last executing test programs: 14.685552122s ago: executing program 0 (id=6534): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) recvmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000300)=""/206, 0xce}, {&(0x7f0000000a80)=""/4088, 0xff8}, {&(0x7f0000000500)=""/116, 0x74}, {&(0x7f00000006c0)=""/227, 0xe3}, {&(0x7f0000002980)=""/4090, 0xffa}, {&(0x7f0000000200)=""/24, 0x18}], 0x6}, 0x12000) 14.37584127s ago: executing program 0 (id=6539): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f9", 0xa3}], 0x1, &(0x7f00000008c0)=[@iv={0x58, 0x117, 0x2, 0x42, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x70, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000b40)="86545d2157646172", 0x8}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a", 0x3c}], 0x2, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 13.920068722s ago: executing program 0 (id=6540): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(0x0, &(0x7f0000000300)='./file0/file0\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r3, &(0x7f0000001180)={0x2020}, 0x2020) symlinkat(&(0x7f0000001040)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') 11.466087531s ago: executing program 0 (id=6552): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000024000180060005004e230007060001000200000008000300ac1414aa0800060001"], 0x38}}, 0x0) listen(r0, 0xc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, 0x0, 0x0) 10.457357893s ago: executing program 0 (id=6560): munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000000c0)=0x1, 0x4) recvmmsg(r0, &(0x7f0000005600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001940)=""/75, 0x4b}, 0x10001}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 6.127472664s ago: executing program 3 (id=6599): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x3, 0x1c3}, &(0x7f0000000000)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r5, 0x0, 0x20, 0x0, &(0x7f0000000800)) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c00", 0x4, 0x800, 0x0, 0x0) syz_ublk_setup_queues(r0, 0x0, &(0x7f0000000380)={0x0, 0xcc45, 0x11040, 0xffffffff, 0x242, 0x0, r1}, &(0x7f0000000a00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x169c, 0x2000, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x8, 0x1, 0x2000008}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x2000, 0x2, 0x902c4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd8bd, 0x10, 0x3, 0x260, 0x0, r1}}], 0x4, &(0x7f0000001540)={0x2e, 0x23, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, 0x0, '\x00', {0x0, 0xb81, 0x0, 0x0}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0x9) recvfrom$inet6(r6, 0x0, 0x0, 0x10000, 0x0, 0x0) syz_clone(0x2000, 0x0, 0xffdd, 0x0, 0x0, 0x0) 5.063768387s ago: executing program 3 (id=6609): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe0}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb9316", 0x32}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a92", 0x13}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c483271361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f5312", 0x95}], 0x3}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000500)="cb", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000880)="2588e09c666f7c2e1106c4b4839bf483707b3603c0580d4ea3d894cc071395c4737f5f4840a109613a98c563d9d35e1d30ca9911819a41dbfd9738e9c1125ca897831d701969b199ec46f793e0be4ddb8d9826811efc4e049594868a96ae2daab085b6ba229f384a9463eb764b9ea4c74e5460b9a82983e2d22885fbc6d1d731e8d02f8246b3f0ae936b34987046e18afad35e79c363b701eb8455e1f4ea1c12e4a706789339df763dd4505497e474d21689760747e6d2c3c2d85aa253b16d", 0xbf}, {&(0x7f0000000980)="b58e23c2095b3eca9b630c1d411197505e88b68339fc3ca18b0fd3186d253cf0556b7f8b7172a7ecda83c0bfb299b17792211571807b64f65caf151aa7f1b0bd962717d5fd2f9f0ceec19df6106bdba8c3292328dce4b38ecc0c6cbaed777b7d2f6f229a0ee04cc5c0cd92b973485c74f5a33bb3e68099b2de241b322610c87a569eca6f2ba8dcb256", 0x89}], 0x2}}], 0x3, 0x14042082) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 4.792719896s ago: executing program 3 (id=6612): pipe(&(0x7f0000000140)={0xffffffffffffffff}) read$FUSE(r0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="020afc090700000026bd7000fedbdf2505001a"], 0x38}}, 0x4004880) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) 3.885789078s ago: executing program 1 (id=6618): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f9", 0xa3}], 0x1, &(0x7f00000008c0)=[@iv={0x58, 0x117, 0x2, 0x42, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x70, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000b40)="86545d2157646172", 0x8}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a", 0x3c}], 0x2, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46", 0xb5}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.377797168s ago: executing program 1 (id=6624): setitimer(0x0, 0x0, &(0x7f0000000080)) r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x7, 0x5, [0x6, 0x200, 0x8, 0x2, 0x4]}, &(0x7f0000000100)=0x12) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x40, 0x7800, 0x2, 0x8, {{0xc, 0x4, 0x2, 0x8, 0x30, 0x64, 0x0, 0x99, 0x4, 0x0, @multicast1, @broadcast, {[@lsrr={0x83, 0x1b, 0x2f, [@loopback, @multicast2, @dev={0xac, 0x14, 0x14, 0x31}, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @dev={0xac, 0x14, 0x14, 0x10}]}]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@delqdisc={0x184, 0x25, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x7}, {0xffe0, 0x6}, {0x2, 0xfff2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xffffb7a9, 0xfffff801, 0x8, 0x7, 0x5}, 0x6, 0x0, 0x0, 0x8000, 0x0, 0x8, 0x19, 0xa, 0x2, 0x1, {0x2, 0x4, 0x22d, 0x7ff, 0x7, 0x5}}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xc}, @qdisc_kind_options=@q_netem={{0xa}, {0xd8, 0x2, {{0x9, 0x9, 0xffffffff, 0x401, 0x0, 0x8}, [@TCA_NETEM_CORR={0x10, 0x1, {0x80000001, 0xbbd}}, @TCA_NETEM_REORDER={0xc, 0x3, {0x7, 0x1}}, @TCA_NETEM_LOSS={0x74, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x8, 0x7, 0x5, 0x2000, 0x6}}, @NETEM_LOSS_GI={0x18, 0x1, {0x9, 0xa00, 0xfffffffe, 0x4, 0xbc}}, @NETEM_LOSS_GI={0x18, 0x1, {0x3, 0x4, 0x10c5, 0x80000000, 0x23a9}}, @NETEM_LOSS_GE={0x14, 0x2, {0x7fffffff, 0x2, 0x4, 0x7}}, @NETEM_LOSS_GE={0x14, 0x2, {0xd, 0x1ff, 0xc6, 0x1}}]}, @TCA_NETEM_DELAY_DIST={0x11, 0x2, "5d9cea832d887e905f8520cc9d"}, @TCA_NETEM_JITTER64={0xc, 0xb, 0xffffffffffffff50}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x5}}]}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xffff}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xa982}, @TCA_RATE={0x6, 0x5, {0xb, 0x1}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x184}}, 0x4000000) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@bridge_newneigh={0x28, 0x1c, 0x401, 0x70bd29, 0x25dfdc02, {0x7, 0x0, 0x0, r5, 0x2, 0x0, 0x3}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x840) 3.029810071s ago: executing program 1 (id=6627): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000380), 0x12) 2.654812236s ago: executing program 1 (id=6631): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183}, 0x94) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg$inet(r2, &(0x7f0000005380)=[{{0x0, 0x0, &(0x7f0000003840)=[{&(0x7f00000027c0)="f5eb047c9519b318d7e2481b402dd95888dafefbb1c5823625914f8cf2f6efc090dbb12838870ff7c9ee11e004b1838c490b72b363890139772c73b3f8f3caee05713a8bd7dfa56e002d717b232e78e3aabb47778e00c90fb406c92cf5eae15f1ac5f585f15ecab74961a8a5ad68c426694504feb06e30f90626fc1d4074564f052811700a16f54b9531e39f0163c43a80bb02ffaceb3df6fe91c2a892f892a3dd9b73d9c52c035665accb9695364f2366e0ed83edbb2f9b45ce579148752384263f4e956a547bb927e3276c97f06aca6da97e84f138dcd125f23c94d0fce5b80f674a5365a96e2a8266e6791781baba8c3ed215621d0edfd8227988a3e1611e07c36c9cd144be5142ff2c1d8c8fe5cfcb0ff6638cafc4ec4fd4bcabf7ba15b26f591e02483221e320ecc7b945be7a72f6a0e09be524b0728b6a87cd52e8254bc23689f5edb60c1dd8d895010ee4c6d8104c7e39174736706ea86d2c0132f47282591c8b6e1ae587a03f8d03c8679d0dd778f0eae168d086c006a2d012518d159fcb43921d93103dca17b61c43d72327abbe76e88713f72f1054d09dfff5be5bf4fe6cd578d3042486340a04816ade3aae0f6b1b71677d2db2018b4ffee19d5b2c7567c91737a910905eebe4074ca9e6ad15c91c10dfe060f9c44fc64fa621d84e898bab132828890e39252ff9ab9102a01470022039018e8ebe2ccfedb05cc7c7f4b25bdb9ce4b16533abc77528dcc35404aa52fa3acc2486ddb46e63", 0x21d}], 0x1}}], 0x1, 0x80) sendmmsg$inet(r2, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x1}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}], 0x1, 0x40) 2.594538298s ago: executing program 2 (id=6632): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe0}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925a", 0x14}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c483271361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f5312", 0x95}], 0x2}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000500)="cb", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000880)="2588e09c666f7c2e1106c4b4839bf483707b3603c0580d4ea3d894cc071395c4737f5f4840a109613a98c563d9d35e1d30ca9911819a41dbfd9738e9c1125ca897831d701969b199ec46f793e0be4ddb8d9826811efc4e049594868a96ae2daab085b6ba229f384a9463eb764b9ea4c74e5460b9a82983e2d22885fbc6d1d731e8d02f8246b3f0ae936b34987046e18afad35e79c363b701eb8455e1f4ea1c12e4a706789339df763dd4505497e474d21689760747e6d2c3c2d85aa253b16d", 0xbf}, {&(0x7f0000000980)="b58e23c2095b3eca9b630c1d411197505e88b68339fc3ca18b0fd3186d253cf0556b7f8b7172a7ecda83c0bfb299b17792211571807b64f65caf151aa7f1b0bd962717d5fd2f9f0ceec19df6106bdba8c3292328dce4b38ecc0c6cbaed777b7d2f6f229a0ee04cc5c0cd92b973485c74f5a33bb3e68099b2de241b322610c87a569eca6f2ba8dcb256", 0x89}], 0x2}}], 0x3, 0x14042082) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2.425097365s ago: executing program 1 (id=6633): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}]}}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) 2.371270801s ago: executing program 2 (id=6634): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @empty, 0x80002}, 0x1c) read(r0, &(0x7f0000000080)=""/209, 0xd1) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000005000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 2.230295189s ago: executing program 1 (id=6635): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)=ANY=[@ANYBLOB="12010000e3ddef20501da1604fa10102030109021200010000000009"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000780)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000006c0)={0x2c, &(0x7f00000002c0)={0x20, 0x12}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000580)={0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = io_uring_setup(0x6ed6, &(0x7f0000000240)={0x0, 0xbf54, 0x40000, 0x0, 0x270}) io_uring_register$IORING_REGISTER_SEND_MSG_RING(0xffffffffffffffff, 0x1f, &(0x7f00000003c0)={0x28, 0x0, 0x0, r1, 0x0, 0x0, 0x8, 0x2, 0x1}, 0x1) syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x882) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x9e0000, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f90b, 0x9, '\x00', @p_u32=&(0x7f00000000c0)=0xfffffffe}}) socket(0x2, 0x80805, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000009, 0x200000005c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x700}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 2.078268989s ago: executing program 2 (id=6637): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0xc, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb08004500001c0065000000029078000000780000000000000000000000007cc218f4d3bbff84fa53f56409e7b0f5d74ed5271c4e0eb889cc7a803136d3bc4a6039ae2c"], 0x0) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)="2e00020010008108040f80ecdb4cb92e0a480e00769b4b0f001400e8bd6efb0248ff050005", 0x25}], 0x1}, 0x40881) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000106b1402090000000000010902240001000080030904000b010300000060fe2059f801222800090581030800b484fe"], 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0xa) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, &(0x7f00000000c0)='=relative', &(0x7f0000000140)='./cgroup\x00', r3) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x9c, 0x12, 0x20, 0x70bd2b, 0x25dfdbfa, {0x22, 0x3, 0x2, 0xef, {0x4e21, 0x4e22, [0x80000001, 0xffffffff, 0xfffffeff, 0x8], [0x8, 0x9, 0x5, 0x8], 0x0, [0xfffffc78, 0x6bbb5f79]}, 0x80000000, 0x4}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x1, "f84f55b8"}, @INET_DIAG_REQ_BYTECODE={0x43, 0x1, "10ece88ef035908cce5817dde13d72d814846ce8c737500d222e13719c7c6d61f2deec40306e7d80419f932fe2c93647a3781538f5b107d8ca2185a7f79172"}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0x9c}, 0x1, 0x0, 0x0, 0x81}, 0x8000) r4 = fsmount(0xffffffffffffffff, 0x1, 0x0) fchdir(r4) openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0/file0\x00', 0xc0040, 0x2c) close(0x3) 969.835525ms ago: executing program 4 (id=6643): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe0}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925a", 0x14}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c483271361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f5312", 0x95}], 0x2}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000500)="cb", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000880)="2588e09c666f7c2e1106c4b4839bf483707b3603c0580d4ea3d894cc071395c4737f5f4840a109613a98c563d9d35e1d30ca9911819a41dbfd9738e9c1125ca897831d701969b199ec46f793e0be4ddb8d9826811efc4e049594868a96ae2daab085b6ba229f384a9463eb764b9ea4c74e5460b9a82983e2d22885fbc6d1d731e8d02f8246b3f0ae936b34987046e18afad35e79c363b701eb8455e1f4ea1c12e4a706789339df763dd4505497e474d21689760747e6d2c3c2d85aa253b16d", 0xbf}, {&(0x7f0000000980)="b58e23c2095b3eca9b630c1d411197505e88b68339fc3ca18b0fd3186d253cf0556b7f8b7172a7ecda83c0bfb299b17792211571807b64f65caf151aa7f1b0bd962717d5fd2f9f0ceec19df6106bdba8c3292328dce4b38ecc0c6cbaed777b7d2f6f229a0ee04cc5c0cd92b973485c74f5a33bb3e68099b2de241b322610c87a569eca6f2ba8dcb256", 0x89}], 0x2}}], 0x3, 0x14042082) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 809.277045ms ago: executing program 4 (id=6644): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x0, {{@in6=@loopback, @in6=@dev={0xfe, 0x80, '\x00', 0xf}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x1}]}]}, 0xfc}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)={0x6c, r1, 0x1, 0x170bd2b, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1e}, 0xf8}}, {0x20, 0x2, @in6={0xa, 0x0, 0x5, @mcast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x8000) 593.777112ms ago: executing program 3 (id=6645): r0 = io_uring_setup(0x1d4c, &(0x7f0000000340)={0x0, 0x64b13e, 0x0, 0x4, 0x18e}) socket$inet6_sctp(0xa, 0x1, 0x84) close_range(r0, 0xffffffffffffffff, 0x0) 498.111939ms ago: executing program 4 (id=6646): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x28, 0x36, 0x107, 0xfffffffe, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x1c}]}, @generic, @typed={0x9, 0xb9, 0x0, 0x0, @str='!*\\@\x00'}]}, 0x28}}, 0xc000) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x15e, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x128, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4, 0x20, "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"}]}}}}}}, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) sendmmsg$inet(r2, &(0x7f00000036c0)=[{{&(0x7f0000000200)={0x2, 0x4e25, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000580)="b8b8436e2402e6abeade7161d583c775ef33629f79040f2f9fcf11633b3aa1964994ac5803e32126e694cf25756c9749c50ecf6e9f9dedc1b8827b8547a6d2c603e7b89631be59e1ce14e0adabcfd092783724ab8d4a6fd0d3b7294fea75d2a8fac091778455a099f2c3ed248a2e2eabc366d546e30dba7a81faa41ba0a9215a31723d6e81afa449dd8205509bbe9874e0e92479d0bb74d24e5a5dd35826aab8901c68f2d8524be169999d8f4f1a31cb2ff3cc339f74639c17a9c3a08f42323803d588a661afef5ea94146df81f5de5512849d4a934d332255ef2f552b35e0b6a550e4cef6d1211db89a2163817f84a45ee8a86f2b0f73e452e5be2f11a980f849cf52600e852237679351e5d9d90df385ad772f02cd08e87e89442fbc9c6d081b59000a85460027fc66d9ace62c21a0495f5f3d3bd752b6f26a570e5e99a812ce392b610d0f82124a51b71b7b1223a290b667d1f624f301e406f14f8c971c96251dbfea1e47e13885b0caced07b8a020d81620d90258da666e803fc2711e31047baf83d46e4bed49aca45f70f37d8d143fbc7f9f3a368711166db668c17739b28d67a754e48eeace7e5f00500657a2b5495c4abd89784a4c85e97a93251d564789e405abba00bf48cb7b68f92fab1b31e66a7a7441ccf6d68adba3af0d83ade29e25c54721dcf92a2bf0a3c8de5858deb3a7e537344a068f01625d226421c41c2b80bf4cdf212ab2cd47328d80d9abb152d58a70a85703e1237fc8f4695eb4d54dde0c4033cc5e7c778e45c6eff6694602df1a4e65095ebcaa8b3f991412972b62251480610e055c13a666d3daade8e9d736a3f6d29ebd857720d493b5e57db5ad3258cd4dccfdee05667c6d3540c0bc988bc38ef2e768108971305087112d396bada66f1b24c733a350e7968bf5aa81e162997db34a67757154f8c9de1fedcb8fb91f9b84c843685f11386355daaebd24c8107c0be19c1631135db7bd30d74ece50d490179307768b68322d761fc98ca4ee42367751b8cef30d35638b355e3255cd42857e865acef6efe56f9894c1bc84e5c2c10e7ef1ded00926362379e16aa542c57a5bf2609018ea674ed580d4c348eecaa69318e2a55ef74026a0b459d909dd3ba56fae4197f59177e8524eafdd1f2287412375f1bd6f6cd10914eb50be544fce875086d4d86ec0c347916e5875a5f917c5779f4333a806a7817bea2275df0d379c59061526ca857e7234951dd88d2022759dcc54e6724852463415c2765ca93417ff05573e7e244fa322a125b33f6f7153d43683ede91446c1211d128e24a7836a75d47f1c80e31cb9fc0838e9220cd881dac4e693d7641a01e51f3d00892379f4ea1f69e722ddf055606d51bf64ef39d6e8e1f97606cb2ab33ba714353c28c2b08264ab5573528e28e118598deec55c7ccbf597712cbd48a6d6c2474f142c4aa74fe93d703de0693c8dd63f2ab6eff05ee2a64ee689937d9c5c2bc86ea75e8a74b74261be10b7f07fd1cbe6403374518d625674cc73a940756c00314e02e469b91e1ca02dae1325af617dca14564976f2c16705e64abbf33779657a84066545f6e6a252107ada84285b279b855b597ddff35ce748a69389d7c0e96a5bb699706641fc48cc74c81f423cad5bd55576e799214dc201c9bdcd63c5b9cc97d843efe251e992a7844ff8117f09f6f9b4d8ae56093369e63d6586d29f69bde62b7aca165ed8a2fbfa53d14f42a5dbd58c5cb26cec523ff368633e87768da6cd5d0b4e450ba015acd6ee61b6b8e63905a7c5a6760af9ea1caa6c2c5c48ced3d9470e60d1451f6df68265109e81858f7c0724a84688dc0f6e838b98166d5524fd8b9b7007e1fa1cda4ecbb0f3ac25b87d4cf99501d6601154bb562b7bb53ffe3c0d8609d013cd257bbc5908d91a2dbcb623d5a578281ffb7026d459592942e86f572bb3d2e521f72ec0b20ac8b84e28c362d11bd91fd957b117cb0124dcb4f09562970edd8e34f4dcea1e7bec2670b6898e3ddaa3ec33a9a83945c1343d9d5ba01513fe482ff62620d28cf55ec22e3f7290f0096781952d4aae2bc163fb918fc60", 0x5c1}], 0x1}}], 0x2, 0x4a080) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000fbff27bd7002fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="14100400040004001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) write$binfmt_misc(r2, 0x0, 0x0) 458.48242ms ago: executing program 2 (id=6647): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5", 0x82}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000b40)="86545d2157646172b815", 0xa}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb5584", 0x40}], 0x2, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 423.958719ms ago: executing program 3 (id=6648): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000024000180060005004e230007060001000200000008000300ac1414aa0800060001"], 0x38}}, 0x0) listen(r0, 0xc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, r5, 0x1}, 0x14}}, 0x0) 310.22639ms ago: executing program 4 (id=6649): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x21, 0x3, 0x470, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3a0, 0xffffffff, 0xffffffff, 0x3a0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@empty, @mcast2, [], [0x0, 0x0, 0x0, 0xffffff00], 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x5d}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ipv6header={{0x28}, {0x8, 0x22, 0x1}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x5, 0x6}}}, {{@uncond, 0x0, 0x258, 0x280, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_batadv\x00', {0x6, 0x5, 0x5, 0x0, 0x3, 0x7, 0x83ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg0\x00', {0x5, 0xd, 0x41, 0x1, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x6, 0x2, 0x12}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4d0) 186.978891ms ago: executing program 3 (id=6650): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) ioctl$FE_SET_FRONTEND(0xffffffffffffffff, 0x40246f4c, 0x0) syz_io_uring_setup(0xf08, &(0x7f0000000300)={0x0, 0xfefffffe, 0x800, 0x3, 0x800000c5}, &(0x7f0000000580)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) 186.688212ms ago: executing program 4 (id=6651): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [], {0x14, 0x10}}, 0x28}}, 0x0) 184.938477ms ago: executing program 0 (id=6564): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x1, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000001cc0), 0x800, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r4, 0x80044d06, &(0x7f0000002180)) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r6 = gettid() r7 = socket(0x2, 0x3, 0x6) sendmmsg$unix(r7, &(0x7f0000000bc0)=[{{&(0x7f0000002140)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f0000000700)=[@cred={{0x18, 0x1, 0x2, {r6}}}], 0x18}}], 0x1, 0x800) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x4b}, "14bffd076773e618d39a90a7ddede0f1cbbfb5400507109f248002f538054f1d79f119c666d26733442cafd720bdb2541415da118792c9c7d05d58719ec0d92263e2739da7bc6b092a07f4"}, 0x4f) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x14c}}, 0x4884) tkill(r6, 0xb) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 85.698192ms ago: executing program 2 (id=6652): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c8156197bcb66fd5606c63e3389ee9e8552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde0000000000000040000000ec3c12ecee8fc3a40000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738efcc04d27b766cf7f60066edd292f6c8a2174f391ed164bb1816819ceb3e378e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210bd6d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c7ba2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd941e8aba37510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b306e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d28fd046dc64b35f9c3397ce6f4ad357b0000000000090000000088c7a8e2638f650a6f04a6f33a090f59414d6ebcbc687e66d600000000bd0a58ea6d36fc2cf9b9a71c137a2a22adb1006f371d4faf47285fd66fe0389afb96854bb360edcdf11b4ff6dd578bba93e949d240cde9b5836cb46032484dc19c93db7b6e5afa10547c78e76a3111557346e52566df196fd630561bb908fff4d2e19562aabd43742a26a43799f8636fa04ceb40c9e4ca1cfbbc7b949cd245a3ee118fd0d4f639444539af8766028d4ac4d4c548e290199e0dacbb4f6796b39bf32934d941ba2f88e3ebd0cf8e24f99eca86e4ca9b2cd2b54044a7fc4631572a6378a32df288785f146275c1f548e2a0c1016744e05f9de5044373d7650125027547eefe7b2d8c8871bb65395fae99d8456883705bfdfb00001854b2e5efa8aaf25827d659f592b1575281ec125de7fb91cd81d91dcb19f5cdf1e1e2b4a8a1389753a09110538689e38e07fb2dc72bd4fd11d7bc16aac5d85c6101bb722895248e463a5fb45ce0e564e90cb19d5993b471687ae4165e29cf2f58082115f5f8569896eedfd798733223e6d6584997510c374912ab798bd4af4654c01bb2c411bc36468ddd62b4eba5cfc8953526e0e5b1359797956152d0098ce47c62c3fe5a23219389622b7f65bf03527d25c3941b9cf1ffeedf6d99082bb57ea871c12213cc40900f83033bc18c529171fae324c315bc6ce358831d0230412212acfd5fc8d5cb0d028cf568e8bb40e27befe2ff01f7c6674a4d86d900633ea36641e0a781ea0ea7f2d928b8b22e2f97dd13348927375baea6863bef4acf4299096ada5cdd2a0eaafaa760a79d102d1e0c0000000000000000007926653b8d79ce16a432f124786a0bc3c5b7d196822492ae1ccf91aeac16406ad6f9cd3d96d57fceba8360ae49f73351814c9c2972f11064aaf3739d9100f9c0e4d0cb17d50c82e305ba7d62cf1cc6da26e34982a8c74dd8122cf5b5e7c34fd2712a0cef05e4d8ec7dd363219676bd9b19943185b132eb35a695e208dfa5cecdb1d6425c8879063c0f11bd64291a4209ee6dc1d9e9010013f6148c603e6a335e298efd6ab5cccc47a2c568c6afec54f8251bd840752addf200371361c9eedf05ed98585cf6d99e9e56055064bda2d373369761238c278147cd0eb7799f6b9c9fcaa3fd282154994f5b25420c86db9b6401e885de1c615a719a1c83e8fbbb181282dbaf3313a4e4a4877e9f37607e2cd6da0cf6371ec06a75f5a4206b2418ad8897ae149085d63f01f22eca44033234b3930b4d5da756669a1d59d69e7de54abf439988ed7ec33c2d0a901bb0985a24878984d8a4340fa9a356d100926fb5f2ef9976366a61b8cc2bcb1c072b0e9c564852388e1edff10d75b3832792e471cc15b40380f94d834243080158603fbc9134d6983c540525447478984611c0d9666941bfc0a30db47a8828b6e5c51aee2094599b4ce52795750e1764f1657ca8c5633c71287239dddf5c651496f7bbd148c937f083d2e4e0197dbc6ff0649c749707b17399b1d7efad23abb8b40b38704737e15662ae4913a4a001cd3b71c7af75b5ffad9780650c800a40ca80ddc41987919142fd28dbf22db5f4c435415a03455e1d55d1783ccef97d7e4655cf839d06f06e137bbe462a03b3100231914b19739dd57b4f12d026ad0c7fd3"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r1 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, 0x0) sendmmsg$inet(r1, &(0x7f0000005380)=[{{0x0, 0x0, &(0x7f0000003840)=[{&(0x7f00000027c0)="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", 0x21d}], 0x1}}], 0x1, 0x80) sendmmsg$inet(r1, &(0x7f0000001500)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x1}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}], 0x1, 0x40) 9.879852ms ago: executing program 4 (id=6653): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe0}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925a", 0x14}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c483271361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f5312", 0x95}], 0x2}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000500)="cb", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000880)="2588e09c666f7c2e1106c4b4839bf483707b3603c0580d4ea3d894cc071395c4737f5f4840a109613a98c563d9d35e1d30ca9911819a41dbfd9738e9c1125ca897831d701969b199ec46f793e0be4ddb8d9826811efc4e049594868a96ae2daab085b6ba229f384a9463eb764b9ea4c74e5460b9a82983e2d22885fbc6d1d731e8d02f8246b3f0ae936b34987046e18afad35e79c363b701eb8455e1f4ea1c12e4a706789339df763dd4505497e474d21689760747e6d2c3c2d85aa253b16d", 0xbf}, {&(0x7f0000000980)="b58e23c2095b3eca9b630c1d411197505e88b68339fc3ca18b0fd3186d253cf0556b7f8b7172a7ecda83c0bfb299b17792211571807b64f65caf151aa7f1b0bd962717d5fd2f9f0ceec19df6106bdba8c3292328dce4b38ecc0c6cbaed777b7d2f6f229a0ee04cc5c0cd92b973485c74f5a33bb3e68099b2de241b322610c87a569eca6f2ba8dcb256", 0x89}], 0x2}}], 0x3, 0x14042082) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 0s ago: executing program 2 (id=6654): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x1c, r0, 0x801, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x20000010) kernel console output (not intermixed with test programs): r parsing attributes in process `syz.1.5397'. [ 1851.302000][ T193] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1851.312763][ T193] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 1851.326149][ T193] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1851.344332][ T193] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1851.359665][ T193] usb 5-1: config 0 descriptor?? [ 1851.589307][ T193] usb 5-1: USB disconnect, device number 10 [ 1851.882876][T26756] syzkaller0: entered promiscuous mode [ 1851.888670][T26756] syzkaller0: entered allmulticast mode [ 1852.042015][T26762] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5408'. [ 1852.413253][T26782] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5415'. [ 1852.641151][T26793] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5419'. [ 1852.747143][T26798] netlink: 'syz.1.5422': attribute type 12 has an invalid length. [ 1852.761601][T26798] netlink: 'syz.1.5422': attribute type 29 has an invalid length. [ 1852.770063][T26798] netlink: 148 bytes leftover after parsing attributes in process `syz.1.5422'. [ 1852.810933][ T9] usb 4-1: USB disconnect, device number 12 [ 1852.878938][ T9] Unregistered device Abilis Systems DVB-Titan [ 1852.884775][ T9] as10x_usb: device has been disconnected [ 1853.493824][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.501204][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1854.359473][ T193] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1854.533712][ T193] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1854.591159][ T193] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1854.605789][T26871] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1854.654712][ T193] usb 2-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 1854.703449][ T193] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1854.734062][T26873] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1854.756039][ T193] as10x_usb: device has been detected [ 1854.762747][T26873] bond1: (slave ipip1): The slave device specified does not support setting the MAC address [ 1854.776362][ T193] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 1854.792945][T26873] bond1: (slave ipip1): Error -95 calling set_mac_address [ 1854.811234][ T193] usb 2-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 1854.897237][ T193] as10x_usb: error during firmware upload part1 [ 1854.936270][ T193] Registered device Abilis Systems DVB-Titan [ 1854.943201][T26875] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 1855.191874][T26885] __nla_validate_parse: 3 callbacks suppressed [ 1855.191898][T26885] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5456'. [ 1855.384279][T26892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5458'. [ 1856.354147][T26923] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5469'. [ 1856.564826][T26931] Set syz1 is full, maxelem 6117 reached [ 1856.629775][ T5685] usb 2-1: USB disconnect, device number 32 [ 1856.697299][ T5685] Unregistered device Abilis Systems DVB-Titan [ 1856.701664][ T5685] as10x_usb: device has been disconnected [ 1857.356096][T26951] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5481'. [ 1857.599784][ T5685] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1857.749861][T26960] kvm: kvm [26959]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0x0 [ 1857.788214][ T5685] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1857.850044][ T5685] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1857.882977][ T5685] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 1857.909357][ T5685] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1857.945070][ T5685] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1857.987544][ T5685] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1858.484892][ T5685] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 1858.511081][ T5750] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1858.523315][ T5685] usb 4-1: USB disconnect, device number 13 [ 1858.701357][ T5750] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1858.715880][T26984] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5494'. [ 1858.744637][ T5750] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1858.794265][ T5750] usb 1-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 1858.828973][ T5750] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1858.909142][ T5750] as10x_usb: device has been detected [ 1858.921095][ T5750] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 1858.979525][T20668] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1858.981063][ T5750] usb 1-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 1859.069876][ T5750] as10x_usb: error during firmware upload part1 [ 1859.121652][ T5750] Registered device Abilis Systems DVB-Titan [ 1859.192253][T20668] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1859.247718][T20668] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1859.288002][T20668] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1859.323454][T20668] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1859.360557][T20668] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1859.394590][T20668] usb 3-1: config 0 descriptor?? [ 1859.851975][T20668] plantronics 0003:047F:FFFF.0007: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1859.898259][T27007] syzkaller0: entered promiscuous mode [ 1859.916260][T27007] syzkaller0: entered allmulticast mode [ 1860.022778][T20668] usb 3-1: USB disconnect, device number 32 [ 1860.077143][T27011] fido_id[27011]: Failed to read report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:047F:FFFF.0007/report_descriptor': No such device [ 1860.493116][T27021] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5508'. [ 1860.971430][ T193] usb 1-1: USB disconnect, device number 45 [ 1861.139045][ T193] Unregistered device Abilis Systems DVB-Titan [ 1861.156281][ T193] as10x_usb: device has been disconnected [ 1861.610666][T27051] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5520'. [ 1862.780667][T20668] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1862.823053][T27090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5534'. [ 1862.961482][T20668] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1862.992721][T20668] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1863.035585][T20668] usb 5-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 1863.058795][T20668] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1863.112512][T20668] as10x_usb: device has been detected [ 1863.132113][T20668] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 1863.168519][T20668] usb 5-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 1863.205785][T20668] as10x_usb: error during firmware upload part1 [ 1863.215041][T20668] Registered device Abilis Systems DVB-Titan [ 1863.279309][T12276] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 1863.442007][T27111] sit1: entered promiscuous mode [ 1863.451746][T12276] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1863.451976][T27111] sit1: entered allmulticast mode [ 1863.472675][T27111] team0: Device sit1 is of different type [ 1863.483397][T12276] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1863.496589][T12276] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1863.506630][T12276] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1863.521958][T12276] usb 3-1: config 0 descriptor?? [ 1863.539050][T12276] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1863.557696][T12276] dvb-usb: bulk message failed: -22 (3/0) [ 1863.578724][T12276] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1863.589982][T12276] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1863.610707][T12276] usb 3-1: media controller created [ 1863.633748][T27116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5546'. [ 1863.645132][T12276] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1863.664917][T27116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5546'. [ 1863.758291][T12276] dvb-usb: bulk message failed: -22 (6/0) [ 1863.801431][T12276] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1863.832978][T12276] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input214 [ 1863.864208][T12276] dvb-usb: schedule remote query interval to 150 msecs. [ 1863.892232][T12276] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1863.919538][T12276] usb 3-1: USB disconnect, device number 33 [ 1863.962460][T12276] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1864.168978][T27137] fuse: Bad value for 'group_id' [ 1864.175421][T27137] fuse: Bad value for 'group_id' [ 1864.239429][T20668] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1864.399347][T20668] usb 2-1: Using ep0 maxpacket: 32 [ 1864.421931][T20668] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1864.461572][T20668] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1864.486584][T20668] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1864.509830][T27150] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5559'. [ 1864.510886][T20668] usb 2-1: Product: syz [ 1864.531553][T20668] usb 2-1: Manufacturer: syz [ 1864.535337][T27150] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5559'. [ 1864.539734][T20668] usb 2-1: SerialNumber: syz [ 1864.563002][T20668] usb 2-1: config 0 descriptor?? [ 1864.593726][T27155] sch_tbf: burst 4 is lower than device lo mtu (11337746) ! [ 1864.967687][ T5685] usb 5-1: USB disconnect, device number 11 [ 1865.007505][ T5685] Unregistered device Abilis Systems DVB-Titan [ 1865.011467][ T5685] as10x_usb: device has been disconnected [ 1865.109445][ T24] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 1865.262467][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1865.272757][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1865.282941][ T24] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1865.292168][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1865.303275][ T24] usb 3-1: config 0 descriptor?? [ 1865.312376][ T24] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1865.319116][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 1865.329967][T20668] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1865.331110][ T24] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1865.347005][ T24] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1865.354474][ T24] usb 3-1: media controller created [ 1865.363149][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1865.376719][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 1865.388568][ T24] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1865.406367][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input215 [ 1865.421284][ T24] dvb-usb: schedule remote query interval to 150 msecs. [ 1865.428556][ T24] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1865.505147][T20668] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1865.544675][T20668] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1865.576574][ T193] usb 3-1: USB disconnect, device number 34 [ 1865.599122][T20668] usb 4-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 1865.609669][T20668] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1865.617778][T20668] usb 4-1: Product: syz [ 1865.621315][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 1865.633274][ T24] dvb-usb: error while querying for an remote control event. [ 1865.637370][T20668] usb 4-1: Manufacturer: syz [ 1865.658054][T20668] usb 4-1: SerialNumber: syz [ 1865.710732][T27183] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5573'. [ 1865.721469][T27183] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5573'. [ 1865.778176][ T193] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1865.788479][T27185] fuse: Bad value for 'user_id' [ 1865.800479][T27185] fuse: Bad value for 'user_id' [ 1866.046713][T27195] netlink: 'syz.0.5578': attribute type 3 has an invalid length. [ 1866.121563][T20668] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 1866.164610][T20668] usb 4-1: USB disconnect, device number 14 [ 1866.201852][T20668] usblp0: removed [ 1866.599352][ T24] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1866.761912][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1866.785581][ T24] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1866.802690][ T24] usb 3-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 1866.815798][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1866.849148][ T24] as10x_usb: device has been detected [ 1866.863263][ T24] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 1866.873161][T27215] fuse: Bad value for 'fd' [ 1866.913294][ T24] usb 3-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 1866.956832][ T24] as10x_usb: error during firmware upload part1 [ 1866.989134][ T24] Registered device Abilis Systems DVB-Titan [ 1867.340089][T12276] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 1867.376135][T21197] usb 2-1: USB disconnect, device number 33 [ 1867.453014][T27237] fuse: Bad value for 'fd' [ 1867.479171][T27239] netlink: 'syz.1.5596': attribute type 4 has an invalid length. [ 1867.533754][T27240] netlink: 'syz.1.5596': attribute type 4 has an invalid length. [ 1867.554061][T12276] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1867.568753][T12276] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1867.579163][T12276] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1867.588920][T12276] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1867.594337][T27242] tap0: tun_chr_ioctl cmd 2147767511 [ 1867.604854][T12276] usb 4-1: config 0 descriptor?? [ 1867.615860][T27242] tap0: tun_chr_ioctl cmd 2147767521 [ 1867.633389][T12276] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1867.649736][T12276] dvb-usb: bulk message failed: -22 (3/0) [ 1867.666344][T12276] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1867.689598][T12276] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1867.696826][T12276] usb 4-1: media controller created [ 1867.707865][T12276] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1867.739071][T12276] dvb-usb: bulk message failed: -22 (6/0) [ 1867.762027][T12276] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1867.796699][T12276] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input216 [ 1867.819759][T12276] dvb-usb: schedule remote query interval to 150 msecs. [ 1867.848237][T12276] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1867.904427][T12276] usb 4-1: USB disconnect, device number 15 [ 1868.006155][T12276] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1868.465564][T27265] fuse: Bad value for 'fd' [ 1868.659345][T12276] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1868.691525][ T193] usb 3-1: USB disconnect, device number 35 [ 1868.769347][ T193] Unregistered device Abilis Systems DVB-Titan [ 1868.771312][ T193] as10x_usb: device has been disconnected [ 1868.835815][T12276] usb 5-1: Using ep0 maxpacket: 32 [ 1868.868481][T12276] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1868.903162][T12276] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1868.929307][T12276] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1868.951826][T12276] usb 5-1: Product: syz [ 1868.960780][T12276] usb 5-1: Manufacturer: syz [ 1868.977575][T12276] usb 5-1: SerialNumber: syz [ 1868.992981][T12276] usb 5-1: config 0 descriptor?? [ 1869.708174][T27307] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5625'. [ 1869.975043][T27322] fuse: Bad value for 'group_id' [ 1869.982249][T27322] fuse: Bad value for 'group_id' [ 1870.283504][T27338] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5637'. [ 1870.329339][T20668] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1870.491918][T20668] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1870.503767][T20668] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1870.518607][T20668] usb 1-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 1870.535267][T20668] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1870.558782][T20668] as10x_usb: device has been detected [ 1870.565425][T20668] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 1870.585710][T20668] usb 1-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 1870.608736][T20668] as10x_usb: error during firmware upload part1 [ 1870.624643][T20668] Registered device Abilis Systems DVB-Titan [ 1871.250339][T27359] fuse: Bad value for 'group_id' [ 1871.274517][T27359] fuse: Bad value for 'group_id' [ 1871.768791][T20668] usb 5-1: USB disconnect, device number 12 [ 1872.189434][T21197] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 1872.365003][T21197] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1872.387793][T21197] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1872.410712][T21197] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1872.430565][T21197] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1872.451586][T21197] usb 3-1: config 0 descriptor?? [ 1872.470792][T21197] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1872.484563][T21197] dvb-usb: bulk message failed: -22 (3/0) [ 1872.513511][T21197] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1872.537089][T21197] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1872.545145][T21197] usb 3-1: media controller created [ 1873.274871][T27402] fuse: Bad value for 'group_id' [ 1873.360474][T27402] fuse: Bad value for 'group_id' [ 1873.789317][T20668] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1873.972581][T20668] usb 4-1: Using ep0 maxpacket: 32 [ 1873.992599][T20668] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1874.032928][T20668] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1874.078415][T20668] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1874.110436][T20668] usb 4-1: Product: syz [ 1874.119772][T20668] usb 4-1: Manufacturer: syz [ 1874.124616][T20668] usb 4-1: SerialNumber: syz [ 1874.140035][T20668] usb 4-1: config 0 descriptor?? [ 1874.910540][T27424] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1874.929161][T27424] batadv_slave_1: entered promiscuous mode [ 1875.205886][T27430] netlink: 'syz.4.5666': attribute type 3 has an invalid length. [ 1877.411886][T21197] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1877.467780][T21197] dvb-usb: bulk message failed: -22 (6/0) [ 1877.480339][ T193] usb 4-1: USB disconnect, device number 16 [ 1877.492634][T21197] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1877.519267][ T5685] usb 1-1: USB disconnect, device number 46 [ 1877.572044][T21197] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input217 [ 1877.615461][ T5685] Unregistered device Abilis Systems DVB-Titan [ 1877.671319][ T5685] as10x_usb: device has been disconnected [ 1877.676990][T21197] dvb-usb: schedule remote query interval to 150 msecs. [ 1877.739958][T21197] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1877.801269][T21197] usb 3-1: USB disconnect, device number 36 [ 1877.878519][T27491] fuse: Unknown parameter 'group_id00000000000000000000' [ 1877.897231][T21197] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1878.188833][T27504] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1878.308228][T27509] Set syz1 is full, maxelem 6117 reached [ 1878.346244][T27511] binder: 27510:27511 ioctl 4018620d 0 returned -22 [ 1878.373480][T27511] binder: 27510:27511 ioctl c038943b 2000000008c0 returned -22 [ 1878.531256][T27524] fuse: Unknown parameter 'group_id00000000000000000000' [ 1879.170528][T27543] Set syz1 is full, maxelem 6117 reached [ 1879.193815][T27545] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5710'. [ 1879.209815][T27545] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5710'. [ 1879.224346][T27545] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5710'. [ 1879.234884][T27545] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5710'. [ 1879.627609][T27554] fuse: Unknown parameter 'group_id00000000000000000000' [ 1879.994917][T27571] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5722'. [ 1880.015645][T27571] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5722'. [ 1880.033343][T27571] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5722'. [ 1880.043102][T27571] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5722'. [ 1880.200979][T27580] binder: 27578:27580 ioctl 4018620d 0 returned -22 [ 1880.228469][T27580] binder: 27578:27580 ioctl c038943b 2000000008c0 returned -22 [ 1880.343935][T27589] fuse: Bad value for 'user_id' [ 1880.349437][T27589] fuse: Bad value for 'user_id' [ 1880.948690][T27615] netlink: 'syz.2.5741': attribute type 29 has an invalid length. [ 1880.957811][T27615] netlink: 'syz.2.5741': attribute type 29 has an invalid length. [ 1881.615412][T27644] netlink: 'syz.2.5753': attribute type 29 has an invalid length. [ 1881.625239][T27644] netlink: 'syz.2.5753': attribute type 29 has an invalid length. [ 1881.719404][ T193] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1881.869393][ T193] usb 2-1: Using ep0 maxpacket: 32 [ 1881.877400][ T193] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1881.891697][ T193] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1881.901975][ T193] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1881.912079][ T193] usb 2-1: Product: syz [ 1881.916789][ T193] usb 2-1: Manufacturer: syz [ 1881.922248][ T193] usb 2-1: SerialNumber: syz [ 1881.932959][ T193] usb 2-1: config 0 descriptor?? [ 1881.946599][ T193] hub 2-1:0.0: bad descriptor, ignoring hub [ 1881.953551][ T193] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1882.247076][T27670] netlink: 'syz.3.5764': attribute type 29 has an invalid length. [ 1882.257016][T27670] netlink: 'syz.3.5764': attribute type 29 has an invalid length. [ 1882.270967][ T193] usb 2-1: USB disconnect, device number 34 [ 1882.975067][T27701] netlink: 'syz.0.5776': attribute type 29 has an invalid length. [ 1882.987981][T27701] netlink: 'syz.0.5776': attribute type 29 has an invalid length. [ 1884.211713][T12276] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1884.399340][T12276] usb 2-1: Using ep0 maxpacket: 32 [ 1884.412751][T12276] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1884.447733][T12276] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1884.460411][T27744] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5794'. [ 1884.475501][T12276] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1884.491049][T12276] usb 2-1: Product: syz [ 1884.503426][T12276] usb 2-1: Manufacturer: syz [ 1884.522291][T12276] usb 2-1: SerialNumber: syz [ 1884.550498][T12276] usb 2-1: config 0 descriptor?? [ 1884.577628][T12276] hub 2-1:0.0: bad descriptor, ignoring hub [ 1884.589873][T12276] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1884.660507][T27751] fuse: Bad value for 'fd' [ 1884.920112][T12276] usb 2-1: USB disconnect, device number 35 [ 1885.266150][T27771] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5806'. [ 1885.746458][T27781] fuse: Bad value for 'fd' [ 1887.436519][T27812] fuse: Bad value for 'fd' [ 1887.479361][ T5685] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1887.672906][ T5685] usb 1-1: Using ep0 maxpacket: 32 [ 1887.690397][ T5685] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1887.734232][ T5685] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1887.800263][ T5685] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1887.831715][ T5685] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1887.849834][ T5685] usb 1-1: Product: syz [ 1887.859694][ T5685] usb 1-1: Manufacturer: syz [ 1887.878941][ T5685] usb 1-1: SerialNumber: syz [ 1887.911508][ T5685] usb 1-1: config 0 descriptor?? [ 1887.940571][ T5685] hub 1-1:0.0: bad descriptor, ignoring hub [ 1887.965284][ T5685] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1888.126053][T27832] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5830'. [ 1888.279711][ T5685] usb 1-1: USB disconnect, device number 47 [ 1888.569816][T27845] binder: 27844:27845 ioctl c038943b 2000000008c0 returned -22 [ 1890.834597][T27902] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1890.886180][T27908] binder: 27906:27908 ioctl c0306201 0 returned -14 [ 1890.903776][T27908] binder: 27906:27908 ioctl c038943b 2000000008c0 returned -22 [ 1891.071184][ T5685] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1891.265043][ T5685] usb 2-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=a4.46 [ 1891.295282][ T5685] usb 2-1: New USB device strings: Mfr=133, Product=2, SerialNumber=0 [ 1891.308827][ T5685] usb 2-1: Product: syz [ 1891.313309][ T5685] usb 2-1: Manufacturer: syz [ 1891.324237][ T5685] usb 2-1: config 0 descriptor?? [ 1891.363889][ T5685] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 1891.401879][ T5685] ftdi_sio ttyUSB0: unknown device type: 0xa446 [ 1891.596237][ T5685] usb 2-1: USB disconnect, device number 36 [ 1891.631114][ T5685] ftdi_sio 2-1:0.0: device disconnected [ 1891.909355][T12276] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 1892.092545][T12276] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1892.126615][T12276] usb 3-1: config 0 has no interface number 0 [ 1892.157449][T12276] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1892.192687][T12276] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1892.221198][T12276] usb 3-1: Product: syz [ 1892.226585][T12276] usb 3-1: Manufacturer: syz [ 1892.240609][T12276] usb 3-1: SerialNumber: syz [ 1892.258414][T12276] usb 3-1: config 0 descriptor?? [ 1892.278743][T12276] usb 3-1: selecting invalid altsetting 1 [ 1892.366204][T12276] dvb_ttusb_budget: ttusb_init_controller: error [ 1892.386870][T12276] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1892.406540][T27923] netlink: 'syz.4.5866': attribute type 12 has an invalid length. [ 1892.425549][T27923] netlink: 'syz.4.5866': attribute type 29 has an invalid length. [ 1892.473232][T27923] netlink: 148 bytes leftover after parsing attributes in process `syz.4.5866'. [ 1892.617600][T27930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5867'. [ 1892.652606][T27930] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5867'. [ 1892.669379][T12276] DVB: Unable to find symbol stv0299_attach() [ 1892.808863][T12276] DVB: Unable to find symbol tda8083_attach() [ 1892.836105][T12276] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 1892.883131][T12276] usb 3-1: USB disconnect, device number 37 [ 1893.038779][T20505] Bluetooth: hci4: unexpected event for opcode 0x0c5b [ 1893.345016][T27954] netlink: 'syz.3.5879': attribute type 12 has an invalid length. [ 1893.355405][T27954] netlink: 'syz.3.5879': attribute type 29 has an invalid length. [ 1893.364299][T27954] netlink: 148 bytes leftover after parsing attributes in process `syz.3.5879'. [ 1894.901017][T20668] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 1895.078553][T20668] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1895.102741][T20668] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1895.122132][T20668] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1895.146236][T20668] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1895.162710][T20668] usb 5-1: config 0 descriptor?? [ 1895.192168][T20668] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1895.213268][T20668] dvb-usb: bulk message failed: -22 (3/0) [ 1895.265876][T20668] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1895.296916][T20668] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1895.308227][T20668] usb 5-1: media controller created [ 1895.319840][T20668] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1895.351014][T28001] fuse: Bad value for 'rootmode' [ 1895.357194][T20668] dvb-usb: bulk message failed: -22 (6/0) [ 1895.371159][T20668] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1895.399111][T20668] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input218 [ 1895.414609][T27984] dvb-usb: bulk message failed: -22 (2/0) [ 1895.463264][T20668] dvb-usb: schedule remote query interval to 150 msecs. [ 1895.489419][T20668] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1895.521279][T20668] usb 5-1: USB disconnect, device number 13 [ 1895.608084][T20668] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1895.726680][T28007] binder: 28006:28007 ioctl c0306201 0 returned -14 [ 1895.753207][T28007] binder: 28006:28007 ioctl c038943b 2000000008c0 returned -22 [ 1896.266424][T28019] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5907'. [ 1896.980585][T21197] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1897.069457][T12276] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 1897.159669][T21197] usb 5-1: Using ep0 maxpacket: 32 [ 1897.167428][T21197] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1897.191039][T21197] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1897.208870][T21197] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1897.228032][T21197] usb 5-1: Product: syz [ 1897.237846][T21197] usb 5-1: Manufacturer: syz [ 1897.248235][T21197] usb 5-1: SerialNumber: syz [ 1897.255364][T12276] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1897.271955][T12276] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1897.288378][T21197] usb 5-1: config 0 descriptor?? [ 1897.304365][T21197] hub 5-1:0.0: bad descriptor, ignoring hub [ 