last executing test programs: 14.633912504s ago: executing program 2 (id=7168): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000000)=0x639) read$FUSE(r1, &(0x7f0000001ac0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f00000002c0)={{0x0, 0x5, 0xfeff, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x1, r2, 0x0, 0x0, 'syz1\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x9) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3c, 0x28, 0x64, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0xffffff}}}}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000040)={0xb}, 0x11000) write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x0, 0x0, {0x7}}, 0x18) 13.681978049s ago: executing program 2 (id=7171): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_gact={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0xbbd, 0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x8, 0x5, 0x2, 0x7fffffff}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accb", 0x26}], 0x1}, 0x4) 10.525200674s ago: executing program 2 (id=7178): openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000740)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r2, 0x0, 0x1, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x32c180) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa, 0x0, 0x6, 0x0, 0x4000000000000009, 0x10200}) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) dup(r4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="04fa81060c0db5f2a900000000000000000000000009000000"], 0x7) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000001780)={&(0x7f0000001540)=[0x0, 0x0], 0x0, &(0x7f0000001680)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000016c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000074000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021380011800a0001006c696d6974000000280002800c00024000000000000000030c00014000000000000001010c0001400000000000000101b81700000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000008c1703800c0000800800034000000002"], 0x1874}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 8.336772504s ago: executing program 2 (id=7188): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_gact={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0xbbd, 0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x8, 0x5, 0x2, 0x7fffffff}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accb", 0x26}], 0x1}, 0x4) 6.939267336s ago: executing program 4 (id=7190): r0 = syz_io_uring_setup(0xb7f, &(0x7f0000000180)={0x0, 0x38ab, 0x80, 0x0, 0x1e6}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x0, 0x3, 0xf4}, {&(0x7f00000003c0)="8380cc24f406e4af8788e68e563ee89a3b53a0b4e14616007907e40fb56cd053d925a474d634554c764e2594d4725c4e8d7a42398a86fb", 0x37, 0x1}, {0x0, 0x0, 0x3}, {0x0, 0x0, 0x2}]}, 0x4, 0x1}, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x20, 0x3, 0x7, 0x301, 0x0, 0x0, {0x5, 0x0, 0xd}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x10) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r3, 0x0, 0x0, 0x0, 0x322, 0x1, {0x1}}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 6.841229604s ago: executing program 4 (id=7191): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x15c, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x6}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x118, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0xe4, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0xb0, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x7d, 0x6, "726786f34dc39a3b098ea66afe225634df06865f963558e69516e656d15a7bffd40d6b35a7cb0a81d91a32f3526df62c3656627a31fd4643463759cedb7d31fb4b0db4d6d71283c72d0d912fdfe0ced8711d9fd772c8265f0d23fbc164ea691e6075fdd0ab4811c58486a19ec8448e67a9c766be39943871ae"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x6}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, 0x0) 5.894672891s ago: executing program 4 (id=7192): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20040010) bind$alg(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0x76, 0x103901) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000040)={0x80, 0x8, 0x7ff, 0x0, 0x0, 0xf421, 0x0}) fsopen(0x0, 0x0) openat$sequencer2(0xffffff9c, 0x0, 0x94600, 0x0) syz_open_procfs(0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r3, 0x40086603, &(0x7f0000000040)) preadv(r1, &(0x7f0000000640)=[{&(0x7f0000000b00)=""/152, 0x98}, {&(0x7f0000000500)=""/189, 0x7fffef68}], 0x2, 0x300100, 0x0) 5.797295681s ago: executing program 2 (id=7193): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0x16, 0x4, "94c161ee"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000140)={0x0, 0xf, 0x4, "c7a13997"}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000740)={0x34, &(0x7f0000000240)=ANY=[@ANYBLOB="40fa04"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000039c0)={0x44, &(0x7f0000000280)={0x40, 0x7, 0x4, "ca3bca96"}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x20, 0x83, 0x1, "f1"}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 5.762817786s ago: executing program 1 (id=7194): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socket$netlink(0x10, 0x3, 0xf) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) personality(0xbe4e602dc9e6c1d3) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) link(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x8e79f0352167ea94) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000300)="f30fc7727866baf80cb892035c88ef66bafc0c66baf80cb880b14b8cef66bafc0cec0f019bde32f050c2c272192fb09e00c0fefe0f3803e2c744240000800000c744240200000100c7442406000000000f091424655066ed650fc7907cd7b8010000000f01c1b835018ed80f2243", 0x6e}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000000)={0x1, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 5.72805493s ago: executing program 3 (id=7195): r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_getsetattr(r0, &(0x7f00000001c0)={0x0, 0x1, 0x7, 0x5}, &(0x7f0000000200)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 5.639770004s ago: executing program 3 (id=7196): r0 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_open_dev$sndpcmp(&(0x7f0000000140), 0x4fe, 0x202240) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000011c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r4, 0xc0505405, 0x0) io_uring_enter(r0, 0x351a, 0x100, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) close(r5) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r3) 5.171068593s ago: executing program 3 (id=7198): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) bpf$BPF_LINK_CREATE(0x8, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x5, 0x0, @val=@tracing={0x0, 0xbe3}}, 0x20) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x3, 0x84}}}, 0x8c}, 0x1, 0x0, 0x0, 0xc800}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x0, 0xa}}, 0x20) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, &(0x7f0000000240)={0x1, 0x0, 0x200, 0x10001, 0xffffffffffffffff, 0x8, 0x2, 0x200, 0x4, 0x2c, 0x80000005, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ptrace(0x10, r5) r6 = syz_open_dev$dri(&(0x7f0000000300), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x7fff, 0xb, 0xa, 0xfffffff6, {0x403, 0x1, 0x3, 0x8, 0x20, 0x7, 0x5, 0x6, 0x22, 0x5, 0x7f, 0x9c14, 0x20000a, 0x8d12074f, "0010b45adb3bdf6bbf43f7e7bdcf42a72e6ca213e20b354ba4e274f7720904f6"}}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r3, 0xc0984124, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r9, {0xffe0}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4040940}, 0x0) 4.987350335s ago: executing program 3 (id=7199): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0xf3a, 0x0) write(r1, &(0x7f0000000240), 0x0) close(r4) tee(r0, r5, 0x8f5, 0x0) write(r2, 0x0, 0x0) 4.711791284s ago: executing program 1 (id=7201): setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x23) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="ce", 0x1}], 0x1}}], 0x1, 0x20040001) sendto$inet(0xffffffffffffffff, &(0x7f0000000040)='l', 0x1, 0x2b082370997e5c4b, 0x0, 0x0) 4.640323587s ago: executing program 1 (id=7202): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x15c, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x6}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x118, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0xe4, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0xb0, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x7d, 0x6, "726786f34dc39a3b098ea66afe225634df06865f963558e69516e656d15a7bffd40d6b35a7cb0a81d91a32f3526df62c3656627a31fd4643463759cedb7d31fb4b0db4d6d71283c72d0d912fdfe0ced8711d9fd772c8265f0d23fbc164ea691e6075fdd0ab4811c58486a19ec8448e67a9c766be39943871ae"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x6}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, 0x0) 4.572156694s ago: executing program 1 (id=7203): socket$netlink(0x10, 0x3, 0x0) socketpair(0x11, 0x3, 0x0, &(0x7f00000001c0)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x180, 0x0) ioctl$TIOCGSOFTCAR(r0, 0x5414, &(0x7f0000000000)) 4.394830667s ago: executing program 1 (id=7204): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_gact={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0xbbd, 0x3}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x8, 0x5, 0x2, 0x7fffffff}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accb", 0x26}], 0x1}, 0x4) 4.342512246s ago: executing program 4 (id=7205): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syncfs(r2) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004700008c000000020021907800000000ffffffff44140f63ac14140a000000036401010000000001862a000000030509c3bf0efb3f66f5020758260c5e6e020cb04d4f2a694cd64079960502050689f855370708193ab16f39b60000050090787f0000014a0000000000000000000000ac1e0001ac141401071300e000000200000000ffffffffac14140c00"], 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'team0\x00'}) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYRES16=r5, @ANYRES32=r6, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES8=r4, @ANYBLOB, @ANYRES16=r3], 0x3c}}, 0x44080) r9 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r9, &(0x7f00000000c0)={0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="0000f50000000341e9"], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r9, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r9, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000001c0)=ANY=[@ANYBLOB='@\n\x00\x00\x00\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) memfd_create(0x0, 0x4) syz_open_dev$usbfs(&(0x7f0000000480), 0x28f9, 0x41341) 4.072905595s ago: executing program 3 (id=7206): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES16], 0x7c}, 0x1, 0x0, 0x0, 0x4004040}, 0x20008040) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)={0x58, 0x7, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_USERDATA={0x1b, 0x7, 0x1, 0x0, "f83ce403611270f5047811ea0a6278b2267ddd5f1010f6"}, @NFTA_RULE_USERDATA={0x19, 0x7, 0x1, 0x0, "03fd1a1bb66cd2cfe28ef4ed39e3f5842a858f0743"}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004881}, 0x4008000) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000280)='erspan0\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x24}}, 0x0) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, 0x0, 0x48) syz_80211_inject_frame(0x0, 0x0, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x3c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r10 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$qrtr(r10, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000700)=""/192, 0xc0}], 0x1, 0x0, 0x0, 0x10000}, 0x38, 0x2) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000001400000008000a"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3.216735813s ago: executing program 0 (id=7207): r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_getsetattr(r0, &(0x7f00000001c0)={0x0, 0x1, 0x7, 0x5}, &(0x7f0000000200)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3.081242023s ago: executing program 0 (id=7208): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000002240)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_open_procfs(0x0, &(0x7f0000000480)='pagemap\x00') socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20040010) bind$alg(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000200), 0x76, 0x103901) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000040)={0x80, 0x8, 0x7ff, 0x0, 0x0, 0xf421, 0x0}) fsopen(0x0, 0x0) openat$sequencer2(0xffffff9c, 0x0, 0x94600, 0x0) r2 = syz_open_procfs(0x0, 0x0) readlinkat(r2, 0x0, &(0x7f0000000180)=""/10, 0xa) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r3, 0x40086603, &(0x7f0000000040)) 2.892945415s ago: executing program 0 (id=7209): openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2000, 0xed) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0) rmdir(&(0x7f0000000240)='./cgroup/../file0\x00') write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="1c706572665f6576656e7420ad"], 0xc) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x304}, "480ca6eda49ed6a6", "3a2cc8b276a753b0e23e2a8436b0e1d53d11b70c57abe2e932240e766d3aebfd", "a0eb068e", "e96e232f2004a832"}, 0x38) recvfrom$inet6(r3, &(0x7f00000003c0)=""/183, 0xb7, 0x40010002, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r7, 0x0, 0x7ffd, 0xe) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r7, 0x4068aea3, &(0x7f0000000000)={0xdb, 0x0, 0x8}) 1.969102108s ago: executing program 0 (id=7210): openat$mice(0xffffffffffffff9c, &(0x7f0000001400), 0x101) epoll_create(0xff9) open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) read$FUSE(r0, &(0x7f00000065c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r2}, 0x10) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20080, 0x0) dup3(r3, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x300, 0x300, 0x0, 0x0, 0x0, 0x37a0}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]}) close_range(r4, 0xffffffffffffffff, 0x0) 1.89342692s ago: executing program 2 (id=7211): socket$inet_sctp(0x2, 0x1, 0x84) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) futex_waitv(&(0x7f00000047c0)=[{0x5, 0x0, 0x82}], 0x1, 0x0, 0x0, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) r2 = openat$khugepaged_scan(0xffffff9c, &(0x7f00000002c0), 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) write$khugepaged_scan(r2, &(0x7f0000000040), 0x8) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, 0x1e, 0xa01, 0x2, 0x0, {0xa}}, 0x14}}, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) r6 = syz_open_dev$dri(&(0x7f00000010c0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r6, 0xc03064ca, &(0x7f0000000340)={0x0, 0x0}) 1.822949748s ago: executing program 0 (id=7212): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socket$netlink(0x10, 0x3, 0xf) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) personality(0xbe4e602dc9e6c1d3) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) link(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x8e79f0352167ea94) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000300)="f30fc7727866baf80cb892035c88ef66bafc0c66baf80cb880b14b8cef66bafc0cec0f019bde32f050c2c272192fb09e00c0fefe0f3803e2c744240000800000c744240200000100c7442406000000000f091424655066ed650fc7907cd7b8010000000f01c1b835018ed80f2243", 0x6e}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000000)={0x1, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 891.604718ms ago: executing program 4 (id=7213): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x15c, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x6}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x118, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0xe4, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0xb0, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x7d, 0x6, "726786f34dc39a3b098ea66afe225634df06865f963558e69516e656d15a7bffd40d6b35a7cb0a81d91a32f3526df62c3656627a31fd4643463759cedb7d31fb4b0db4d6d71283c72d0d912fdfe0ced8711d9fd772c8265f0d23fbc164ea691e6075fdd0ab4811c58486a19ec8448e67a9c766be39943871ae"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x6}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, 0x0) 655.870266ms ago: executing program 0 (id=7214): socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000a40), 0x5d, 0x4000000) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x60, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_connect(0x5, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x2}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f0000000080)) syz_usb_connect$cdc_ecm(0x6, 0x5a, &(0x7f00000001c0)=ANY=[], 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000004ef60ad12b1ef9b432a2903d90400000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket(0x10, 0x1, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000280)={0x3, 0x0, 0x9, 0x3}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000001200010a27bd7000fdffffff800000001400a800fe80000000000000000000000000ffffad8b19fc299aa4ec222d5ad3651a326a175b2e1ba82e1675d3d0e3b5b008c0570400b4ebf31a585fd14b29242bc92047080de64c5f16d40f5f76c60bf39bdc84eebeaae7f8f1dfbfac48db129321e15c58330d9ad91f2a7cddd8722a32da62c6a3f777558612d20d4f2eb60e345aa09e8fe7b2d6836594b25f2bb7d8a84e6cccee637f5038c90b3a4887c38a7d55000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000050}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_CREATE_PIT2(r8, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_GET_PIT2(r8, 0x8070ae9f, &(0x7f00000003c0)) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x2000000, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}}, 0x24}}, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) openat$rfkill(0xffffff9c, &(0x7f0000000140), 0x60041, 0x0) 179.5708ms ago: executing program 4 (id=7215): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}]}, 