last executing test programs: 8m13.80598183s ago: executing program 0 (id=1): socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001a00010000000000f2ffffff01000000000000000000000008000400", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x60080c1}, 0x0) socket(0x10, 0x3, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) unshare(0x22020600) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x401}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x18c6}, 0x0, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r3, 0x0, 0x0, 0x2401c444) sendmmsg$inet6(r3, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000000c0)="9789", 0x2}], 0x1}}], 0x1, 0x84) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4048aecb, 0x0) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f00000001c0)={{0xd000, 0xf000, 0xa, 0xf, 0x3, 0x3, 0x38, 0x3, 0xff, 0x8, 0xd5, 0x2}, {0xdddd0000, 0x6000, 0xe, 0x6, 0x0, 0x9, 0x1, 0x2, 0x1, 0xa, 0x7, 0x7f}, {0x7b000, 0xffffffff, 0xa, 0x2, 0x3, 0x6, 0x5, 0x3, 0xb, 0x80, 0xfe}, {0x25000, 0x5000, 0xd, 0x6, 0x4, 0x4d, 0x5, 0x7f, 0x51, 0x5, 0x8, 0xe}, {0x8080000, 0xeeee0000, 0xa, 0xfd, 0x6, 0x1, 0x7, 0x59, 0x7, 0xb, 0xb, 0x81}, {0x4000, 0xf000, 0x9, 0x0, 0x7, 0x5, 0xfb, 0x6, 0x7, 0x1, 0x2a, 0x5}, {0x5000, 0xc000, 0x1c, 0x7f, 0x80, 0xc, 0x3, 0xc, 0x7, 0x6, 0x2, 0x2}, {0x25000, 0x54000, 0xe, 0x4, 0x1, 0xff, 0x5, 0xe, 0x4, 0x3, 0x0, 0x3}, {0x26000, 0x8}, {0x2000, 0xe}, 0x1000a, 0x0, 0x0, 0x4401b8, 0xf, 0x900, 0x58000, [0xe, 0x7, 0x80000001, 0x1]}) write$proc_mixer(r6, &(0x7f0000000040)=ANY=[@ANYBLOB=' \''], 0x33) 8m11.651988023s ago: executing program 0 (id=6): r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f0000002e40)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0x40}, 0x1000004, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="80000000000000002900000002000000341283feb1a3491a1fd11d409128d27ce9"], 0x1b0}}], 0x1, 0x40000) 8m10.900985559s ago: executing program 0 (id=7): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x9a9c41, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000000e80)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x8044) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x8, &(0x7f00000000c0)=@raw=[@cb_func={0x18, 0x0, 0x4, 0x0, 0x8}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x10}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xe}, @alu={0x7, 0x1, 0xb, 0xb, 0x5, 0xc, 0x1c}, @ldst={0x3, 0x2, 0x1, 0x3, 0x9, 0x10, 0x10}], &(0x7f00000001c0)='syzkaller\x00', 0xb, 0x73, &(0x7f0000000200)=""/115, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x8, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000002c0)=[0xffffffffffffffff], &(0x7f0000000300)=[{0x2, 0x5, 0xc, 0xa}, {0x0, 0x1, 0x0, 0x2}, {0x3, 0x1, 0x8, 0x7}, {0x4, 0x5, 0x5, 0x7}], 0x10, 0x582}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000500)={r3, r5}) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x3, 0x1, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_disconnect(r6) r7 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010d804df00"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 8m6.31079736s ago: executing program 0 (id=20): mkdir(&(0x7f00000002c0)='./file0\x00', 0x8) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 8m5.825773961s ago: executing program 0 (id=21): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xea5bc50b619917ee) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) 8m4.779946338s ago: executing program 0 (id=22): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, 0x0, 0x0) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000001040)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00\x00\x00A'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8m2.590880537s ago: executing program 32 (id=22): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, 0x0, 0x0) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000001040)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00\x00\x00A'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6m32.071733968s ago: executing program 3 (id=234): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, 0xffffffffffffffff, 0x0) getsockopt$bt_hci(r0, 0x84, 0x84, &(0x7f00000020c0)=""/4055, &(0x7f0000001080)=0xfd7) 6m31.481985249s ago: executing program 3 (id=239): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="10000000000000001000000000edffff0f01000002000000e0b44dfb99e0110b9b9b04fa4443ebec699d1598c59fa52ef79e2f184fd94152cf1f51942bdee8748cb36a59e4c5193d971d82a9e16484c1dd764c5533780bea15bc"], 0x20}, 0xfc40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000001c0)=""/53, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000940)={0x2, 0x0, [{0x0, 0x2c, &(0x7f0000000180)=""/44}, {0x0, 0xffa, &(0x7f0000001d80)=""/4090}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) 6m30.929182933s ago: executing program 3 (id=243): syz_emit_ethernet(0x66, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000008004500005800000000002f9078000000e0e000c800b48065580000000010000800000086dd080088be000000001000000088fbffff00000000080022eb1e07000000f300200000000200000000000000000000000800655800"], 0x0) r0 = syz_io_uring_setup(0x38f0, &(0x7f0000000140)={0x0, 0xeab5, 0x2, 0x2, 0x2c1}, &(0x7f00000001c0), &(0x7f0000000480), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILE_ALLOC_RANGE(r0, 0x19, &(0x7f0000000080)={0x6, 0x11, 0x209}, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000070000000900010073797a30000000001c000000090a010400000000000000000700000008000a4000002712140000001000010000000000000000001192e064b1f726425768dfee0084000a"], 0x64}, 0x1, 0x0, 0x0, 0x20000080}, 0x20002000) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="1ba0000016001d", 0x7, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) set_mempolicy(0x2, &(0x7f00000003c0)=0x4000000ffb, 0x8) ioctl$FBIOPUTCMAP(r1, 0x4605, &(0x7f0000000140)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) syz_usb_connect(0x4, 0x627, &(0x7f0000000980)={{0x12, 0x1, 0x310, 0x40, 0x20, 0x12, 0xff, 0x413c, 0x81d0, 0xd0d4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x615, 0x1, 0x8b, 0x8, 0x30, 0x8, "", [{{0x9, 0x4, 0x93, 0xf, 0xa, 0x8f, 0xa7, 0x6e, 0x81, [], [{{0x9, 0x5, 0x6, 0x2, 0x400, 0x0, 0x7, 0x2, [@generic={0xa, 0x8, "5f3a9a06987705e0"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x200, 0x3, 0x7, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x7, 0x7dde}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x7}]}}, {{0x9, 0x5, 0x0, 0x8, 0x200, 0x9c, 0x1, 0x4}}, {{0x9, 0x5, 0x2, 0x10, 0x8, 0xe4, 0x14, 0x7, [@generic={0xa6, 0xe, "ffc29cf182471d9940e332114325d557c24d904d28e9f0dcf2659799f8dcc64e8e8e56cef08ca706b5716e047e854129516da540bb8bc38ae97bbc70efbd561cd1a4be185c3cf86ebfc96e07dc2a9404f265fafc5c882357e755aa0735b01dfa404a35980794f8c6b460e8922c52482e29d98156ce3d7732a6b984665e5e9c47e0b26945e2831b8ae8158a526c340bec5059da6ab1415beef40b2b949556a36e054c34f6"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x3ff, 0x1, 0x1, 0x2f, [@generic={0xd6, 0x21, "b9e679cf0e78654c6f5ec3bb86fb7167ca5b860559f934cfd9408749720e3dba6a270e418892bec484ba2ac200ddc4131a2306e258d2c0d4f567fd3308180d0c525b84c81d93dafdfdf2da58549b8eb445e1285c686984ff8336ae9910f573f043116e0c0cb8813b657720f0e703c659340106db9346048695b7c7af373d440cf8314cffc79089e85ba96d287316bf2a75ce03f4e03f6b5b8f26c19fbf9d95504e030fc78c5c9617664d111a12204a9b95ca190ab13ef385d2bea57db0ef64fbc195d8b0325b101ff431b4374789e61a0392ef41"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0xfb, 0x2, 0xf9, [@generic={0xff, 0x2, "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"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x400, 0x4, 0x2, 0x1, [@generic={0x3, 0xf, 'J'}]}}, {{0x9, 0x5, 0x4, 0xe, 0x3ff, 0xb8, 0x4, 0x1, [@generic={0x32, 0x3, "a5f580779e9f456b8d8869f67b1994d8d083ac81db43810370be63e365a28a07b8e2eda7d2daadf5f26bc516ed8e62e1"}, @generic={0x8b, 0x9, "577004132cf0e4896466636fa8a4b6a5b10afa919c1171cfbfb39ac502229f545e406121e227bda6e70f4cdbfdb364a063839662d09e9370c0d0aeef762f344db1deb8d66ec8c2a9c5399366ae7e9d0e169e1b9afb5e94c73e66d27f130467ec7f74c576132579578baca6210603a684f36f8b35d3d4b00641a92df63fcfd41893ad14ff99d0f70f12"}]}}, {{0x9, 0x5, 0x1c, 0x8, 0x3ff, 0xb4, 0x6, 0xd6, [@generic={0x98, 0x6, "4da7937cbf79b1ec28fbc06cd1c8d8d1d4718ef70a59cdb32952d66c8e1d8dbd031acca06037ad5803c2934cfd131649ce8c55eedf45a543a8ae4b84efa74083e9569e7a9a2070aa7cfb86cedd7c98bab660db94ec7cddee801c1de4c79b68caa945c14d769a4d94fda324618cc34f3fdb5a954d262419981c7a5c2e6c9f756c45a24b8429b0989e863a65d5b8451cbf064625ffce6a"}]}}, {{0x9, 0x5, 0x8, 0x8, 0x200, 0x3, 0x81, 0x2, [@generic={0xd2, 0x11, "b0d140a79295fb70c0bd2f19191e74a618e7e1774b22a549a0b2f22b2f13d8c3c01b769cda1914efb1404de5d3bbe579b5f52150b59a75b50408939c73d92e5a61080678b3ef54b200b6f7b7f45c9a0d918fcf103c7ab60372349803ae3d4d186ed96924916d92efb8ed49f60d14e6e1b89395381660cfa7320e42eecb71fa4d5cd087483b05847d55d53be8aeae416b4521c8071f97912093a6f0d356dfe43489ecf26905d5c321d26ef8bbbd293329f0339fc0dbe24e6bd0417e7e67e290340ea3bebf37d72ddcfb86c34d36dc6291"}, @generic={0xec, 0x1, "0fda895f87e2089c8cc41a7316e457ce8f94df77c1b0f1fe5a31780148159da9f3e4bc5ec56337f8cb1de73b16fe869a4454b4f3c7081e6c46473311452605bc416fada6494e6c2584d1be50400ecb6b833418a0a9cc22ee61dcb572fa6fe1525584bf60e93ba764ee7b6c35762ff20161ab2a999f1a5d21caed3dda4d63f6965c2eac3786c9742dbba58f68e13489c8a053c6a4a06728d21942d582aa51899735938b655cd996efd73e78464a92d4755f41a99b1e968538dc90fa30fb0376d9858bf88eb7998767b8ecb544c698487e498e665ca51fb7b509fa7be9745fa3764b25456449dab7f12d0b"}]}}]}}]}}]}}, &(0x7f0000001200)={0xa, &(0x7f0000000fc0)={0xa, 0x6, 0x201, 0x3, 0x3, 0x1, 0x8, 0x36}, 0x19, &(0x7f0000001000)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "9faf5f92c1464fabb1c43e5d18bba79f"}]}}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000080)={0x2ce, 0x0, 0x4, r4, 0x11}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket(0x1e, 0x4, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000008060001080006040002aaaaaaaaa68322ec14bbaaaaaaaaaa00ac1414aa"], 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @link_local}, 0x14) r9 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x2e288501978821b, 0x80) r10 = dup3(r9, r5, 0x0) recvmmsg$unix(r10, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000005140)=""/4111, 0x100f}], 0x1}}], 0x1, 0x58ca2280, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) 6m26.26507525s ago: executing program 3 (id=258): symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000000)='./file0\x00') faccessat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2) 6m25.726836332s ago: executing program 3 (id=262): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x49) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f00000010c0)=""/4111, &(0x7f0000000000)=0x100f) 6m25.225728189s ago: executing program 3 (id=263): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getdents(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000004c0)=[{{&(0x7f0000000500)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/29}, {&(0x7f0000000400)=""/71}]}, 0x80}], 0x40002be, 0x2, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) write$FUSE_INIT(r2, 0x0, 0x0) read$FUSE(r2, &(0x7f0000004340)={0x2020}, 0x2020) open(&(0x7f0000000080)='./file0\x00', 0x400, 0x80) r3 = syz_clone(0x48411, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) wait4(r3, 0x0, 0xa0000000, 0x0) 6m19.588261464s ago: executing program 4 (id=276): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="08001b"], 0x34}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000240)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x4000041}, 0x4c040) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r6, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r5, 0x0, r0, 0x0, 0x34000, 0x2) 6m17.520305974s ago: executing program 4 (id=281): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x7c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_fw={{0x7}, {0x50, 0x2, [@TCA_FW_ACT={0x4c, 0x4, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x1, 0x3, 0x3, 0xfffffff9, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x26044028}, 0x800) 6m13.375060979s ago: executing program 4 (id=288): unshare(0x2c020680) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000300), 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a8, 0x3a0, 0x150, 0x150, 0x0, 0xf8010000, 0x468, 0x238, 0x238, 0x468, 0x238, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'veth1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x78) recvmmsg(0xffffffffffffffff, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/8, 0xc}}], 0x4b, 0x0, 0x0) 6m9.573235599s ago: executing program 33 (id=263): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getdents(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000004c0)=[{{&(0x7f0000000500)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/29}, {&(0x7f0000000400)=""/71}]}, 0x80}], 0x40002be, 0x2, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) write$FUSE_INIT(r2, 0x0, 0x0) read$FUSE(r2, &(0x7f0000004340)={0x2020}, 0x2020) open(&(0x7f0000000080)='./file0\x00', 0x400, 0x80) r3 = syz_clone(0x48411, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) wait4(r3, 0x0, 0xa0000000, 0x0) 6m9.439162644s ago: executing program 4 (id=291): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="08001b"], 0x34}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000240)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x4000041}, 0x4c040) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r6, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r5, 0x0, r0, 0x0, 0x34000, 0x2) 6m5.699933626s ago: executing program 4 (id=295): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201100100000008ac0536024000010203010902240001017da00809040079010301014409210900770122ae0f090581030002030808"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) sendmmsg$inet6(r1, &(0x7f000000d980)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x9, @empty, 0x7}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hopopts_2292={{0x18, 0x29, 0x36, {0x3a}}}, @pktinfo={{0x24, 0x29, 0x32, {@local}}}], 0x58}}, {{&(0x7f0000000380)={0xa, 0x4e20, 0xa, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000e80)=[@rthdr_2292={{0x18, 0x29, 0x39, {0x73, 0x0, 0x2, 0xf}}}], 0x18}}], 0x2, 0x4000000) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) fstat(r1, &(0x7f00000001c0)) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0x1}}}, 0x4) r2 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000240)={0x40, 0xb, 0x81, {0x81, 0x22, "06f92f4630ce17397f8a672c505a299f60695258da955f7900e910a9e575e943794fdb21445e10f436c87e82505528a568cb7f831be21bf4a73f994e4bc3868befa1b69f4f9cabd6b199825bfed3644746743a3978863a0b103dbc5b5116f3f9475cc1c44a5c2fcc2c957cd2d351209c93599d853c2942cb3373af70c50775"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 6m1.080464315s ago: executing program 4 (id=302): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}}) 5m45.273430485s ago: executing program 34 (id=302): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}}) 3m13.216301023s ago: executing program 2 (id=586): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x20, 0x33, @action={{{}, {}, @device_b}, @sa_query_req={0x8, 0x0, 0x1}}}]}, 0x3c}}, 0x0) 3m12.009871245s ago: executing program 2 (id=590): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file2\x00', 0x2800000, &(0x7f0000000300)={[{@debug}, {@jqfmt_vfsv0}, {@inlinecrypt}, {@debug}, {@test_dummy_encryption_v1}, {@norecovery}, {@delalloc}, {@nogrpid}, {@minixdf}]}, 0x1, 0xbd9, &(0x7f0000000400)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) unshare(0x20000400) r3 = creat(0x0, 0xc7) close(r3) fadvise64(r3, 0x7fffffffffffffff, 