1897.311614][T12276] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1897.329974][T21197] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1897.341458][T12276] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1897.379168][T12276] usb 4-1: config 0 descriptor?? [ 1897.402323][T12276] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1897.416224][T12276] dvb-usb: bulk message failed: -22 (3/0) [ 1897.431465][T12276] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1897.453455][T12276] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1897.476317][T12276] usb 4-1: media controller created [ 1897.499754][T12276] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1897.548799][T12276] dvb-usb: bulk message failed: -22 (6/0) [ 1897.567111][T12276] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1897.593024][T12276] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input219 [ 1897.625721][T28043] dvb-usb: bulk message failed: -22 (2/0) [ 1897.639649][T21197] usb 5-1: USB disconnect, device number 14 [ 1897.656377][T12276] dvb-usb: schedule remote query interval to 150 msecs. [ 1897.682673][T12276] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1897.713783][T12276] usb 4-1: USB disconnect, device number 17 [ 1897.808977][T12276] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1898.520771][T28071] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5927'. [ 1898.558393][T28071] bridge: RTM_NEWNEIGH with invalid ether address [ 1899.076557][T28081] binder: 28080:28081 ioctl c038943b 2000000008c0 returned -22 [ 1899.131713][T28085] netlink: 'syz.0.5933': attribute type 1 has an invalid length. [ 1899.333839][T28096] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5938'. [ 1899.343994][T28096] bridge: RTM_NEWNEIGH with invalid ether address [ 1899.469355][T21197] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 1899.520017][ T5685] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1899.632714][T28103] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5940'. [ 1899.654693][T21197] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1899.686252][ T5685] usb 2-1: Using ep0 maxpacket: 32 [ 1899.713210][ T5685] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1899.737910][ T5685] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1899.748380][ T5685] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1899.756990][ T5685] usb 2-1: Product: syz [ 1899.762821][ T5685] usb 2-1: Manufacturer: syz [ 1899.767693][ T5685] usb 2-1: SerialNumber: syz [ 1899.785905][ T5685] usb 2-1: config 0 descriptor?? [ 1899.793462][T21197] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1899.804667][T21197] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1899.814637][ T5685] hub 2-1:0.0: bad descriptor, ignoring hub [ 1899.835262][ T5685] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1899.909378][T21197] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1900.008323][T21197] usb 1-1: config 0 descriptor?? [ 1900.061113][T21197] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1900.071894][T21197] dvb-usb: bulk message failed: -22 (3/0) [ 1900.093081][T21197] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1900.110944][T21197] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1900.151374][ T5685] usb 2-1: USB disconnect, device number 37 [ 1900.224401][T21197] usb 1-1: media controller created [ 1900.267532][T21197] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1900.300067][T28090] dvb-usb: bulk message failed: -22 (2/0) [ 1900.425844][T21197] dvb-usb: bulk message failed: -22 (6/0) [ 1900.449096][T21197] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1900.473361][T21197] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input220 [ 1900.513628][T21197] dvb-usb: schedule remote query interval to 150 msecs. [ 1900.540495][T21197] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1900.576876][T21197] usb 1-1: USB disconnect, device number 48 [ 1900.705040][T21197] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1901.215141][T28119] netlink: 'syz.0.5946': attribute type 1 has an invalid length. [ 1901.870192][T28133] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5951'. [ 1901.919875][T28135] binder: 28134:28135 ioctl c038943b 2000000008c0 returned -22 [ 1903.149461][ T5685] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1903.319391][ T5685] usb 3-1: Using ep0 maxpacket: 32 [ 1903.326730][ T5685] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1903.329475][T21197] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 1903.338275][ T5685] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 1903.390072][ T5685] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1903.399836][ T5685] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1903.408194][ T5685] usb 3-1: Product: syz [ 1903.429279][ T5685] usb 3-1: Manufacturer: syz [ 1903.435550][ T5685] usb 3-1: SerialNumber: syz [ 1903.457198][ T5685] usb 3-1: config 0 descriptor?? [ 1903.468730][ T5685] hub 3-1:0.0: bad descriptor, ignoring hub [ 1903.479864][ T5685] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1903.492209][T21197] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1903.492477][ T5685] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input221 [ 1903.502687][T21197] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1903.520515][ T5685] usbtouchscreen 3-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -90 [ 1903.521956][T21197] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1903.540255][T21197] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1903.615136][T21197] usb 4-1: config 0 descriptor?? [ 1903.619897][ T5685] usbtouchscreen 3-1:0.0: probe with driver usbtouchscreen failed with error -90 [ 1903.625126][T21197] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1903.640619][T21197] dvb-usb: bulk message failed: -22 (3/0) [ 1903.725252][T21197] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1903.742786][T21197] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1903.756235][T21197] usb 4-1: media controller created [ 1903.763846][T21197] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1903.782440][T21197] dvb-usb: bulk message failed: -22 (6/0) [ 1903.794182][T21197] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1903.809931][ T5685] usb 3-1: USB disconnect, device number 38 [ 1903.811182][T21197] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input222 [ 1903.836754][T21197] dvb-usb: schedule remote query interval to 150 msecs. [ 1903.844990][T28144] dvb-usb: bulk message failed: -22 (2/0) [ 1903.857280][T21197] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1903.892348][T21197] usb 4-1: USB disconnect, device number 18 [ 1903.981982][T21197] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1904.656992][T28157] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5963'. [ 1905.206833][T28172] binder: 28171:28172 ioctl c038943b 2000000008c0 returned -22 [ 1905.956998][T28193] netlink: 'syz.0.5971': attribute type 1 has an invalid length. [ 1906.108310][T28197] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5974'. [ 1908.087702][T28221] fuse: Invalid rootmode [ 1908.234196][T28226] netlink: 'syz.1.5985': attribute type 1 has an invalid length. [ 1908.494667][T28232] binder: 28231:28232 ioctl c038943b 2000000008c0 returned -22 [ 1908.815333][T28251] fuse: Bad value for 'rootmode' [ 1908.870325][T28253] netlink: 'syz.1.5997': attribute type 1 has an invalid length. [ 1909.072644][T28262] netlink: 'syz.1.6000': attribute type 12 has an invalid length. [ 1909.081353][T28262] netlink: 'syz.1.6000': attribute type 29 has an invalid length. [ 1909.089872][T28262] netlink: 148 bytes leftover after parsing attributes in process `syz.1.6000'. [ 1909.200696][T28268] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6003'. [ 1909.240239][T28270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6004'. [ 1909.251727][T28270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6004'. [ 1909.448227][T28278] netlink: 'syz.1.6008': attribute type 1 has an invalid length. [ 1909.645717][T28280] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1909.685677][T28280] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1909.767836][T28280] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1909.780540][T28280] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1909.834857][T28280] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1909.851520][T28280] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1909.902847][T28280] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1909.917115][T28280] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1909.953933][T28280] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1909.961925][T28280] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1910.105814][T20505] Bluetooth: hci3: Malformed Event: 0x13 [ 1910.235826][T28283] mmap: syz.3.6009 (28283) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1910.310871][T28299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6016'. [ 1910.344570][T28299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6016'. [ 1911.317470][T28335] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6032'. [ 1911.351760][T28335] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6032'. [ 1911.649275][T20505] Bluetooth: hci5: command 0x0406 tx timeout [ 1911.809364][T20505] Bluetooth: hci1: command 0x0406 tx timeout [ 1911.894744][T20505] Bluetooth: hci3: command 0x0406 tx timeout [ 1911.969851][T20505] Bluetooth: hci0: command 0x0406 tx timeout [ 1911.976586][T20505] Bluetooth: hci4: command 0x0406 tx timeout [ 1912.006942][T28361] fuse: Unknown parameter 'use00000000000000000000' [ 1912.889037][T28398] fuse: Unknown parameter 'use00000000000000000000' [ 1913.233308][T28403] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6060'. [ 1913.729861][T28359] Bluetooth: hci5: command 0x0406 tx timeout [ 1913.889407][T28359] Bluetooth: hci1: command 0x0406 tx timeout [ 1913.918092][ T5685] IPVS: starting estimator thread 0... [ 1913.969273][T28359] Bluetooth: hci3: command 0x0406 tx timeout [ 1914.033739][T28426] IPVS: using max 50 ests per chain, 120000 per kthread [ 1914.049497][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 1914.055628][T28359] Bluetooth: hci4: command 0x0406 tx timeout [ 1914.259006][T28437] fuse: Unknown parameter 'use00000000000000000000' [ 1914.305162][T28441] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6074'. [ 1914.398237][T28442] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6075'. [ 1914.933333][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.944702][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1914.999389][T21197] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1915.159349][T21197] usb 3-1: Using ep0 maxpacket: 32 [ 1915.171237][T21197] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 1915.198557][T21197] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1915.215214][T21197] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1915.234078][T21197] usb 3-1: Product: syz [ 1915.250887][T21197] usb 3-1: Manufacturer: syz [ 1915.345825][T21197] usb 3-1: SerialNumber: syz [ 1915.430335][T21197] usb 3-1: config 0 descriptor?? [ 1915.465240][T28460] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1915.527219][T21197] hub 3-1:0.0: bad descriptor, ignoring hub [ 1915.565680][T21197] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1915.633550][T21197] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input223 [ 1915.767829][ T9] usb 3-1: USB disconnect, device number 39 [ 1915.767909][ C1] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1915.790193][T28481] fuse: Unknown parameter 'user_i00000000000000000000' [ 1917.049951][T28513] fuse: Unknown parameter 'user_i00000000000000000000' [ 1918.099740][T21197] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1918.269741][T21197] usb 5-1: Using ep0 maxpacket: 32 [ 1918.291465][T21197] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 1918.332475][T21197] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1918.363106][T21197] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1918.386913][T21197] usb 5-1: Product: syz [ 1918.399333][T21197] usb 5-1: Manufacturer: syz [ 1918.414517][T21197] usb 5-1: SerialNumber: syz [ 1918.441076][T21197] usb 5-1: config 0 descriptor?? [ 1918.458731][T28532] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1918.492286][T21197] hub 5-1:0.0: bad descriptor, ignoring hub [ 1918.509526][T21197] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1918.552798][T21197] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input224 [ 1918.576094][T28544] fuse: Unknown parameter 'user_i00000000000000000000' [ 1918.803759][ T9] usb 5-1: USB disconnect, device number 15 [ 1918.803871][ C1] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1919.326885][T28561] IPv6: Can't replace route, no match found [ 1919.924732][T28574] fuse: Unknown parameter 'user_id00000000000000000000' [ 1921.149781][ T995] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1921.269282][T21197] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1921.329524][ T995] usb 5-1: Using ep0 maxpacket: 32 [ 1921.343036][ T995] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 1921.375285][ T995] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1921.405917][ T995] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1921.431927][ T995] usb 5-1: config 1 has no interface number 0 [ 1921.439352][T21197] usb 1-1: Using ep0 maxpacket: 32 [ 1921.453485][ T995] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1921.490329][T21197] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 1921.507841][ T995] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1921.543554][T21197] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1921.558870][ T995] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1921.578313][T21197] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1921.588494][ T995] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1921.601898][T21197] usb 1-1: Product: syz [ 1921.611355][T21197] usb 1-1: Manufacturer: syz [ 1921.623839][T21197] usb 1-1: SerialNumber: syz [ 1921.656218][T21197] usb 1-1: config 0 descriptor?? [ 1921.672594][ T995] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 1921.695184][T28601] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1921.725429][T21197] hub 1-1:0.0: bad descriptor, ignoring hub [ 1921.750643][T21197] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1921.807732][T21197] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input225 [ 1921.846078][ T995] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 1921.915210][T28612] fuse: Unknown parameter 'user_id00000000000000000000' [ 1921.978598][T21197] usb 1-1: USB disconnect, device number 49 [ 1921.984893][ C1] usbtouchscreen 1-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1922.278809][ T193] usb 5-1: USB disconnect, device number 16 [ 1922.322954][ T193] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 1923.165974][T28640] fuse: Unknown parameter 'user_id00000000000000000000' [ 1924.240344][T20668] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1924.371500][T28667] fuse: Bad value for 'fd' [ 1924.432386][T20668] usb 1-1: Using ep0 maxpacket: 32 [ 1924.454920][T20668] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 1924.491787][T20668] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1924.513214][T20668] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1924.544696][T20668] usb 1-1: Product: syz [ 1924.561352][T20668] usb 1-1: Manufacturer: syz [ 1924.577720][T20668] usb 1-1: SerialNumber: syz [ 1924.632909][T20668] usb 1-1: config 0 descriptor?? [ 1924.665406][T28658] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1924.699504][T20668] hub 1-1:0.0: bad descriptor, ignoring hub [ 1924.719508][T20668] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1924.745488][T20668] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input226 [ 1924.820565][T28673] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6167'. [ 1924.930595][ T995] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1924.961755][T20668] usb 1-1: USB disconnect, device number 50 [ 1924.967898][ C0] usbtouchscreen 1-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1925.119398][ T995] usb 5-1: Using ep0 maxpacket: 16 [ 1925.141718][ T995] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1925.187434][ T995] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1925.218219][ T995] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1925.250966][ T995] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1925.265491][ T995] usb 5-1: Product: syz [ 1925.279349][ T995] usb 5-1: Manufacturer: syz [ 1925.290067][ T995] usb 5-1: SerialNumber: syz [ 1925.323776][ T995] usb 5-1: 0:2 : does not exist [ 1925.520853][ T995] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 1925.653120][ T995] usb 5-1: USB disconnect, device number 17 [ 1925.784516][T23999] udevd[23999]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1926.417844][T28703] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6179'. [ 1927.389750][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1927.406135][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1927.420998][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1927.436734][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1927.447800][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1927.694918][T20507] bridge0: port 3(syz_tun) entered disabled state [ 1927.827667][T20507] syz_tun (unregistering): left allmulticast mode [ 1927.852619][T20507] syz_tun (unregistering): left promiscuous mode [ 1927.878492][T20507] bridge0: port 3(syz_tun) entered disabled state [ 1927.993764][T28730] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6187'. [ 1929.239419][T20668] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1929.414524][T20668] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1929.434540][T20668] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1929.460239][T20668] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1929.496611][T20668] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1929.570548][T20668] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1929.580244][T28359] Bluetooth: hci2: command tx timeout [ 1929.617706][T20668] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1929.647470][T20668] usb 5-1: Product: syz [ 1929.661406][T20668] usb 5-1: Manufacturer: syz [ 1929.681973][T28728] bridge0: port 