last executing test programs: 14.2878019s ago: executing program 1 (id=1312): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="4015"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000640)={0x20, 0x3, 0x5, "5905d90000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000140)={0x0, 0xf, 0x4, "c7a13997"}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000340)={0x20, 0x3, 0x4, "a13b1f21"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000b40)={0x44, &(0x7f0000000840)={0x0, 0x30, 0x4, "ad972f8f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000740)={0x34, &(0x7f0000000240)={0x40, 0x15, 0x4, "6ce4d1f4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 10.969483413s ago: executing program 3 (id=1319): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa1"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x11, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x4000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4000000}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x200}, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}, {0x85, 0x0, 0x0, 0xb4}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0xdf64, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 10.883808536s ago: executing program 0 (id=1321): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x10, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x4000000}, [@map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4000000}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x200}, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}, {0x85, 0x0, 0x0, 0xb4}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x1000000, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0x4040}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002780)=@newqdisc={0x48, 0x14, 0xf0b, 0x4, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4}, {0xb, 0x1}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xfc, 0x200, 0x80000a, 0x0, 0x1, 0xc0000000}}, {0x4}}]}]}, 0x48}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 10.855319206s ago: executing program 3 (id=1322): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd13a}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="180300"/12, @ANYRES32], 0x0}, 0x94) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={0x0, 0x21c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x0, 0x0, 0x0, 0xdf64, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000580)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 10.740428406s ago: executing program 1 (id=1323): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) 10.624153362s ago: executing program 3 (id=1324): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x58}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10.551102777s ago: executing program 0 (id=1325): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) userfaultfd(0x801) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) writev(r1, &(0x7f00000002c0)=[{&(0x7f00000001c0)}], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000180)=0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) sync() ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x6, 0x0, 0x0, r5}) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058b"], 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) close(r6) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) 10.536193512s ago: executing program 1 (id=1326): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x10, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x4000000}, [@map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4000000}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x200}, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}, {0x85, 0x0, 0x0, 0xb4}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000"], 0x7c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x0, 0x0, 0x0, 0xdf64, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002780)=@newqdisc={0x48, 0x14, 0xf0b, 0x4, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4}, {0xb, 0x1}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xfc, 0x200, 0x80000a, 0x0, 0x1, 0xc0000000}}, {0x4}}]}]}, 0x48}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 9.363947092s ago: executing program 1 (id=1328): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f", 0x7, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000050400"/18, @ANYBLOB="ebff"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 9.095124467s ago: executing program 3 (id=1330): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r3, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) 8.680768993s ago: executing program 3 (id=1331): socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 7.608015898s ago: executing program 1 (id=1333): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="4015"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000640)={0x20, 0x3, 0x5, "5905d90000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000140)={0x0, 0xf, 0x4, "c7a13997"}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000340)={0x20, 0x3, 0x4, "a13b1f21"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000b40)={0x44, &(0x7f0000000840)={0x0, 0x30, 0x4, "ad972f8f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000740)={0x34, &(0x7f0000000240)={0x40, 0x15, 0x4, "6ce4d1f4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.243959207s ago: executing program 0 (id=1339): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000000c0)) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0xe, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x20000040) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r3, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)=0xffff0018) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) 5.436465901s ago: executing program 2 (id=1340): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x11, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x4000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4000000}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x200}, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}, {0x85, 0x0, 0x0, 0xb4}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="180300"/14, @ANYRES32], 0x0}, 0x94) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={0x0, 0x21c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0xdf64, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000580)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4.972529558s ago: executing program 2 (id=1342): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000fc0)={0x1c4, 0x33, 0x100, 0x70bd26, 0x25dfdbfd, "", [@nested={0x30, 0xfb, 0x0, 0x1, [@nested={0x20, 0x13, 0x0, 0x1, [@typed={0x14, 0x122, 0x0, 0x0, @ipv6=@private0}, @typed={0x8, 0x10, 0x0, 0x0, @u32=0x7}]}, @typed={0xc, 0x123, 0x0, 0x0, @u64}]}, @generic="d90a58cde601d565cdddcc6aa3fcc8c25583297245b4d7973d0df9b022c59bb26343d8fac6abbe023d9e0640355e0034d2aca4a49132b88c8660af242102d45a28332c4b796cc5268b9a5ec5b61042577e3e5ea90f21384e8c5852110520bfd976705ca7e25e8a5ac6dd7bdadeb451f164c86cdb89561b05f0b9e143b1917e3dd99ee920f46511a803ab9cf9dd2d6aaf8aee259d1476cd960ce44acbc6a970c4fdd6f99aeee46de8efec7151b1e4cc13cd723e9cfa7ba2f69b60189d7aff553101c449174d1e18b6c5b148275100a3f8bd0c4c96296c43028aa284f8f626392a21d31e5e06fe98065e0246d46b7fe927a881c18c044e5c139e", @typed={0x14, 0xbe, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0xa}}, @typed={0x8, 0x63, 0x0, 0x0, @u32=0x1}, @typed={0x8, 0x18, 0x0, 0x0, @u32=0x4}, @nested={0x61, 0xee, 0x0, 0x1, [@typed={0x8, 0x39, 0x0, 0x0, @fd}, @typed={0x8, 0xc0, 0x0, 0x0, @ipv4=@empty}, @nested={0x4, 0x4f}, @generic="f01254c8a325874b7a364f60", @typed={0x8, 0x9e, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @generic="a5fa1bc096f7698bf3a3b0d73b6a0d1e0d9454b139670292b1dceb88454804395cfea2f930bd1a85f30dd9aa777f0bb11dd045e7a6"]}]}, 0x1c4}], 0x1, 0x0, 0x0, 0x10004800}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.543558612s ago: executing program 2 (id=1344): ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000080)={0x0, 0x1, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4000}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x70, 0x0, 0xf2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f1, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6d1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe02e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x9, 0xcf, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0xfffffffd, 0x4, 0x7, 0x800, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4000000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0xd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x22, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43682594, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x789], 0x1, 0x400}) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x5, 0x7, 0xe51, 0x1, 0x5479, 0x103d, 0x6, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x5, 0x6a], 0x2000, 0x808d6}) write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x2, 0x0, 0x0, 0x1}, 0x8) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000013c0)={0xffffffffffffffff, 0xa, {0x0, 0x0, 0x0, 0x5, 0x8000, 0x0, 0x4, 0x1f, 0x10, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "143939c787a16c1ca43f80026d1a8554fe581b59dee430e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d200", "24431a1e77a68e17000000040008000000000000000000e5e900", [0x83]}}) ioctl$KVM_RUN(r1, 0xae80, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000006080)=ANY=[@ANYBLOB="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"], 0x8814}, 0x1, 0x0, 0x0, 0x40000}, 0x10) 4.517420528s ago: executing program 4 (id=1345): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r2 = socket(0x10, 0x3, 0x0) connect$bt_sco(r2, &(0x7f0000000340)={0x1f, @none}, 0x8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd13a}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="180300"/16, @ANYRES32], 0x0}, 0x94) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={0x0, 0x21c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x0, 0x0, 0x0, 0xdf64, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) 4.444922961s ago: executing program 2 (id=1346): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x5) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bind$can_j1939(r5, &(0x7f0000000100)={0x1d, r6}, 0x18) connect$can_j1939(r5, &(0x7f0000000080)={0x1d, r6, 0x0, {0x1, 0xf0}, 0x1}, 0x18) sendmsg$can_j1939(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$video4linux(&(0x7f0000000200), 0x6, 0x125001) ioctl$VIDIOC_SUBDEV_S_SELECTION(r7, 0xc040563e, 0x0) 4.247690514s ago: executing program 4 (id=1347): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ff"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x10, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x4000000}, [@map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4000000}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x200}, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}, {0x85, 0x0, 0x0, 0xb4}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x1000000, {0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0x4040}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x0, 0x0, 0x0, 0xdf64, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292", 0xc) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002780)=@newqdisc={0x48, 0x14, 0xf0b, 0x4, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4}, {0xb, 0x1}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xfc, 0x200, 0x80000a, 0x0, 0x1, 0xc0000000}}, {0x4}}]}]}, 0x48}}, 0x0) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3.288563423s ago: executing program 2 (id=1348): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r2, 0x0, 0x2000400c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="180300"/12, @ANYRES32], 0x0}, 0x94) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={0x0, 0x21c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x0, 0x0, 0x0, 0xdf64, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000580)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3.149820299s ago: executing program 1 (id=1349): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) userfaultfd(0x801) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xd) writev(r1, &(0x7f00000002c0)=[{&(0x7f00000001c0)}], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000180)=0x1) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) sync() ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x6, 0x0, 0x0, r5}) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f00"], 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) close(r6) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) 3.110986991s ago: executing program 3 (id=1350): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r2 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x3) r3 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={r2, 0x0, 0x0, 0x8000}) lseek(r3, 0x1000000000931f, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "5fa88e29acc0b6e5", "c2d198020b8fa9c4d8da4fb8f5bdba0f", "773fec3a", "346d426b024c92a6"}, 0x28) sendto$inet6(r4, 0x0, 0x0, 0x20000045, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000100), 0x0, 0x10, 0x0, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00"}) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$usbfs(0x0, 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r5, 0xc0105502, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x9, 0x1, 0x6, 0x91, 0x4580, 0x6, 0x7, 0x8, 0x887c}, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x40000, 0x122) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x300000d, 0x6031, 0xffffffffffffffff, 0xfded4000) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r7, r6, &(0x7f00000000c0)=0x58, 0x5) 3.05959476s ago: executing program 4 (id=1351): bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000"], 0x7c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x0, 0x0, 0x0, 0xdf64, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff0802110000"], 0x6f4}}, 0x0) 2.995377264s ago: executing program 2 (id=1352): set_mempolicy(0x2002, &(0x7f0000000200)=0x10001, 0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x42060000) 2.263923302s ago: executing program 4 (id=1353): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) r4 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, 0x0) setresgid(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 1.183396779s ago: executing program 0 (id=1354): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000fc0)={0x1c4, 0x33, 0x100, 0x70bd26, 0x25dfdbfd, "", [@nested={0x30, 0xfb, 0x0, 0x1, [@nested={0x20, 0x13, 0x0, 0x1, [@generic, @typed={0x14, 0x122, 0x0, 0x0, @ipv6=@private0}, @typed={0x8, 0x10, 0x0, 0x0, @u32=0x7}]}, @typed={0xc, 0x123, 0x0, 0x0, @u64}]}, @generic="d90a58cde601d565cdddcc6aa3fcc8c25583297245b4d7973d0df9b022c59bb26343d8fac6abbe023d9e0640355e0034d2aca4a49132b88c8660af242102d45a28332c4b796cc5268b9a5ec5b61042577e3e5ea90f21384e8c5852110520bfd976705ca7e25e8a5ac6dd7bdadeb451f164c86cdb89561b05f0b9e143b1917e3dd99ee920f46511a803ab9cf9dd2d6aaf8aee259d1476cd960ce44acbc6a970c4fdd6f99aeee46de8efec7151b1e4cc13cd723e9cfa7ba2f69b60189d7aff553101c449174d1e18b6c5b148275100a3f8bd0c4c96296c43028aa284f8f626392a21d31e5e06fe98065e0246d46b7fe927a881c18c044e5c139e", @typed={0x14, 0xbe, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0xa}}, @typed={0x8, 0x63, 0x0, 0x0, @u32=0x1}, @typed={0x8, 0x18, 0x0, 0x0, @u32=0x4}, @nested={0x61, 0xee, 0x0, 0x1, [@typed={0x8, 0x39, 0x0, 0x0, @fd}, @typed={0x8, 0xc0, 0x0, 0x0, @ipv4=@empty}, @nested={0x4, 0x4f}, @generic="f01254c8a325874b7a364f60", @typed={0x8, 0x9e, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @generic="a5fa1bc096f7698bf3a3b0d73b6a0d1e0d9454b139670292b1dceb88454804395cfea2f930bd1a85f30dd9aa777f0bb11dd045e7a6"]}]}, 0x1c4}], 0x1, 0x0, 0x0, 0x10004800}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.080516689s ago: executing program 4 (id=1355): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f", 0x7, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000050400"/18, @ANYBLOB="ebffff"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 324.041807ms ago: executing program 0 (id=1356): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x0, 0x1b}, 0x9c) 90.817381ms ago: executing program 0 (id=1357): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r1, 0x0, 0x19, 0x0, 0x0) setsockopt$inet_int(r1, 0x0, 0x17, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r1, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0000fa00ea8000"}) syz_open_pts(r0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x541b, &(0x7f0000000ec0)) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x98, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000040)={0x106, 