0x1, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000140)={r4, 0x0, 0x0}, 0x20) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r5, 0x12, 0x3, 0x0, 0x0) r6 = open(0x0, 0x4c27e, 0x2) fallocate(r6, 0x0, 0x0, 0x1000f4) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r8 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(0x4) 3m2.236527654s ago: executing program 2 (id=605): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201100100000008ac0536024000010203010902240001017da00809040079010301014409210900770122ae0f090581030002030808"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) sendmmsg$inet6(r1, &(0x7f000000d980)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x9, @empty, 0x7}, 0x1c, 0x0, 0x0, &(0x7f00000003c0)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hopopts_2292={{0x18, 0x29, 0x36, {0x3a}}}, @pktinfo={{0x24, 0x29, 0x32, {@local}}}], 0x58}}, {{&(0x7f0000000380)={0xa, 0x4e20, 0xa, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000e80)=[@rthdr_2292={{0x18, 0x29, 0x39, {0x73, 0x0, 0x2, 0xf}}}], 0x18}}], 0x2, 0x4000000) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000240)={0x40, 0xb, 0x81, {0x81, 0x22, "06f92f4630ce17397f8a672c505a299f60695258da955f7900e910a9e575e943794fdb21445e10f436c87e82505528a568cb7f831be21bf4a73f994e4bc3868befa1b69f4f9cabd6b199825bfed3644746743a3978863a0b103dbc5b5116f3f9475cc1c44a5c2fcc2c957cd2d351209c93599d853c2942cb3373af70c50775"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2m59.034749831s ago: executing program 2 (id=617): r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x100000000000000, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x4000, 0x0, 0x90, [], 0x2, 0x0, &(0x7f0000000100)=[{}, {}, {}]}, 0x108) ioctl$XFS_IOC_FSGEOMETRY(r0, 0x8100587e, &(0x7f0000000340)) r1 = inotify_init() setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="0200000000260000000000000400000000000008100000000000ebff20000000000000000af1b207000000a66f0bf1e1e56700193114b3159a8f78013563dd5a3da1955d0e29591cbb94922994d5dbc803a9345d44ce8e4e788c0e6054ea76777950a35da4e7e1837df0eabad1f135fc616ad3843dcbd6"], 0x24, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xe000000000000000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000000040)) timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000000440)=0x0) timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) timer_settime(r4, 0x1, &(0x7f0000000080)={{}, {r5, r6+10000000}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xfff2}, {0xd, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x220800c1}, 0x5) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r9, 0xf507, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x4}, {}, {0xffe0, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x80) r11 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$NILFS_IOCTL_RESIZE(r2, 0x40086e8b, &(0x7f0000000000)=0x6) ioctl$KVM_SET_VCPU_EVENTS(r11, 0x4040aea0, &(0x7f0000000180)=@arm64={0x40, 0xf8, 0x35, '\x00', 0x2}) ioctl$KVM_SET_MP_STATE(r11, 0x4004ae99, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r12 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r12, 0x29, 0x20, 0x0, 0x0) 2m55.267748672s ago: executing program 2 (id=619): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c000000180a01010000000000000000020000000900020073797a30000000000900010073797a3000000000140000001100010000"], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2m52.833686172s ago: executing program 2 (id=622): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r1 = dup(r0) syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000240)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='utf8,utf<,uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c696f6368611b727365743d69736f383835392d314d2c6769643d", @ANYRES32, @ANYRES8], 0x1, 0x1533, &(0x7f0000006800)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet(0x2, 0x1, 0xc1e) sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCSIFBR(r5, 0x8941, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1) open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) r6 = epoll_create(0x4000400) r7 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000200)={0xf0000007}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0xffff0000, 0xe000, 0xf000, 0x7, 0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x1, 0xddccb000, 0xf, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0x1}, {0x118004, 0xdddd8000, 0x18, 0xe, 0x0, 0x4, 0x81, 0x0, 0x80, 0xe, 0x4, 0x6}, {0x10b002, 0x2000, 0xc, 0xfd, 0x80, 0x0, 0x3}, {0x1000, 0x25000, 0xd, 0x8, 0x70, 0x81, 0x0, 0x0, 0xfd, 0x1c, 0x7, 0xa8}, {0x1, 0xeeef0000, 0x8, 0x4, 0x0, 0x8, 0x0, 0x0, 0x6, 0xfc, 0x86, 0xfe}, {0xeeee8000, 0x10000, 0xf, 0x6, 0x5, 0x0, 0x0, 0x81, 0x0, 0x4}, {0xd000, 0x41000, 0x3, 0x82, 0xfc, 0x10, 0x0, 0xe, 0x0, 0x2}, {0x0, 0x800}, {0x1, 0xfffe}, 0x40000010, 0x0, 0x0, 0x10, 0x1000000000000001, 0x0, 0x900, [0x0, 0x0, 0x2, 0x5]}) 2m37.507673351s ago: executing program 35 (id=622): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r1 = dup(r0) syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000240)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='utf8,utf<,uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c696f6368611b727365743d69736f383835392d314d2c6769643d", @ANYRES32, @ANYRES8], 0x1, 0x1533, &(0x7f0000006800)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet(0x2, 0x1, 0xc1e) sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCSIFBR(r5, 0x8941, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1) open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) r6 = epoll_create(0x4000400) r7 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000200)={0xf0000007}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0xffff0000, 0xe000, 0xf000, 0x7, 0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x1, 0xddccb000, 0xf, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0x1}, {0x118004, 0xdddd8000, 0x18, 0xe, 0x0, 0x4, 0x81, 0x0, 0x80, 0xe, 0x4, 0x6}, {0x10b002, 0x2000, 0xc, 0xfd, 0x80, 0x0, 0x3}, {0x1000, 0x25000, 0xd, 0x8, 0x70, 0x81, 0x0, 0x0, 0xfd, 0x1c, 0x7, 0xa8}, {0x1, 0xeeef0000, 0x8, 0x4, 0x0, 0x8, 0x0, 0x0, 0x6, 0xfc, 0x86, 0xfe}, {0xeeee8000, 0x10000, 0xf, 0x6, 0x5, 0x0, 0x0, 0x81, 0x0, 0x4}, {0xd000, 0x41000, 0x3, 0x82, 0xfc, 0x10, 0x0, 0xe, 0x0, 0x2}, {0x0, 0x800}, {0x1, 0xfffe}, 0x40000010, 0x0, 0x0, 0x10, 0x1000000000000001, 0x0, 0x900, [0x0, 0x0, 0x2, 0x5]}) 20.479503595s ago: executing program 8 (id=1019): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x81, 0x205}, 0x90) r1 = dup(r0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x8003, 0xbffc, 0xe652, 0x5, 0x134, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e22, 0xeffffff9, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff18b6, 0x3, 0xc, 0xffffffb9, 0x1a}, 0x9c) 18.695931805s ago: executing program 8 (id=1025): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000a40)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000012c0)={0x34, &(0x7f0000001080)={0x20, 0x11, 0x5, "3a4273f125"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 15.199237487s ago: executing program 8 (id=1034): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file2\x00', 0x2800000, &(0x7f0000000300)={[{@debug}, {@jqfmt_vfsv0}, {@inlinecrypt}, {@debug}, {@test_dummy_encryption_v1}, {@norecovery}, {@delalloc}, {@nogrpid}, {@minixdf}]}, 0x1, 0xbd9, &(0x7f0000000400)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) unshare(0x20000400) r3 = creat(0x0, 0xc7) close(r3) fadvise64(r3, 0x7fffffffffffffff, 0x1, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000140)={r4, 0x0, 0x0}, 0x20) setsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, 0x0, 0x0) r5 = open(0x0, 0x4c27e, 0x2) fallocate(r5, 0x0, 0x0, 0x1000f4) sendfile(r5, r5, 0x0, 0x400000000008004) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r7 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(0x4) 13.820281002s ago: executing program 6 (id=1041): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, 0xffffffffffffffff, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000580)='m'}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 11.951558682s ago: executing program 6 (id=1044): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000005980), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000059c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f0000005a80)={0x0, 0x0, &(0x7f0000005a40)={&(0x7f0000005a00)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010025bd7000fcdbdf251b00000008000300", @ANYRES32=r1, @ANYBLOB="10002e80040004"], 0x2c}, 0x1, 0x0, 0x0, 0x24000044}, 0x8014) 10.749123506s ago: executing program 6 (id=1047): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$nci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="710501"], 0x15) 9.080363063s ago: executing program 5 (id=1050): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'dummy0\x00', 0x0}) r2 = gettid() r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000304f9fff2ffbedbdf2500007400", @ANYRES32=r1, @ANYBLOB="089805000750050008001300", @ANYRES32=r2, @ANYBLOB="08002c0005000000140003007665"], 0x44}, 0x1, 0x0, 0x0, 0x44882}, 0x4000010) 8.99043405s ago: executing program 6 (id=1051): r0 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x100000000000000, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x4000, 0x0, 0x90, [], 0x2, 0x0, &(0x7f0000000100)=[{}, {}, {}]}, 0x108) ioctl$XFS_IOC_FSGEOMETRY(r0, 0x8100587e, &(0x7f0000000340)) r1 = inotify_init() setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="0200000000260000000000000400000000000008100000000000ebff20000000000000000af1b207000000a66f0bf1e1e56700193114b3159a8f78013563dd5a3da1955d0e29591cbb94922994d5dbc803a9345d44ce8e4e788c0e6054ea76777950a35da4e7e1837df0eabad1f135fc616ad3843dcbd6"], 0x24, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0xe000000000000000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000000040)) timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000000440)=0x0) timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) timer_settime(r4, 0x1, &(0x7f0000000080)={{}, {r5, r6+10000000}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xfff2}, {0xd, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x220800c1}, 0x5) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r8, 0xf507, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x24, 0x2c, 0x100, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xc, 0x9}, {0x2, 0xffff}, {0x18, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x10c5) r10 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$NILFS_IOCTL_RESIZE(r2, 0x40086e8b, &(0x7f0000000000)=0x6) ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4040aea0, &(0x7f0000000180)=@arm64={0x40, 0xf8, 0x35, '\x00', 0x2}) ioctl$KVM_SET_MP_STATE(r10, 0x4004ae99, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r11 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, 0x0, 0x0) 7.806170056s ago: executing program 5 (id=1054): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, 0xffffffffffffffff, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000580)='m'}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 6.46039783s ago: executing program 6 (id=1056): syz_usb_connect(0x5, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000fe76181004160780a6af0117030109021200010000000009"], 0x0) syz_open_dev$sndctrl(&(0x7f0000000d40), 0x2, 0x800) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x48, r2, 0x1, 0x70bd26, 0x25dfdc00, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x4f}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller1\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x93}, 0x24044884) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) 6.233990732s ago: executing program 8 (id=1057): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000005980), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000059c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f0000005a80)={0x0, 0x0, &(0x7f0000005a40)={&(0x7f0000005a00)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010025bd7000fcdbdf251b00000008000300", @ANYRES32=r1, @ANYBLOB="10002e80040004"], 0x2c}, 0x1, 0x0, 0x0, 0x24000044}, 0x8014) 6.168109487s ago: executing program 5 (id=1058): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10, 0x80}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, 0x0, 0x6e6bb5, 0x0, 0x0, 0x3, 0x2}}, 0xb8}}, 0x0) r1 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 5.907248729s ago: executing program 1 (id=1060): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r2, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 5.695404607s ago: executing program 5 (id=1061): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x3, 0x800, 0x6) 5.620468729s ago: executing program 7 (id=1062): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="100000000400000008000000080000000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r0, 0xfffffffffffffffd, &(0x7f0000000040)=""/122}, 0x20) 5.099810772s ago: executing program 8 (id=1063): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x200000, 0x3}, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000021c0)=ANY=[@ANYBLOB="20000000100001042dbd7000fcdbdf2500000000e2ebb76bfbf66b7e43d9b18ef6d2e88d97bacb7fe828b08b94f8ff1cd530867b719b3588c6975bb30004a742d931768606dc6fef1ee385495ef078840d99a2c96a026dd7e2bea3dde893df39ea021a3a8f9a0a1101db59d8aaa2ca1e89bea03fcd6645fdd0854529a5d6f6a0f954b40c03882c98a892b08868b5e02287d83f3b4f10f6c897b4a561b248", @ANYRES32=0x0, @ANYBLOB="0000000000010000"], 0x20}}, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) 4.906205632s ago: executing program 7 (id=1064): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'dummy0\x00', 0x0}) r2 = gettid() r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000304f9fff2ffbedbdf2500007400", @ANYRES32=r1, @ANYBLOB="089805000750050008001300", @ANYRES32=r2, @ANYBLOB="08002c0005000000140003007665"], 0x44}, 0x1, 0x0, 0x0, 0x44882}, 0x4000010) 4.655663335s ago: executing program 1 (id=1065): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x0, 0x0, &(0x7f00000005c0)='syzkaller\x00', 0x2}, 0x94) 4.257992473s ago: executing program 1 (id=1066): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05000000050000000203000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000b0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000ac0)={r1}, 0xc) 4.131931793s ago: executing program 6 (id=1067): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file2\x00', 0x2800000, &(0x7f0000000300)={[{@debug}, {@jqfmt_vfsv0}, {@inlinecrypt}, {@debug}, {@test_dummy_encryption_v1}, {@norecovery}, {@delalloc}, {@nogrpid}, {@minixdf}]}, 0x1, 0xbd9, &(0x7f0000000400)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) unshare(0x20000400) r3 = creat(0x0, 0xc7) close(r3) fadvise64(r3, 0x7fffffffffffffff, 0x1, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, 0x0, 0x0) r5 = open(0x0, 0x4c27e, 0x2) fallocate(r5, 0x0, 0x0, 0x1000f4) sendfile(r5, r5, 0x0, 0x400000000008004) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r7 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(0x4) 4.098284077s ago: executing program 7 (id=1068): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000580)='m'}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 3.710095733s ago: executing program 1 (id=1069): sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, 0x0, 0x80) r0 = socket$igmp(0x2, 0x3, 0x2) sendto$inet(r0, 0x0, 0x0, 0x4000, 0x0, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) unshare(0x2c020400) write$nci(r1, &(0x7f0000000900)=@NCI_OP_RF_DEACTIVATE_NTF={0x1, 0x1, 0x3, 0x6, 0x2, {0x2}}, 0x5) 3.378438897s ago: executing program 7 (id=1070): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x4, 