hcd: release socket [ 648.802385][ T2932] vhci_hcd: disconnect device [ 648.827700][ T2932] vhci_hcd: stop threads [ 648.837916][ T2932] vhci_hcd: release socket [ 648.845391][ T2932] vhci_hcd: disconnect device [ 649.152802][T15004] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2513'. [ 649.198046][T15004] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2513'. [ 649.288592][T15007] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2513'. [ 649.340628][T15007] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2513'. [ 649.405317][T14942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 649.565968][T14942] veth0_vlan: entered promiscuous mode [ 649.592277][T14942] veth1_vlan: entered promiscuous mode [ 649.641319][T14942] veth0_macvtap: entered promiscuous mode [ 649.738689][T14942] veth1_macvtap: entered promiscuous mode [ 649.786188][T14942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 649.821258][T14942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.831398][T14942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 649.842692][T14942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 649.863971][T14942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 649.942497][T14942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 650.065634][T14942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 650.125593][T14942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 650.136710][T14942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 650.156415][T14942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 650.205698][T14942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 650.235564][T14942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 650.273749][T14942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 650.292215][ T968] vhci_hcd: vhci_device speed not set [ 650.350780][T14942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 650.387986][T14942] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.431763][T14942] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.451961][T14942] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.485111][T14942] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 650.692061][ T5783] Bluetooth: hci0: command tx timeout [ 650.871424][ T130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 650.891828][ T130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 650.954154][ T2961] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 650.976349][ T2961] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 651.520578][T15033] futex_wake_op: syz.4.2516 tries to shift op by 32; fix this program [ 651.539179][T15033] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2516'. [ 651.566949][T15033] xt_nfacct: accounting object `syz1' does not exist [ 651.643884][ T5839] usb usb40-port1: attempt power cycle [ 651.791968][ T5826] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 651.952037][ T5826] usb 6-1: device descriptor read/64, error -71 [ 652.241919][ T5826] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 652.303143][ T5839] usb usb40-port1: unable to enumerate USB device [ 652.422056][ T5826] usb 6-1: device descriptor read/64, error -71 [ 652.469852][T15037] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 652.476406][T15037] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 652.519949][T15037] vhci_hcd vhci_hcd.0: Device attached [ 652.535492][T15040] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(12) [ 652.542122][T15040] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 652.572134][ T5826] usb usb6-port1: attempt power cycle [ 652.606440][T15040] vhci_hcd vhci_hcd.0: Device attached [ 652.616576][T15037] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(11) [ 652.623236][T15037] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 652.631208][T15046] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2522'. [ 652.635255][T15037] vhci_hcd vhci_hcd.0: Device attached [ 652.666430][T15037] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(14) [ 652.673086][T15037] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 652.701665][T15037] vhci_hcd vhci_hcd.0: Device attached [ 652.712968][T15037] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(17) [ 652.719623][T15037] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 652.738137][T15037] vhci_hcd vhci_hcd.0: Device attached [ 652.759352][T15037] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(19) [ 652.766021][T15037] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 652.775240][ T5783] Bluetooth: hci0: command tx timeout [ 652.783393][T15037] vhci_hcd vhci_hcd.0: Device attached [ 652.792098][ T5839] usb 37-1: new low-speed USB device number 5 using vhci_hcd [ 652.825068][T15037] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 652.837871][T15052] kvm: pic: non byte write [ 652.849386][T15037] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 652.868974][T15037] vhci_hcd vhci_hcd.0: pdev(2) rhport(7) sockfd(25) [ 652.875604][T15037] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 652.910681][T15037] vhci_hcd vhci_hcd.0: Device attached [ 652.926931][T15037] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 652.957889][T15060] vhci_hcd: connection closed [ 652.958320][ T2961] vhci_hcd: stop threads [ 652.959008][T15057] vhci_hcd: connection closed [ 652.964658][ T2961] vhci_hcd: release socket [ 652.967808][T15043] vhci_hcd: connection closed [ 652.972610][T15053] vhci_hcd: connection closed [ 652.983806][T15049] vhci_hcd: connection closed [ 653.001486][ T2961] vhci_hcd: disconnect device [ 653.007804][T15038] vhci_hcd: connection reset by peer [ 653.011282][ T5826] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 653.016737][T15041] vhci_hcd: connection closed [ 653.042904][ T2961] vhci_hcd: stop threads [ 653.080783][ T2961] vhci_hcd: release socket [ 653.089851][ T2961] vhci_hcd: disconnect device [ 653.093830][ T5826] usb 6-1: device descriptor read/8, error -71 [ 653.116714][ T2961] vhci_hcd: stop threads [ 653.129511][ T2961] vhci_hcd: release socket [ 653.148594][ T2961] vhci_hcd: disconnect device [ 653.159139][ T2961] vhci_hcd: stop threads [ 653.169370][ T2961] vhci_hcd: release socket [ 653.181104][ T2961] vhci_hcd: disconnect device [ 653.196942][ T2961] vhci_hcd: stop threads [ 653.207530][ T2961] vhci_hcd: release socket [ 653.221670][ T2961] vhci_hcd: disconnect device [ 653.233792][ T2961] vhci_hcd: stop threads [ 653.248008][ T2961] vhci_hcd: release socket [ 653.252907][ T8938] vhci_hcd: vhci_device speed not set [ 653.269379][ T2961] vhci_hcd: disconnect device [ 653.280726][ T2961] vhci_hcd: stop threads [ 653.288156][ T2961] vhci_hcd: release socket [ 653.305394][ T2961] vhci_hcd: disconnect device [ 653.371983][ T5826] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 653.422483][ T5826] usb 6-1: device descriptor read/8, error -71 [ 653.583833][ T5826] usb usb6-port1: unable to enumerate USB device [ 653.701938][ T7292] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 653.923427][ T7292] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 653.941862][ T7292] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 653.959579][ T7292] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 653.981795][ T7292] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.005156][ T7292] usb 4-1: config 0 descriptor?? [ 654.424679][ T7292] cp2112 0003:10C4:EA90.0027: unknown main item tag 0x0 [ 654.445686][ T7292] cp2112 0003:10C4:EA90.0027: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 654.592823][ T8] usb usb44-port1: attempt power cycle [ 654.623287][ T7292] cp2112 0003:10C4:EA90.0027: Part Number: 0x1A Device Version: 0xC4 [ 654.801636][T15091] futex_wake_op: syz.2.2530 tries to shift op by 32; fix this program [ 654.829712][T15091] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2530'. [ 654.856694][T12432] Bluetooth: hci0: command tx timeout [ 654.929805][T15092] xt_nfacct: accounting object `syz1' does not exist [ 655.227742][ T7292] cp2112 0003:10C4:EA90.0027: error reading lock byte: -71 [ 655.235879][T15090] sctp: [Deprecated]: syz.5.2532 (pid 15090) Use of int in maxseg socket option. [ 655.235879][T15090] Use struct sctp_assoc_value instead [ 655.252899][ T8] usb usb44-port1: unable to enumerate USB device [ 655.275049][ T7292] usb 4-1: USB disconnect, device number 37 [ 655.952677][T15099] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2534'. [ 655.999930][T15099] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 656.008933][T15099] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 656.017929][T15099] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 656.027390][T15099] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 656.044281][T15099] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2534'. [ 657.335537][ T5826] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 657.561909][ T5826] usb 6-1: device descriptor read/64, error -71 [ 657.862222][ T5826] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 657.892714][ T5839] vhci_hcd: vhci_device speed not set [ 658.052564][ T5826] usb 6-1: device descriptor read/64, error -71 [ 658.175367][ T5826] usb usb6-port1: attempt power cycle [ 658.257263][T15131] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 658.262374][T15124] sctp: [Deprecated]: syz.3.2541 (pid 15124) Use of int in maxseg socket option. [ 658.262374][T15124] Use struct sctp_assoc_value instead [ 658.263807][T15131] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 658.289564][T15131] vhci_hcd vhci_hcd.0: Device attached [ 658.305948][T15131] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(11) [ 658.312599][T15131] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 658.322330][T15131] vhci_hcd vhci_hcd.0: Device attached [ 658.335473][T15131] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(13) [ 658.342098][T15131] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 658.350052][T15131] vhci_hcd vhci_hcd.0: Device attached [ 658.355678][ T8] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 658.370570][T15131] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(15) [ 658.377214][T15131] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 658.386709][T15131] vhci_hcd vhci_hcd.0: Device attached [ 658.412349][T15131] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(17) [ 658.419093][T15131] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 658.435622][T15131] vhci_hcd vhci_hcd.0: Device attached [ 658.447024][T15131] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(19) [ 658.453668][T15131] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 658.466924][T15131] vhci_hcd vhci_hcd.0: Device attached [ 658.476090][T15131] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 658.491068][T15131] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 658.507893][T15131] vhci_hcd vhci_hcd.0: pdev(2) rhport(7) sockfd(25) [ 658.514539][T15131] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 658.523005][T15131] vhci_hcd vhci_hcd.0: Device attached [ 658.529946][T15131] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 658.542696][T15148] vhci_hcd: connection closed [ 658.543596][T15143] vhci_hcd: connection closed [ 658.547760][ T6649] vhci_hcd: stop threads [ 658.549479][T15137] vhci_hcd: connection closed [ 658.553153][T15141] vhci_hcd: connection closed [ 658.557797][T15132] vhci_hcd: connection closed [ 658.562363][T15135] vhci_hcd: connection closed [ 658.567124][T15139] vhci_hcd: connection closed [ 658.580101][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 658.583165][ T6649] vhci_hcd: release socket [ 658.591898][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 658.604670][ T6649] vhci_hcd: disconnect device [ 658.619964][ T6649] vhci_hcd: stop threads [ 658.620167][ T8] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 658.629418][ T6649] vhci_hcd: release socket [ 658.633681][ T5826] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 658.644154][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.662872][ T5826] usb 6-1: device descriptor read/8, error -71 [ 658.683057][ T8] usb 5-1: config 0 descriptor?? [ 658.701122][ T6649] vhci_hcd: disconnect device [ 658.717051][ T6649] vhci_hcd: stop threads [ 658.721951][ T5839] usb 37-1: device descriptor read/64, error -110 [ 658.732470][ T6649] vhci_hcd: release socket [ 658.757466][T15152] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (32017) [ 658.769425][ T6649] vhci_hcd: disconnect device [ 658.776340][ T6649] vhci_hcd: stop threads [ 658.780741][ T6649] vhci_hcd: release socket [ 658.785831][ T6649] vhci_hcd: disconnect device [ 658.792275][ T6649] vhci_hcd: stop threads [ 658.799666][ T6649] vhci_hcd: release socket [ 658.804742][ T6649] vhci_hcd: disconnect device [ 658.809795][ T6649] vhci_hcd: stop threads [ 658.815169][ T6649] vhci_hcd: release socket [ 658.820748][T15152] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 658.830890][ T6649] vhci_hcd: disconnect device [ 658.836606][ T6649] vhci_hcd: stop threads [ 658.841041][ T6649] vhci_hcd: release socket [ 658.846659][ T6649] vhci_hcd: disconnect device [ 658.952049][ T5826] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 659.002772][ T5826] usb 6-1: device descriptor read/8, error -71 [ 659.125981][ T8] cp2112 0003:10C4:EA90.0028: unknown main item tag 0x0 [ 659.141487][ T5826] usb usb6-port1: unable to enumerate USB device [ 659.183832][ T8] cp2112 0003:10C4:EA90.0028: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 659.311191][ T8] cp2112 0003:10C4:EA90.0028: Part Number: 0x1A Device Version: 0xC4 [ 659.455862][ T787] usb usb38-port1: attempt power cycle [ 659.532042][ T5839] vhci_hcd: vhci_device speed not set [ 659.915101][ T8] cp2112 0003:10C4:EA90.0028: error reading lock byte: -71 [ 659.973080][ T8] usb 5-1: USB disconnect, device number 39 [ 660.636806][T15172] kvm: pic: non byte write [ 660.892446][T15180] program syz.4.2553 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 660.963196][ T787] usb usb38-port1: unable to enumerate USB device [ 661.278822][T15180] syz.4.2553 (15180): drop_caches: 2 [ 661.523794][T15184] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 661.530332][T15184] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 661.546229][T15184] vhci_hcd vhci_hcd.0: Device attached [ 661.574873][T15184] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(11) [ 661.581506][T15184] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 661.631364][T15184] vhci_hcd vhci_hcd.0: Device attached [ 661.648626][T15189] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(14) [ 661.655256][T15189] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 661.691885][T15189] vhci_hcd vhci_hcd.0: Device attached [ 661.759949][T15184] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(13) [ 661.766575][T15184] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 661.803638][T15184] vhci_hcd vhci_hcd.0: Device attached [ 661.825381][ T5839] usb 39-1: new low-speed USB device number 6 using vhci_hcd [ 661.851819][T15189] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(16) [ 661.858468][T15189] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 661.880705][T15189] vhci_hcd vhci_hcd.0: Device attached [ 661.888506][T15197] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(18) [ 661.895109][T15197] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 661.938087][T15184] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 661.981925][T15197] vhci_hcd vhci_hcd.0: Device attached [ 661.982877][T15184] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 662.135183][T15182] sctp: [Deprecated]: syz.2.2554 (pid 15182) Use of int in maxseg socket option. [ 662.135183][T15182] Use struct sctp_assoc_value instead [ 662.167301][T15184] vhci_hcd vhci_hcd.0: pdev(3) rhport(7) sockfd(22) [ 662.173934][T15184] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 662.207293][T15184] vhci_hcd vhci_hcd.0: Device attached [ 662.224588][T15189] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 662.277370][T15198] vhci_hcd: connection closed [ 662.277604][T15203] vhci_hcd: connection closed [ 662.281895][ T2961] vhci_hcd: stop threads [ 662.282771][T15194] vhci_hcd: connection closed [ 662.287766][ T2961] vhci_hcd: release socket [ 662.321303][T15187] vhci_hcd: connection closed [ 662.321821][T15192] vhci_hcd: connection closed [ 662.326735][T15185] vhci_hcd: connection reset by peer [ 662.337089][T15190] vhci_hcd: connection closed [ 662.347250][ T2961] vhci_hcd: disconnect device [ 662.398532][ T2961] vhci_hcd: stop threads [ 662.403216][ T2961] vhci_hcd: release socket [ 662.410568][ T2961] vhci_hcd: disconnect device [ 662.422050][ T2961] vhci_hcd: stop threads [ 662.426331][ T2961] vhci_hcd: release socket [ 662.471593][ T2961] vhci_hcd: disconnect device [ 662.494812][ T2961] vhci_hcd: stop threads [ 662.499111][ T2961] vhci_hcd: release socket [ 662.513543][ T2961] vhci_hcd: disconnect device [ 662.527387][ T2961] vhci_hcd: stop threads [ 662.551464][ T2961] vhci_hcd: release socket [ 662.558973][ T2961] vhci_hcd: disconnect device [ 662.566914][ T2961] vhci_hcd: stop threads [ 662.571583][ T2961] vhci_hcd: release socket [ 662.580923][ T2961] vhci_hcd: disconnect device [ 662.586991][ T2961] vhci_hcd: stop threads [ 662.591473][ T2961] vhci_hcd: release socket [ 662.601618][ T2961] vhci_hcd: disconnect device [ 662.832397][ T8] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 663.023986][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 663.041292][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 663.056331][ T8] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 663.065913][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.079232][ T8] usb 6-1: config 0 descriptor?? [ 663.508840][ T8] cp2112 0003:10C4:EA90.0029: unknown main item tag 0x0 [ 663.555106][ T8] cp2112 0003:10C4:EA90.0029: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 663.706648][ T8] cp2112 0003:10C4:EA90.0029: Part Number: 0x1A Device Version: 0xC4 [ 664.330533][ T8] cp2112 0003:10C4:EA90.0029: error reading lock byte: -71 [ 664.385434][ T8] usb 6-1: USB disconnect, device number 30 [ 664.682980][T15239] sctp: [Deprecated]: syz.3.2567 (pid 15239) Use of int in maxseg socket option. [ 664.682980][T15239] Use struct sctp_assoc_value instead [ 665.010068][T15250] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(9) [ 665.016675][T15250] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 665.026625][T15250] vhci_hcd vhci_hcd.0: Device attached [ 665.052665][T15250] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(11) [ 665.059404][T15250] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 665.072229][T15250] vhci_hcd vhci_hcd.0: Device attached [ 665.084326][T15250] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(13) [ 665.090976][T15250] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 665.099923][T15250] vhci_hcd vhci_hcd.0: Device attached [ 665.114293][T15250] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(15) [ 665.120946][T15250] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 665.128663][T15250] vhci_hcd vhci_hcd.0: Device attached [ 665.142355][T15250] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(17) [ 665.149020][T15250] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 665.157081][T15250] vhci_hcd vhci_hcd.0: Device attached [ 665.178489][T15250] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(19) [ 665.185199][T15250] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 665.201832][T15250] vhci_hcd vhci_hcd.0: Device attached [ 665.210044][T15250] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 665.219975][T15250] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 665.230548][T15250] vhci_hcd vhci_hcd.0: pdev(5) rhport(7) sockfd(25) [ 665.237178][T15250] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 665.247214][T15250] vhci_hcd vhci_hcd.0: Device attached [ 665.263775][T15250] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 665.292249][ T23] usb 43-1: new low-speed USB device number 5 using vhci_hcd [ 665.305691][T15265] vhci_hcd: connection closed [ 665.307283][T15255] vhci_hcd: connection closed [ 665.307752][T15261] vhci_hcd: connection closed [ 665.317047][T15252] vhci_hcd: connection closed [ 665.321981][ T2932] vhci_hcd: stop threads [ 665.322039][ T2932] vhci_hcd: release socket [ 665.326780][T15259] vhci_hcd: connection closed [ 665.335769][T15263] vhci_hcd: connection closed [ 665.337442][ T2932] vhci_hcd: disconnect device [ 665.340525][T15269] vhci_hcd: connection closed [ 665.353574][T15253] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 665.380250][ T2932] vhci_hcd: stop threads [ 665.394471][ T2932] vhci_hcd: release socket [ 665.399001][ T2932] vhci_hcd: disconnect device [ 665.408755][ T2932] vhci_hcd: stop threads [ 665.413422][ T2932] vhci_hcd: release socket [ 665.420690][ T2932] vhci_hcd: disconnect device [ 665.442969][ T2932] vhci_hcd: stop threads [ 665.457033][ T2932] vhci_hcd: release socket [ 665.469074][ T2932] vhci_hcd: disconnect device [ 665.480151][ T2932] vhci_hcd: stop threads [ 665.485789][ T2932] vhci_hcd: release socket [ 665.490307][ T2932] vhci_hcd: disconnect device [ 665.520151][ T2932] vhci_hcd: stop threads [ 665.525494][ T2932] vhci_hcd: release socket [ 665.530002][ T2932] vhci_hcd: disconnect device [ 665.547233][ T2932] vhci_hcd: stop threads [ 665.558924][ T2932] vhci_hcd: release socket [ 665.563583][ T2932] vhci_hcd: disconnect device [ 665.921204][T15285] sctp: [Deprecated]: syz.2.2578 (pid 15285) Use of int in maxseg socket option. [ 665.921204][T15285] Use struct sctp_assoc_value instead [ 666.399780][T15291] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (46265) [ 666.418454][T15291] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 666.505893][ T5826] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 666.709223][ T5826] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 666.722497][ T5826] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 666.732903][ T5826] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 666.742151][ T5826] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.753292][ T5826] usb 3-1: config 0 descriptor?? [ 666.934267][ T5839] vhci_hcd: vhci_device speed not set [ 667.170010][ T5826] cp2112 0003:10C4:EA90.002A: unknown main item tag 0x0 [ 667.197822][ T5826] cp2112 0003:10C4:EA90.002A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 667.369933][ T5826] cp2112 0003:10C4:EA90.002A: Part Number: 0x1A Device Version: 0xC4 [ 667.987095][ T5826] cp2112 0003:10C4:EA90.002A: error reading lock byte: -71 [ 668.065645][ T5826] usb 3-1: USB disconnect, device number 43 [ 668.322859][ T8938] usb usb40-port1: attempt power cycle [ 668.613149][ T5783] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 668.623081][ T5783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 668.632150][ T5783] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 668.640002][ T5783] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 668.648435][ T5783] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 668.656625][ T5783] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 668.992779][ T8938] usb usb40-port1: unable to enumerate USB device [ 669.223496][T15315] chnl_net:caif_netlink_parms(): no params data found [ 669.311935][ T8938] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 669.406661][T15315] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.414195][T15315] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.421430][T15315] bridge_slave_0: entered allmulticast mode [ 669.428772][T15315] bridge_slave_0: entered promiscuous mode [ 669.438134][T15315] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.446401][T15315] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.453695][T15315] bridge_slave_1: entered allmulticast mode [ 669.461137][T15315] bridge_slave_1: entered promiscuous mode [ 669.495457][T15315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 669.508628][T15315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 669.511864][ T8938] usb 3-1: Using ep0 maxpacket: 8 [ 669.549011][T15315] team0: Port device team_slave_0 added [ 669.559995][T15315] team0: Port device team_slave_1 added [ 669.560843][ T8938] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 669.596221][ T8938] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 669.609888][T15315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 669.617692][T15315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 669.651821][ T8938] usb 3-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 669.661957][T15315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 669.669186][ T8938] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.684516][ T8938] usb 3-1: config 0 descriptor?? [ 669.684988][T15315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 669.702825][T15325] sctp: [Deprecated]: syz.5.2588 (pid 15325) Use of int in maxseg socket option. [ 669.702825][T15325] Use struct sctp_assoc_value instead [ 669.720650][T15315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 669.739218][ T8938] hso 3-1:0.0: Can't find BULK IN endpoint [ 669.751559][T15315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 669.883979][T15315] hsr_slave_0: entered promiscuous mode [ 669.906262][T15315] hsr_slave_1: entered promiscuous mode [ 669.926993][T15315] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 669.941920][T15315] Cannot create hsr debugfs directory [ 670.241527][T15315] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 670.269887][T15315] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.425848][T15315] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 670.447918][T15315] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.462099][ T23] vhci_hcd: vhci_device speed not set [ 670.549172][T15315] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 670.567547][T15315] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.688866][T15315] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 670.709535][T12432] Bluetooth: hci2: command tx timeout [ 670.729266][T15315] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.058313][T15315] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 671.075592][T15315] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 671.092761][T15315] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 671.106839][T15315] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 671.325069][T15315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 671.379771][T15315] 8021q: adding VLAN 0 to HW filter on device team0 [ 671.393973][ T2932] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.401164][ T2932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 671.434597][ T1311] bridge0: port 2(bridge_slave_1) entered blocking state [ 671.441820][ T1311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 671.777276][ T8938] usb 3-1: USB disconnect, device number 44 [ 672.020864][T15315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 672.508450][ T787] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 672.530291][T15315] veth0_vlan: entered promiscuous mode [ 672.552492][T15315] veth1_vlan: entered promiscuous mode [ 672.598743][T15366] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (33141) [ 672.608922][T15366] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 672.667509][T15315] veth0_macvtap: entered promiscuous mode [ 672.705565][T15315] veth1_macvtap: entered promiscuous mode [ 672.723678][ T787] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 672.741960][ T787] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 672.771968][T12432] Bluetooth: hci2: command tx timeout [ 672.811964][ T787] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 672.822276][ T787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.832822][T15315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 672.852577][ T787] usb 4-1: config 0 descriptor?? [ 