0x3432564e, 0x3, @stepwise={0x3, 0x1, 0x5, 0x8d6f, 0x6, 0x1}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x5, 0x3f, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) migrate_pages(0x0, 0x5, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x272) 0s ago: executing program 4 (id=1358): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r2 = socket(0x10, 0x3, 0x0) connect$bt_sco(r2, &(0x7f0000000340)={0x1f, @none}, 0x8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xd13a}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="180300"/16, @ANYRES32], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x0, 0x0, 0x0, 0xdf64, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) kernel console output (not intermixed with test programs): oint descriptor with address 0xBE, changing to 0x8E [ 242.168680][ T5880] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 242.209714][ T5880] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 242.256999][ T5880] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 242.324872][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 242.386840][ T5880] usb 2-1: Product: syz [ 242.654145][ T5880] usb 2-1: Manufacturer: syz [ 243.349025][ T5880] usb 2-1: SerialNumber: syz [ 243.369222][ T5880] usb 2-1: config 0 descriptor?? [ 243.405880][ T5880] radio-si470x 2-1:0.0: could not find interrupt in endpoint [ 243.415159][ T5880] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5 [ 243.427579][ T5880] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 243.427991][ T5896] usb 3-1: USB disconnect, device number 7 [ 243.761394][ T5880] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 243.787454][ T7344] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 243.796355][ T7344] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 243.807717][ T7344] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 243.816278][ T7344] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 243.982079][ T5880] usb 1-1: Using ep0 maxpacket: 32 [ 244.009850][ T5880] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 244.022624][ T5880] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 244.054854][ T5880] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 244.101118][ T5880] usb 1-1: config 1 has no interface number 0 [ 244.125505][ T5880] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 244.155476][ T5880] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 244.171464][ T5880] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 244.561503][ T5880] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.621769][ T5880] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 244.659565][ T5934] usb 2-1: USB disconnect, device number 6 [ 244.842365][ T5880] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 244.852937][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 245.024234][ T9] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 245.075720][ T9] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 245.133951][ T9] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 245.148190][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 245.163599][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.323969][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 245.334561][ T5896] usb 1-1: USB disconnect, device number 8 [ 245.345240][ T9] usb 3-1: invalid MIDI out EP 0 [ 245.375251][ T7366] netlink: 'syz.1.413': attribute type 10 has an invalid length. [ 246.479694][ T5934] snd_usb_pod 1-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 246.494179][ T7371] trusted_key: encrypted_key: insufficient parameters specified [ 246.525541][ T7353] delete_channel: no stack [ 246.574412][ T5896] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 246.600852][ T7366] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 247.099436][ T6069] udevd[6069]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 247.246672][ T9] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 247.662612][ T9] usb 3-1: USB disconnect, device number 8 [ 247.984064][ T7381] hub 2-0:1.0: USB hub found [ 247.990034][ T7381] hub 2-0:1.0: 1 port detected [ 250.301104][ T7398] nbd2: detected capacity change from 0 to 2 [ 250.358836][ T6630] block nbd2: Send control failed (result -89) [ 250.406533][ T6630] block nbd2: Request send failed, requeueing [ 250.654472][ T55] block nbd2: Dead connection, failed to find a fallback [ 250.663056][ T55] block nbd2: shutting down sockets [ 250.669674][ T55] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 250.682183][ T55] Buffer I/O error on dev nbd2, logical block 0, async page read [ 250.692461][ T6630] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 250.702529][ T6630] Buffer I/O error on dev nbd2, logical block 0, async page read [ 250.712117][ T6630] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 250.749668][ T6630] Buffer I/O error on dev nbd2, logical block 0, async page read [ 251.532311][ T6630] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 251.621614][ T6630] Buffer I/O error on dev nbd2, logical block 0, async page read [ 251.687110][ T7397] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 252.162082][ T6630] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 252.246681][ T6630] Buffer I/O error on dev nbd2, logical block 0, async page read [ 252.266947][ T6630] ldm_validate_partition_table(): Disk read failed. [ 252.287483][ T6630] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 252.308429][ T6630] Buffer I/O error on dev nbd2, logical block 0, async page read [ 252.329816][ T6630] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 252.360967][ T6630] Buffer I/O error on dev nbd2, logical block 0, async page read [ 252.369024][ T6630] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 252.399789][ T6630] Buffer I/O error on dev nbd2, logical block 0, async page read [ 252.419298][ T6630] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 252.442599][ T6630] Buffer I/O error on dev nbd2, logical block 0, async page read [ 252.525461][ T6630] Dev nbd2: unable to read RDB block 0 [ 252.533739][ T6630] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 252.543387][ T6630] Buffer I/O error on dev nbd2, logical block 0, async page read [ 252.552088][ T6630] nbd2: unable to read partition table [ 252.557966][ T6630] nbd2: partition table beyond EOD, truncated [ 252.590934][ T6630] ldm_validate_partition_table(): Disk read failed. [ 252.621659][ T6630] Dev nbd2: unable to read RDB block 0 [ 253.587949][ T6630] nbd2: unable to read partition table [ 253.594680][ T6630] nbd2: partition table beyond EOD, truncated [ 254.571057][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 254.754514][ T9] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 254.811588][ T9] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 65327, setting to 1024 [ 254.866306][ T9] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 255.115200][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 255.131441][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.647457][ T7429] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 255.681425][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 256.375361][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.383248][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.437446][ T7439] netlink: 'syz.2.429': attribute type 3 has an invalid length. [ 256.445738][ T7439] netlink: 'syz.2.429': attribute type 1 has an invalid length. [ 256.454204][ T7439] netlink: 191152 bytes leftover after parsing attributes in process `syz.2.429'. [ 256.465738][ T7439] netlink: 28 bytes leftover after parsing attributes in process `syz.2.429'. [ 257.659935][ T5880] usb 5-1: USB disconnect, device number 7 [ 261.388109][ T7474] netlink: 104 bytes leftover after parsing attributes in process `syz.2.439'. [ 261.402559][ T7475] netlink: 'syz.0.438': attribute type 1 has an invalid length. [ 261.528911][ T7475] 8021q: adding VLAN 0 to HW filter on device bond1 [ 261.545789][ T7481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.438'. [ 262.072614][ T7479] bond1: (slave veth3): Enslaving as an active interface with a down link [ 262.146484][ T7475] vlan2: entered allmulticast mode [ 262.160613][ T7475] veth1: entered allmulticast mode [ 262.208218][ T7475] veth1: entered promiscuous mode [ 262.334237][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 262.341658][ T7475] veth1: left promiscuous mode [ 262.445404][ T7475] bond1: (slave vlan2): making interface the new active one [ 262.559406][ T9] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 262.577053][ T7475] veth1: entered promiscuous mode [ 262.591705][ T9] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 65327, setting to 1024 [ 262.601307][ T7475] vlan2: entered promiscuous mode [ 262.609146][ T9] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 262.619255][ T7475] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 262.637271][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 262.649077][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.710159][ T7496] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 262.812199][ T7501] netlink: 44 bytes leftover after parsing attributes in process `syz.4.440'. [ 263.035443][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 263.891031][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 264.454641][ T7507] netlink: 'syz.0.445': attribute type 3 has an invalid length. [ 264.463173][ T7507] netlink: 'syz.0.445': attribute type 1 has an invalid length. [ 264.471502][ T7507] netlink: 191152 bytes leftover after parsing attributes in process `syz.0.445'. [ 264.482880][ T7507] netlink: 28 bytes leftover after parsing attributes in process `syz.0.445'. [ 264.522014][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 264.539502][ T9] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 264.576189][ T9] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 264.618298][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 264.772273][ T9] usb 5-1: config 1 has no interface number 0 [ 264.778898][ T9] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 264.798850][ T9] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 264.833754][ T9] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 264.875422][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.956158][ T9] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 264.997549][ T5920] usb 4-1: USB disconnect, device number 7 [ 265.136945][ T9] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 265.861716][ T9] usb 5-1: USB disconnect, device number 8 [ 265.874546][ T9] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 266.992211][ T7526] hub 2-0:1.0: USB hub found [ 267.003467][ T7526] hub 2-0:1.0: 1 port detected [ 267.502957][ T7514] syz.0.446 (7514): drop_caches: 2 [ 268.091002][ T5896] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 268.941732][ T5896] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 269.782392][ T5896] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 269.824479][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 269.849323][ T5896] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 269.945472][ T5896] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 269.981556][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 269.997468][ T5896] usb 2-1: Product: syz [ 270.011179][ T5896] usb 2-1: Manufacturer: syz [ 270.030920][ T5896] usb 2-1: SerialNumber: syz [ 270.043969][ T5896] usb 2-1: config 0 descriptor?? [ 270.934353][ T5896] usb 2-1: can't set config #0, error -71 [ 271.054144][ T5896] usb 2-1: USB disconnect, device number 7 [ 271.521383][ T5888] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 271.794754][ T5888] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 271.828434][ T5888] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 65327, setting to 1024 [ 271.892490][ T5888] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 271.990021][ T5888] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 272.025523][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.059700][ T7564] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 272.094457][ T5888] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 274.437925][ T5888] usb 5-1: USB disconnect, device number 9 [ 274.725441][ T7579] syz.0.464 (7579): drop_caches: 2 [ 276.169995][ T7598] hub 2-0:1.0: USB hub found [ 276.188029][ T7598] hub 2-0:1.0: 1 port detected [ 277.139447][ T7607] hub 2-0:1.0: USB hub found [ 277.167612][ T7607] hub 2-0:1.0: 1 port detected [ 280.561315][ T5920] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 281.373210][ T5920] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 281.516401][ T5920] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 65327, setting to 1024 [ 281.626293][ T5920] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 281.719191][ T5920] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 281.751879][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.774406][ T7625] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 281.794183][ T5920] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 284.983364][ T59] vlan2: left promiscuous mode [ 292.952115][ T5833] usb 4-1: USB disconnect, device number 8 [ 293.021459][ T5934] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 293.062020][ T5920] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 293.212740][ T5934] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 293.233736][ T5920] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.254575][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.272023][ T5920] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 293.396725][ T5934] usb 2-1: Product: syz [ 293.402908][ T5934] usb 2-1: Manufacturer: syz [ 293.407553][ T5934] usb 2-1: SerialNumber: syz [ 293.415595][ T5920] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 294.405402][ T5934] usb 2-1: config 0 descriptor?? [ 294.412467][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.432215][ T5920] usb 5-1: config 0 descriptor?? [ 294.638232][ T5934] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 295.057105][ T5934] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 295.137949][ T5920] kovaplus 0003:1E7D:2D50.