0x3c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'ip6gre0\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 137.841266ms ago: executing program 3 (id=7216): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000000)={0x79}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) unshare(0x22020400) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket(0x1d, 0x2, 0x6) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000001840)={0x10000000}) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000380)={0x1d, r5, 0x1, {0x0, 0x0, 0x3}, 0xff}, 0x18) sendmsg$nl_route_sched_retired(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000018c0)=@newchain={0x950, 0x64, 0x200, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xa, 0xf}, {0xc, 0x9}, {0xffe0, 0x8}}, [@f_tcindex={{0xc}, {0x8a0, 0x2, [@TCA_TCINDEX_HASH={0x8, 0x1, 0xe8b2}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0xfff1, 0xfff3}}, @TCA_TCINDEX_SHIFT={0x8}, @TCA_TCINDEX_POLICE={0x874, 0x6, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x4, 0x7, 0xd1, 0x1, 0x814, 0x100, 0x31bd9a08, 0xa, 0x87e6, 0x7, 0x6, 0x8001, 0x597, 0x6, 0x2, 0x5, 0x8, 0x2, 0x7ff, 0x5, 0x4, 0x9, 0x8, 0x188a, 0x9, 0x101, 0x0, 0xe2, 0x40, 0xb07, 0xfffffffb, 0x0, 0x7f, 0x19, 0x15b, 0xfffffff8, 0x7, 0x10, 0x9, 0x81, 0xb1600, 0x1, 0x0, 0x5, 0x9, 0x66d, 0x13, 0x86, 0x8, 0xffffffff, 0xc58, 0x4, 0xc2, 0x2, 0x3, 0xf, 0x6, 0xc, 0x10, 0x9, 0x101, 0x7, 0x9, 0x6dd, 0xfffffffa, 0x0, 0x1, 0xb, 0x1, 0x80000001, 0x81, 0x7ff8000, 0x0, 0xa, 0xfd9, 0x7, 0x51, 0x7, 0x1, 0x401, 0xe5, 0x8, 0x4, 0x5, 0x1, 0x401, 0x0, 0x4, 0xfffffffb, 0x48, 0xd4, 0x10, 0x6e, 0xfff, 0xa, 0x1, 0x10000, 0xa8f, 0x4c37, 0x0, 0x5, 0x8, 0x4, 0x800, 0x3, 0x9e4, 0x1, 0x32, 0x8, 0x9, 0x101, 0x9, 0x1, 0xf, 0x2, 0x1, 0x2, 0x4b77, 0x6, 0x3, 0x3ff, 0x4, 0xfffffff5, 0x1, 0x1000, 0x3, 0x7, 0x7ff, 0x6, 0x3, 0x6, 0x5, 0x7, 0x5, 0x3, 0x200, 0x3, 0x8, 0x1, 0xbf, 0x4, 0x9, 0x9, 0x0, 0x2, 0x1, 0x8, 0x32a0, 0xff, 0x2, 0x4f44, 0x38c, 0x0, 0x7, 0xffffffff, 0x0, 0xffffff80, 0x0, 0xe2f, 0x8, 0xffffffff, 0xfcc, 0x10001, 0x4, 0x4, 0x3, 0x27, 0xe, 0x2, 0xe33f, 0x5f9a05d2, 0x8001, 0x7, 0x4923, 0x8, 0x4b, 0xfffffff9, 0x5, 0x9, 0x5, 0x7, 0x3, 0x1, 0x3, 0x0, 0x4, 0x7, 0x408b, 0x9, 0x27d, 0x1ff, 0x9, 0x0, 0x567, 0x9, 0x8, 0x3, 0x101, 0x6, 0x7, 0xfffffff7, 0x5a, 0x3, 0x6, 0x9, 0xffffffff, 0x7, 0xfffffff9, 0x1, 0xfff, 0x10, 0x0, 0x468, 0x10001, 0x3, 0x441, 0x5, 0x21c9, 0xffff, 0x1000, 0x81, 0x6, 0x6, 0x7, 0x2, 0x8, 0x400, 0x4, 0x80, 0x0, 0x7, 0x1000, 0x3, 0x0, 0x4, 0x8, 0x7, 0x7fff, 0x10, 0x1dd1, 0x62c, 0x8, 0x3, 0x7b2, 0x9, 0x9, 0x0, 0x3, 0xc, 0x2, 0x8000, 0x6, 0xc, 0x100, 0x1]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x10, 0x2, 0x96, 0x9, 0x24000000, 0x6, 0x0, 0xf, 0x9, 0xc, 0x7381, 0x100, 0x200, 0x4, 0x98bb, 0xffffff01, 0x2, 0x2, 0x3, 0xc, 0x4, 0xa4, 0x9, 0x0, 0x7f, 0x8, 0x1000000, 0x3, 0xffffffff, 0x300000, 0x8, 0x5, 0xc, 0x7, 0x66f4, 0x80000001, 0x6, 0x5, 0x2, 0x10001, 0x3, 0x3, 0x1, 0x8, 0x8, 0x8, 0x0, 0xb0, 0x1, 0x34, 0x0, 0xc, 0x4, 0x9, 0xf, 0x200, 0x1f54, 0x1, 0x0, 0x80000000, 0x9b, 0xd, 0x1, 0x854c, 0x36, 0x1000, 0x4, 0xff, 0x3, 0x2, 0xfffffff8, 0x9, 0x9, 0x8, 0xec, 0xfffffff9, 0xff, 0x6, 0x9, 0x401, 0x9977, 0xe3, 0x0, 0xf, 0x4, 0x2f, 0x3, 0x4, 0xfffffffd, 0x9, 0x4, 0x8, 0xb, 0x6, 0x2, 0x0, 0x9c83, 0x2, 0x9, 0x3, 0x8, 0x3, 0xffffffa1, 0x81, 0x8, 0x1, 0x3, 0x4c3, 0x6, 0x200000, 0x9, 0x6, 0x3, 0x4, 0x307, 0xff, 0x0, 0x7, 0x1, 0xc03, 0x8, 0xf3, 0x7, 0x4, 0xc3, 0x2, 0x1, 0x4, 0x5, 0x1, 0xfffffffb, 0x3, 0xffff, 0x10, 0x7, 0xffffffff, 0x7, 0xc06b, 0x8, 0x9, 0x3, 0x1, 0x0, 0xe, 0x1, 0x0, 0x2, 0x6f, 0x6, 0x0, 0x0, 0x6, 0x1, 0x3, 0x4, 0x10, 0xb228, 0x8, 0xff, 0x3, 0x5, 0x4, 0x4, 0x2, 0xff, 0x5c75694d, 0xb, 0x7fffffff, 0x7, 0x9, 0x66, 0x8, 0x8e, 0x730, 0x7f, 0x81, 0x3, 0x2, 0x74b, 0x0, 0x1, 0x401, 0x400, 0x1, 0x6, 0x8, 0x8000, 0x9, 0x4, 0x5, 0x8, 0x6, 0xffffffff, 0x80000000, 0x800, 0x5b, 0x1ff, 0x101, 0xe, 0xedba, 0x4, 0x8f8, 0x7, 0xffffff81, 0x2, 0x5, 0x40, 0x40, 0x6, 0x6, 0x1, 0x9, 0x9, 0x7, 0x5607, 0x6, 0x2, 0x7fffffff, 0x7, 0x5, 0x8, 0x7, 0x56, 0x9, 0x5a, 0x3, 0x2, 0x7f, 0x80000001, 0x8c2, 0x5, 0x6, 0x43d9, 0x80000001, 0x6, 0x8, 0x5, 0x481a, 0x8001, 0x1, 0x3, 0x100, 0x0, 0x667, 0x64, 0x6, 0xfff, 0xfffffffa, 0x5, 0x3, 0x1, 0x2, 0x5, 0x3, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x10000000, 0x7, 0x8, 0x94be, {0x1d, 0x0, 0xfff9, 0x3, 0x9, 0xd}, {0xf, 0x2, 0x9, 0x342, 0xfffc, 0x401}, 0x4, 0x6ad, 0x80000000}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfff}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x40}]}, @TCA_TCINDEX_FALL_THROUGH={0x8, 0x4, 0x1}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0x7, 0xf}}]}}, @f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_CLASSID={0x8, 0x5, {0x1, 0x6}}]}}, @f_rsvp={{0x9}, {0x5c, 0x2, [@TCA_RSVP_DST={0x8, 0x2, @broadcast}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x9, 0x1}}, @TCA_RSVP_POLICE={0x48, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0xffff, 0x3, 0x7f, 0x392e, 0x0, {0x1, 0x2, 0x1fa0, 0x700, 0x7, 0x9}, {0x2, 0x0, 0x5, 0x799, 0xff80, 0x9}, 0x0, 0x7, 0x3}}, @TCA_POLICE_AVRATE={0x8}]}]}}]}, 0x950}, 0x1, 0x0, 0x0, 0x84}, 0x0) r6 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETS(r6, 0x5402, &(0x7f0000000000)={0xed6, 0x4, 0x10, 0xfffffff7, 0x13, "4ca86f9c3bc93e60e0a255076b5e266d108b42"}) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/wireless\x00') preadv(r7, &(0x7f00000026c0)=[{&(0x7f0000000240)=""/4088, 0xff8}], 0x1, 0x15f, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r8, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_addr=@multicast2, @remote}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r8, 0x0, 0xd2, &(0x7f0000000280)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae"}, 0x3c) syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file0\x00', 0x1000a0, 0x0, 0xfe, 0x0, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000001240)=ANY=[@ANYBLOB="e895b0e1473d0ed1009c5942b2add9b5027f8d7d6fdbb9d2b34623be85bd7e2d36e1fc0f951c6c9fc562b2b6f344765a7db3e0761d702e31135e413570d796dc30e2cbe6850b44c2f9b0c10e734e8f9e6ce11921fc278bcf78c6227d", @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000000080)={0x50, 0x0, r10, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r9, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 1 (id=7217): socket$inet_sctp(0x2, 0x1, 0x84) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) futex_waitv(&(0x7f00000047c0)=[{0x5, 0x0, 0x82}], 0x1, 0x0, 0x0, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) r2 = openat$khugepaged_scan(0xffffff9c, &(0x7f00000002c0), 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) write$khugepaged_scan(r2, &(0x7f0000000040), 0x8) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, 0x1e, 0xa01, 0x2, 0x0, {0xa}}, 0x14}}, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x14}}, 0x0) r6 = syz_open_dev$dri(&(0x7f00000010c0), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r6, 0xc03064ca, &(0x7f0000000340)={0x0, 0x0}) kernel console output (not intermixed with test programs): 9 code=0x7ffc0000 [ 1219.671210][ T30] audit: type=1326 audit(1764846375.334:6726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25530 comm="syz.0.6603" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cd539 code=0x7ffc0000 [ 1219.978217][T13820] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 1220.147032][T13820] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1220.161989][T13820] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1220.183478][T13820] usb 1-1: Product: syz [ 1220.189906][T13820] usb 1-1: Manufacturer: syz [ 1220.194836][T13820] usb 1-1: SerialNumber: syz [ 1220.217453][T13820] r8152-cfgselector 1-1: Unknown version 0x0000 [ 1220.234793][T13820] r8152-cfgselector 1-1: config 0 descriptor?? [ 1220.543252][T13830] usb 3-1: USB disconnect, device number 82 [ 1220.589903][T22021] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1220.656750][ T6964] r8152-cfgselector 1-1: USB disconnect, device number 104 [ 1220.758160][T22021] usb 5-1: Using ep0 maxpacket: 16 [ 1220.780565][T22021] usb 5-1: config index 0 descriptor too short (expected 4495, got 71) [ 1220.802341][T25556] fuse: Unknown parameter 'è•°áG' [ 1220.807525][T22021] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 1220.830733][T22021] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1220.864150][T22021] usb 5-1: config 0 has no interface number 0 [ 1220.893507][T22021] usb 5-1: New USB device found, idVendor=046c, idProduct=14e0, bcdDevice= 0.01 [ 1220.903785][T22021] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1220.913471][T22021] usb 5-1: Product: syz [ 1220.917791][T22021] usb 5-1: Manufacturer: syz [ 1220.929145][T22021] usb 5-1: SerialNumber: syz [ 1220.945202][T22021] usb 5-1: config 0 descriptor?? [ 1221.264601][T22021] uvcvideo 5-1:0.105: Found UVC 0.00 device syz (046c:14e0) [ 1221.290325][T22021] uvcvideo 5-1:0.105: No valid video chain found. [ 1221.312045][T22021] usb 5-1: USB disconnect, device number 99 [ 1221.462010][ T30] audit: type=1326 audit(1764846377.234:6727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25565 comm="syz.4.6615" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 1221.508008][ T30] audit: type=1326 audit(1764846377.234:6728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25565 comm="syz.4.6615" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 1221.567930][ T30] audit: type=1326 audit(1764846377.234:6729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25565 comm="syz.4.6615" exe="/root/syz-executor" sig=0 arch=40000003 syscall=282 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 1221.663026][ T30] audit: type=1326 audit(1764846377.234:6730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25565 comm="syz.4.6615" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 1221.688229][ T6928] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 1221.751470][ T30] audit: type=1326 audit(1764846377.234:6731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25565 comm="syz.4.6615" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 1221.828331][ T6928] usb 1-1: device descriptor read/64, error -71 [ 1222.088535][ T6928] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 1222.238120][ T6928] usb 1-1: device descriptor read/64, error -71 [ 1222.248172][ T6964] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1222.278140][ T5912] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1222.368442][ T6928] usb usb1-port1: attempt power cycle [ 1222.418117][ T6964] usb 4-1: Using ep0 maxpacket: 32 [ 1222.437306][ T6964] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 1222.462942][ T5912] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1222.477174][ T5912] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1222.488093][ T6964] usb 4-1: config 0 has no interface number 0 [ 1222.505230][ T5912] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 1222.522562][ T5912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1222.522602][ T6964] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1222.566534][ T6964] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1222.587315][ T6964] usb 4-1: Product: syz [ 1222.588696][ T5912] usb 3-1: config 0 descriptor?? [ 1222.596978][ T6964] usb 4-1: Manufacturer: syz [ 1222.619427][ T6964] usb 4-1: SerialNumber: syz [ 1222.660707][ T6964] usb 4-1: config 0 descriptor?? [ 1222.686171][ T6964] smsc95xx v2.0.0 [ 1222.718220][ T6928] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 1222.759848][ T6928] usb 1-1: device descriptor read/8, error -71 [ 1223.028280][ T6928] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 1223.070090][ T5912] usbhid 3-1:0.0: can't add hid device: -71 [ 1223.076177][ T5912] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1223.098517][ T6928] usb 1-1: device descriptor read/8, error -71 [ 1223.118443][ T6964] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1223.128770][ T5912] usb 3-1: USB disconnect, device number 83 [ 1223.141597][ T6964] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1223.248576][ T6928] usb usb1-port1: unable to enumerate USB device [ 1223.721157][T25593] netlink: 'syz.2.6626': attribute type 10 has an invalid length. [ 1223.733196][T25593] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1223.748432][ T6928] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1223.756807][T25593] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6626'. [ 1223.768364][T25592] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1223.898161][ T6928] usb 5-1: Using ep0 maxpacket: 8 [ 1223.907751][ T6928] usb 5-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 1223.917166][ T6928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1223.925390][ T6928] usb 5-1: Product: syz [ 1223.929898][ T6928] usb 5-1: Manufacturer: syz [ 1223.934525][ T6928] usb 5-1: SerialNumber: syz [ 1223.941921][ T6928] usb 5-1: config 0 descriptor?? [ 1223.953393][ T6928] option 5-1:0.0: GSM modem (1-port) converter detected [ 1223.968017][ T6964] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1223.979904][ T6964] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -61 [ 1224.154286][T25589] netlink: 'syz.4.6624': attribute type 32 has an invalid length. [ 1224.162304][T25589] netlink: 'syz.4.6624': attribute type 32 has an invalid length. [ 1224.905892][ T5912] usb 5-1: USB disconnect, device number 100 [ 1224.934470][ T5912] option 5-1:0.0: device disconnected [ 1225.256407][ T6964] usb 4-1: USB disconnect, device number 119 [ 1225.519397][ T5912] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1225.714076][ T5912] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1225.749548][ T5912] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1225.776023][ T5912] usb 5-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 1225.805620][ T5912] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1225.837080][ T5912] usb 5-1: config 0 descriptor?? [ 1225.878492][ T6964] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 1226.038186][ T6964] usb 1-1: Using ep0 maxpacket: 16 [ 1226.046763][ T6964] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1226.058859][ T6964] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1226.072744][ T6964] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1226.087354][ T6964] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1226.098346][ T6964] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1226.114370][ T6964] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1226.124312][ T6964] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1226.132886][ T6964] usb 1-1: Manufacturer: syz [ 1226.142071][ T6964] usb 1-1: config 0 descriptor?? [ 1226.288575][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 1226.308304][ T5912] usbhid 5-1:0.0: can't add hid device: -71 [ 1226.314368][ T5912] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1226.359819][T25636] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20004 [ 1226.368186][ T5912] usb 5-1: USB disconnect, device number 101 [ 1227.278746][ T5912] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1227.300789][T25662] netlink: 'syz.4.6646': attribute type 10 has an invalid length. [ 1227.312425][T25662] bridge0: port 2(bridge_slave_1) entered disabled state [ 1227.320250][T25662] bridge0: port 1(bridge_slave_0) entered disabled state [ 1227.374193][T25662] bridge0: port 2(bridge_slave_1) entered blocking state [ 1227.381548][T25662] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1227.389217][T25662] bridge0: port 1(bridge_slave_0) entered blocking state [ 1227.396341][T25662] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1227.431248][T25662] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1227.492157][ T5912] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1227.501908][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1227.516623][ T5912] usb 3-1: Product: syz [ 1227.535965][ T5912] usb 3-1: Manufacturer: syz [ 1227.553962][ T5912] usb 3-1: SerialNumber: syz [ 1227.848169][ T5985] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1227.991728][ T5912] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1228.009992][ T5985] usb 5-1: Using ep0 maxpacket: 32 [ 1228.015708][ T5912] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1228.030760][ T5985] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 1228.039577][ T5985] usb 5-1: config 0 has no interface number 0 [ 1228.050839][ T5985] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1228.061948][ T5985] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1228.079530][T25669] tipc: Enabled bearer , priority 0 [ 1228.080783][ T5985] usb 5-1: Product: syz [ 1228.093372][ T5985] usb 5-1: Manufacturer: syz [ 1228.098308][ T5985] usb 5-1: SerialNumber: syz [ 1228.118798][ T5985] usb 5-1: config 0 descriptor?? [ 1228.128341][T25669] syzkaller0: entered promiscuous mode [ 1228.131410][ T5985] smsc95xx v2.0.0 [ 1228.133897][T25669] syzkaller0: entered allmulticast mode [ 1228.175365][T25669] tipc: Resetting bearer [ 1228.183998][T25668] tipc: Resetting bearer [ 1228.203771][T25668] tipc: Disabling bearer [ 1228.537139][ T5985] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1228.550040][ T5985] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1228.653633][ T5912] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPROTO [ 1228.688334][ T5912] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1228.700926][ T5912] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1228.748479][ T6964] rc_core: IR keymap rc-hauppauge not found [ 1228.761421][ T5912] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 1228.762884][ T6964] Registered IR keymap rc-empty [ 1228.780405][ T5912] usb 3-1: USB disconnect, device number 84 [ 1228.800671][ T6964] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1228.859167][ T6964] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1228.891356][ T6964] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1228.942017][ T6964] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input124 [ 1228.979225][ T6964] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1229.000579][T25678] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6651'. [ 1229.022378][ T6964] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1229.038379][T25678] ip6gretap0: entered promiscuous mode [ 1229.050723][T25678] macvtap3: entered promiscuous mode [ 1229.069026][ T6964] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1229.077965][T25678] macvtap3: entered allmulticast mode [ 1229.098309][T25678] ip6gretap0: entered allmulticast mode [ 1229.113765][T25681] ip6gretap0: left allmulticast mode [ 1229.125328][ T6964] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1229.138866][T25681] ip6gretap0: left promiscuous mode [ 1229.168175][ T6964] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1229.198190][ T6964] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1229.222553][ T6964] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1229.278188][ T6964] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1229.307095][ T6964] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1229.348175][ T6964] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1229.378900][ T6964] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 1229.381416][ T5985] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1229.387196][ T6964] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1229.407206][ T5985] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -61 [ 1229.431160][ T6964] usb 1-1: USB disconnect, device number 109 [ 1229.618226][ T6928] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1229.641260][T25690] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6654'. [ 1229.677910][T25690] netlink: 9 bytes leftover after parsing attributes in process `syz.2.6654'. [ 1229.688752][T25690] netlink: 9 bytes leftover after parsing attributes in process `syz.2.6654'. [ 1229.703862][T25690] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1229.778577][ T6928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1229.798113][ T6928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1229.815088][ T6928] usb 4-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 1229.838432][ T6928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1229.871322][ T6928] usb 4-1: config 0 descriptor?? [ 1230.307297][ T6928] hid_parser_main: 5 callbacks suppressed [ 1230.307312][ T6928] greenasia 0003:0E8F:0012.0054: unknown main item tag 0x0 [ 1230.335056][ T6928] greenasia 0003:0E8F:0012.0054: unknown main item tag 0x0 [ 1230.345844][ T6928] greenasia 0003:0E8F:0012.0054: unknown main item tag 0x0 [ 1230.355235][ T6928] greenasia 0003:0E8F:0012.0054: unknown main item tag 0x0 [ 1230.364145][ T6928] greenasia 0003:0E8F:0012.0054: unknown main item tag 0x0 [ 1230.386331][ T6928] greenasia 0003:0E8F:0012.0054: hidraw0: USB HID v0.00 Device [HID 0e8f:0012] on usb-dummy_hcd.3-1/input0 [ 1230.408437][ T6928] greenasia 0003:0E8F:0012.0054: no inputs found [ 1230.471652][T25704] syz_tun: entered allmulticast mode [ 1230.489108][T25703] syz_tun: left allmulticast mode [ 1230.530101][ T6928] usb 4-1: USB disconnect, device number 120 [ 1230.677396][ T5912] usb 5-1: USB disconnect, device number 102 [ 1230.779449][T25712] netlink: 'syz.2.6660': attribute type 10 has an invalid length. [ 1230.806922][T25710] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6659'. [ 1231.026705][T25712] bridge0: port 2(bridge_slave_1) entered disabled state [ 1231.034359][T25712] bridge0: port 1(bridge_slave_0) entered disabled state [ 1231.114578][T25712] bridge0: port 2(bridge_slave_1) entered blocking state [ 1231.121797][T25712] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1231.129239][T25712] bridge0: port 1(bridge_slave_0) entered blocking state [ 1231.136329][T25712] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1231.229057][T25712] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1231.259832][T25710] bridge_slave_1: left allmulticast mode [ 1231.271132][T25710] bridge_slave_1: left promiscuous mode [ 1231.283275][T25710] bridge0: port 2(bridge_slave_1) entered disabled state [ 1231.339172][T25710] bridge_slave_0: left allmulticast mode [ 1231.348865][T25710] bridge_slave_0: left promiscuous mode [ 1231.355261][T25710] bridge0: port 1(bridge_slave_0) entered disabled state [ 1232.442109][ T5985] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 1232.578172][ T5985] usb 4-1: device descriptor read/64, error -71 [ 1232.848362][ T5985] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1232.958799][ T5912] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 1232.998414][ T5985] usb 4-1: device descriptor read/64, error -71 [ 1233.118558][ T5985] usb usb4-port1: attempt power cycle [ 1233.138240][ T5912] usb 1-1: Using ep0 maxpacket: 8 [ 1233.179114][ T5912] usb 1-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 1233.195404][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1233.217083][ T5912] usb 1-1: Product: syz [ 1233.234235][ T5912] usb 1-1: Manufacturer: syz [ 1233.244390][ T5912] usb 1-1: SerialNumber: syz [ 1233.272917][ T5912] usb 1-1: config 0 descriptor?? [ 1233.468142][ T5985] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1233.477906][ T5912] option 1-1:0.0: GSM modem (1-port) converter detected [ 1233.528948][ T5985] usb 4-1: device descriptor read/8, error -71 [ 1233.650391][T25748] netlink: 'syz.0.6671': attribute type 32 has an invalid length. [ 1233.676544][T25748] netlink: 'syz.0.6671': attribute type 32 has an invalid length. [ 1233.798271][ T5985] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1233.858858][ T5985] usb 4-1: device descriptor read/8, error -71 [ 1234.040211][ T5985] usb usb4-port1: unable to enumerate USB device [ 1235.029903][ T6964] usb 1-1: USB disconnect, device number 110 [ 1235.052779][ T6964] option 1-1:0.0: device disconnected [ 1235.380259][ T30] audit: type=1326 audit(1764846391.154:6732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25785 comm="syz.2.6681" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 1235.407433][ T30] audit: type=1326 audit(1764846391.154:6733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25785 comm="syz.2.6681" exe="/root/syz-executor" sig=0 arch=40000003 syscall=434 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 1235.422159][T25786] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1235.444108][ T30] audit: type=1326 audit(1764846391.154:6734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25785 comm="syz.2.6681" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 1235.466449][ T30] audit: type=1326 audit(1764846391.154:6735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25785 comm="syz.2.6681" exe="/root/syz-executor" sig=0 arch=40000003 syscall=424 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 1235.489551][ T30] audit: type=1326 audit(1764846391.154:6736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25785 comm="syz.2.6681" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 1235.505566][T25786] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1235.512305][ T6964] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 1235.530041][ T30] audit: type=1326 audit(1764846391.154:6737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25785 comm="syz.2.6681" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 1235.532392][T25786] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1235.553858][ T30] audit: type=1326 audit(1764846391.154:6738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25785 comm="syz.2.6681" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 1235.587032][ T30] audit: type=1326 audit(1764846391.154:6739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25785 comm="syz.2.6681" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 1235.610414][ T30] audit: type=1326 audit(1764846391.154:6740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25785 comm="syz.2.6681" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 1235.632746][ T30] audit: type=1326 audit(1764846391.154:6741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25785 comm="syz.2.6681" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf703d539 code=0x7ffc0000 [ 1235.708123][ T6964] usb 1-1: Using ep0 maxpacket: 32 [ 1235.715643][ T6964] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 1235.727293][ T6964] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 1235.738571][ T6964] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1235.753712][ T6964] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1235.763494][ T6964] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1235.772036][ T6964] usb 1-1: Product: syz [ 1235.776208][ T6964] usb 1-1: Manufacturer: syz [ 1235.780879][ T6964] usb 1-1: SerialNumber: syz [ 1235.793321][ T6964] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input125 [ 1236.173087][ T5985] usb 1-1: USB disconnect, device number 111 [ 1236.214836][ T5985] appletouch 1-1:1.0: input: appletouch disconnected [ 1236.272104][T25796] netlink: 'syz.2.6685': attribute type 10 has an invalid length. [ 1236.321177][T25796] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6685'. [ 1236.331362][T25798] bond_slave_0: entered promiscuous mode [ 1236.334659][T25795] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1236.337058][T25798] bond_slave_1: entered promiscuous mode [ 1236.352575][T25798] mac80211_hwsim hwsim33 wlan1: entered promiscuous mode [ 1236.364982][T25798] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1236.369215][T25802] netlink: 'syz.3.6684': attribute type 10 has an invalid length. [ 1236.375664][T25798] bond1: (slave macvlan2): making interface the new active one [ 1236.388805][T25798] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 1236.398151][T25802] bridge0: port 2(bridge_slave_1) entered disabled state [ 1236.405586][T25802] bridge0: port 1(bridge_slave_0) entered disabled state [ 1236.421278][T25802] bridge0: port 2(bridge_slave_1) entered blocking state [ 1236.428511][T25802] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1236.436099][T25802] bridge0: port 1(bridge_slave_0) entered blocking state [ 1236.443296][T25802] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1236.452969][T25802] bridge0: entered promiscuous mode [ 1236.459024][T25802] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1236.578170][ T6928] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1236.599920][T25808] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6689'. [ 1236.709647][ T6928] usb 5-1: device descriptor read/64, error -71 [ 1236.948319][ T6928] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 1237.018160][ T6964] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 1237.058200][ T5985] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1237.080533][ T6928] usb 5-1: device descriptor read/64, error -71 [ 1237.148216][ T6964] usb 1-1: device descriptor read/64, error -71 [ 1237.192952][ T6928] usb usb5-port1: attempt power cycle [ 1237.228108][ T5985] usb 4-1: Using ep0 maxpacket: 8 [ 1237.237119][ T5985] usb 4-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 1237.246377][ T5985] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1237.254566][ T5985] usb 4-1: Product: syz [ 1237.259160][ T5985] usb 4-1: Manufacturer: syz [ 1237.263801][ T5985] usb 4-1: SerialNumber: syz [ 1237.270981][ T5985] usb 4-1: config 0 descriptor?? [ 1237.278340][ T5985] option 4-1:0.0: GSM modem (1-port) converter detected [ 1237.408203][ T6964] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 1237.482877][T25808] netlink: 'syz.3.6689': attribute type 32 has an invalid length. [ 1237.491048][T25808] netlink: 'syz.3.6689': attribute type 32 has an invalid length. [ 1237.548356][ T6964] usb 1-1: device descriptor read/64, error -71 [ 1237.554668][ T6928] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1237.592668][ T6928] usb 5-1: device descriptor read/8, error -71 [ 1237.658315][ T6964] usb usb1-port1: attempt power cycle [ 1237.838145][ T6928] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1237.869837][ T6928] usb 5-1: device descriptor read/8, error -71 [ 1237.977795][T25831] bridge0: port 2(bridge_slave_1) entered disabled state [ 1237.985071][T25831] bridge0: port 1(bridge_slave_0) entered disabled state [ 1237.993302][ T6928] usb usb5-port1: unable to enumerate USB device [ 1238.000075][ T6964] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 1238.028991][ T6964] usb 1-1: device descriptor read/8, error -71 [ 1238.169555][T22021] usb 4-1: USB disconnect, device number 125 [ 1238.186362][T22021] option 4-1:0.0: device disconnected [ 1238.268199][ T6964] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 1238.293169][T25839] bond1: option mode: unable to set because the bond device has slaves [ 1238.303305][ T6964] usb 1-1: device descriptor read/8, error -71 [ 1238.317084][T25839] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 1238.366066][T25840] netlink: 'syz.3.6699': attribute type 10 has an invalid length. [ 1238.374377][T25840] bridge0: port 2(bridge_slave_1) entered disabled state [ 1238.381636][T25840] bridge0: port 1(bridge_slave_0) entered disabled state [ 1238.418489][ T6964] usb usb1-port1: unable to enumerate USB device [ 1238.801865][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.808474][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.946625][T25849] netlink: 'syz.1.6702': attribute type 10 has an invalid length. [ 1238.961192][T25849] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1238.973632][T25849] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6702'. [ 1238.984885][T25848] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1238.988153][ T6964] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1239.148173][ T6964] usb 3-1: Using ep0 maxpacket: 32 [ 1239.154895][ T6964] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 1239.166269][ T6964] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 1239.177595][ T6964] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1239.192764][ T6964] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1239.202027][ T6964] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1239.210472][ T6964] usb 3-1: Product: syz [ 1239.214707][ T6964] usb 3-1: Manufacturer: syz [ 1239.219392][ T6964] usb 3-1: SerialNumber: syz [ 1239.232337][ T6964] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input126 [ 1239.628561][T25852] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6703'. [ 1239.681819][T25852] bridge_slave_1: left allmulticast mode [ 1239.687499][T25852] bridge_slave_1: left promiscuous mode [ 1239.711029][T25852] bridge0: port 2(bridge_slave_1) entered disabled state [ 1239.787990][T25852] bridge_slave_0: left allmulticast mode [ 1239.795190][T25852] bridge_slave_0: left promiscuous mode [ 1239.830212][T25852] bridge0: port 1(bridge_slave_0) entered disabled state [ 1239.880816][ T6964] usb 3-1: USB disconnect, device number 85 [ 1239.929512][ T6964] appletouch 3-1:1.0: input: appletouch disconnected [ 1239.941591][T25852] bond0: (slave bridge0): Releasing backup interface [ 1240.258118][ T5923] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 1240.381654][T25866] tipc: Enabled bearer , priority 0 [ 1240.390338][T25866] syzkaller0: entered promiscuous mode [ 1240.395827][T25866] syzkaller0: entered allmulticast mode [ 1240.413893][ T5923] usb 1-1: Using ep0 maxpacket: 16 [ 1240.421647][ T5923] usb 1-1: config index 0 descriptor too short (expected 4495, got 71) [ 1240.431545][T25866] tipc: Resetting bearer [ 1240.437848][ T5923] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 1240.447116][ T5923] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1240.457767][T25865] tipc: Resetting bearer [ 1240.457828][ T5923] usb 1-1: config 0 has no interface number 0 [ 1240.479561][ T5923] usb 1-1: New USB device found, idVendor=046c, idProduct=14e0, bcdDevice= 0.01 [ 1240.498260][ T5923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1240.506508][ T5923] usb 1-1: Product: syz [ 1240.507243][T25865] tipc: Disabling bearer [ 1240.517198][ T5923] usb 1-1: Manufacturer: syz [ 1240.522201][ T5923] usb 1-1: SerialNumber: syz [ 1240.533846][ T5923] usb 1-1: config 0 descriptor?? [ 1240.891255][ T5923] uvcvideo 1-1:0.105: Found UVC 0.00 device syz (046c:14e0) [ 1240.912597][ T5923] uvcvideo 1-1:0.105: No valid video chain found. [ 1240.931099][ T5923] usb 1-1: USB disconnect, device number 116 [ 1242.142675][T25891] bond0: (slave bridge0): Releasing backup interface [ 1242.157562][T25891] bridge_slave_0: left allmulticast mode [ 1242.165300][T25891] bridge_slave_0: left promiscuous mode [ 1242.174600][T25891] bridge0: port 1(bridge_slave_0) entered disabled state [ 1242.200569][T25891] bridge_slave_1: left allmulticast mode [ 1242.208666][T25891] bridge_slave_1: left promiscuous mode [ 1242.216991][T25891] bridge0: port 2(bridge_slave_1) entered disabled state [ 1242.232798][T25891] bond0: (slave bond_slave_0): Releasing backup interface [ 1242.242287][T25891] bond_slave_0: left promiscuous mode [ 1242.256696][T25891] bond0: (slave bond_slave_1): Releasing backup interface [ 1242.268684][T25891] bond_slave_1: left promiscuous mode [ 1242.283280][T25891] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1242.300598][T25891] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1242.323414][T25891] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1242.331040][T25891] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1242.344717][T25891] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1242.818362][ T6964] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1242.968368][ T6964] usb 5-1: device descriptor read/64, error -71 [ 1243.138167][T22021] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 