1(bridge_slave_0) entered blocking state [ 1929.692361][T20668] cdc_wdm 5-1:1.0: skipping garbage [ 1929.705684][T20668] cdc_wdm 5-1:1.0: skipping garbage [ 1929.725205][T20668] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1929.728289][T28728] bridge0: port 1(bridge_slave_0) entered disabled state [ 1929.741378][T20668] cdc_wdm 5-1:1.0: Unknown control protocol [ 1929.755939][T28755] netlink: 'syz.1.6192': attribute type 2 has an invalid length. [ 1929.780218][T28728] bridge_slave_0: entered allmulticast mode [ 1929.832938][T28728] bridge_slave_0: entered promiscuous mode [ 1929.891435][T28728] bridge0: port 2(bridge_slave_1) entered blocking state [ 1929.903769][ T9] usb 5-1: USB disconnect, device number 18 [ 1929.933768][T28728] bridge0: port 2(bridge_slave_1) entered disabled state [ 1929.970957][T28728] bridge_slave_1: entered allmulticast mode [ 1930.012214][T28728] bridge_slave_1: entered promiscuous mode [ 1930.199018][T28728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1930.243383][T28728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1930.429299][ T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1930.473257][T28728] team0: Port device team_slave_0 added [ 1930.512931][T28728] team0: Port device team_slave_1 added [ 1930.591616][ T9] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1930.619508][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1930.659350][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1930.661512][T28728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1930.710969][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1930.714673][T28728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1930.761436][ T9] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1930.808376][ T9] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1930.829225][T28728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1930.846722][ T9] usb 5-1: Product: syz [ 1930.861994][ T9] usb 5-1: Manufacturer: syz [ 1930.866906][T28728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1930.884354][T28728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1930.940434][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 1930.974073][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 1930.996889][T28728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1931.029906][ T9] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1931.048381][ T9] cdc_wdm 5-1:1.0: Unknown control protocol [ 1931.197716][T28728] hsr_slave_0: entered promiscuous mode [ 1931.206825][T28728] hsr_slave_1: entered promiscuous mode [ 1931.217852][T28728] debugfs: 'hsr0' already exists in 'hsr' [ 1931.227380][T28728] Cannot create hsr debugfs directory [ 1931.652705][T28359] Bluetooth: hci2: command tx timeout [ 1931.762828][T28728] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1931.775422][T28728] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1932.105841][T28728] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1932.135471][T28728] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1932.414798][T28728] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1932.437221][T28728] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1932.653447][T28728] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1932.665690][T28728] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1933.034466][ C0] wdm_int_callback: 636 callbacks suppressed [ 1933.034502][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 1933.035037][T21197] usb 5-1: USB disconnect, device number 19 [ 1933.040552][ C0] wdm_int_callback: 636 callbacks suppressed [ 1933.040576][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 1933.040595][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1933.290192][T28728] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1933.308501][T28728] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1933.322782][T28728] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1933.336825][T28728] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1933.351763][T28728] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1933.364563][T28728] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1933.377361][T28728] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1933.401798][T28728] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1933.729446][T28359] Bluetooth: hci2: command tx timeout [ 1933.786797][T28728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1933.802844][T28817] sg_write: data in/out 443356/194 bytes for SCSI command 0x0-- guessing data in; [ 1933.802844][T28817] program syz.0.6214 not setting count and/or reply_len properly [ 1933.823750][T28728] 8021q: adding VLAN 0 to HW filter on device team0 [ 1933.875491][T28187] bridge0: port 1(bridge_slave_0) entered blocking state [ 1933.882935][T28187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1933.947938][T24217] bridge0: port 2(bridge_slave_1) entered blocking state [ 1933.955267][T24217] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1934.350585][T28728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1934.527680][T28728] veth0_vlan: entered promiscuous mode [ 1934.566471][T28728] veth1_vlan: entered promiscuous mode [ 1934.702324][T28728] veth0_macvtap: entered promiscuous mode [ 1934.739094][T28728] veth1_macvtap: entered promiscuous mode [ 1934.818875][T28728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1934.878844][T28728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1935.119772][T23544] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1935.179612][T23544] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1935.240836][T26616] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1935.265807][T26616] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1935.387499][T26621] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1935.417889][T26621] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1935.469852][T28187] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1935.491756][T28187] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1935.809801][T28359] Bluetooth: hci2: command tx timeout [ 1936.095059][T28876] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6237'. [ 1936.907010][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1936.924111][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1936.933907][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1936.944993][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1936.955001][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1939.010610][T28359] Bluetooth: hci5: command tx timeout [ 1939.313110][T28927] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6256'. [ 1939.346408][T28891] bridge0: port 1(bridge_slave_0) entered blocking state [ 1939.369530][T28891] bridge0: port 1(bridge_slave_0) entered disabled state [ 1939.381549][T28891] bridge_slave_0: entered allmulticast mode [ 1939.395593][T28891] bridge_slave_0: entered promiscuous mode [ 1939.454287][T28891] bridge0: port 2(bridge_slave_1) entered blocking state [ 1939.490976][T28891] bridge0: port 2(bridge_slave_1) entered disabled state [ 1939.519018][T28891] bridge_slave_1: entered allmulticast mode [ 1939.541078][T28891] bridge_slave_1: entered promiscuous mode [ 1939.602303][T28932] netlink: 'syz.4.6258': attribute type 12 has an invalid length. [ 1939.640189][T28932] netlink: 'syz.4.6258': attribute type 29 has an invalid length. [ 1939.671246][T28932] netlink: 148 bytes leftover after parsing attributes in process `syz.4.6258'. [ 1939.783044][T28891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1939.827963][T28891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1940.001457][T28891] team0: Port device team_slave_0 added [ 1940.034173][T28891] team0: Port device team_slave_1 added [ 1940.140107][T28891] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1940.160586][T28891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1940.224924][T28891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1940.266990][T28891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1940.271455][T28958] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6269'. [ 1940.283132][T28891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1940.283172][T28891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1940.351357][T28961] syzkaller1: entered promiscuous mode [ 1940.357360][T28961] syzkaller1: entered allmulticast mode [ 1940.378244][T28891] hsr_slave_0: entered promiscuous mode [ 1940.387026][T28891] hsr_slave_1: entered promiscuous mode [ 1940.394191][T28891] debugfs: 'hsr0' already exists in 'hsr' [ 1940.400705][T28891] Cannot create hsr debugfs directory [ 1941.023702][T28891] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1941.058560][T28965] netlink: 'syz.0.6272': attribute type 12 has an invalid length. [ 1941.067143][T28965] netlink: 'syz.0.6272': attribute type 29 has an invalid length. [ 1941.076861][T28965] netlink: 148 bytes leftover after parsing attributes in process `syz.0.6272'. [ 1941.090768][T28359] Bluetooth: hci5: command tx timeout [ 1941.100152][T28967] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6274'. [ 1941.322263][T28974] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6277'. [ 1941.417595][T28891] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1941.722943][T28891] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1941.942797][T28891] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1943.169509][T28359] Bluetooth: hci5: command tx timeout [ 1943.550984][T28995] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6285'. [ 1943.969521][T12276] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 1944.121253][T28891] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1944.141460][T12276] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 1944.150505][T28891] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1944.157804][T12276] usb 3-1: config 0 has no interface number 0 [ 1944.165391][T28891] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1944.174088][T12276] usb 3-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 1944.189882][T28891] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1944.197201][T12276] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1944.212354][T28891] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1944.219357][T12276] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1944.235576][T28891] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1944.250377][T12276] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1944.261073][T12276] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1944.269997][T28891] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1944.281731][T28891] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1944.289079][T12276] usb 3-1: Product: syz [ 1944.293579][T12276] usb 3-1: SerialNumber: syz [ 1944.311782][T12276] usb 3-1: config 0 descriptor?? [ 1944.321413][T12276] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 1944.334083][T12276] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input227 [ 1944.518279][T28891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1944.539268][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 1944.567651][T28891] 8021q: adding VLAN 0 to HW filter on device team0 [ 1944.594146][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1944.601514][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1944.631000][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1944.638635][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1945.005046][T28891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1945.098047][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1945.098066][T29039] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6300'. [ 1945.098093][T29039] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6300'. [ 1945.107885][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1945.131560][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1945.139148][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1945.147128][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1945.155261][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1945.162862][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1945.170232][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1945.177525][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1945.184735][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1945.205914][T20668] usb 3-1: USB disconnect, device number 40 [ 1945.211994][ C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1945.251060][T28359] Bluetooth: hci5: command tx timeout [ 1945.308804][T20668] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1945.324759][T28891] veth0_vlan: entered promiscuous mode [ 1945.396109][T28891] veth1_vlan: entered promiscuous mode [ 1945.533740][T28891] veth0_macvtap: entered promiscuous mode [ 1945.588233][T28891] veth1_macvtap: entered promiscuous mode [ 1945.659102][T28891] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1945.705647][T28891] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1945.949930][T26621] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1946.024654][T26621] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1946.142830][T23544] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1946.176779][T23544] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1946.306374][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1946.328686][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1946.456678][T29063] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6311'. [ 1946.467700][T29063] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6311'. [ 1946.477764][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1946.488773][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1947.079133][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1947.101846][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1947.112657][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1947.123194][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1947.135627][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1947.447565][T29091] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6323'. [ 1947.476683][T29091] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6323'. [ 1948.702458][T29132] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6336'. [ 1948.741632][T29132] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6336'. [ 1948.769014][T29087] bridge0: port 1(bridge_slave_0) entered blocking state [ 1948.789418][T29087] bridge0: port 1(bridge_slave_0) entered disabled state [ 1948.808511][T29087] bridge_slave_0: entered allmulticast mode [ 1948.829436][T29087] bridge_slave_0: entered promiscuous mode [ 1948.858543][T29087] bridge0: port 2(bridge_slave_1) entered blocking state [ 1948.874417][T29087] bridge0: port 2(bridge_slave_1) entered disabled state [ 1948.891030][T29087] bridge_slave_1: entered allmulticast mode [ 1948.906481][T29087] bridge_slave_1: entered promiscuous mode [ 1949.044541][T29087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1949.086968][T29087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1949.156859][T29087] team0: Port device team_slave_0 added [ 1949.170788][T28359] Bluetooth: hci4: command tx timeout [ 1949.214638][T29087] team0: Port device team_slave_1 added [ 1949.276032][T29087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1949.283288][T29087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1949.311309][T29087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1949.348656][T29087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1949.364410][T29087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1949.390769][T29087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1949.487527][T29087] hsr_slave_0: entered promiscuous mode [ 1949.497696][T29087] hsr_slave_1: entered promiscuous mode [ 1949.505483][T29087] debugfs: 'hsr0' already exists in 'hsr' [ 1949.511796][T29087] Cannot create hsr debugfs directory [ 1950.000598][T29087] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1950.104060][T29163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6346'. [ 1950.125334][T29163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6346'. [ 1950.327745][T29167] binder: 29166:29167 ioctl c038943b 2000000008c0 returned -22 [ 1950.395758][T29087] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1950.519517][T29087] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1950.625126][T29087] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1951.106274][T29087] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1951.126063][T29087] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1951.135442][T29087] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1951.157189][T29087] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1951.204140][T29087] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1951.247947][T29087] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1951.259735][T28359] Bluetooth: hci4: command tx timeout [ 1951.279059][T29087] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1951.324725][T29087] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1951.720903][T29087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1951.788337][T29087] 8021q: adding VLAN 0 to HW filter on device team0 [ 1951.840627][T23544] bridge0: port 1(bridge_slave_0) entered blocking state [ 1951.848018][T23544] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1951.923581][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1951.931123][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1952.162883][T29087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1952.301593][T29087] veth0_vlan: entered promiscuous mode [ 1952.329202][T29087] veth1_vlan: entered promiscuous mode [ 1952.395964][T29087] veth0_macvtap: entered promiscuous mode [ 1952.432994][T29087] veth1_macvtap: entered promiscuous mode [ 1952.513934][T29087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1952.583694][T29087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1952.642002][T15795] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1952.689877][T15795] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1952.702212][T29204] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6358'. [ 1952.719123][T15795] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1952.725944][T29204] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6358'. [ 