672.865789][T15315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.921370][T15315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 672.949326][T15315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 672.980452][T15315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 673.002304][T15315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.060854][T15315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 673.068489][T15373] sctp: [Deprecated]: syz.5.2596 (pid 15373) Use of int in maxseg socket option. [ 673.068489][T15373] Use struct sctp_assoc_value instead [ 673.091910][T15315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.114719][T15315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 673.161250][T15315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.220502][T15315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.231913][T15315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.299955][ T787] cp2112 0003:10C4:EA90.002B: unknown main item tag 0x0 [ 673.300197][T15315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.327625][ T787] cp2112 0003:10C4:EA90.002B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 673.360358][T15315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.402354][T15315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.439542][T15315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.459143][T15315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.508337][ T787] cp2112 0003:10C4:EA90.002B: Part Number: 0x1A Device Version: 0xC4 [ 673.509805][T15315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 673.590342][T15315] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.601742][T15315] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.612880][T15315] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.628421][T15315] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.835746][ T1311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 673.864102][ T1311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 673.941221][ T2882] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 673.977091][ T2882] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 674.142147][ T787] cp2112 0003:10C4:EA90.002B: error reading lock byte: -71 [ 674.191313][ T787] usb 4-1: USB disconnect, device number 38 [ 674.852123][T12432] Bluetooth: hci2: command tx timeout [ 674.974173][T15402] binder: BINDER_SET_CONTEXT_MGR already set [ 675.014881][T15402] binder: 15401:15402 ioctl 4018620d 200000004a80 returned -16 [ 676.143872][T15407] sctp: [Deprecated]: syz.5.2604 (pid 15407) Use of int in maxseg socket option. [ 676.143872][T15407] Use struct sctp_assoc_value instead [ 676.932248][T12432] Bluetooth: hci2: command tx timeout [ 677.509215][T15411] syz.3.2605 (15411): drop_caches: 2 [ 677.960891][T15434] tipc: Started in network mode [ 677.967418][T15434] tipc: Node identity ac14140f, cluster identity 4711 [ 677.992240][T15434] tipc: New replicast peer: 255.255.255.255 [ 677.999448][T15434] tipc: Enabled bearer , priority 10 [ 678.021531][T15434] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2613'. [ 678.053014][T15434] tipc: Disabling bearer [ 679.767611][T15446] sctp: [Deprecated]: syz.2.2616 (pid 15446) Use of int in maxseg socket option. [ 679.767611][T15446] Use struct sctp_assoc_value instead [ 680.152448][T15462] kvm: pic: non byte write [ 680.683867][T15475] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2623'. [ 681.516616][T15486] sctp: [Deprecated]: syz.5.2627 (pid 15486) Use of int in maxseg socket option. [ 681.516616][T15486] Use struct sctp_assoc_value instead [ 682.701808][ T5839] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 683.018041][ T5839] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 683.147623][ T5839] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 683.392409][ T5839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 683.473108][ T5839] usb 5-1: Product: syz [ 683.481126][ T5839] usb 5-1: Manufacturer: syz [ 683.492809][ T5839] usb 5-1: SerialNumber: syz [ 683.737596][ T5839] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 40 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 683.885556][T15528] random: crng reseeded on system resumption [ 685.261860][ T8] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 685.452001][ T8] usb 6-1: Using ep0 maxpacket: 8 [ 685.463832][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 685.486022][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 685.510990][ T8] usb 6-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 685.550098][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.581442][ T8] usb 6-1: config 0 descriptor?? [ 685.602439][ T8] hso 6-1:0.0: Can't find BULK IN endpoint [ 685.679298][ T23] usb 5-1: USB disconnect, device number 40 [ 685.688433][ T23] usblp0: removed [ 686.058689][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.065088][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.443176][T15574] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2650'. [ 687.762256][ T23] usb 6-1: USB disconnect, device number 31 [ 687.939077][T15588] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 688.362499][ T787] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 688.591886][ T787] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 688.648217][ T787] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 688.662691][ T787] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 688.670782][ T787] usb 6-1: Product: syz [ 688.682214][ T787] usb 6-1: Manufacturer: syz [ 688.700132][ T787] usb 6-1: SerialNumber: syz [ 688.974779][ T787] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 32 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 690.453059][T15619] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2661'. [ 690.994301][ T9] usb 6-1: USB disconnect, device number 32 [ 691.024103][ T9] usblp0: removed [ 692.193500][T15637] sctp: [Deprecated]: syz.3.2666 (pid 15637) Use of int in maxseg socket option. [ 692.193500][T15637] Use struct sctp_assoc_value instead [ 692.504565][T15649] tipc: New replicast peer: 255.255.255.255 [ 692.572120][T15649] tipc: Enabled bearer , priority 10 [ 692.578414][T15651] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2670'. [ 692.608742][T15651] tipc: Disabling bearer [ 692.989682][T15658] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (19312) [ 693.015718][T15658] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 694.862010][ T8] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 695.084243][ T8] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 695.123505][T15676] random: crng reseeded on system resumption [ 695.242221][ T8] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 695.272043][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 695.288370][ T8] usb 4-1: Product: syz [ 695.293412][ T8] usb 4-1: Manufacturer: syz [ 695.298029][ T8] usb 4-1: SerialNumber: syz [ 695.631038][ T8] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 39 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 697.397964][ T5783] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 697.411855][ T5783] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 697.427757][ T5783] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 697.442741][ T5783] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 697.451192][ T5783] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 697.460136][ T5783] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 697.492526][ T9] usb 4-1: USB disconnect, device number 39 [ 697.576214][ T9] usblp0: removed [ 698.112794][ T2932] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 698.474030][ T2932] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 698.536662][T15686] chnl_net:caif_netlink_parms(): no params data found [ 698.666537][ T2932] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 698.686487][T15693] sctp: [Deprecated]: syz.4.2680 (pid 15693) Use of int in maxseg socket option. [ 698.686487][T15693] Use struct sctp_assoc_value instead [ 698.787647][ T2932] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 698.846867][T15686] bridge0: port 1(bridge_slave_0) entered blocking state [ 698.860488][T15686] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.868394][T15686] bridge_slave_0: entered allmulticast mode [ 698.876217][T15686] bridge_slave_0: entered promiscuous mode [ 698.910202][T15686] bridge0: port 2(bridge_slave_1) entered blocking state [ 698.936551][T15686] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.952607][T15686] bridge_slave_1: entered allmulticast mode [ 698.959863][T15686] bridge_slave_1: entered promiscuous mode [ 699.153400][T15686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 699.175425][T15686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 699.207290][T15686] team0: Port device team_slave_0 added [ 699.215001][T15686] team0: Port device team_slave_1 added [ 699.235135][T15686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 699.246550][T15686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 699.279850][T15686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 699.419979][T15686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 699.430394][T15686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 699.458036][T15686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 699.494235][T12432] Bluetooth: hci3: command tx timeout [ 699.704264][ T2932] tipc: Left network mode [ 699.751982][T15715] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2685'. [ 699.823937][T15686] hsr_slave_0: entered promiscuous mode [ 699.872408][T15686] hsr_slave_1: entered promiscuous mode [ 699.893840][T15686] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 699.913262][T15686] Cannot create hsr debugfs directory [ 701.572146][T12432] Bluetooth: hci3: command tx timeout [ 702.540757][ T2932] hsr_slave_0: left promiscuous mode [ 702.615118][ T2932] hsr_slave_1: left promiscuous mode [ 702.751364][ T2932] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 702.782676][ T2932] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 702.874476][ T2932] bond2 (unregistering): Released all slaves [ 702.942792][ T2932] bond1 (unregistering): Released all slaves [ 703.009393][ T2932] bond0 (unregistering): Released all slaves [ 703.193061][T15756] sctp: [Deprecated]: syz.4.2690 (pid 15756) Use of int in maxseg socket option. [ 703.193061][T15756] Use struct sctp_assoc_value instead [ 703.652186][T12432] Bluetooth: hci3: command tx timeout [ 703.752078][ T5839] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 703.974165][ T5839] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 703.984610][ T5839] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.012877][ T5839] usb 5-1: config 0 descriptor?? [ 704.040800][ T5839] cp210x 5-1:0.0: cp210x converter detected [ 704.394121][ T23] IPVS: starting estimator thread 0... [ 704.460863][ T2932] team0 (unregistering): Port device team_slave_1 removed [ 704.503334][T15779] IPVS: using max 20 ests per chain, 48000 per kthread [ 704.650466][ T2932] team0 (unregistering): Port device team_slave_0 removed [ 705.734067][T12432] Bluetooth: hci3: command tx timeout [ 706.277882][T15769] tipc: New replicast peer: 255.255.255.255 [ 706.292349][T15769] tipc: Enabled bearer , priority 10 [ 706.384723][T15772] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2692'. [ 706.413750][T15772] tipc: Disabling bearer [ 706.455213][T15686] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 706.523386][T15686] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 706.607948][T15686] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 706.650484][T15686] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 707.053344][T15686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 707.157646][T15686] 8021q: adding VLAN 0 to HW filter on device team0 [ 707.186530][ T6649] bridge0: port 1(bridge_slave_0) entered blocking state [ 707.193788][ T6649] bridge0: port 1(bridge_slave_0) entered forwarding state [ 707.256389][ T5839] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 707.284105][ T130] bridge0: port 2(bridge_slave_1) entered blocking state [ 707.291356][ T130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 707.291771][ T5839] cp210x 5-1:0.0: querying part number failed [ 707.302586][T15805] random: crng reseeded on system resumption [ 707.357662][T15808] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2699'. [ 707.485030][ T5839] usb 5-1: cp210x converter now attached to ttyUSB0 [ 707.542417][ T5839] usb 5-1: USB disconnect, device number 41 [ 707.584128][ T5839] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 707.702434][ T5839] cp210x 5-1:0.0: device disconnected [ 708.159134][T15831] netlink: 'syz.3.2701': attribute type 10 has an invalid length. [ 708.220218][T15831] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2701'. [ 708.278681][T15831] team0: entered promiscuous mode [ 708.290507][T15831] team_slave_0: entered promiscuous mode [ 708.346390][T15831] team_slave_1: entered promiscuous mode [ 708.361902][T15831] bridge0: port 3(team0) entered blocking state [ 708.389270][T15831] bridge0: port 3(team0) entered disabled state [ 708.405289][T15831] team0: entered allmulticast mode [ 708.410525][T15831] team_slave_0: entered allmulticast mode [ 708.420348][T15831] team_slave_1: entered allmulticast mode [ 708.440446][T15831] bridge0: port 3(team0) entered blocking state [ 708.446867][T15831] bridge0: port 3(team0) entered forwarding state [ 708.615689][T15686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 709.307720][T15686] veth0_vlan: entered promiscuous mode [ 709.337769][T15686] veth1_vlan: entered promiscuous mode [ 709.395913][T15686] veth0_macvtap: entered promiscuous mode [ 709.407088][T15686] veth1_macvtap: entered promiscuous mode [ 709.455334][T15686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 709.475435][T15686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 