0x7}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xe, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa0000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x26}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb11}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r1, 0x18000000000002a0, 0xd, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.440203408s ago: executing program 7 (id=1071): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10, 0x80}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, 0x0, 0x6e6bb5, 0x0, 0x0, 0x3, 0x2}}, 0xb8}}, 0x0) r1 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 1.700851265s ago: executing program 1 (id=1072): syz_emit_ethernet(0xb2, &(0x7f0000000080)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xa4, 0x0, 0x0, 0xfd, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x22, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6c, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x36}, {[@cipso={0x86, 0x65, 0x0, [{0x0, 0xc, "e256b28c04000000fb52"}, {0x0, 0x9, "789607675ca638"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x6, 0x7, "cfa11cab1a"}, {0x0, 0x10, "c600"/14}, {0x0, 0xa, "65807fe97612fe86"}, {0x0, 0x12, "73bc2300ad9d19a30000000000000000"}]}, @cipso={0x86, 0xc, 0x2, [{0x1, 0x6, "7f36c525"}]}]}}}}}}}, 0x0) 1.335167451s ago: executing program 5 (id=1073): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000005980), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000059c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f0000005a80)={0x0, 0x0, &(0x7f0000005a40)={&(0x7f0000005a00)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010025bd7000fcdbdf251b00000008000300", @ANYRES32=r1, @ANYBLOB="10002e80040004"], 0x2c}, 0x1, 0x0, 0x0, 0x24000044}, 0x8014) 959.161251ms ago: executing program 8 (id=1074): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000040), 0x4) sendmsg(r0, &(0x7f0000002d00)={0x0, 0x0, 0x0}, 0x40844) sendmsg$unix(r0, &(0x7f0000000640)={&(0x7f00000005c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, 0x0}, 0x0) 662.285642ms ago: executing program 1 (id=1075): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x1070bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000cc0)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0xffff, 0x3}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x57f}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x4e3, 0xca0b, 0x6, 0x3}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x40800}, 0x44000) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r7 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1, 0x0, 0x0, 0x86dd}, 0x4) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, 0x0, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 594.855557ms ago: executing program 7 (id=1076): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x0, 0x0, &(0x7f00000005c0)='syzkaller\x00', 0x2}, 0x94) 0s ago: executing program 5 (id=1077): syz_usb_connect(0x5, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000fe76181004160780a6af0117030109021200010000000009"], 0x0) syz_open_dev$sndctrl(&(0x7f0000000d40), 0x2, 0x800) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x48, r2, 0x1, 0x70bd26, 0x25dfdc00, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x4f}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller1\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x93}, 0x24044884) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) kernel console output (not intermixed with test programs): item 0 2 0 8 parsing failed [ 408.432981][ T5695] usb 3-1: SerialNumber: syz [ 408.463487][ T5683] apple 0003:05AC:0236.0013: parse failed [ 408.486915][ T5683] apple 0003:05AC:0236.0013: probe with driver apple failed with error -22 [ 408.530338][ T5695] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 408.564691][ T30] usb 6-1: USB disconnect, device number 20 [ 408.571887][ T4876] Bluetooth: hci4: command tx timeout [ 408.726795][ T6264] usb 3-1: Failed to submit usb control message: -71 [ 408.735282][ T5695] usb 3-1: USB disconnect, device number 17 [ 408.748167][ T6264] usb 3-1: unable to send the bmi data to the device: -71 [ 408.773583][ T6264] usb 3-1: unable to get target info from device [ 408.783483][ T6264] usb 3-1: could not get target info (-71) [ 408.790627][ T6264] usb 3-1: could not probe fw (-71) [ 409.047036][ T6905] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 409.106005][ T6905] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 409.156649][ T30] snd_usb_pod 2-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 409.169086][ T6905] bond0 (unregistering): Released all slaves [ 409.325228][ T5679] usb 2-1: USB disconnect, device number 40 [ 409.403440][ T5679] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 409.678384][ T6905] hsr_slave_0: left promiscuous mode [ 409.721685][ T6905] hsr_slave_1: left promiscuous mode [ 409.748072][ T6905] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 409.780983][ T6905] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 409.801300][ T6905] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 409.810591][ T6905] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 409.934780][ T6905] veth1_macvtap: left promiscuous mode [ 409.946941][ T6905] veth0_macvtap: left promiscuous mode [ 409.957727][ T7651] loop2: detected capacity change from 0 to 512 [ 409.964622][ T6905] veth1_vlan: left promiscuous mode [ 409.978103][ T6905] veth0_vlan: left promiscuous mode [ 411.146587][ T7656] 9p: Bad value for 'wfdno' [ 412.552583][ T6905] team0 (unregistering): Port device team_slave_1 removed [ 412.608053][ T6905] team0 (unregistering): Port device team_slave_0 removed [ 413.988812][ T30] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 414.169654][ T30] usb 3-1: Using ep0 maxpacket: 32 [ 414.201873][ T30] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 414.224757][ T30] usb 3-1: config 0 has no interface number 0 [ 414.244737][ T30] usb 3-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 414.302115][ T30] usb 3-1: config 0 interface 89 has no altsetting 0 [ 414.344647][ T30] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 414.383247][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.432739][ T30] usb 3-1: Product: syz [ 414.452333][ T30] usb 3-1: Manufacturer: syz [ 414.467730][ T30] usb 3-1: SerialNumber: syz [ 414.520431][ T30] usb 3-1: config 0 descriptor?? [ 414.570479][ T7689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.454'. [ 414.591520][ T30] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 414.637792][ T30] em28xx 3-1:0.89: Video interface 89 found: [ 415.196363][ T30] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 415.593323][ T7570] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.638402][ T7570] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.680714][ T7570] bridge_slave_0: entered allmulticast mode [ 415.703523][ T7570] bridge_slave_0: entered promiscuous mode [ 415.816501][ T7362] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 415.851350][ T7570] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.873636][ T30] em28xx 3-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 415.884046][ T7570] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.911905][ T7570] bridge_slave_1: entered allmulticast mode [ 415.922935][ T30] em28xx 3-1:0.89: board has no eeprom [ 415.958320][ T7570] bridge_slave_1: entered promiscuous mode [ 415.988246][ T30] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 416.040736][ T30] em28xx 3-1:0.89: analog set to bulk mode. [ 416.085178][ T5685] em28xx 3-1:0.89: Registering V4L2 extension [ 416.117764][ T5683] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 416.123379][ T30] usb 3-1: USB disconnect, device number 18 [ 416.159984][ T30] em28xx 3-1:0.89: Disconnecting em28xx [ 416.318783][ T5683] usb 2-1: Using ep0 maxpacket: 32 [ 416.385781][ T5683] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 416.427261][ T7570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 416.447726][ T5683] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 416.464923][ T5685] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 416.499678][ T5685] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 416.502611][ T5683] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 416.538666][ T5685] em28xx 3-1:0.89: No AC97 audio processor [ 416.562312][ T7570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 416.601239][ T5685] usb 3-1: Decoder not found [ 416.603932][ T5683] usb 2-1: config 1 has no interface number 0 [ 416.619796][ T5685] em28xx 3-1:0.89: failed to create media graph [ 416.635036][ T7712] loop5: detected capacity change from 0 to 512 [ 416.637954][ T5683] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 416.649789][ T5685] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 416.712211][ T5683] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 416.724579][ T5685] em28xx 3-1:0.89: Registering snapshot button... [ 416.784180][ T5685] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input25 [ 416.795954][ T5683] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 416.837907][ T5683] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.988219][ T5683] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 417.196481][ T5683] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 417.464624][ T5685] em28xx 3-1:0.89: Remote control support is not available for this card. [ 417.551170][ T30] em28xx 3-1:0.89: Closing input extension [ 417.713149][ T30] em28xx 3-1:0.89: Deregistering snapshot button [ 418.204813][ T5685] usb 2-1: USB disconnect, device number 41 [ 418.237156][ T5685] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 418.331400][ T7719] 9p: Bad value for 'wfdno' [ 418.555775][ T7570] team0: Port device team_slave_0 added [ 418.572434][ T30] em28xx 3-1:0.89: Freeing device [ 418.696265][ T7570] team0: Port device team_slave_1 added [ 419.041262][ T30] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 419.322022][ T30] usb 3-1: Using ep0 maxpacket: 16 [ 419.396371][ T30] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 419.553492][ T30] usb 3-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 419.621476][ T7570] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.701856][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.728322][ T7570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 419.822639][ T30] usb 3-1: Product: syz [ 419.862079][ T30] usb 3-1: Manufacturer: syz [ 419.893096][ T30] usb 3-1: SerialNumber: syz [ 419.945558][ T30] usb 3-1: config 0 descriptor?? [ 419.982395][ T7570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.009757][ T7570] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.036709][ T7570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 420.176541][ T7570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.189748][ T7729] Zero length message leads to an empty skb [ 420.422807][ T5230] 8021q: adding VLAN 0 to HW filter on device eth11 [ 420.424394][ T30] usb 3-1: can't set config #0, error -71 [ 420.522458][ T30] usb 3-1: USB disconnect, device number 19 [ 420.988824][ T7570] hsr_slave_0: entered promiscuous mode [ 421.040867][ T7570] hsr_slave_1: entered promiscuous mode [ 421.083615][ T7570] debugfs: 'hsr0' already exists in 'hsr' [ 421.096652][ T7570] Cannot create hsr debugfs directory [ 421.881791][ T30] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 422.042359][ T7753] loop2: detected capacity change from 0 to 512 [ 422.086995][ T30] usb 2-1: Using ep0 maxpacket: 32 [ 422.127175][ T30] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 422.154413][ T30] usb 2-1: config 0 has no interface number 0 [ 422.168819][ T30] usb 2-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 422.302229][ T5683] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 422.504196][ T5683] usb 6-1: Using ep0 maxpacket: 32 [ 422.563224][ T5683] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 422.622341][ T5683] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 422.693272][ T5683] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 422.755687][ T5683] usb 6-1: config 1 has no interface number 0 [ 422.783398][ T5683] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 422.786345][ T30] usb 2-1: config 0 interface 89 has no altsetting 0 [ 422.816669][ T30] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 422.826646][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.835818][ T30] usb 2-1: Product: syz [ 422.841496][ T30] usb 2-1: Manufacturer: syz [ 422.846459][ T30] usb 2-1: SerialNumber: syz [ 422.875323][ T30] usb 2-1: config 0 descriptor?? [ 423.843175][ T5683] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 423.853306][ T30] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 423.868375][ T7759] 9p: Bad value for 'wfdno' [ 423.886791][ T30] em28xx 2-1:0.89: Video interface 89 found: [ 424.791231][ T30] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 424.810672][ T5683] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 424.820167][ T5683] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.846605][ T5683] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 425.307009][ T7362] veth0_vlan: entered promiscuous mode [ 425.443052][ T5683] snd_usb_pod 6-1:1.1: set_interface failed [ 425.451223][ T5683] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 425.459945][ T5683] snd_usb_pod 6-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 425.505548][ T5683] usb 6-1: USB disconnect, device number 21 [ 425.538123][ T30] em28xx 2-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 425.567203][ T30] em28xx 2-1:0.89: board has no eeprom [ 425.649126][ T30] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 425.683803][ T7362] veth1_vlan: entered promiscuous mode [ 425.708391][ T30] em28xx 2-1:0.89: analog set to bulk mode. [ 425.725909][ T5686] em28xx 2-1:0.89: Registering V4L2 extension [ 425.799999][ T30] usb 2-1: USB disconnect, device number 42 [ 425.903655][ T30] em28xx 2-1:0.89: Disconnecting em28xx [ 426.030252][ T5683] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 426.193427][ T5686] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 426.226357][ T5686] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 426.227951][ T5683] usb 6-1: Using ep0 maxpacket: 16 [ 426.264183][ T5686] em28xx 2-1:0.89: No AC97 audio processor [ 426.300094][ T5686] usb 2-1: Decoder not found [ 426.303084][ T5683] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 426.316794][ T5686] em28xx 2-1:0.89: failed to create media graph [ 426.346300][ T5686] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 426.357321][ T5683] usb 6-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 426.405128][ T5683] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.417102][ T5686] em28xx 2-1:0.89: Registering snapshot button... [ 426.434650][ T7570] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 426.464076][ T5686] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input26 [ 426.464742][ T5683] usb 6-1: Product: syz [ 426.531729][ T5686] em28xx 2-1:0.89: Remote control support is not available for this card. [ 426.532957][ T5683] usb 6-1: Manufacturer: syz [ 426.549980][ T7570] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 426.583832][ T5683] usb 6-1: SerialNumber: syz [ 426.590844][ T7570] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 426.598863][ T30] em28xx 2-1:0.89: Closing input extension [ 426.598967][ T30] em28xx 2-1:0.89: Deregistering snapshot button [ 426.644915][ T5683] usb 6-1: config 0 descriptor?? [ 426.708863][ T5683] uvcvideo 6-1:0.0: Found UVC 0.00 