1243.218225][ T6964] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 1243.288214][T22021] usb 4-1: Using ep0 maxpacket: 32 [ 1243.299723][T22021] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 1243.321705][T22021] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 1243.346663][T22021] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1243.368142][ T6964] usb 5-1: device descriptor read/64, error -71 [ 1243.385784][T22021] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1243.397394][T22021] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1243.406416][T22021] usb 4-1: Product: syz [ 1243.412051][T22021] usb 4-1: Manufacturer: syz [ 1243.416792][T22021] usb 4-1: SerialNumber: syz [ 1243.441578][T22021] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input128 [ 1243.478663][ T6964] usb usb5-port1: attempt power cycle [ 1243.662104][ T5923] usb 4-1: USB disconnect, device number 126 [ 1243.712073][ T5923] appletouch 4-1:1.0: input: appletouch disconnected [ 1243.829328][T25930] fuse: Unknown parameter 'è•°áG' [ 1243.838963][ T6964] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 1243.879822][ T6964] usb 5-1: device descriptor read/8, error -71 [ 1243.888168][T25928] pimreg: entered allmulticast mode [ 1244.128181][ T6964] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 1244.149418][ T6964] usb 5-1: device descriptor read/8, error -71 [ 1244.270704][ T6964] usb usb5-port1: unable to enumerate USB device [ 1244.292471][T25938] fuse: Bad value for 'fd' [ 1246.002659][ T6964] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 1246.168120][ T6964] usb 5-1: Using ep0 maxpacket: 32 [ 1246.178581][ T6964] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1246.190747][ T6964] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1246.206923][ T6964] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1246.222553][ T6964] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1246.235167][ T6964] usb 5-1: config 0 descriptor?? [ 1246.245987][ T6964] hub 5-1:0.0: bad descriptor, ignoring hub [ 1246.253942][ T6964] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1246.264283][ T6964] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1246.293286][T25970] netlink: 'syz.1.6737': attribute type 10 has an invalid length. [ 1246.821442][T25978] syz_tun: entered allmulticast mode [ 1246.840020][T25977] syz_tun: left allmulticast mode [ 1246.927893][T25981] netlink: 'syz.3.6741': attribute type 10 has an invalid length. [ 1246.953720][T25981] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6741'. [ 1246.980750][T25980] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1247.003421][T25985] bond0: (slave bridge0): Releasing backup interface [ 1247.014747][T25985] bridge_slave_0: left allmulticast mode [ 1247.021133][T25985] bridge_slave_0: left promiscuous mode [ 1247.026928][T25985] bridge0: port 1(bridge_slave_0) entered disabled state [ 1247.040000][T25985] bridge_slave_1: left allmulticast mode [ 1247.045693][T25985] bridge_slave_1: left promiscuous mode [ 1247.053380][T25985] bridge0: port 2(bridge_slave_1) entered disabled state [ 1247.063780][T25985] bond0: (slave bond_slave_0): Releasing backup interface [ 1247.074926][T25985] bond0: (slave bond_slave_1): Releasing backup interface [ 1247.086323][T25985] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1247.096202][T25985] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1247.105229][T25985] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1247.113370][T25985] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1247.122072][T25985] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1247.345081][T25993] fuse: Unknown parameter 'è•°áG' [ 1247.528224][ T6964] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 1247.688270][ T6964] usb 1-1: Using ep0 maxpacket: 16 [ 1247.698204][ T6964] usb 1-1: no configurations [ 1247.710565][ T6964] usb 1-1: can't read configurations, error -22 [ 1247.818236][ T5912] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 1247.848199][ T6964] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 1247.978108][ T5912] usb 4-1: Using ep0 maxpacket: 32 [ 1247.986314][ T5912] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1247.997199][ T5912] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1247.998123][ T6964] usb 1-1: Using ep0 maxpacket: 16 [ 1248.006747][ T5912] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1248.012512][ T6964] usb 1-1: no configurations [ 1248.021344][ T5912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1248.025708][ T6964] usb 1-1: can't read configurations, error -22 [ 1248.036617][ T5912] usb 4-1: config 0 descriptor?? [ 1248.043253][ T6964] usb usb1-port1: attempt power cycle [ 1248.398229][ T6964] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 1248.430166][ T6964] usb 1-1: Using ep0 maxpacket: 16 [ 1248.436114][ T6964] usb 1-1: no configurations [ 1248.440981][ T6964] usb 1-1: can't read configurations, error -22 [ 1248.568193][ T6964] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 1248.588630][ T6964] usb 1-1: Using ep0 maxpacket: 16 [ 1248.594398][ T6964] usb 1-1: no configurations [ 1248.599398][ T6964] usb 1-1: can't read configurations, error -22 [ 1248.606404][ T6964] usb usb1-port1: unable to enumerate USB device [ 1248.938675][ T6964] usb 5-1: reset high-speed USB device number 111 using dummy_hcd [ 1248.953880][ T6964] usb 5-1: device reset changed ep0 maxpacket size! [ 1248.965276][ T6964] usb 5-1: USB disconnect, device number 111 [ 1249.263015][T26017] bond0: (slave bridge0): Releasing backup interface [ 1249.268294][ T6964] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 1249.280013][T26017] bridge0: port 2(bridge_slave_1) entered disabled state [ 1249.287412][T26017] bridge0: port 1(bridge_slave_0) entered disabled state [ 1249.301901][T26017] bridge_slave_0: left allmulticast mode [ 1249.307668][T26017] bridge_slave_0: left promiscuous mode [ 1249.315764][T26017] bridge0: port 1(bridge_slave_0) entered disabled state [ 1249.341896][T26017] bridge_slave_1: left allmulticast mode [ 1249.347670][T26017] bridge_slave_1: left promiscuous mode [ 1249.354122][T26017] bridge0: port 2(bridge_slave_1) entered disabled state [ 1249.371249][T26017] bond0: (slave bond_slave_0): Releasing backup interface [ 1249.383330][T26017] bond0: (slave bond_slave_1): Releasing backup interface [ 1249.396465][T26017] team0: Port device team_slave_0 removed [ 1249.413856][T26017] team0: Port device team_slave_1 removed [ 1249.422484][T26017] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1249.431409][T26017] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1249.443820][T26017] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1249.453832][T26017] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1249.461421][ T6964] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1249.461449][ T6964] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1249.461466][ T6964] usb 5-1: Product: syz [ 1249.461480][ T6964] usb 5-1: Manufacturer: syz [ 1249.461494][ T6964] usb 5-1: SerialNumber: syz [ 1249.501595][ T6964] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1249.503841][T26017] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1249.518390][ T6964] r8152-cfgselector 5-1: config 0 descriptor?? [ 1249.743111][T26021] macvlan2: entered promiscuous mode [ 1249.752404][T26021] macvlan2: entered allmulticast mode [ 1249.925531][T26027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6757'. [ 1249.945689][T26027] ip6gretap0: entered promiscuous mode [ 1249.955940][T26027] macvtap4: entered promiscuous mode [ 1249.963079][T26027] macvtap4: entered allmulticast mode [ 1249.970630][T26027] ip6gretap0: entered allmulticast mode [ 1249.984721][ T6964] r8152-cfgselector 5-1: USB disconnect, device number 112 [ 1249.993522][T26029] ip6gretap0: left allmulticast mode [ 1250.005713][T26029] ip6gretap0: left promiscuous mode [ 1250.626722][ T5912] usb 4-1: USB disconnect, device number 127 [ 1251.286729][T26047] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6764'. [ 1251.366982][T26047] netlink: 9 bytes leftover after parsing attributes in process `syz.3.6764'. [ 1251.456975][T26047] netlink: 9 bytes leftover after parsing attributes in process `syz.3.6764'. [ 1251.497226][T26059] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6769'. [ 1251.607341][T26047] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1251.792434][T26074] netlink: 'syz.0.6770': attribute type 10 has an invalid length. [ 1251.881989][T26061] bond0: (slave bond_slave_0): Releasing backup interface [ 1251.905658][ T30] kauditd_printk_skb: 67 callbacks suppressed [ 1251.905858][ T30] audit: type=1804 audit(1764846407.664:6809): pid=26072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.6771" name="/newroot/234/file1" dev="fuse" ino=1 res=1 errno=0 [ 1251.944404][T26061] bond0: (slave bond_slave_1): Releasing backup interface [ 1251.969976][T26061] team0: Port device team_slave_0 removed [ 1251.997064][T26061] team0: Port device team_slave_1 removed [ 1252.004251][T26061] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1252.013937][T26061] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1252.048441][T26061] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1252.055940][T26061] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1252.085322][T26061] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1252.117350][T26059] ip6gretap0: entered promiscuous mode [ 1252.125940][T26059] macvtap5: entered promiscuous mode [ 1252.132374][T26059] macvtap5: entered allmulticast mode [ 1252.138346][T26059] ip6gretap0: entered allmulticast mode [ 1252.159152][T26068] ip6gretap0: left allmulticast mode [ 1252.165161][T26068] ip6gretap0: left promiscuous mode [ 1252.382368][T26080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6773'. [ 1252.709170][ T5985] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 1252.868363][ T5985] usb 5-1: Using ep0 maxpacket: 32 [ 1252.876922][ T5985] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 1252.885611][ T5985] usb 5-1: config 0 has no interface number 0 [ 1252.895160][ T5985] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1252.906983][ T5985] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1252.915493][ T5985] usb 5-1: Product: syz [ 1252.919974][ T5985] usb 5-1: Manufacturer: syz [ 1252.924855][ T5985] usb 5-1: SerialNumber: syz [ 1252.940464][ T5985] usb 5-1: config 0 descriptor?? [ 1252.947696][ T5985] smsc95xx v2.0.0 [ 1253.038764][ T5912] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1253.188242][ T5912] usb 3-1: Using ep0 maxpacket: 8 [ 1253.197523][ T5912] usb 3-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 1253.206722][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1253.214800][ T5912] usb 3-1: Product: syz [ 1253.219068][ T5912] usb 3-1: Manufacturer: syz [ 1253.223708][ T5912] usb 3-1: SerialNumber: syz [ 1253.230941][ T5912] usb 3-1: config 0 descriptor?? [ 1253.238528][ T5912] option 3-1:0.0: GSM modem (1-port) converter detected [ 1253.351882][ T5985] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1253.362978][ T5985] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1253.443619][T26080] netlink: 'syz.2.6773': attribute type 32 has an invalid length. [ 1253.451750][T26080] netlink: 'syz.2.6773': attribute type 32 has an invalid length. [ 1254.096084][T26119] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6785'. [ 1254.123417][T26119] ip6gretap0: entered promiscuous mode [ 1254.131095][T26119] macvtap2: entered promiscuous mode [ 1254.137984][T26119] macvtap2: entered allmulticast mode [ 1254.143950][T26119] ip6gretap0: entered allmulticast mode [ 1254.169807][T26121] ip6gretap0: left allmulticast mode [ 1254.181845][T26121] ip6gretap0: left promiscuous mode [ 1254.241743][ T5912] usb 3-1: USB disconnect, device number 86 [ 1254.265847][ T5912] option 3-1:0.0: device disconnected [ 1254.586790][ T5985] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1254.611780][ T5985] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -32 [ 1254.809223][T26137] syzkaller0: entered promiscuous mode [ 1254.820096][T26137] syzkaller0: entered allmulticast mode [ 1254.969568][T26141] netlink: 'syz.3.6790': attribute type 10 has an invalid length. [ 1255.340366][T26149] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6794'. [ 1255.360117][T26149] netlink: 9 bytes leftover after parsing attributes in process `syz.2.6794'. [ 1255.417096][T26149] netlink: 9 bytes leftover after parsing attributes in process `syz.2.6794'. [ 1255.429795][T26149] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1255.639528][ T6964] usb 5-1: USB disconnect, device number 113 [ 1255.874326][T26163] fuse: Unknown parameter 'è•°áG' [ 1255.941561][T26158] pimreg: entered allmulticast mode [ 1256.026296][T26165] syzkaller0: entered promiscuous mode [ 1256.042939][T26165] syzkaller0: entered allmulticast mode [ 1256.513243][T26154] pimreg: left allmulticast mode [ 1257.318275][ T6964] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 1257.498424][ T6964] usb 1-1: Using ep0 maxpacket: 32 [ 1257.520949][ T6964] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 1257.570883][ T6964] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 1257.615322][ T6964] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1257.642945][T26194] ip6gre0: entered promiscuous mode [ 1257.667970][ T6964] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1257.696728][ T6964] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1257.720551][ T6964] usb 1-1: Product: syz [ 1257.739280][ T6964] usb 1-1: Manufacturer: syz [ 1257.750661][ T6964] usb 1-1: SerialNumber: syz [ 1257.791927][ T6964] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input131 [ 1257.980162][T26199] netlink: 'syz.4.6809': attribute type 10 has an invalid length. [ 1258.083123][ T6964] usb 1-1: USB disconnect, device number 121 [ 1258.112537][ T6964] appletouch 1-1:1.0: input: appletouch disconnected [ 1258.348177][T22021] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1258.498143][ T6964] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 1258.520216][T22021] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1258.538831][T22021] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1258.546915][T22021] usb 3-1: Product: syz [ 1258.566138][T22021] usb 3-1: Manufacturer: syz [ 1258.576303][T22021] usb 3-1: SerialNumber: syz [ 1258.658180][ T6964] usb 4-1: Using ep0 maxpacket: 32 [ 1258.679973][ T6964] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1258.696275][ T6964] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1258.706008][ T6964] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1258.716021][ T6964] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1258.737797][ T6964] usb 4-1: config 0 descriptor?? [ 1259.037572][T22021] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1259.068151][T22021] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1259.727492][T26224] netlink: 'syz.4.6817': attribute type 10 has an invalid length. [ 1259.762351][T26224] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1259.782041][T26224] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6817'. [ 1259.794265][T26223] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1260.302011][T22021] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 1260.328633][T22021] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 1260.494376][T26236] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6820'. [ 1260.512069][T26236] ip6gretap0: entered promiscuous mode [ 1260.517756][T26236] macvtap4: entered promiscuous mode [ 1260.523456][T26236] macvtap4: entered allmulticast mode [ 1260.528911][T26236] ip6gretap0: entered allmulticast mode [ 1260.541020][T26236] ip6gretap0: left allmulticast mode [ 1260.546576][T26236] ip6gretap0: left promiscuous mode [ 1261.084333][T26239] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 1261.160748][T22021] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -EPIPE [ 1261.172847][T22021] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1261.182570][T22021] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1261.193820][T22021] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 1261.294850][T22021] usb 4-1: USB disconnect, device number 2 [ 1261.424365][T26249] bridge0: vlan filtering disabled, automatically disabling multicast vlan snooping [ 1262.234124][ T5912] usb 3-1: USB disconnect, device number 87 [ 1262.278319][T13820] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 1262.288107][ T5985] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1262.453149][T26278] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6834'. [ 1262.468934][ T5985] usb 4-1: device descriptor read/64, error -71 [ 1262.491974][T13820] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1262.538273][T13820] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1262.542911][T26278] ip6gretap0: entered promiscuous mode [ 1262.547404][T13820] usb 1-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 1262.603194][T26278] macvtap4: entered promiscuous mode [ 1262.629374][T26278] macvtap4: entered allmulticast mode [ 1262.632141][T13820] usb 1-1: Product: syz [ 1262.639701][T26278] ip6gretap0: entered allmulticast mode [ 1262.673505][T13820] usb 1-1: Manufacturer: syz [ 1262.683730][T26279] ip6gretap0: left allmulticast mode [ 1262.700341][T13820] usb 1-1: SerialNumber: syz [ 1262.708997][T26279] ip6gretap0: left promiscuous mode [ 1262.723031][T13820] usb 1-1: config 0 descriptor?? [ 1262.740804][ T5985] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1262.888143][ T5985] usb 4-1: device descriptor read/64, error -71 [ 1263.018660][ T5985] usb usb4-port1: attempt power cycle [ 1263.267854][ T30] audit: type=1804 