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.4-1/input0 [ 295.534190][ T5920] kovaplus 0003:1E7D:2D50.0004: couldn't init struct kovaplus_device [ 295.571040][ T5920] kovaplus 0003:1E7D:2D50.0004: couldn't install mouse [ 296.431388][ T5920] kovaplus 0003:1E7D:2D50.0004: probe with driver kovaplus failed with error -32 [ 296.441766][ T5833] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 296.469396][ T5920] usb 5-1: USB disconnect, device number 10 [ 296.532524][ T43] usb 2-1: USB disconnect, device number 8 [ 296.618523][ T5833] usb 3-1: Using ep0 maxpacket: 8 [ 296.633534][ T5833] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 296.658918][ T5833] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 296.678407][ T5833] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 296.719323][ T5833] usb 3-1: Product: syz [ 296.735204][ T5833] usb 3-1: Manufacturer: syz [ 296.739899][ T5833] usb 3-1: SerialNumber: syz [ 297.023208][ T5833] usb 3-1: Invalid connection information received from device [ 297.346552][ T7712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.140035][ T7712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.168715][ T5833] usb 3-1: USB disconnect, device number 9 [ 300.513136][ T7763] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 300.522458][ T7763] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 300.585334][ T7763] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 300.598723][ T7763] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 302.498675][ T7781] hub 2-0:1.0: USB hub found [ 302.512503][ T7781] hub 2-0:1.0: 1 port detected [ 309.773043][ T5833] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 310.015576][ T5833] usb 3-1: Using ep0 maxpacket: 32 [ 310.035255][ T5833] usb 3-1: config 0 has an invalid interface number: 6 but max is 0 [ 310.044544][ T5833] usb 3-1: config 0 has no interface number 0 [ 310.095103][ T5833] usb 3-1: New USB device found, idVendor=064b, idProduct=7825, bcdDevice=a5.f9 [ 310.117364][ T5833] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.151010][ T5833] usb 3-1: Product: syz [ 310.155291][ T5833] usb 3-1: Manufacturer: syz [ 310.245348][ T5833] usb 3-1: SerialNumber: syz [ 310.266913][ T5833] usb 3-1: config 0 descriptor?? [ 310.514192][ T7832] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 310.549060][ T5833] upd78f0730 3-1:0.6: upd78f0730 converter detected [ 310.619832][ T7845] netlink: 68 bytes leftover after parsing attributes in process `syz.4.545'. [ 311.303166][ T5833] usb 3-1: upd78f0730 converter now attached to ttyUSB0 [ 311.322845][ T5833] usb 3-1: USB disconnect, device number 10 [ 311.339928][ T5833] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0 [ 311.355048][ T5833] upd78f0730 3-1:0.6: device disconnected [ 313.935881][ T5934] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 314.212739][ T5934] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 314.295200][ T5934] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 314.309010][ T5934] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 314.321756][ T5934] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 314.446456][ T7876] netlink: 4 bytes leftover after parsing attributes in process `syz.1.552'. [ 315.102148][ T5934] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 315.292791][ T5934] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 315.310102][ T5934] usb 4-1: Product: syz [ 315.401484][ T5934] usb 4-1: Manufacturer: syz [ 315.731766][ T5934] usb 4-1: config 0 descriptor?? [ 315.768391][ T5934] usb 4-1: can't set config #0, error -71 [ 315.838653][ T5934] usb 4-1: USB disconnect, device number 9 [ 315.958552][ T7872] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 317.181424][ T5934] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 317.361556][ T5934] usb 4-1: Using ep0 maxpacket: 32 [ 317.395107][ T5934] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 317.413148][ T5934] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 317.439001][ T5934] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 317.449945][ T5934] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 317.498780][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.503235][ T5934] usb 4-1: config 1 has no interface number 0 [ 317.505600][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.516135][ T5934] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 317.529963][ T7904] hub 2-0:1.0: USB hub found [ 317.535672][ T7904] hub 2-0:1.0: 1 port detected [ 317.619026][ T5934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.883625][ T5934] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 318.166495][ T5934] snd_usb_pod 4-1:1.1: endpoint not available, using fallback values [ 318.232744][ T5934] snd_usb_pod 4-1:1.1: invalid control EP [ 318.524484][ T7915] hub 2-0:1.0: USB hub found [ 318.532767][ T5934] snd_usb_pod 4-1:1.1: cannot start listening: -22 [ 318.550020][ T7915] hub 2-0:1.0: 1 port detected [ 318.556282][ T5934] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 318.821968][ T5934] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 318.864636][ T5934] usb 4-1: USB disconnect, device number 10 [ 319.630911][ T43] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 320.344680][ T43] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 320.497607][ T43] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 320.871100][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 320.885083][ T43] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 320.923457][ T43] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 321.352709][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 321.394868][ T43] usb 2-1: Product: syz [ 321.399687][ T43] usb 2-1: Manufacturer: syz [ 321.420976][ T43] usb 2-1: SerialNumber: syz [ 321.488861][ T43] usb 2-1: config 0 descriptor?? [ 321.502531][ T43] radio-si470x 2-1:0.0: could not find interrupt in endpoint [ 321.514329][ T43] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5 [ 321.525273][ T43] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 322.759341][ T43] usb 2-1: USB disconnect, device number 9 [ 324.283466][ T7959] netlink: 'syz.1.574': attribute type 3 has an invalid length. [ 324.291914][ T7959] netlink: 'syz.1.574': attribute type 1 has an invalid length. [ 324.299643][ T7959] netlink: 191152 bytes leftover after parsing attributes in process `syz.1.574'. [ 324.318593][ T7959] netlink: 28 bytes leftover after parsing attributes in process `syz.1.574'. [ 325.885580][ T7971] netlink: 4 bytes leftover after parsing attributes in process `syz.1.578'. [ 326.838541][ T7978] netlink: 'syz.2.581': attribute type 1 has an invalid length. [ 326.909435][ T7979] hub 2-0:1.0: USB hub found [ 326.954837][ T7979] hub 2-0:1.0: 1 port detected [ 327.104005][ T7978] 8021q: adding VLAN 0 to HW filter on device bond1 [ 327.132231][ T7986] netlink: 28 bytes leftover after parsing attributes in process `syz.2.581'. [ 327.255141][ T7982] bond1: (slave veth3): Enslaving as an active interface with a down link [ 327.349434][ T7978] vlan0: entered allmulticast mode [ 327.357830][ T7978] veth1: entered allmulticast mode [ 327.376642][ T7978] veth1: entered promiscuous mode [ 327.388618][ T7978] veth1: left promiscuous mode [ 327.398050][ T7978] bond1: (slave vlan0): making interface the new active one [ 327.408001][ T7978] veth1: entered promiscuous mode [ 327.418049][ T7978] vlan0: entered promiscuous mode [ 327.428833][ T7978] bond1: (slave vlan0): Enslaving as an active interface with an up link [ 328.130463][ T1216] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 328.763756][ T1216] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 328.791490][ T1216] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 328.862665][ T1216] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 328.907922][ T1216] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 328.936782][ T8000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.587'. [ 328.988367][ T1216] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 329.381159][ T8008] netlink: 'syz.2.588': attribute type 3 has an invalid length. [ 329.381201][ T8008] netlink: 'syz.2.588': attribute type 1 has an invalid length. [ 329.381216][ T8008] netlink: 191152 bytes leftover after parsing attributes in process `syz.2.588'. [ 329.386263][ T8008] netlink: 28 bytes leftover after parsing attributes in process `syz.2.588'. [ 329.921914][ T8006] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 330.523309][ T1216] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 330.541522][ T1216] usb 4-1: Product: syz [ 330.545875][ T1216] usb 4-1: Manufacturer: syz [ 330.551253][ T1216] usb 4-1: SerialNumber: syz [ 331.211829][ T8016] netlink: 4 bytes leftover after parsing attributes in process `syz.4.589'. [ 331.687029][ T1216] usb 4-1: config 0 descriptor?? [ 331.706553][ T1216] usb 4-1: can't set config #0, error -71 [ 331.960560][ T1216] usb 4-1: USB disconnect, device number 11 [ 337.749678][ T8050] netlink: 248 bytes leftover after parsing attributes in process `syz.4.598'. [ 339.485603][ T8061] netlink: 5128 bytes leftover after parsing attributes in process `syz.1.602'. [ 339.495621][ T8061] netlink: 5128 bytes leftover after parsing attributes in process `syz.1.602'. [ 339.814183][ T8061] netlink: 584 bytes leftover after parsing attributes in process `syz.1.602'. [ 341.185151][ T5934] usb 2-1: new low-speed USB device number 10 using dummy_hcd [ 341.513317][ T5934] usb 2-1: Invalid ep0 maxpacket: 64 [ 341.543404][ T8074] Cannot find add_set index 0 as target [ 343.852321][ T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 344.037842][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.079349][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 344.124448][ T10] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 344.155581][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.209648][ T10] usb 5-1: config 0 descriptor?? [ 345.019036][ T43] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 345.598066][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 346.447830][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 346.485796][ T43] usb 1-1: config 0 has an invalid interface number: 6 but max is 0 [ 346.518212][ T43] usb 1-1: config 0 has no interface number 0 [ 346.554990][ T43] usb 1-1: New USB device found, idVendor=064b, idProduct=7825, bcdDevice=a5.f9 [ 346.554998][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 346.557722][ T10] usb 5-1: USB disconnect, device number 11 [ 346.612839][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.664784][ T43] usb 1-1: Product: syz [ 346.679360][ T43] usb 1-1: Manufacturer: syz [ 346.687199][ T43] usb 1-1: SerialNumber: syz [ 346.709598][ T43] usb 1-1: config 0 descriptor?? [ 347.592708][ T43] upd78f0730 1-1:0.6: upd78f0730 converter detected [ 347.629675][ T43] usb 1-1: upd78f0730 converter now attached to ttyUSB0 [ 347.698122][ T43] usb 1-1: USB disconnect, device number 9 [ 347.726019][ T8120] hub 2-0:1.0: USB hub found [ 347.732814][ T8120] hub 2-0:1.0: 1 port detected [ 347.765825][ T43] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0 [ 347.793300][ T43] upd78f0730 1-1:0.6: device disconnected [ 348.015788][ T8130] netlink: 'syz.3.624': attribute type 1 has an invalid length. [ 348.153640][ T8130] 8021q: adding VLAN 0 to HW filter on device bond1 [ 348.814593][ T8132] bond1: (slave veth3): Enslaving as an active interface with a down link [ 348.904055][ T8130] vlan2: entered allmulticast mode [ 348.911476][ T8130] veth1: entered allmulticast mode [ 348.937557][ T8130] veth1: entered promiscuous mode [ 348.946474][ T8130] veth1: left promiscuous mode [ 348.958334][ T8130] bond1: (slave vlan2): making interface the new active one [ 348.968422][ T8130] veth1: entered promiscuous mode [ 348.975219][ T8130] vlan2: entered promiscuous mode [ 348.983133][ T8130] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 350.961634][ T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 351.149929][ T10] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 351.176480][ T10] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 65327, setting to 1024 [ 351.224975][ T10] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 351.264948][ T10] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 351.293601][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.331638][ T8156] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 351.343768][ T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 351.674062][ T8171] Cannot find add_set index 0 as target [ 352.938336][ T5896] usb 1-1: USB disconnect, device number 10 [ 353.371643][ T1106] vlan0: left promiscuous mode [ 361.171554][ T10] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 361.353394][ T10] usb 5-1: device descriptor read/64, error -71 [ 361.601348][ T10] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 361.904436][ T8247] Cannot find add_set index 0 as target [ 362.759830][ T8251] netlink: 4 bytes leftover after parsing attributes in process `syz.3.656'. [ 362.854576][ T10] usb 5-1: device descriptor read/64, error -71 [ 363.409217][ T10] usb usb5-port1: attempt power cycle [ 369.821468][ T5888] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 369.985783][ T5888] usb 4-1: Using ep0 maxpacket: 16 [ 370.003903][ T5888] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 370.034636][ T5888] usb 4-1: config 1 has no interface number 0 [ 370.063086][ T5888] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 370.093115][ T5888] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 370.110967][ T5888] usb 4-1: config 1 interface 105 has no altsetting 0 [ 370.125352][ T5888] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 370.135875][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.147053][ T5888] usb 4-1: Product: syz [ 370.152377][ T5888] usb 4-1: Manufacturer: syz [ 370.157195][ T5888] usb 4-1: SerialNumber: syz [ 370.179241][ T8294] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 370.197637][ T8294] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 370.255528][ T7276] vlan2: left promiscuous mode [ 370.438032][ T8316] hub 2-0:1.0: USB hub found [ 370.446482][ T8316] hub 2-0:1.0: 1 port detected [ 370.932833][ T5880] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 371.191990][ T8294] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 371.199492][ T8294] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 371.389718][ T8325] netlink: 4 bytes leftover after parsing attributes in process `syz.0.678'. [ 371.738800][ T5888] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 371.758043][ T5888] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 371.774515][ T5888] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 372.955976][ T5888] aqc111 4-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 20:fc:94:45:3a:41 [ 373.163950][ T5888] usb 4-1: USB disconnect, device number 12 [ 373.206504][ T5888] aqc111 4-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 373.375157][ T8338] netlink: 'syz.2.681': attribute type 3 has an invalid length. [ 373.383531][ T8338] netlink: 'syz.2.681': attribute type 1 has an invalid length. [ 373.391931][ T8338] netlink: 191152 bytes leftover after parsing attributes in process `syz.2.681'. [ 373.410505][ T8338] netlink: 28 bytes leftover after parsing attributes in process `syz.2.681'. [ 373.848522][ T8337] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 374.347160][ T5888] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 374.451140][ T5888] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 374.494468][ T5888] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 376.091075][ T5880] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 376.248762][ T5880] usb 4-1: device descriptor read/64, error -71 [ 376.663856][ T5880] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 377.984914][ T5880] usb 4-1: device descriptor read/64, error -71 [ 378.164179][ T5880] usb usb4-port1: attempt power cycle [ 378.648394][ T8388] hub 2-0:1.0: USB hub found [ 378.657632][ T8388] hub 2-0:1.0: 1 port detected [ 378.946195][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.047784][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.574496][ T8382] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 379.779868][ T8393] netlink: 4 bytes leftover after parsing attributes in process `syz.2.698'. [ 379.878422][ T8393] bond_slave_0: entered promiscuous mode [ 379.884840][ T8393] bond_slave_1: entered promiscuous mode [ 382.311524][ T5888] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 383.021968][ T5888] usb 1-1: device descriptor read/64, error -71 [ 383.271207][ T5888] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 383.301074][ T1216] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 383.461004][ T5888] usb 1-1: device descriptor read/64, error -71 [ 383.504052][ T1216] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 383.851502][ T5888] usb usb1-port1: attempt power cycle [ 383.858402][ T1216] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 383.893387][ T1216] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 383.944353][ T1216] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.043304][ T1216] usb 4-1: config 0 descriptor?? [ 384.231080][ T5888] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 384.273703][ T5888] usb 1-1: device descriptor read/8, error -71 [ 384.493629][ T1216] kovaplus 0003:1E7D:2D50.