device syz (046d:0721) [ 426.721125][ T7570] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 426.734301][ T5683] uvcvideo 6-1:0.0: No valid video chain found. [ 426.753250][ T30] em28xx 2-1:0.89: Freeing device [ 426.753757][ T7570] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 426.829907][ T7570] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 426.916682][ T5683] usb 6-1: USB disconnect, device number 22 [ 426.942964][ T7570] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 427.074511][ T7570] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 427.285491][ T7362] veth0_macvtap: entered promiscuous mode [ 427.373563][ T7362] veth1_macvtap: entered promiscuous mode [ 427.775313][ T7362] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 428.013579][ T7362] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 428.273734][ T6925] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.312465][ T6925] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.402086][ T5230] 8021q: adding VLAN 0 to HW filter on device eth12 [ 428.446834][ T6925] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.500202][ T6925] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.890683][ T5685] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 428.983402][ T7799] loop2: detected capacity change from 0 to 512 [ 429.087864][ T5685] usb 6-1: Using ep0 maxpacket: 32 [ 429.197326][ T7570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.526632][ T7570] 8021q: adding VLAN 0 to HW filter on device team0 [ 429.742408][ T5685] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 429.755959][ T6927] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.763602][ T6927] bridge0: port 1(bridge_slave_0) entered forwarding state [ 429.774194][ T5685] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 429.797595][ T5685] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 430.172150][ T5685] usb 6-1: config 1 has no interface number 0 [ 430.313856][ T5685] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 430.372387][ T5685] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 430.412286][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.419815][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.504236][ T5685] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 430.576407][ T5685] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.827703][ T5685] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 430.973682][ T5685] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 431.418554][ T5685] usb 6-1: USB disconnect, device number 23 [ 431.535364][ T5685] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 433.128749][ T5679] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 433.327745][ T5679] usb 2-1: Using ep0 maxpacket: 16 [ 433.387888][ T5679] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 433.447012][ T5679] usb 2-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 433.479273][ T5679] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.505169][ T5679] usb 2-1: Product: syz [ 433.532931][ T5679] usb 2-1: Manufacturer: syz [ 433.557759][ T5679] usb 2-1: SerialNumber: syz [ 433.622551][ T5679] usb 2-1: config 0 descriptor?? [ 433.710890][ T5679] uvcvideo 2-1:0.0: Found UVC 0.00 device syz (046d:0721) [ 433.752125][ T5679] uvcvideo 2-1:0.0: No valid video chain found. [ 433.921607][ T5679] usb 2-1: USB disconnect, device number 43 [ 435.138248][ T5686] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 435.219711][ T7855] loop1: detected capacity change from 0 to 512 [ 435.320177][ T5686] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 435.368336][ T5686] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 435.449266][ T5686] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 436.100920][ T5686] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.132336][ T5686] usb 3-1: config 0 descriptor?? [ 436.223893][ T5686] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 438.312352][ T5583] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 438.326504][ T5583] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 438.344083][ T5583] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 438.388997][ T5583] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 438.414637][ T5583] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 438.445865][ T5679] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 438.613575][ T5679] usb 6-1: Using ep0 maxpacket: 32 [ 438.629320][ T7570] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 438.668534][ T5679] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 438.720601][ T5679] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 438.770210][ T5679] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 438.828034][ T5679] usb 6-1: config 1 has no interface number 0 [ 438.858607][ T5679] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 438.934839][ T5679] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 439.016448][ T5679] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 439.063719][ T5679] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.234012][ T5679] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 439.353152][ T5679] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 439.668996][ T7812] usb 6-1: USB disconnect, device number 24 [ 439.721087][ T7812] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 439.735484][ T5679] usb 3-1: USB disconnect, device number 20 [ 440.378082][ T5679] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 440.475190][ T6822] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.488029][ T5583] Bluetooth: hci5: command tx timeout [ 440.561639][ T5679] usb 2-1: Using ep0 maxpacket: 16 [ 440.643099][ T5679] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 440.688310][ T5679] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 440.705387][ T5679] usb 2-1: Product: syz [ 440.721243][ T5679] usb 2-1: Manufacturer: syz [ 440.758424][ T5679] usb 2-1: SerialNumber: syz [ 440.765170][ T6822] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.806282][ T5679] usb 2-1: config 0 descriptor?? [ 440.984726][ T6822] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.269623][ T6822] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.435431][ T5679] usb 2-1: USB disconnect, device number 44 [ 441.642199][ T5897] udevd[5897]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 442.178104][ T6822] bridge_slave_1: left allmulticast mode [ 442.213918][ T6822] bridge_slave_1: left promiscuous mode [ 442.238575][ T6822] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.306056][ T6822] bridge_slave_0: left allmulticast mode [ 442.335345][ T6822] bridge_slave_0: left promiscuous mode [ 442.388418][ T6822] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.569773][ T5583] Bluetooth: hci5: command tx timeout [ 442.977697][ T7812] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 443.147693][ T5683] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 443.173942][ T7812] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 443.196734][ T6822] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 443.199655][ T7812] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 443.241612][ T7812] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.243368][ T6822] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 443.276731][ T7812] usb 6-1: config 0 descriptor?? [ 443.318255][ T5683] usb 2-1: Using ep0 maxpacket: 32 [ 443.331904][ T6822] bond0 (unregistering): Released all slaves [ 443.332004][ T7812] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 443.363892][ T5683] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 443.388316][ T5683] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 443.427916][ T5683] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 443.445145][ T5683] usb 2-1: config 1 has no interface number 0 [ 443.473285][ T5683] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 443.522864][ T5683] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 443.588560][ T5683] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 443.607211][ T5683] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.655750][ T5683] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 443.788207][ T6822] hsr_slave_0: left promiscuous mode [ 443.812116][ T6822] hsr_slave_1: left promiscuous mode [ 443.823380][ T6822] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 443.840403][ T6822] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 443.863564][ T6822] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 443.872071][ T5683] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 443.885493][ T6822] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 443.990646][ T6822] veth1_macvtap: left promiscuous mode [ 443.997043][ T6822] veth0_macvtap: left promiscuous mode [ 444.009286][ T6822] veth1_vlan: left promiscuous mode [ 444.014963][ T6822] veth0_vlan: left promiscuous mode [ 444.094443][ T7812] usb 2-1: USB disconnect, device number 45 [ 444.133220][ T7812] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 444.384849][ T7939] netlink: 12 bytes leftover after parsing attributes in process `syz.2.507'. [ 444.657744][ T5583] Bluetooth: hci5: command tx timeout [ 445.229717][ T5685] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 445.298678][ T6822] team0 (unregistering): Port device team_slave_1 removed [ 445.353713][ T6822] team0 (unregistering): Port device team_slave_0 removed [ 445.429778][ T5685] usb 2-1: Using ep0 maxpacket: 16 [ 445.478769][ T5685] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 445.527213][ T5685] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 445.537915][ T5685] usb 2-1: Product: syz [ 445.551793][ T5685] usb 2-1: Manufacturer: syz [ 445.585944][ T5685] usb 2-1: SerialNumber: syz [ 445.600044][ T5685] usb 2-1: config 0 descriptor?? [ 445.944122][ T7570] veth0_vlan: entered promiscuous mode [ 445.967009][ T5683] usb 6-1: USB disconnect, device number 25 [ 446.351273][ T5679] usb 2-1: USB disconnect, device number 46 [ 446.729403][ T5583] Bluetooth: hci5: command tx timeout [ 446.739259][ T7570] veth1_vlan: entered promiscuous mode [ 447.725248][ T7570] veth0_macvtap: entered promiscuous mode [ 447.838237][ T7570] veth1_macvtap: entered promiscuous mode [ 448.141033][ T7570] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 448.565139][ T7570] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 448.926373][ T6924] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.969131][ T6924] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.044077][ T6940] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.085590][ T6940] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.407937][ T5685] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 449.578081][ T5685] usb 6-1: Using ep0 maxpacket: 32 [ 449.597822][ T7812] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 449.606109][ T5685] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 449.643140][ T5685] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 449.664536][ T5685] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 449.701714][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 449.710556][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 449.722458][ T5685] usb 6-1: config 1 has no interface number 0 [ 449.752219][ T5685] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 449.765351][ T5685] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 449.779918][ T5685] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 449.794681][ T5685] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.843469][ T7812] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 449.886231][ T7812] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 449.898027][ T5685] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 449.924626][ T7812] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.984822][ T7812] usb 2-1: config 0 descriptor?? [ 450.056785][ T5685] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 450.105721][ T7812] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 450.192167][ T7867] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.231985][ T7867] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.246865][ T7867] bridge_slave_0: entered allmulticast mode [ 450.289746][ T7867] bridge_slave_0: entered promiscuous mode [ 450.352185][ T5679] usb 6-1: USB disconnect, device number 26 [ 450.391406][ T5679] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 450.392662][ T7867] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.432478][ T7867] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.464851][ T7867] bridge_slave_1: entered allmulticast mode [ 450.506136][ T7867] bridge_slave_1: entered promiscuous mode [ 450.721916][ T7867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 450.768153][ T5230] 8021q: adding VLAN 0 to HW filter on device eth13 [ 450.813139][ T7867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 451.053292][ T7867] team0: Port device team_slave_0 added [ 451.144388][ T7867] team0: Port device team_slave_1 added [ 451.518175][ T7867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 451.554385][ T7867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 451.637628][ T7867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 451.708808][ T7867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 451.740903][ T7867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 451.854940][ T7867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 452.423689][ T7867] hsr_slave_0: entered promiscuous mode [ 452.473056][ T7867] hsr_slave_1: entered promiscuous mode [ 452.510165][ T7867] debugfs: 'hsr0' already exists in 'hsr' [ 452.548710][ T7867] Cannot create hsr debugfs directory [ 452.838265][ T5685] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 452.924925][ T7812] usb 2-1: USB disconnect, device number 47 [ 453.027740][ T5685] usb 6-1: Using ep0 maxpacket: 16 [ 453.100712][ T5685] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 453.148799][ T5685] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 453.186552][ T5685] usb 6-1: Product: syz [ 453.200176][ T5685] usb 6-1: Manufacturer: syz [ 453.223133][ T5685] usb 6-1: SerialNumber: syz [ 453.265514][ T5685] usb 6-1: config 0 descriptor?? [ 453.883083][ T7812] usb 6-1: USB disconnect, device number 27 [ 454.204874][ T5897] udevd[5897]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 455.622720][ T7867] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 455.729834][ T7867] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 455.790715][ T7867] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 455.860158][ T7867] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 456.004211][ T7867] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 456.099997][ T7867] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 456.236929][ T7867] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 456.305277][ T7867] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 456.358123][ T11] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 456.362869][ T6924] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 456.424341][ T6924] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 456.549820][ T11] usb 6-1: Using ep0 maxpacket: 32 [ 456.569642][ T5685] IPVS: starting estimator thread 0... [ 456.591267][ T8065] IPVS: nq: FWM 3 0x00000003 - no destination available [ 456.619670][ T11] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 456.650891][ T11] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 456.699461][ T11] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 456.712956][ T8066] IPVS: using max 192 ests per chain, 9600 per kthread [ 456.721079][ T6940] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 456.753134][ T6940] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 456.772786][ T11] usb 6-1: config 1 has no interface number 0 [ 456.794250][ T11] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 456.844569][ T11] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 456.878300][ T11] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 456.915478][ T11] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.032160][ T11] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 457.188624][ T806] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 457.253564][ T11] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 457.436945][ T806] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 457.502881][ T806] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 457.562316][ T5685] usb 6-1: USB disconnect, device number 28 [ 457.570381][ T806] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.595184][ T806] usb 3-1: config 0 descriptor?? [ 457.678805][ T806] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 457.706773][ T5685] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 457.948015][ T11] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 457.994574][ T7867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 458.139628][ T11] usb 8-1: Using ep0 maxpacket: 8 [ 458.176174][ T11] usb 8-1: config 1 interface 0 has no altsetting 0 [ 458.224350][ T7867] 8021q: adding VLAN 0 to HW filter on device team0 [ 458.235420][ T11] usb 8-1: string descriptor 0 read error: -22 [ 458.252135][ T11] usb 8-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice= 0.40 [ 458.286148][ T11] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.314651][ T6822] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.322294][ T6822] bridge0: port 1(bridge_slave_0) entered forwarding state [ 458.561765][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.569442][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 458.709879][ T5685] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 458.876402][ T8078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 458.892231][ T8078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 458.938094][ T5685] usb 2-1: Using ep0 maxpacket: 16 [ 459.028514][ T11] apple 0003:05AC:0236.0014: unknown main item tag 0x5 [ 459.067800][ T5685] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 459.079392][ T11] apple 0003:05AC:0236.0014: unknown main item tag 0x6 [ 459.110667][ T5685] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 459.120652][ T11] apple 0003:05AC:0236.0014: unknown main item tag 0x4 [ 459.145918][ T5685] usb 2-1: Product: syz [ 459.175924][ T5685] usb 2-1: Manufacturer: syz [ 459.178102][ T11] apple 0003:05AC:0236.0014: item 0 2 0 8 parsing failed [ 459.194221][ T5685] usb 2-1: SerialNumber: syz [ 459.235684][ T5685] usb 2-1: config 0 descriptor?? [ 459.268050][ T11] apple 0003:05AC:0236.0014: parse failed [ 459.309205][ T11] apple 0003:05AC:0236.0014: probe with driver apple failed with error -22 [ 459.405857][ T11] usb 8-1: USB disconnect, device number 2 [ 460.022308][ T5685] usb 2-1: USB disconnect, device number 48 [ 460.602290][ T5897] udevd[5897]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 460.982275][ T5685] usb 3-1: USB disconnect, device number 21 [ 461.506027][ T5686] IPVS: starting estimator thread 0... [ 461.627892][ T8121] IPVS: using max 240 ests per chain, 12000 per kthread [ 461.802623][ T8123] netlink: 56 bytes leftover after parsing attributes in process `syz.7.540'. [ 462.560236][ T11] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 462.748290][ T11] usb 6-1: Using ep0 maxpacket: 32 [ 462.788048][ T11] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 462.834367][ T11] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 462.871461][ T11] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 462.911742][ T11] usb 6-1: config 1 has no interface number 0 [ 462.927847][ T5686] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 462.946340][ T11] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 463.031687][ T11] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 463.095204][ T11] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 463.142011][ T11] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.159006][ T5686] usb 3-1: Using ep0 maxpacket: 8 [ 463.200044][ T5686] usb 3-1: config 1 interface 0 has no altsetting 0 [ 463.270606][ T11] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 463.282750][ T5686] usb 3-1: string descriptor 0 read error: -22 [ 463.314995][ T5686] usb 3-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice= 0.40 [ 463.356711][ T5686] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.394923][ T11] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 463.745284][ T5685] usb 6-1: USB disconnect, device number 29 [ 463.795530][ T5685] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 463.964723][ T8142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.025745][ T8142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.062106][ T5686] apple 0003:05AC:0236.0015: unknown main item tag 0x5 [ 464.069743][ T5686] apple 0003:05AC:0236.0015: unknown main item tag 0x6 [ 464.086725][ T5686] apple 0003:05AC:0236.0015: unknown main item tag 0x4 [ 464.106096][ T5686] apple 0003:05AC:0236.0015: item 0 2 0 8 parsing failed [ 464.147322][ T5686] apple 0003:05AC:0236.0015: parse failed [ 464.159882][ T5686] apple 0003:05AC:0236.0015: probe with driver apple failed with error -22 [ 464.267237][ T5686] usb 3-1: USB disconnect, device number 22 [ 464.335183][ T7867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 465.147868][ T11] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 465.290101][ T8160] loop1: detected capacity change from 0 to 4096 [ 465.326087][ T8160] EXT4-fs: inline encryption not supported [ 465.370911][ T11] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 465.394202][ T8160] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 465.443163][ T11] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 465.460702][ T8160] EXT4-fs (loop1): Test dummy encryption mode enabled [ 465.505661][ T11] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 465.547659][ T8160] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c198, mo2=0003] [ 465.593914][ T11] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.647713][ T8160] System zones: 0-5 [ 465.720638][ T11] usb 6-1: config 0 descriptor?? [ 465.739538][ T8160] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 466.333449][ T11] keytouch 0003:0926:3333.0016: fixing up Keytouch IEC report descriptor [ 467.640485][ T11] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0016/input/input27 [ 470.003534][ T5685] IPVS: starting estimator thread 0... [ 470.158030][ T8194] IPVS: using max 192 ests per chain, 9600 per kthread [ 470.315190][ T7867] veth0_vlan: entered promiscuous mode [ 470.615432][ T7867] veth1_vlan: entered promiscuous mode [ 470.678224][ T11] keytouch 0003:0926:3333.0016: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 471.688686][ T11] usb 6-1: USB disconnect, device number 30 [ 472.550354][ T7867] veth0_macvtap: entered promiscuous mode [ 472.818986][ T7867] veth1_macvtap: entered promiscuous mode [ 473.892575][ T8207] fido_id[8207]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 474.094243][ T5590] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.387691][ T7867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 474.581996][ T7867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 474.691939][ T6100] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.701182][ T11] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 474.722134][ T6100] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.771186][ T6100] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.825599][ T6100] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.909555][ T11] usb 6-1: Using ep0 maxpacket: 32 [ 474.960087][ T11] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 475.029518][ T11] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 475.126638][ T11] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 475.228783][ T11] usb 6-1: config 1 has no interface number 0 [ 475.279043][ T11] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 475.329317][ T11] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 475.381855][ T5683] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 475.397318][ T11] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 475.439077][ T806] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 475.452073][ T11] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.523767][ T11] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 475.596780][ T5683] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 475.633675][ T5683] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.651391][ T806] usb 2-1: Using ep0 maxpacket: 8 [ 475.682519][ T806] usb 2-1: config 1 interface 0 has no altsetting 0 [ 475.701794][ T5683] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 475.724465][ T11] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 475.742994][ T5683] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.770141][ T806] usb 2-1: string descriptor 0 read error: -22 [ 475.792174][ T806] usb 2-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice= 0.40 [ 475.822621][ T5683] usb 8-1: config 0 descriptor?? [ 475.833298][ T806] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.101908][ T7812] usb 6-1: USB disconnect, device number 31 [ 476.196335][ T7812] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 476.380599][ T5683] keytouch 0003:0926:3333.0017: fixing up Keytouch IEC report descriptor [ 476.489604][ T806] apple 0003:05AC:0236.0018: unknown main item tag 0x5 [ 476.527201][ T5683] input: HID 0926:3333 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0926:3333.0017/input/input28 [ 476.541510][ T806] apple 0003:05AC:0236.0018: unknown main item tag 0x6 [ 476.580369][ T806] apple 0003:05AC:0236.0018: unknown main item tag 0x4 [ 476.605389][ T806] apple 0003:05AC:0236.0018: item 0 2 0 8 parsing failed [ 476.656661][ T806] apple 0003:05AC:0236.0018: parse failed [ 476.710711][ T806] apple 0003:05AC:0236.0018: probe with driver apple failed with error -22 [ 476.815596][ T806] usb 2-1: USB disconnect, device number 49 [ 476.973993][ T5683] keytouch 0003:0926:3333.0017: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.7-1/input0 [ 477.536642][ T8251] netlink: 12 bytes leftover after parsing attributes in process `syz.5.562'. [ 477.784772][ T8251] netlink: 12 bytes leftover after parsing attributes in process `syz.5.562'. [ 477.786620][ T35] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.829179][ T806] usb 8-1: reset high-speed USB device number 3 using dummy_hcd [ 477.909539][ T35] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.015225][ T35] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.057750][ T35] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.095403][ T8257] netlink: 12 bytes leftover after parsing attributes in process `syz.1.564'. [ 479.387088][ T8265] loop5: detected capacity change from 0 to 4096 [ 479.425590][ T8265] EXT4-fs: inline encryption not supported [ 479.465429][ T5683] usb 8-1: USB disconnect, device number 3 [ 479.498229][ T8265] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 479.558774][ T8265] EXT4-fs (loop5): Test dummy encryption mode enabled [ 479.671163][ T8265] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c198, mo2=0003] [ 479.784702][ T8265] System zones: 0-5 [ 479.911242][ T8265] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 480.752893][ T5683] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 481.928177][ T5683] usb 2-1: Using ep0 maxpacket: 32 [ 482.791634][ T8301] IPVS: nq: FWM 3 0x00000003 - no destination available [ 482.823548][ T7812] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 482.891151][ T5683] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 482.900351][ T5683] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 482.912175][ T5683] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 483.008187][ T7812] usb 8-1: Using ep0 maxpacket: 8 [ 483.073401][ T7812] usb 8-1: config 1 interface 0 has no altsetting 0 [ 483.155000][ T7812] usb 8-1: string descriptor 0 read error: -22 [ 483.208079][ T7812] usb 8-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice= 0.40 [ 483.310686][ T7812] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.884637][ T5683] usb 2-1: config 1 has no interface number 0 [ 483.891164][ T5683] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 483.902379][ T5683] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 483.915793][ T5683] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 483.925266][ T5683] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.286681][ T7812] apple 0003:05AC:0236.0019: unknown main item tag 0x5 [ 484.377965][ T7812] apple 0003:05AC:0236.0019: unknown main item tag 0x6 [ 484.472500][ T7812] apple 0003:05AC:0236.0019: unknown main item tag 0x4 [ 484.536621][ T7812] apple 0003:05AC:0236.0019: item 0 2 0 8 parsing failed [ 484.687832][ T7812] apple 0003:05AC:0236.0019: parse failed [ 484.778304][ T7812] apple 0003:05AC:0236.0019: probe with driver apple failed with error -22 [ 484.901995][ T5683] usb 2-1: can't set config #1, error -71 [ 484.922562][ T5683] usb 2-1: USB disconnect, device number 50 [ 484.973260][ T7812] usb 8-1: USB disconnect, device number 4 [ 485.838162][ T5686] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 485.912371][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 486.078217][ T5686] usb 3-1: device descriptor read/64, error -32 [ 486.411792][ T5686] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 486.691882][ T5686] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 486.834734][ T5686] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 486.936803][ T5686] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 487.035899][ T5686] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.108008][ T3297] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.190623][ T5686] usb 3-1: config 0 descriptor?? [ 487.310269][ T3297] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.718710][ T5685] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 487.955991][ T6925] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.979405][ T6925] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.989237][ T5686] keytouch 0003:0926:3333.001A: fixing up Keytouch IEC report descriptor [ 488.033153][ T5931] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.054968][ T5685] usb 2-1: Using ep0 maxpacket: 32 [ 488.153815][ T5685] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 488.192558][ T5686] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.001A/input/input29 [ 488.206262][ T5685] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 488.261489][ T5685] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 488.319448][ T5685] usb 2-1: config 1 has no interface number 0 [ 488.357720][ T5685] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 488.418118][ T5685] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 488.483709][ T5685] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 488.558149][ T5686] keytouch 0003:0926:3333.001A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 488.573745][ T5685] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.810983][ T5685] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 488.949672][ T5685] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 