last executing test programs: 22.777009108s ago: executing program 0 (id=1683): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x3}}, {{&(0x7f0000000600)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000980)="d542f6300b61ca7913e7cd7b4036afcfddb3c77fc63db30ef223f1cc4fcdcbb56655be4873ea15e1a9d348fadc935180e702560acae65d42d95f6ddcae59879a1ce7e78eb197a0c8231a504b2614ac6dfd9a5760fe75ba4204694d382eb51806597cde99cedde3f0edd8bd3fce154f83e47f422d0e5bf427c23771a122bd0369cec32bbe791bfc2c0fce202d51df0862c31baa7b80bab6d64c1d5826a7f4c1982e3693e7a0677f2ad388ce872b890394a3ecfd1cec45ba7966945271fc033565d4a9bb17a41aacf550c4510ba99a24b48eab32e5d7549de9bae7954e0f750b55f706de3d5001638a1260dd8d2a", 0xed}, {&(0x7f0000000580)="49a6cc7e52cf0644e1fb10e13cb6893bd19afc65f2af20dd1746a881eb4dabcaf163ce54133d2499c296320937b805f1880adf0cb1507d", 0x37}, {&(0x7f0000000a80)="190e431aa3b287c28be2f5404c8034cc87b917c381ccff6f8d431e872be3df64fee6c95001ceff12f2e942df6a8738cd4ad9ef7ad532fd0c824bf8d36d616e99807b3be837b3145efe65f7c6b66b9813e122d9be7799ebf0160d4bd329ac230e639a58a6538ec01e2de41722469556b03344f32eac19", 0x76}], 0x3, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000bc0)="e7bc2f4799fe560c31cf5a20a1b22fb77ce7f19e605b6a8d2645af02e63f9a9d7ba31907ccc0f4aa71ec0762b3a8e3332fe3603b4624ac6a578ccd9a27b381a8dad12b3e3de940a99238945935184cd93dd174b70ecb9c3c99d2df9dd0cbef6a9e230f7dd8367384f034a7a011388990e94cd43e9f80ec3358dc596926960604b9f051", 0x83}, {&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc398357f3ad842b38a95863911bbd6e6afd9641d356257181e43b6e60349f69ec5f529734f76708a6c5eccb57005c1a513d8030d12c", 0x41}, {&(0x7f0000000d00)}, {&(0x7f0000000fc0)="c6eae69212ba50dd664af774c32d34273a3baad9692140de74d9294c555a8c2e0d53acea79b788b5eb1a12ada17eda2b2fb96c439ce16e6266afda6613fd7c90be9a9dfcd1b099fe6b023b725241a6e1048c700e7a939bd3a38f1101213b81c252dd8c44b7e647940438343d0d082507d218a952e6d77ec0918968c74f220c981a3797fb6cadfd6723a75c5c4da33e830ecf602c55bc60831ddd694f15728f4d1eacad82a03540713f52f9485138574e5b6aec693c2c613e442d5306c2ef1c8ad8dda8d005f3f3bacb5991d1c18db228185e4d2fcca72d87d81df01c142428158ad7ba84dd6c65d24a8d094308433219872e", 0xf2}, {&(0x7f00000010c0)="978d1129fddf5e2f1be8be48f935ef4f71893a57f79be3e44522d3987ccee23f4e717d8c8e14573937040fb658a24f1c9e0c7f98a24fa1209a6ea754e1244234c715713d120b6929614443fd6b4223bc04c3a8c9241ccbb6a8b0bb19fe4eedae48642a74e97588dc36bf06a4c1fb17b47b39240a6a8e9b5daa97e63d777e665841a349c52022252eafc1c129e154ab390624dd7fb8ac1e44c203140d6aab524f61cd8642ee0f380ebb21dc9267a8fbefa6eec89ff97e7800f44f89b17d43206217941c34067892c05465382550a1da2519", 0xd1}, {&(0x7f00000011c0)}], 0x6, &(0x7f00000014c0)}}], 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000540)}, {&(0x7f00000006c0)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24ce2a19c3898aca95", 0x8a}, {0x0}, {0x0}, {0x0}], 0x5}}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0x6, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0xb, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0x9000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x4, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0xf3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x4, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x7, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 19.307174839s ago: executing program 0 (id=1686): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) dup3(r1, 0xffffffffffffffff, 0x0) 18.537443386s ago: executing program 0 (id=1688): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x4e21, @remote}, {0x1, @local}, 0x4a, {0x2, 0x0, @multicast2}}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x30, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x30}}, 0x0) 13.936588876s ago: executing program 1 (id=1703): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)=ANY=[@ANYBLOB="12010000e3ddef20501da1604fa1010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000680)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000280)={0x20, 0x7}, 0x0, 0x0, 0x0, 0x0}) 13.698160704s ago: executing program 4 (id=1704): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000070020214200000040"], 0x50) set_mempolicy(0x8000, &(0x7f0000000000)=0x8000000000000000, 0x5) socket(0x2c, 0x3, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x8f, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000300)={'rose0\x00', 0x4000}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x3af2, &(0x7f00000000c0)={0x0, 0xa5f5, 0x80, 0x2, 0x131}, &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_MEM_REGION(r3, 0x22, &(0x7f0000000240)={&(0x7f0000000200)={&(0x7f00000001c0), 0x0, 0x0, 0xc45, 0x1}}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000fc0)=@gettclass={0x24, 0x2a, 0x20, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xfff1, 0x2}, {0xa, 0xfff1}, {0x3, 0xb}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x855}, 0x4000) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x140, 0x10, 0x400, 0xbffffffe, 0x100, {{@in=@rand_addr=0x1000, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0x9, 0x8251c, 0x2, 0xfffffffffffffff8, 0xffffffffffffffff}, {0x6, 0xfffffffffffffffe, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x140}}, 0x10) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, 0x0) dup3(r9, r8, 0x0) 9.431901862s ago: executing program 1 (id=1712): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9.359993264s ago: executing program 1 (id=1715): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a01010000000f000000000a0000060900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_DELSETELEM={0x34, 0xe, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x5c}, 0x1, 0x0, 0x0, 0x40048804}, 0x24008040) 8.415782247s ago: executing program 4 (id=1718): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x3}}, {{&(0x7f0000000600)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000980)="d542f6300b61ca7913e7cd7b4036afcfddb3c77fc63db30ef223f1cc4fcdcbb56655be4873ea15e1a9d348fadc935180e702560acae65d42d95f6ddcae59879a1ce7e78eb197a0c8231a504b2614ac6dfd9a5760fe75ba4204694d382eb51806597cde99cedde3f0edd8bd3fce154f83e47f422d0e5bf427c23771a122bd0369cec32bbe791bfc2c0fce202d51df0862c31baa7b80bab6d64c1d5826a7f4c1982e3693e7a0677f2ad388ce872b890394a3ecfd1cec45ba7966945271fc033565d4a9bb17a41aacf550c4510ba99a24b48eab32e5d7549de9bae7954e0f750b55f706de3d5001638a1260dd8d2a", 0xed}, {&(0x7f0000000580)="49a6cc7e52cf0644e1fb10e13cb6893bd19afc65f2af20dd1746a881", 0x1c}, {&(0x7f0000000a80)="190e431aa3b287c28be2f5404c8034cc87b917c381ccff6f8d431e872be3df64fee6c95001ceff12f2e942df6a8738cd4ad9ef7ad532fd0c824bf8d36d616e99807b3be837b3145efe65f7c6b66b9813e122d9be7799ebf0160d4bd329ac230e639a58a6538ec01e2de41722469556b03344f32eac19", 0x76}], 0x3, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000bc0)}, {&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc398357f3ad842b38a95863911bbd6e6afd9641d356257181e43b6e60349f69ec5f529734f76708a6c5eccb57005c1a513d8030d12c", 0x41}, {&(0x7f0000000d00)}, {&(0x7f0000000fc0)="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", 0xfc}, {&(0x7f00000010c0)="978d1129fddf5e2f1be8be48f935ef4f71893a57f79be3e44522d3987ccee23f4e717d8c8e14573937040fb658a24f1c9e0c7f98a24fa1209a6ea754e1244234c715713d120b6929614443fd6b4223bc04c3a8c9241ccbb6a8b0bb19fe4eedae48642a74e97588dc36bf06a4c1fb17b47b39240a6a8e9b5daa97e63d777e665841a349c52022252eafc1c129e154ab390624dd7fb8ac1e44c203140d6aab524f61cd8642ee0f380ebb21dc9267a8fbefa6eec89ff97e7800f44f89b17d43206217941c34067892c05465382550a1da2519", 0xd1}, {&(0x7f00000011c0)}], 0x6, &(0x7f00000014c0)}}], 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000880)="562f2edb8e8c8229195820c788783ff270fb0f06936fe49376e5519e3fa8f998387d7011fc5d8c9f5fc8e0e1663c9f6919128a8941ae935aaba3f683642630f5a74535b0e1f886ea2807f04d3a68ff4285f2bf581674a033cb5ecf8c756e8df3968c959df5326ed67c09d8b72eceeb87023f6188e15cb258cd8c85be3eddaac311ee4cb17a08ef47157753606ce7996162ea4b18214763730e2b944b468575927829842ee7f6f8a3603a7a522025c55284c9ca0ab899626f86c9336ead2278445733db5e643e10fa93339be48ff1592bc6bcf2b68b4536951c600a0e6d1b5d5b0cdbdf85122560b431", 0xe9}, {&(0x7f0000000540)}, {&(0x7f00000006c0)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24ce2a19c3898aca95", 0x8a}, {0x0}, {0x0}, {0x0}], 0x6}}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0x6, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0xb, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0x9000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x4, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0xf3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x4, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x7, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 8.308872391s ago: executing program 1 (id=1721): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2}, 0x0, 0x0, &(0x7f0000000000)) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="fc0000001900e1f6ddedabc4ac5c000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a0000000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000100000006000000000000000000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c000000020000000a0101020000000000000000000000000600000004"], 0xfc}}, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) 6.295092551s ago: executing program 1 (id=1722): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)=ANY=[@ANYBLOB="12010000e3ddef20501da1604fa1010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 6.101507867s ago: executing program 2 (id=1723): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) getpid() r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) sched_setscheduler(r0, 0x0, &(0x7f00000000c0)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @mcast2, 0x2}}}, 0x30) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000980), 0xfdef) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 5.785590318s ago: executing program 4 (id=1724): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) dup3(r1, 0xffffffffffffffff, 0x0) 5.714336441s ago: executing program 2 (id=1726): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sendmsg$AUDIT_TRIM(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004}, 0x4) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x1c, 0x0, &(0x7f0000000000)=[@register_looper, @register_looper, @increfs_done={0x40106308, 0x2}], 0x0, 0x0, 0x0}) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000640), 0x0) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee5", 0x2e}], 0x1, 0x0, 0x0, 0x1f000801}, 0x4040844) 5.185576009s ago: executing program 3 (id=1727): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() getrlimit(0x2, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0xd, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000203010200000000000000000000000009000200000000470200000008000340000000000800010001"], 0x30}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x4000080) preadv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000500)=""/212, 0xd4}, {0x0}], 0x2, 0x1a, 0x20f5) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) 5.122534831s ago: executing program 4 (id=1728): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000070020214200000040"], 0x50) set_mempolicy(0x8000, &(0x7f0000000000)=0x8000000000000000, 0x5) socket(0x2c, 0x3, 0x1000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x8f, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000300)={'rose0\x00', 0x4000}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x100000001, 0xfffffe0000000001, 0xfa11, 0x65aa}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x3af2, &(0x7f00000000c0)={0x0, 0xa5f5, 0x80, 0x2, 0x131}, &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_MEM_REGION(r3, 0x22, &(0x7f0000000240)={&(0x7f0000000200)={&(0x7f00000001c0), 0x0, 0x0, 0xc45, 0x1}}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000fc0)=@gettclass={0x24, 0x2a, 0x20, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xfff1, 0x2}, {0xa, 0xfff1}, {0x3, 0xb}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x855}, 0x4000) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x140, 0x10, 0x400, 0xbffffffe, 0x100, {{@in=@rand_addr=0x1000, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0x9, 0x8251c, 0x2, 0xfffffffffffffff8, 0xffffffffffffffff}, {0x6, 0xfffffffffffffffe, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x140}}, 0x10) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, 0x0) dup3(r9, r8, 0x0) 4.357934018s ago: executing program 2 (id=1729): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20000004) socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) dup3(r2, r1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) mprotect(&(0x7f0000185000/0x4000)=nil, 0x4000, 0x3000006) dup(0xffffffffffffffff) 4.204634123s ago: executing program 3 (id=1730): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, 0x0) 3.987193191s ago: executing program 2 (id=1731): socket$inet_udp(0x2, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket$vsock_stream(0x28, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) socket$inet6_sctp(0xa, 0x801, 0x84) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet(0x2b, 0x801, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x1000000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 3.851713396s ago: executing program 3 (id=1732): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2}, 0x0, 0x0, &(0x7f0000000000)) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="fc0000001900e1f6ddedabc4ac5c000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a0000000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000100000006000000000000000000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c000000020000000a0101020000000000000000000000000600000004"], 0xfc}}, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) 3.824188007s ago: executing program 0 (id=1733): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r4 = fanotify_init(0xf00, 0x1000) fanotify_mark(r4, 0x105, 0x10000839, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, 0x0, 0x2) readv(r4, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) 3.663938582s ago: executing program 2 (id=1734): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000400)={'dvmrp1\x00', {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 2.805786092s ago: executing program 3 (id=1735): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}, {&(0x7f00000005c0)="f2", 0x1}], 0x3}}, {{&(0x7f0000000600)=@can, 0x80, &(0x7f0000000680)=[{&(0x7f0000000980)="d542f6300b61ca7913e7cd7b4036afcfddb3c77fc63db30ef223f1cc4fcdcbb56655be4873ea15e1a9d348fadc935180e702560acae65d42d95f6ddcae59879a1ce7e78eb197a0c8231a504b2614ac6dfd9a5760fe75ba4204694d382eb51806597cde99cedde3f0edd8bd3fce154f83e47f422d0e5bf427c23771a122bd0369cec32bbe791bfc2c0fce202d51df0862c31baa7b80bab6d64c1d5826a7f4c1982e3693e7a0677f2ad388ce872b890394a3ecfd1cec45ba7966945271fc033565d4a9bb17a41aacf550c4510ba99a24b48eab32e5d7549de9bae7954e0f750b55f706de3d5001638a1260dd8d2a", 0xed}, {&(0x7f0000000580)="49a6cc7e52cf0644e1fb10e13cb6893bd19afc65f2af20dd1746a881", 0x1c}, {&(0x7f0000000a80)="190e431aa3b287c28be2f5404c8034cc87b917c381ccff6f8d431e872be3df64fee6c95001ceff12f2e942df6a8738cd4ad9ef7ad532fd0c824bf8d36d616e99807b3be837b3145efe65f7c6b66b9813e122d9be7799ebf0160d4bd329ac230e639a58a6538ec01e2de41722469556b03344f32eac19", 0x76}], 0x3, &(0x7f0000000b40)=[@timestamping={{0x14, 0x1, 0x25, 0x2d}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @timestamping={{0x14, 0x1, 0x25, 0xc}}], 0x60}}, {{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000bc0)="e7bc2f4799fe560c31cf5a20a1b22fb77ce7f19e605b6a8d2645af02e63f9a9d7ba31907ccc0f4aa71ec0762b3a8e3332fe3603b4624ac6a578ccd9a27b381a8dad1", 0x42}, {&(0x7f0000000c80)="6c3e28dcd5c7eb9bc39a4bbc398357f3ad842b38a95863911bbd6e6afd9641d356257181e43b6e60349f69ec5f529734f76708a6c5eccb57005c1a513d8030d12c", 0x41}, {&(0x7f0000000d00)}, {&(0x7f0000000fc0)="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", 0xfc}, {&(0x7f00000010c0)="978d1129fddf5e2f1be8be48f935ef4f71893a57f79be3e44522d3987ccee23f4e717d8c8e14573937040fb658a24f1c9e0c7f98a24fa1209a6ea754e1244234c715713d120b6929614443fd6b4223bc04c3a8c9241ccbb6a8b0bb19fe4eedae48642a74e97588dc36bf06a4c1fb17b47b39240a6a8e9b5daa97e63d777e665841a349c52022252eafc1c129e154ab390624dd7fb8ac1e44c203140d6aab524f61cd8642ee0f380ebb21dc9267a8fbefa6eec89ff97e7800f44f89b17d43206217941c34067892c05465382550a1da2519", 0xd1}, {&(0x7f00000011c0)}], 0x6, &(0x7f00000014c0)}}], 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000880)="562f2edb8e8c8229195820c788783ff270fb0f06936fe49376e5519e3fa8f998387d7011fc5d8c9f5fc8e0e1663c9f6919128a8941ae935aaba3f683642630f5a74535b0e1f886ea2807f04d3a68ff4285f2bf581674a033cb5ecf8c756e8df3968c959df5326ed67c09d8b72eceeb87023f6188e15cb258cd8c85be3eddaac311ee4cb17a08ef47157753606ce7996162ea4b18214763730e2b944b468575927829842ee7f6f8a3603a7a522025c55284c9ca0ab899626f86c9336ead2278445733db5e643e10fa93339be48ff1592bc6bcf2b68b4536951c600a0e6d1b5d5b0cdbdf85122560b431", 0xe9}, {&(0x7f0000000540)}, {&(0x7f00000006c0)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24ce2a19c3898aca95", 0x8a}, {0x0}, {0x0}, {0x0}], 