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.3-1/input0 [ 384.520963][ T5888] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 384.551219][ T5888] usb 1-1: device descriptor read/8, error -71 [ 384.560426][ T43] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 385.182082][ T5888] usb usb1-port1: unable to enumerate USB device [ 385.387511][ T1216] kovaplus 0003:1E7D:2D50.0005: couldn't init struct kovaplus_device [ 385.399743][ T1216] kovaplus 0003:1E7D:2D50.0005: couldn't install mouse [ 385.433016][ T1216] kovaplus 0003:1E7D:2D50.0005: probe with driver kovaplus failed with error -5 [ 385.539745][ T43] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 385.569546][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.618724][ T43] usb 2-1: Product: syz [ 385.636072][ T43] usb 2-1: Manufacturer: syz [ 385.645487][ T5833] usb 4-1: USB disconnect, device number 16 [ 385.685227][ T43] usb 2-1: SerialNumber: syz [ 385.774971][ T43] usb 2-1: config 0 descriptor?? [ 386.005040][ T43] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 388.033187][ T43] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 388.076344][ T43] usb 2-1: USB disconnect, device number 13 [ 388.154616][ T5964] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 389.101174][ T5964] usb 5-1: Using ep0 maxpacket: 32 [ 389.165563][ T5964] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 389.194266][ T5964] usb 5-1: config 0 has no interface number 0 [ 389.241700][ T5964] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 389.276778][ T5964] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.302686][ T5964] usb 5-1: Product: syz [ 389.315691][ T5964] usb 5-1: Manufacturer: syz [ 389.330950][ T5964] usb 5-1: SerialNumber: syz [ 389.349618][ T5964] usb 5-1: config 0 descriptor?? [ 389.374171][ T5964] smsc95xx v2.0.0 [ 389.543940][ T43] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 389.641767][ T5920] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 389.801426][ T5964] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 389.815337][ T5964] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 389.823539][ T5920] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 390.316478][ T5920] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 65327, setting to 1024 [ 390.329980][ T5920] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 390.341968][ T5920] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 390.353096][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 390.355640][ T43] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 390.373982][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.374266][ T5964] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 390.395443][ T43] usb 1-1: config 0 has no interface number 0 [ 390.395681][ T8506] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 390.404985][ T43] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 390.415122][ T5920] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 390.419792][ T5964] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -32 [ 390.452820][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.579143][ T43] usb 1-1: Product: syz [ 390.607235][ T43] usb 1-1: Manufacturer: syz [ 390.607565][ T5880] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 390.614232][ T43] usb 1-1: SerialNumber: syz [ 391.823371][ T43] usb 1-1: config 0 descriptor?? [ 391.957599][ T43] smsc95xx v2.0.0 [ 391.963553][ T5888] usb 5-1: USB disconnect, device number 15 [ 391.994663][ T5880] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 392.029313][ T5880] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 392.081891][ T5880] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 392.097460][ T5880] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 392.126658][ T5880] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 392.146404][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 392.159284][ T5880] usb 2-1: Product: syz [ 392.167875][ T5880] usb 2-1: Manufacturer: syz [ 392.173635][ T5880] usb 2-1: SerialNumber: syz [ 392.212621][ T5880] usb 2-1: config 0 descriptor?? [ 392.271831][ T5880] radio-si470x 2-1:0.0: could not find interrupt in endpoint [ 392.301702][ T43] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 392.315082][ T5880] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5 [ 392.338424][ T10] usb 4-1: USB disconnect, device number 17 [ 392.355672][ T43] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 392.361938][ T5880] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 392.654807][ T43] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 392.746874][ T43] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -32 [ 393.215210][ T8533] netlink: 4 bytes leftover after parsing attributes in process `syz.3.740'. [ 393.242184][ T8533] bond_slave_0: entered promiscuous mode [ 393.248187][ T8533] bond_slave_1: entered promiscuous mode [ 393.267052][ T8533] bond_slave_0: left promiscuous mode [ 393.272683][ T8533] bond_slave_1: left promiscuous mode [ 393.494904][ T5880] usb 2-1: USB disconnect, device number 14 [ 393.733893][ T8536] netlink: 104 bytes leftover after parsing attributes in process `syz.1.741'. [ 393.786031][ T8540] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003 [ 394.085172][ T5888] usb 1-1: USB disconnect, device number 15 [ 394.371783][ T43] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 394.444736][ T8556] hub 2-0:1.0: USB hub found [ 394.451829][ T8556] hub 2-0:1.0: 1 port detected [ 394.665676][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 394.806407][ T5888] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 395.562034][ T43] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 395.570207][ T43] usb 5-1: config 0 has no interface number 0 [ 395.645145][ T43] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 395.660622][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.745697][ T5888] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 395.767476][ T43] usb 5-1: Product: syz [ 395.791771][ T5888] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 65327, setting to 1024 [ 395.819968][ T43] usb 5-1: Manufacturer: syz [ 395.851442][ T43] usb 5-1: SerialNumber: syz [ 395.856320][ T5888] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 395.871491][ T43] usb 5-1: config 0 descriptor?? [ 395.904627][ T43] smsc95xx v2.0.0 [ 395.911359][ T5888] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 395.950795][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.990629][ T8555] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 396.026771][ T5888] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 396.712062][ T43] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 396.774055][ T43] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 396.945855][ T1216] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 397.009596][ T43] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 397.055293][ T43] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -32 [ 397.134401][ T1216] usb 2-1: config 0 has no interfaces? [ 397.149376][ T1216] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 397.214054][ T8569] trusted_key: encrypted_key: insufficient parameters specified [ 397.405783][ T1216] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 397.408020][ T10] usb 1-1: USB disconnect, device number 16 [ 397.607542][ T1216] usb 2-1: Product: syz [ 398.181981][ T1216] usb 2-1: Manufacturer: syz [ 398.186659][ T1216] usb 2-1: SerialNumber: syz [ 398.284134][ T1216] usb 2-1: config 0 descriptor?? [ 398.304432][ T10] usb 5-1: USB disconnect, device number 16 [ 398.546546][ T8561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.557443][ T8561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.146172][ T1216] usb 2-1: USB disconnect, device number 15 [ 400.661695][ T5896] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 400.930544][ T8601] netlink: 64 bytes leftover after parsing attributes in process `syz.4.760'. [ 401.642445][ T5896] usb 1-1: Using ep0 maxpacket: 32 [ 401.652918][ T5896] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 401.665219][ T5896] usb 1-1: config 0 has no interface number 0 [ 401.680367][ T5896] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 401.690215][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.703947][ T5896] usb 1-1: Product: syz [ 401.706094][ T8603] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 401.708338][ T5896] usb 1-1: Manufacturer: syz [ 401.722807][ T5896] usb 1-1: SerialNumber: syz [ 401.722961][ T8603] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 401.772681][ T5896] usb 1-1: config 0 descriptor?? [ 401.788935][ T5896] smsc95xx v2.0.0 [ 401.802290][ T8603] F2FS-fs (loop2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 401.812067][ T8603] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 402.213265][ T5896] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 402.242946][ T5896] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 402.520322][ T5896] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 402.613252][ T5896] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -32 [ 403.802371][ T5920] usb 1-1: USB disconnect, device number 17 [ 405.032119][ T5920] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 405.241479][ T5920] usb 1-1: Using ep0 maxpacket: 32 [ 405.258794][ T5920] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 405.341557][ T10] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 405.381829][ T5920] usb 1-1: config 0 has no interface number 0 [ 405.408642][ T5920] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 405.633529][ T10] usb 3-1: config 0 has no interfaces? [ 405.698286][ T5920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.765738][ T10] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 405.801475][ T5920] usb 1-1: Product: syz [ 405.812048][ T5920] usb 1-1: Manufacturer: syz [ 405.816995][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 405.830997][ T8624] Bluetooth: MGMT ver 1.23 [ 405.837597][ T5920] usb 1-1: SerialNumber: syz [ 405.850127][ T10] usb 3-1: Product: syz [ 406.211907][ T5920] usb 1-1: config 0 descriptor?? [ 406.307381][ T10] usb 3-1: Manufacturer: syz [ 406.443370][ T10] usb 3-1: SerialNumber: syz [ 406.449178][ T5920] smsc95xx v2.0.0 [ 406.473085][ T10] usb 3-1: config 0 descriptor?? [ 406.688641][ T8628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.698674][ T8628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.914591][ T5920] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 407.225021][ T8645] trusted_key: encrypted_key: insufficient parameters specified [ 407.401362][ T5920] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 407.432178][ T5920] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 407.451683][ T5920] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -32 [ 407.730682][ T8648] netlink: 104 bytes leftover after parsing attributes in process `syz.1.773'. [ 407.789219][ T10] usb 3-1: USB disconnect, device number 11 [ 408.241587][ T10] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 408.401438][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 408.408956][ T10] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 408.446447][ T10] usb 3-1: config 0 has no interface number 0 [ 408.474523][ T10] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 408.501586][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.509759][ T10] usb 3-1: Product: syz [ 408.515406][ T10] usb 3-1: Manufacturer: syz [ 408.522552][ T10] usb 3-1: SerialNumber: syz [ 408.535379][ T10] usb 3-1: config 0 descriptor?? [ 408.554277][ T10] smsc95xx v2.0.0 [ 409.307219][ T10] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 409.361499][ T10] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 409.398025][ T1216] usb 1-1: USB disconnect, device number 18 [ 409.585875][ T10] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 409.609571][ T10] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -32 [ 410.422047][ T5896] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 410.475707][ T8681] netlink: 104 bytes leftover after parsing attributes in process `syz.4.784'. [ 411.054906][ T5896] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 411.093621][ T5896] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 65327, setting to 1024 [ 411.124819][ T5920] usb 3-1: USB disconnect, device number 12 [ 411.162426][ T5896] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 411.195700][ T5896] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 411.236354][ T5896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.383833][ T8676] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 411.397127][ T5896] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 411.941664][ T8699] netlink: 52 bytes leftover after parsing attributes in process `syz.2.787'. [ 414.537418][ T10] usb 1-1: USB disconnect, device number 19 [ 415.362303][ T5963] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 415.553459][ T5963] usb 3-1: Using ep0 maxpacket: 32 [ 415.701285][ T5963] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 415.798684][ T5963] usb 3-1: config 0 has no interface number 0 [ 415.984954][ T5963] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 416.024053][ T5963] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.042951][ T5963] usb 3-1: Product: syz [ 416.061254][ T5963] usb 3-1: Manufacturer: syz [ 416.218680][ T5963] usb 3-1: SerialNumber: syz [ 417.462605][ T5963] usb 3-1: config 0 descriptor?? [ 417.507101][ T5963] smsc95xx v2.0.0 [ 418.242141][ T8707] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 418.289716][ T5963] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 418.304194][ T5963] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 418.355804][ T5963] usb 3-1: USB disconnect, device number 13 [ 418.503182][ T8707] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 418.542631][ T8707] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 65327, setting to 1024 [ 418.596232][ T8707] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 418.765669][ T8707] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 418.793880][ T8707] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.948367][ T8753] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 419.119073][ T8707] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 426.674251][ T5880] usb 1-1: USB disconnect, device number 20 [ 429.291542][ T8811] netlink: 16 bytes leftover after parsing attributes in process `syz.0.820'. [ 429.321570][ T8811] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 429.329068][ T8811] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 429.435293][ T8811] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 429.444093][ T8811] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 431.633015][ T8820] netlink: 5128 bytes leftover after parsing attributes in process `syz.0.823'. [ 431.643174][ T8820] netlink: 5128 bytes leftover after parsing attributes in process `syz.0.823'. [ 431.652898][ T8820] netlink: 584 bytes leftover after parsing attributes in process `syz.0.823'. [ 431.874028][ T8828] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 431.912582][ T8828] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 431.939602][ T8828] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 431.949438][ T8828] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 432.004504][ T8707] usb 1-1: new low-speed USB device number 21 using dummy_hcd [ 432.171449][ T8707] usb 1-1: Invalid ep0 maxpacket: 64 [ 432.201646][ T1216] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 433.506785][ T1216] usb 2-1: Using ep0 maxpacket: 32 [ 433.524407][ T1216] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 433.533740][ T1216] usb 2-1: config 0 has no interface number 0 [ 433.542430][ T1216] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 433.552684][ T1216] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.561874][ T1216] usb 2-1: Product: syz [ 434.512557][ T5963] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 434.564214][ T1216] usb 2-1: Manufacturer: syz [ 434.601609][ T1216] usb 2-1: SerialNumber: syz [ 434.655555][ T1216] usb 2-1: config 0 descriptor?? [ 434.680130][ T1216] smsc95xx v2.0.0 [ 434.781162][ T5963] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 434.783829][ T8849] netlink: 'syz.2.830': attribute type 4 has an invalid length. [ 434.805345][ T8849] netlink: 152 bytes leftover after parsing attributes in process `syz.2.830'. [ 434.878798][ T8849] : renamed from bond0 (while UP) [ 435.252907][ T8849] bond_slave_0: left promiscuous mode [ 435.258818][ T8849] bond_slave_1: left promiscuous mode [ 435.393934][ T5963] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 65327, setting to 1024 [ 435.441591][ T1216] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 435.455972][ T1216] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 435.464804][ T5963] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 435.556741][ T5963] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 435.588852][ T1216] usb 2-1: USB disconnect, device number 16 [ 435.609304][ T5963] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.722347][ T5963] usb 5-1: can't set config #27, error -71 [ 435.751992][ T5963] usb 5-1: USB disconnect, device number 17 [ 436.377193][ T8859] hub 6-0:1.0: USB hub found [ 436.384553][ T8859] hub 6-0:1.0: 1 port detected [ 437.289613][ T8707] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 438.295337][ T8707] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 438.306663][ T8707] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 438.331164][ T8707] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 438.343393][ T8707] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.397652][ T8707] usb 1-1: config 0 descriptor?? [ 