489.331216][ T5686] usb 2-1: USB disconnect, device number 51 [ 489.382931][ T5686] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 489.428998][ T5685] usb 3-1: reset high-speed USB device number 24 using dummy_hcd [ 489.932082][ T8346] IPVS: nq: FWM 3 0x00000003 - no destination available [ 490.592756][ T8349] fuse: Unknown parameter 'group_id00000000000000000000' [ 490.919189][ T5686] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 491.123209][ T5686] usb 2-1: Using ep0 maxpacket: 8 [ 491.197223][ T5686] usb 2-1: config 1 interface 0 has no altsetting 0 [ 491.273994][ T5686] usb 2-1: string descriptor 0 read error: -22 [ 491.303480][ T5686] usb 2-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice= 0.40 [ 491.350057][ T7812] usb 3-1: USB disconnect, device number 24 [ 491.397010][ T5686] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.070591][ T5686] apple 0003:05AC:0236.001B: unknown main item tag 0x5 [ 492.124205][ T5686] apple 0003:05AC:0236.001B: unknown main item tag 0x6 [ 492.187990][ T5686] apple 0003:05AC:0236.001B: unknown main item tag 0x4 [ 492.225031][ T5686] apple 0003:05AC:0236.001B: item 0 2 0 8 parsing failed [ 492.284679][ T5686] apple 0003:05AC:0236.001B: parse failed [ 492.326048][ T5686] apple 0003:05AC:0236.001B: probe with driver apple failed with error -22 [ 492.417289][ T5686] usb 2-1: USB disconnect, device number 52 [ 492.497185][ T8373] loop2: detected capacity change from 0 to 4096 [ 492.536441][ T8373] EXT4-fs: inline encryption not supported [ 492.611041][ T8373] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 492.652279][ T8373] EXT4-fs (loop2): Test dummy encryption mode enabled [ 492.703714][ T8378] netlink: 64 bytes leftover after parsing attributes in process `syz.5.592'. [ 492.742310][ T8373] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c198, mo2=0003] [ 492.802901][ T8373] System zones: 0-5 [ 492.898096][ T8373] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 492.919278][ T8383] syzkaller1: entered promiscuous mode [ 492.978410][ T8383] syzkaller1: entered allmulticast mode [ 494.388739][ T5686] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 494.663022][ T5686] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 494.721125][ T5686] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 494.764630][ T5686] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.871097][ T5686] usb 8-1: config 0 descriptor?? [ 497.658990][ T8414] xt_hashlimit: size too large, truncated to 1048576 [ 499.520172][ T5686] usbhid 8-1:0.0: can't add hid device: -71 [ 499.623465][ T5686] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 500.209268][ T5686] usb 8-1: USB disconnect, device number 5 [ 500.987536][ T5591] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 501.101507][ T8429] netlink: 8 bytes leftover after parsing attributes in process `syz.7.604'. [ 502.099798][ T806] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 502.298448][ T806] usb 3-1: Using ep0 maxpacket: 8 [ 502.346954][ T806] usb 3-1: config 1 interface 0 has no altsetting 0 [ 502.420158][ T806] usb 3-1: string descriptor 0 read error: -22 [ 502.450710][ T806] usb 3-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice= 0.40 [ 502.471150][ T8447] netlink: 'syz.5.609': attribute type 29 has an invalid length. [ 502.510335][ T806] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.549103][ T8448] netlink: 'syz.5.609': attribute type 29 has an invalid length. [ 502.636447][ T8447] netlink: 'syz.5.609': attribute type 32 has an invalid length. [ 502.668986][ T8447] netlink: 500 bytes leftover after parsing attributes in process `syz.5.609'. [ 503.288411][ T806] usbhid 3-1:1.0: can't add hid device: -71 [ 503.348968][ T806] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 503.409798][ T806] usb 3-1: USB disconnect, device number 25 [ 503.598639][ T5686] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 503.757783][ T5686] usb 2-1: device descriptor read/64, error -71 [ 504.038177][ T5686] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 504.123079][ T7812] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 504.189344][ T5686] usb 2-1: device descriptor read/64, error -71 [ 504.300737][ T7812] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 504.315632][ T5686] usb usb2-port1: attempt power cycle [ 504.362160][ T7812] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 504.405350][ T7812] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.448269][ T8468] loop7: detected capacity change from 0 to 4096 [ 504.479617][ T7812] usb 7-1: config 0 descriptor?? [ 504.494314][ T8468] EXT4-fs: inline encryption not supported [ 504.551040][ T8468] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 504.617110][ T8468] EXT4-fs (loop7): Test dummy encryption mode enabled [ 504.682567][ T8468] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c198, mo2=0003] [ 504.698996][ T8468] System zones: 0-5 [ 504.733542][ T5686] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 504.758986][ T8468] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 504.776827][ T5686] usb 2-1: device descriptor read/8, error -71 [ 506.367939][ T5686] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 508.019315][ T5686] usb 2-1: device descriptor read/8, error -71 [ 508.260012][ T5686] usb usb2-port1: unable to enumerate USB device [ 509.339901][ T7812] usbhid 7-1:0.0: can't add hid device: -71 [ 509.443971][ T7812] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 509.667179][ T7812] usb 7-1: USB disconnect, device number 2 [ 510.131527][ T8484] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 510.466055][ T8484] syzkaller0: entered promiscuous mode [ 510.555695][ T8484] syzkaller0: entered allmulticast mode [ 510.950209][ T7812] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 511.141743][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 511.155656][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 511.191186][ T8502] loop2: detected capacity change from 0 to 256 [ 511.208082][ T7812] usb 7-1: Using ep0 maxpacket: 8 [ 511.235145][ T7812] usb 7-1: config 1 interface 0 has no altsetting 0 [ 511.283955][ T7812] usb 7-1: string descriptor 0 read error: -22 [ 511.357897][ T7812] usb 7-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice= 0.40 [ 511.370842][ T8502] exfat: Deprecated parameter 'utf8' [ 511.444917][ T8502] exfat: Unknown parameter 'utf<' [ 511.480167][ T7812] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.043951][ T7570] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.063853][ T8510] xt_hashlimit: size too large, truncated to 1048576 [ 513.100320][ T8499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.154031][ T8499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.310370][ T7812] apple 0003:05AC:0236.001C: unknown main item tag 0x5 [ 513.390011][ T7812] apple 0003:05AC:0236.001C: unknown main item tag 0x6 [ 513.435465][ T7812] apple 0003:05AC:0236.001C: unknown main item tag 0x4 [ 513.468640][ T7812] apple 0003:05AC:0236.001C: item 0 2 0 8 parsing failed [ 513.531703][ T7812] apple 0003:05AC:0236.001C: parse failed [ 513.582126][ T7812] apple 0003:05AC:0236.001C: probe with driver apple failed with error -22 [ 513.696090][ T7812] usb 7-1: USB disconnect, device number 3 [ 514.982988][ T7812] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 515.161399][ T7812] usb 7-1: Using ep0 maxpacket: 8 [ 515.232708][ T7812] usb 7-1: config 1 interface 0 has no altsetting 0 [ 515.311387][ T7812] usb 7-1: string descriptor 0 read error: -22 [ 515.339151][ T7812] usb 7-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice= 0.40 [ 515.373349][ T7812] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.265905][ T7812] usbhid 7-1:1.0: can't add hid device: -71 [ 516.293212][ T7812] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 516.375421][ T7812] usb 7-1: USB disconnect, device number 4 [ 516.658364][ T5686] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 516.820745][ T5686] usb 8-1: device descriptor read/64, error -71 [ 516.930547][ T806] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 517.120731][ T5686] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 517.140266][ T806] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 517.206476][ T806] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 517.250037][ T806] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.287927][ T806] usb 6-1: config 0 descriptor?? [ 517.300738][ T5686] usb 8-1: device descriptor read/64, error -71 [ 517.456944][ T5686] usb usb8-port1: attempt power cycle [ 517.838734][ T5686] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 517.900913][ T5686] usb 8-1: device descriptor read/8, error -71 [ 518.076336][ T8555] tipc: Started in network mode [ 518.115480][ T8555] tipc: Node identity d25a228a5464, cluster identity 4711 [ 518.129613][ T8555] tipc: Enabled bearer , priority 0 [ 518.201681][ T5686] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 518.265488][ T5686] usb 8-1: device descriptor read/8, error -71 [ 518.414698][ T5686] usb usb8-port1: unable to enumerate USB device [ 518.660890][ T8558] syzkaller0: entered promiscuous mode [ 518.693052][ T8558] syzkaller0: entered allmulticast mode [ 518.764342][ T8558] tipc: Resetting bearer [ 518.818187][ T8553] tipc: Resetting bearer [ 519.426760][ T8553] tipc: Disabling bearer [ 519.529224][ T5686] tipc: Node number set to 2252219018 [ 520.338309][ T5686] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 520.530816][ T5686] usb 8-1: Using ep0 maxpacket: 8 [ 520.569615][ T5686] usb 8-1: config 1 interface 0 has no altsetting 0 [ 520.589047][ T806] usbhid 6-1:0.0: can't add hid device: -71 [ 520.633332][ T806] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 520.645788][ T5686] usb 8-1: string descriptor 0 read error: -22 [ 520.671034][ T5686] usb 8-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice= 0.40 [ 520.715102][ T806] usb 6-1: USB disconnect, device number 32 [ 520.719583][ T5686] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.396000][ T8574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 521.469622][ T8574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 521.583403][ T5686] apple 0003:05AC:0236.001D: unknown main item tag 0x5 [ 521.631289][ T5686] apple 0003:05AC:0236.001D: unknown main item tag 0x6 [ 521.663892][ T5686] apple 0003:05AC:0236.001D: unknown main item tag 0x4 [ 521.714611][ T5686] apple 0003:05AC:0236.001D: item 0 2 0 8 parsing failed [ 521.774596][ T5686] apple 0003:05AC:0236.001D: parse failed [ 521.794094][ T5686] apple 0003:05AC:0236.001D: probe with driver apple failed with error -22 [ 521.907642][ T5686] usb 8-1: USB disconnect, device number 10 [ 522.290898][ T8599] xt_hashlimit: size too large, truncated to 1048576 [ 522.706564][ T8592] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 523.315652][ T8607] syzkaller0: entered promiscuous mode [ 523.351743][ T8607] syzkaller0: entered allmulticast mode [ 523.448399][ T8583] Bluetooth: hci4: command 0x0406 tx timeout [ 524.325566][ T5686] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 524.559784][ T5686] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 524.595878][ T5686] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 524.614584][ T5686] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.674985][ T5686] usb 8-1: config 0 descriptor?? [ 526.892879][ T8625] syz.1.653 (8625): drop_caches: 2 [ 527.392032][ T5686] usbhid 8-1:0.0: can't add hid device: -71 [ 527.415668][ T5686] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 527.416049][ T8583] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 527.442141][ T8583] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 527.451769][ T8583] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 527.474833][ T8583] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 527.493130][ T8583] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 527.514547][ T5686] usb 8-1: USB disconnect, device number 11 [ 528.143789][ T8623] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 528.393816][ T8650] netlink: 8 bytes leftover after parsing attributes in process `syz.5.659'. [ 528.956114][ T8656] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 529.139592][ T8663] xt_hashlimit: size too large, truncated to 1048576 [ 529.608332][ T8583] Bluetooth: hci1: command tx timeout [ 530.322219][ T8678] loop7: detected capacity change from 0 to 512 [ 531.355624][ T8674] syz.1.666 (8674): drop_caches: 2 [ 531.688430][ T8583] Bluetooth: hci1: command tx timeout [ 533.308382][ T8692] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 533.635531][ T8707] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 533.769090][ T8583] Bluetooth: hci1: command tx timeout [ 535.194660][ T8729] syz.1.682 uses obsolete (PF_INET,SOCK_PACKET) [ 535.847847][ T8583] Bluetooth: hci1: command tx timeout [ 535.904945][ T8725] syz.7.680 (8725): drop_caches: 2 [ 536.674681][ T8747] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 536.894197][ T8637] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.916766][ T8637] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.948240][ T8637] bridge_slave_0: entered allmulticast mode [ 536.973150][ T8637] bridge_slave_0: entered promiscuous mode [ 537.008284][ T8637] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.016429][ T8637] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.062921][ T8637] bridge_slave_1: entered allmulticast mode [ 537.115052][ T8637] bridge_slave_1: entered promiscuous mode [ 537.304316][ T8741] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 537.618309][ T8637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 537.730980][ T8637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 538.184858][ T8637] team0: Port device team_slave_0 added [ 538.295698][ T8637] team0: Port device team_slave_1 added [ 538.742692][ T8637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 538.774550][ T8637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 538.877928][ T8637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 539.057852][ T8637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 539.106127][ T8637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 539.207121][ T8637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 539.338609][ T8769] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 539.434118][ T8771] syz.5.695 (8771): drop_caches: 2 [ 539.945038][ T8637] hsr_slave_0: entered promiscuous mode [ 539.989474][ T8637] hsr_slave_1: entered promiscuous mode [ 540.023181][ T8637] debugfs: 'hsr0' already exists in 'hsr' [ 540.083656][ T8637] Cannot create hsr debugfs directory [ 542.845871][ T8637] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 542.965916][ T8637] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 543.030832][ T8637] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 543.099965][ T8637] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 543.165811][ T8637] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 543.275341][ T8637] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 543.324698][ T8637] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 543.327116][ T8807] syz.6.709 (8807): drop_caches: 2 [ 543.446331][ T8637] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 544.038380][ T806] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 544.238723][ T806] usb 8-1: Using ep0 maxpacket: 32 [ 544.283806][ T806] usb 8-1: config index 0 descriptor too short (expected 35577, got 27) [ 544.321392][ T806] usb 8-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 544.370019][ T806] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 