709.489298][T15686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 709.508102][T15686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 709.551877][T15686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 709.567251][T15686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 709.578736][T15686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 709.602276][T15686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 709.615538][T15686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 709.685132][T15686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 709.740439][T15686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 709.757804][T15686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 709.787597][T15686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 709.835402][T15686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 709.851249][T15686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 709.865313][T15686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 709.879025][T15686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 709.905783][T15686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 709.919475][T15686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 709.936467][T15686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 709.950777][T15686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 710.050715][T15686] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 710.171187][T15851] netlink: 'syz.3.2702': attribute type 12 has an invalid length. [ 710.181154][T15686] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.190243][T15686] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.216849][T15686] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.230633][T15686] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.390486][ T2922] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 710.436660][ T2922] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 710.539845][ T2932] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 710.551197][ T2932] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 710.695370][T15866] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2679'. [ 711.142379][ T8] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 711.344566][ T8] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 711.384462][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.403146][ T8] usb 4-1: config 0 descriptor?? [ 711.414267][ T8] cp210x 4-1:0.0: cp210x converter detected [ 711.562300][T15881] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2711'. [ 711.763842][ T5839] IPVS: starting estimator thread 0... [ 711.883253][T15887] IPVS: using max 23 ests per chain, 55200 per kthread [ 712.289775][T15895] binder: 15892:15895 ioctl c0306201 0 returned -14 [ 713.389176][T15903] netlink: 'syz.5.2719': attribute type 3 has an invalid length. [ 713.547062][T15912] futex_wake_op: syz.5.2719 tries to shift op by 32; fix this program [ 713.560909][T15912] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2719'. [ 713.604826][T15912] xt_nfacct: accounting object `syz1' does not exist [ 714.071839][ T787] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 714.351793][ T787] usb 5-1: Using ep0 maxpacket: 8 [ 714.381409][ T787] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 714.504485][ T787] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 714.540312][ T787] usb 5-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 714.581795][ T787] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 714.672785][ T787] usb 5-1: config 0 descriptor?? [ 714.701190][ T787] hso 5-1:0.0: Can't find BULK IN endpoint [ 714.860139][ T8] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 714.910654][ T8] cp210x 4-1:0.0: querying part number failed [ 714.973010][ T8] usb 4-1: cp210x converter now attached to ttyUSB0 [ 715.014159][T15917] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2721'. [ 715.024150][ T8] usb 4-1: USB disconnect, device number 40 [ 715.075366][ T8] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 715.107799][ T8] cp210x 4-1:0.0: device disconnected [ 715.482507][T15925] binder: 15924:15925 ioctl c0306201 0 returned -14 [ 715.615016][T15927] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2727'. [ 715.643313][T15927] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2727'. [ 715.735841][T15930] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2727'. [ 715.759455][T15930] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2727'. [ 716.460919][ T8] usb 5-1: USB disconnect, device number 42 [ 716.854465][T15945] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2732'. [ 717.174051][T15953] binder: 15952:15953 ioctl c0306201 0 returned -14 [ 717.519377][T15962] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2738'. [ 717.533990][T15962] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2738'. [ 717.609424][T15964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2738'. [ 717.619518][T15964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2738'. [ 717.778691][T15965] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 718.478741][T15974] kvm: pic: non byte write [ 718.530490][T15978] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2743'. [ 719.019366][T15984] kvm: pic: non byte write [ 719.992221][ T7292] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 720.002422][T16004] tipc: New replicast peer: 255.255.255.255 [ 720.015792][T16004] tipc: Enabled bearer , priority 10 [ 720.061113][T16004] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2750'. [ 720.073094][T16004] tipc: Disabling bearer [ 720.515053][ T7292] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 720.555022][ T7292] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 720.572006][ T7292] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 720.590428][ T7292] usb 5-1: Product: syz [ 720.595012][ T7292] usb 5-1: Manufacturer: syz [ 720.599641][ T7292] usb 5-1: SerialNumber: syz [ 720.682813][T16010] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2752'. [ 720.780476][T16012] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2753'. [ 720.968999][ T7292] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 43 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 721.083366][T16021] x_tables: duplicate entry at hook 2 [ 721.213909][T16027] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2759'. [ 721.484198][T16021] bridge0: port 2(bridge_slave_1) entered disabled state [ 721.491910][T16021] bridge0: port 1(bridge_slave_0) entered disabled state [ 721.691977][T14997] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 721.741838][ T8] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 721.932724][T14997] usb 3-1: Using ep0 maxpacket: 16 [ 721.940990][T14997] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 721.954440][T14997] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 722.002344][ T8] usb 6-1: Using ep0 maxpacket: 8 [ 722.024014][ T8] usb 6-1: config 127 has an invalid interface number: 171 but max is 1 [ 722.037804][ T8] usb 6-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 722.060483][T14997] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 722.073268][T14997] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.099728][T14997] usb 3-1: Product: syz [ 722.107769][ T8] usb 6-1: config 127 has no interface number 1 [ 722.126165][ T8] usb 6-1: config 127 interface 171 has no altsetting 0 [ 722.138788][T14997] usb 3-1: Manufacturer: syz [ 722.139910][ T8] usb 6-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 722.156614][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.165130][ T8] usb 6-1: Product: syz [ 722.169467][ T8] usb 6-1: Manufacturer: syz [ 722.179828][T14997] usb 3-1: SerialNumber: syz [ 722.180446][ T8] usb 6-1: SerialNumber: syz [ 722.217271][T14997] usb 3-1: config 0 descriptor?? [ 722.689635][ T5782] usb 5-1: USB disconnect, device number 43 [ 722.704515][ T5782] usblp0: removed [ 724.315635][ T8] xr_serial 6-1:127.171: xr_serial converter detected [ 724.343940][ T8] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 724.360588][ T8] xr_serial: probe of ttyUSB0 failed with error -71 [ 724.381324][ T8] usb 6-1: USB disconnect, device number 33 [ 724.410426][ T8] xr_serial 6-1:127.171: device disconnected [ 724.451164][T14997] usb 3-1: USB disconnect, device number 45 [ 724.827955][T16070] __nla_validate_parse: 3 callbacks suppressed [ 724.827973][T16070] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2771'. [ 724.869682][T16070] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 724.878894][T16070] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 724.887750][T16070] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 724.896549][T16070] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 724.933158][T16073] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2771'. [ 724.946778][T16073] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2771'. [ 724.950738][T16062] netlink: 'syz.2.2768': attribute type 3 has an invalid length. [ 724.956416][T16070] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2771'. [ 725.098345][T16076] futex_wake_op: syz.2.2768 tries to shift op by 32; fix this program [ 725.119249][T16076] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2768'. [ 725.130524][T16076] xt_nfacct: accounting object `syz1' does not exist [ 725.389702][T16082] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (4024) [ 725.418619][T16082] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 726.060421][T16093] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 726.372600][ T8] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 726.571973][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 726.599094][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 726.627800][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 726.665369][ T8] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 726.681831][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.701824][ T8] usb 3-1: Product: syz [ 726.711946][ T8] usb 3-1: Manufacturer: syz [ 726.716589][ T8] usb 3-1: SerialNumber: syz [ 726.763326][ T8] usb 3-1: config 0 descriptor?? [ 728.162132][T14997] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 728.352366][T14997] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 728.372164][T14997] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.389218][T14997] usb 5-1: config 0 descriptor?? [ 728.399235][T14997] cp210x 5-1:0.0: cp210x converter detected [ 728.770731][T16121] netlink: 'syz.5.2784': attribute type 3 has an invalid length. [ 728.909963][T16126] futex_wake_op: syz.5.2784 tries to shift op by 32; fix this program [ 728.937776][T16126] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2784'. [ 728.962651][T16126] xt_nfacct: accounting object `syz1' does not exist [ 729.133315][ T787] usb 3-1: USB disconnect, device number 46 [ 731.414033][T14997] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 731.444687][T14997] cp210x 5-1:0.0: querying part number failed [ 731.469198][T14997] usb 5-1: cp210x converter now attached to ttyUSB0 [ 731.507012][T14997] usb 5-1: USB disconnect, device number 44 [ 731.573219][T14997] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 731.594143][T14997] cp210x 5-1:0.0: device disconnected [ 731.975087][T14997] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 732.172917][T14997] usb 5-1: Using ep0 maxpacket: 16 [ 732.184869][T14997] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 732.204793][T14997] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 732.258412][T14997] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 732.281931][T14997] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.289971][T14997] usb 5-1: Product: syz [ 732.316505][T14997] usb 5-1: Manufacturer: syz [ 732.322065][T14997] usb 5-1: SerialNumber: syz [ 732.334332][T14997] usb 5-1: config 0 descriptor?? [ 732.630227][T16175] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (24779) [ 732.657760][T16175] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 732.722822][ T8] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 732.954455][ T8] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 733.045913][ T8] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 733.069377][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 733.142919][ T8] usb 6-1: Product: syz [ 733.147132][ T8] usb 6-1: Manufacturer: syz [ 733.185079][ T8] usb 6-1: SerialNumber: syz [ 733.510190][ T8] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 34 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 734.126993][T16188] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2802'. [ 734.137675][T16188] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2802'. [ 734.171167][T16184] kvm: pic: non byte write [ 734.198362][T16188] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2802'. [ 734.218235][T16188] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2802'. [ 734.597336][T14997] usb 5-1: USB disconnect, device number 45 [ 735.178553][ T5782] usb 6-1: USB disconnect, device number 34 [ 735.214040][ T5782] usblp0: removed [ 736.581790][ T8] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 736.792008][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 736.820417][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 736.865794][ T8] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 736.891778][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.910599][T16231] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2816'. [ 736.963264][ T8] usb 4-1: Product: syz [ 736.983520][ T8] usb 4-1: Manufacturer: syz [ 737.003760][ T8] usb 4-1: SerialNumber: syz [ 737.032503][T16232] binder: 16228:16232 ioctl c0306201 0 returned -14 [ 737.050476][ T8] usb 4-1: config 0 descriptor?? [ 737.851937][T14997] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 738.094409][T14997] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 738.235910][T16248] x_tables: duplicate entry at hook 2 [ 