0x6}}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0x6, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0xb, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0x9000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x4, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0xf3, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x4, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x7, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.947779481s ago: executing program 1 (id=1736): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) getpid() r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) sched_setscheduler(r0, 0x0, &(0x7f00000000c0)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @mcast2, 0x2}}}, 0x30) splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000980), 0xfdef) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1.870606504s ago: executing program 0 (id=1737): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.674287762s ago: executing program 0 (id=1738): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) dup3(r1, 0xffffffffffffffff, 0x0) 1.352328012s ago: executing program 3 (id=1739): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sendmsg$AUDIT_TRIM(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004}, 0x4) sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x1c, 0x0, &(0x7f0000000000)=[@register_looper, @register_looper, @increfs_done={0x40106308, 0x2}], 0x0, 0x0, 0x0}) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000640), 0x0) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9", 0x45}], 0x1, 0x0, 0x0, 0x1f000801}, 0x4040844) 1.000393794s ago: executing program 4 (id=1740): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x28}, 0x28) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="18000000000300"], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) listen(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$vbi(&(0x7f00000001c0), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xa8f, 0x86c, 0x1, 0x1, 0xd59f80, 0x19f2, 0x3f, 0x19ef, 0x3, 0x8, 0x2800, 0x6, 0x2, 0xba2, 0xc, 0x30, {0x8, 0xffffffff}, 0xd0, 0x9}}) 781.686783ms ago: executing program 2 (id=1741): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() getrlimit(0x2, &(0x7f0000000040)) sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0xd, 0x0, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000203010200000000000000000000000009000200000000470200000008000340000000000800010001"], 0x30}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x4000080) preadv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000500)=""/212, 0xd4}, {0x0}], 0x2, 0x1a, 0x20f5) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) 417.559565ms ago: executing program 3 (id=1742): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20000004) socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) mmap$binder(&(0x7f0000185000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) mprotect(&(0x7f0000185000/0x4000)=nil, 0x4000, 0x3000006) dup(0xffffffffffffffff) 0s ago: executing program 4 (id=1743): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, 0x0) kernel console output (not intermixed with test programs): ength 0, skipping remainder of the config [ 206.934756][ T4316] usb 1-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 206.985491][ T4316] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 207.031421][ T4316] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 207.092896][ T4316] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.223295][ T4316] usb 1-1: Product: syz [ 207.502744][ T4316] usb 1-1: Manufacturer: syz [ 207.626466][ T4316] usb 1-1: SerialNumber: syz [ 207.640644][ T5983] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 207.655682][ T4316] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 207.679132][ T4316] imon 1-1:155.0: unable to initialize intf0, err -19 [ 207.733018][ T4316] imon:imon_probe: failed to initialize context! [ 208.222861][ T4316] imon 1-1:155.0: unable to register, err -19 [ 208.927483][ T6005] loop3: detected capacity change from 0 to 40427 [ 208.968899][ T6005] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 208.976993][ T6005] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 208.986980][ T6005] F2FS-fs (loop3): invalid crc value [ 209.058483][ T6005] F2FS-fs (loop3): Found nat_bits in checkpoint [ 209.147499][ T6005] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 209.154785][ T6005] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 209.206044][ T4403] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 209.286696][ T6005] overlayfs: missing 'lowerdir' [ 209.308941][ T4316] usb 1-1: USB disconnect, device number 5 [ 209.485983][ T4403] usb 2-1: device descriptor read/64, error -71 [ 210.516085][ T4403] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 210.676975][ T4403] usb 2-1: device descriptor read/64, error -71 [ 210.796123][ T4403] usb usb2-port1: attempt power cycle [ 212.266097][ T4403] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 212.418834][ T6030] loop4: detected capacity change from 0 to 8192 [ 212.454198][ T6036] netlink: 'syz.1.431': attribute type 4 has an invalid length. [ 212.496523][ T4403] usb 2-1: device not accepting address 9, error -71 [ 212.549638][ T6030] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 212.576429][ T6040] netlink: 'syz.1.431': attribute type 4 has an invalid length. [ 212.759931][ T6030] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 213.477831][ T6030] REISERFS (device loop4): using ordered data mode [ 213.617664][ T6030] reiserfs: using flush barriers [ 213.705503][ T6030] REISERFS warning (device loop4): journal-1256 journal_init: unable to get memory for journal structure [ 214.008224][ T5815] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 214.168283][ T6056] loop2: detected capacity change from 0 to 7 [ 214.216117][ T6056] Dev loop2: unable to read RDB block 7 [ 214.225949][ T5815] usb 1-1: Using ep0 maxpacket: 8 [ 214.232730][ T5815] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 214.249418][ T6056] loop2: AHDI p1 p2 p3 [ 214.275977][ T5815] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 214.287090][ T6056] loop2: partition table partially beyond EOD, truncated [ 214.294680][ T6056] loop2: p1 start 1601398130 is beyond EOD, truncated [ 214.348897][ T5815] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 214.369596][ T6056] loop2: p2 start 1702059890 is beyond EOD, truncated [ 214.416398][ T5815] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 214.453544][ T5815] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 214.509123][ T5815] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 214.540764][ T5815] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.422480][ T5815] usb 1-1: usb_control_msg returned -71 [ 215.428573][ T5815] usbtmc 1-1:16.0: can't read capabilities [ 215.456043][ T5815] usb 1-1: USB disconnect, device number 6 [ 215.576051][ T4316] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 215.656966][ T6065] xt_TPROXY: Can be used only with -p tcp or -p udp [ 215.766103][ T4316] usb 2-1: Using ep0 maxpacket: 32 [ 215.780875][ T4316] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 215.860044][ T4316] usb 2-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 215.916456][ T4316] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 215.952112][ T4316] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 215.964252][ T4316] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.083194][ T4316] usb 2-1: Product: syz [ 216.088051][ T4316] usb 2-1: Manufacturer: syz [ 216.092681][ T4316] usb 2-1: SerialNumber: syz [ 216.494199][ T6076] netlink: 72 bytes leftover after parsing attributes in process `syz.4.437'. [ 216.511545][ T6057] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 216.569437][ T4316] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 216.577525][ T4316] imon 2-1:155.0: unable to initialize intf0, err -19 [ 216.585738][ T4316] imon:imon_probe: failed to initialize context! [ 216.592475][ T4316] imon 2-1:155.0: unable to register, err -19 [ 217.875981][ T4403] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 217.920863][ T4318] usb 2-1: USB disconnect, device number 11 [ 218.112178][ T4403] usb 4-1: Using ep0 maxpacket: 32 [ 218.307965][ T4403] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 218.593381][ T4403] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.602436][ T4403] usb 4-1: Product: syz [ 218.606897][ T4403] usb 4-1: Manufacturer: syz [ 218.613554][ T4403] usb 4-1: SerialNumber: syz [ 218.686503][ T4403] usb 4-1: config 0 descriptor?? [ 219.123262][ T4403] airspy 4-1:0.0: Board ID: 00 [ 219.129047][ T4403] airspy 4-1:0.0: Firmware version: [ 220.118943][ T6096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.131695][ T6096] bond0: (slave rose0): Enslaving as an active interface with an up link [ 220.164138][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 220.233481][ T6099] loop1: detected capacity change from 0 to 8192 [ 220.283725][ T6099] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 220.306609][ T6112] netlink: 'syz.0.449': attribute type 10 has an invalid length. [ 220.315541][ T6112] netlink: 40 bytes leftover after parsing attributes in process `syz.0.449'. [ 220.326001][ T6099] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 220.343003][ T4403] airspy 4-1:0.0: usb_control_msg() failed -71 request 12 [ 220.386149][ T6099] REISERFS (device loop1): using ordered data mode [ 220.388465][ T4403] airspy 4-1:0.0: Registered as swradio24 [ 220.398776][ T4403] airspy 4-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 220.403137][ T6099] reiserfs: using flush barriers [ 220.412557][ T4403] usb 4-1: USB disconnect, device number 5 [ 220.487393][ T6099] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 220.535096][ T6099] REISERFS (device loop1): checking transaction log (loop1) [ 220.544672][ T6099] REISERFS (device loop1): Using r5 hash to sort names [ 220.557498][ T6099] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 223.225000][ T6153] loop2: detected capacity change from 0 to 7 [ 223.775304][ T6153] Dev loop2: unable to read RDB block 7 [ 223.792059][ T6153] loop2: AHDI p1 p2 p3 [ 224.396013][ T6153] loop2: partition table partially beyond EOD, truncated [ 224.421911][ T6153] loop2: p1 start 1601398130 is beyond EOD, truncated [ 224.435109][ T6153] loop2: p2 start 1702059890 is beyond EOD, truncated [ 224.576201][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 224.666059][ T4316] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 226.386087][ T4316] usb 2-1: Using ep0 maxpacket: 32 [ 226.451322][ T4316] usb 2-1: device descriptor read/all, error -71 [ 226.592359][ T6187] netlink: 'syz.2.463': attribute type 10 has an invalid length. [ 226.600214][ T6187] netlink: 40 bytes leftover after parsing attributes in process `syz.2.463'. [ 231.051019][ T6242] usb usb1: usbfs: process 6242 (syz.4.476) did not claim interface 0 before use [ 231.266007][ T4319] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 231.432745][ T6258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.475'. [ 231.444693][ T6258] device gtp2 entered promiscuous mode [ 231.497714][ T4319] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 231.588333][ T4319] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 231.637394][ T4319] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 231.672640][ T4319] usb 2-1: Product: syz [ 231.692055][ T4319] usb 2-1: Manufacturer: syz [ 231.705952][ T4319] usb 2-1: SerialNumber: syz [ 232.073689][ T4319] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 232.465440][ T4319] usb 2-1: USB disconnect, device number 14 [ 232.612869][ T4319] usblp0: removed [ 233.979612][ T6281] can0: slcan on ttyS3. [ 234.916159][ T5815] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 234.923958][ T6277] can0 (unregistered): slcan off ttyS3. [ 235.248748][ T5815] usb 5-1: config 0 has no interfaces? [ 235.257281][ T5815] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 235.277245][ T5815] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.287786][ T5815] usb 5-1: config 0 descriptor?? [ 235.624251][ T5815] usb 5-1: USB disconnect, device number 5 [ 240.673431][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 240.683703][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 241.257808][ T6333] can0: slcan on ttyS3. [ 241.269010][ T6333] netlink: 'syz.0.495': attribute type 1 has an invalid length. [ 241.276772][ T6333] netlink: 'syz.0.495': attribute type 2 has an invalid length. [ 242.166376][ T6329] can0 (unregistered): slcan off ttyS3. [ 243.316399][ T6336] sctp: failed to load transform for md5: -2 [ 246.546014][ T6385] netlink: 'syz.4.506': attribute type 1 has an invalid length. [ 246.553712][ T6385] netlink: 'syz.4.506': attribute type 2 has an invalid length. [ 248.279651][ T6401] fuse: Bad value for 'fd' [ 249.887012][ T6422] netlink: 140 bytes leftover after parsing attributes in process `syz.4.515'. [ 249.926163][ T6422] netlink: 28 bytes leftover after parsing attributes in process `syz.4.515'. [ 250.639677][ T6431] netlink: 4 bytes leftover after parsing attributes in process `syz.0.514'. [ 252.748884][ T6460] loop1: detected capacity change from 0 to 8192 [ 252.812867][ T6460] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 252.912952][ T6460] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 253.006500][ T6460] REISERFS (device loop1): using ordered data mode [ 253.046089][ T6460] reiserfs: using flush barriers [ 253.053007][ T6460] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 253.534771][ T6460] REISERFS (device loop1): checking transaction log (loop1) [ 253.757061][ T6460] REISERFS (device loop1): Using r5 hash to sort names [ 253.772273][ T6460] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 255.295945][ T4284] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 255.302266][ T4284] Bluetooth: hci0: command 0x0c1a tx timeout [ 255.413051][ T6547] comedi comedi0: Minor 2 could not be opened [ 255.786841][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.799774][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.140407][ T6555] fuse: Bad value for 'fd' [ 257.041672][ T6576] random: crng reseeded on system resumption [ 257.921034][ T6627] fuse: Bad value for 'fd' [ 258.127617][ T6572] xt_CT: No such helper "snmp_trap" [ 258.831949][ T6630] loop4: detected capacity change from 0 to 8192 [ 258.914556][ T6637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.540'. [ 258.940908][ T6637] device gtp3 entered promiscuous mode [ 259.627410][ T6630] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 259.689403][ T6630] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 259.699047][ T6630] REISERFS (device loop4): using ordered data mode [ 259.705885][ T6630] reiserfs: using flush barriers [ 259.733797][ T6630] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 259.752122][ T6630] REISERFS (device loop4): checking transaction log (loop4) [ 259.762013][ T6630] REISERFS (device loop4): Using r5 hash to sort names [ 259.771138][ T6630] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 261.175913][ T6647] netlink: 'syz.2.542': attribute type 4 has an invalid length. [ 261.328171][ T6650] netlink: 'syz.2.542': attribute type 4 has an invalid length. [ 261.736764][ T6661] netlink: 28 bytes leftover after parsing attributes in process `syz.0.546'. [ 262.135904][ T6668] netlink: 8 bytes leftover after parsing attributes in process `syz.0.546'. [ 264.101710][ T6670] autofs4:pid:6670:autofs_fill_super: called with bogus options [ 264.698008][ T6688] netlink: 12 bytes leftover after parsing attributes in process `syz.2.551'. [ 265.058009][ T6690] netlink: 'syz.3.552': attribute type 1 has an invalid length. [ 265.101967][ T6690] 8021q: adding VLAN 0 to HW filter on device bond1 [ 265.268898][ T6690] bond1: (slave gretap1): making interface the new active one [ 265.278445][ T6690] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 265.304138][ T5008] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 265.318572][ T6690] syz.3.552 (6690) used greatest stack depth: 20272 bytes left [ 265.392063][ T6701] netlink: 'syz.1.556': attribute type 4 has an invalid length. [ 265.489779][ T6702] netlink: 'syz.1.556': attribute type 4 has an invalid length. [ 265.507927][ T6696] loop4: detected capacity change from 0 to 8192 [ 265.533889][ T6696] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 265.637920][ T6696] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 265.742623][ T6696] REISERFS (device loop4): using ordered data mode [ 265.789080][ T6696] reiserfs: using flush barriers [ 265.795767][ T6709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.557'. [ 267.000897][ T6696] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 267.045313][ T6696] REISERFS (device loop4): checking transaction log (loop4) [ 267.067607][ T6696] REISERFS (device loop4): Using r5 hash to sort names [ 267.075375][ T6696] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 269.978756][ T6742] netlink: 'syz.2.568': attribute type 1 has an invalid length. [ 270.005059][ T6742] 8021q: adding VLAN 0 to HW filter on device bond3 [ 270.018968][ T6742] bond3: (slave gretap1): making interface the new active one [ 270.027615][ T6742] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 270.038889][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 270.635566][ T4284] Bluetooth: Wrong link type (-22) [ 270.778934][ T6752] netlink: 8 bytes leftover after parsing attributes in process `syz.4.563'. [ 270.895754][ T6752] device gtp2 entered promiscuous mode [ 271.035712][ T6759] loop0: detected capacity change from 0 to 8192 [ 271.136558][ T6766] random: crng reseeded on system resumption [ 271.534027][ T6759] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 271.562200][ T6759] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 271.572167][ T6759] REISERFS (device loop0): using ordered data mode [ 271.578963][ T6759] reiserfs: using flush barriers [ 271.585393][ T6759] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 271.606511][ T6759] REISERFS (device loop0): checking transaction log (loop0) [ 271.632065][ T6759] REISERFS (device loop0): Using r5 hash to sort names [ 271.681451][ T6759] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 274.663160][ T4284] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 274.672186][ T4284] Bluetooth: hci1: Injecting HCI hardware error event [ 274.681902][ T4269] Bluetooth: hci1: hardware error 0x00 [ 275.746367][ T6811] loop0: detected capacity change from 0 to 8192 [ 276.566371][ T6811] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 276.619689][ T6811] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 276.670319][ T6811] REISERFS (device loop0): using ordered data mode [ 276.698375][ T6811] reiserfs: using flush barriers [ 277.085989][ T4269] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 277.545721][ T6811] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 278.166357][ T6811] REISERFS (device loop0): checking transaction log (loop0) [ 278.219504][ T6811] REISERFS (device loop0): Using r5 hash to sort names [ 278.229811][ T6811] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 279.028523][ T6835] random: crng reseeded on system resumption [ 279.797118][ T4256] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 280.016016][ T4256] usb 2-1: device descriptor read/64, error -71 [ 280.056835][ T6853] netlink: 'syz.0.597': attribute type 10 has an invalid length. [ 280.064589][ T6853] netlink: 40 bytes leftover after parsing attributes in process `syz.0.597'. [ 280.316114][ T4256] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 280.476033][ T4256] usb 2-1: device descriptor read/64, error -71 [ 280.616148][ T4256] usb usb2-port1: attempt power cycle [ 281.725775][ T4256] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 283.505724][ T6866] loop2: detected capacity change from 0 to 7 [ 283.515534][ T6866] Dev loop2: unable to read RDB block 7 [ 283.521962][ T6866] loop2: AHDI p1 p2 p3 [ 283.526660][ T6866] loop2: partition table partially beyond EOD, truncated [ 283.535570][ T6866] loop2: p1 start 1601398130 is beyond EOD, truncated [ 283.542882][ T6866] loop2: p2 start 1702059890 is beyond EOD, truncated [ 283.643342][ T4256] usb 2-1: device descriptor read/8, error -71 [ 283.826591][ T4314] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 284.035954][ T4314] usb 4-1: Using ep0 maxpacket: 32 [ 284.043645][ T4314] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 284.091549][ T4314] usb 4-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 284.103198][ T4314] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 284.130655][ T4314] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 284.151570][ T4314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.167222][ T4314] usb 4-1: Product: syz [ 284.176792][ T4314] usb 4-1: Manufacturer: syz [ 284.185705][ T4314] usb 4-1: SerialNumber: syz [ 284.201365][ T6866] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 284.219036][ T4314] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 284.227105][ T4314] imon 4-1:155.0: unable to initialize intf0, err -19 [ 284.238448][ T4314] imon:imon_probe: failed to initialize context! [ 284.245204][ T4314] imon 4-1:155.0: unable to register, err -19 [ 286.311004][ T14] usb 4-1: USB disconnect, device number 6 [ 287.941524][ T6925] netlink: 'syz.4.618': attribute type 1 has an invalid length. [ 288.055507][ T6925] 8021q: adding VLAN 0 to HW filter on device bond1 [ 288.129709][ T6930] bond1: (slave gretap1): making interface the new active one [ 288.164243][ T6930] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 288.180361][ T6521] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 288.430505][ T14] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 289.302327][ T6951] loop5: detected capacity change from 0 to 7 [ 289.315971][ T14] usb 1-1: Using ep0 maxpacket: 32 [ 289.326426][ T6327] Dev loop5: unable to read RDB block 7 [ 289.332209][ T6327] loop5: AHDI p1 p2 p3 [ 289.337335][ T14] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 289.352092][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.360514][ T6327] loop5: partition table partially beyond EOD, truncated [ 289.371103][ T6327] loop5: p1 start 1818582900 is beyond EOD, truncated [ 289.378040][ T14] usb 1-1: Product: syz [ 289.385726][ T14] usb 1-1: Manufacturer: syz [ 289.391900][ T6327] loop5: p3 start 335544320 is beyond EOD, truncated [ 289.399074][ T14] usb 1-1: SerialNumber: syz [ 289.407971][ T6951] Dev loop5: unable to read RDB block 7 [ 289.413757][ T6951] loop5: AHDI p1 p2 p3 [ 289.420814][ T14] usb 1-1: config 0 descriptor?? [ 289.426649][ T6951] loop5: partition table partially beyond EOD, truncated [ 289.439457][ T6951] loop5: p1 start 1818582900 is beyond EOD, truncated [ 289.465936][ T6951] loop5: p3 start 335544320 is beyond EOD, truncated [ 290.417699][ T14] airspy 1-1:0.0: Board ID: 00 [ 290.424451][ T14] airspy 1-1:0.0: Firmware version: [ 290.691890][ T6963] netlink: 'syz.3.634': attribute type 4 has an invalid length. [ 290.732953][ T6963] netlink: 'syz.3.634': attribute type 4 has an invalid length. [ 290.825395][ T14] airspy 1-1:0.0: usb_control_msg() failed -71 request 0e [ 290.843590][ T14] airspy 1-1:0.0: Registered as swradio24 [ 290.853429][ T14] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 290.969704][ T6967] xt_TPROXY: Can be used only with -p tcp or -p udp [ 290.970585][ T14] usb 1-1: USB disconnect, device number 7 [ 292.585463][ T6998] netlink: 72 bytes leftover after parsing attributes in process `syz.4.631'. [ 295.664208][ T7034] netlink: 'syz.4.649': attribute type 10 has an invalid length. [ 295.672868][ T7034] netlink: 40 bytes leftover after parsing attributes in process `syz.4.649'. [ 295.895990][ T6981] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 296.087822][ T6981] usb 1-1: Using ep0 maxpacket: 32 [ 296.098070][ T6981] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 296.107686][ T6981] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.116339][ T6981] usb 1-1: Product: syz [ 296.121262][ T6981] usb 1-1: Manufacturer: syz [ 296.126854][ T6981] usb 1-1: SerialNumber: syz [ 296.133646][ T6981] usb 1-1: config 0 descriptor?? [ 296.581625][ T6981] airspy 1-1:0.0: Board ID: 00 [ 296.643565][ T6981] airspy 1-1:0.0: Firmware version: [ 296.989806][ T6981] airspy 1-1:0.0: usb_control_msg() failed -71 request 0e [ 297.054470][ T6981] airspy 1-1:0.0: Registered as swradio24 [ 297.064228][ T6981] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 297.106344][ T6981] usb 1-1: USB disconnect, device number 8 [ 300.687921][ T7093] netlink: 'syz.3.666': attribute type 10 has an invalid length. [ 300.696067][ T7093] netlink: 40 bytes leftover after parsing attributes in process `syz.3.666'. [ 300.705493][ T7093] device batadv0 entered promiscuous mode [ 300.712250][ T7093] bridge0: port 3(batadv0) entered blocking state [ 300.718895][ T7093] bridge0: port 3(batadv0) entered disabled state [ 300.727608][ T7093] bridge0: port 3(batadv0) entered blocking state [ 300.734495][ T7093] bridge0: port 3(batadv0) entered forwarding state [ 301.206470][ T4391] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 301.216409][ T4391] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 301.694507][ T7104] loop2: detected capacity change from 0 to 7 [ 301.729214][ T7104] Dev loop2: unable to read RDB block 7 [ 301.762943][ T7104] loop2: AHDI p1 p2 p3 [ 301.804265][ T7104] loop2: partition table partially beyond EOD, truncated [ 301.816700][ T7104] loop2: p1 start 1601398130 is beyond EOD, truncated [ 301.854256][ T7104] loop2: p2 start 1702059890 is beyond EOD, truncated [ 301.916045][ T4314] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 302.296071][ T4314] usb 1-1: Using ep0 maxpacket: 32 [ 302.360641][ T4314] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 302.415413][ T26] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 302.431972][ T3637] Dev loop2: unable to read RDB block 7 [ 302.440530][ T3637] loop2: AHDI p1 p2 p3 [ 302.445018][ T3637] loop2: partition table partially beyond EOD, truncated [ 302.483829][ T3637] loop2: p1 start 1601398130 is beyond EOD, truncated [ 302.514248][ T3637] loop2: p2 start 1702059890 is beyond EOD, truncated [ 302.538207][ T4314] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.555887][ T4314] usb 1-1: Product: syz [ 302.560109][ T4314] usb 1-1: Manufacturer: syz [ 302.564819][ T4314] usb 1-1: SerialNumber: syz [ 302.571559][ T4314] usb 1-1: config 0 descriptor?? [ 302.732188][ T26] usb 2-1: Using ep0 maxpacket: 32 [ 302.774279][ T26] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 303.557186][ T4314] airspy 1-1:0.0: Board ID: 00 [ 303.562216][ T4314] airspy 1-1:0.0: Firmware version: [ 303.567680][ T26] usb 2-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 303.578897][ T26] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 303.596086][ T26] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 303.605202][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.613632][ T26] usb 2-1: Product: syz [ 303.626627][ T26] usb 2-1: Manufacturer: syz [ 303.631460][ T26] usb 2-1: SerialNumber: syz [ 303.661384][ T26] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 303.681854][ T26] imon 2-1:155.0: unable to initialize intf0, err -19 [ 303.705192][ T26] imon:imon_probe: failed to initialize context! [ 303.726286][ T26] imon 2-1:155.0: unable to register, err -19 [ 303.796444][ T4314] airspy 1-1:0.0: usb_control_msg() failed -71 request 0e [ 303.816544][ T4314] airspy 1-1:0.0: Registered as swradio24 [ 303.822423][ T4314] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 303.852857][ T4314] usb 1-1: USB disconnect, device number 9 [ 303.980902][ T6728] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 303.982583][ T7133] netlink: 'syz.2.681': attribute type 10 has an invalid length. [ 303.996558][ T7133] netlink: 40 bytes leftover after parsing attributes in process `syz.2.681'. [ 304.816024][ T6728] usb 4-1: Using ep0 maxpacket: 8 [ 304.867066][ T6728] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 304.962654][ T6728] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 305.624159][ T6728] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 305.973051][ T6728] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.041936][ T6728] usb 2-1: USB disconnect, device number 19 [ 307.344143][ T7157] random: crng reseeded on system resumption [ 307.750008][ T4314] usb 4-1: USB disconnect, device number 7 [ 307.894231][ T7175] netlink: 'syz.3.693': attribute type 10 has an invalid length. [ 307.902087][ T7175] netlink: 40 bytes leftover after parsing attributes in process `syz.3.693'. [ 309.380340][ T7189] loop2: detected capacity change from 0 to 7 [ 309.406804][ T6327] Dev loop2: unable to read RDB block 7 [ 309.422918][ T6327] loop2: AHDI p1 p2 p3 [ 309.429782][ T6327] loop2: partition table partially beyond EOD, truncated [ 309.469133][ T6327] loop2: p1 start 1601398130 is beyond EOD, truncated [ 309.487961][ T6327] loop2: p2 start 1702059890 is beyond EOD, truncated [ 309.719159][ T4314] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 310.196037][ T4314] usb 5-1: Using ep0 maxpacket: 32 [ 310.288417][ T4314] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 310.366516][ T4314] usb 5-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 310.373962][ T7189] Dev loop2: unable to read RDB block 7 [ 310.384727][ T4314] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 310.415964][ T7189] loop2: AHDI p1 p2 p3 [ 310.420208][ T7189] loop2: partition table partially beyond EOD, truncated [ 310.547545][ T4314] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 310.556915][ T4314] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.565134][ T4314] usb 5-1: Product: syz [ 310.569524][ T4314] usb 5-1: Manufacturer: syz [ 310.942243][ T7189] loop2: p1 start 1601398130 is beyond EOD, truncated [ 311.764099][ T4314] usb 5-1: SerialNumber: syz [ 311.773870][ T4314] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 311.783004][ T7189] loop2: p2 start 1702059890 is beyond EOD, truncated [ 311.907118][ T4314] imon 5-1:155.0: unable to initialize intf0, err -19 [ 311.914544][ T4314] imon:imon_probe: failed to initialize context! [ 311.921138][ T4314] imon 5-1:155.0: unable to register, err -19 [ 312.578231][ T7217] netlink: 'syz.2.705': attribute type 10 has an invalid length. [ 312.586074][ T7217] netlink: 40 bytes leftover after parsing attributes in process `syz.2.705'. [ 313.895403][ T7222] ALSA: mixer_oss: invalid OSS volume 'MONITO' [ 314.535907][ T4314] usb 5-1: USB disconnect, device number 6 [ 317.254572][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.261268][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.579096][ T7] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 318.240593][ T7265] ALSA: mixer_oss: invalid OSS volume 'MONITO' [ 318.315988][ T7] usb 2-1: Using ep0 maxpacket: 32 [ 318.347765][ T7] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 318.384189][ T7] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 318.425118][ T7] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 318.456059][ T7] usb 2-1: config 1 has no interface number 0 [ 318.475926][ T7] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 318.507278][ T7] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 318.559424][ T7] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 318.595889][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.632048][ T7] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 318.931053][ T7] snd_usb_pod 2-1:1.1: set_interface failed [ 318.999792][ T7] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 319.007694][ T7] snd_usb_pod: probe of 2-1:1.1 failed with error -71 [ 319.019836][ T7] usb 2-1: USB disconnect, device number 20 [ 323.483297][ T7318] ALSA: mixer_oss: invalid OSS volume 'MONITO' [ 323.763102][ T7304] binder: 7296:7304 ioctl c0306201 0 returned -14 [ 331.890591][ T7390] random: crng reseeded on system resumption [ 334.146575][ T7377] usb usb1: usbfs: process 7377 (syz.1.746) did not claim interface 0 before use [ 335.595893][ T4314] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 335.791095][ T4314] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 335.905357][ T4314] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 336.047655][ T4314] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 336.171614][ T4314] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.471082][ T14] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 336.675905][ T14] usb 1-1: Using ep0 maxpacket: 8 [ 336.683006][ T14] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 336.702150][ T14] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 336.742660][ T14] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 336.787446][ T14] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 336.816141][ T14] usb 1-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 336.843480][ T14] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 336.853122][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.870585][ T14] usbtmc 1-1:16.0: bulk endpoints not found [ 337.246704][ T4314] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 337.273677][ T4314] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input6 [ 337.302428][ T4314] input: failed to attach handler kbd to device input6, error: -5 [ 337.384184][ T4314] usb 2-1: USB disconnect, device number 21 [ 338.874559][ T4318] usb 1-1: USB disconnect, device number 10 [ 340.358394][ T7452] usb usb1: usbfs: process 7452 (syz.1.765) did not claim interface 0 before use [ 342.965965][ T4318] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 343.888757][ T4318] usb 4-1: Using ep0 maxpacket: 8 [ 343.896847][ T4318] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 343.948992][ T4318] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 344.099450][ T4318] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 344.114265][ T4318] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 344.126259][ T4318] usb 4-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 344.140832][ T4318] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 344.598818][ T4318] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.691461][ T4318] usbtmc 4-1:16.0: bulk endpoints not found [ 346.079149][ T7525] usb usb1: usbfs: process 7525 (syz.4.786) did not claim interface 0 before use [ 