544.416336][ T806] usb 8-1: config 1 has no interface number 0 [ 544.456580][ T806] usb 8-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 544.524703][ T806] usb 8-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 544.621248][ T806] usb 8-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 544.662196][ T806] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.795353][ T806] snd_usb_pod 8-1:1.1: Line 6 Pocket POD found [ 544.994245][ T806] snd_usb_pod 8-1:1.1: Line 6 Pocket POD now attached [ 545.371466][ T806] usb 8-1: USB disconnect, device number 12 [ 545.423585][ T806] snd_usb_pod 8-1:1.1: Line 6 Pocket POD now disconnected [ 545.444009][ T8637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 545.683487][ T8637] 8021q: adding VLAN 0 to HW filter on device team0 [ 545.797239][ T6925] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.804849][ T6925] bridge0: port 1(bridge_slave_0) entered forwarding state [ 545.920409][ T6264] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.927999][ T6264] bridge0: port 2(bridge_slave_1) entered forwarding state [ 547.027615][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 547.084479][ T8837] syz.6.721 (8837): drop_caches: 2 [ 549.166880][ T8854] netlink: 36 bytes leftover after parsing attributes in process `syz.7.726'. [ 550.573203][ T11] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 550.777966][ T11] usb 2-1: Using ep0 maxpacket: 32 [ 550.834797][ T8866] binder_alloc: 8865: binder_alloc_buf, no vma [ 550.845209][ T11] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 550.880071][ T11] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 550.940432][ T11] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 550.985147][ T11] usb 2-1: config 1 has no interface number 0 [ 551.022674][ T11] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 551.095557][ T11] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 551.165771][ T11] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 551.205718][ T11] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.329376][ T8871] syz.5.732 (8871): drop_caches: 2 [ 551.349412][ T11] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 551.507814][ T11] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 551.885551][ T7812] usb 2-1: USB disconnect, device number 57 [ 551.942994][ T7812] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 552.175547][ T6822] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.318345][ T8637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 552.468898][ T6822] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.824666][ T6822] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.088767][ T6822] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.717875][ T11] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 553.913717][ T6822] bridge_slave_1: left allmulticast mode [ 553.915384][ T11] usb 6-1: Using ep0 maxpacket: 16 [ 553.946041][ T6822] bridge_slave_1: left promiscuous mode [ 553.974121][ T6822] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.977652][ T11] usb 6-1: no configurations [ 554.003837][ T11] usb 6-1: can't read configurations, error -22 [ 554.158204][ T11] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 554.358731][ T11] usb 6-1: Using ep0 maxpacket: 16 [ 554.376207][ T11] usb 6-1: no configurations [ 554.388568][ T11] usb 6-1: can't read configurations, error -22 [ 554.422007][ T11] usb usb6-port1: attempt power cycle [ 554.818237][ T11] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 554.885068][ T11] usb 6-1: Using ep0 maxpacket: 16 [ 554.930942][ T11] usb 6-1: no configurations [ 554.943503][ T11] usb 6-1: can't read configurations, error -22 [ 555.114039][ T11] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 555.166046][ T11] usb 6-1: Using ep0 maxpacket: 16 [ 555.185509][ T11] usb 6-1: no configurations [ 555.199502][ T11] usb 6-1: can't read configurations, error -22 [ 555.240453][ T11] usb usb6-port1: unable to enumerate USB device [ 555.358640][ T6822] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 555.387268][ T6822] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 555.419684][ T6822] bond0 (unregistering): Released all slaves [ 555.719658][ T6822] tipc: Left network mode [ 556.622298][ T6822] hsr_slave_0: left promiscuous mode [ 556.666614][ T6822] hsr_slave_1: left promiscuous mode [ 556.691027][ T6822] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 556.724859][ T6822] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 556.754956][ T8922] binder_alloc: 8918: binder_alloc_buf, no vma [ 556.796079][ T6822] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 556.852164][ T6822] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 556.992334][ T6822] veth1_macvtap: left promiscuous mode [ 557.022848][ T6822] veth0_macvtap: left promiscuous mode [ 557.070442][ T6822] veth1_vlan: left promiscuous mode [ 557.105070][ T6822] veth0_vlan: left promiscuous mode [ 557.755099][ T8929] syz.1.745 (8929): drop_caches: 2 [ 557.943808][ T8934] Bluetooth: MGMT ver 1.23 [ 558.270100][ T8939] netlink: 20 bytes leftover after parsing attributes in process `syz.7.748'. [ 559.061255][ T6822] team0 (unregistering): Port device team_slave_1 removed [ 559.118195][ T6822] team0 (unregistering): Port device team_slave_0 removed [ 560.007912][ T8583] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 560.014414][ T5583] Bluetooth: hci0: command 0x0c1a tx timeout [ 560.453605][ T8637] veth0_vlan: entered promiscuous mode [ 560.513042][ T5230] 8021q: adding VLAN 0 to HW filter on device eth13 [ 560.613796][ T6822] IPVS: stop unused estimator thread 0... [ 561.000010][ T8967] syzkaller0: entered promiscuous mode [ 561.034435][ T8967] syzkaller0: entered allmulticast mode [ 561.081888][ T8959] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 561.682867][ T8637] veth1_vlan: entered promiscuous mode [ 561.939391][ T8982] netlink: 12 bytes leftover after parsing attributes in process `syz.1.758'. [ 562.454369][ T8637] veth0_macvtap: entered promiscuous mode [ 562.567797][ T8637] veth1_macvtap: entered promiscuous mode [ 562.704997][ T8986] syz.6.759 (8986): drop_caches: 2 [ 562.889186][ T8637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 563.164205][ T8637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 563.499122][ T9000] binder_alloc: 8994: binder_alloc_buf, no vma [ 563.513429][ T8999] netlink: 40 bytes leftover after parsing attributes in process `syz.1.762'. [ 563.526921][ T6100] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.547252][ T8999] block nbd0: not configured, cannot reconfigure [ 563.565707][ T6940] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.639341][ T6929] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.675859][ T6929] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.410180][ T8583] Bluetooth: hci5: command 0x0406 tx timeout [ 565.664159][ T9016] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 566.070059][ T9033] tipc: Started in network mode [ 566.085034][ T9033] tipc: Node identity 7640a688e6e, cluster identity 4711 [ 566.123911][ T9033] tipc: Enabled bearer , priority 0 [ 566.560174][ T9044] loop6: detected capacity change from 0 to 256 [ 566.614069][ T9044] exfat: Deprecated parameter 'utf8' [ 566.631839][ T9035] syzkaller0: entered promiscuous mode [ 566.639552][ T9044] exfat: Unknown parameter 'utf<' [ 566.658765][ T9035] syzkaller0: entered allmulticast mode [ 566.702185][ T9035] tipc: Resetting bearer [ 566.881530][ T6822] tipc: Resetting bearer [ 567.015996][ T9031] tipc: Resetting bearer [ 567.453690][ T9051] netlink: 216 bytes leftover after parsing attributes in process `syz.7.773'. [ 568.578998][ T9031] tipc: Disabling bearer [ 569.340256][ T11] tipc: Node number set to 2426447496 [ 573.113026][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 573.125154][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 574.195524][ T5230] 8021q: adding VLAN 0 to HW filter on device eth14 [ 574.615082][ T9078] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 575.749758][ T9108] syzkaller0: entered promiscuous mode [ 575.785892][ T9108] syzkaller0: entered allmulticast mode [ 576.003804][ T9114] loop5: detected capacity change from 0 to 256 [ 576.033524][ T9114] exfat: Deprecated parameter 'utf8' [ 576.062576][ T9114] exfat: Unknown parameter 'utf<' [ 583.410690][ T6100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 583.468361][ T6100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 583.612672][ T5685] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 583.773894][ T6100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 583.810168][ T5685] usb 2-1: Using ep0 maxpacket: 32 [ 583.839343][ T5685] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 583.845487][ T6100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 583.883796][ T5685] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 583.921474][ T5685] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 583.966496][ T5685] usb 2-1: config 1 has no interface number 0 [ 584.010828][ T5685] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 584.066000][ T5685] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 584.118113][ T5685] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 584.150370][ T5685] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.298028][ T5685] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 584.329477][ T7812] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 584.533017][ T7812] usb 7-1: Using ep0 maxpacket: 32 [ 584.541270][ T5685] snd_usb_pod 2-1:1.1: set_interface failed [ 584.590235][ T5685] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 584.598123][ T7812] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 584.643205][ T5685] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 584.662598][ T7812] usb 7-1: config 0 has no interface number 0 [ 584.686665][ T7812] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 584.718027][ T5685] usb 2-1: USB disconnect, device number 58 [ 584.740379][ T7812] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 584.794842][ T7812] usb 7-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 584.837143][ T7812] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.904647][ T7812] usb 7-1: config 0 descriptor?? [ 585.071974][ T9171] loop7: detected capacity change from 0 to 256 [ 585.080162][ T11] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 585.170804][ T9171] exfat: Deprecated parameter 'utf8' [ 585.224663][ T9171] exfat: Unknown parameter 'utf<' [ 585.331728][ T11] usb 9-1: Using ep0 maxpacket: 8 [ 585.490501][ T11] usb 9-1: config 1 interface 0 has no altsetting 0 [ 585.729893][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 586.860265][ T11] usb 9-1: string descriptor 0 read error: -22 [ 586.869436][ T11] usb 9-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice= 0.40 [ 586.878999][ T7812] input: HID 28bd:0094 Pen as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.1/0003:28BD:0094.001E/input/input30 [ 586.880502][ T11] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.144406][ T5230] 8021q: adding VLAN 0 to HW filter on device eth15 [ 587.177249][ T7812] uclogic 0003:28BD:0094.001E: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.6-1/input1 [ 587.415844][ T7812] usb 7-1: USB disconnect, device number 5 [ 588.849804][ T11] usb 9-1: can't set config #1, error -71 [ 588.862204][ T11] usb 9-1: USB disconnect, device number 2 [ 590.145034][ T9180] fido_id[9180]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 590.650665][ T9201] wlan0 speed is unknown, defaulting to 1000 [ 590.746158][ T9201] wlan0 speed is unknown, defaulting to 1000 [ 590.802955][ T9201] wlan0 speed is unknown, defaulting to 1000 [ 590.879826][ T9201] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 590.996488][ T9201] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 591.171589][ T9201] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 591.383882][ T9201] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 591.776311][ T9201] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 592.214658][ T9201] wlan0 speed is unknown, defaulting to 1000 [ 592.314554][ T9201] wlan0 speed is unknown, defaulting to 1000 [ 592.431991][ T9201] wlan0 speed is unknown, defaulting to 1000 [ 592.599494][ T9201] wlan0 speed is unknown, defaulting to 1000 [ 592.749113][ T9201] wlan0 speed is unknown, defaulting to 1000 [ 594.090369][ T9228] loop8: detected capacity change from 0 to 512 [ 594.269622][ T806] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 594.346858][ T11] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 594.469613][ T806] usb 7-1: Using ep0 maxpacket: 32 [ 594.506673][ T806] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 594.538153][ T11] usb 8-1: Using ep0 maxpacket: 8 [ 594.551602][ T806] usb 7-1: config 0 has no interface number 0 [ 594.591180][ T11] usb 8-1: config 1 interface 0 has no altsetting 0 [ 594.612469][ T806] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 594.661798][ T806] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 594.676822][ T11] usb 8-1: string descriptor 0 read error: -22 [ 594.701936][ T11] usb 8-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice= 0.40 [ 594.725972][ T806] usb 7-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 594.756657][ T11] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.779445][ T806] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.860133][ T806] usb 7-1: config 0 descriptor?? [ 595.400932][ T9231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 595.460823][ T9231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 595.669785][ T11] apple 0003:05AC:0236.0020: unknown main item tag 0x5 [ 595.684755][ T806] input: HID 28bd:0094 Pen as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.1/0003:28BD:0094.001F/input/input31 [ 595.715928][ T11] apple 0003:05AC:0236.0020: unknown main item tag 0x6 [ 595.753197][ T11] apple 0003:05AC:0236.0020: unknown main item tag 0x4 [ 595.842560][ T11] apple 0003:05AC:0236.0020: item 0 2 0 8 parsing failed [ 595.906826][ T11] apple 0003:05AC:0236.0020: parse failed [ 595.952778][ T11] apple 0003:05AC:0236.0020: probe with driver apple failed with error -22 [ 595.975453][ T806] uclogic 0003:28BD:0094.001F: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.6-1/input1 [ 596.091721][ T11] usb 8-1: USB disconnect, device number 13 [ 596.120486][ T806] usb 7-1: USB disconnect, device number 6 [ 596.793735][ T5230] 8021q: adding VLAN 0 to HW filter on device eth16 [ 596.964191][ T9259] syzkaller0: entered promiscuous mode [ 597.026517][ T9259] syzkaller0: entered allmulticast mode [ 597.416355][ T9257] fido_id[9257]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 597.719014][ T9239] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 598.618333][ T7812] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 598.818064][ T7812] usb 7-1: Using ep0 maxpacket: 8 [ 598.846927][ T7812] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 598.917681][ T7812] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 599.012973][ T7812] usb 7-1: New USB device found, idVendor=5543, idProduct=0081, bcdDevice= 0.00 [ 599.072947][ T7812] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.173429][ T7812] usb 7-1: config 0 descriptor?? [ 599.264937][ T7812] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 600.437936][ T806] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 600.618163][ T11] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 600.633250][ T806] usb 9-1: Using ep0 maxpacket: 32 [ 600.657013][ T806] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 