438.849573][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 438.857690][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 438.866063][ T8707] usbhid 1-1:0.0: can't add hid device: -32 [ 438.873012][ T8707] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 438.997955][ T8875] netlink: 5128 bytes leftover after parsing attributes in process `syz.1.839'. [ 439.009095][ T8875] netlink: 5128 bytes leftover after parsing attributes in process `syz.1.839'. [ 439.018711][ T8875] netlink: 584 bytes leftover after parsing attributes in process `syz.1.839'. [ 439.056543][ T8707] usb 1-1: USB disconnect, device number 23 [ 439.271578][ T5833] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 439.291645][ T5920] usb 2-1: new low-speed USB device number 17 using dummy_hcd [ 439.431048][ T5833] usb 4-1: Using ep0 maxpacket: 32 [ 439.444486][ T5833] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 439.472901][ T5920] usb 2-1: Invalid ep0 maxpacket: 64 [ 439.486236][ T5833] usb 4-1: config 0 has no interface number 0 [ 439.522953][ T5833] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 439.552455][ T5833] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.739733][ T5833] usb 4-1: Product: syz [ 439.747435][ T5833] usb 4-1: Manufacturer: syz [ 439.762310][ T5833] usb 4-1: SerialNumber: syz [ 439.868111][ T8881] hub 6-0:1.0: USB hub found [ 439.875762][ T8881] hub 6-0:1.0: 1 port detected [ 440.591481][ T5920] usb 2-1: new low-speed USB device number 18 using dummy_hcd [ 440.719244][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.726618][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.797284][ T5833] usb 4-1: config 0 descriptor?? [ 440.818264][ T5833] smsc95xx v2.0.0 [ 440.961618][ T5920] usb 2-1: Invalid ep0 maxpacket: 64 [ 441.937393][ T5920] usb usb2-port1: attempt power cycle [ 442.199555][ T5833] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 442.241218][ T5880] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 442.293939][ T5833] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 442.474085][ T8898] random: crng reseeded on system resumption [ 442.548411][ T5833] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 442.582761][ T5880] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 442.602342][ T5833] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -32 [ 442.622219][ T5880] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 65327, setting to 1024 [ 442.660873][ T5880] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 442.687646][ T5880] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 442.708362][ T5880] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.754307][ T8891] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 442.779544][ T5880] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 443.284202][ T8912] Cannot find add_set index 0 as target [ 445.175812][ T5896] usb 4-1: USB disconnect, device number 18 [ 445.352973][ T8925] hub 6-0:1.0: USB hub found [ 445.357992][ T8925] hub 6-0:1.0: 1 port detected [ 446.735662][ T5896] usb 1-1: USB disconnect, device number 24 [ 447.104512][ T8940] netlink: 5128 bytes leftover after parsing attributes in process `syz.2.856'. [ 447.121519][ T8940] netlink: 5128 bytes leftover after parsing attributes in process `syz.2.856'. [ 447.133309][ T8940] netlink: 584 bytes leftover after parsing attributes in process `syz.2.856'. [ 447.942150][ T5888] usb 3-1: new low-speed USB device number 14 using dummy_hcd [ 448.305944][ T5888] usb 3-1: Invalid ep0 maxpacket: 64 [ 449.291340][ T5888] usb 3-1: new low-speed USB device number 15 using dummy_hcd [ 449.613933][ T5888] usb 3-1: Invalid ep0 maxpacket: 64 [ 449.642001][ T5888] usb usb3-port1: attempt power cycle [ 449.826071][ T8974] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 449.846937][ T8974] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 449.873875][ T8974] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 449.883684][ T8974] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 450.011683][ T5888] usb 3-1: new low-speed USB device number 16 using dummy_hcd [ 450.061896][ T5896] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 450.072223][ T5888] usb 3-1: device descriptor read/8, error -71 [ 450.244864][ T5896] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 450.305625][ T5896] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 450.345492][ T5896] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 450.357355][ T5896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.418423][ T5896] usb 1-1: config 0 descriptor?? [ 450.994375][ T8991] netlink: 'syz.2.873': attribute type 1 has an invalid length. [ 451.065900][ T5896] usbhid 1-1:0.0: can't add hid device: -71 [ 451.106852][ T5896] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 451.264547][ T8996] netlink: 'syz.1.874': attribute type 4 has an invalid length. [ 451.274044][ T8996] netlink: 152 bytes leftover after parsing attributes in process `syz.1.874'. [ 451.651586][ T5896] usb 1-1: USB disconnect, device number 25 [ 451.702729][ T8997] netlink: 28 bytes leftover after parsing attributes in process `syz.2.873'. [ 451.704452][ T8991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 451.929785][ T8993] bond0: (slave veth5): Enslaving as an active interface with a down link [ 451.951877][ T8996] : renamed from bond0 [ 452.807890][ T9012] netlink: 5128 bytes leftover after parsing attributes in process `syz.1.880'. [ 452.824108][ T9012] netlink: 5128 bytes leftover after parsing attributes in process `syz.1.880'. [ 452.840491][ T9012] netlink: 584 bytes leftover after parsing attributes in process `syz.1.880'. [ 453.365221][ T9018] netlink: 4 bytes leftover after parsing attributes in process `syz.4.881'. [ 453.631874][ T5920] usb 2-1: new low-speed USB device number 20 using dummy_hcd [ 453.825836][ T5920] usb 2-1: Invalid ep0 maxpacket: 64 [ 454.023303][ T5920] usb 2-1: new low-speed USB device number 21 using dummy_hcd [ 454.202188][ T5920] usb 2-1: Invalid ep0 maxpacket: 64 [ 454.246396][ T5920] usb usb2-port1: attempt power cycle [ 454.671989][ T5920] usb 2-1: new low-speed USB device number 22 using dummy_hcd [ 454.718125][ T5920] usb 2-1: Invalid ep0 maxpacket: 64 [ 456.201779][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802935bc00: rx timeout, send abort [ 456.213337][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88802935bc00: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 456.713484][ T5920] usb 2-1: new low-speed USB device number 23 using dummy_hcd [ 456.781782][ T43] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 457.047309][ T43] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 457.058774][ T5920] usb 2-1: device not accepting address 23, error -71 [ 457.061664][ T5920] usb usb2-port1: unable to enumerate USB device [ 457.167212][ T43] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 457.421541][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 457.451493][ T43] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 457.552290][ T43] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 457.590872][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 457.599115][ T43] usb 4-1: Product: syz [ 457.674439][ T43] usb 4-1: Manufacturer: syz [ 457.679131][ T43] usb 4-1: SerialNumber: syz [ 457.896809][ T43] usb 4-1: config 0 descriptor?? [ 457.931527][ T43] usb 4-1: can't set config #0, error -71 [ 457.939529][ T43] usb 4-1: USB disconnect, device number 19 [ 458.493400][ T5920] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 458.934996][ T5920] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 459.055610][ T5920] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 459.111700][ T5920] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 459.132732][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 459.164655][ T5920] usb 2-1: Product: syz [ 459.168905][ T5920] usb 2-1: Manufacturer: syz [ 459.466586][ T5920] usb 2-1: SerialNumber: syz [ 459.545384][ T5920] usb 2-1: config 0 descriptor?? [ 459.575084][ T5920] radio-si470x 2-1:0.0: could not find interrupt in endpoint [ 459.614796][ T5920] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5 [ 459.655278][ T5920] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 459.794622][ T9046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.804621][ T9046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.405181][ T5920] usb 2-1: USB disconnect, device number 24 [ 462.319620][ T9085] hub 2-0:1.0: USB hub found [ 462.336144][ T9085] hub 2-0:1.0: 1 port detected [ 463.989797][ T9084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 464.614190][ T5880] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 464.691560][ T43] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 464.700104][ T9098] netlink: 20 bytes leftover after parsing attributes in process `syz.4.905'. [ 464.822187][ T5880] usb 4-1: Using ep0 maxpacket: 32 [ 464.853427][ T5880] usb 4-1: config 0 has an invalid interface number: 225 but max is 0 [ 464.862869][ T5880] usb 4-1: config 0 has no interface number 0 [ 464.897984][ T5880] usb 4-1: New USB device found, idVendor=0856, idProduct=ac30, bcdDevice=7e.79 [ 464.912253][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.931494][ T5880] usb 4-1: Product: syz [ 464.953804][ T43] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 464.974322][ T43] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 464.983815][ T5880] usb 4-1: Manufacturer: syz [ 465.004511][ T5880] usb 4-1: SerialNumber: syz [ 465.004661][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 465.047438][ T5880] usb 4-1: config 0 descriptor?? [ 465.155969][ T43] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 465.473267][ T43] usb 1-1: string descriptor 0 read error: -71 [ 465.479847][ T43] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 465.493136][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 465.878394][ T43] usb 1-1: config 0 descriptor?? [ 466.672530][ T43] usb 1-1: can't set config #0, error -71 [ 466.745574][ T43] usb 1-1: USB disconnect, device number 26 [ 468.164399][ T9121] hub 2-0:1.0: USB hub found [ 468.173868][ T9121] hub 2-0:1.0: 1 port detected [ 469.764005][ T9135] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003 [ 470.136183][ T5880] mos7840 4-1:0.225: required endpoints missing [ 470.358138][ T8707] usb 4-1: USB disconnect, device number 20 [ 471.858359][ T8707] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 472.957641][ T8707] usb 3-1: device descriptor read/64, error -71 [ 473.145738][ T9157] netlink: 'syz.0.922': attribute type 4 has an invalid length. [ 473.157632][ T9157] netlink: 152 bytes leftover after parsing attributes in process `syz.0.922'. [ 473.332719][ T8707] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 473.371134][ T8893] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 473.392831][ T9157] : renamed from bond0 (while UP) [ 473.558867][ T8707] usb 3-1: device descriptor read/64, error -71 [ 473.686522][ T9160] netlink: 104 bytes leftover after parsing attributes in process `syz.1.925'. [ 473.762223][ T8707] usb usb3-port1: attempt power cycle [ 473.991382][ T8893] usb 5-1: device not accepting address 18, error -71 [ 475.559561][ T9187] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 475.566140][ T9187] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 475.597939][ T9187] vhci_hcd vhci_hcd.0: Device attached [ 475.641535][ T8707] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 475.684830][ T8707] usb 3-1: Using ep0 maxpacket: 32 [ 475.695561][ T8707] usb 3-1: config 0 has an invalid interface number: 225 but max is 0 [ 475.706965][ T8707] usb 3-1: config 0 has no interface number 0 [ 475.721723][ T8707] usb 3-1: New USB device found, idVendor=0856, idProduct=ac30, bcdDevice=7e.79 [ 475.736511][ T8707] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.746954][ T8707] usb 3-1: Product: syz [ 475.748884][ T9196] hub 2-0:1.0: USB hub found [ 475.755231][ T8707] usb 3-1: Manufacturer: syz [ 475.768180][ T8707] usb 3-1: SerialNumber: syz [ 475.785798][ T9196] hub 2-0:1.0: 1 port detected [ 475.861883][ T43] usb 33-1: new high-speed USB device number 2 using vhci_hcd [ 475.902679][ T9190] vhci_hcd: connection reset by peer [ 475.915723][ T1106] vhci_hcd: stop threads [ 475.936851][ T1106] vhci_hcd: release socket [ 475.954063][ T8707] usb 3-1: config 0 descriptor?? [ 475.966004][ T1106] vhci_hcd: disconnect device [ 476.391990][ T8707] mos7840 3-1:0.225: required endpoints missing [ 476.444032][ T8707] usb 3-1: USB disconnect, device number 20 [ 476.758250][ T9202] netlink: 104 bytes leftover after parsing attributes in process `syz.1.939'. [ 478.125449][ T8707] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 478.435192][ T8707] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 478.471621][ T8707] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 479.488282][ T8707] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 479.498420][ T8707] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 479.507694][ T8707] usb 1-1: Product: syz [ 479.512692][ T8707] usb 1-1: Manufacturer: syz [ 479.517349][ T8707] usb 1-1: SerialNumber: syz [ 479.526985][ T8707] usb 1-1: config 0 descriptor?? [ 479.818284][ T8707] usb 1-1: can't set config #0, error -71 [ 479.826765][ T8707] usb 1-1: USB disconnect, device number 28 [ 479.885623][ T5963] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 479.919665][ T9230] netlink: 104 bytes leftover after parsing attributes in process `syz.2.950'. [ 480.122041][ T5963] usb 2-1: Using ep0 maxpacket: 32 [ 480.156207][ T5963] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 480.187796][ T5963] usb 2-1: config 0 has no interface number 0 [ 480.218319][ T5963] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 480.244260][ T5963] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.320036][ T5963] usb 2-1: Product: syz [ 480.335466][ T5963] usb 2-1: Manufacturer: syz [ 480.340197][ T5963] usb 2-1: SerialNumber: syz [ 481.306424][ T5963] usb 2-1: config 0 descriptor?? [ 481.332357][ T5963] smsc95xx v2.0.0 [ 481.336079][ T5963] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 481.364693][ T43] vhci_hcd: vhci_device speed not set [ 481.391931][ T5963] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -22 [ 481.753808][ T8707] usb 2-1: USB disconnect, device number 25 [ 481.925856][ T5920] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 482.591775][ T5920] usb 5-1: Using ep0 maxpacket: 32 [ 482.662862][ T5920] usb 5-1: config 0 has an invalid interface number: 225 but max is 0 [ 482.755943][ T5920] usb 5-1: config 0 has no interface number 0 [ 482.823839][ T5920] usb 5-1: New USB device found, idVendor=0856, idProduct=ac30, bcdDevice=7e.79 [ 482.844483][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.465023][ T5920] usb 5-1: Product: syz [ 484.513378][ T5920] usb 5-1: Manufacturer: syz [ 484.624868][ T5920] usb 5-1: SerialNumber: syz [ 484.854000][ T5920] usb 5-1: config 0 descriptor?? [ 485.532103][ T10] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 485.723064][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 485.938313][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 485.969286][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 486.054644][ T10] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 486.095477][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 486.107965][ T9272] netlink: 104 bytes leftover after parsing attributes in process `syz.1.963'. [ 486.142072][ T10] usb 3-1: Product: syz [ 486.146352][ T10] usb 3-1: Manufacturer: syz [ 486.176234][ T10] usb 3-1: SerialNumber: syz [ 486.245993][ T10] usb 3-1: config 0 descriptor?? [ 486.325176][ T10] radio-si470x 3-1:0.0: could not find interrupt in endpoint [ 486.362312][ T10] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -5 [ 486.436825][ T10] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 486.494332][ T9269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.504531][ T9269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 488.003075][ T10] usb 3-1: USB disconnect, device number 21 [ 488.445389][ T9296] random: crng reseeded on system resumption [ 488.847869][ T5920] usb 5-1: can't set config #0, error -71 [ 488.865246][ T5920] usb 5-1: USB disconnect, device number 20 [ 489.125752][ T9295] netlink: 8 bytes leftover after parsing attributes in process `syz.1.972'. [ 489.326302][ T9309] netlink: 4 bytes leftover after parsing attributes in process `syz.4.974'. [ 490.368561][ T9315] netlink: 104 bytes leftover after parsing attributes in process `syz.2.976'. [ 491.455395][ T9326] netlink: 'syz.2.980': attribute type 1 has an invalid length. [ 491.597047][ T9326] 8021q: adding VLAN 0 to HW filter on device bond2 [ 491.712019][ T43] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 491.769861][ T9329] bond2: (slave veth7): Enslaving as an active interface with a down link [ 491.903316][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 491.911773][ T9331] bond2: (slave veth0_to_bond): making interface the new active one [ 492.059938][ T43] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 492.101663][ T9331] veth0_to_bond: entered promiscuous mode [ 492.162521][ T43] usb 5-1: config 0 has no interface number 0 [ 492.184922][ T43] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 492.204297][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.232172][ T43] usb 5-1: Product: syz [ 492.243312][ T9331] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 492.265989][ T43] usb 5-1: Manufacturer: syz [ 492.292498][ T43] usb 5-1: SerialNumber: syz [ 492.311762][ T5880] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 492.330088][ T43] usb 5-1: config 0 descriptor?? [ 492.354764][ T43] smsc95xx v2.0.0 [ 492.361157][ T43] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 492.401898][ T43] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -22 [ 492.472665][ T5880] usb 1-1: Using ep0 maxpacket: 8 [ 492.479903][ T5880] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 492.543145][ T5880] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 492.556765][ T5880] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 492.565692][ T5880] usb 1-1: Product: syz [ 492.573762][ T5880] usb 1-1: Manufacturer: syz [ 492.578417][ T5880] usb 1-1: SerialNumber: syz [ 492.864847][ T5880] usb 1-1: Invalid connection information received from device [ 492.882278][ T10] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 493.678164][ T9331] syz.2.980 (9331) used greatest stack depth: 20120 bytes left [ 493.753504][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 493.765792][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 493.787821][ T10] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 493.799497][ T9334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.804346][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.817969][ T9334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.864261][ T5880] usb 1-1: USB disconnect, device number 29 [ 493.948761][ T10] usb 2-1: config 0 descriptor?? [ 494.568552][ T43] usb 5-1: USB disconnect, device number 21 [ 494.755955][ T10] kovaplus 0003:1E7D:2D50.0006: unknown main item tag 0x4 [ 494.781768][ T10] kovaplus 0003:1E7D:2D50.0006: item fetching failed at offset 3/5 [ 494.832452][ T10] kovaplus 0003:1E7D:2D50.0006: parse failed [ 494.838721][ T10] kovaplus 0003:1E7D:2D50.0006: probe with driver kovaplus failed with error -22 [ 495.200868][ T9357] netlink: 'syz.4.989': attribute type 1 has an invalid length. [ 495.275187][ T9365] netlink: 8 bytes leftover after parsing attributes in process `syz.3.990'. [ 496.082199][ T5880] usb 2-1: USB disconnect, device number 26 [ 498.733064][ T5880] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 498.792884][ T9394] netlink: 'syz.3.998': attribute type 1 has an invalid length. [ 499.452306][ T9394] 8021q: adding VLAN 0 to HW filter on device bond2 [ 499.469573][ T5880] usb 2-1: config 0 has no interfaces? [ 499.488609][ T5880] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 499.554206][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.617704][ T5880] usb 2-1: config 0 descriptor?? [ 499.672079][ T9399] bond2: (slave veth5): Enslaving as an active interface with a down link [ 499.773411][ T9400] bond2: (slave veth0_to_bond): making interface the new active one [ 499.796507][ T9400] veth0_to_bond: entered promiscuous mode [ 499.806173][ T9400] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 499.847185][ T5880] usb 2-1: USB disconnect, device number 27 [ 501.815569][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.832154][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.849249][ T9433] netlink: 'syz.2.1008': attribute type 3 has an invalid length. [ 503.858416][ T9433] netlink: 'syz.2.1008': attribute type 1 has an invalid length. [ 503.867473][ T9433] netlink: 191152 bytes leftover after parsing attributes in process `syz.2.1008'. [ 503.885512][ T9433] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1008'. [ 504.083612][ T9431] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 504.257108][ T9429] syz.3.1009 (9429) used greatest stack depth: 17816 bytes left [ 507.633112][ T9461] netlink: 'syz.1.1016': attribute type 1 has an invalid length. [ 509.405963][ T9494] netlink: 'syz.2.1024': attribute type 3 has an invalid length. [ 509.414142][ T9494] netlink: 'syz.2.1024': attribute type 1 has an invalid length. [ 509.423651][ T9494] netlink: 191152 bytes leftover after parsing attributes in process `syz.2.1024'. [ 509.443670][ T9494] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1024'. [ 509.952696][ T9492] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 510.315546][ T9501] netlink: 'syz.2.1026': attribute type 1 has an invalid length. [ 510.979542][ T9501] 8021q: adding VLAN 0 to HW filter on device bond3 [ 512.445002][ T9504] bond3: (slave veth9): Enslaving as an active interface with a down link [ 512.529018][ T9506] bond2: (slave veth0_to_bond): Releasing active interface [ 512.553716][ T9506] veth0_to_bond: left promiscuous mode [ 512.603283][ T9506] bond3: (slave veth0_to_bond): making interface the new active one [ 512.623165][ T9506] veth0_to_bond: entered promiscuous mode [ 512.634701][ T9506] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 512.981667][ T9529] Cannot find add_set index 0 as target [ 513.375742][ T9539] netlink: 'syz.4.1033': attribute type 1 has an invalid length. [ 513.793464][ T9544] netlink: 'syz.3.1036': attribute type 3 has an invalid length. [ 513.802550][ T9544] netlink: 'syz.3.1036': attribute type 1 has an invalid length. [ 513.811737][ T9544] netlink: 191152 bytes leftover after parsing attributes in process `syz.3.1036'. [ 513.829752][ T9544] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1036'. [ 514.171958][ T9542] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 516.426150][ T9556] hub 2-0:1.0: USB hub found [ 516.466459][ T9556] hub 2-0:1.0: 1 port detected [ 519.964635][ T9590] netlink: 'syz.4.1048': attribute type 1 has an invalid length. [ 520.022193][ T5833] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 520.309814][ T9590] 8021q: adding VLAN 0 to HW filter on device bond2 [ 520.317459][ T5833] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 521.292752][ T5833] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 521.505394][ T5833] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 521.526940][ T5833] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 521.539472][ T5833] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.364917][ T9596] bond2: (slave veth5): Enslaving as an active interface with a down link [ 522.619920][ T9598] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 522.797933][ T1106] veth0_to_bond: left promiscuous mode [ 525.271376][ T5833] usb 2-1: can't set config #27, error -71 [ 525.284495][ T5833] usb 2-1: USB disconnect, device number 28 [ 525.322401][ T5920] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 525.521853][ T5920] usb 5-1: Using ep0 maxpacket: 32 [ 525.542773][ T5920] usb 5-1: config 0 has an invalid interface number: 6 but max is 0 [ 525.558577][ T5920] usb 5-1: config 0 has no interface number 0 [ 525.746854][ T9651] netlink: 'syz.0.1066': attribute type 4 has an invalid length. [ 525.756201][ T9651] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1066'. [ 526.237922][ T5920] usb 5-1: New USB device found, idVendor=064b, idProduct=7825, bcdDevice=a5.f9 [ 526.252134][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.021552][ T5920] usb 5-1: Product: syz [ 527.040070][ T5920] usb 5-1: Manufacturer: syz [ 527.244222][ T9656] netlink: 'syz.1.1067': attribute type 1 has an invalid length. [ 527.294108][ T5920] usb 5-1: SerialNumber: syz [ 527.313135][ T5920] usb 5-1: config 0 descriptor?? [ 527.882215][ T10] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 528.382970][ T5920] upd78f0730 5-1:0.6: upd78f0730 converter detected [ 528.419263][ T5920] usb 5-1: upd78f0730 converter now attached to ttyUSB0 [ 528.473794][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 528.509878][ T9656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 528.544312][ T5920] usb 5-1: USB disconnect, device number 22 [ 528.583836][ T5920] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0 [ 528.603279][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 528.637799][ T5920] upd78f0730 5-1:0.6: device disconnected [ 528.647551][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 528.692672][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 528.828586][ T9668] netlink: 'syz.4.1069': attribute type 2 has an invalid length. [ 528.840359][ T9668] netlink: 'syz.4.1069': attribute type 4 has an invalid length. [ 529.092856][ T9660] bond0: (slave veth5): Enslaving as an active interface with a down link [ 529.107515][ T10] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 529.314456][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 529.355309][ T10] usb 1-1: Product: syz [ 529.361607][ T10] usb 1-1: Manufacturer: syz [ 529.368771][ T10] usb 1-1: SerialNumber: syz [ 529.392560][ T10] usb 1-1: config 0 descriptor?? [ 529.404097][ T10] radio-si470x 1-1:0.0: could not find interrupt in endpoint [ 529.422879][ T10] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -5 [ 529.443924][ T10] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 529.476773][ T9664] bond0: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 529.544700][ T9668] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1069'. [ 529.612777][ T9659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 529.622425][ T9659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 530.714268][ T10] usb 1-1: USB disconnect, device number 30 [ 531.342300][ T9671] Bluetooth: hci4: command 0x0405 tx timeout [ 531.491496][ T9690] netlink: 'syz.1.1075': attribute type 3 has an invalid length. [ 531.499346][ T9690] netlink: 'syz.1.1075': attribute type 1 has an invalid length. [ 531.508380][ T9690] netlink: 191152 bytes leftover after parsing attributes in process `syz.1.1075'. [ 531.521227][ T9690] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1075'. [ 531.984536][ T9689] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 532.133319][ T10] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 532.189268][ T9692] netlink: 'syz.3.1072': attribute type 2 has an invalid length. [ 532.202043][ T9692] netlink: 'syz.3.1072': attribute type 4 has an invalid length. [ 532.811885][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 532.814837][ T9698] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003 [ 532.831583][ T10] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 532.878286][ T10] usb 1-1: config 0 has no interface number 0 [ 533.043038][ T13] veth0_to_bond: left promiscuous mode [ 533.065344][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 533.076969][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.088424][ T10] usb 1-1: Product: syz [ 533.095281][ T10] usb 1-1: Manufacturer: syz [ 533.100066][ T10] usb 1-1: SerialNumber: syz [ 533.107703][ T5833] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 533.328614][ T10] usb 1-1: config 0 descriptor?? [ 533.345102][ T10] smsc95xx v2.0.0 [ 534.454844][ T9708] netlink: 'syz.1.1080': attribute type 2 has an invalid length. [ 534.467154][ T9708] netlink: 'syz.1.1080': attribute type 4 has an invalid length. [ 534.976115][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 535.035525][ T10] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 535.158683][ T10] usb 1-1: USB disconnect, device number 31 [ 537.140908][ T10] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 537.189004][ T9728] netlink: 'syz.2.1085': attribute type 1 has an invalid length. [ 537.293993][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 537.337927][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 537.373599][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 537.385749][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 537.407932][ T10] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 537.451329][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 537.466040][ T10] usb 1-1: Product: syz [ 537.471959][ T10] usb 1-1: Manufacturer: syz [ 537.477334][ T10] usb 1-1: SerialNumber: syz [ 537.495375][ T10] usb 1-1: config 0 descriptor?? [ 537.517637][ T10] radio-si470x 1-1:0.0: could not find interrupt in endpoint [ 537.732253][ T9720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.742661][ T9720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 537.976660][ T9740] netlink: 'syz.1.1087': attribute type 3 has an invalid length. [ 537.984739][ T9740] netlink: 'syz.1.1087': attribute type 1 has an invalid length. [ 537.993629][ T9740] netlink: 191152 bytes leftover after parsing attributes in process `syz.1.1087'. [ 538.009661][ T9740] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1087'. [ 538.462413][ T9738] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 538.568285][ T10] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -5 [ 538.589027][ T10] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 538.633249][ T9728] 8021q: adding VLAN 0 to HW filter on device bond4 [ 538.777196][ T9731] bond4: (slave veth11): Enslaving as an active interface with a down link [ 538.802462][ T9733] bond3: (slave veth0_to_bond): Releasing active interface [ 538.872590][ T10] usb 1-1: USB disconnect, device number 32 [ 539.005781][ T5833] usb 5-1: device descriptor read/all, error -71 [ 539.033517][ T9733] bond4: (slave veth0_to_bond): making interface the new active one [ 539.070167][ T9733] veth0_to_bond: entered promiscuous mode [ 539.111643][ T9733] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 539.653575][ T9750] comedi comedi2: dt2814: I/O port conflict (0xb000,2) [ 539.706928][ T9750] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 540.359606][ T9744] [U] J"—e:ÀÆ" [ 540.639612][ T9751] netlink: 'syz.0.1088': attribute type 1 has an invalid length. [ 540.742574][ T9760] hub 6-0:1.0: USB hub found [ 540.748659][ T9760] hub 6-0:1.0: 1 port detected [ 542.092606][ T5833] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 542.721861][ T5833] usb 5-1: device descriptor read/64, error -71 [ 542.962803][ T5833] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 543.123600][ T5833] usb 5-1: device descriptor read/64, error -71 [ 543.517722][ T5833] usb usb5-port1: attempt power cycle [ 543.651532][ T8893] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 543.824829][ T8893] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 543.848503][ T8893] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 543.936975][ T8893] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 544.021908][ T8893] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 544.186603][ T8893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.247750][ T8893] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 544.272421][ T8893] usb 3-1: invalid MIDI out EP 0 [ 544.418478][ T8908] udevd[8908]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 544.437664][ T8893] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 547.452353][ T9807] hub 6-0:1.0: USB hub found [ 547.457518][ T9807] hub 6-0:1.0: 1 port detected [ 548.211961][ T8893] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 548.974969][ T8893] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 549.032042][ T8893] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 65327, setting to 1024 [ 549.072218][ T8893] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 549.136427][ T8893] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 549.191574][ T8893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.215925][ T9813] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 549.236935][ T8893] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 549.355301][ T10] usb 3-1: USB disconnect, device number 22 [ 549.758151][ T9823] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1108'. [ 550.319404][ T9818] comedi comedi2: dt2814: I/O port conflict (0xb000,2) [ 550.349260][ T9818] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 551.018060][ T8893] usb 1-1: USB disconnect, device number 