1952.801942][T28187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1952.902885][T29209] binder: 29208:29209 ioctl c038943b 2000000008c0 returned -22 [ 1953.147295][T28187] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1953.185444][T28187] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1953.329714][T28359] Bluetooth: hci4: command tx timeout [ 1953.338597][T26616] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1953.391898][T26616] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1953.716299][ T5685] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1953.793345][T29227] raw_sendmsg: syz.3.6364 forgot to set AF_INET. Fix it! [ 1953.825078][T28359] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 1953.889580][ T5685] usb 1-1: Using ep0 maxpacket: 8 [ 1953.948094][ T5685] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1953.985250][ T5685] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1954.030664][ T5685] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1954.096297][ T5685] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1954.148278][T29227] bridge1: left allmulticast mode [ 1954.154654][ T5685] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1954.188107][T29227] bridge2: left allmulticast mode [ 1954.203793][ T5685] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1954.354412][T29229] bridge_slave_0: left allmulticast mode [ 1954.404810][T29229] bridge_slave_0: left promiscuous mode [ 1954.438505][T29229] bridge0: port 1(bridge_slave_0) entered disabled state [ 1954.532965][ T5685] usb 1-1: GET_CAPABILITIES returned 0 [ 1954.540513][T29229] bridge_slave_1: left allmulticast mode [ 1954.570894][ T5685] usbtmc 1-1:16.0: can't read capabilities [ 1954.576852][T29229] bridge_slave_1: left promiscuous mode [ 1954.597584][T29229] bridge0: port 2(bridge_slave_1) entered disabled state [ 1954.706198][T29229] bond0: (slave bond_slave_0): Releasing backup interface [ 1954.777686][T29229] bond0: (slave bond_slave_1): Releasing backup interface [ 1954.910406][T29229] team0: Port device team_slave_0 removed [ 1955.008776][T29229] team0: Port device team_slave_1 removed [ 1955.055371][T29229] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1955.092262][T29229] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1955.134122][T29229] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1955.153009][T29241] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6373'. [ 1955.166064][T29229] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1955.196508][T29229] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1955.411143][T28359] Bluetooth: hci4: command tx timeout [ 1955.543839][T26616] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1955.582234][T26616] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1955.600313][ T995] usb 1-1: USB disconnect, device number 51 [ 1955.634987][T26616] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1955.673411][T26616] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1955.699633][T21197] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1955.879972][T21197] usb 3-1: Using ep0 maxpacket: 32 [ 1955.888346][T21197] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1955.923422][T21197] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1955.937748][T29257] syzkaller0: entered promiscuous mode [ 1955.945488][T21197] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1955.956202][T29257] syzkaller0: entered allmulticast mode [ 1955.965914][T29259] binder: 29258:29259 ioctl c038943b 2000000008c0 returned -22 [ 1955.975460][T21197] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1956.022854][T21197] usb 3-1: config 0 descriptor?? [ 1956.451406][T21197] usbhid 3-1:0.0: can't add hid device: -32 [ 1956.462778][T21197] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 1956.573695][ T5685] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1956.771321][ T5685] usb 1-1: Using ep0 maxpacket: 32 [ 1956.803955][ T5685] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1956.827296][ T5685] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 1956.854144][ T5685] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 1956.875908][ T5685] usb 1-1: config 14 has no interface number 0 [ 1956.895608][ T5685] usb 1-1: config 14 has no interface number 1 [ 1956.928206][ T5685] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1956.960418][ T5685] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1956.985121][ T5685] usb 1-1: config 14 interface 57 has no altsetting 0 [ 1957.003520][ T5685] usb 1-1: config 14 interface 228 has no altsetting 0 [ 1957.052165][ T5685] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1957.082469][ T5685] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1957.118252][ T5685] usb 1-1: Product: syz [ 1957.139046][ T5685] usb 1-1: Manufacturer: syz [ 1957.168100][ T5685] usb 1-1: SerialNumber: syz [ 1957.630244][ T5685] legousbtower 1-1:14.57: interrupt endpoints not found [ 1957.799285][ T193] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1957.830973][ T5685] legousbtower 1-1:14.228: interrupt endpoints not found [ 1957.949323][T29212] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1957.969374][ T193] usb 2-1: Using ep0 maxpacket: 32 [ 1957.977071][ T193] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1958.009239][ T193] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1958.022610][ T193] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1958.045888][ T193] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1958.069417][ T193] usb 2-1: Product: syz [ 1958.075158][ T193] usb 2-1: Manufacturer: syz [ 1958.103381][ T193] hub 2-1:4.0: USB hub found [ 1958.119548][T29212] usb 4-1: Using ep0 maxpacket: 32 [ 1958.132833][T29212] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1958.156142][T29212] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1958.179288][T29212] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1958.199695][T29212] usb 4-1: Product: syz [ 1958.203974][T29212] usb 4-1: Manufacturer: syz [ 1958.208732][T29212] usb 4-1: SerialNumber: syz [ 1958.233598][T29212] usb 4-1: config 0 descriptor?? [ 1958.296843][ T193] hub 2-1:4.0: 1 port detected [ 1958.494312][T21197] usb 3-1: USB disconnect, device number 41 [ 1958.510320][ T193] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 1958.580346][ T193] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 1958.635438][ T193] usb 2-1: USB disconnect, device number 38 [ 1959.121354][T29310] binder: 29309:29310 ioctl c038943b 2000000008c0 returned -22 [ 1959.429318][ T995] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1959.592025][ T995] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1959.608364][ T995] usb 5-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 1959.618324][ T995] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1959.631226][ T995] usb 5-1: Product: syz [ 1959.635766][ T995] usb 5-1: Manufacturer: syz [ 1959.655591][ T995] usb 5-1: SerialNumber: syz [ 1959.683023][ T995] sisusb 5-1:1.0: Invalid USB2VGA device [ 1959.699957][ T995] sisusb 5-1:1.0: probe with driver sisusb failed with error -22 [ 1959.984550][ T193] usb 1-1: USB disconnect, device number 52 [ 1960.483587][ T193] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1960.660874][ T193] usb 1-1: Using ep0 maxpacket: 32 [ 1960.681475][ T193] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1960.693630][ T193] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1960.706954][ T193] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1960.717979][ T193] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1960.730677][ T193] usb 1-1: config 0 descriptor?? [ 1960.991685][ T30] kauditd_printk_skb: 16 callbacks suppressed [ 1960.991706][ T30] audit: type=1326 audit(1785638656.159:1679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29339 comm="syz.1.6410" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f010239e019 code=0x7ffc0000 [ 1961.033183][ T30] audit: type=1326 audit(1785638656.159:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29339 comm="syz.1.6410" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f010239e019 code=0x7ffc0000 [ 1961.094501][T21197] usb 4-1: USB disconnect, device number 19 [ 1961.097682][ T30] audit: type=1326 audit(1785638656.189:1681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29339 comm="syz.1.6410" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f010239e019 code=0x7ffc0000 [ 1961.132710][ T30] audit: type=1326 audit(1785638656.189:1682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29339 comm="syz.1.6410" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f010239e019 code=0x7ffc0000 [ 1961.177719][ T30] audit: type=1326 audit(1785638656.189:1683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29339 comm="syz.1.6410" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7f010239e019 code=0x7ffc0000 [ 1961.211119][ T193] usbhid 1-1:0.0: can't add hid device: -32 [ 1961.217274][ T193] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 1961.242923][ T30] audit: type=1326 audit(1785638656.189:1684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29339 comm="syz.1.6410" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f010239e019 code=0x7ffc0000 [ 1961.274483][ T30] audit: type=1326 audit(1785638656.189:1685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29339 comm="syz.1.6410" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f010239e019 code=0x7ffc0000 [ 1961.303951][ T30] audit: type=1326 audit(1785638656.189:1686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29339 comm="syz.1.6410" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f010239e019 code=0x7ffc0000 [ 1961.386581][ T30] audit: type=1326 audit(1785638656.189:1687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29339 comm="syz.1.6410" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f010239e019 code=0x7ffc0000 [ 1961.405603][T29349] binder: 29348:29349 ioctl c038943b 2000000008c0 returned -22 [ 1961.435151][ T30] audit: type=1326 audit(1785638656.189:1688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29339 comm="syz.1.6410" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7f010239e019 code=0x7ffc0000 [ 1961.599353][ T24] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1961.779257][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 1961.787439][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1961.798260][ T24] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 1961.808280][ T24] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 1961.822340][ T24] usb 4-1: config 14 has no interface number 0 [ 1961.828690][ T24] usb 4-1: config 14 has no interface number 1 [ 1961.835229][ T24] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1961.852198][ T24] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1961.865021][ T24] usb 4-1: config 14 interface 57 has no altsetting 0 [ 1961.874119][ T24] usb 4-1: config 14 interface 228 has no altsetting 0 [ 1961.886823][ T24] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1961.897077][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1961.905605][ T24] usb 4-1: Product: syz [ 1961.910780][ T24] usb 4-1: Manufacturer: syz [ 1961.915803][ T24] usb 4-1: SerialNumber: syz [ 1962.221561][ T995] usb 5-1: USB disconnect, device number 20 [ 1962.366491][ T24] legousbtower 4-1:14.57: interrupt endpoints not found [ 1962.573167][ T24] legousbtower 4-1:14.228: interrupt endpoints not found [ 1963.059343][ T995] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1963.162573][ T193] usb 1-1: USB disconnect, device number 53 [ 1963.229455][ T995] usb 2-1: Using ep0 maxpacket: 32 [ 1963.242635][ T995] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1963.257135][ T995] usb 2-1: New USB device found, idVendor=056a, idProduct=0023, bcdDevice= 0.00 [ 1963.278121][ T995] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1963.297001][ T995] usb 2-1: config 0 descriptor?? [ 1963.549290][ T193] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1963.722682][ T995] usb 2-1: string descriptor 0 read error: -71 [ 1963.731391][ T193] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1963.765023][ T995] usb 2-1: USB disconnect, device number 39 [ 1963.770349][ T193] usb 1-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 1963.812355][ T193] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1963.851653][ T193] usb 1-1: Product: syz [ 1963.863137][ T193] usb 1-1: Manufacturer: syz [ 1963.882597][ T193] usb 1-1: SerialNumber: syz [ 1963.928353][ T193] sisusb 1-1:1.0: Invalid USB2VGA device [ 1963.959347][ T193] sisusb 1-1:1.0: probe with driver sisusb failed with error -22 [ 1964.225632][T29398] binder: 29397:29398 ioctl c038943b 2000000008c0 returned -22 [ 1964.717802][ T24] usb 4-1: USB disconnect, device number 20 [ 1965.959413][T29212] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1966.134006][T29212] usb 3-1: Using ep0 maxpacket: 32 [ 1966.157339][T29212] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 1966.177171][T29212] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1966.188565][T29212] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1966.197746][T29212] usb 3-1: Product: syz [ 1966.203825][T29212] usb 3-1: Manufacturer: syz [ 1966.208813][T29212] usb 3-1: SerialNumber: syz [ 1966.230997][T29448] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6448'. [ 1966.233365][T29212] usb 3-1: config 0 descriptor?? [ 1966.273911][T29442] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1966.296357][T29212] hub 3-1:0.0: bad descriptor, ignoring hub [ 1966.317999][T29212] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1966.333286][ T193] usb 1-1: USB disconnect, device number 54 [ 1966.388483][T29450] syz_tun: entered allmulticast mode [ 1966.413518][T29212] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input228 [ 1966.571105][T29212] usb 3-1: USB disconnect, device number 42 [ 1966.577314][ C0] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1966.677989][T12276] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1966.870888][T12276] usb 5-1: Using ep0 maxpacket: 16 [ 1966.886948][T12276] usb 5-1: config 0 has an invalid descriptor of length 96, skipping remainder of the config [ 1966.928051][T29460] binder: 29459:29460 ioctl c038943b 2000000008c0 returned -22 [ 1966.932383][T12276] usb 5-1: config 0 interface 0 altsetting 11 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1966.987435][T12276] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1967.019280][T12276] usb 5-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 1967.036974][T12276] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1967.065275][T12276] usb 5-1: config 0 descriptor?? [ 1967.085748][T12276] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1967.306376][T12276] usb 5-1: USB disconnect, device number 21 [ 1968.650908][ T995] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1968.738610][T29504] netlink: 'syz.2.6476': attribute type 12 has an invalid length. [ 1968.766287][T29504] netlink: 'syz.2.6476': attribute type 29 has an invalid length. [ 1968.795958][T29504] netlink: 148 bytes leftover after parsing attributes in process `syz.2.6476'. [ 1968.829495][ T995] usb 1-1: Using ep0 maxpacket: 32 [ 1968.848312][ T995] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 1968.874165][T29506] syz_tun: entered allmulticast mode [ 1968.889912][ T995] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1968.918522][ T995] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1968.958704][ T995] usb 1-1: Product: syz [ 1968.978659][ T995] usb 1-1: Manufacturer: syz [ 1968.998314][ T995] usb 1-1: SerialNumber: syz [ 1969.022319][ T995] usb 1-1: config 0 descriptor?? [ 1969.038764][T29494] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1969.064730][ T995] hub 1-1:0.0: bad descriptor, ignoring hub [ 1969.082950][ T995] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1969.118357][ T995] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input229 [ 1969.171376][T20668] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1969.323585][ T995] usb 1-1: USB disconnect, device number 55 [ 1969.323669][ C1] usbtouchscreen 1-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1969.369510][T20668] usb 2-1: Using ep0 maxpacket: 16 [ 1969.399100][T20668] usb 2-1: config 0 has an invalid descriptor of length 96, skipping remainder of the config [ 1969.453539][T20668] usb 2-1: config 0 interface 0 altsetting 11 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1969.513394][T20668] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1969.546427][T20668] usb 2-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 1969.588751][T20668] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1969.637633][T20668] usb 2-1: config 0 descriptor?? [ 1969.675977][T20668] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1969.875966][T20668] usb 2-1: USB disconnect, device number 40 [ 1970.139343][ T193] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1970.328456][ T193] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1970.372187][ T193] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1970.396220][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1970.396445][ T193] usb 5-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 1970.421413][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1970.432861][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1970.448477][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1970.455280][ T193] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1970.466160][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1970.526311][ T193] usb 5-1: Product: syz [ 1970.538036][ T193] usb 5-1: Manufacturer: syz [ 1970.555451][ T193] usb 5-1: SerialNumber: syz [ 1970.832816][ T193] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 22 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 1971.043867][ T193] usb 5-1: USB disconnect, device number 22 [ 1971.086678][ T193] usblp0: removed [ 1971.619327][ T193] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1971.731684][T28187] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1971.744213][T28187] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1971.819423][ T193] usb 3-1: Using ep0 maxpacket: 32 [ 1971.827521][ T193] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 1971.841693][ T193] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1971.852640][ T193] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1971.861270][ T193] usb 3-1: Product: syz [ 1971.865652][ T193] usb 3-1: Manufacturer: syz [ 1971.871812][ T193] usb 3-1: SerialNumber: syz [ 1971.884805][ T193] usb 3-1: config 0 descriptor?? [ 1971.900639][T29555] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1971.911573][ T193] hub 3-1:0.0: bad descriptor, ignoring hub [ 1971.917573][ T193] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1971.933021][ T193] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input230 [ 1971.975358][T28187] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1972.000751][T28187] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1972.011481][ T995] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1972.171487][ T995] usb 2-1: Using ep0 maxpacket: 16 [ 1972.194518][ T995] usb 2-1: config 0 has an invalid descriptor of length 96, skipping remainder of the config [ 1972.219826][T21197] usb 3-1: USB disconnect, device number 43 [ 1972.219883][ C0] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1972.234174][ T995] usb 2-1: config 0 interface 0 altsetting 11 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1972.267575][ T995] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1972.297541][ T995] usb 2-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 1972.322223][ T995] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1972.337170][ T995] usb 2-1: config 0 descriptor?? [ 1972.365527][T28187] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1972.380728][T28187] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1972.400772][ T995] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1972.531360][T28359] Bluetooth: hci1: command tx timeout [ 1972.593875][T29212] usb 2-1: USB disconnect, device number 41 [ 1972.755774][T28187] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1972.768286][T28187] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1972.788753][T29534] bridge0: port 1(bridge_slave_0) entered blocking state [ 1972.803383][T29534] bridge0: port 1(bridge_slave_0) entered disabled state [ 1972.813093][T29534] bridge_slave_0: entered allmulticast mode [ 1972.833487][T29534] bridge_slave_0: entered promiscuous mode [ 1972.855616][T29534] bridge0: port 2(bridge_slave_1) entered blocking state [ 1972.874055][T29534] bridge0: port 2(bridge_slave_1) entered disabled state [ 1972.883086][T29534] bridge_slave_1: entered allmulticast mode [ 1972.891759][T29534] bridge_slave_1: entered promiscuous mode [ 1972.945949][T29534] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1972.964311][T29534] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1973.077793][T29534] team0: Port device team_slave_0 added [ 1973.099302][T21197] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1973.124586][T29534] team0: Port device team_slave_1 added [ 1973.281590][T21197] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1973.312299][T21197] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1973.316584][T29534] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1973.346573][T29534] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1973.366302][T21197] usb 5-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 1973.405389][T29534] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1973.416256][T21197] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1973.416289][T21197] usb 5-1: Product: syz [ 1973.416304][T21197] usb 5-1: Manufacturer: syz [ 1973.416321][T21197] usb 5-1: SerialNumber: syz [ 1973.596910][T29534] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1973.607562][T29534] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1973.640097][T29212] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1973.656952][T29534] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1973.715944][T21197] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 23 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 1973.775300][T28187] bridge_slave_1: left allmulticast mode [ 1973.784101][T28187] bridge_slave_1: left promiscuous mode [ 1973.799925][T28187] bridge0: port 2(bridge_slave_1) entered disabled state [ 1973.821919][T29212] usb 2-1: Using ep0 maxpacket: 16 [ 1973.832401][T29212] usb 2-1: config index 0 descriptor too short (expected 65, got 36) [ 1973.850582][T29212] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1973.851995][T28187] bridge_slave_0: left allmulticast mode [ 1973.874183][T29212] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1973.886016][T29212] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1973.901466][T28187] bridge_slave_0: left promiscuous mode [ 1973.907432][T28187] bridge0: port 1(bridge_slave_0) entered disabled state [ 1973.916698][T20668] usb 5-1: USB disconnect, device number 23 [ 1973.927905][T29212] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1973.962880][T29212] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1973.975040][T20668] usblp0: removed [ 1973.989366][T29212] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1974.037447][T29212] usb 2-1: config 0 descriptor?? [ 1974.054339][T29603] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1974.087987][T29212] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input231 [ 1974.482934][T21197] usb 2-1: USB disconnect, device number 42 [ 1974.609396][T28359] Bluetooth: hci1: command tx timeout [ 1975.121367][T21197] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1975.266140][T29644] program syz.1.6525 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1975.299562][T21197] usb 1-1: Using ep0 maxpacket: 32 [ 1975.312887][T21197] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 1975.339119][T21197] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1975.361125][T21197] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1975.371445][T21197] usb 1-1: Product: syz [ 1975.375662][T21197] usb 1-1: Manufacturer: syz [ 1975.381377][T21197] usb 1-1: SerialNumber: syz [ 1975.387191][T29646] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6526'. [ 1975.399406][T21197] usb 1-1: config 0 descriptor?? [ 1975.408064][T29634] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1975.422196][T21197] hub 1-1:0.0: bad descriptor, ignoring hub [ 1975.428320][T21197] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1975.432907][T29212] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1975.440748][T21197] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input232 [ 1975.619639][T29212] usb 5-1: Using ep0 maxpacket: 16 [ 1975.634462][T29212] usb 5-1: config 0 has an invalid descriptor of length 96, skipping remainder of the config [ 1975.654704][T21197] usb 1-1: USB disconnect, device number 56 [ 1975.660284][T29212] usb 5-1: config 0 interface 0 altsetting 11 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1975.660945][ C1] usbtouchscreen 1-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1975.705558][T29212] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1975.719520][T29212] usb 5-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 1975.749070][T29212] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1975.773576][T29212] usb 5-1: config 0 descriptor?? [ 1975.795145][T29212] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1976.089686][T28187] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1976.104885][T28187] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1976.119581][T28187] bond0 (unregistering): Released all slaves [ 1976.135757][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1976.144773][ T5685] usb 5-1: USB disconnect, device number 24 [ 1976.268537][T29534] hsr_slave_0: entered promiscuous mode [ 1976.276112][T29534] hsr_slave_1: entered promiscuous mode [ 1976.306758][T29534] debugfs: 'hsr0' already exists in 'hsr' [ 1976.312959][T29534] Cannot create hsr debugfs directory [ 1976.376279][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.387033][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.529609][T21197] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1976.544210][T29653] fuse: Unknown parameter 'fd0x0000000000000003' [ 1976.670933][T28187] hsr_slave_0: left promiscuous mode [ 1976.689034][T28187] hsr_slave_1: left promiscuous mode [ 1976.700237][T28359] Bluetooth: hci1: command tx timeout [ 1976.705989][T21197] usb 2-1: Using ep0 maxpacket: 32 [ 1976.717137][T21197] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1976.722034][T28187] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1976.733238][T21197] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 1976.745582][T21197] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 1976.754447][T28187] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1976.764388][T21197] usb 2-1: config 14 has no interface number 0 [ 1976.783617][T21197] usb 2-1: config 14 has no interface number 1 [ 1976.794904][T28187] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1976.797628][T21197] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 1976.834430][T28187] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1976.836529][T21197] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 1976.856268][T21197] usb 2-1: config 14 interface 57 has no altsetting 0 [ 1976.869932][T21197] usb 2-1: config 14 interface 228 has no altsetting 0 [ 1976.886195][T21197] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 1976.903071][T21197] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1976.923205][T21197] usb 2-1: Product: syz [ 1976.930393][T21197] usb 2-1: Manufacturer: syz [ 1976.935364][T21197] usb 2-1: SerialNumber: syz [ 1976.941820][T28187] veth1_macvtap: left promiscuous mode [ 1976.966971][T28187] veth0_macvtap: left promiscuous mode [ 1977.309270][ T995] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1977.417161][T21197] legousbtower 2-1:14.57: interrupt endpoints not found [ 1977.491724][ T995] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1977.502255][ T995] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1977.543607][ T995] usb 5-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 1977.576385][ T995] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1977.611115][ T995] usb 5-1: Product: syz [ 1977.615931][ T995] usb 5-1: Manufacturer: syz [ 1977.623855][T21197] legousbtower 2-1:14.228: interrupt endpoints not found [ 1977.633899][ T995] usb 5-1: SerialNumber: syz [ 1977.639292][T12276] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 1977.807973][T28187] team0 (unregistering): Port device team_slave_1 removed [ 1977.843948][T12276] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1977.853535][T12276] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1977.854188][T28187] team0 (unregistering): Port device team_slave_0 removed [ 1977.862811][T12276] usb 3-1: Product: syz [ 1977.876286][T12276] usb 3-1: Manufacturer: syz [ 1977.881465][T12276] usb 3-1: SerialNumber: syz [ 1977.896007][T12276] usb 3-1: config 0 descriptor?? [ 1977.909903][ T995] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 25 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 1978.050555][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1978.117007][ T995] usb 5-1: USB disconnect, device number 25 [ 1978.178283][T12276] usb 3-1: USB disconnect, device number 44 [ 1978.186476][ T995] usblp0: removed [ 1978.770176][T28359] Bluetooth: hci1: command tx timeout [ 1978.853414][T29692] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6534'. [ 1978.905300][T29692] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6534'. [ 1979.329964][ T995] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1979.521820][ T995] usb 5-1: Using ep0 maxpacket: 32 [ 1979.543113][ T995] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 1979.597540][ T995] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1979.652170][ T995] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1979.696819][ T995] usb 5-1: Product: syz [ 1979.717297][ T995] usb 5-1: Manufacturer: syz [ 1979.744444][ T995] usb 5-1: SerialNumber: syz [ 1979.798732][ T24] usb 2-1: USB disconnect, device number 43 [ 1979.818767][ T995] usb 5-1: config 0 descriptor?? [ 1979.838450][T29701] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1979.891858][ T995] hub 5-1:0.0: bad descriptor, ignoring hub [ 1979.917717][ T995] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1979.961021][ T995] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input233 [ 1980.140603][ T5750] usb 5-1: USB disconnect, device number 26 [ 1980.146748][ C1] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1980.595726][T29534] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1980.629463][T29534] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1980.647979][T29534] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1980.671137][T29534] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1980.691014][T29534] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1980.716911][T29534] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1980.736334][T29534] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1980.759926][T29534] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1981.106973][T29534] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1981.165115][T29534] 8021q: adding VLAN 0 to HW filter on device team0 [ 1981.217700][T26616] bridge0: port 1(bridge_slave_0) entered blocking state [ 1981.225335][T26616] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1981.266881][T24217] bridge0: port 2(bridge_slave_1) entered blocking state [ 1981.274190][T24217] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1981.349364][ T5750] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 1981.532747][ T5750] usb 3-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1981.572153][ T5750] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1981.598444][ T5750] usb 3-1: Product: syz [ 1981.628787][ T5750] usb 3-1: Manufacturer: syz [ 1981.642330][ T5750] usb 3-1: SerialNumber: syz [ 1981.671851][T29534] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1981.675634][ T5750] usb 3-1: config 0 descriptor?? [ 1981.825423][T29534] veth0_vlan: entered promiscuous mode [ 1981.877434][T29534] veth1_vlan: entered promiscuous mode [ 1981.952649][ T5750] usb 3-1: USB disconnect, device number 45 [ 1982.076051][T29534] veth0_macvtap: entered promiscuous mode [ 1982.135273][T29534] veth1_macvtap: entered promiscuous mode [ 1982.227460][T29534] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1982.264260][T29534] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1982.267069][T29776] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6555'. [ 1982.299880][T28183] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1982.313388][T28183] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1982.326735][T28183] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1982.381536][T24217] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1982.686667][T28187] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1982.740689][T28187] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1982.873387][T23544] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1982.914220][T23544] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1983.292537][T29804] netlink: 'syz.3.6488': attribute type 12 has an invalid length. [ 1983.322919][T29804] netlink: 'syz.3.6488': attribute type 29 has an invalid length. [ 1983.354891][T29804] netlink: 148 bytes leftover after parsing attributes in process `syz.3.6488'. [ 1983.560269][T29810] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6565'. [ 1983.849511][ T193] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 1983.986948][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1984.003481][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1984.015790][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1984.033392][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1984.045654][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1984.065863][ T193] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1984.131360][ T193] usb 4-1: config 0 has no interface number 0 [ 1984.152766][ T193] usb 4-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1984.171920][ T193] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1984.183287][ T193] usb 4-1: Product: syz [ 1984.191973][ T193] usb 4-1: Manufacturer: syz [ 1984.196742][ T193] usb 4-1: SerialNumber: syz [ 1984.207173][ T193] usb 4-1: config 0 descriptor?? [ 1984.253433][ T193] usb 4-1: selecting invalid altsetting 1 [ 1984.282284][ T193] dvb_ttusb_budget: ttusb_init_controller: error [ 1984.299275][ T193] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1984.390910][T29835] Cannot find add_set index 0 as target [ 1984.563922][T29837] loop4: detected capacity change from 0 to 2640 [ 1984.588365][ T193] DVB: Unable to find symbol stv0299_attach() [ 1984.786280][ T995] hid_parser_main: 1 callbacks suppressed [ 1984.786306][ T995] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1984.859343][ T995] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1984.883333][ T193] DVB: Unable to find symbol tda8083_attach() [ 1984.905432][ T995] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1984.910245][ T193] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 1984.944371][ T995] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1984.971406][T24178] Buffer I/O error on dev loop4, logical block 74, async page read [ 1984.989532][ T995] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1985.028472][ T193] usb 4-1: USB disconnect, device number 21 [ 1985.036943][ T995] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1985.047059][ T995] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1985.067325][ T995] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1985.077957][ T995] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1985.107998][ T995] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 1985.438771][T29854] netlink: 'syz.3.6575': attribute type 12 has an invalid length. [ 1985.479764][T29854] netlink: 'syz.3.6575': attribute type 29 has an invalid length. [ 1985.527582][ T995] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.03 Device [syz1] on syz1 [ 1985.529265][T29854] netlink: 148 bytes leftover after parsing attributes in process `syz.3.6575'. [ 1985.838298][T29857] fido_id[29857]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1986.130429][ T50] Bluetooth: hci0: command tx timeout [ 1986.757245][T29891] netlink: 'syz.1.6589': attribute type 12 has an invalid length. [ 