347.269946][ T14] usb 4-1: USB disconnect, device number 8 [ 347.628536][ T7548] delete_channel: no stack [ 353.132054][ T7587] netlink: 'syz.4.803': attribute type 1 has an invalid length. [ 353.167427][ T7] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 353.186716][ T7587] 8021q: adding VLAN 0 to HW filter on device bond2 [ 353.965423][ T7594] device syzkaller0 entered promiscuous mode [ 353.995905][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 354.002734][ T7] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 354.024180][ T7] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 354.041072][ T7] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 354.052078][ T7] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 354.067242][ T7] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 354.084675][ T7] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 354.161870][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.015727][ T7] usbtmc 2-1:16.0: bulk endpoints not found [ 355.856624][ T7611] random: crng reseeded on system resumption [ 356.060889][ T7618] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 356.070153][ T7618] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 356.079425][ T7618] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 356.089690][ T7618] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 356.106368][ T7618] device geneve2 entered promiscuous mode [ 357.589965][ T4319] usb 2-1: USB disconnect, device number 22 [ 358.702289][ T7647] netlink: 12 bytes leftover after parsing attributes in process `syz.3.820'. [ 358.797450][ T7647] device bond2 entered promiscuous mode [ 358.817880][ T7647] 8021q: adding VLAN 0 to HW filter on device bond2 [ 358.832267][ T7650] netlink: 32 bytes leftover after parsing attributes in process `syz.3.820'. [ 358.884752][ T7656] netlink: 'syz.2.822': attribute type 1 has an invalid length. [ 358.916812][ T7656] 8021q: adding VLAN 0 to HW filter on device bond4 [ 360.486687][ T6981] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 360.715872][ T6981] usb 5-1: Using ep0 maxpacket: 8 [ 360.723173][ T6981] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 360.752489][ T6981] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 360.768599][ T6981] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 360.787437][ T26] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 360.788810][ T6981] usb 5-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 360.824417][ T6981] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 360.850938][ T6981] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 360.870226][ T6981] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.911580][ T6981] usbtmc 5-1:16.0: bulk endpoints not found [ 360.982722][ T26] usb 1-1: Using ep0 maxpacket: 16 [ 360.991261][ T26] usb 1-1: unable to get BOS descriptor or descriptor too short [ 361.014658][ T26] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 361.051634][ T26] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 361.071947][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.080633][ T26] usb 1-1: Product: syz [ 361.084889][ T26] usb 1-1: Manufacturer: syz [ 361.094986][ T26] usb 1-1: SerialNumber: syz [ 361.318720][ T26] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 361.346719][ T26] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 361.376585][ T26] usb 1-1: 2:1 : no UAC_FORMAT_TYPE desc [ 361.419655][ T7691] netlink: 12 bytes leftover after parsing attributes in process `syz.1.833'. [ 361.452710][ T7691] device bond4 entered promiscuous mode [ 361.463830][ T7691] 8021q: adding VLAN 0 to HW filter on device bond4 [ 361.495673][ T7696] netlink: 32 bytes leftover after parsing attributes in process `syz.1.833'. [ 361.627257][ T7701] netlink: 'syz.1.836': attribute type 1 has an invalid length. [ 361.651877][ T7701] 8021q: adding VLAN 0 to HW filter on device bond5 [ 361.782744][ T4318] usb 1-1: USB disconnect, device number 11 [ 362.835596][ T7723] netlink: 'syz.0.842': attribute type 10 has an invalid length. [ 362.843986][ T7723] netlink: 40 bytes leftover after parsing attributes in process `syz.0.842'. [ 363.863547][ T6728] usb 5-1: USB disconnect, device number 7 [ 364.443219][ T7717] netlink: 28 bytes leftover after parsing attributes in process `syz.3.840'. [ 364.504136][ T7740] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 364.535754][ T7731] 8021q: VLANs not supported on hsr0 [ 365.167580][ T7746] netlink: 12 bytes leftover after parsing attributes in process `syz.2.847'. [ 365.217245][ T7746] device bond5 entered promiscuous mode [ 365.239214][ T7746] 8021q: adding VLAN 0 to HW filter on device bond5 [ 365.279534][ T7750] netlink: 32 bytes leftover after parsing attributes in process `syz.2.847'. [ 365.867741][ T7756] netlink: 'syz.2.849': attribute type 1 has an invalid length. [ 365.920274][ T7756] 8021q: adding VLAN 0 to HW filter on device bond6 [ 368.477335][ T4318] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 368.511560][ T7779] netlink: 'syz.3.858': attribute type 4 has an invalid length. [ 368.628644][ T7779] netlink: 'syz.3.858': attribute type 4 has an invalid length. [ 368.720178][ T4318] usb 5-1: Using ep0 maxpacket: 8 [ 368.731516][ T4318] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 368.765566][ T4318] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 368.783137][ T4318] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 368.816842][ T4318] usb 5-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 368.838975][ T4318] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 368.919117][ T4318] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 368.940595][ T4318] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.828683][ T4318] usbtmc 5-1:16.0: bulk endpoints not found [ 372.797775][ T7818] usb usb1: usbfs: process 7818 (syz.1.869) did not claim interface 0 before use [ 372.814424][ T6728] usb 5-1: USB disconnect, device number 8 [ 376.252542][ T7864] netlink: 8 bytes leftover after parsing attributes in process `syz.4.879'. [ 376.263797][ T7864] device gtp3 entered promiscuous mode [ 377.830735][ T7880] random: crng reseeded on system resumption [ 378.578394][ T1277] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 378.588091][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.594757][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.932273][ T7889] netlink: 'syz.0.887': attribute type 4 has an invalid length. [ 379.009906][ T7889] netlink: 'syz.0.887': attribute type 4 has an invalid length. [ 379.426103][ T4318] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 379.625930][ T4318] usb 5-1: Using ep0 maxpacket: 16 [ 379.634325][ T4318] usb 5-1: unable to get BOS descriptor or descriptor too short [ 379.673183][ T4318] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 379.726824][ T4318] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 379.758334][ T4318] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.773385][ T4318] usb 5-1: Product: syz [ 379.779433][ T7916] binder: 7908:7916 ioctl c0046209 200000000000000 returned -22 [ 379.788567][ T4318] usb 5-1: Manufacturer: syz [ 379.793394][ T4318] usb 5-1: SerialNumber: syz [ 380.013385][ T4318] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 380.043854][ T4318] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 380.078151][ T4318] usb 5-1: 2:1 : no UAC_FORMAT_TYPE desc [ 380.421759][ T14] usb 5-1: USB disconnect, device number 9 [ 381.711094][ T7937] netlink: 'syz.4.901': attribute type 4 has an invalid length. [ 381.823251][ T7938] netlink: 'syz.4.901': attribute type 4 has an invalid length. [ 383.855907][ T14] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 384.065886][ T14] usb 4-1: Using ep0 maxpacket: 8 [ 384.072866][ T14] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 384.091974][ T14] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 384.128644][ T14] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 384.166097][ T14] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 384.193456][ T14] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 384.228440][ T14] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 384.258287][ T14] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 384.268130][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.288391][ T14] usbtmc: probe of 4-1:16.0 failed with error -22 [ 384.467379][ T6728] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 384.558755][ T7967] random: crng reseeded on system resumption [ 384.759369][ T4256] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 384.780295][ T6728] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 384.880023][ T6728] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 384.890621][ T6728] usb 2-1: config 220 descriptor has 1 excess byte, ignoring [ 384.911025][ T6728] usb 2-1: config 220 has no interface number 2 [ 384.921655][ T6728] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 384.942791][ T6728] usb 2-1: config 220 interface 0 has no altsetting 0 [ 384.954921][ T6728] usb 2-1: config 220 interface 76 has no altsetting 0 [ 384.963384][ T6728] usb 2-1: config 220 interface 1 has no altsetting 0 [ 384.976071][ T4256] usb 5-1: Using ep0 maxpacket: 16 [ 384.986296][ T6728] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 384.995384][ T6728] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.998808][ T4256] usb 5-1: unable to get BOS descriptor or descriptor too short [ 385.004073][ T6728] usb 2-1: Product: syz [ 385.018475][ T6728] usb 2-1: Manufacturer: syz [ 385.023222][ T6728] usb 2-1: SerialNumber: syz [ 385.106640][ T4256] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 385.141010][ T4256] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 385.150462][ T4256] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.158687][ T4256] usb 5-1: Product: syz [ 385.163125][ T4256] usb 5-1: Manufacturer: syz [ 385.168412][ T4256] usb 5-1: SerialNumber: syz [ 385.271191][ T6728] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 385.291640][ T6728] usb 2-1: No valid video chain found. [ 385.299978][ T6728] usb 2-1: selecting invalid altsetting 0 [ 385.359352][ T6728] usb 2-1: selecting invalid altsetting 0 [ 385.376450][ T6728] usbtest: probe of 2-1:220.1 failed with error -22 [ 385.381437][ T4256] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 385.387987][ T6728] usb 2-1: USB disconnect, device number 23 [ 385.407832][ T4256] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 385.447753][ T4256] usb 5-1: 2:1 : no UAC_FORMAT_TYPE desc [ 385.790614][ T14] usb 5-1: USB disconnect, device number 10 [ 385.888216][ T7981] netlink: 68 bytes leftover after parsing attributes in process `syz.0.915'. [ 386.515482][ T26] usb 4-1: USB disconnect, device number 9 [ 389.035339][ T8014] random: crng reseeded on system resumption [ 390.162118][ T8018] netlink: 32 bytes leftover after parsing attributes in process `syz.1.923'. [ 391.368132][ T8038] netlink: 'syz.1.930': attribute type 1 has an invalid length. [ 391.418278][ T8038] 8021q: adding VLAN 0 to HW filter on device bond6 [ 393.743226][ T8067] random: crng reseeded on system resumption [ 394.389664][ T8081] netlink: 32 bytes leftover after parsing attributes in process `syz.2.940'. [ 396.082109][ T8094] netlink: 'syz.0.943': attribute type 1 has an invalid length. [ 396.251226][ T8094] 8021q: adding VLAN 0 to HW filter on device bond1 [ 398.323336][ T8107] netlink: 'syz.3.948': attribute type 10 has an invalid length. [ 398.363185][ T8107] device veth0_vlan left promiscuous mode [ 398.372850][ T8107] device veth0_vlan entered promiscuous mode [ 398.381092][ T8107] team0: Device veth0_vlan failed to register rx_handler [ 399.235944][ T6728] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 399.498328][ T6728] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 399.532566][ T6728] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 399.544248][ T8133] netlink: 'syz.3.956': attribute type 1 has an invalid length. [ 399.582719][ T8133] 8021q: adding VLAN 0 to HW filter on device bond3 [ 399.612231][ T6728] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 399.632630][ T6728] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 399.754313][ T6728] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 399.785031][ T6728] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 400.941763][ T6728] usb 5-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 401.500491][ T6728] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.540581][ T6728] usb 5-1: Product: syz [ 401.557133][ T6728] usb 5-1: Manufacturer: syz [ 401.683141][ T6728] usb 5-1: SerialNumber: syz [ 402.026287][ T6728] usb 5-1: config 0 descriptor?? [ 402.142914][ T6728] usb 5-1: can't set config #0, error -71 [ 402.343460][ T6728] usb 5-1: USB disconnect, device number 11 [ 404.170892][ T8180] netlink: 'syz.1.969': attribute type 1 has an invalid length. [ 404.240241][ T8180] 8021q: adding VLAN 0 to HW filter on device bond7 [ 404.975935][ T6728] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 406.107717][ T6728] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 406.484181][ T6728] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 406.638733][ T6728] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 406.706027][ T6728] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 406.735997][ T6728] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 406.763530][ T6728] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 406.805611][ T6728] usb 2-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 406.849612][ T6728] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.906048][ T6728] usb 2-1: Product: syz [ 406.910273][ T6728] usb 2-1: Manufacturer: syz [ 407.013023][ T6728] usb 2-1: SerialNumber: syz [ 407.298656][ T6728] usb 2-1: config 0 descriptor?? [ 407.326989][ T6728] ti_usb_3410_5052 2-1:0.0: TI USB 5052 2 port adapter converter detected [ 407.353977][ T6728] ti_usb_3410_5052 2-1:0.0: missing endpoints [ 407.491369][ T8221] netlink: 'syz.2.982': attribute type 1 has an invalid length. [ 407.518322][ T8221] 8021q: adding VLAN 0 to HW filter on device bond7 [ 407.886359][ T127] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 408.508535][ T127] usb 4-1: device descriptor read/64, error -71 [ 408.785866][ T127] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 408.873863][ T6728] usb 2-1: USB disconnect, device number 24 [ 408.966004][ T127] usb 4-1: device descriptor read/64, error -71 [ 409.375380][ T127] usb usb4-port1: attempt power cycle [ 409.837573][ T127] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 410.260374][ T127] usb 4-1: device descriptor read/8, error -71 [ 412.785890][ T6728] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 412.998276][ T6728] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 413.069264][ T6728] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 413.288563][ T6728] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 413.453794][ T6728] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 413.532039][ T6728] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 413.620360][ T6728] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 413.695202][ T6728] usb 1-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 413.763131][ T6728] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.823569][ T6728] usb 1-1: Product: syz [ 413.846059][ T6728] usb 1-1: Manufacturer: syz [ 413.872961][ T6728] usb 1-1: SerialNumber: syz [ 413.910286][ T6728] usb 1-1: config 0 descriptor?? [ 413.967227][ T6728] ti_usb_3410_5052 1-1:0.0: TI USB 5052 2 port adapter converter detected [ 414.001902][ T6728] ti_usb_3410_5052 1-1:0.0: missing endpoints [ 414.305911][ T6728] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 414.466504][ T6728] usb 5-1: device descriptor read/64, error -71 [ 414.747712][ T6728] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 414.906511][ T6728] usb 5-1: device descriptor read/64, error -71 [ 415.027296][ T6728] usb usb5-port1: attempt power cycle [ 415.438585][ T6728] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 415.580850][ T7] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 415.630158][ T6728] usb 5-1: device descriptor read/8, error -71 [ 415.742827][ T14] usb 1-1: USB disconnect, device number 12 [ 415.776105][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 415.782829][ T7] usb 4-1: no configurations [ 415.806188][ T7] usb 4-1: can't read configurations, error -22 [ 415.883921][ T8333] loop2: detected capacity change from 0 to 7 [ 415.894453][ T6327] Dev loop2: unable to read RDB block 7 [ 415.906075][ T6728] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 415.907027][ T6327] loop2: AHDI p1 p2 p3 [ 415.926123][ T6327] loop2: partition table partially beyond EOD, truncated [ 415.947503][ T6728] usb 5-1: device descriptor read/8, error -71 [ 415.961791][ T6327] loop2: p1 start 1601398130 is beyond EOD, truncated [ 415.966019][ T7] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 415.975072][ T6327] loop2: p2 start 1702059890 is beyond EOD, truncated [ 415.994467][ T8333] Dev loop2: unable to read RDB block 7 [ 416.003725][ T8333] loop2: AHDI p1 p2 p3 [ 416.013712][ T8333] loop2: partition table