33 [ 551.127500][ T9814] [U] J"—e:ÀÆ" [ 551.197799][ T8802] udevd[8802]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 551.701996][ T5833] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 552.611453][ T5833] usb 4-1: Using ep0 maxpacket: 8 [ 552.628632][ T5833] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 552.644977][ T5833] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 552.667876][ T5833] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 552.687028][ T5833] usb 4-1: Product: syz [ 552.699646][ T5833] usb 4-1: Manufacturer: syz [ 552.733396][ T5833] usb 4-1: SerialNumber: syz [ 553.731774][ T5833] usb 4-1: palm_os_3_probe - error -110 getting connection information [ 553.740130][ T5833] visor 4-1:1.0: probe with driver visor failed with error -110 [ 553.844085][ T9847] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 553.855202][ T9847] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 553.867491][ T9847] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 553.878169][ T9847] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 554.476181][ T9859] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 554.661057][ T9858] comedi comedi2: dt2814: I/O port conflict (0xb000,2) [ 554.928452][ T9830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.040916][ T8707] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 555.064458][ T9830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.109760][ T9856] [U] J"—e:ÀÆ" [ 555.352957][ T8707] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 555.366979][ T8707] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 555.399768][ T8707] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 555.440845][ T8707] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 555.458014][ T8707] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.558060][ T8707] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 555.595795][ T8707] usb 3-1: invalid MIDI out EP 0 [ 555.829264][ T9866] hub 2-0:1.0: USB hub found [ 556.789784][ T9824] udevd[9824]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 556.814221][ T8707] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 556.917991][ T5888] usb 4-1: USB disconnect, device number 21 [ 556.987574][ T9866] hub 2-0:1.0: 1 port detected [ 557.251622][ T10] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 558.812674][ T10] usb 2-1: device descriptor read/all, error -71 [ 558.936634][ T9881] usb usb8: usbfs: process 9881 (syz.1.1125) did not claim interface 0 before use [ 559.058841][ T5833] usb 3-1: USB disconnect, device number 23 [ 559.466787][ T9889] netlink: 'syz.1.1126': attribute type 4 has an invalid length. [ 559.509093][ T9889] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1126'. [ 561.025355][ T6017] veth0_to_bond: left promiscuous mode [ 563.259501][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.277638][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.551517][ T8707] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 563.736125][ T8707] usb 1-1: Using ep0 maxpacket: 32 [ 563.743805][ T8707] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 563.754913][ T8707] usb 1-1: config 0 has no interface number 0 [ 563.769182][ T8707] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 563.783892][ T8707] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.803662][ T8707] usb 1-1: Product: syz [ 564.142366][ T10] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 564.667063][ T8707] usb 1-1: Manufacturer: syz [ 564.680823][ T8707] usb 1-1: SerialNumber: syz [ 564.764510][ T8707] usb 1-1: config 0 descriptor?? [ 564.798878][ T8707] smsc95xx v2.0.0 [ 564.855884][ T10] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 565.014711][ T10] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 65327, setting to 1024 [ 565.159922][ T10] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 565.201673][ T5888] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 565.222056][ T10] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 565.224542][ T8707] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 565.392117][ T8707] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 565.437657][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.679372][ T8707] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 566.287647][ T8707] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -32 [ 566.299436][ T9926] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 566.391848][ T5888] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 566.404575][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 566.470789][ T5888] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 566.506511][ T5888] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 566.626644][ T5888] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 566.653735][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.767876][ T5888] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 566.801736][ T43] usb 1-1: USB disconnect, device number 34 [ 566.896641][ T5888] usb 3-1: invalid MIDI out EP 0 [ 567.197943][ T9947] netlink: 'syz.0.1142': attribute type 2 has an invalid length. [ 567.207407][ T9947] netlink: 'syz.0.1142': attribute type 4 has an invalid length. [ 567.532746][ T9824] udevd[9824]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 567.592250][ T43] usb 5-1: USB disconnect, device number 28 [ 567.679903][ T5888] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 568.428124][ T9955] netlink: 'syz.4.1144': attribute type 1 has an invalid length. [ 568.691522][ T10] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 568.862055][ T9955] 8021q: adding VLAN 0 to HW filter on device bond3 [ 568.901465][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 568.909173][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 568.926593][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 568.963757][ T10] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 568.973645][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.982465][ T10] usb 2-1: Product: syz [ 568.986652][ T10] usb 2-1: Manufacturer: syz [ 568.992022][ T10] usb 2-1: SerialNumber: syz [ 569.008329][ T10] usb 2-1: config 0 descriptor?? [ 569.026460][ T9956] bond3: (slave veth7): Enslaving as an active interface with a down link [ 569.054498][ T10] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 569.075418][ T10] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 569.114512][ T5888] usb 3-1: USB disconnect, device number 24 [ 569.165291][ T9957] bond2: (slave veth0_to_bond): Releasing active interface [ 569.383258][ T9957] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 569.662229][ T9964] netlink: 'syz.0.1145': attribute type 2 has an invalid length. [ 569.678955][ T9964] netlink: 'syz.0.1145': attribute type 4 has an invalid length. [ 570.037839][ T10] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 570.052371][ T10] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 570.697425][ T10] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 571.476014][ T10] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 571.634496][ T9978] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1148'. [ 572.689517][ T10] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 573.222402][ T10] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 573.229313][ T10] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 573.241380][ T10] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 573.258326][ T10] usb 2-1: USB disconnect, device number 31 [ 574.305478][ T5833] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 574.591408][ T5888] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 575.282146][ T5833] usb 4-1: Using ep0 maxpacket: 32 [ 575.304999][ T5833] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 575.664014][ T5833] usb 4-1: config 0 has no interface number 0 [ 575.684958][ T5888] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 575.837778][ T5833] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 575.873754][ T5888] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 65327, setting to 1024 [ 575.888265][ T5833] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.914936][ T5888] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 575.927423][ T5833] usb 4-1: Product: syz [ 575.948120][ T5833] usb 4-1: Manufacturer: syz [ 575.972040][ T5888] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 575.975343][ T5833] usb 4-1: SerialNumber: syz [ 575.991401][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.063744][ T5833] usb 4-1: config 0 descriptor?? [ 576.079099][T10004] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 576.095473][ T5833] smsc95xx v2.0.0 [ 576.108683][T10011] hub 2-0:1.0: USB hub found [ 576.142542][ T5888] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 576.153255][T10011] hub 2-0:1.0: 1 port detected [ 576.527964][ T5833] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 576.767723][ T5833] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 576.883220][ T5833] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 576.898060][ T5833] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -32 [ 577.377184][ T5833] usb 5-1: USB disconnect, device number 29 [ 577.951384][ T5888] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 578.128329][ T5888] usb 5-1: Using ep0 maxpacket: 8 [ 578.179889][ T5888] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 578.282247][ T5920] usb 4-1: USB disconnect, device number 22 [ 578.325200][ T5888] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 578.365080][ T5888] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 578.479319][ T5888] usb 5-1: Product: syz [ 578.497816][ T5888] usb 5-1: Manufacturer: syz [ 579.223257][ T5888] usb 5-1: SerialNumber: syz [ 580.145588][T10037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 580.178871][T10037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 580.233272][ T5888] usb 5-1: Invalid connection information received from device [ 584.096649][ T43] usb 5-1: USB disconnect, device number 30 [ 584.521868][ T5920] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 584.753606][ T5920] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 585.007378][ T5920] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 65327, setting to 1024 [ 585.058118][T10075] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1173'. [ 585.094719][ T5920] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 585.233174][ T5920] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 585.413360][ T5920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.487713][T10064] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 585.584072][ T5920] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 587.585591][T10086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1174'. [ 587.897386][T10089] netlink: 'syz.2.1175': attribute type 2 has an invalid length. [ 587.908251][T10089] netlink: 'syz.2.1175': attribute type 4 has an invalid length. [ 588.955745][ T5920] usb 4-1: USB disconnect, device number 23 [ 591.429683][T10115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1183'. [ 592.488778][T10119] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1184'. [ 592.867874][T10131] netlink: 'syz.1.1187': attribute type 2 has an invalid length. [ 592.879761][T10131] netlink: 'syz.1.1187': attribute type 4 has an invalid length. [ 593.341565][ T8893] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 593.523458][ T8893] usb 1-1: Using ep0 maxpacket: 8 [ 593.532188][ T8893] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 593.554089][ T8893] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 593.565433][ T8893] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 593.574835][ T8893] usb 1-1: Product: syz [ 593.599764][ T8893] usb 1-1: Manufacturer: syz [ 593.605337][ T8893] usb 1-1: SerialNumber: syz [ 594.086455][ T8893] usb 1-1: palm_os_3_probe - error -110 getting connection information [ 594.096493][ T8893] visor 1-1:1.0: probe with driver visor failed with error -110 [ 594.913639][T10148] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003 [ 595.007792][T10145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 595.077098][T10145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 596.529671][T10163] trusted_key: encrypted_key: insufficient parameters specified [ 596.642902][ T8707] usb 1-1: USB disconnect, device number 35 [ 597.320088][T10170] tipc: Started in network mode [ 597.327128][T10170] tipc: Node identity 86a2555e6858, cluster identity 4711 [ 597.337780][T10170] tipc: Enabled bearer , priority 0 [ 597.348492][T10170] syzkaller0: entered promiscuous mode [ 597.357329][T10170] syzkaller0: entered allmulticast mode [ 597.508500][T10173] tipc: Resetting bearer [ 597.587893][T10169] tipc: Resetting bearer [ 598.261949][T10169] tipc: Disabling bearer [ 598.525505][T10191] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1200'. [ 603.852993][T10233] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1212'. [ 604.966173][T10244] trusted_key: encrypted_key: insufficient parameters specified [ 607.958887][T10258] usb usb8: usbfs: process 10258 (syz.2.1220) did not claim interface 0 before use [ 611.027383][T10269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1223'. [ 613.971724][T10302] netlink: 'syz.2.1231': attribute type 3 has an invalid length. [ 613.979571][T10302] netlink: 'syz.2.1231': attribute type 1 has an invalid length. [ 613.988831][T10302] netlink: 191152 bytes leftover after parsing attributes in process `syz.2.1231'. [ 614.012502][T10302] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1231'. [ 614.203635][T10301] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 615.142369][T10316] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 615.171534][T10316] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 615.204552][T10316] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 615.213562][T10316] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 615.626700][T10323] netlink: 'syz.3.1235': attribute type 1 has an invalid length. [ 617.050304][ T5841] Bluetooth: hci4: command 0x0405 tx timeout [ 617.171858][T10315] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 617.191080][ T9671] Bluetooth: hci1: command 0x0406 tx timeout [ 618.483936][T10315] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 618.692328][T10315] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 618.708311][T10315] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 618.774505][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88805c807400: rx timeout, send abort [ 618.785069][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88805c807400: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 618.888186][T10315] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 618.934496][T10315] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 619.094564][T10315] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 619.595462][ T9671] Bluetooth: hci1: command 0x0406 tx timeout [ 619.636422][T10315] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 620.628913][T10354] syz.4.1243 uses obsolete (PF_INET,SOCK_PACKET) [ 620.782693][ T9671] Bluetooth: hci2: command 0x0406 tx timeout [ 620.821489][ T5888] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 620.982261][ T9671] Bluetooth: hci3: command 0x0406 tx timeout [ 621.047032][ T10] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 621.233400][ T9671] Bluetooth: hci4: command 0x0405 tx timeout [ 621.242941][ T5888] usb 3-1: Using ep0 maxpacket: 32 [ 621.278925][ T5888] usb 3-1: config 0 has an invalid interface number: 6 but max is 0 [ 621.310138][ T5888] usb 3-1: config 0 has no interface number 0 [ 621.311518][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 621.319997][ T5888] usb 3-1: New USB device found, idVendor=064b, idProduct=7825, bcdDevice=a5.f9 [ 621.332837][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.341939][ T5888] usb 3-1: Product: syz [ 621.352242][ T5888] usb 3-1: Manufacturer: syz [ 621.362591][ T5888] usb 3-1: SerialNumber: syz [ 621.465822][ T5888] usb 3-1: config 0 descriptor?? [ 621.478681][ T10] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 621.548243][ T10] usb 5-1: config 0 has no interface number 0 [ 621.564346][ T10] usb 5-1: config 0 interface 12 has no altsetting 0 [ 621.576264][ T10] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 621.593909][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.673964][T10366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1245'. [ 621.762630][ T10] usb 5-1: Product: syz [ 