1986.795903][T29891] netlink: 'syz.1.6589': attribute type 29 has an invalid length. [ 1986.831732][T29891] netlink: 148 bytes leftover after parsing attributes in process `syz.1.6589'. [ 1986.962448][T29830] bridge0: port 1(bridge_slave_0) entered blocking state [ 1986.975717][T29830] bridge0: port 1(bridge_slave_0) entered disabled state [ 1986.983556][T29830] bridge_slave_0: entered allmulticast mode [ 1987.005364][T29830] bridge_slave_0: entered promiscuous mode [ 1987.038490][T29830] bridge0: port 2(bridge_slave_1) entered blocking state [ 1987.052921][T29830] bridge0: port 2(bridge_slave_1) entered disabled state [ 1987.060901][T29830] bridge_slave_1: entered allmulticast mode [ 1987.072494][T29830] bridge_slave_1: entered promiscuous mode [ 1987.149860][T29909] netlink: 92 bytes leftover after parsing attributes in process `syz.4.6595'. [ 1987.260950][T29830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1987.312454][T29830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1987.475232][T29830] team0: Port device team_slave_0 added [ 1987.515172][T29830] team0: Port device team_slave_1 added [ 1987.669375][T29830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1987.695235][T29830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1987.763344][T29830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1987.771458][ T193] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 1987.824942][T29830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1987.860499][T29830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1987.961482][ T193] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1987.967713][T29830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1987.983743][ T193] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1988.004386][ T193] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1988.028967][ T193] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14385, setting to 64 [ 1988.065602][ T193] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1988.085399][ T193] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1988.107272][ T193] usb 3-1: Product: syz [ 1988.119248][ T193] usb 3-1: Manufacturer: syz [ 1988.160525][ T193] cdc_wdm 3-1:1.0: skipping garbage [ 1988.186469][ T193] cdc_wdm 3-1:1.0: skipping garbage [ 1988.209963][ T50] Bluetooth: hci0: command tx timeout [ 1988.226592][ T193] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1988.247084][ T193] cdc_wdm 3-1:1.0: Unknown control protocol [ 1988.267728][T29830] hsr_slave_0: entered promiscuous mode [ 1988.276945][T29830] hsr_slave_1: entered promiscuous mode [ 1988.283974][T29830] debugfs: 'hsr0' already exists in 'hsr' [ 1988.291014][T29830] Cannot create hsr debugfs directory [ 1988.436706][T29951] fuse: Bad value for 'fd' [ 1988.592118][ C0] cdc_wdm 3-1:1.0: Unexpected error -71 [ 1988.598582][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1988.605388][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1988.611824][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1988.618548][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1988.625088][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1988.631999][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1988.638734][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1988.645469][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1988.651848][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1988.658493][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1988.665082][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1988.671804][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1988.680137][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1988.686777][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1988.693993][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1988.700810][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1988.707266][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1988.713902][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1988.720312][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 1988.726955][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 1988.759817][ T193] usb 3-1: USB disconnect, device number 46 [ 1988.936948][T29965] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6614'. [ 1989.266961][T29830] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1989.578013][T29830] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1989.872587][T29830] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1990.177585][T29830] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1990.200223][T29990] syz.1.6624 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1990.293213][ T50] Bluetooth: hci0: command tx timeout [ 1991.366111][T29830] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1991.405125][T29830] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1991.430717][T29830] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1991.451601][T29830] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1991.464572][T29830] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1991.486102][T29830] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1991.494993][T30020] syz_tun: entered allmulticast mode [ 1991.509760][T29212] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1991.517702][T29830] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1991.531374][T29830] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1991.661940][T29830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1991.669382][T29212] usb 2-1: Using ep0 maxpacket: 32 [ 1991.688505][T29212] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1991.713090][T29212] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1991.724557][T29830] 8021q: adding VLAN 0 to HW filter on device team0 [ 1991.732866][T29212] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1991.748753][T28183] bridge0: port 1(bridge_slave_0) entered blocking state [ 1991.756087][T28183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1991.757520][T29212] usb 2-1: Product: syz [ 1991.765116][T12276] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1991.779218][T29212] usb 2-1: Manufacturer: syz [ 1991.790014][T29212] usb 2-1: SerialNumber: syz [ 1991.808469][T29212] usb 2-1: config 0 descriptor?? [ 1991.823468][T28183] bridge0: port 2(bridge_slave_1) entered blocking state [ 1991.831039][T28183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1991.946429][T12276] usb 3-1: Using ep0 maxpacket: 16 [ 1991.979019][T12276] usb 3-1: config 0 has an invalid descriptor of length 96, skipping remainder of the config [ 1992.024599][T12276] usb 3-1: config 0 interface 0 altsetting 11 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1992.074702][T12276] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1992.090272][T12276] usb 3-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 1992.102041][T12276] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1992.126499][T12276] usb 3-1: config 0 descriptor?? [ 1992.141445][T29830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1992.161381][T12276] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1992.298014][T29830] veth0_vlan: entered promiscuous mode [ 1992.351329][T29830] veth1_vlan: entered promiscuous mode [ 1992.370298][ T50] Bluetooth: hci0: command tx timeout [ 1992.381360][T12276] usb 3-1: USB disconnect, device number 47 [ 1992.468652][T29830] veth0_macvtap: entered promiscuous mode [ 1992.482243][T29830] veth1_macvtap: entered promiscuous mode [ 1992.519841][T29830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1992.553096][T29830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1992.650635][T26616] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1992.730187][T28187] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1992.760131][T28187] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1992.803414][T26616] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1992.846189][T26616] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1992.873817][T26616] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1992.960683][T15795] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1992.984628][T15795] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1993.042211][T30049] team0: Port device vlan2 added [ 1993.187748][T30059] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 1993.512848][T30071] ================================================================== [ 1993.521145][T30071] BUG: KASAN: slab-out-of-bounds in try_module_get+0x46/0xc0 [ 1993.528827][T30071] Write of size 4 at addr ffff88802b70fb08 by task syz.1.6635/30071 [ 1993.537115][T30071] [ 1993.539627][T30071] CPU: 1 UID: 0 PID: 30071 Comm: syz.1.6635 Tainted: G L syzkaller #0 PREEMPT(full) [ 1993.539679][T30071] Tainted: [L]=SOFTLOCKUP [ 1993.539687][T30071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1993.539700][T30071] Call Trace: [ 1993.539710][T30071] [ 1993.539721][T30071] dump_stack_lvl+0xe8/0x150 [ 1993.539758][T30071] print_address_description+0x55/0x1e0 [ 1993.539815][T30071] ? try_module_get+0x46/0xc0 [ 1993.539838][T30071] print_report+0x58/0x70 [ 1993.539863][T30071] kasan_report+0x117/0x150 [ 1993.539908][T30071] ? try_module_get+0x46/0xc0 [ 1993.539933][T30071] kasan_check_range+0x264/0x2c0 [ 1993.539964][T30071] try_module_get+0x46/0xc0 [ 1993.539987][T30071] dvb_device_open+0xef/0x340 [ 1993.540015][T30071] ? do_raw_spin_unlock+0xf5/0x210 [ 1993.540040][T30071] chrdev_open+0x4d9/0x600 [ 1993.540072][T30071] ? __pfx_chrdev_open+0x10/0x10 [ 1993.540092][T30071] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 1993.540124][T30071] ? __pfx_chrdev_open+0x10/0x10 [ 1993.540145][T30071] do_dentry_open+0x816/0x1380 [ 1993.540175][T30071] vfs_open+0x3b/0x340 [ 1993.540196][T30071] ? path_openat+0x2e2d/0x3830 [ 1993.540217][T30071] path_openat+0x2e44/0x3830 [ 1993.540239][T30071] ? kasan_save_track+0x3e/0x80 [ 1993.540263][T30071] ? do_sys_openat2+0xcc/0x200 [ 1993.540287][T30071] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1993.540316][T30071] do_file_open+0x23e/0x4a0 [ 1993.540343][T30071] ? __pfx_do_file_open+0x10/0x10 [ 1993.540371][T30071] ? _raw_spin_unlock+0x28/0x50 [ 1993.540437][T30071] ? alloc_fd+0x651/0x6c0 [ 1993.540464][T30071] do_sys_openat2+0x115/0x200 [ 1993.540488][T30071] ? __se_sys_futex+0x3a8/0x450 [ 1993.540517][T30071] ? __pfx_do_sys_openat2+0x10/0x10 [ 1993.540545][T30071] ? rcu_is_watching+0x15/0xb0 [ 1993.540566][T30071] __x64_sys_openat+0x138/0x170 [ 1993.540591][T30071] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1993.540610][T30071] do_syscall_64+0x174/0x580 [ 1993.540634][T30071] ? trace_irq_disable+0x3b/0x140 [ 1993.540659][T30071] ? clear_bhb_loop+0x40/0x90 [ 1993.540682][T30071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1993.540699][T30071] RIP: 0033:0x7f010235e84e [ 1993.540719][T30071] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1993.540737][T30071] RSP: 002b:00007f01031d5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1993.540759][T30071] RAX: ffffffffffffffda RBX: 00007f01031d66c0 RCX: 00007f010235e84e [ 1993.540774][T30071] RDX: 0000000000000882 RSI: 00007f01031d5c00 RDI: ffffffffffffff9c [ 1993.540789][T30071] RBP: 00007f01031d5c00 R08: 0000000000000000 R09: 0000000000000000 [ 1993.540802][T30071] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1993.540815][T30071] R13: 00007f01026263f8 R14: 00007f0102626360 R15: 00007f010274fa48 [ 1993.540836][T30071] [ 1993.540844][T30071] [ 1993.823773][T30071] Allocated by task 1: [ 1993.827844][T30071] kasan_save_track+0x3e/0x80 [ 1993.832531][T30071] __kasan_kmalloc+0x93/0xb0 [ 1993.837228][T30071] __kmalloc_cache_noprof+0x32d/0x660 [ 1993.842640][T30071] bus_add_driver+0x162/0x670 [ 1993.847514][T30071] driver_register+0x23a/0x320 [ 1993.852346][T30071] i2c_register_driver+0xbb/0x1a0 [ 1993.857622][T30071] do_one_initcall+0x250/0x870 [ 1993.862397][T30071] do_initcall_level+0x10a/0x1a0 [ 1993.867459][T30071] do_initcalls+0x59/0xa0 [ 1993.871882][T30071] kernel_init_freeable+0x29d/0x3e0 [ 1993.877170][T30071] kernel_init+0x1d/0x1d0 [ 1993.881517][T30071] ret_from_fork+0x514/0xb70 [ 1993.886147][T30071] ret_from_fork_asm+0x1a/0x30 [ 1993.891000][T30071] [ 1993.893337][T30071] The buggy address belongs to the object at ffff88802b70fa00 [ 1993.893337][T30071] which belongs to the cache kmalloc-256 of size 256 [ 1993.907454][T30071] The buggy address is located 56 bytes to the right of [ 1993.907454][T30071] allocated 208-byte region [ffff88802b70fa00, ffff88802b70fad0) [ 1993.922705][T30071] [ 1993.925146][T30071] The buggy address belongs to the physical page: [ 1993.931599][T30071] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2b70e [ 1993.940452][T30071] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1993.948954][T30071] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1993.956530][T30071] page_type: f5(slab) [ 1993.960517][T30071] raw: 00fff00000000040 ffff88801b001b40 dead000000000100 dead000000000122 [ 1993.969117][T30071] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 1993.977748][T30071] head: 00fff00000000040 ffff88801b001b40 dead000000000100 dead000000000122 [ 1993.986430][T30071] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 1993.995113][T30071] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 1994.003958][T30071] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 1994.012659][T30071] page dumped because: kasan: bad access detected [ 1994.019068][T30071] page_owner tracks the page as allocated [ 1994.024783][T30071] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 19406314239, free_ts 0 [ 1994.044496][T30071] post_alloc_hook+0x1f9/0x250 [ 1994.049334][T30071] get_page_from_freelist+0x21fa/0x2270 [ 1994.054928][T30071] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1994.060742][T30071] allocate_slab+0x79/0x5e0 [ 1994.065251][T30071] refill_objects+0x2d5/0x350 [ 1994.069934][T30071] __pcs_replace_empty_main+0x2bf/0x6b0 [ 1994.075482][T30071] __kmalloc_cache_noprof+0x3a7/0x660 [ 1994.080857][T30071] bus_add_driver+0x162/0x670 [ 1994.085638][T30071] driver_register+0x23a/0x320 [ 1994.090424][T30071] usb_register_driver+0x1e4/0x390 [ 1994.095620][T30071] do_one_initcall+0x250/0x870 [ 1994.100505][T30071] do_initcall_level+0x10a/0x1a0 [ 1994.105538][T30071] do_initcalls+0x59/0xa0 [ 1994.109957][T30071] kernel_init_freeable+0x29d/0x3e0 [ 1994.115160][T30071] kernel_init+0x1d/0x1d0 [ 1994.119498][T30071] ret_from_fork+0x514/0xb70 [ 1994.124098][T30071] page_owner free stack trace missing [ 1994.129475][T30071] [ 1994.131907][T30071] Memory state around the buggy address: [ 1994.137605][T30071] ffff88802b70fa00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1994.145669][T30071] ffff88802b70fa80: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc [ 1994.153731][T30071] >ffff88802b70fb00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1994.161873][T30071] ^ [ 1994.166200][T30071] ffff88802b70fb80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1994.174285][T30071] ffff88802b70fc00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1994.182525][T30071] ================================================================== [ 1994.306594][T30071] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1994.314041][T30071] CPU: 0 UID: 0 PID: 30071 Comm: syz.1.6635 Tainted: G L syzkaller #0 PREEMPT(full) [ 1994.325559][T30071] Tainted: [L]=SOFTLOCKUP [ 1994.329933][T30071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1994.340225][T30071] Call Trace: [ 1994.343708][T30071] [ 1994.346663][T30071] vpanic+0x56c/0xa60 [ 1994.350699][T30071] ? __pfx_vpanic+0x10/0x10 [ 1994.355257][T30071] panic+0xc5/0xd0 [ 1994.359029][T30071] ? __pfx_panic+0x10/0x10 [ 1994.363491][T30071] ? preempt_schedule_thunk+0x16/0x40 [ 1994.368895][T30071] ? preempt_schedule_thunk+0x16/0x40 [ 1994.374275][T30071] ? try_module_get+0x46/0xc0 [ 1994.378981][T30071] check_panic_on_warn+0x89/0xb0 [ 1994.384087][T30071] ? try_module_get+0x46/0xc0 [ 1994.388879][T30071] end_report+0x73/0x170 [ 1994.393147][T30071] ? try_module_get+0x46/0xc0 [ 1994.398012][T30071] kasan_report+0x128/0x150 [ 1994.402534][T30071] ? try_module_get+0x46/0xc0 [ 1994.407238][T30071] kasan_check_range+0x264/0x2c0 [ 1994.412195][T30071] try_module_get+0x46/0xc0 [ 1994.416793][T30071] dvb_device_open+0xef/0x340 [ 1994.421475][T30071] ? do_raw_spin_unlock+0xf5/0x210 [ 1994.426593][T30071] chrdev_open+0x4d9/0x600 [ 1994.431041][T30071] ? __pfx_chrdev_open+0x10/0x10 [ 1994.435986][T30071] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 1994.442319][T30071] ? __pfx_chrdev_open+0x10/0x10 [ 1994.447258][T30071] do_dentry_open+0x816/0x1380 [ 1994.452033][T30071] vfs_open+0x3b/0x340 [ 1994.456139][T30071] ? path_openat+0x2e2d/0x3830 [ 1994.461082][T30071] path_openat+0x2e44/0x3830 [ 1994.465679][T30071] ? kasan_save_track+0x3e/0x80 [ 1994.470637][T30071] ? do_sys_openat2+0xcc/0x200 [ 1994.475424][T30071] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1994.481594][T30071] do_file_open+0x23e/0x4a0 [ 1994.486102][T30071] ? __pfx_do_file_open+0x10/0x10 [ 1994.491234][T30071] ? _raw_spin_unlock+0x28/0x50 [ 1994.496175][T30071] ? alloc_fd+0x651/0x6c0 [ 1994.500514][T30071] do_sys_openat2+0x115/0x200 [ 1994.505206][T30071] ? __se_sys_futex+0x3a8/0x450 [ 1994.510080][T30071] ? __pfx_do_sys_openat2+0x10/0x10 [ 1994.515375][T30071] ? rcu_is_watching+0x15/0xb0 [ 1994.520147][T30071] __x64_sys_openat+0x138/0x170 [ 1994.525006][T30071] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1994.531075][T30071] do_syscall_64+0x174/0x580 [ 1994.535691][T30071] ? trace_irq_disable+0x3b/0x140 [ 1994.540762][T30071] ? clear_bhb_loop+0x40/0x90 [ 1994.545549][T30071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1994.551627][T30071] RIP: 0033:0x7f010235e84e [ 1994.556051][T30071] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1994.575755][T30071] RSP: 002b:00007f01031d5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1994.584290][T30071] RAX: ffffffffffffffda RBX: 00007f01031d66c0 RCX: 00007f010235e84e [ 1994.592528][T30071] RDX: 0000000000000882 RSI: 00007f01031d5c00 RDI: ffffffffffffff9c [ 1994.600508][T30071] RBP: 00007f01031d5c00 R08: 0000000000000000 R09: 0000000000000000 [ 1994.608586][T30071] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1994.616592][T30071] R13: 00007f01026263f8 R14: 00007f0102626360 R15: 00007f010274fa48 [ 1994.624673][T30071] [ 1994.628073][T30071] Kernel Offset: disabled [ 1994.632431][T30071] Rebooting in 86400 seconds..