audit(1764846419.034:6810): pid=26293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.6840" name="/newroot/246/file1" dev="fuse" ino=1 res=1 errno=0 [ 1263.378771][ T5985] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1263.429037][ T5985] usb 4-1: device descriptor read/8, error -71 [ 1263.544361][T26301] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 1263.678128][ T5985] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1263.708752][ T5985] usb 4-1: device descriptor read/8, error -71 [ 1263.818747][ T5985] usb usb4-port1: unable to enumerate USB device [ 1263.888235][ T6964] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 1263.913611][T26306] fuse: Bad value for 'fd' [ 1264.048115][ T6964] usb 5-1: Using ep0 maxpacket: 32 [ 1264.071412][ T6964] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 1264.088144][ T6964] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 1264.100401][ T6964] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1264.117725][ T6964] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1264.127196][ T6964] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1264.135876][ T6964] usb 5-1: Product: syz [ 1264.139628][T26310] fuse: Unknown parameter 'user_i00000000000000000000' [ 1264.140285][ T6964] usb 5-1: Manufacturer: syz [ 1264.152409][ T6964] usb 5-1: SerialNumber: syz [ 1264.171179][ T6964] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input132 [ 1264.380423][T13820] usb 5-1: USB disconnect, device number 114 [ 1264.426069][T13820] appletouch 5-1:1.0: input: appletouch disconnected [ 1264.448157][ T5985] usb 3-1: new full-speed USB device number 88 using dummy_hcd [ 1264.609684][ T5985] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1264.621090][ T5985] usb 3-1: config 0 has no interfaces? [ 1264.626586][ T5985] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1264.635752][ T5985] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1264.645759][ T5985] usb 3-1: config 0 descriptor?? [ 1264.862886][ T6964] usb 3-1: USB disconnect, device number 88 [ 1264.983260][T26322] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1265.302153][T26327] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6851'. [ 1265.323229][T26327] ip6gretap0: entered promiscuous mode [ 1265.331683][T26327] macvtap3: entered promiscuous mode [ 1265.337332][T26327] macvtap3: entered allmulticast mode [ 1265.346130][T26327] ip6gretap0: entered allmulticast mode [ 1265.362745][T26328] ip6gretap0: left allmulticast mode [ 1265.378264][T26328] ip6gretap0: left promiscuous mode [ 1265.422036][T26330] netlink: 260 bytes leftover after parsing attributes in process `syz.4.6852'. [ 1265.431911][T26330] netlink: 256 bytes leftover after parsing attributes in process `syz.4.6852'. [ 1265.442863][T26330] lo: entered allmulticast mode [ 1265.449737][T26329] lo: left allmulticast mode [ 1265.512501][T26332] netlink: 'syz.4.6853': attribute type 10 has an invalid length. [ 1265.613637][ T30] audit: type=1326 audit(1764846421.384:6811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26336 comm="syz.4.6855" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 1265.636773][ T30] audit: type=1326 audit(1764846421.384:6812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26336 comm="syz.4.6855" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 1265.659905][ T30] audit: type=1326 audit(1764846421.394:6813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26336 comm="syz.4.6855" exe="/root/syz-executor" sig=0 arch=40000003 syscall=434 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 1265.682018][ C0] vkms_vblank_simulate: vblank timer overrun [ 1265.682409][T26337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1265.699795][ T30] audit: type=1326 audit(1764846421.394:6814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26336 comm="syz.4.6855" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 1265.722181][ T30] audit: type=1326 audit(1764846421.394:6815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26336 comm="syz.4.6855" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 1265.744751][ T30] audit: type=1326 audit(1764846421.394:6816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26336 comm="syz.4.6855" exe="/root/syz-executor" sig=0 arch=40000003 syscall=424 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 1265.760194][T26339] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1265.766895][ C0] vkms_vblank_simulate: vblank timer overrun [ 1265.767809][ T30] audit: type=1326 audit(1764846421.394:6817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26336 comm="syz.4.6855" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 1265.789526][T26337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1265.825224][ T30] audit: type=1326 audit(1764846421.394:6818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26336 comm="syz.4.6855" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 1265.846598][ T5985] usb 1-1: USB disconnect, device number 122 [ 1265.848833][ T30] audit: type=1326 audit(1764846421.394:6819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26336 comm="syz.4.6855" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51539 code=0x7ffc0000 [ 1266.476984][ T5841] Bluetooth: hci0: command 0x0406 tx timeout [ 1266.788445][ T5985] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 1266.993401][ T5985] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1267.010146][ T5985] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1267.065831][ T5985] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1267.112325][ T5985] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1267.163351][ T5985] usb 5-1: rejected 1 configuration due to insufficient available bus power [ 1267.190198][ T5985] usb 5-1: no configuration chosen from 1 choice [ 1267.409094][T26363] tipc: Enabled bearer , priority 0 [ 1267.452262][T26363] tipc: Resetting bearer [ 1267.509556][T26362] tipc: Disabling bearer [ 1267.629315][T26365] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1267.752635][T26367] netlink: 'syz.1.6864': attribute type 10 has an invalid length. [ 1267.794373][T26367] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1268.382527][T26385] netlink: 'syz.1.6867': attribute type 10 has an invalid length. [ 1269.463417][T26411] tipc: Enabled bearer , priority 0 [ 1269.498407][T22021] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 1269.508458][T26411] tipc: Resetting bearer [ 1269.562743][ T5985] usb 5-1: USB disconnect, device number 115 [ 1269.576117][T26410] tipc: Disabling bearer [ 1269.678150][T22021] usb 1-1: Using ep0 maxpacket: 8 [ 1269.702274][T22021] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 1269.736848][T22021] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1269.770315][T22021] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1269.806091][T22021] usb 1-1: Product: syz [ 1269.824594][T22021] usb 1-1: Manufacturer: syz [ 1269.843970][T22021] usb 1-1: SerialNumber: syz [ 1269.872187][T22021] usb 1-1: config 0 descriptor?? [ 1269.894054][T22021] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1269.927324][T22021] usb 1-1: setting power ON [ 1269.951024][T22021] dvb-usb: bulk message failed: -22 (2/0) [ 1269.997947][T22021] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1270.058563][T22021] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1270.099177][T22021] usb 1-1: media controller created [ 1270.180050][T22021] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1270.227797][T22021] usb 1-1: selecting invalid altsetting 6 [ 1270.238337][T22021] usb 1-1: digital interface selection failed (-22) [ 1270.244970][T22021] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1270.288778][T22021] usb 1-1: setting power OFF [ 1270.293388][T22021] dvb-usb: bulk message failed: -22 (2/0) [ 1270.308731][T22021] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1270.328173][T22021] (NULL device *): no alternate interface [ 1270.377850][T22021] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1270.424855][T22021] usb 1-1: USB disconnect, device number 123 [ 1270.676469][T26425] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1270.720768][T26426] ip6gre0: entered promiscuous mode [ 1270.743177][T26426] team0: Port device ip6gre0 added [ 1270.904274][T26431] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6884'. [ 1270.913565][T26431] netlink: 9 bytes leftover after parsing attributes in process `syz.0.6884'. [ 1270.923229][T26431] netlink: 9 bytes leftover after parsing attributes in process `syz.0.6884'. [ 1270.933348][T26431] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1271.048138][ T6964] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1271.078136][T22021] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 1271.200302][ T6964] usb 4-1: Using ep0 maxpacket: 16 [ 1271.210067][ T6964] usb 4-1: config index 0 descriptor too short (expected 4495, got 71) [ 1271.226627][ T6964] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 1271.237026][T22021] usb 5-1: Using ep0 maxpacket: 32 [ 1271.250476][ T6964] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1271.264381][ T6928] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 1271.279860][T22021] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1271.291354][ T6964] usb 4-1: config 0 has no interface number 0 [ 1271.304193][T22021] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1271.333744][ T6964] usb 4-1: New USB device found, idVendor=046c, idProduct=14e0, bcdDevice= 0.01 [ 1271.343657][T22021] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1271.357893][ T6964] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1271.369979][T22021] usb 5-1: config 0 descriptor?? [ 1271.378131][ T6964] usb 4-1: Product: syz [ 1271.387322][ T6964] usb 4-1: Manufacturer: syz [ 1271.393876][T22021] hub 5-1:0.0: bad descriptor, ignoring hub [ 1271.404928][ T6964] usb 4-1: SerialNumber: syz [ 1271.411828][T22021] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1271.424480][ T6964] usb 4-1: config 0 descriptor?? [ 1271.431439][T22021] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1271.452819][ T6928] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1271.467665][ T6928] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1271.480221][ T6928] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1271.490006][ T6928] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1271.513378][ T6928] usb 1-1: rejected 1 configuration due to insufficient available bus power [ 1271.523212][ T6928] usb 1-1: no configuration chosen from 1 choice [ 1271.773768][ T6964] uvcvideo 4-1:0.105: Found UVC 0.00 device syz (046c:14e0) [ 1271.794791][ T6964] uvcvideo 4-1:0.105: No valid video chain found. [ 1271.809073][ T6964] usb 4-1: USB disconnect, device number 7 [ 1272.757611][T26456] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1272.764342][T26456] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1272.781652][T26456] vhci_hcd vhci_hcd.0: Device attached [ 1273.048647][ T5912] usb 40-1: SetAddress Request (2) to port 0 [ 1273.064308][ T5912] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1273.651842][T26457] vhci_hcd: connection reset by peer [ 1273.663918][ T2125] vhci_hcd: stop threads [ 1273.677597][ T2125] vhci_hcd: release socket [ 1273.689666][ T2125] vhci_hcd: disconnect device [ 1274.019762][ T5985] usb 5-1: USB disconnect, device number 116 [ 1274.054504][ T6928] usb 1-1: USB disconnect, device number 124 [ 1274.815771][T26496] pimreg: entered allmulticast mode [ 1274.853048][T26498] fuse: Unknown parameter 'è•°áG' [ 1275.770329][T26497] pimreg: left allmulticast mode [ 1275.878266][ T5985] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1275.893884][T26502] bond0: (slave bond_slave_0): Releasing backup interface [ 1275.910881][T26502] bond0: (slave bond_slave_1): Releasing backup interface [ 1275.926392][T26502] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1275.943841][T26502] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1275.963778][T26502] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1275.989134][T26502] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1276.003561][T26502] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1276.022466][T26507] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6904'. [ 1276.028949][T26505] ip6gre0: entered promiscuous mode [ 1276.038187][ T5985] usb 5-1: Using ep0 maxpacket: 32 [ 1276.048750][ T5985] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1276.062192][ T5985] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1276.075800][ T5985] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1276.090683][ T5985] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1276.102065][ T5985] usb 5-1: config 0 descriptor?? [ 1276.111146][ T5985] hub 5-1:0.0: bad descriptor, ignoring hub [ 1276.118568][ T5985] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1276.127586][ T5985] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1276.204178][T26509] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1276.213852][T26509] bond1: (slave macvlan2): Enslaving as an active interface with a down link [ 1276.225832][T26509] netlink: 'syz.0.6905': attribute type 10 has an invalid length. [ 1276.498169][ T6964] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1276.641118][T26519] fuse: Unknown parameter 'user_id00000000000000000000' [ 1276.650616][ T6964] usb 4-1: Using ep0 maxpacket: 8 [ 1276.660777][ T6964] usb 4-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 1276.671264][ T6964] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1276.679619][ T6964] usb 4-1: Product: syz [ 1276.683961][ T6964] usb 4-1: Manufacturer: syz [ 1276.689056][ T6964] usb 4-1: SerialNumber: syz [ 1276.696730][ T6964] usb 4-1: config 0 descriptor?? [ 1276.729986][ T6964] option 4-1:0.0: GSM modem (1-port) converter detected [ 1276.917231][T26507] netlink: 'syz.3.6904': attribute type 32 has an invalid length. [ 1276.925276][T26507] netlink: 'syz.3.6904': attribute type 32 has an invalid length. [ 1276.950860][ T6964] usb 1-1: new full-speed USB device number 125 using dummy_hcd [ 1277.068196][ T6928] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1277.112319][ T6964] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1277.123057][ T6964] usb 1-1: config 0 has no interfaces? [ 1277.129102][ T6964] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1277.139710][ T6964] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1277.156371][ T6964] usb 1-1: config 0 descriptor?? [ 1277.228269][ T6928] usb 3-1: Using ep0 maxpacket: 32 [ 1277.238851][ T6928] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 1277.248182][ T6928] usb 3-1: config 0 has no interface number 0 [ 1277.254618][ T6928] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1277.281478][ T6928] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1277.297878][ T6928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1277.317590][ T6928] usb 3-1: Product: syz [ 1277.327302][ T6928] usb 3-1: Manufacturer: syz [ 1277.339446][ T6928] usb 3-1: SerialNumber: syz [ 1277.361971][ T6928] usb 3-1: config 0 descriptor?? [ 1277.380478][T26523] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 1277.402818][ T186] usb 1-1: USB disconnect, device number 125 [ 1277.634382][T26523] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 1277.811838][ T186] usb 4-1: USB disconnect, device number 8 [ 1277.827136][ T186] option 4-1:0.0: device disconnected [ 1278.062592][ T6928] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1278.090750][ T6928] asix 3-1:0.188: probe with driver asix failed with error -61 [ 1278.148357][ T5912] usb 40-1: device descriptor read/8, error -110 [ 1278.538967][ T5912] usb usb40-port1: attempt power cycle [ 1278.684935][T26555] mac80211_hwsim hwsim31 wlan1: entered promiscuous mode [ 1278.692808][T26555] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1278.703005][T26555] bond2: (slave macvlan2): making interface the new active one [ 1278.711623][ T186] usb 5-1: USB disconnect, device number 117 [ 1278.720256][T26555] bond2: (slave macvlan2): Enslaving as an active interface with an up link [ 1278.747554][T26555] netlink: 'syz.4.6918': attribute type 10 has an invalid length. [ 1279.099152][ T5912] usb usb40-port1: unable to enumerate USB device [ 1279.438616][T26572] fuse: Bad value for 'fd' [ 1279.518208][ T5912] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1279.692243][ T5912] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1279.726847][ T5912] usb 4-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 1279.755105][ T5912] usb 4-1: Product: syz [ 1279.760529][ T5912] usb 4-1: Manufacturer: syz [ 1279.766147][ T5912] usb 4-1: SerialNumber: syz [ 1279.774570][ T5912] usb 4-1: config 0 descriptor?? [ 1279.786726][ T5912] ch341 4-1:0.0: ch341-uart converter detected [ 1279.890037][ T5985] usb 3-1: USB disconnect, device number 89 [ 1279.986498][ T5912] usb 4-1: failed to receive control message: -32 [ 1280.004121][ T5912] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -32 [ 1280.033948][T26579] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6925'. [ 1280.828119][ T5985] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 1280.998756][ T5985] usb 1-1: Using ep0 maxpacket: 32 [ 1281.013549][ T5985] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 1281.023416][ T5985] usb 1-1: config 0 has no interface number 0 [ 1281.033843][ T5985] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1281.043982][ T5985] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1281.056482][ T5985] usb 1-1: Product: syz [ 1281.069533][ T5985] usb 1-1: Manufacturer: syz [ 1281.074945][ T5985] usb 1-1: SerialNumber: syz [ 1281.087341][ T5985] usb 1-1: config 0 descriptor?? [ 1281.110526][ T5985] smsc95xx v2.0.0 [ 1281.530411][ T5985] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1281.543469][ T5985] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1282.471215][ T5912] usb 4-1: USB disconnect, device number 9 [ 1282.492052][ T5912] ch341 4-1:0.0: device disconnected [ 1282.760916][ T5985] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1282.772852][ T5985] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -61 [ 1283.059725][T26609] fuse: Bad value for 'fd' [ 1283.213128][T26613] syz.2.6936 (26613): drop_caches: 2 [ 1283.843749][T26623] netlink: 'syz.2.6937': attribute type 4 has an invalid length. [ 1284.014477][ T6964] usb 1-1: USB disconnect, device number 126 [ 1284.536740][T26638] netlink: 'syz.0.6942': attribute type 10 has an invalid length. [ 1284.958156][ T5912] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1285.139763][ T5912] usb 4-1: Using ep0 maxpacket: 8 [ 1285.167067][ T5912] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1285.197721][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1285.239752][ T5912] usb 4-1: Product: syz [ 1285.257445][ T5912] usb 4-1: Manufacturer: syz [ 1285.274573][ T5912] usb 4-1: SerialNumber: syz [ 1285.302657][ T5912] usb 4-1: config 0 descriptor?? [ 1285.333388][ T5912] gspca_main: se401-2.14.0 probing 047d:5003 [ 1285.744520][T26651] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6947'. [ 1285.760088][T26651] netlink: 9 bytes leftover after parsing attributes in process `syz.4.6947'. [ 1285.770904][T26651] netlink: 9 bytes leftover after parsing attributes in process `syz.4.6947'. [ 1285.795898][T26651] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1285.819858][T26658] netlink: 260 bytes leftover after parsing attributes in process `syz.1.6949'. [ 1285.829723][T26658] netlink: 256 bytes leftover after parsing attributes in process `syz.1.6949'. [ 1285.842951][T26658] syz_tun: entered allmulticast mode [ 1285.854363][T26657] syz_tun: left allmulticast mode [ 1285.960617][T26662] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6951'. [ 1286.025573][ T5912] input: se401 as /devices/platform/dummy_hcd.3/usb4/4-1/input/input135 [ 1287.487039][ T186] usb 4-1: USB disconnect, device number 10 [ 1287.689270][T26681] netlink: 72 bytes leftover after parsing attributes in process `syz.3.6958'. [ 1287.879371][ T5912] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 1287.932488][T26689] netlink: 260 bytes leftover after parsing attributes in process `syz.2.6961'. [ 1287.958194][T26689] netlink: 256 bytes leftover after parsing attributes in process `syz.2.6961'. [ 1287.972054][T26689] syz_tun: entered allmulticast mode [ 1287.980332][T26688] syz_tun: left allmulticast mode [ 1288.048116][ T5912] usb 5-1: Using ep0 maxpacket: 32 [ 1288.064960][ T5912] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1288.101532][ T5912] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1288.123863][ T5912] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1288.141780][ T5912] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1288.163396][ T5912] usb 5-1: config 0 descriptor?? [ 1288.185851][ T5912] hub 5-1:0.0: USB hub found [ 1288.405222][ T5912] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 1288.719480][ T5912] usbhid 5-1:0.0: can't add hid device: -71 [ 1288.736076][ T5912] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1288.898861][ T5912] usb 5-1: USB disconnect, device number 118 [ 1288.992574][T26702] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1289.200157][T26706] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6966'. [ 1289.262140][T26706] ip6gretap0: entered promiscuous mode [ 1289.294252][T26706] ip6gretap0: left promiscuous mode [ 1289.564096][T26716] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 1289.828339][ T5912] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1289.867456][T26725] netlink: 'syz.1.6971': attribute type 10 has an invalid length. [ 1289.946506][T26722] syzkaller0: entered promiscuous mode [ 1289.952279][T26722] syzkaller0: entered allmulticast mode [ 1289.992327][T26720] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1290.018427][ T5912] usb 5-1: Using ep0 maxpacket: 8 [ 1290.043987][ T5912] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1290.063488][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1290.090333][ T5912] usb 5-1: Product: syz [ 1290.098363][ T5912] usb 5-1: Manufacturer: syz [ 1290.112155][ T5985] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1290.124237][ T5912] usb 5-1: SerialNumber: syz [ 1290.144061][ T5912] usb 5-1: config 0 descriptor?? [ 1290.161796][ T5912] gspca_main: se401-2.14.0 probing 047d:5003 [ 1290.288154][ T5985] usb 4-1: Using ep0 maxpacket: 16 [ 1290.318414][ T5985] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1290.343057][ T5985] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1290.365219][ T5985] usb 4-1: Product: syz [ 1290.389726][ T5985] usb 4-1: Manufacturer: syz [ 1290.394387][ T5985] usb 4-1: SerialNumber: syz [ 1290.432405][ T5985] usb 4-1: config 0 descriptor?? [ 1290.722570][ T6964] usb 4-1: USB disconnect, device number 11 [ 1290.814608][T26730] __nla_validate_parse: 2 callbacks suppressed [ 1290.814626][T26730] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6973'. [ 1290.844672][ T5912] input: se401 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input137 [ 1291.489378][ T5912] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1291.653537][ T5912] usb 3-1: Using ep0 maxpacket: 32 [ 1291.666122][ T5912] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 1291.686047][ T5912] usb 3-1: config 0 has no interface number 0 [ 1291.731098][ T5912] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1291.740731][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1291.760344][ T5912] usb 3-1: Product: syz [ 1291.780647][ T5912] usb 3-1: Manufacturer: syz [ 1291.800654][ T5912] usb 3-1: SerialNumber: syz [ 1291.829990][ T5912] usb 3-1: config 0 descriptor?? [ 1291.839621][ T5912] smsc95xx v2.0.0 [ 1292.249616][ T5912] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1292.263473][ T5912] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1292.436131][ T5985] usb 5-1: USB disconnect, device number 119 [ 1292.927356][T26755] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6980'. [ 1293.458256][ T5985] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1293.549967][ T5912] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1293.572633][ T5912] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -61 [ 1293.638232][ T5985] usb 4-1: Using ep0 maxpacket: 16 [ 1293.645788][ T5985] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1293.667296][ T5985] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1293.690914][ T5985] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1293.710464][ T5985] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1293.720317][ T5985] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1293.736343][ T5985] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1293.745712][ T5985] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1293.754521][ T5985] usb 4-1: Manufacturer: syz [ 1293.765254][ T5985] usb 4-1: config 0 descriptor?? [ 1293.988378][T26759] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20004 [ 1294.025800][T26730] ip6gretap0: entered promiscuous mode [ 1294.031916][T26730] macvtap5: entered promiscuous mode [ 1294.037389][T26730] macvtap5: entered allmulticast mode [ 1294.043249][T26730] ip6gretap0: entered allmulticast mode [ 1294.052105][T26734] ip6gretap0: left allmulticast mode [ 1294.057793][T26734] ip6gretap0: left promiscuous mode [ 1294.146869][T26762] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 1294.822847][ T5912] usb 3-1: USB disconnect, device number 90 [ 1295.586991][ T142] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1295.596454][ T142] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1295.606601][ T142] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1295.615972][ T142] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1295.795227][T26797] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6994'. [ 1295.836154][T26802] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 1295.836639][T26797] ip6gretap0: entered promiscuous mode [ 1295.850943][T26797] macvtap4: entered promiscuous mode [ 1295.856485][T26797] macvtap4: entered allmulticast mode [ 1295.862555][T26797] ip6gretap0: entered allmulticast mode [ 1295.871479][T26803] ip6gretap0: left allmulticast mode [ 1295.877423][T26803] ip6gretap0: left promiscuous mode [ 1295.916558][T26800] syzkaller0: entered promiscuous mode [ 1295.923025][T26800] syzkaller0: entered allmulticast mode [ 1296.011037][T26806] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6997'. [ 1296.289013][ T5985] rc_core: IR keymap rc-hauppauge not found [ 1296.298258][T13820] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 1296.308234][ T5985] Registered IR keymap rc-empty [ 1296.313262][ T5985] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1296.350189][ T5985] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1296.374041][ T5985] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1296.409365][ T5985] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input138 [ 1296.441450][T26811] syz.3.6999 (26811): drop_caches: 2 [ 1296.447240][ T5985] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1296.478160][T13820] usb 1-1: Using ep0 maxpacket: 8 [ 1296.478163][ T6964] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1296.478700][ T5985] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1296.509266][T13820] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 1296.527020][T13820] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1296.536569][T13820] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.556449][T13820] usb 1-1: Product: syz [ 1296.566932][T13820] usb 1-1: Manufacturer: syz [ 1296.571822][ T5985] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1296.584042][T13820] usb 1-1: SerialNumber: syz [ 1296.600587][ T5985] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1296.609017][T13820] usb 1-1: config 0 descriptor?? [ 1296.618889][ T5985] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1296.632425][T13820] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1296.641421][ T5985] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1296.649035][T13820] usb 1-1: setting power ON [ 1296.653573][T13820] dvb-usb: bulk message failed: -22 (2/0) [ 1296.669553][ T6964] usb 3-1: Using ep0 maxpacket: 8 [ 1296.674215][T13820] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1296.685073][ T5985] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1296.693821][T13820] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1296.699399][ T6964] usb 3-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 1296.702505][T13820] usb 1-1: media controller created [ 1296.714289][ T6964] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.716760][ T5985] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1296.725632][ T6964] usb 3-1: Product: syz [ 1296.756763][ T6964] usb 3-1: Manufacturer: syz [ 1296.762255][ T6964] usb 3-1: SerialNumber: syz [ 1296.789651][ T6964] usb 3-1: config 0 descriptor?? [ 1296.798641][ T5985] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1296.816494][T13820] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1296.829317][ T6964] option 3-1:0.0: GSM modem (1-port) converter detected [ 1296.831032][ T5985] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1296.895627][T13820] usb 1-1: selecting invalid altsetting 6 [ 1296.911388][ T5985] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 1296.919503][T13820] usb 1-1: digital interface selection failed (-22) [ 1296.926087][T13820] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1296.948245][ T5985] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1296.961522][ T5985] usb 4-1: USB disconnect, device number 12 [ 1296.968743][T13820] usb 1-1: setting power OFF [ 1296.978118][T13820] dvb-usb: bulk message failed: -22 (2/0) [ 1296.983952][T13820] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1297.008179][T13820] (NULL device *): no alternate interface [ 1297.071027][T26806] netlink: 'syz.2.6997': attribute type 32 has an invalid length. [ 1297.086694][T13820] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1297.095863][T26806] netlink: 'syz.2.6997': attribute type 32 has an invalid length. [ 1297.143891][T13820] usb 1-1: USB disconnect, device number 127 [ 1297.483385][T26826] netlink: 260 bytes leftover after parsing attributes in process `syz.0.7001'. [ 1297.497131][T26826] netlink: 256 bytes leftover after parsing attributes in process `syz.0.7001'. [ 1298.091055][T13820] usb 3-1: USB disconnect, device number 91 [ 1298.109511][T13820] option 3-1:0.0: device disconnected [ 1298.235367][T26837] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7004'. [ 1298.244556][T26837] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7004'. [ 1298.589893][T13820] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1298.761304][T13820] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1298.770504][T13820] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1298.778634][T13820] usb 3-1: Product: syz [ 1298.782983][T13820] usb 3-1: Manufacturer: syz [ 1298.787610][T13820] usb 3-1: SerialNumber: syz [ 1298.805067][T13820] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1298.811791][T13820] r8152-cfgselector 3-1: config 0 descriptor?? [ 1299.085198][T26827] syz_tun: entered allmulticast mode [ 1299.198281][T26840] netlink: 'syz.0.7005': attribute type 10 has an invalid length. [ 1299.221863][T26840] mac80211_hwsim hwsim27 wlan1: entered promiscuous mode [ 1299.229902][T26840] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1299.246819][ T6928] r8152-cfgselector 3-1: USB disconnect, device number 92 [ 1299.261725][T26840] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7005'. [ 1299.283591][T26844] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 1299.285624][T26839] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1299.420478][T26848] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7006'. [ 1300.242513][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.251589][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.359456][T26862] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 1300.366029][T26862] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1300.374521][ T6928] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1300.389137][T26862] vhci_hcd vhci_hcd.0: Device attached [ 1300.528232][ T6928] usb 1-1: Using ep0 maxpacket: 32 [ 1300.535511][ T6928] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 1300.544299][ T6928] usb 1-1: config 0 has no interface number 0 [ 1300.551249][ T6928] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1300.566367][ T6928] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1300.575848][ T6928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1300.584097][ T6928] usb 1-1: Product: syz [ 1300.588836][ T6928] usb 1-1: Manufacturer: syz [ 1300.593701][ T6928] usb 1-1: SerialNumber: syz [ 1300.605519][ T6928] usb 1-1: config 0 descriptor?? [ 1300.615897][T26860] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1300.658287][T13820] usb 38-1: SetAddress Request (11) to port 0 [ 1300.667343][T13820] usb 38-1: new SuperSpeed USB device number 11 using vhci_hcd [ 1300.844169][T26860] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1301.033842][T26863] vhci_hcd: connection reset by peer [ 1301.040508][T26157] vhci_hcd: stop threads [ 1301.044776][T26157] vhci_hcd: release socket [ 1301.049518][T26157] vhci_hcd: disconnect device [ 1301.476517][ T6928] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1301.489401][ T6928] asix 1-1:0.188: probe with driver asix failed with error -32 [ 1301.876513][T26880] syzkaller0: entered promiscuous mode [ 1301.882126][T26880] syzkaller0: entered allmulticast mode [ 1302.816231][T26890] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 1303.143069][ T6928] usb 1-1: USB disconnect, device number 2 [ 1304.703093][T26903] netlink: 'syz.1.7022': attribute type 10 has an invalid length. [ 1304.724020][T26903] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7022'. [ 1304.754909][T26902] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1304.879938][ T6928] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1305.088672][ T6928] usb 3-1: Using ep0 maxpacket: 32 [ 1305.103870][ T6928] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 1305.148226][ T6928] usb 3-1: config 0 has no interface number 0 [ 1305.182422][ T6928] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1305.191980][T22021] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1305.206252][ T6928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1305.224676][ T6928] usb 3-1: Product: syz [ 1305.233726][ T6928] usb 3-1: Manufacturer: syz [ 1305.245536][ T6928] usb 3-1: SerialNumber: syz [ 1305.263410][ T6928] usb 3-1: config 0 descriptor?? [ 1305.284680][ T6928] smsc95xx v2.0.0 [ 1305.356794][T22021] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1305.386397][T22021] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1305.431674][T22021] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1305.471566][T22021] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1305.518791][T22021] usb 4-1: config 0 descriptor?? [ 1305.552885][T22021] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1305.697192][ T6928] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1305.769432][T13820] usb 38-1: device descriptor read/8, error -110 [ 1305.848197][ T6928] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1306.159178][T13820] usb usb38-port1: attempt power cycle [ 1306.548343][ T6964] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 1306.719257][T13820] usb usb38-port1: unable to