738.363084][T14997] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 738.383031][T14997] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 738.398692][T14997] usb 3-1: Product: syz [ 738.407856][T14997] usb 3-1: Manufacturer: syz [ 738.415426][T14997] usb 3-1: SerialNumber: syz [ 738.493007][T16248] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.500640][T16248] bridge0: port 1(bridge_slave_0) entered disabled state [ 738.841848][ T8] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 738.851090][T14997] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 47 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 739.101808][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 739.109243][ T8] usb 5-1: config 127 has an invalid interface number: 171 but max is 1 [ 739.118210][ T8] usb 5-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 739.137660][ T8] usb 5-1: config 127 has no interface number 1 [ 739.157521][ T8] usb 5-1: config 127 interface 171 has no altsetting 0 [ 739.197584][ T8] usb 5-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 739.284388][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.307488][ T8] usb 5-1: Product: syz [ 739.314518][ T8] usb 5-1: Manufacturer: syz [ 739.322975][ T5782] usb 4-1: USB disconnect, device number 41 [ 739.333427][ T8] usb 5-1: SerialNumber: syz [ 739.731421][T16257] netlink: 'syz.5.2821': attribute type 12 has an invalid length. [ 740.675951][ T5782] usb 3-1: USB disconnect, device number 47 [ 740.691038][ T5782] usblp0: removed [ 741.315247][T16279] tipc: New replicast peer: 255.255.255.255 [ 741.343937][T16279] tipc: Enabled bearer , priority 10 [ 741.477823][T16277] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2827'. [ 741.512217][T16277] tipc: Disabling bearer [ 741.873195][ T8] xr_serial 5-1:127.171: xr_serial converter detected [ 741.900410][ T8] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 741.912305][ T8] xr_serial: probe of ttyUSB0 failed with error -71 [ 741.926406][ T8] usb 5-1: USB disconnect, device number 46 [ 741.944592][ T8] xr_serial 5-1:127.171: device disconnected [ 742.005101][T16281] gretap0: entered promiscuous mode [ 742.052580][T16281] gretap0: left promiscuous mode [ 742.491821][ T8] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 742.499785][ T130] tipc: Left network mode [ 742.683495][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 742.703345][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 742.730407][ T8] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 742.754547][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.764254][ T8] usb 3-1: Product: syz [ 742.780996][ T8] usb 3-1: Manufacturer: syz [ 742.788958][ T8] usb 3-1: SerialNumber: syz [ 742.804815][ T8] usb 3-1: config 0 descriptor?? [ 743.611418][T16306] random: crng reseeded on system resumption [ 743.995260][ T130] hsr_slave_0: left promiscuous mode [ 744.001244][ T130] hsr_slave_1: left promiscuous mode [ 744.017310][ T130] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 744.032054][ T130] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 744.045550][ T130] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 744.066482][ T130] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 744.082801][ T130] bridge_slave_1: left promiscuous mode [ 744.126180][ T130] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.179932][ T130] bridge_slave_0: left allmulticast mode [ 744.189038][ T130] bridge_slave_0: left promiscuous mode [ 744.206027][ T130] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.422059][ T130] veth1_macvtap: left promiscuous mode [ 744.430507][ T130] veth0_macvtap: left promiscuous mode [ 744.473466][ T130] veth1_vlan: left promiscuous mode [ 744.478763][ T130] veth0_vlan: left promiscuous mode [ 745.200030][ T130] bond2 (unregistering): Released all slaves [ 745.258579][ T5826] usb 3-1: USB disconnect, device number 48 [ 745.442182][ T130] bond1 (unregistering): Released all slaves [ 745.820067][ T130] team0 (unregistering): Port device geneve0 removed [ 747.508738][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.515240][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.596552][ T130] team0 (unregistering): Port device team_slave_1 removed [ 747.878901][ T130] team0 (unregistering): Port device team_slave_0 removed [ 748.089750][ T130] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 748.187978][ T130] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 748.717879][ T130] bond0 (unregistering): Released all slaves [ 748.891889][T14997] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 749.111848][T14997] usb 3-1: Using ep0 maxpacket: 16 [ 749.126656][T14997] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 749.168275][T14997] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 749.217073][T14997] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.261975][T14997] usb 3-1: Product: syz [ 749.271854][T14997] usb 3-1: Manufacturer: syz [ 749.276759][T14997] usb 3-1: SerialNumber: syz [ 749.284658][T14997] usb 3-1: config 0 descriptor?? [ 751.708461][ T5839] usb 3-1: USB disconnect, device number 49 [ 752.561866][ T5839] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 752.757913][ T5839] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 752.786417][ T5839] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 752.800244][ T5839] usb 5-1: config 0 has no interface number 0 [ 752.816441][ T5839] usb 5-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 752.829177][ T5839] usb 5-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 752.837532][ T5839] usb 5-1: Manufacturer: syz [ 752.844390][ T5839] usb 5-1: config 0 descriptor?? [ 752.858088][ T5839] usb 5-1: selecting invalid altsetting 1 [ 752.866022][ T5839] usb 5-1: Can not set alternate setting to 1, error: -22 [ 752.873435][ T5839] synaptics_usb: probe of 5-1:0.52 failed with error -22 [ 753.280827][T16417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 753.293546][T16417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 753.499333][T16434] random: crng reseeded on system resumption [ 754.415285][T16443] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2871'. [ 754.908004][ T5839] usb 5-1: USB disconnect, device number 47 [ 755.187049][T16453] tipc: Started in network mode [ 755.193985][T16453] tipc: Node identity ac14140f, cluster identity 4711 [ 755.201167][T16453] tipc: New replicast peer: 255.255.255.255 [ 755.219446][T16453] tipc: Enabled bearer , priority 10 [ 755.230959][T16453] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2876'. [ 755.246544][T16453] tipc: Disabling bearer [ 756.283413][T16480] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 756.919923][T16484] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 757.051452][T16501] tipc: New replicast peer: 255.255.255.255 [ 757.087000][T16501] tipc: Enabled bearer , priority 10 [ 757.104095][T16504] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2889'. [ 757.113460][T16504] tipc: Disabling bearer [ 757.327198][T16509] random: crng reseeded on system resumption [ 759.345541][T16540] futex_wake_op: syz.2.2897 tries to shift op by 32; fix this program [ 759.369512][T16539] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2897'. [ 759.416461][T16539] xt_nfacct: accounting object `syz1' does not exist [ 761.521843][ T5782] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 761.721873][ T5782] usb 4-1: Using ep0 maxpacket: 16 [ 761.738254][ T5782] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 761.769122][ T5782] usb 4-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 761.788577][ T5782] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 761.833168][ T5782] usb 4-1: Product: syz [ 761.845591][ T5782] usb 4-1: Manufacturer: syz [ 761.871437][ T5782] usb 4-1: SerialNumber: syz [ 761.891969][ T5782] usb 4-1: config 0 descriptor?? [ 761.904197][ T5782] hub 4-1:0.0: bad descriptor, ignoring hub [ 761.927439][ T5782] hub: probe of 4-1:0.0 failed with error -5 [ 761.940212][ T5782] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 761.966453][T16544] syz.4.2902 (16544): drop_caches: 1 [ 762.011864][ T5839] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 762.224815][ T23] usb 4-1: USB disconnect, device number 42 [ 762.240326][T16577] random: crng reseeded on system resumption [ 762.266577][ T5839] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 762.356870][ T5839] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.398276][ T5839] usb 6-1: config 0 descriptor?? [ 762.480917][ T5839] cp210x 6-1:0.0: cp210x converter detected [ 762.874428][ T5782] IPVS: starting estimator thread 0... [ 762.981920][T16581] IPVS: using max 21 ests per chain, 50400 per kthread [ 764.178607][T16590] x_tables: duplicate entry at hook 2 [ 764.524734][T16593] tipc: Started in network mode [ 764.537298][T16593] tipc: Node identity ac14140f, cluster identity 4711 [ 764.567440][T16593] tipc: New replicast peer: 255.255.255.255 [ 764.603483][T16593] tipc: Enabled bearer , priority 10 [ 764.636911][T16590] bridge0: port 2(bridge_slave_1) entered disabled state [ 764.644678][T16590] bridge0: port 1(bridge_slave_0) entered disabled state [ 764.806225][T16595] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2918'. [ 764.829046][T16595] tipc: Disabling bearer [ 764.894142][ T5782] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 765.091936][ T5782] usb 3-1: Using ep0 maxpacket: 8 [ 765.125088][ T5782] usb 3-1: config 127 has an invalid interface number: 171 but max is 1 [ 765.177067][ T5782] usb 3-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 765.250681][ T5782] usb 3-1: config 127 has no interface number 1 [ 765.259284][ T5782] usb 3-1: config 127 interface 171 has no altsetting 0 [ 765.291094][ T5782] usb 3-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 765.301494][ T5782] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.315300][ T5782] usb 3-1: Product: syz [ 765.319500][ T5782] usb 3-1: Manufacturer: syz [ 765.330558][ T5782] usb 3-1: SerialNumber: syz [ 765.706889][ T5839] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 765.724492][ T5839] cp210x 6-1:0.0: querying part number failed [ 765.744471][ T5839] usb 6-1: cp210x converter now attached to ttyUSB0 [ 765.768927][ T5839] usb 6-1: USB disconnect, device number 35 [ 765.792417][ T5839] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 765.808031][ T5839] cp210x 6-1:0.0: device disconnected [ 767.752823][ T5782] xr_serial 3-1:127.171: xr_serial converter detected [ 767.792891][ T5782] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 767.823264][ T5782] xr_serial: probe of ttyUSB0 failed with error -71 [ 767.852756][ T5782] usb 3-1: USB disconnect, device number 50 [ 767.890260][ T5782] xr_serial 3-1:127.171: device disconnected [ 767.923342][T16629] random: crng reseeded on system resumption [ 768.495447][T16637] netlink: 'syz.2.2931': attribute type 12 has an invalid length. [ 770.052548][ T5783] Bluetooth: hci0: command 0x0406 tx timeout [ 774.789494][T16730] loop9: detected capacity change from 0 to 7 [ 774.806982][T16729] syzkaller1: entered promiscuous mode [ 774.824994][T16729] syzkaller1: entered allmulticast mode [ 774.828471][T16730] Dev loop9: unable to read RDB block 7 [ 774.849232][T16730] loop9: AHDI p1 p2 p3 [ 774.853815][T16730] loop9: partition table partially beyond EOD, truncated [ 774.923825][T16730] loop9: p1 start 1601398130 is beyond EOD, truncated [ 775.024845][T16731] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 775.038531][T16731] vivid-000: disconnect [ 775.049570][T16730] loop9: p2 start 1702059890 is beyond EOD, truncated [ 775.075150][T16732] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 775.534130][T16742] netlink: 'syz.5.2963': attribute type 4 has an invalid length. [ 775.593848][T16745] binder: 16744:16745 ioctl 4018620d 0 returned -22 [ 775.604058][T16722] vivid-000: reconnect [ 775.780589][T16746] netlink: 'syz.5.2963': attribute type 4 has an invalid length. [ 775.867279][T16742] warning: `syz.5.2963' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 775.886690][T16742] xt_CT: You must specify a L4 protocol and not use inversions on it [ 776.591872][ T23] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 776.781822][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 776.797127][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 776.825741][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 776.855645][ T23] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 776.888276][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 776.919287][ T23] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 776.985052][ T23] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 777.008810][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.046589][ T23] usb 3-1: config 0 descriptor?? [ 777.068858][T16761] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 777.330320][ T5783] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 777.331258][ C0] Bluetooth: hci4: Unexpected continuation: 1 bytes [ 777.338606][ T5783] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 777.351809][ T5783] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 777.358647][ T5783] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 777.365526][ T5783] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 777.373203][ T5783] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 777.380027][ T5783] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 777.386906][ T5783] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 777.394199][ T5783] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 777.400997][ T5783] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 777.407869][ T5783] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 777.414827][ T5783] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 777.421638][ T5783] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 777.428471][ T5783] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 777.435329][ T5783] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 777.442204][ T5783] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 777.448989][ T5783] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 777.455939][ T5783] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 777.462814][ T5783] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 777.469628][ T5783] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 777.477217][ T5783] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 777.484099][ T5783] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 777.490958][ T5783] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 777.497963][ T5783] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 777.504846][ T5783] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 777.511761][ T5783] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 777.518600][ T5783] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 777.525575][ T5783] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 777.532525][ T5783] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 777.645734][T12432] Bluetooth: hci4: Opcode 0x0c03 failed: -71 [ 777.652646][ T5826] usb 3-1: USB disconnect, device number 51 [ 780.022192][ T8] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 780.241788][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 780.275208][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 780.292121][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 780.302090][ T8] usb 4-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 780.311357][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.321236][ T8] usb 4-1: config 0 descriptor?? [ 780.328314][ T8] hso 4-1:0.0: Can't find BULK IN endpoint [ 780.614555][T16816] hub 9-0:1.0: USB hub found [ 780.865792][T16816] hub 9-0:1.0: 1 port detected [ 781.880518][T16827] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2986'. [ 781.900655][T16827] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 781.909512][T16827] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 781.918306][T16827] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 781.927036][T16827] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 781.966657][T16827] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2986'. [ 782.087559][T16827] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2986'. [ 782.102004][T16827] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2986'. [ 782.211879][T14997] usb 4-1: USB disconnect, device number 43 [ 782.787311][T16839] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 784.590849][T16866] kvm: pic: non byte write [ 785.693300][T16880] x_tables: duplicate entry at hook 2 [ 786.251794][ T5839] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 786.521912][ T5839] usb 5-1: Using ep0 maxpacket: 8 [ 786.550734][ T5839] usb 5-1: config 127 has an invalid interface number: 171 but max is 1 [ 786.566529][ T5839] usb 5-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 786.577654][ T5839] usb 5-1: config 127 has no interface number 1 [ 786.589726][ T5839] usb 5-1: config 127 interface 171 has no altsetting 0 [ 786.610767][ T5839] usb 5-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 786.667597][ T5839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.709907][ T5839] usb 5-1: Product: syz [ 786.728726][ T5839] usb 5-1: Manufacturer: syz [ 786.740162][ T5839] usb 5-1: SerialNumber: syz [ 786.772580][ T5826] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 786.961834][ T23] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 787.001474][ T5826] usb 4-1: Using ep0 maxpacket: 16 [ 787.031200][ T5826] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 787.064369][ T5826] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 787.073710][ T5826] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.082598][ T5826] usb 4-1: Product: syz [ 787.088280][ T5826] usb 4-1: Manufacturer: syz [ 787.095788][ T5826] usb 4-1: SerialNumber: syz [ 787.109730][ T5826] usb 4-1: config 0 descriptor?? [ 787.119653][ T5826] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 787.129645][ T5826] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 787.192429][ T23] usb 6-1: Using ep0 maxpacket: 16 [ 787.213378][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 787.239529][ T23] usb 6-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 787.283849][ T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.311312][ T23] usb 6-1: Product: syz [ 787.326846][ T23] usb 6-1: Manufacturer: syz [ 787.345955][ T23] usb 6-1: SerialNumber: syz [ 787.371977][ T23] usb 6-1: config 0 descriptor?? [ 787.403083][ T23] hub 6-1:0.0: bad descriptor, ignoring hub [ 787.431371][ T23] hub: probe of 6-1:0.0 failed with error -5 [ 787.467901][ T23] usb 6-1: Quirk or no altest; falling back to MIDI 1.0 [ 787.734444][ T5826] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 787.974300][ T5782] usb 6-1: USB disconnect, device number 36 [ 788.176576][ T5826] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 788.226977][ T5826] em28xx 4-1:0.0: board has no eeprom [ 788.511885][ T5826] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 788.530914][ T5826] em28xx 4-1:0.0: dvb set to bulk mode. [ 788.575805][ T5782] em28xx 4-1:0.0: Binding DVB extension [ 788.599072][ T5826] usb 4-1: USB disconnect, device number 44 [ 788.637862][ T5826] em28xx 4-1:0.0: Disconnecting em28xx [ 788.753074][ T5782] em28xx 4-1:0.0: Registering input extension [ 788.763435][ T5826] em28xx 4-1:0.0: Closing input extension [ 788.793407][ T5826] em28xx 4-1:0.0: Freeing device [ 788.953118][T16906] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3008'. [ 788.966595][T16906] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3008'. [ 789.036454][ T5839] xr_serial 5-1:127.171: xr_serial converter detected [ 789.088295][T16906] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3008'. [ 789.101219][ T5839] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 789.110400][ T5839] xr_serial: probe of ttyUSB0 failed with error -71 [ 789.122633][T16906] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3008'. [ 789.143218][ T5839] usb 5-1: USB disconnect, device number 48 [ 789.193414][ T5839] xr_serial 5-1:127.171: device disconnected [ 789.546469][T16921] tipc: New replicast peer: 255.255.255.255 [ 789.585608][T16921] tipc: Enabled bearer , priority 10 [ 789.606304][T16924] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3012'. [ 789.645927][T16924] tipc: Disabling bearer [ 791.205501][ T5782] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 791.421204][T16953] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (36504) [ 791.431198][T16953] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 791.441098][ T5782] usb 6-1: Using ep0 maxpacket: 16 [ 791.448030][ T5782] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 791.487238][ T5782] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 791.504163][ T5782] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.513224][ T5782] usb 6-1: Product: syz [ 791.517556][ T5782] usb 6-1: Manufacturer: syz [ 791.522784][ T5782] usb 6-1: SerialNumber: syz [ 791.533675][ T5782] usb 6-1: config 0 descriptor?? [ 791.568513][ T5782] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 791.611379][ T5782] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 792.206478][ T5782] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 792.622613][ T5782] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 792.654124][ T5782] em28xx 6-1:0.0: board has no eeprom [ 792.955104][ T5782] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 792.970808][ T5782] em28xx 6-1:0.0: dvb set to bulk mode. [ 792.986251][ T5826] em28xx 6-1:0.0: Binding DVB extension [ 793.003438][ T5782] usb 6-1: USB disconnect, device number 37 [ 793.041475][ T5782] em28xx 6-1:0.0: Disconnecting em28xx [ 793.093721][ T23] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 793.105005][ T5826] em28xx 6-1:0.0: Registering input extension [ 793.121944][ T5782] em28xx 6-1:0.0: Closing input extension [ 793.148762][ T5782] em28xx 6-1:0.0: Freeing device [ 793.314410][ T23] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 793.331639][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.349781][ T23] usb 4-1: config 0 descriptor?? [ 793.384605][ T23] cp210x 4-1:0.0: cp210x converter detected [ 793.698188][T16978] kvm: pic: non byte write [ 795.652009][ T5783] Bluetooth: hci2: command 0x0406 tx timeout [ 796.785254][ T23] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 796.802764][ T23] cp210x 4-1:0.0: querying part number failed [ 796.822731][ T23] usb 4-1: cp210x converter now attached to ttyUSB0 [ 796.847085][ T23] usb 4-1: USB disconnect, device number 45 [ 796.872811][ T23] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 796.912339][ T23] cp210x 4-1:0.0: device disconnected [ 797.268144][T17017] syz.4.3039 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 797.431829][ T23] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 797.591914][ T5782] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 797.653313][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 797.661254][T17024] futex_wake_op: syz.2.3040 tries to shift op by 32; fix this program [ 797.673136][T17024] xt_nfacct: accounting object `syz1' does not exist [ 797.682485][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 797.695676][ T23] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 797.707261][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.715829][ T23] usb 4-1: Product: syz [ 797.720166][ T23] usb 4-1: Manufacturer: syz [ 797.725210][ T23] usb 4-1: SerialNumber: syz [ 797.738498][ T23] usb 4-1: config 0 descriptor?? [ 797.752077][ T23] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 797.761854][ T23] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 797.881961][ T5782] usb 5-1: Using ep0 maxpacket: 8 [ 797.961307][ T5782] usb 5-1: config 0 has no interfaces? [ 797.992649][ T5782] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 798.020284][ T5782] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.043284][ T5782] usb 5-1: config 0 descriptor?? [ 798.361758][ T23] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 798.689423][T17027] usb usb8: usbfs: process 17027 (syz.2.3042) did not claim interface 0 before use [ 798.779631][ T23] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 798.792785][T17029] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3043'. [ 798.804069][ T23] em28xx 4-1:0.0: board has no eeprom [ 798.858097][T17030] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3043'. [ 798.870444][T17030] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3043'. [ 798.899132][T17029] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3043'. [ 799.091903][ T23] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 799.133971][ T23] em28xx 4-1:0.0: dvb set to bulk mode. [ 799.140512][ T7292] em28xx 4-1:0.0: Binding DVB extension [ 799.170852][ T23] usb 4-1: USB disconnect, device number 46 [ 799.192499][ T23] em28xx 4-1:0.0: Disconnecting em28xx [ 799.329516][ T7292] em28xx 4-1:0.0: Registering input extension [ 799.359122][ T23] em28xx 4-1:0.0: Closing input extension [ 799.412087][ T23] em28xx 4-1:0.0: Freeing device [ 800.419565][ T5782] usb 5-1: USB disconnect, device number 49 [ 800.711575][T17054] syz.4.3051 (17054): drop_caches: 1 [ 800.790835][T17054] syz.4.3051 (17054): drop_caches: 1 [ 801.040086][T17060] kvm: pic: non byte write [ 802.274005][T17081] syz.2.3060 (17081): drop_caches: 1 [ 802.341989][ T5782] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 802.381468][T17081] syz.2.3060 (17081): drop_caches: 1 [ 802.725182][ T5782] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 802.742152][ T5782] usb 6-1: config 0 has no interfaces? [ 802.792736][ T5782] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 802.863162][ T5782] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 802.877189][ T5782] usb 6-1: Product: syz [ 802.881380][ T5782] usb 6-1: Manufacturer: syz [ 802.912618][ T5782] usb 6-1: SerialNumber: syz [ 802.951534][ T5782] usb 6-1: config 0 descriptor?? [ 803.197276][T17104] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 804.674752][T17113] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 805.046043][ T7292] usb 6-1: USB disconnect, device number 38 [ 805.150037][T17128] syz.4.3072 (17128): drop_caches: 1 [ 805.367648][T17128] syz.4.3072 (17128): drop_caches: 1 [ 805.907523][T17140] binder: 17139:17140 ioctl 4018620d 0 returned -22 [ 806.206278][T17155] netlink: 'syz.2.3080': attribute type 4 has an invalid length. [ 806.286176][T17156] netlink: 'syz.2.3080': attribute type 4 has an invalid length. [ 806.892062][ T5782] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 807.112646][ T5782] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 807.139816][ T5782] usb 4-1: config 0 has no interfaces? [ 807.177124][ T5782] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 807.217433][ T5782] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 807.232149][ T5782] usb 4-1: Product: syz [ 807.236344][ T5782] usb 4-1: Manufacturer: syz [ 807.241292][ T5782] usb 4-1: SerialNumber: syz [ 807.262298][ T5782] usb 4-1: config 0 descriptor?? [ 807.978295][T17177] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3087'. [ 807.989789][T17177] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3087'. [ 808.007844][T17177] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3087'. [ 808.018379][T17177] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3087'. [ 808.871853][ T7292] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 808.937998][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.944404][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.051833][ T7292] usb 3-1: Using ep0 maxpacket: 8 [ 809.078493][ T7292] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 809.142168][ T7292] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 809.188657][ T7292] usb 3-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 