621.766853][ T10] usb 5-1: Manufacturer: syz [ 621.775345][ T10] usb 5-1: SerialNumber: syz [ 621.858722][ T10] usb 5-1: config 0 descriptor?? [ 621.864374][ T5888] upd78f0730 3-1:0.6: upd78f0730 converter detected [ 621.898327][ T5888] usb 3-1: upd78f0730 converter now attached to ttyUSB0 [ 621.947169][ T5888] usb 3-1: USB disconnect, device number 25 [ 621.978877][ T5888] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0 [ 622.032626][ T5888] upd78f0730 3-1:0.6: device disconnected [ 622.282672][ T10] f81534 5-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 622.305356][ T10] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 622.339481][ T10] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 622.349952][ T10] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 622.462140][ T10] usb 5-1: USB disconnect, device number 31 [ 622.852554][ T9671] Bluetooth: hci2: command 0x0406 tx timeout [ 623.015678][ T9671] Bluetooth: hci3: command 0x0406 tx timeout [ 623.371681][ T9671] Bluetooth: hci4: command 0x0405 tx timeout [ 623.796135][T10389] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 623.877383][T10389] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 624.045490][T10389] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 624.122547][T10389] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 624.698127][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.706911][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.932483][ T10] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 625.441308][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 625.498955][ T10] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 625.513574][ T10] usb 5-1: config 0 has no interface number 0 [ 625.526936][ T10] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 625.538491][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.547787][ T10] usb 5-1: Product: syz [ 625.566876][ T10] usb 5-1: Manufacturer: syz [ 625.597792][ T10] usb 5-1: SerialNumber: syz [ 626.778956][ T10] usb 5-1: config 0 descriptor?? [ 626.814721][ T10] smsc95xx v2.0.0 [ 627.064800][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888031029c00: rx timeout, send abort [ 627.074520][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff888031029c00: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 627.221525][ T10] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 627.256840][ T10] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 627.472530][ T10] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 627.524504][ T10] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -61 [ 629.129559][ T10] usb 5-1: USB disconnect, device number 32 [ 629.872015][ T10] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 630.021252][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 630.023105][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 630.027273][ T10] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 630.027293][ T10] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 630.027307][ T10] usb 5-1: Product: syz [ 630.027316][ T10] usb 5-1: Manufacturer: syz [ 630.027326][ T10] usb 5-1: SerialNumber: syz [ 630.269909][ T10] usb 5-1: Invalid connection information received from device [ 630.382379][ T5833] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 630.578514][T10463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 630.626337][T10463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 630.691352][ T5833] usb 4-1: Using ep0 maxpacket: 8 [ 630.707134][ T5833] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 630.712894][ T43] usb 5-1: USB disconnect, device number 33 [ 630.724172][ T5833] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 630.807719][ T5833] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 630.906790][ T5833] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 630.965708][ T5833] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 631.038987][ T5833] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.326364][ T5833] usb 4-1: GET_CAPABILITIES returned 0 [ 631.336534][ T5833] usbtmc 4-1:16.0: can't read capabilities [ 631.567531][ C0] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 631.577518][T10465] usbtmc 4-1:16.0: Unable to send data, error -71 [ 632.911596][T10492] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 632.921126][T10492] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 632.982914][T10492] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 632.997709][T10492] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 633.341637][ T8707] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 633.501868][ T8707] usb 5-1: Using ep0 maxpacket: 32 [ 633.592930][ T8707] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 633.621336][ T8707] usb 5-1: config 0 has no interface number 0 [ 633.673072][ T8707] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 633.717169][ T8707] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.757631][ T8707] usb 5-1: Product: syz [ 633.776299][ T43] usb 4-1: USB disconnect, device number 24 [ 633.794764][ T8707] usb 5-1: Manufacturer: syz [ 633.808296][ T8707] usb 5-1: SerialNumber: syz [ 633.842036][ T8707] usb 5-1: config 0 descriptor?? [ 633.924955][ T8707] smsc95xx v2.0.0 [ 634.457755][ T8707] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 634.485542][T10510] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1289'. [ 634.524991][ T8707] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 634.932236][ T5841] Bluetooth: hci2: command 0x0406 tx timeout [ 634.933350][ T9671] Bluetooth: hci1: command 0x0406 tx timeout [ 635.011896][ T9671] Bluetooth: hci3: command 0x0406 tx timeout [ 635.027072][T10517] --map-set only usable from mangle table [ 635.091874][ T9671] Bluetooth: hci4: command 0x0405 tx timeout [ 635.733186][ T8707] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 635.744876][ T8707] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -32 [ 637.632269][ T8893] usb 5-1: USB disconnect, device number 34 [ 638.626767][T10552] netlink: 'syz.0.1298': attribute type 3 has an invalid length. [ 638.635862][T10552] netlink: 'syz.0.1298': attribute type 1 has an invalid length. [ 638.644899][T10552] netlink: 191152 bytes leftover after parsing attributes in process `syz.0.1298'. [ 638.662919][T10552] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1298'. [ 640.467140][T10555] netlink: 'syz.1.1300': attribute type 1 has an invalid length. [ 641.271890][ T5833] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 641.451202][ T5833] usb 1-1: Using ep0 maxpacket: 32 [ 641.537652][ T5833] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 641.558799][ T5833] usb 1-1: config 0 has no interface number 0 [ 641.595217][ T5833] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 641.614743][ T5833] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.645143][ T5833] usb 1-1: Product: syz [ 641.659673][ T5833] usb 1-1: Manufacturer: syz [ 641.667854][ T5833] usb 1-1: SerialNumber: syz [ 641.676593][ T5833] usb 1-1: config 0 descriptor?? [ 641.702742][ T5833] smsc95xx v2.0.0 [ 642.099784][ T5833] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 642.152373][ T5833] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 642.791877][ T5888] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 642.969531][ T5888] usb 2-1: Using ep0 maxpacket: 32 [ 642.991352][ T5888] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 643.003721][ T5833] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 643.022018][ T5888] usb 2-1: config 0 has no interface number 0 [ 643.039574][ T5833] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -32 [ 643.063576][ T5888] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 643.096599][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.119085][ T5888] usb 2-1: Product: syz [ 643.129264][ T5888] usb 2-1: Manufacturer: syz [ 643.149142][ T5888] usb 2-1: SerialNumber: syz [ 643.183965][ T5888] usb 2-1: config 0 descriptor?? [ 643.231047][ T5888] smsc95xx v2.0.0 [ 643.643037][T10599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1314'. [ 643.663752][ T5888] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 643.678185][ T5888] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 644.289488][ T5888] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 644.343865][ T5888] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -61 [ 644.438815][ T5920] usb 1-1: USB disconnect, device number 36 [ 645.940020][ T10] usb 2-1: USB disconnect, device number 32 [ 648.011601][ T43] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 649.036659][ T43] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 649.197490][ T43] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 649.526377][ T43] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 649.747206][ T43] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 649.771343][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.772148][ T10] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 649.989399][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 650.048905][ T10] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 650.069074][ T10] usb 2-1: config 0 has no interface number 0 [ 650.119511][ T10] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 650.146036][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.166477][ T10] usb 2-1: Product: syz [ 650.172628][ T43] usb 1-1: can't set config #27, error -71 [ 650.175444][ T10] usb 2-1: Manufacturer: syz [ 650.184598][ T10] usb 2-1: SerialNumber: syz [ 650.342538][ T10] usb 2-1: config 0 descriptor?? [ 650.357404][ T10] smsc95xx v2.0.0 [ 650.402740][T10638] delete_channel: no stack [ 650.415503][ T43] usb 1-1: USB disconnect, device number 37 [ 651.327512][ T10] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 651.415963][ T10] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 651.697036][ T10] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 651.729528][ T10] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -61 [ 652.055559][T10681] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 652.065090][T10681] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 652.073899][T10681] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 652.086093][T10681] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 653.564052][ T8707] usb 2-1: USB disconnect, device number 33 [ 654.059111][ T9671] Bluetooth: hci1: command 0x0406 tx timeout [ 654.131460][ T9671] Bluetooth: hci3: command 0x0406 tx timeout [ 654.137746][ T5841] Bluetooth: hci4: command 0x0405 tx timeout [ 654.145694][ T5841] Bluetooth: hci2: command 0x0406 tx timeout [ 654.862739][ T8893] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 654.959809][T10726] hub 6-0:1.0: USB hub found [ 654.968627][T10726] hub 6-0:1.0: 1 port detected [ 655.223627][ T8893] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 655.277214][ T8893] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 655.327376][ T8893] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 655.358263][ T8893] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 655.419795][ T8893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.668567][ T8893] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 655.815204][ T8893] usb 2-1: invalid MIDI out EP 0 [ 656.149179][T10717] delete_channel: no stack [ 656.359348][ T8893] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 656.473914][ T8893] usb 2-1: USB disconnect, device number 34 [ 656.486876][T10733] udevd[10733]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 657.261797][ C0] ------------[ cut here ]------------ [ 657.267539][ C0] kernel BUG at arch/x86/mm/physaddr.c:28! [ 657.273412][ C0] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 657.279657][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-rc7-syzkaller-00120-g5f33ebd2018c #0 PREEMPT(full) [ 657.291375][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 657.301430][ C0] RIP: 0010:__phys_addr+0x16b/0x180 [ 657.306636][ C0] Code: 9d ab 00 e9 45 ff ff ff e8 82 b6 4b 00 48 c7 c7 10 f7 fa 8d 48 89 de 4c 89 f2 e8 60 58 7a 03 e9 4d ff ff ff e8 66 b6 4b 00 90 <0f> 0b e8 5e b6 4b 00 90 0f 0b e8 56 b6 4b 00 90 0f 0b 0f 1f 00 90 [ 657.326247][ C0] RSP: 0000:ffffc90000007b58 EFLAGS: 00010246 [ 657.332332][ C0] RAX: ffffffff81746f5a RBX: 00007780ffff0000 RCX: ffffffff8de95280 [ 657.340375][ C0] RDX: 0000000000000100 RSI: 000000017fff0000 RDI: 00007780ffff0000 [ 657.348356][ C0] RBP: ffffc90000007e30 R08: 0000000000000000 R09: ffffffff81a8c084 [ 657.356392][ C0] R10: dffffc0000000000 R11: ffffffff89edbc30 R12: ffffffff89edbc30 [ 657.364470][ C0] R13: ffffffff81a8c084 R14: 000000017fff0000 R15: dffffc0000000000 [ 657.372452][ C0] FS: 0000000000000000(0000) GS:ffff888125c57000(0000) knlGS:0000000000000000 [ 657.381432][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 657.388050][ C0] CR2: 0000200000382030 CR3: 0000000024c2c000 CR4: 00000000003526f0 [ 657.396045][ C0] Call Trace: [ 657.399515][ C0] [ 657.402403][ C0] ? in_dev_free_rcu+0x49/0x60 [ 657.407198][ C0] kfree+0x77/0x440 [ 657.411041][ C0] ? __pfx_in_dev_free_rcu+0x10/0x10 [ 657.416329][ C0] ? rcu_core+0xc34/0x1710 [ 657.420755][ C0] in_dev_free_rcu+0x49/0x60 [ 657.425363][ C0] rcu_core+0xca5/0x1710 [ 657.429616][ C0] ? __pfx_rcu_core+0x10/0x10 [ 657.434303][ C0] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 657.439962][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 657.446219][ C0] handle_softirqs+0x283/0x870 [ 657.450998][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 657.455774][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 657.461074][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 657.466292][ C0] __irq_exit_rcu+0xca/0x1f0 [ 657.470900][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 657.476114][ C0] irq_exit_rcu+0x9/0x30 [ 657.480373][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 657.486040][ C0] [ 657.489027][ C0] [ 657.491959][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 657.497941][ C0] RIP: 0010:tick_nohz_idle_enter+0x22e/0x2f0 [ 657.503922][ C0] Code: e8 03 42 80 3c 38 00 74 08 48 89 df e8 3b d0 6d 00 80 0b 01 48 89 df e8 e0 00 00 00 e8 0b 75 15 00 fb 48 c7 04 24 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 65 48 8b 05 32 53 ea 10 48 3b 44 24 48 0f [ 657.523721][ C0] RSP: 0000:ffffffff8de07d00 EFLAGS: 00000286 [ 657.529798][ C0] RAX: 6c2199a951bace00 RBX: ffff8880b8628400 RCX: 6c2199a951bace00 [ 657.537816][ C0] RDX: 0000000000000000 RSI: ffffffff8d982ff2 RDI: ffffffff8be1ba80 [ 657.545803][ C0] RBP: ffffffff8de07d90 R08: ffffffff8fa0b3f7 R09: 1ffffffff1f4167e [ 657.553788][ C0] R10: dffffc0000000000 R11: fffffbfff1f4167f R12: 1ffffffff1bc0fa0 [ 657.561767][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: dffffc0000000000 [ 657.569782][ C0] ? __pfx_tick_nohz_idle_enter+0x10/0x10 [ 657.575525][ C0] ? nohz_run_idle_balance+0x59/0x150 [ 657.580915][ C0] do_idle+0x9e/0x510 [ 657.584921][ C0] ? __pfx_do_idle+0x10/0x10 [ 657.589613][ C0] cpu_startup_entry+0x44/0x60 [ 657.594417][ C0] rest_init+0x2de/0x300 [ 657.598665][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 657.604216][ C0] start_kernel+0x47d/0x500 [ 657.608718][ C0] x86_64_start_reservations+0x24/0x30 [ 657.614237][ C0] x86_64_start_kernel+0x143/0x1c0 [ 657.619398][ C0] common_startup_64+0x13e/0x147 [ 657.624378][ C0] [ 657.627437][ C0] Modules linked in: [ 657.631423][ C0] ---[ end trace 0000000000000000 ]--- [ 657.636913][ C0] RIP: 0010:__phys_addr+0x16b/0x180 [ 657.642212][ C0] Code: 9d ab 00 e9 45 ff ff ff e8 82 b6 4b 00 48 c7 c7 10 f7 fa 8d 48 89 de 4c 89 f2 e8 60 58 7a 03 e9 4d ff ff ff e8 66 b6 4b 00 90 <0f> 0b e8 5e b6 4b 00 90 0f 0b e8 56 b6 4b 00 90 0f 0b 0f 1f 00 90 [ 657.661881][ C0] RSP: 0000:ffffc90000007b58 EFLAGS: 00010246 [ 657.667957][ C0] RAX: ffffffff81746f5a RBX: 00007780ffff0000 RCX: ffffffff8de95280 [ 657.675985][ C0] RDX: 0000000000000100 RSI: 000000017fff0000 RDI: 00007780ffff0000 [ 657.684018][ C0] RBP: ffffc90000007e30 R08: 0000000000000000 R09: ffffffff81a8c084 [ 657.692043][ C0] R10: dffffc0000000000 R11: ffffffff89edbc30 R12: ffffffff89edbc30 [ 657.700107][ C0] R13: ffffffff81a8c084 R14: 000000017fff0000 R15: dffffc0000000000 [ 657.708214][ C0] FS: 0000000000000000(0000) GS:ffff888125c57000(0000) knlGS:0000000000000000 [ 657.717188][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 657.723816][ C0] CR2: 0000200000382030 CR3: 0000000024c2c000 CR4: 00000000003526f0 [ 657.731851][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 657.739429][ C0] Kernel Offset: disabled [ 657.744188][ C0] Rebooting in 86400 seconds..