enumerate USB device [ 1306.738124][ T6964] usb 5-1: Using ep0 maxpacket: 32 [ 1306.760289][ T6964] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1306.783843][ T6964] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1306.843288][ T6964] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1306.853167][ T6964] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1306.911079][ T6964] usb 5-1: config 0 descriptor?? [ 1306.941444][ T6964] hub 5-1:0.0: USB hub found [ 1307.032031][T26936] netlink: 260 bytes leftover after parsing attributes in process `syz.0.7033'. [ 1307.045522][T26936] netlink: 256 bytes leftover after parsing attributes in process `syz.0.7033'. [ 1307.065932][ T6928] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1307.077615][ T6928] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -61 [ 1307.156052][ T6964] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 1307.216238][T26938] fuse: Unknown parameter '0x0000000000000003' [ 1307.409446][ T6964] usbhid 5-1:0.0: can't add hid device: -71 [ 1307.428745][ T6964] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1307.475185][ T6964] usb 5-1: USB disconnect, device number 120 [ 1307.528178][T13820] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 1307.690324][T13820] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1307.708905][T13820] usb 1-1: config 0 has no interfaces? [ 1307.714416][T13820] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1307.725044][T13820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1307.738198][T13820] usb 1-1: config 0 descriptor?? [ 1307.949614][ T6928] usb 4-1: USB disconnect, device number 13 [ 1307.987115][ T6964] usb 1-1: USB disconnect, device number 3 [ 1308.046941][T26948] netlink: 'syz.3.7038': attribute type 10 has an invalid length. [ 1308.049476][T26950] syz.4.7037 (26950): drop_caches: 2 [ 1308.062474][T26948] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7038'. [ 1308.074542][T26947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1308.300143][ T6964] usb 3-1: USB disconnect, device number 93 [ 1308.974339][T26966] bridge0: entered promiscuous mode [ 1308.988809][T26966] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1309.037032][T26968] netlink: 'syz.1.7042': attribute type 10 has an invalid length. [ 1309.072387][T26966] bond1: (slave macvlan2): making interface the new active one [ 1309.142007][T26966] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 1311.738231][ T6964] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1311.969725][ T6964] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1312.018847][ T6964] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1312.044358][ T6964] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1312.061029][ T6964] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1312.101823][ T6964] usb 1-1: config 0 descriptor?? [ 1312.134067][ T6964] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1313.422770][T27013] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1313.429362][T27013] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1313.458536][T27013] vhci_hcd vhci_hcd.0: Device attached [ 1313.638595][ T6964] vhci_hcd: vhci_device speed not set [ 1313.746058][ T6964] usb 37-1: new full-speed USB device number 11 using vhci_hcd [ 1314.120515][T27014] vhci_hcd: connection reset by peer [ 1314.161612][ T2125] vhci_hcd: stop threads [ 1314.190288][ T2125] vhci_hcd: release socket [ 1314.204952][ T2125] vhci_hcd: disconnect device [ 1314.489687][T13820] usb 1-1: USB disconnect, device number 4 [ 1316.078456][T13820] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1316.288108][T13820] usb 1-1: Using ep0 maxpacket: 16 [ 1316.307885][T13820] usb 1-1: config index 0 descriptor too short (expected 4495, got 71) [ 1316.410713][T13820] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 1316.483859][T27049] netlink: 'syz.2.7058': attribute type 10 has an invalid length. [ 1316.501704][T13820] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1316.717991][T13820] usb 1-1: config 0 has no interface number 0 [ 1316.741629][T27049] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1316.754815][T13820] usb 1-1: New USB device found, idVendor=046c, idProduct=14e0, bcdDevice= 0.01 [ 1316.777809][T13820] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1316.786255][T13820] usb 1-1: Product: syz [ 1316.792526][T13820] usb 1-1: Manufacturer: syz [ 1316.802320][T13820] usb 1-1: SerialNumber: syz [ 1316.827565][T13820] usb 1-1: config 0 descriptor?? [ 1317.018169][ T5985] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 1317.189591][ T5985] usb 5-1: Using ep0 maxpacket: 32 [ 1317.197472][ T5985] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1317.232805][ T5985] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1317.248654][ T5985] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1317.257761][ T5985] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1317.296243][ T5985] usb 5-1: config 0 descriptor?? [ 1317.321419][T13820] uvcvideo 1-1:0.105: Found UVC 0.00 device syz (046c:14e0) [ 1317.341635][ T5985] hub 5-1:0.0: USB hub found [ 1317.349937][T13820] uvcvideo 1-1:0.105: No valid video chain found. [ 1317.374325][T13820] usb 1-1: USB disconnect, device number 5 [ 1317.623391][T27062] netlink: 260 bytes leftover after parsing attributes in process `syz.1.7062'. [ 1317.642563][T27062] netlink: 256 bytes leftover after parsing attributes in process `syz.1.7062'. [ 1317.664940][T27062] syz_tun: entered allmulticast mode [ 1317.679130][T27061] syz_tun: left allmulticast mode [ 1317.724483][ T5985] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 1317.763101][T27058] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7061'. [ 1317.818994][T27058] netlink: 9 bytes leftover after parsing attributes in process `syz.3.7061'. [ 1317.828531][T27058] netlink: 9 bytes leftover after parsing attributes in process `syz.3.7061'. [ 1317.841008][T27058] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1317.962567][ T5985] usbhid 5-1:0.0: can't add hid device: -71 [ 1317.982283][ T5985] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1318.000836][T27070] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7065'. [ 1318.041103][ T5985] usb 5-1: USB disconnect, device number 121 [ 1318.458120][ T5985] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1318.629363][ T5985] usb 1-1: Using ep0 maxpacket: 8 [ 1318.655794][ T5985] usb 1-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 1318.676801][ T5985] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1318.695391][ T5985] usb 1-1: Product: syz [ 1318.712684][ T5985] usb 1-1: Manufacturer: syz [ 1318.729108][ T5985] usb 1-1: SerialNumber: syz [ 1318.743179][ T5985] usb 1-1: config 0 descriptor?? [ 1318.785127][ T5985] option 1-1:0.0: GSM modem (1-port) converter detected [ 1318.948665][ T6964] vhci_hcd: vhci_device speed not set [ 1318.999229][T27070] netlink: 'syz.0.7065': attribute type 32 has an invalid length. [ 1319.023775][T27070] netlink: 'syz.0.7065': attribute type 32 has an invalid length. [ 1319.665424][T27099] pimreg: entered allmulticast mode [ 1319.682731][T27099] fuse: Unknown parameter 'è•°áG' [ 1320.212305][ T5985] usb 1-1: USB disconnect, device number 6 [ 1320.245581][ T5985] option 1-1:0.0: device disconnected [ 1320.298532][T27093] pimreg: left allmulticast mode [ 1321.687446][T27119] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 1321.694007][T27119] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1321.762597][T27119] vhci_hcd vhci_hcd.0: Device attached [ 1322.048257][ T5985] usb 40-1: SetAddress Request (6) to port 0 [ 1322.070092][ T5985] usb 40-1: new SuperSpeed USB device number 6 using vhci_hcd [ 1322.178694][T27120] vhci_hcd: connection reset by peer [ 1322.194614][ T49] vhci_hcd: stop threads [ 1322.211391][ T49] vhci_hcd: release socket [ 1322.233256][ T49] vhci_hcd: disconnect device [ 1322.719310][ T6964] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1322.898141][ T6964] usb 3-1: Using ep0 maxpacket: 8 [ 1322.930954][ T6964] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1322.948305][ T6964] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1322.968197][ T6964] usb 3-1: Product: syz [ 1322.972409][ T6964] usb 3-1: Manufacturer: syz [ 1322.988587][ T6964] usb 3-1: SerialNumber: syz [ 1323.008344][ T6964] usb 3-1: config 0 descriptor?? [ 1323.030813][ T6964] gspca_main: se401-2.14.0 probing 047d:5003 [ 1323.627702][ T6964] input: se401 as /devices/platform/dummy_hcd.2/usb3/3-1/input/input139 [ 1324.088360][T27153] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 1324.548347][T13820] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1324.729959][T13820] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1324.741538][T13820] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1324.755219][T13820] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1324.764689][T13820] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1324.774914][T13820] usb 4-1: config 0 descriptor?? [ 1324.787211][T13820] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1324.978124][T13820] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 1325.128758][ T5912] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1325.148359][T13820] usb 5-1: Using ep0 maxpacket: 32 [ 1325.155005][T13820] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1325.168759][T13820] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1325.177842][T13820] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1325.190564][T13820] usb 5-1: config 0 descriptor?? [ 1325.199025][T13820] hub 5-1:0.0: bad descriptor, ignoring hub [ 1325.205073][T13820] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1325.213424][T13820] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1325.282282][ T5912] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1325.291707][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1325.300064][ T5912] usb 1-1: Product: syz [ 1325.304414][ T5912] usb 1-1: Manufacturer: syz [ 1325.309133][ T5912] usb 1-1: SerialNumber: syz [ 1325.377197][T27162] fuse: Unknown parameter '0x0000000000000003' [ 1325.471612][ T6964] usb 3-1: USB disconnect, device number 94 [ 1325.741350][ T5912] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1325.764532][ T5912] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1327.198286][ T5985] usb 40-1: device descriptor read/8, error -110 [ 1327.325820][T13820] usb 4-1: USB disconnect, device number 14 [ 1327.392055][ T5912] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -EPIPE [ 1327.412327][ T5912] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1327.423612][ T5912] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1327.445855][ T5912] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 1327.513756][T27176] tipc: Enabling of bearer rejected, failed to enable media [ 1327.604891][T27178] netlink: 'syz.3.7091': attribute type 10 has an invalid length. [ 1327.614642][ T5985] usb usb40-port1: attempt power cycle [ 1327.623359][T27178] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7091'. [ 1327.635363][T27177] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1327.858995][T13820] usb 5-1: USB disconnect, device number 122 [ 1328.224387][ T5985] usb usb40-port1: unable to enumerate USB device [ 1328.295658][T27190] syzkaller0: entered promiscuous mode [ 1328.301559][T27190] syzkaller0: entered allmulticast mode [ 1328.321141][T27194] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 1328.452967][ T5985] usb 1-1: USB disconnect, device number 7 [ 1328.730035][T27200] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7097'. [ 1328.831907][ T5985] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1329.008316][ T5985] usb 1-1: Using ep0 maxpacket: 16 [ 1329.015754][ T5985] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1329.038301][ T5985] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1329.058225][ T5985] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1329.078178][ T5985] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1329.098406][ T5985] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1329.130639][ T5985] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1329.152069][ T5985] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1329.160513][ T5985] usb 1-1: Manufacturer: syz [ 1329.177834][ T5985] usb 1-1: config 0 descriptor?? [ 1329.412381][T27198] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:20004 [ 1329.529729][ T5985] rc_core: IR keymap rc-hauppauge not found [ 1329.536112][ T5985] Registered IR keymap rc-empty [ 1329.554494][ T5985] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1329.580289][ T5985] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1329.609724][ T5985] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1329.632111][ T5985] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input140 [ 1329.647858][ T5985] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1329.670486][ T5985] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1329.698418][ T5985] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1329.718216][ T5985] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1329.743249][ T5985] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1329.768409][ T5985] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1329.789181][ T5985] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1329.817272][ T5985] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1329.842376][ T5985] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1329.881773][ T5985] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1329.911271][ T5985] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 1329.921831][ T5985] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1329.957213][ T5985] usb 1-1: USB disconnect, device number 8 [ 1330.188155][ T6964] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 1330.358171][ T6964] usb 5-1: Using ep0 maxpacket: 32 [ 1330.366819][ T6964] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 1330.375919][ T6964] usb 5-1: config 0 has no interface number 0 [ 1330.386068][ T6964] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1330.388803][T27220] netlink: 'syz.0.7102': attribute type 10 has an invalid length. [ 1330.399837][ T6964] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1330.413435][ T6964] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1330.421577][ T6964] usb 5-1: Product: syz [ 1330.426260][ T6964] usb 5-1: Manufacturer: syz [ 1330.431607][ T6964] usb 5-1: SerialNumber: syz [ 1330.447193][ T6964] usb 5-1: config 0 descriptor?? [ 1330.458491][T27216] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1330.683824][T27216] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1331.265481][T27218] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1331.291231][T27219] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 1331.431872][T27232] netlink: 260 bytes leftover after parsing attributes in process `syz.2.7105'. [ 1331.441266][T27232] netlink: 256 bytes leftover after parsing attributes in process `syz.2.7105'. [ 1331.453549][T27232] syz_tun: entered allmulticast mode [ 1331.461651][T27231] syz_tun: left allmulticast mode [ 1331.532557][ T6964] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1331.543125][ T6964] asix 5-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 1331.554061][ T6964] asix 5-1:0.188: probe with driver asix failed with error -32 [ 1331.828238][ T6964] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1331.992679][ T6964] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1332.011124][ T6964] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1332.022554][ T6964] usb 1-1: Product: syz [ 1332.026930][ T6964] usb 1-1: Manufacturer: syz [ 1332.035702][ T6964] usb 1-1: SerialNumber: syz [ 1332.474090][ T6964] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1332.491681][ T6964] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1332.544264][T27257] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7114'. [ 1332.704841][T27262] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 1332.970390][ T5985] usb 5-1: USB disconnect, device number 123 [ 1333.084596][T27264] syzkaller0: entered promiscuous mode [ 1333.090417][T27264] syzkaller0: entered allmulticast mode [ 1333.209032][T27269] netlink: 260 bytes leftover after parsing attributes in process `syz.2.7118'. [ 1333.218661][T27269] netlink: 256 bytes leftover after parsing attributes in process `syz.2.7118'. [ 1334.129823][ T6964] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -EPIPE [ 1334.142057][ T6964] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1334.153160][ T6964] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1334.170834][ T6964] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 1335.206985][ T5985] usb 1-1: USB disconnect, device number 9 [ 1335.398463][T27270] syz_tun: entered allmulticast mode [ 1335.405632][T27283] netlink: 'syz.0.7120': attribute type 10 has an invalid length. [ 1335.418905][T27270] syz_tun: left allmulticast mode [ 1335.451830][T27282] bond1: (slave macvlan3): Error -98 calling set_mac_address [ 1335.858205][T13820] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1336.028337][ T5985] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 1336.071846][T13820] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1336.128982][T13820] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1336.145152][T13820] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1336.157665][T13820] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1336.218517][T13820] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1336.229182][T13820] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1336.249493][ T5985] usb 5-1: Using ep0 maxpacket: 32 [ 1336.257245][ T5985] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1336.274497][ T5985] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1336.338223][T13820] usb 3-1: config 0 descriptor?? [ 1336.348576][T27293] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1336.369203][T27309] fuse: Unknown parameter 'è•°áG' [ 1336.402522][ T5985] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1336.488669][ T5985] usb 5-1: config 0 descriptor?? [ 1336.529909][ T5985] hub 5-1:0.0: bad descriptor, ignoring hub [ 1336.535846][ T5985] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1336.590657][ T5985] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1336.811712][T13820] plantronics 0003:047F:FFFF.0055: reserved main item tag 0xd [ 1336.882782][T13820] plantronics 0003:047F:FFFF.0055: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1337.027486][T16585] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 1337.071907][T27305] pimreg: entered allmulticast mode [ 1337.087339][T22021] usb 3-1: USB disconnect, device number 95 [ 1337.131628][T27305] pimreg: left allmulticast mode [ 1337.773965][T27331] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 1338.038573][T27333] syzkaller0: entered promiscuous mode [ 1338.052916][T27333] syzkaller0: entered allmulticast mode [ 1338.929027][T13820] usb 5-1: USB disconnect, device number 124 [ 1339.050942][T27346] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7138'. [ 1339.554633][T13820] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 1339.740081][T13820] usb 5-1: Using ep0 maxpacket: 8 [ 1339.783126][T13820] usb 5-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 1339.807906][T13820] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1339.816095][T13820] usb 5-1: Product: syz [ 1339.820492][T13820] usb 5-1: Manufacturer: syz [ 1339.825113][T13820] usb 5-1: SerialNumber: syz [ 1339.832723][T13820] usb 5-1: config 0 descriptor?? [ 1339.846241][T13820] option 5-1:0.0: GSM modem (1-port) converter detected [ 1340.050446][T27346] netlink: 'syz.4.7138': attribute type 32 has an invalid length. [ 1340.058419][T27346] netlink: 'syz.4.7138': attribute type 32 has an invalid length. [ 1340.731815][T27361] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7141'. [ 1340.879295][T13820] usb 5-1: USB disconnect, device number 125 [ 1340.893578][T27361] netlink: 9 bytes leftover after parsing attributes in process `syz.3.7141'. [ 1340.916141][T27361] netlink: 9 bytes leftover after parsing attributes in process `syz.3.7141'. [ 1341.004476][T13820] option 5-1:0.0: device disconnected [ 1341.006844][T27361] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1341.548217][T13820] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 1341.718278][T13820] usb 5-1: Using ep0 maxpacket: 32 [ 1341.742128][T13820] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1341.784507][T13820] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1341.808127][ T186] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1341.836555][T13820] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1341.902580][T13820] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1341.931865][T13820] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1341.963684][T13820] usb 5-1: Product: syz [ 1341.977346][T13820] usb 5-1: Manufacturer: syz [ 1341.993454][T13820] usb 5-1: SerialNumber: syz [ 1342.000212][T27392] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 1342.018150][ T186] usb 3-1: Using ep0 maxpacket: 32 [ 1342.031972][ T186] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1342.053105][T13820] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input142 [ 1342.079597][ T186] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1342.109711][ T186] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1342.150386][ T186] usb 3-1: config 0 descriptor?? [ 1342.175052][ T186] hub 3-1:0.0: bad descriptor, ignoring hub [ 1342.196485][ T186] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1342.216907][ T186] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1342.287789][T22021] usb 5-1: USB disconnect, device number 126 [ 1342.338895][T22021] appletouch 5-1:1.0: input: appletouch disconnected [ 1342.547525][T27394] syzkaller0: entered promiscuous mode [ 1342.553719][T27394] syzkaller0: entered allmulticast mode [ 1342.587568][T27397] syz.0.7152 (27397): drop_caches: 2 [ 1344.103819][T27413] fuse: Unknown parameter 'è•°áG' [ 1344.568522][T13820] usb 3-1: USB disconnect, device number 96 [ 1344.660641][T27416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1344.723200][T27416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1344.735345][T27416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1345.284336][T27423] syzkaller0: entered promiscuous mode [ 1345.291328][T27423] syzkaller0: entered allmulticast mode [ 1345.498146][T13820] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 1345.622440][T27439] netlink: 'syz.0.7163': attribute type 10 has an invalid length. [ 1345.683661][T13820] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1345.695332][T13820] usb 5-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 1345.715775][T13820] usb 5-1: Product: syz [ 1345.723808][T13820] usb 5-1: Manufacturer: syz [ 1345.731785][T13820] usb 5-1: SerialNumber: syz [ 1345.739444][T13820] usb 5-1: config 0 descriptor?? [ 1345.746522][T13820] ch341 5-1:0.0: ch341-uart converter detected [ 1345.950034][T13820] usb 5-1: failed to receive control message: -121 [ 1345.961021][T13820] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -121 [ 1346.679393][T27452] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7166'. [ 1347.118397][T27460] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 1347.515701][T27468] pimreg: entered allmulticast mode [ 1347.557515][T27468] fuse: Unknown parameter 'è•°áG' [ 1347.656063][T27472] netlink: 'syz.0.7167': attribute type 4 has an invalid length. [ 1347.734772][T27473] netlink: 'syz.0.7167': attribute type 4 has an invalid length. [ 1348.216315][T27475] syzkaller0: entered promiscuous mode [ 1348.257593][T27475] syzkaller0: entered allmulticast mode [ 1348.297881][T27464] pimreg: left allmulticast mode [ 1348.764803][T13820] usb 5-1: USB disconnect, device number 127 [ 1348.774588][T13820] ch341 5-1:0.0: device disconnected [ 1349.168242][T13820] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1349.368222][T13820] usb 5-1: Using ep0 maxpacket: 32 [ 1349.388539][T13820] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 1349.397000][T13820] usb 5-1: config 0 has no interface number 0 [ 1349.409598][T13820] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1349.420877][T13820] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1349.430865][T13820] usb 5-1: Product: syz [ 1349.435179][T13820] usb 5-1: Manufacturer: syz [ 1349.447391][T13820] usb 5-1: SerialNumber: syz [ 1349.455033][T13820] usb 5-1: config 0 descriptor?? [ 1349.463279][T13820] smsc95xx v2.0.0 [ 1349.880002][T13820] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1349.891345][T13820] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1350.457790][T27488] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7176'. [ 1350.938143][ T186] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1351.109806][ T186] usb 4-1: Using ep0 maxpacket: 8 [ 1351.158681][ T186] usb 4-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 1351.182922][ T186] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1351.205338][ T186] usb 4-1: Product: syz [ 1351.214587][ T186] usb 4-1: Manufacturer: syz [ 1351.219756][ T186] usb 4-1: SerialNumber: syz [ 1351.243567][ T186] usb 4-1: config 0 descriptor?? [ 1351.260314][ T186] option 4-1:0.0: GSM modem (1-port) converter detected [ 1351.482065][T27488] netlink: 'syz.3.7176': attribute type 32 has an invalid length. [ 1351.502937][T27488] netlink: 'syz.3.7176': attribute type 32 has an invalid length. [ 1351.538787][T13820] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -32 [ 1351.600981][T13820] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -32 [ 1351.610046][T27500] netlink: 'syz.2.7178': attribute type 10 has an invalid length. [ 1352.594009][T27500] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1352.611141][T13820] usb 5-1: USB disconnect, device number 2 [ 1352.770220][T27520] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1352.789167][T27523] ip6gre0: entered promiscuous mode [ 1352.811054][T27523] team0: Port device ip6gre0 added [ 1352.920575][T22021] usb 4-1: USB disconnect, device number 15 [ 1352.941412][T22021] option 4-1:0.0: device disconnected [ 1353.338173][T13820] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1353.395570][T16585] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 1353.404045][T27536] syzkaller0: entered promiscuous mode [ 1353.416212][T27536] syzkaller0: entered allmulticast mode [ 1353.540303][T13820] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1353.583485][T13820] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1353.608354][T13820] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1353.632622][T13820] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1353.647814][T13820] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1353.657411][T13820] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1353.675199][T13820] usb 5-1: config 0 descriptor?? [ 1353.695776][T27532] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1354.132342][T13820] usbhid 5-1:0.0: can't add hid device: -71 [ 1354.140564][T13820] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1354.161800][T13820] usb 5-1: USB disconnect, device number 3 [ 1356.168237][T22021] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1356.209805][T27564] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7197'. [ 1356.229685][T27564] netlink: 9 bytes leftover after parsing attributes in process `syz.0.7197'. [ 1356.267252][T27564] netlink: 9 bytes leftover after parsing attributes in process `syz.0.7197'. [ 1356.362236][T22021] usb 3-1: Using ep0 maxpacket: 32 [ 1356.370907][T27564] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1356.432318][T22021] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 1356.472277][T22021] usb 3-1: config 0 has no interface number 0 [ 1356.487622][T22021] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1356.497516][T22021] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1356.510183][T22021] usb 3-1: Product: syz [ 1356.516346][T22021] usb 3-1: Manufacturer: syz [ 1356.523851][T22021] usb 3-1: SerialNumber: syz [ 1356.560336][T22021] usb 3-1: config 0 descriptor?? [ 1356.573584][T22021] smsc95xx v2.0.0 [ 1356.996630][T22021] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1357.017071][T22021] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1357.389605][T27593] syzkaller0: entered promiscuous mode [ 1357.408098][T27593] syzkaller0: entered allmulticast mode [ 1357.818323][T13820] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1357.936240][T27604] netlink: 'syz.3.7206': attribute type 10 has an invalid length. [ 1358.019225][T13820] usb 5-1: Using ep0 maxpacket: 8 [ 1358.029466][T13820] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1358.048985][T13820] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1358.077458][T13820] usb 5-1: Product: syz [ 1358.100290][T13820] usb 5-1: Manufacturer: syz [ 1358.118204][T13820] usb 5-1: SerialNumber: syz [ 1358.140985][T13820] usb 5-1: config 0 descriptor?? [ 1358.175019][T13820] gspca_main: se401-2.14.0 probing 047d:5003 [ 1358.476126][T27600] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1358.652936][T22021] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000038: -32 [ 1358.665910][T22021] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -32 [ 1358.878649][T13820] input: se401 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input143 [ 1359.703466][T13820] usb 3-1: USB disconnect, device number 97 [ 1359.739441][T27619] fuse: Unknown parameter 'group_id00000000000000000000' [ 1360.490783][T13820] usb 5-1: USB disconnect, device number 4 [ 1361.286760][T27636] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7214'. [ 1361.502930][T27640] team0: Port device ip6gre0 removed [ 1361.515744][T27640] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1361.541562][T22021] skbuff: skb_under_panic: text:ffffffff8a180258 len:136 put:40 head:ffff888027437000 data:ffff888027436fe8 tail:0x70 end:0x6c0 dev:team0 [ 1361.579682][T22021] ------------[ cut here ]------------ [ 1361.585190][T22021] kernel BUG at net/core/skbuff.c:213! [ 1361.628125][T22021] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 1361.634402][T22021] CPU: 1 UID: 0 PID: 22021 Comm: kworker/1:3 Not tainted syzkaller #0 PREEMPT(full) [ 1361.643853][T22021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1361.653941][T22021] Workqueue: mld mld_ifc_work [ 1361.658629][T22021] RIP: 0010:skb_panic+0x157/0x160 [ 1361.663659][T22021] Code: c7 20 6b 6e 8c 48 8b 74 24 08 48 8b 54 24 10 8b 0c 24 44 8b 44 24 04 4d 89 e9 50 55 41 57 41 56 e8 6e 94 f5 ff 48 83 c4 20 90 <0f> 0b cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1361.683269][T22021] RSP: 0018:ffffc9000444f2c0 EFLAGS: 00010286 [ 1361.689344][T22021] RAX: 0000000000000087 RBX: dffffc0000000000 RCX: b4e521899ac4f700 [ 1361.697301][T22021] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 1361.705259][T22021] RBP: 00000000000006c0 R08: ffffc9000444efc7 R09: 1ffff92000889df8 [ 1361.713218][T22021] R10: dffffc0000000000 R11: fffff52000889df9 R12: ffff888061a61510 [ 1361.721186][T22021] R13: ffff888027437000 R14: ffff888027436fe8 R15: 0000000000000070 [ 1361.729230][T22021] FS: 0000000000000000(0000) GS:ffff8881261a6000(0000) knlGS:0000000000000000 [ 1361.738149][T22021] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1361.744726][T22021] CR2: 00000000f704e230 CR3: 0000000057d02000 CR4: 00000000003526f0 [ 1361.752688][T22021] Call Trace: [ 1361.756032][T22021] [ 1361.759004][T22021] ? ip6gre_header+0xc8/0x790 [ 1361.763683][T22021] ? ip6gre_header+0xc8/0x790 [ 1361.768383][T22021] skb_push+0xc3/0xe0 [ 1361.772363][T22021] ip6gre_header+0xc8/0x790 [ 1361.776859][T22021] ? __pfx_ip6gre_header+0x10/0x10 [ 1361.781966][T22021] ? read_seqbegin+0x1ac/0x250 [ 1361.786721][T22021] ? __pfx_read_seqbegin+0x10/0x10 [ 1361.791822][T22021] ? ___neigh_create+0x1c5f/0x2230 [ 1361.796925][T22021] ? __pfx_ip6gre_header+0x10/0x10 [ 1361.802042][T22021] neigh_connected_output+0x286/0x460 [ 1361.807413][T22021] ip6_finish_output2+0xfb3/0x1480 [ 1361.812520][T22021] ? __pfx_ip6_finish_output2+0x10/0x10 [ 1361.818068][T22021] ? ip6_mtu+0x7d/0x490 [ 1361.822221][T22021] ? ip6_mtu+0x38c/0x490 [ 1361.826447][T22021] ? ip6_finish_output+0x2ef/0x4e0 [ 1361.831544][T22021] ? ip6_output+0x126/0x550 [ 1361.836029][T22021] ip6_output+0x340/0x550 [ 1361.840348][T22021] NF_HOOK+0x9e/0x380 [ 1361.844319][T22021] ? NF_HOOK+0x101/0x380 [ 1361.848551][T22021] ? __pfx_NF_HOOK+0x10/0x10 [ 1361.853139][T22021] ? __pfx_dst_output+0x10/0x10 [ 1361.857976][T22021] ? icmp6_dst_alloc+0x3a5/0x420 [ 1361.862902][T22021] ? icmp6_dst_alloc+0x3a5/0x420 [ 1361.867829][T22021] mld_sendpack+0x8d4/0xe60 [ 1361.872326][T22021] ? mld_sendpack+0x1e7/0xe60 [ 1361.876991][T22021] ? __pfx_mld_sendpack+0x10/0x10 [ 1361.882008][T22021] mld_ifc_work+0x83e/0xd60 [ 1361.886507][T22021] ? _raw_spin_unlock_irq+0x23/0x50 [ 1361.891701][T22021] ? process_scheduled_works+0x9ef/0x1770 [ 1361.897411][T22021] process_scheduled_works+0xad1/0x1770 [ 1361.902960][T22021] ? __pfx_process_scheduled_works+0x10/0x10 [ 1361.908935][T22021] worker_thread+0x8a0/0xda0 [ 1361.913514][T22021] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1361.919834][T22021] ? __kthread_parkme+0x7b/0x200 [ 1361.924772][T22021] kthread+0x711/0x8a0 [ 1361.928831][T22021] ? __pfx_worker_thread+0x10/0x10 [ 1361.933928][T22021] ? __pfx_kthread+0x10/0x10 [ 1361.938509][T22021] ? _raw_spin_unlock_irq+0x23/0x50 [ 1361.943706][T22021] ? lockdep_hardirqs_on+0x98/0x140 [ 1361.948889][T22021] ? __pfx_kthread+0x10/0x10 [ 1361.953468][T22021] ret_from_fork+0x599/0xb30 [ 1361.958059][T22021] ? __pfx_ret_from_fork+0x10/0x10 [ 1361.963163][T22021] ? __switch_to_asm+0x39/0x70 [ 1361.967928][T22021] ? __switch_to_asm+0x33/0x70 [ 1361.972679][T22021] ? __pfx_kthread+0x10/0x10 [ 1361.977274][T22021] ret_from_fork_asm+0x1a/0x30 [ 1361.982049][T22021] [ 1361.985074][T22021] Modules linked in: [ 1361.989054][ C1] vkms_vblank_simulate: vblank timer overrun [ 1361.992362][T27640] team0: Port device ip6gre0 added [ 1361.995743][T22021] ---[ end trace 0000000000000000 ]--- [ 1362.024855][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.031181][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.040756][T22021] RIP: 0010:skb_panic+0x157/0x160 [ 1362.198471][T22021] Code: c7 20 6b 6e 8c 48 8b 74 24 08 48 8b 54 24 10 8b 0c 24 44 8b 44 24 04 4d 89 e9 50 55 41 57 41 56 e8 6e 94 f5 ff 48 83 c4 20 90 <0f> 0b cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1362.324556][T22021] RSP: 0018:ffffc9000444f2c0 EFLAGS: 00010286 [ 1362.361475][T22021] RAX: 0000000000000087 RBX: dffffc0000000000 RCX: b4e521899ac4f700 [ 1362.424360][T22021] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 1362.457304][T22021] RBP: 00000000000006c0 R08: ffffc9000444efc7 R09: 1ffff92000889df8 [ 1362.480937][T22021] R10: dffffc0000000000 R11: fffff52000889df9 R12: ffff888061a61510 [ 1362.496084][T22021] R13: ffff888027437000 R14: ffff888027436fe8 R15: 0000000000000070 [ 1362.574961][T22021] FS: 0000000000000000(0000) GS:ffff8881261a6000(0000) knlGS:0000000000000000 [ 1362.665560][T22021] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1362.704140][T22021] CR2: 00000000800a7018 CR3: 000000005b976000 CR4: 00000000003526f0 [ 1362.770408][T22021] Kernel panic - not syncing: Fatal exception [ 1362.776858][T22021] Kernel Offset: disabled [ 1362.781173][T22021] Rebooting in 86400 seconds..