809.198247][ T7292] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.209085][ T7292] usb 3-1: config 0 descriptor?? [ 809.239375][ T7292] hso 3-1:0.0: Can't find BULK IN endpoint [ 809.356089][ T7292] usb 4-1: USB disconnect, device number 47 [ 811.061816][ T787] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 811.294737][ T787] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 811.332840][ T787] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 811.375389][ T787] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 811.395433][ T787] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.424916][ T5839] usb 3-1: USB disconnect, device number 52 [ 811.436197][ T787] usb 5-1: config 0 descriptor?? [ 811.758771][T17221] binder: 17220:17221 ioctl 4018620d 0 returned -22 [ 811.783021][ T787] usbhid 5-1:0.0: can't add hid device: -71 [ 811.789050][ T787] usbhid: probe of 5-1:0.0 failed with error -71 [ 811.823741][ T787] usb 5-1: USB disconnect, device number 50 [ 811.945736][T17228] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 811.958273][T17227] netlink: 88 bytes leftover after parsing attributes in process `syz.5.3101'. [ 812.481891][ T5826] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 812.749020][T17248] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (54121) [ 812.759062][T17248] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 812.779349][ T5826] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 812.791798][ T5839] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 812.809909][ T5826] usb 5-1: config 0 has no interfaces? [ 812.910691][ T5826] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 812.924866][ T5826] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 812.933822][ T5826] usb 5-1: Product: syz [ 812.938372][ T5826] usb 5-1: Manufacturer: syz [ 812.947236][ T5826] usb 5-1: SerialNumber: syz [ 812.954000][ T5826] usb 5-1: config 0 descriptor?? [ 812.983766][ T5839] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 813.000511][ T5839] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.031661][ T5839] usb 6-1: config 0 descriptor?? [ 813.055442][ T5839] cp210x 6-1:0.0: cp210x converter detected [ 813.374552][T17251] IPVS: sh: FWM 3 0x00000003 - no destination available [ 813.399476][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 815.008220][ T787] usb 5-1: USB disconnect, device number 51 [ 816.322190][ T5839] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 816.411798][ T5839] cp210x 6-1:0.0: querying part number failed [ 816.444454][ T5839] usb 6-1: cp210x converter now attached to ttyUSB0 [ 816.482035][ T5839] usb 6-1: USB disconnect, device number 39 [ 816.526065][ T5839] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 816.578677][ T5839] cp210x 6-1:0.0: device disconnected [ 816.939113][T17290] binder: 17289:17290 ioctl 4018620d 0 returned -22 [ 817.661911][ T5782] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 818.026604][ T5782] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 818.125677][ T5782] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 818.159997][ T5782] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 818.269481][ T5782] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 818.304679][ T5782] usb 4-1: Product: syz [ 818.317004][ T5782] usb 4-1: Manufacturer: syz [ 818.395178][ T5782] usb 4-1: SerialNumber: syz [ 819.511814][ T5839] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 819.749700][ T5839] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 819.769317][ T5839] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.779923][ T5839] usb 5-1: config 0 descriptor?? [ 819.808064][ T5839] cp210x 5-1:0.0: cp210x converter detected [ 820.176401][T17322] IPVS: sh: FWM 3 0x00000003 - no destination available [ 820.282560][T17324] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3125'. [ 820.490946][T17329] x_tables: duplicate entry at hook 2 [ 820.653251][ T23] usb 4-1: USB disconnect, device number 48 [ 821.258272][ T5783] Bluetooth: hci3: command 0x0406 tx timeout [ 821.281782][ T5782] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 821.778273][ T5782] usb 3-1: Using ep0 maxpacket: 8 [ 821.963345][ T5782] usb 3-1: config 127 has an invalid interface number: 171 but max is 1 [ 822.005706][ T5782] usb 3-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 822.072019][ T5782] usb 3-1: config 127 has no interface number 1 [ 822.094295][ T5782] usb 3-1: config 127 interface 171 has no altsetting 0 [ 822.182055][ T5782] usb 3-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 822.201161][ T5782] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.224142][ T5782] usb 3-1: Product: syz [ 822.297716][ T5782] usb 3-1: Manufacturer: syz [ 822.310822][ T5782] usb 3-1: SerialNumber: syz [ 823.187909][ T5839] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 823.305081][ T5839] cp210x 5-1:0.0: querying part number failed [ 823.331307][ T5839] usb 5-1: cp210x converter now attached to ttyUSB0 [ 823.368490][ T5839] usb 5-1: USB disconnect, device number 52 [ 823.398631][ T5839] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 823.427139][ T5839] cp210x 5-1:0.0: device disconnected [ 824.085657][ T5782] xr_serial 3-1:127.171: xr_serial converter detected [ 824.132415][ T5782] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 824.170591][ T5782] xr_serial: probe of ttyUSB0 failed with error -71 [ 824.201238][ T5782] usb 3-1: USB disconnect, device number 53 [ 824.242715][ T5782] xr_serial 3-1:127.171: device disconnected [ 826.217167][T17393] syzkaller1: entered promiscuous mode [ 826.224949][T17393] syzkaller1: entered allmulticast mode [ 826.297149][T17393] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 826.391315][T17397] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3148'. [ 826.401054][T17397] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3148'. [ 826.424178][T17397] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3148'. [ 826.437765][T17397] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3148'. [ 827.165651][T17418] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (7118) [ 827.185134][T17418] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 827.847644][T17427] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3160'. [ 827.860380][T17427] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3160'. [ 828.001898][ T5782] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 828.181792][ T5782] usb 5-1: Using ep0 maxpacket: 16 [ 828.189734][ T5782] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 828.191953][T14997] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 828.204397][ T5782] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 828.217831][ T5782] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.226598][ T5782] usb 5-1: Product: syz [ 828.230914][ T5782] usb 5-1: Manufacturer: syz [ 828.236204][ T5782] usb 5-1: SerialNumber: syz [ 828.245548][ T5782] usb 5-1: config 0 descriptor?? [ 828.267412][ T5782] hub 5-1:0.0: bad descriptor, ignoring hub [ 828.277433][ T5782] hub: probe of 5-1:0.0 failed with error -5 [ 828.290542][ T5782] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 828.410732][T14997] usb 6-1: Using ep0 maxpacket: 16 [ 828.428954][T14997] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 828.452660][T14997] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 828.471834][T14997] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.479884][T14997] usb 6-1: Product: syz [ 828.501753][T14997] usb 6-1: Manufacturer: syz [ 828.506462][T14997] usb 6-1: SerialNumber: syz [ 828.519724][T14997] usb 6-1: config 0 descriptor?? [ 828.528083][T14997] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 828.542889][T14997] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 829.145405][T14997] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 829.565610][T14997] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 829.580728][T14997] em28xx 6-1:0.0: board has no eeprom [ 830.695046][T17429] em28xx 6-1:0.0: reading from i2c device at 0xfe00 failed (error=-5) [ 830.762633][T14997] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 830.770517][T14997] em28xx 6-1:0.0: dvb set to bulk mode. [ 830.791614][ T8938] usb 5-1: USB disconnect, device number 53 [ 830.820166][ T5839] em28xx 6-1:0.0: Binding DVB extension [ 830.857443][T14997] usb 6-1: USB disconnect, device number 40 [ 830.915200][T14997] em28xx 6-1:0.0: Disconnecting em28xx [ 830.938180][T17459] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3172'. [ 830.962738][T17459] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3172'. [ 830.979448][ T5839] em28xx 6-1:0.0: Registering input extension [ 831.005780][T14997] em28xx 6-1:0.0: Closing input extension [ 831.037857][T14997] em28xx 6-1:0.0: Freeing device [ 832.240465][ T28] audit: type=1804 audit(1769420796.481:98): pid=17481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.3177" name="bus" dev="ramfs" ino=60342 res=1 errno=0 [ 833.355625][T17487] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3182'. [ 833.365571][T17487] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3182'. [ 835.082010][T17519] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3193'. [ 835.135689][T17519] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3193'. [ 835.887086][T17532] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 836.280623][T17537] futex_wake_op: syz.5.3198 tries to shift op by 32; fix this program [ 836.291624][T17537] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3198'. [ 836.322842][T17537] xt_nfacct: accounting object `syz1' does not exist [ 837.322003][ T5839] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 837.524872][ T5839] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 837.535613][T17557] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3206'. [ 837.556367][T17557] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3206'. [ 837.565863][ T5839] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.641792][ T5839] usb 6-1: config 0 descriptor?? [ 837.670048][ T5839] cp210x 6-1:0.0: cp210x converter detected [ 837.881654][T17561] kvm: pic: non byte write [ 838.335787][T17566] IPVS: sh: FWM 3 0x00000003 - no destination available [ 838.382641][ C1] IPVS: sh: FWM 3 0x00000003 - no destination available [ 840.122383][ T5839] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 840.162807][ T5839] cp210x 6-1:0.0: querying part number failed [ 840.182212][ T5839] usb 6-1: cp210x converter now attached to ttyUSB0 [ 840.209926][ T5839] usb 6-1: USB disconnect, device number 41 [ 840.224902][ T5839] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 840.248307][ T5839] cp210x 6-1:0.0: device disconnected [ 841.149740][T17602] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (37206) [ 841.159672][T17602] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 841.281550][T17605] loop7: detected capacity change from 0 to 16384 [ 841.658033][T17612] syzkaller1: entered promiscuous mode [ 841.666595][T17612] syzkaller1: entered allmulticast mode [ 841.746408][T17606] loop7: detected capacity change from 16384 to 0 [ 841.756183][T17612] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 843.616055][T17643] syzkaller1: entered promiscuous mode [ 843.622839][T17643] syzkaller1: entered allmulticast mode [ 843.655776][T17643] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 843.911855][T14997] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 844.113559][T14997] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 844.171929][T14997] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 844.182434][T14997] usb 6-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 844.191503][T14997] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.220664][T14997] usb 6-1: config 0 descriptor?? [ 844.288348][T17653] futex_wake_op: syz.4.3238 tries to shift op by 32; fix this program [ 844.323267][T17653] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3238'. [ 844.333966][T17653] xt_nfacct: accounting object `syz1' does not exist [ 845.261275][T14997] usbhid 6-1:0.0: can't add hid device: -71 [ 845.313961][T14997] usbhid: probe of 6-1:0.0 failed with error -71 [ 845.403564][T14997] usb 6-1: USB disconnect, device number 42 [ 845.930715][T17680] syzkaller1: entered promiscuous mode [ 845.938593][T17680] syzkaller1: entered allmulticast mode [ 846.018853][T17680] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 846.992378][T17692] futex_wake_op: syz.4.3250 tries to shift op by 32; fix this program [ 847.012207][T17692] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3250'. [ 847.030000][T17692] xt_nfacct: accounting object `syz1' does not exist [ 848.597973][T17715] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3258'. [ 850.472791][T17755] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3270'. [ 851.212339][T17766] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3274'. [ 852.472698][T17785] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 854.050812][T17812] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3288'. [ 857.131244][T17854] tipc: Enabling of bearer rejected, failed to enable media [ 857.153458][T17860] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3300'. [ 859.511987][ T7292] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 859.662052][ T787] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 859.753225][ T7292] usb 4-1: no configurations [ 859.758232][ T7292] usb 4-1: can't read configurations, error -22 [ 859.875577][ T787] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 859.911990][ T7292] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 859.938107][ T787] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 860.026817][ T787] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 860.081206][ T787] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 860.102910][ T7292] usb 4-1: no configurations [ 860.117083][ T7292] usb 4-1: can't read configurations, error -22 [ 860.163766][ T7292] usb usb4-port1: attempt power cycle [ 860.183275][ T787] usb 6-1: Quirk or no altest; falling back to MIDI 1.0 [ 860.204970][ T787] usb 6-1: invalid MIDI out EP 0 [ 860.376631][ T6061] udevd[6061]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 860.440241][ T787] snd-usb-audio: probe of 6-1:27.0 failed with error -22 [ 860.621781][ T7292] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 860.706212][ T7292] usb 4-1: no configurations [ 860.723321][ T7292] usb 4-1: can't read configurations, error -22 [ 860.826075][T17906] fuse: Unknown parameter 'rootmod' [ 860.901891][ T7292] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 861.061527][ T7292] usb 4-1: no configurations [ 861.110127][ T7292] usb 4-1: can't read configurations, error -22 [ 861.202276][ T7292] usb usb4-port1: unable to enumerate USB device [ 861.256439][T17916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 861.287527][T17916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 861.349954][T17928] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (24129) [ 861.386592][T17928] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 862.097204][T17938] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 862.911634][ T5782] usb 6-1: USB disconnect, device number 43 [ 863.478043][T17967] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 865.198529][T17995] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 865.678526][T18000] netlink: zone id is out of range [ 865.762562][T18003] syzkaller1: entered promiscuous mode [ 865.776659][T18003] syzkaller1: entered allmulticast mode [ 865.777956][T18004] futex_wake_op: syz.2.3344 tries to shift op by 32; fix this program [ 865.811304][T18004] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3344'. [ 865.827890][T18004] xt_nfacct: accounting object `syz1' does not exist [ 865.873758][T18005] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 867.891962][T14997] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 868.152102][T14997] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 868.187502][T14997] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.199736][T18036] netlink: 'syz.5.3358': attribute type 4 has an invalid length. [ 868.273333][T14997] usb 5-1: config 0 descriptor?? [ 868.295041][T18037] netlink: 'syz.5.3358': attribute type 4 has an invalid length. [ 868.334553][T14997] cp210x 5-1:0.0: cp210x converter detected [ 868.799534][T18044] IPVS: sh: FWM 3 0x00000003 - no destination available [ 870.376198][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.382833][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.296779][T14997] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 871.310520][T14997] cp210x 5-1:0.0: querying part number failed [ 871.323790][T14997] usb 5-1: cp210x converter now attached to ttyUSB0 [ 871.334604][T14997] usb 5-1: USB disconnect, device number 54 [ 871.346377][T14997] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 871.379739][T14997] cp210x 5-1:0.0: device disconnected [ 871.617098][T18077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 871.657316][T18077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 871.701861][T18077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 871.743804][T18077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 871.831311][T18077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 871.881324][T18077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 871.997933][T18077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 872.059704][T18077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 872.161610][T18077] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 872.193321][T18077] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 872.223855][T18077] batadv_slave_1: entered promiscuous mode [ 873.542502][ T8938] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 873.777786][ T8938] usb 6-1: config 64 has an invalid interface number: 146 but max is 0 [ 873.819379][ T8938] usb 6-1: config 64 has no interface number 0 [ 873.836516][ T8938] usb 6-1: config 64 interface 146 has no altsetting 0 [ 873.846689][ T8938] usb 6-1: New USB device found, idVendor=05d1, idProduct=7001, bcdDevice=53.43 [ 873.862436][ T8938] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.870660][ T8938] usb 6-1: Product: syz [ 873.878658][ T8938] usb 6-1: Manufacturer: syz [ 873.895611][ T8938] usb 6-1: SerialNumber: syz [ 874.302914][T18106] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3379'. [ 874.335527][ T8938] ftdi_sio 6-1:64.146: FTDI USB Serial Device converter detected [ 874.344856][ T8938] ftdi_sio ttyUSB0: unknown device type: 0x5343 [ 874.353963][ T8938] usb 6-1: USB disconnect, device number 44 [ 874.368332][ T8938] ftdi_sio 6-1:64.146: device disconnected [ 874.771803][ T5826] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 875.081831][ T5826] usb 5-1: Using ep0 maxpacket: 8 [ 875.201531][ T5826] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 875.217983][ T5826] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 875.235720][ T5826] usb 5-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 875.393672][ T5826] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.503985][ T5826] usb 5-1: config 0 descriptor?? [ 875.518603][ T5826] hso 5-1:0.0: Can't find BULK IN endpoint [ 877.608264][ T787] usb 5-1: USB disconnect, device number 55 [ 878.381882][ T8938] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 878.656471][ T8938] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 878.666603][ T8938] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 878.676429][ T8938] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 878.750390][ T8938] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 878.764966][ T8938] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 878.793570][ T8938] usb 5-1: Product: syz [ 878.814942][ T8938] usb 5-1: Manufacturer: syz [ 878.820541][ T8938] usb 5-1: SerialNumber: syz [ 878.888613][T18168] netlink: 'syz.3.3396': attribute type 4 has an invalid length. [ 879.047059][T18171] netlink: 'syz.3.3396': attribute type 4 has an invalid length. [ 879.253626][ T8938] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 56 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 880.061947][ T787] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 880.285648][ T787] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 880.313525][ T787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 880.360300][ T787] usb 3-1: config 0 descriptor?? [ 880.379676][ T787] cp210x 3-1:0.0: cp210x converter detected [ 880.912482][ T5826] usb 5-1: USB disconnect, device number 56 [ 881.037779][ T5826] usblp0: removed [ 882.826113][T18205] netlink: 'syz.3.3407': attribute type 4 has an invalid length. [ 882.891427][T18206] netlink: 'syz.3.3407': attribute type 4 has an invalid length. [ 883.327501][T18209] syzkaller1: entered promiscuous mode [ 883.335760][T18209] syzkaller1: entered allmulticast mode [ 883.391433][T18209] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 883.617623][ T787] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 883.650409][ T787] cp210x 3-1:0.0: querying part number failed [ 883.693729][ T787] usb 3-1: cp210x converter now attached to ttyUSB0 [ 883.729784][ T787] usb 3-1: USB disconnect, device number 54 [ 883.746480][ T787] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 883.766416][ T787] cp210x 3-1:0.0: device disconnected [ 884.481800][ T8938] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 884.490268][ T787] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 884.733772][ T8938] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 884.796700][ T8938] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 885.084689][ T8938] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 885.139883][ T787] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 885.150252][ T8938] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.170159][ T787] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 885.180292][ T787] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 885.306726][ T8938] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 885.370076][ T8938] usb 3-1: invalid MIDI out EP 0 [ 885.497991][T18220] fuse: Unknown parameter 'rootmod' [ 885.561583][ T787] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 885.623675][ T8938] snd-usb-audio: probe of 3-1:27.0 failed with error -22 [ 885.657517][ T787] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 885.711504][ T787] usb 5-1: Product: syz [ 885.800435][ T787] usb 5-1: Manufacturer: syz [ 885.893182][ T787] usb 5-1: SerialNumber: syz [ 886.235592][ T787] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 57 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 886.457283][T18233] usb usb1: check_ctrlrecip: process 18233 (syz.5.3415) requesting ep 01 but needs 81 [ 886.473241][T18233] usb usb1: usbfs: process 18233 (syz.5.3415) did not claim interface 0 before use [ 886.581532][T18236] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3416'. [ 886.599382][T18236] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3416'. [ 886.695896][T18236] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3416'. [ 886.723586][T18236] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3416'. [ 887.083263][T18230] netlink: 'syz.3.3414': attribute type 8 has an invalid length. [ 887.100737][T18230] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 887.430029][ T5782] usb 3-1: USB disconnect, device number 55 [ 887.701893][T14997] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 887.827552][T18252] netlink: 'syz.2.3420': attribute type 4 has an invalid length. [ 887.856486][T18252] netlink: 'syz.2.3420': attribute type 4 has an invalid length. [ 888.045081][T14997] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 888.077204][T14997] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.107845][T18260] syzkaller1: entered promiscuous mode [ 888.113613][T18260] syzkaller1: entered allmulticast mode [ 888.128947][T18260] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 888.188293][T14997] usb 4-1: config 0 descriptor?? [ 888.328571][T14997] cp210x 4-1:0.0: cp210x converter detected [ 888.469678][ T5782] usb 5-1: USB disconnect, device number 57 [ 888.560123][ T5782] usblp0: removed [ 888.730476][T18268] IPVS: sh: FWM 3 0x00000003 - no destination available [ 888.752877][ C0] IPVS: sh: FWM 3 0x00000003 - no destination available [ 889.335005][T18274] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 889.471893][ T5782] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 889.682480][ T5782] usb 5-1: Using ep0 maxpacket: 16 [ 889.690558][ T5782] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 889.711151][ T5782] usb 5-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 889.720709][ T5782] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 889.736615][ T5782] usb 5-1: Product: syz [ 889.741005][ T5782] usb 5-1: Manufacturer: syz [ 889.748335][ T5782] usb 5-1: SerialNumber: syz [ 889.766651][ T5782] usb 5-1: config 0 descriptor?? [ 889.814215][ T5782] hub 5-1:0.0: bad descriptor, ignoring hub [ 889.908006][ T5782] hub: probe of 5-1:0.0 failed with error -5 [ 889.958141][ T5782] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 890.294679][ T5782] snd-usb-audio: probe of 5-1:0.0 failed with error -2 [ 890.357258][T18288] syzkaller1: entered promiscuous mode [ 890.368909][T18288] syzkaller1: entered allmulticast mode [ 890.443493][ T5782] usb 5-1: USB disconnect, device number 58 [ 890.470424][T18288] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 890.476240][ T5765] udevd[5765]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 890.921772][ T130] unregister_netdevice: waiting for lo to become free. Usage count = 2 [ 890.936827][ T130] ref_tracker: lo@ffff8880608785b8 has 1/1 users at [ 890.936827][ T130] dst_init+0xd9/0x460 [ 890.936827][ T130] dst_alloc+0x12e/0x170 [ 890.936827][ T130] ip_route_output_key_hash_rcu+0x14f0/0x2360 [ 890.936827][ T130] ip_route_output_key_hash+0x1f3/0x330 [ 890.936827][ T130] ip_route_output_flow+0x2a/0x150 [ 890.936827][ T130] inet_sk_rebuild_header+0xa1a/0x1c20 [ 890.936827][ T130] __tcp_retransmit_skb+0x24f/0x1500 [ 890.936827][ T130] tcp_retransmit_skb+0x32/0x360 [ 890.936827][ T130] tcp_retransmit_timer+0x19e9/0x3020 [ 890.936827][ T130] tcp_write_timer+0x12a/0x280 [ 890.936827][ T130] call_timer_fn+0x189/0x540 [ 890.936827][ T130] __run_timers+0x542/0x800 [ 890.936827][ T130] run_timer_softirq+0x67/0xf0 [ 890.936827][ T130] handle_softirqs+0x280/0x820 [ 890.936827][ T130] __irq_exit_rcu+0xd3/0x190 [ 890.936827][ T130] irq_exit_rcu+0x9/0x20 [ 890.936827][ T130] [ 891.122296][T18295] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 891.343751][T14997] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 891.351296][T14997] cp210x 4-1:0.0: querying part number failed [ 891.386955][T14997] usb 4-1: cp210x converter now attached to ttyUSB0 [ 891.407753][T14997] usb 4-1: USB disconnect, device number 53 [ 891.428998][T14997] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 891.450247][T14997] cp210x 4-1:0.0: device disconnected [ 891.521936][ T8938] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 891.705310][ T8938] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 891.727583][ T8938] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 891.739083][ T8938] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 891.775421][ T8938] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 891.787779][ T8938] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 891.802302][ T8938] usb 5-1: Product: syz [ 891.810608][ T8938] usb 5-1: Manufacturer: syz [ 891.816309][ T8938] usb 5-1: SerialNumber: syz [ 892.050198][ T8938] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 59 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 893.900903][ T5782] usb 5-1: USB disconnect, device number 59 [ 893.940926][ T5782] usblp0: removed