partially beyond EOD, truncated [ 416.022907][ T8333] loop2: p1 start 1601398130 is beyond EOD, truncated [ 416.036971][ T8333] loop2: p2 start 1702059890 is beyond EOD, truncated [ 416.066190][ T6728] usb usb5-port1: unable to enumerate USB device [ 416.150158][ T8336] netlink: 'syz.2.1017': attribute type 4 has an invalid length. [ 416.186028][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 416.192522][ T7] usb 4-1: no configurations [ 416.200293][ T8336] netlink: 'syz.2.1017': attribute type 4 has an invalid length. [ 416.214012][ T7] usb 4-1: can't read configurations, error -22 [ 416.224291][ T7] usb usb4-port1: attempt power cycle [ 416.394046][ T14] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 416.575943][ T14] usb 1-1: Using ep0 maxpacket: 32 [ 416.583325][ T14] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 416.595857][ T14] usb 1-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 416.608205][ T14] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 416.638972][ T14] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 416.650442][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.659186][ T14] usb 1-1: Product: syz [ 416.664434][ T14] usb 1-1: Manufacturer: syz [ 416.670826][ T14] usb 1-1: SerialNumber: syz [ 416.683021][ T8334] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 416.685887][ T7] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 416.722735][ T14] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 416.736100][ T14] imon 1-1:155.0: unable to initialize intf0, err -19 [ 416.743585][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 416.750761][ T14] imon:imon_probe: failed to initialize context! [ 416.758507][ T7] usb 4-1: no configurations [ 416.766686][ T7] usb 4-1: can't read configurations, error -22 [ 416.774374][ T14] imon 1-1:155.0: unable to register, err -19 [ 416.936008][ T7] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 416.972314][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 416.988049][ T7] usb 4-1: no configurations [ 416.993251][ T7] usb 4-1: can't read configurations, error -22 [ 417.001178][ T7] usb usb4-port1: unable to enumerate USB device [ 417.307905][ T8351] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1021'. [ 418.951257][ T127] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 419.713876][ T4318] usb 1-1: USB disconnect, device number 13 [ 419.861607][ T127] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 419.900108][ T127] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 420.791216][ T127] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 420.802170][ T127] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 420.815243][ T127] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 420.825505][ T127] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 420.838891][ T127] usb 2-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 420.852190][ T127] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.876046][ T127] usb 2-1: Product: syz [ 420.884239][ T127] usb 2-1: Manufacturer: syz [ 420.889011][ T127] usb 2-1: SerialNumber: syz [ 420.926032][ T127] usb 2-1: config 0 descriptor?? [ 420.934893][ T127] ti_usb_3410_5052 2-1:0.0: TI USB 5052 2 port adapter converter detected [ 420.943771][ T127] ti_usb_3410_5052 2-1:0.0: missing endpoints [ 422.246063][ T8395] No buffer was provided with the request [ 422.385931][ T4318] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 422.555872][ T4318] usb 4-1: device descriptor read/64, error -71 [ 422.825848][ T4318] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 422.906099][ T26] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 423.005859][ T4318] usb 4-1: device descriptor read/64, error -71 [ 423.059290][ T7] usb 2-1: USB disconnect, device number 25 [ 423.105951][ T26] usb 5-1: Using ep0 maxpacket: 32 [ 423.114005][ T26] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 423.136950][ T4318] usb usb4-port1: attempt power cycle [ 423.171743][ T26] usb 5-1: config 0 has no interfaces? [ 423.288657][ T26] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 423.555875][ T4318] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 424.068472][ T4318] usb 4-1: device descriptor read/8, error -71 [ 424.105908][ T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.114027][ T26] usb 5-1: Product: syz [ 424.181126][ T26] usb 5-1: Manufacturer: syz [ 424.196065][ T26] usb 5-1: SerialNumber: syz [ 424.226433][ T26] usb 5-1: config 0 descriptor?? [ 424.345956][ T4318] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 424.399043][ T4318] usb 4-1: device descriptor read/8, error -71 [ 424.555255][ T4318] usb usb4-port1: unable to enumerate USB device [ 425.662876][ T127] usb 5-1: USB disconnect, device number 16 [ 425.983568][ T8450] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1046'. [ 426.983252][ T8479] netlink: 'syz.4.1052': attribute type 1 has an invalid length. [ 427.011710][ T8479] 8021q: adding VLAN 0 to HW filter on device bond3 [ 427.535996][ T4256] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 427.696109][ T4318] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 427.707468][ T4256] usb 5-1: device descriptor read/64, error -71 [ 427.896237][ T4318] usb 1-1: Using ep0 maxpacket: 32 [ 427.910803][ T4318] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 427.942890][ T4318] usb 1-1: config 0 has no interfaces? [ 427.971439][ T4318] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 427.985957][ T4256] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 427.993826][ T4318] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.019320][ T4318] usb 1-1: Product: syz [ 428.025018][ T4318] usb 1-1: Manufacturer: syz [ 428.040204][ T4318] usb 1-1: SerialNumber: syz [ 428.052292][ T4318] usb 1-1: config 0 descriptor?? [ 428.145888][ T4256] usb 5-1: device descriptor read/64, error -71 [ 428.156130][ T26] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 428.266150][ T4256] usb usb5-port1: attempt power cycle [ 428.339525][ T26] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 428.350130][ T26] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 428.360771][ T26] usb 4-1: config 220 has no interface number 2 [ 428.367288][ T26] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 428.385711][ T26] usb 4-1: config 220 interface 0 has no altsetting 0 [ 428.393609][ T26] usb 4-1: config 220 interface 76 has no altsetting 0 [ 428.400834][ T26] usb 4-1: config 220 interface 1 has no altsetting 0 [ 428.418721][ T26] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 428.439399][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.448104][ T26] usb 4-1: Product: syz [ 428.452643][ T26] usb 4-1: Manufacturer: syz [ 428.457519][ T26] usb 4-1: SerialNumber: syz [ 428.675949][ T4256] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 428.696362][ T26] usb 4-1: selecting invalid altsetting 0 [ 428.710157][ T26] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 428.724823][ T26] usb 4-1: No valid video chain found. [ 428.732594][ T4256] usb 5-1: device descriptor read/8, error -71 [ 428.771914][ T26] usb 4-1: selecting invalid altsetting 0 [ 428.777973][ T26] usbtest: probe of 4-1:220.1 failed with error -22 [ 428.801327][ T26] usb 4-1: USB disconnect, device number 22 [ 429.006087][ T4256] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 429.048933][ T4256] usb 5-1: device descriptor read/8, error -71 [ 429.166105][ T4256] usb usb5-port1: unable to enumerate USB device [ 429.529769][ T8525] netlink: 'syz.2.1065': attribute type 1 has an invalid length. [ 429.558812][ T8525] 8021q: adding VLAN 0 to HW filter on device bond8 [ 429.566507][ T8523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1064'. [ 429.578677][ T8523] device gtp2 entered promiscuous mode [ 430.476879][ T4318] usb 1-1: USB disconnect, device number 14 [ 431.110813][ T8548] loop2: detected capacity change from 0 to 7 [ 431.319040][ T6327] Dev loop2: unable to read RDB block 7 [ 431.360594][ T6327] loop2: AHDI p1 p2 p3 [ 431.395917][ T6327] loop2: partition table partially beyond EOD, truncated [ 431.405994][ T6327] loop2: p1 start 1601398130 is beyond EOD, truncated [ 431.412902][ T6327] loop2: p2 start 1702059890 is beyond EOD, truncated [ 431.437354][ T8548] Dev loop2: unable to read RDB block 7 [ 431.466048][ T8548] loop2: AHDI p1 p2 p3 [ 431.496007][ T8548] loop2: partition table partially beyond EOD, truncated [ 431.558001][ T8548] loop2: p1 start 1601398130 is beyond EOD, truncated [ 431.594167][ T8548] loop2: p2 start 1702059890 is beyond EOD, truncated [ 431.695958][ T7026] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 431.885879][ T7026] usb 1-1: Using ep0 maxpacket: 32 [ 431.892960][ T7026] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 431.924016][ T7026] usb 1-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 431.945673][ T7026] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 431.968063][ T7026] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 431.985876][ T7026] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.014726][ T7026] usb 1-1: Product: syz [ 432.023972][ T7026] usb 1-1: Manufacturer: syz [ 432.034722][ T7026] usb 1-1: SerialNumber: syz [ 432.053557][ T8544] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 432.070202][ T7026] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 432.079465][ T7026] imon 1-1:155.0: unable to initialize intf0, err -19 [ 432.086960][ T7026] imon:imon_probe: failed to initialize context! [ 432.093578][ T7026] imon 1-1:155.0: unable to register, err -19 [ 434.529988][ T6728] usb 1-1: USB disconnect, device number 15 [ 434.666150][ T8581] netlink: 'syz.1.1082': attribute type 1 has an invalid length. [ 434.691651][ T8581] 8021q: adding VLAN 0 to HW filter on device bond8 [ 436.926612][ T8597] netlink: 'syz.0.1085': attribute type 10 has an invalid length. [ 439.214167][ T8597] device veth0_vlan left promiscuous mode [ 439.675425][ T8597] device veth0_vlan entered promiscuous mode [ 439.691617][ T8597] team0: Device veth0_vlan failed to register rx_handler [ 439.746476][ T4318] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 439.766111][ T8619] netlink: 'syz.2.1093': attribute type 1 has an invalid length. [ 439.855171][ T8619] 8021q: adding VLAN 0 to HW filter on device bond9 [ 439.948679][ T4318] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 439.976271][ T4318] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 439.994858][ T4318] usb 2-1: config 220 descriptor has 1 excess byte, ignoring [ 440.010388][ T4318] usb 2-1: config 220 has no interface number 2 [ 440.019487][ T1277] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 440.028763][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.035123][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.045746][ T4318] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 440.059743][ T4318] usb 2-1: config 220 interface 0 has no altsetting 0 [ 440.066688][ T4318] usb 2-1: config 220 interface 76 has no altsetting 0 [ 440.073736][ T4318] usb 2-1: config 220 interface 1 has no altsetting 0 [ 440.083206][ T4318] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 440.092825][ T4318] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.101212][ T4318] usb 2-1: Product: syz [ 440.105934][ T4318] usb 2-1: Manufacturer: syz [ 440.110656][ T4318] usb 2-1: SerialNumber: syz [ 440.346723][ T4318] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 440.455098][ T4318] usb 2-1: No valid video chain found. [ 440.489003][ T4318] usb 2-1: selecting invalid altsetting 0 [ 440.559439][ T4318] usb 2-1: selecting invalid altsetting 0 [ 440.568199][ T4318] usbtest: probe of 2-1:220.1 failed with error -22 [ 440.585082][ T4318] usb 2-1: USB disconnect, device number 26 [ 440.985900][ T26] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 441.281486][ T26] usb 1-1: device descriptor read/64, error -71 [ 441.565942][ T26] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 441.725861][ T26] usb 1-1: device descriptor read/64, error -71 [ 441.795861][ T4318] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 441.846089][ T26] usb usb1-port1: attempt power cycle [ 441.996008][ T4318] usb 5-1: Using ep0 maxpacket: 32 [ 442.004336][ T4318] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 442.015868][ T4318] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 442.041418][ T4318] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 442.051294][ T4318] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.059431][ T4318] usb 5-1: Product: syz [ 442.063724][ T4318] usb 5-1: Manufacturer: syz [ 442.069018][ T4318] usb 5-1: SerialNumber: syz [ 442.085068][ T4318] usb 5-1: config 0 descriptor?? [ 442.256102][ T26] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 442.313756][ T8652] binder: 8649:8652 ioctl c0306201 0 returned -14 [ 442.321924][ T26] usb 1-1: device descriptor read/8, error -71 [ 442.532332][ T8662] netlink: 'syz.3.1106': attribute type 1 has an invalid length. [ 442.595845][ T26] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 442.628044][ T8662] 8021q: adding VLAN 0 to HW filter on device bond4 [ 442.636377][ T26] usb 1-1: device descriptor read/8, error -71 [ 442.756070][ T26] usb usb1-port1: unable to enumerate USB device [ 445.167814][ T8703] netlink: 'syz.1.1118': attribute type 1 has an invalid length. [ 445.197720][ T8703] 8021q: adding VLAN 0 to HW filter on device bond9 [ 445.262560][ T6728] usb 5-1: USB disconnect, device number 21 [ 446.040782][ T26] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 446.205846][ T26] usb 5-1: device descriptor read/64, error -71 [ 446.321779][ T8726] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1124'. [ 446.475999][ T26] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 446.805288][ T26] usb 5-1: device descriptor read/64, error -71 [ 446.926605][ T26] usb usb5-port1: attempt power cycle [ 447.346206][ T26] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 448.128345][ T26] usb 5-1: device descriptor read/8, error -71 [ 448.219158][ T8745] netlink: 'syz.0.1131': attribute type 1 has an invalid length. [ 448.235492][ T8745] 8021q: adding VLAN 0 to HW filter on device bond2 [ 448.425851][ T4318] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 448.425924][ T26] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 448.518946][ T26] usb 5-1: device descriptor read/8, error -71 [ 448.606731][ T4318] usb 4-1: Using ep0 maxpacket: 16 [ 448.617005][ T4318] usb 4-1: unable to get BOS descriptor or descriptor too short [ 448.646109][ T26] usb usb5-port1: unable to enumerate USB device [ 448.761230][ T8755] input: syz1 as /devices/virtual/input/input7 [ 449.394481][ T4318] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 449.414359][ T4318] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 449.808615][ T4318] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.303169][ T4318] usb 4-1: Product: syz [ 450.355805][ T4318] usb 4-1: Manufacturer: syz [ 450.375870][ T4318] usb 4-1: SerialNumber: syz [ 451.124419][ T4318] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 451.176134][ T4318] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 451.243964][ T4318] usb 4-1: 2:1 : no UAC_FORMAT_TYPE desc [ 451.409976][ T4318] libceph: connect (1)[c::]:6789 error -101 [ 451.427001][ T4318] libceph: mon0 (1)[c::]:6789 connect error [ 451.561983][ T4256] usb 4-1: USB disconnect, device number 23 [ 451.705521][ T4318] libceph: connect (1)[c::]:6789 error -101 [ 451.718340][ T4318] libceph: mon0 (1)[c::]:6789 connect error [ 452.292672][ T4318] libceph: connect (1)[c::]:6789 error -101 [ 452.366380][ T8766] ceph: No mds server is up or the cluster is laggy [ 452.373617][ T4318] libceph: mon0 (1)[c::]:6789 connect error [ 452.557141][ T8782] netlink: 'syz.0.1142': attribute type 1 has an invalid length. [ 452.628066][ T8782] 8021q: adding VLAN 0 to HW filter on device bond3 [ 454.607757][ T8810] netlink: 'syz.3.1150': attribute type 1 has an invalid length. [ 454.630590][ T8810] 8021q: adding VLAN 0 to HW filter on device bond5 [ 457.494769][ T8835] device ipip0 entered promiscuous mode [ 457.539644][ T8846] netlink: 'syz.2.1162': attribute type 1 has an invalid length. [ 457.627310][ T8846] 8021q: adding VLAN 0 to HW filter on device bond10 [ 459.628370][ T8867] syz.4.1166 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 459.643021][ T8867] ubi31: attaching mtd0 [ 459.649873][ T8867] ubi31: scanning is finished [ 459.654622][ T8867] ubi31: empty MTD device detected [ 460.293418][ T8867] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 462.114056][ T6728] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 462.165298][ T8898] loop2: detected capacity change from 0 to 7 [ 462.175340][ T8898] Dev loop2: unable to read RDB block 7 [ 462.195993][ T8898] loop2: AHDI p1 p2 p3 [ 462.211771][ T8898] loop2: partition table partially beyond EOD, truncated [ 462.232397][ T8898] loop2: p1 start 1601398130 is beyond EOD, truncated [ 462.309341][ T6728] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 462.320728][ T6728] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 462.327313][ T8898] loop2: p2 start 1702059890 is beyond EOD, truncated [ 462.331499][ T6728] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 462.347584][ T6728] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.361434][ T8891] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 462.755916][ T6728] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 462.955881][ T6728] usb 1-1: Using ep0 maxpacket: 32 [ 462.962673][ T6728] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 462.993759][ T6728] usb 1-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 463.023521][ T6728] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 463.077308][ T6728] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 463.107061][ T6728] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.177223][ T6728] usb 1-1: Product: syz [ 463.181458][ T6728] usb 1-1: Manufacturer: syz [ 463.231079][ T6728] usb 1-1: SerialNumber: syz [ 463.938501][ T8898] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 463.952713][ T6728] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 463.960756][ T6728] imon 1-1:155.0: unable to initialize intf0, err -19 [ 463.968997][ T6728] imon:imon_probe: failed to initialize context! [ 463.975532][ T6728] imon 1-1:155.0: unable to register, err -19 [ 465.084180][ T5815] usb 5-1: USB disconnect, device number 26 [ 465.215972][ T26] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 465.301462][ T127] usb 1-1: USB disconnect, device number 20 [ 465.330094][ T8934] netlink: 'syz.4.1186': attribute type 10 has an invalid length. [ 465.338153][ T8934] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1186'. [ 465.516956][ T26] usb 4-1: Using ep0 maxpacket: 16 [ 465.536688][ T26] usb 4-1: unable to get BOS descriptor or descriptor too short [ 465.548383][ T26] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 465.568364][ T26] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 465.583390][ T26] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 465.599951][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.610887][ T26] usb 4-1: Product: syz [ 465.615134][ T26] usb 4-1: Manufacturer: syz [ 465.623859][ T26] usb 4-1: SerialNumber: syz [ 465.859173][ T26] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 466.744997][ T26] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 466.755070][ T26] usb 4-1: 2:1 : no UAC_FORMAT_TYPE desc [ 466.770124][ T26] usb 4-1: USB disconnect, device number 24 [ 466.978711][ T6327] udevd[6327]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 467.133845][ T8954] netlink: 'syz.3.1194': attribute type 1 has an invalid length. [ 467.179185][ T8954] 8021q: adding VLAN 0 to HW filter on device bond6 [ 468.081750][ T8965] loop2: detected capacity change from 0 to 7 [ 468.094992][ T8965] Dev loop2: unable to read RDB block 7 [ 468.859996][ T8965] loop2: AHDI p1 p2 p3 [ 468.864224][ T8965] loop2: partition table partially beyond EOD, truncated [ 468.999489][ T8965] loop2: p1 start 1601398130 is beyond EOD, truncated [ 469.031616][ T8965] loop2: p2 start 1702059890 is beyond EOD, truncated [ 469.127855][ T4256] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 469.315849][ T4256] usb 5-1: Using ep0 maxpacket: 32 [ 469.322729][ T4256] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 469.346246][ T4256] usb 5-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 469.381153][ T4256] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 469.427854][ T4256] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 469.446438][ T4256] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.462856][ T4256] usb 5-1: Product: syz [ 469.485483][ T4256] usb 5-1: Manufacturer: syz [ 469.493376][ T4256] usb 5-1: SerialNumber: syz [ 469.501800][ T8969] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 469.511305][ T4256] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 469.534635][ T4256] imon 5-1:155.0: unable to initialize intf0, err -19 [ 469.550605][ T4256] imon:imon_probe: failed to initialize context! [ 469.565928][ T4256] imon 5-1:155.0: unable to register, err -19 [ 471.013875][ T8994] netlink: 'syz.0.1207': attribute type 1 has an invalid length. [ 471.056272][ T8994] 8021q: adding VLAN 0 to HW filter on device bond4 [ 473.135405][ T5815] usb 5-1: USB disconnect, device number 27 [ 473.524495][ T9038] netlink: 'syz.3.1222': attribute type 1 has an invalid length. [ 473.563978][ T9038] 8021q: adding VLAN 0 to HW filter on device bond7 [ 475.153009][ T9058] binder_alloc: 9057: binder_alloc_buf, no vma [ 475.789075][ T5815] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 476.286781][ T5815] usb 1-1: device descriptor read/64, error -71 [ 476.568960][ T5815] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 477.675839][ T5815] usb 1-1: device descriptor read/64, error -71 [ 477.756900][ T9087] netlink: 'syz.2.1237': attribute type 1 has an invalid length. [ 477.777320][ T9087] 8021q: adding VLAN 0 to HW filter on device bond11 [ 477.806019][ T5815] usb usb1-port1: attempt power cycle [ 478.216487][ T5815] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 478.939010][ T5815] usb 1-1: device descriptor read/8, error -71 [ 479.948378][ T9103] device ipip0 entered promiscuous mode [ 481.721946][ T9125] netlink: 'syz.2.1250': attribute type 1 has an invalid length. [ 481.833360][ T9125] 8021q: adding VLAN 0 to HW filter on device bond12 [ 485.699029][ T9174] netlink: 'syz.1.1262': attribute type 1 has an invalid length. [ 486.661376][ T9174] 8021q: adding VLAN 0 to HW filter on device bond10 [ 487.186796][ T9187] random: crng reseeded on system resumption [ 488.236374][ T9190] device ipip0 entered promiscuous mode [ 492.181057][ T9233] netlink: 'syz.1.1274': attribute type 1 has an invalid length. [ 493.142479][ T9233] 8021q: adding VLAN 0 to HW filter on device bond11 [ 493.366809][ T9250] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1278'. [ 495.131277][ T9264] random: crng reseeded on system resumption [ 498.969601][ T9293] netlink: 'syz.0.1290': attribute type 1 has an invalid length. [ 499.137940][ T9293] 8021q: adding VLAN 0 to HW filter on device bond5 [ 499.419900][ T9308] random: crng reseeded on system resumption [ 501.482776][ T1277] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 501.493192][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.499806][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 505.388768][ T9352] loop2: detected capacity change from 0 to 7 [ 505.399621][ T6327] Dev loop2: unable to read RDB block 7 [ 505.405202][ T6327] loop2: AHDI p1 p2 p3 [ 505.424551][ T6327] loop2: partition table partially beyond EOD, truncated [ 505.455417][ T6327] loop2: p1 start 1601398130 is beyond EOD, truncated [ 505.476018][ T6327] loop2: p2 start 1702059890 is beyond EOD, truncated [ 505.500123][ T9352] Dev loop2: unable to read RDB block 7 [ 505.519360][ T9352] loop2: AHDI p1 p2 p3 [ 505.523592][ T9352] loop2: partition table partially beyond EOD, truncated [ 505.526128][ T9354] netlink: 'syz.2.1304': attribute type 1 has an invalid length. [ 505.591370][ T9354] 8021q: adding VLAN 0 to HW filter on device bond13 [ 505.650081][ T9352] loop2: p1 start 1601398130 is beyond EOD, truncated [ 505.666214][ T9352] loop2: p2 start 1702059890 is beyond EOD, truncated [ 505.705928][ T127] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 505.895869][ T127] usb 1-1: Using ep0 maxpacket: 32 [ 505.902592][ T127] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 505.984666][ T127] usb 1-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 506.140739][ T127] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 506.364659][ T127] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 506.388623][ T127] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.413896][ T127] usb 1-1: Product: syz [ 506.421526][ T127] usb 1-1: Manufacturer: syz [ 506.430684][ T127] usb 1-1: SerialNumber: syz [ 506.438084][ T9345] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 506.449666][ T127] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 506.449970][ T9369] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1307'. [ 506.457790][ T127] imon 1-1:155.0: unable to initialize intf0, err -19 [ 506.457810][ T127] imon:imon_probe: failed to initialize context! [ 506.457822][ T127] imon 1-1:155.0: unable to register, err -19 [ 506.732163][ T9372] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20005 [ 509.084491][ T4318] usb 1-1: USB disconnect, device number 25 [ 509.225536][ T9389] random: crng reseeded on system resumption [ 510.576607][ T9398] netlink: 'syz.2.1315': attribute type 1 has an invalid length. [ 510.655926][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 510.665926][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 510.670993][ T9398] 8021q: adding VLAN 0 to HW filter on device bond14 [ 511.105885][ T4318] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 512.345836][ T4318] usb 4-1: Using ep0 maxpacket: 32 [ 512.360634][ T4318] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 512.376658][ T4318] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.395323][ T4318] usb 4-1: Product: syz [ 512.404937][ T4318] usb 4-1: Manufacturer: syz [ 512.419937][ T4318] usb 4-1: SerialNumber: syz [ 512.577182][ T9430] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1322'. [ 513.207435][ T9429] binder: BINDER_SET_CONTEXT_MGR already set [ 513.223294][ T4318] usb 4-1: config 0 descriptor?? [ 513.252096][ T9429] binder: 9428:9429 ioctl 4018620d 200000004a80 returned -16 [ 513.433816][ T4318] airspy 4-1:0.0: usb_control_msg() failed -32 request 09 [ 513.498881][ T4318] airspy 4-1:0.0: Could not detect board [ 513.964264][ T4318] airspy: probe of 4-1:0.0 failed with error -32 [ 514.051261][ T9444] random: crng reseeded on system resumption [ 514.593933][ T5815] usb 4-1: USB disconnect, device number 25 [ 514.685389][ T9456] netlink: 'syz.4.1329': attribute type 1 has an invalid length. [ 514.734533][ T9456] 8021q: adding VLAN 0 to HW filter on device bond4 [ 514.817135][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 514.827191][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 514.836948][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 514.846616][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 515.866806][ T9473] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1334'. [ 519.556035][ T6728] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 520.058077][ T9502] netlink: 'syz.2.1344': attribute type 1 has an invalid length. [ 520.143015][ T9502] 8021q: adding VLAN 0 to HW filter on device bond15 [ 520.305851][ T6728] usb 4-1: Using ep0 maxpacket: 32 [ 521.165911][ T6728] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 521.237323][ T6728] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.245379][ T6728] usb 4-1: Product: syz [ 521.296573][ T6728] usb 4-1: Manufacturer: syz [ 521.301332][ T6728] usb 4-1: SerialNumber: syz [ 521.338670][ T6728] usb 4-1: config 0 descriptor?? [ 521.581472][ T6728] airspy 4-1:0.0: usb_control_msg() failed -32 request 09 [ 521.588944][ T6728] airspy 4-1:0.0: Could not detect board [ 521.594793][ T6728] airspy: probe of 4-1:0.0 failed with error -32 [ 522.336055][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 522.345925][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 522.355796][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 523.384148][ T5815] usb 4-1: USB disconnect, device number 26 [ 523.435390][ T9521] binder: 9512:9521 ioctl c0306201 0 returned -14 [ 524.374049][ T9563] netlink: 'syz.2.1358': attribute type 1 has an invalid length. [ 524.409233][ T9563] 8021q: adding VLAN 0 to HW filter on device bond16 [ 524.764583][ T9570] netlink: 'syz.2.1361': attribute type 4 has an invalid length. [ 526.519938][ T9582] binder: 9577:9582 ioctl c0306201 0 returned -14 [ 527.376918][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 527.670741][ T9603] netlink: 'syz.4.1370': attribute type 1 has an invalid length. [ 527.692121][ T9603] 8021q: adding VLAN 0 to HW filter on device bond5 [ 530.143598][ T9646] netlink: 'syz.0.1382': attribute type 1 has an invalid length. [ 530.175924][ T9646] 8021q: adding VLAN 0 to HW filter on device bond6 [ 530.656055][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 530.665911][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 530.675771][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 532.188738][ T9679] input: syz1 as /devices/virtual/input/input8 [ 534.745890][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 534.755831][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 538.631413][ T9725] input: syz1 as /devices/virtual/input/input9 [ 539.135913][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 539.146170][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 539.719885][ T4267] cgroup: fork rejected by pids controller in /syz4 [ 540.124440][ T9733] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1412'. [ 542.141917][ T6526] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.341565][ T6526] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.458736][ T6526] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.606735][ T6526] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.825912][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 542.835880][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 542.845898][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 543.790991][ T9776] input: syz1 as /devices/virtual/input/input10 [ 544.599429][ T4284] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 544.610126][ T4284] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 544.619876][ T4284] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 544.627654][ T4284] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 544.653625][ T4284] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 544.661602][ T4284] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 544.779048][ T9784] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1424'. [ 544.885793][ T6526] tipc: Left network mode [ 546.096320][ T9781] chnl_net:caif_netlink_parms(): no params data found [ 546.754252][ T4269] Bluetooth: hci0: command 0x0409 tx timeout [ 546.825849][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 546.835809][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 546.845535][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 547.054760][ T9825] netlink: 'syz.3.1430': attribute type 4 has an invalid length. [ 547.080238][ T9781] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.116832][ T9781] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.125090][ T9781] device bridge_slave_0 entered promiscuous mode [ 547.295842][ T9781] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.302984][ T9781] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.344851][ T9781] device bridge_slave_1 entered promiscuous mode [ 547.463667][ T6526] bond1: (slave gretap1): Releasing active interface [ 547.660301][ T9781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 547.671213][ T9840] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1436'. [ 547.721035][ T9781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 548.048599][ T9781] team0: Port device team_slave_0 added [ 548.095587][ T9781] team0: Port device team_slave_1 added [ 548.134234][ T9847] netlink: 'syz.2.1437': attribute type 10 has an invalid length. [ 548.168826][ T9847] device veth0_vlan left promiscuous mode [ 548.178549][ T9847] device veth0_vlan entered promiscuous mode [ 548.189671][ T9847] team0: Device veth0_vlan failed to register rx_handler [ 548.569604][ T9781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 548.588599][ T9781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 548.715901][ T9781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 548.815906][ T4269] Bluetooth: hci0: command 0x041b tx timeout [ 549.311911][ T6526] device hsr_slave_0 left promiscuous mode [ 549.395830][ T6526] device hsr_slave_1 left promiscuous mode [ 549.418849][ T6526] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 549.476674][ T6526] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 549.524785][ T6526] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 549.583897][ T6526] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 549.627704][ T6526] bridge0: port 3(batadv0) entered disabled state [ 549.711307][ T6526] device bridge_slave_1 left promiscuous mode [ 549.933877][ T5815] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 549.967184][ T6526] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.019499][ T6526] device bridge_slave_0 left promiscuous mode [ 550.080594][ T6526] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.130235][ T5815] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 550.153878][ T5815] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 550.495920][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 551.059167][ T4284] Bluetooth: hci0: command 0x040f tx timeout [ 551.096036][ T5815] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 551.124557][ T5815] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 551.175186][ T5815] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 551.186096][ T5815] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 551.199065][ T6526] device veth1_macvtap left promiscuous mode [ 551.266638][ T6526] device veth0_macvtap left promiscuous mode [ 551.293282][ T6526] device veth1_vlan left promiscuous mode [ 551.521893][ T5815] usb 4-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 551.551448][ T5815] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.582100][ T5815] usb 4-1: Product: syz [ 551.599861][ T5815] usb 4-1: Manufacturer: syz [ 551.622896][ T5815] usb 4-1: SerialNumber: syz [ 551.641000][ T5815] usb 4-1: config 0 descriptor?? [ 552.620894][ T6526] bond5 (unregistering): Released all slaves [ 553.075015][ T5815] usb 4-1: can't set config #0, error -71 [ 553.109331][ T5815] usb 4-1: USB disconnect, device number 27 [ 553.146294][ T4284] Bluetooth: hci0: command 0x0419 tx timeout [ 553.161280][ T6526] bond4 (unregistering): Released all slaves [ 553.543716][ T6526] bond3 (unregistering): Released all slaves [ 553.744618][ T6526] bond2 (unregistering): Released all slaves [ 553.928960][ T6526] bond1 (unregistering): Released all slaves [ 554.425832][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 554.435680][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 554.445493][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 555.227013][ T6526] team0 (unregistering): Port device team_slave_1 removed [ 555.310505][ T6526] team0 (unregistering): Port device team_slave_0 removed [ 555.420233][ T6526] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 555.565189][ T6526] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 556.475955][ T6526] bond0 (unregistering): Released all slaves [ 556.672426][ T9781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 556.685189][ T9781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 556.820961][ T9781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 556.892548][ T9898] netlink: 'syz.0.1443': attribute type 4 has an invalid length. [ 557.066441][ T9781] device hsr_slave_0 entered promiscuous mode [ 557.089364][ T9781] device hsr_slave_1 entered promiscuous mode [ 557.132013][ T9781] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 557.148576][ T9781] Cannot create hsr debugfs directory [ 557.715805][ T14] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 557.853623][ T9959] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1462'. [ 557.874487][ T9959] netlink: 'syz.3.1462': attribute type 7 has an invalid length. [ 557.890566][ T9959] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1462'. [ 557.918531][ T9959] device ip6gretap0 entered promiscuous mode [ 557.929598][ T14] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 557.939880][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 557.940151][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 557.940330][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 557.981819][ T9959] device syz_tun entered promiscuous mode [ 558.013644][ T14] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 558.037478][ T14] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 558.062588][ T14] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 558.103235][ T14] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 558.124761][ T14] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 558.292921][ T6529] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 558.323534][ T14] usb 1-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 558.427897][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.490339][ T14] usb 1-1: Product: syz [ 558.518687][ T14] usb 1-1: Manufacturer: syz [ 558.553305][ T14] usb 1-1: SerialNumber: syz [ 558.593415][ T14] usb 1-1: config 0 descriptor?? [ 559.090383][ T9976] binder: 9965:9976 ioctl c0306201 0 returned -14 [ 559.278570][ T9991] netlink: 'syz.1.1467': attribute type 4 has an invalid length. [ 559.373660][ T9781] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 559.527335][ T9781] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 559.557395][ T9781] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 559.598724][ T9781] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 559.863799][ T9781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 559.930993][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 559.955647][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 560.040848][ T9781] 8021q: adding VLAN 0 to HW filter on device team0 [ 560.099491][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 560.124010][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 560.171704][ T4452] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.178870][ T4452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 560.246512][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 560.285124][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 560.323081][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 560.365080][ T4452] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.372365][ T4452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 560.424229][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 560.459517][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 560.512789][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 560.570332][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 560.607965][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 560.670274][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 560.703635][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 560.735402][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 560.767825][ T9781] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 560.803103][ T9781] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 560.836902][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 560.853442][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 560.913031][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 561.045486][ T5815] usb 1-1: USB disconnect, device number 26 [ 561.121179][T10029] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1474'. [ 561.161221][T10029] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1474'. [ 561.213778][T10029] device gretap0 entered promiscuous mode [ 561.235035][T10029] device gretap0 left promiscuous mode [ 561.379286][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 561.389119][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 561.399135][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 562.449205][T10043] ªªªªªª: renamed from vlan0 [ 562.544700][T10046] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1477'. [ 562.652030][T10048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1477'. [ 562.909683][ T1277] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 562.920676][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.927143][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.948866][T10048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1477'. [ 562.998390][T10048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1477'. [ 563.033405][T10048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1477'. [ 563.071728][ T9781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 563.083009][ T6521] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 563.097092][ T6521] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 564.129877][ T6521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 564.142280][ T6521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 564.219752][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 564.247634][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 564.288109][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 564.302554][ T4618] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 564.317434][ T9781] device veth0_vlan entered promiscuous mode [ 564.331876][T10097] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1489'. [ 564.342244][T10097] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1489'. [ 564.378014][T10098] autofs4:pid:10098:autofs_fill_super: called with bogus options [ 564.622609][T10097] device gretap0 entered promiscuous mode [ 564.667162][T10097] device gretap0 left promiscuous mode [ 565.037455][ T7026] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 565.152068][ T9781] device veth1_vlan entered promiscuous mode [ 565.175405][ T4990] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 565.266773][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 565.277619][ T4498] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 565.315891][ T7026] usb 1-1: Using ep0 maxpacket: 16 [ 565.318755][ T9781] device veth0_macvtap entered promiscuous mode [ 565.338047][ T9781] device veth1_macvtap entered promiscuous mode [ 565.338129][ T7026] usb 1-1: unable to get BOS descriptor or descriptor too short [ 565.406367][ T9781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 565.449990][T10111] input: syz1 as /devices/virtual/input/input11 [ 565.535824][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 565.545797][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 565.555604][ T9781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.555681][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 565.722508][ T9781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 565.871486][ T9781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.987059][ T9781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 566.101202][ T9781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.220708][ T7026] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 566.239029][ T7026] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 566.248379][ T7026] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 566.256786][ T7026] usb 1-1: Product: syz [ 566.258459][ T9781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 566.261032][ T7026] usb 1-1: Manufacturer: syz [ 566.273047][ T7026] usb 1-1: SerialNumber: syz [ 566.351069][ T9585] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 566.396622][ T9585] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 566.436435][ T9585] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 566.468023][ T9585] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 566.504450][ T9781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 566.532232][ T9781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.553538][ T9781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 566.610194][ T9781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.636801][ T9781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 566.662365][ T9781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.681045][ T9781] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 566.692167][ T7026] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 566.699529][ T9781] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 566.716039][ T7026] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 566.722098][ T9781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 566.752638][ T7026] usb 1-1: 2:1 : no UAC_FORMAT_TYPE desc [ 566.763279][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 566.782851][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 566.814394][ T7026] usb 1-1: USB disconnect, device number 27 [ 566.863969][ T9781] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.915917][ T6320] udevd[6320]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 566.938286][ T9781] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.964513][ T9781] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.992163][ T9781] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.019242][T10151] netlink: 'syz.2.1502': attribute type 4 has an invalid length. [ 568.021365][ T4496] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 568.066372][ T4496] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 568.112222][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 568.205830][ T4450] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 568.231758][ T4450] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 568.272632][ T4450] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 569.631722][T10180] netlink: 'syz.0.1509': attribute type 1 has an invalid length. [ 569.678394][T10180] 8021q: adding VLAN 0 to HW filter on device bond7 [ 570.372263][T10199] autofs4:pid:10199:autofs_fill_super: called with bogus options [ 570.665846][ T7] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 570.869983][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 570.887890][ T7] usb 4-1: unable to get BOS descriptor or descriptor too short [ 570.931683][ T7] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 570.987259][ T7] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 571.026944][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.063514][ T7] usb 4-1: Product: syz [ 571.091061][ T7] usb 4-1: Manufacturer: syz [ 571.109201][ T7] usb 4-1: SerialNumber: syz [ 571.156400][T10216] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1517'. [ 571.556762][ T7] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 571.582689][ T7] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 571.639033][ T7] usb 4-1: 2:1 : no UAC_FORMAT_TYPE desc [ 571.653618][ T7] usb 4-1: USB disconnect, device number 28 [ 573.709742][T10267] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1530'. [ 573.788177][ T4317] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 573.997613][ T4317] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 574.016532][ T4317] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 574.027962][ T4317] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 574.042547][ T4317] usb 1-1: config 220 has no interface number 2 [ 574.049324][ T4317] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 574.063336][ T4317] usb 1-1: config 220 interface 0 has no altsetting 0 [ 574.073812][ T4317] usb 1-1: config 220 interface 76 has no altsetting 0 [ 574.081790][ T4317] usb 1-1: config 220 interface 1 has no altsetting 0 [ 574.096695][ T4317] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 574.119777][ T4317] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.142214][ T4317] usb 1-1: Product: syz [ 574.149107][ T4317] usb 1-1: Manufacturer: syz [ 574.154816][ T4317] usb 1-1: SerialNumber: syz [ 574.379489][ T4317] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 574.389119][ T4317] usb 1-1: No valid video chain found. [ 574.399994][ T4317] usb 1-1: selecting invalid altsetting 0 [ 574.435040][ T4317] usb 1-1: selecting invalid altsetting 0 [ 574.443572][ T4317] usbtest: probe of 1-1:220.1 failed with error -22 [ 574.456903][ T4317] usb 1-1: USB disconnect, device number 28 [ 574.600938][T10279] loop2: detected capacity change from 0 to 7 [ 574.624148][T10279] Dev loop2: unable to read RDB block 7 [ 574.647473][T10279] loop2: AHDI p1 p2 p3 [ 574.669991][T10279] loop2: partition table partially beyond EOD, truncated [ 574.717671][T10279] loop2: p1 start 1601398130 is beyond EOD, truncated [ 574.761949][T10279] loop2: p2 start 1702059890 is beyond EOD, truncated [ 575.015926][ T4317] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 575.206299][ T4317] usb 4-1: Using ep0 maxpacket: 32 [ 575.218934][ T4317] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 575.279760][ T4317] usb 4-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 575.309998][ T4317] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 575.364768][ T4317] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 575.398735][ T4317] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.421757][ T4317] usb 4-1: Product: syz [ 575.439584][ T4317] usb 4-1: Manufacturer: syz [ 575.459925][ T4317] usb 4-1: SerialNumber: syz [ 575.671417][T10284] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 575.739451][ T4317] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 575.754858][ T4317] imon 4-1:155.0: unable to initialize intf0, err -19 [ 575.761976][ T4317] imon:imon_probe: failed to initialize context! [ 575.768417][ T4317] imon 4-1:155.0: unable to register, err -19 [ 576.204649][T10300] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1542'. [ 576.567706][T10307] input: syz1 as /devices/virtual/input/input12 [ 578.414662][ T4317] usb 4-1: USB disconnect, device number 29 [ 578.540537][T10329] comedi comedi3: rti800: I/O port conflict (0x3,16) [ 578.723622][T10337] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1555'. [ 579.156582][T10341] binder: 10339:10341 ioctl c0306201 0 returned -14 [ 580.911125][T10343] input: syz1 as /devices/virtual/input/input13 [ 581.297325][T10353] program syz.1.1558 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 583.340762][T10364] loop2: detected capacity change from 0 to 7 [ 583.350553][ T6327] Dev loop2: unable to read RDB block 7 [ 583.366534][ T6327] loop2: AHDI p1 p2 p3 [ 583.406046][ T6327] loop2: partition table partially beyond EOD, truncated [ 583.427582][ T6327] loop2: p1 start 1601398130 is beyond EOD, truncated [ 583.434453][ T6327] loop2: p2 start 1702059890 is beyond EOD, truncated [ 583.493179][T10364] Dev loop2: unable to read RDB block 7 [ 583.506959][T10364] loop2: AHDI p1 p2 p3 [ 583.511184][T10364] loop2: partition table partially beyond EOD, truncated [ 583.554153][T10364] loop2: p1 start 1601398130 is beyond EOD, truncated [ 583.583632][T10364] loop2: p2 start 1702059890 is beyond EOD, truncated [ 583.621768][T10372] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1566'. [ 583.655923][ T5815] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 584.615875][ T5815] usb 5-1: Using ep0 maxpacket: 32 [ 584.623719][ T5815] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 584.709239][ T5815] usb 5-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 584.780813][ T5815] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 584.804032][ T5815] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 584.819395][ T5815] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.830105][ T5815] usb 5-1: Product: syz [ 584.834666][ T5815] usb 5-1: Manufacturer: syz [ 584.848824][ T5815] usb 5-1: SerialNumber: syz [ 584.868110][T10368] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 584.977409][ T5815] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 584.986052][ T5815] imon 5-1:155.0: unable to initialize intf0, err -19 [ 584.994212][ T5815] imon:imon_probe: failed to initialize context! [ 585.002602][ T5815] imon 5-1:155.0: unable to register, err -19 [ 585.153550][T10382] binder: 10380:10382 ioctl c0306201 0 returned -14 [ 585.563121][T10386] input: syz1 as /devices/virtual/input/input14 [ 586.588016][ T5815] usb 5-1: USB disconnect, device number 28 [ 587.714755][T10412] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1577'. [ 588.148901][T10423] binder: 10418:10423 ioctl c0306201 0 returned -14 [ 589.584676][T10439] input: syz1 as /devices/virtual/input/input15 [ 591.473074][T10454] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1591'. [ 591.575146][T10433] usb usb1: usbfs: process 10433 (syz.0.1584) did not claim interface 0 before use [ 593.037641][T10467] binder: 10465:10467 ioctl c0306201 0 returned -14 [ 594.434054][T10490] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1602'. [ 595.762743][T10505] binder: 10501:10505 ioctl c0306201 0 returned -14 [ 596.082557][T10518] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1612'. [ 597.061917][T10530] loop2: detected capacity change from 0 to 7 [ 597.081240][T10530] Dev loop2: unable to read RDB block 7 [ 597.097635][T10530] loop2: AHDI p1 p2 p3 [ 597.109785][T10530] loop2: partition table partially beyond EOD, truncated [ 597.140722][T10530] loop2: p1 start 1601398130 is beyond EOD, truncated [ 597.158600][T10530] loop2: p2 start 1702059890 is beyond EOD, truncated [ 597.183362][ T3637] Dev loop2: unable to read RDB block 7 [ 597.195855][ T3637] loop2: AHDI p1 p2 p3 [ 597.200076][ T3637] loop2: partition table partially beyond EOD, truncated [ 597.214729][ T3637] loop2: p1 start 1601398130 is beyond EOD, truncated [ 597.226182][ T3637] loop2: p2 start 1702059890 is beyond EOD, truncated [ 597.395783][ T127] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 598.295866][ T127] usb 2-1: Using ep0 maxpacket: 32 [ 598.302760][ T127] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 598.346513][ T127] usb 2-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 598.395867][ T127] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 598.475597][ T127] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 598.518919][ T127] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.541444][T10545] binder: BINDER_SET_CONTEXT_MGR already set [ 598.547596][ T127] usb 2-1: Product: syz [ 598.547618][ T127] usb 2-1: Manufacturer: syz [ 598.547632][ T127] usb 2-1: SerialNumber: syz [ 598.569994][T10531] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 598.585913][ T127] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 598.622142][ T127] imon 2-1:155.0: unable to initialize intf0, err -19 [ 598.642251][ T127] imon:imon_probe: failed to initialize context! [ 598.661189][ T127] imon 2-1:155.0: unable to register, err -19 [ 598.760564][T10545] binder: 10544:10545 ioctl 4018620d 200000004a80 returned -16 [ 599.881131][ T952] usb 2-1: USB disconnect, device number 27 [ 600.271909][T10572] random: crng reseeded on system resumption [ 602.861331][T10604] loop2: detected capacity change from 0 to 7 [ 602.886955][T10604] Dev loop2: unable to read RDB block 7 [ 602.901758][T10604] loop2: AHDI p1 p2 p3 [ 602.950590][T10604] loop2: partition table partially beyond EOD, truncated [ 603.017413][T10604] loop2: p1 start 1601398130 is beyond EOD, truncated [ 603.133923][T10604] loop2: p2 start 1702059890 is beyond EOD, truncated [ 603.226152][ T127] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 603.455851][ T127] usb 1-1: Using ep0 maxpacket: 32 [ 603.462766][ T127] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 603.489375][ T127] usb 1-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 603.516297][ T127] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 603.558404][ T127] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 603.616084][ T127] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.640570][ T127] usb 1-1: Product: syz [ 603.658242][T10609] binder: 10605:10609 ioctl c0306201 0 returned -14 [ 603.665028][ T127] usb 1-1: Manufacturer: syz [ 603.675213][ T127] usb 1-1: SerialNumber: syz [ 603.852997][T10599] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 603.875033][ T127] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 603.915234][ T127] imon 1-1:155.0: unable to initialize intf0, err -19 [ 603.942926][ T127] imon:imon_probe: failed to initialize context! [ 603.995161][ T127] imon 1-1:155.0: unable to register, err -19 [ 605.558876][ T127] usb 1-1: USB disconnect, device number 29 [ 605.737194][T10645] random: crng reseeded on system resumption [ 608.675834][ T5815] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 608.820958][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 608.985793][ T5815] usb 5-1: device descriptor read/64, error -32 [ 609.024641][T10677] binder: 10664:10677 ioctl c0306201 0 returned -14 [ 609.276185][ T5815] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 609.470796][ T5815] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 609.489729][ T5815] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 609.493475][T10683] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 609.540155][T10683] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 609.561673][ T5815] usb 5-1: config 220 descriptor has 1 excess byte, ignoring [ 609.594576][ T5815] usb 5-1: config 220 has no interface number 2 [ 609.629673][ T5815] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 609.714927][ T5815] usb 5-1: config 220 interface 0 has no altsetting 0 [ 609.723607][ T5815] usb 5-1: config 220 interface 76 has no altsetting 0 [ 609.734833][ T5815] usb 5-1: config 220 interface 1 has no altsetting 0 [ 609.761179][ T5815] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 609.811340][ T5815] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.920960][ T5815] usb 5-1: Product: syz [ 609.991516][ T5815] usb 5-1: Manufacturer: syz [ 610.024413][ T5815] usb 5-1: SerialNumber: syz [ 610.273011][ T5815] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 610.310506][ T5815] usb 5-1: No valid video chain found. [ 610.339268][ T5815] usb 5-1: selecting invalid altsetting 0 [ 610.403648][ T5815] usb 5-1: selecting invalid altsetting 0 [ 610.410093][ T5815] usbtest: probe of 5-1:220.1 failed with error -22 [ 610.437859][ T5815] usb 5-1: USB disconnect, device number 30 [ 611.113254][T10708] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1669'. [ 611.144437][T10708] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1669'. [ 611.309600][T10708] device syz_tun entered promiscuous mode [ 611.324988][T10708] device syz_tun left promiscuous mode [ 612.214899][T10724] netlink: 'syz.0.1675': attribute type 1 has an invalid length. [ 612.241496][T10724] 8021q: adding VLAN 0 to HW filter on device bond8 [ 613.581563][T10735] binder: 10727:10735 ioctl c0306201 0 returned -14 [ 614.798438][T10751] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 618.344518][T10779] input: syz1 as /devices/virtual/input/input16 [ 621.453524][ T7] libceph: connect (1)[c::]:6789 error -101 [ 621.475862][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 621.787665][ T7] libceph: connect (1)[c::]:6789 error -101 [ 621.796722][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 622.207218][T10809] ceph: No mds server is up or the cluster is laggy [ 622.552345][ T7] libceph: connect (1)[c::]:6789 error -101 [ 622.558527][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 623.046078][ T14] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 623.140153][T10830] binder: 10826:10830 ioctl c0306201 0 returned -14 [ 623.395801][ T14] usb 2-1: Using ep0 maxpacket: 32 [ 623.411985][ T14] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 623.441747][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.472133][T10831] binder: 10824:10831 ioctl c0306201 0 returned -14 [ 623.479150][ T14] usb 2-1: Product: syz [ 623.493600][ T14] usb 2-1: Manufacturer: syz [ 623.503735][ T14] usb 2-1: SerialNumber: syz [ 623.529486][ T14] usb 2-1: config 0 descriptor?? [ 624.235772][ T14] airspy 2-1:0.0: Board ID: 00 [ 624.245784][ T14] airspy 2-1:0.0: Firmware version: [ 624.347011][ T1277] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 624.362324][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.369171][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.431308][ T14] airspy 2-1:0.0: usb_control_msg() failed -32 request 11 [ 624.461011][ T14] airspy 2-1:0.0: Registered as swradio24 [ 624.470532][ T14] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 625.571769][T10849] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1709'. [ 626.881426][ T5815] usb 2-1: USB disconnect, device number 28 [ 628.427712][T10885] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1721'. [ 631.021649][ T14] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 631.265781][ T14] usb 2-1: Using ep0 maxpacket: 32 [ 631.275173][ T14] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 631.285723][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.294095][ T14] usb 2-1: Product: syz [ 631.298760][ T14] usb 2-1: Manufacturer: syz [ 631.303463][ T14] usb 2-1: SerialNumber: syz [ 631.317739][ T14] usb 2-1: config 0 descriptor?? [ 632.094143][ T14] airspy 2-1:0.0: Board ID: 00 [ 632.099693][ T14] airspy 2-1:0.0: Firmware version: [ 632.378420][ T14] airspy 2-1:0.0: usb_control_msg() failed -32 request 0e [ 632.406764][ T14] airspy 2-1:0.0: Registered as swradio24 [ 632.425734][ T14] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 632.456027][ T14] usb 2-1: USB disconnect, device number 29 [ 632.488478][T10911] binder: 10904:10911 ioctl c0306201 0 returned -14 [ 632.925996][T10924] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1732'. [ 636.436942][T10959] binder: 10957:10959 ioctl c0306201 0 returned -14 [ 636.588527][ C0] ------------[ cut here ]------------ [ 636.594564][ C0] WARNING: CPU: 0 PID: 15 at net/mac80211/tx.c:4944 __ieee80211_beacon_get+0x1233/0x1600 [ 636.604562][ C0] Modules linked in: [ 636.608672][ C0] CPU: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 [ 636.616729][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 636.627294][ C0] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 636.634192][ C0] Code: 24 4c 89 e7 e8 8e 2e 0a f8 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 a9 8f d1 f7 0f 0b e9 f6 f7 ff ff e8 9d 8f d1 f7 <0f> 0b e9 48 fb ff ff e8 91 8f d1 f7 48 c7 c7 90 dc fa 8d 4c 89 e6 [ 636.653996][ C0] RSP: 0018:ffffc900001478d0 EFLAGS: 00010246 [ 636.660240][ C0] RAX: ffffffff89b0e4f3 RBX: ffffffff89b0d2f6 RCX: ffff88813fef3b80 [ 636.668301][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 636.676406][ C0] RBP: 0000000000000000 R08: ffff88813fef3b80 R09: 0000000000000003 [ 636.684439][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff8880732a6228 [ 636.692716][ C0] R13: dffffc0000000000 R14: ffff8880732a6760 R15: ffff8880575e6824 [ 636.700952][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 636.709996][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 636.716706][ C0] CR2: 00007f4c007e9f00 CR3: 0000000076c42000 CR4: 00000000003506f0 [ 636.724716][ C0] Call Trace: [ 636.728243][ C0] [ 636.731219][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 636.736892][ C0] ieee80211_beacon_get_tim+0x63/0x4e0 [ 636.742404][ C0] mac80211_hwsim_beacon_tx+0x21c/0xae0 [ 636.748040][ C0] ? read_lock_is_recursive+0x10/0x10 [ 636.753465][ C0] __iterate_interfaces+0x243/0x500 [ 636.758779][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 636.765082][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 636.772384][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 636.778733][ C0] ieee80211_iterate_active_interfaces_atomic+0xd7/0x170 [ 636.785960][ C0] mac80211_hwsim_beacon+0xb7/0x1b0 [ 636.791321][ C0] __hrtimer_run_queues+0x54a/0xd50 [ 636.796726][ C0] ? hw_scan_work+0xf50/0xf50 [ 636.801479][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 636.806708][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 636.812870][ C0] hrtimer_run_softirq+0x183/0x2a0 [ 636.818229][ C0] handle_softirqs+0x2a1/0x930 [ 636.823093][ C0] ? run_ksoftirqd+0xa4/0x100 [ 636.828001][ C0] ? do_softirq+0x210/0x210 [ 636.832585][ C0] run_ksoftirqd+0xa4/0x100 [ 636.837277][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 636.842614][ C0] ? preempt_schedule_thunk+0x16/0x18 [ 636.848086][ C0] ? takeover_tasklets+0x770/0x770 [ 636.853255][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 636.858546][ C0] smpboot_thread_fn+0x64a/0xa40 [ 636.863545][ C0] ? smpboot_thread_fn+0x4c/0xa40 [ 636.868705][ C0] kthread+0x29d/0x330 [ 636.872873][ C0] ? cpu_report_death+0x240/0x240 [ 636.878394][ C0] ? kthread_blkcg+0xd0/0xd0 [ 636.883084][ C0] ret_from_fork+0x1f/0x30 [ 636.887638][ C0] [ 636.890785][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 636.898070][ C0] CPU: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 [ 636.905529][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 636.915581][ C0] Call Trace: [ 636.918896][ C0] [ 636.921826][ C0] dump_stack_lvl+0x188/0x24e [ 636.926593][ C0] ? memcpy+0x3c/0x60 [ 636.930563][ C0] ? show_regs_print_info+0x12/0x12 [ 636.935756][ C0] ? load_image+0x400/0x400 [ 636.940250][ C0] panic+0x2e5/0x730 [ 636.944305][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 636.948818][ C0] ? ret_from_fork+0x1f/0x30 [ 636.953513][ C0] __warn+0x2f8/0x4f0 [ 636.957498][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 636.963211][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 636.969019][ C0] report_bug+0x2ba/0x4f0 [ 636.973349][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 636.979092][ C0] handle_bug+0x3a/0x70 [ 636.983362][ C0] exc_invalid_op+0x16/0x40 [ 636.987887][ C0] asm_exc_invalid_op+0x16/0x20 [ 636.992741][ C0] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 636.999079][ C0] Code: 24 4c 89 e7 e8 8e 2e 0a f8 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 a9 8f d1 f7 0f 0b e9 f6 f7 ff ff e8 9d 8f d1 f7 <0f> 0b e9 48 fb ff ff e8 91 8f d1 f7 48 c7 c7 90 dc fa 8d 4c 89 e6 [ 637.019302][ C0] RSP: 0018:ffffc900001478d0 EFLAGS: 00010246 [ 637.025368][ C0] RAX: ffffffff89b0e4f3 RBX: ffffffff89b0d2f6 RCX: ffff88813fef3b80 [ 637.033333][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 637.041378][ C0] RBP: 0000000000000000 R08: ffff88813fef3b80 R09: 0000000000000003 [ 637.049425][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff8880732a6228 [ 637.057387][ C0] R13: dffffc0000000000 R14: ffff8880732a6760 R15: ffff8880575e6824 [ 637.065455][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 637.071185][ C0] ? __ieee80211_beacon_get+0x1233/0x1600 [ 637.076905][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 637.082448][ C0] ieee80211_beacon_get_tim+0x63/0x4e0 [ 637.087901][ C0] mac80211_hwsim_beacon_tx+0x21c/0xae0 [ 637.093435][ C0] ? read_lock_is_recursive+0x10/0x10 [ 637.098833][ C0] __iterate_interfaces+0x243/0x500 [ 637.104029][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 637.110348][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 637.118058][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 637.124288][ C0] ieee80211_iterate_active_interfaces_atomic+0xd7/0x170 [ 637.131318][ C0] mac80211_hwsim_beacon+0xb7/0x1b0 [ 637.136540][ C0] __hrtimer_run_queues+0x54a/0xd50 [ 637.141739][ C0] ? hw_scan_work+0xf50/0xf50 [ 637.146414][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 637.151514][ C0] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 637.157577][ C0] hrtimer_run_softirq+0x183/0x2a0 [ 637.162765][ C0] handle_softirqs+0x2a1/0x930 [ 637.167534][ C0] ? run_ksoftirqd+0xa4/0x100 [ 637.172199][ C0] ? do_softirq+0x210/0x210 [ 637.176701][ C0] run_ksoftirqd+0xa4/0x100 [ 637.181195][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 637.186383][ C0] ? preempt_schedule_thunk+0x16/0x18 [ 637.191760][ C0] ? takeover_tasklets+0x770/0x770 [ 637.196865][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 637.202057][ C0] smpboot_thread_fn+0x64a/0xa40 [ 637.206988][ C0] ? smpboot_thread_fn+0x4c/0xa40 [ 637.212057][ C0] kthread+0x29d/0x330 [ 637.216119][ C0] ? cpu_report_death+0x240/0x240 [ 637.221136][ C0] ? kthread_blkcg+0xd0/0xd0 [ 637.225729][ C0] ret_from_fork+0x1f/0x30 [ 637.230166][ C0] [ 637.234199][ C0] Kernel Offset: disabled [ 637.238555][ C0] Rebooting in 86400 seconds..