600.666804][ T806] usb 9-1: config 0 has no interface number 0 [ 600.673911][ T806] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 600.707980][ T806] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 600.734601][ T806] usb 9-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 600.760098][ T806] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.799552][ T806] usb 9-1: config 0 descriptor?? [ 600.819297][ T11] usb 8-1: Using ep0 maxpacket: 8 [ 600.856801][ T11] usb 8-1: config 1 interface 0 has no altsetting 0 [ 600.916164][ T11] usb 8-1: string descriptor 0 read error: -22 [ 600.929498][ T11] usb 8-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice= 0.40 [ 600.957886][ T11] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.470924][ T7812] usb 7-1: USB disconnect, device number 7 [ 601.574239][ T9305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 601.664323][ T806] input: HID 28bd:0094 Pen as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.1/0003:28BD:0094.0021/input/input32 [ 601.707730][ T9305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 601.874617][ T806] uclogic 0003:28BD:0094.0021: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.8-1/input1 [ 601.965728][ T11] usbhid 8-1:1.0: can't add hid device: -71 [ 601.988266][ T11] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 602.035284][ T806] usb 9-1: USB disconnect, device number 3 [ 602.056335][ T11] usb 8-1: USB disconnect, device number 14 [ 602.415529][ T9323] fido_id[9323]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 603.380957][ T9307] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 604.113285][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805329a600: rx timeout, send abort [ 604.307979][ T7812] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 604.504572][ T7812] usb 9-1: Using ep0 maxpacket: 8 [ 604.546438][ T7812] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 604.562062][ T7812] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 604.581781][ T7812] usb 9-1: New USB device found, idVendor=5543, idProduct=0081, bcdDevice= 0.00 [ 604.582738][ T9353] netlink: 'syz.7.855': attribute type 4 has an invalid length. [ 604.595407][ T7812] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.614083][ C0] vcan0: j1939_tp_rxtimer: 0xffff888053286200: rx timeout, send abort [ 604.617000][ T7812] usb 9-1: config 0 descriptor?? [ 604.623176][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805329a600: abort rx timeout. Force session deactivation [ 604.669483][ T5679] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 604.675505][ T7812] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 604.714758][ T5695] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 605.065169][ T5679] usb 2-1: Using ep0 maxpacket: 8 [ 605.117941][ T5679] usb 2-1: config 1 interface 0 has no altsetting 0 [ 605.127391][ C0] vcan0: j1939_tp_rxtimer: 0xffff888053286200: abort rx timeout. Force session deactivation [ 605.144891][ T5695] usb 7-1: Using ep0 maxpacket: 32 [ 605.213813][ T5695] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 605.232354][ T5695] usb 7-1: config 0 has no interface number 0 [ 605.245914][ T5695] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 605.264391][ T5679] usb 2-1: string descriptor 0 read error: -22 [ 605.279774][ T5679] usb 2-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice= 0.40 [ 605.298223][ T5695] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 605.343665][ T5695] usb 7-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 605.356695][ T5679] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.390151][ T5695] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 605.435915][ T5695] usb 7-1: config 0 descriptor?? [ 605.967035][ T9350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 606.050922][ T9350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 606.167984][ T5695] input: HID 28bd:0094 Pen as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.1/0003:28BD:0094.0022/input/input33 [ 606.324343][ T5679] usbhid 2-1:1.0: can't add hid device: -71 [ 606.333327][ T5695] uclogic 0003:28BD:0094.0022: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.6-1/input1 [ 606.355572][ T5679] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 606.434452][ T5679] usb 2-1: USB disconnect, device number 59 [ 606.452188][ T7812] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 606.478027][ T11] usb 7-1: USB disconnect, device number 8 [ 606.641428][ T7812] usb 8-1: Using ep0 maxpacket: 32 [ 606.701702][ T7812] usb 8-1: config 0 has an invalid interface number: 89 but max is 0 [ 606.738570][ T7812] usb 8-1: config 0 has no interface number 0 [ 606.754530][ T7812] usb 8-1: config 0 interface 89 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 606.792491][ T7812] usb 8-1: config 0 interface 89 has no altsetting 0 [ 606.877877][ T7812] usb 8-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 606.910344][ T7812] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.942244][ T7812] usb 8-1: Product: syz [ 606.959989][ T7812] usb 8-1: Manufacturer: syz [ 606.971731][ T7812] usb 8-1: SerialNumber: syz [ 607.021692][ T7812] usb 8-1: config 0 descriptor?? [ 607.089548][ T9366] fido_id[9366]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 607.248622][ T7812] usb 9-1: USB disconnect, device number 4 [ 609.347766][ T11] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 609.536208][ T7812] usb 8-1: USB disconnect, device number 15 [ 609.547002][ T11] usb 7-1: Using ep0 maxpacket: 8 [ 609.606282][ T11] usb 7-1: config 1 interface 0 has no altsetting 0 [ 609.668997][ T11] usb 7-1: string descriptor 0 read error: -22 [ 609.709401][ T11] usb 7-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice= 0.40 [ 609.741087][ T11] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.089166][ T1949] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 610.107934][ T7812] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 610.310942][ T7812] usb 8-1: Using ep0 maxpacket: 32 [ 610.324589][ T9400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 610.338150][ T1949] usb 9-1: Using ep0 maxpacket: 8 [ 610.368471][ T7812] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 610.386852][ T9400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 610.400153][ T1949] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 610.426188][ T7812] usb 8-1: config 0 has no interface number 0 [ 610.458611][ T1949] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 610.460266][ T7812] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 610.485783][ T1949] usb 9-1: New USB device found, idVendor=5543, idProduct=0081, bcdDevice= 0.00 [ 610.519976][ T1949] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.552469][ T1949] usb 9-1: config 0 descriptor?? [ 610.560182][ T7812] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 610.615222][ T1949] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 610.626544][ T7812] usb 8-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 610.681259][ T11] usbhid 7-1:1.0: can't add hid device: -71 [ 610.684514][ T7812] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.725527][ T11] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 610.742704][ T7812] usb 8-1: config 0 descriptor?? [ 610.755069][ T11] usb 7-1: USB disconnect, device number 9 [ 611.493377][ T7812] input: HID 28bd:0094 Pen as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.1/0003:28BD:0094.0023/input/input34 [ 611.713538][ T7812] uclogic 0003:28BD:0094.0023: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.7-1/input1 [ 611.846561][ T7812] usb 8-1: USB disconnect, device number 16 [ 612.797502][ T9429] fido_id[9429]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 613.178489][ T7812] usb 9-1: USB disconnect, device number 5 [ 613.261275][ T9443] netlink: 'syz.6.886': attribute type 1 has an invalid length. [ 613.357581][ T5695] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 613.442698][ T9449] netlink: 8 bytes leftover after parsing attributes in process `syz.6.886'. [ 613.512987][ T9449] netlink: 24 bytes leftover after parsing attributes in process `syz.6.886'. [ 613.611853][ T9450] netlink: 28 bytes leftover after parsing attributes in process `syz.6.886'. [ 613.649852][ T5695] usb 2-1: Using ep0 maxpacket: 32 [ 613.696604][ T5695] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 613.743803][ T5695] usb 2-1: config 0 has no interface number 0 [ 613.791925][ T5695] usb 2-1: config 0 interface 89 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 613.874484][ T5695] usb 2-1: config 0 interface 89 has no altsetting 0 [ 613.914499][ T5695] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 613.937526][ T5695] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.968158][ T5695] usb 2-1: Product: syz [ 613.996543][ T5695] usb 2-1: Manufacturer: syz [ 614.019236][ T5695] usb 2-1: SerialNumber: syz [ 614.077855][ T5695] usb 2-1: config 0 descriptor?? [ 614.486071][ T9459] warning: `syz.7.890' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 615.179922][ T5695] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 615.387601][ T5695] usb 6-1: Using ep0 maxpacket: 8 [ 615.438271][ T5695] usb 6-1: config 1 interface 0 has no altsetting 0 [ 615.496025][ T5695] usb 6-1: string descriptor 0 read error: -22 [ 615.518362][ T5695] usb 6-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice= 0.40 [ 615.568365][ T5695] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.986621][ T9470] syz.7.893 (9470) used greatest stack depth: 2712 bytes left [ 616.198928][ T9467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 616.279727][ T9467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 616.506400][ T7812] usb 2-1: USB disconnect, device number 60 [ 616.573924][ T5695] usbhid 6-1:1.0: can't add hid device: -71 [ 616.609085][ T5695] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 616.695024][ T5695] usb 6-1: USB disconnect, device number 37 [ 616.736792][ T9486] syzkaller0: entered promiscuous mode [ 616.774934][ T9486] syzkaller0: entered allmulticast mode [ 617.016468][ T9489] netlink: 32 bytes leftover after parsing attributes in process `syz.1.899'. [ 619.727655][ T7812] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 619.937953][ T7812] usb 8-1: Using ep0 maxpacket: 32 [ 619.991357][ T7812] usb 8-1: config 0 has an invalid interface number: 89 but max is 0 [ 620.045113][ T7812] usb 8-1: config 0 has no interface number 0 [ 620.080408][ T7812] usb 8-1: config 0 interface 89 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 620.142613][ T7812] usb 8-1: config 0 interface 89 has no altsetting 0 [ 620.238579][ T7812] usb 8-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 620.280937][ T7812] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.334469][ T7812] usb 8-1: Product: syz [ 620.375862][ T7812] usb 8-1: Manufacturer: syz [ 620.404086][ T7812] usb 8-1: SerialNumber: syz [ 620.462167][ T7812] usb 8-1: config 0 descriptor?? [ 621.061372][ T7812] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 621.219937][ T7812] usb 6-1: Using ep0 maxpacket: 8 [ 621.239696][ T7812] usb 6-1: config 1 interface 0 has no altsetting 0 [ 621.268383][ T7812] usb 6-1: string descriptor 0 read error: -22 [ 621.276126][ T7812] usb 6-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice= 0.40 [ 621.304758][ T7812] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.812552][ T9554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 621.905747][ T9554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 622.186794][ T7812] usbhid 6-1:1.0: can't add hid device: -71 [ 622.201230][ T7812] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 622.215172][ T7812] usb 6-1: USB disconnect, device number 38 [ 622.519148][ T7812] usb 8-1: USB disconnect, device number 17 [ 623.552573][ T9547] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 624.893799][ T9614] syzkaller0: entered promiscuous mode [ 624.932332][ T9614] syzkaller0: entered allmulticast mode [ 625.103763][ T9617] loop6: detected capacity change from 0 to 256 [ 625.166488][ T9617] exfat: Deprecated parameter 'utf8' [ 625.177782][ T7812] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 625.187544][ T9617] exfat: Unknown parameter 'utf<' [ 625.450814][ T9621] netlink: 8 bytes leftover after parsing attributes in process `syz.7.930'. [ 625.939837][ T7812] usb 9-1: Using ep0 maxpacket: 32 [ 626.272538][ T7812] usb 9-1: config 0 has an invalid interface number: 89 but max is 0 [ 626.326541][ T7812] usb 9-1: config 0 has no interface number 0 [ 626.364992][ T7812] usb 9-1: config 0 interface 89 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 626.450527][ T7812] usb 9-1: config 0 interface 89 has no altsetting 0 [ 626.514944][ T7812] usb 9-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 626.570623][ T7812] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.619979][ T7812] usb 9-1: Product: syz [ 626.649005][ T7812] usb 9-1: Manufacturer: syz [ 626.673979][ T7812] usb 9-1: SerialNumber: syz [ 626.723033][ T7812] usb 9-1: config 0 descriptor?? [ 628.858461][ T7812] usb 9-1: USB disconnect, device number 6 [ 631.628432][ T9670] syzkaller0: entered promiscuous mode [ 631.713329][ T9670] syzkaller0: entered allmulticast mode [ 633.670077][ T806] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 633.848345][ T806] usb 8-1: Using ep0 maxpacket: 32 [ 633.899860][ T806] usb 8-1: config 0 has an invalid interface number: 89 but max is 0 [ 633.941406][ T806] usb 8-1: config 0 has no interface number 0 [ 633.981456][ T806] usb 8-1: config 0 interface 89 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 634.022735][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 634.029443][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 634.047695][ T806] usb 8-1: config 0 interface 89 has no altsetting 0 [ 634.116241][ T806] usb 8-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 634.206273][ T806] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.236895][ T806] usb 8-1: Product: syz [ 634.251533][ T806] usb 8-1: Manufacturer: syz [ 634.304236][ T806] usb 8-1: SerialNumber: syz [ 634.333612][ T806] usb 8-1: config 0 descriptor?? [ 635.078481][ T806] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 635.293282][ T806] usb 2-1: Using ep0 maxpacket: 32 [ 635.306479][ T806] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 635.320883][ T806] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 635.342552][ T806] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 635.356629][ T806] usb 2-1: config 1 has no interface number 0 [ 635.363812][ T806] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 635.385666][ T806] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 635.406343][ T806] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 635.420460][ T806] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.461820][ T806] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 635.653916][ T806] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 636.562168][ T806] usb 8-1: USB disconnect, device number 18 [ 636.728193][ T5683] snd_usb_pod 2-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 636.885572][ T9694] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 636.937064][ T7812] usb 2-1: USB disconnect, device number 61 [ 636.977057][ T7812] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 637.141310][ T9727] syzkaller0: entered promiscuous mode [ 637.167089][ T9727] syzkaller0: entered allmulticast mode [ 637.881663][ T5683] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 638.083046][ T5683] usb 6-1: Using ep0 maxpacket: 8 [ 638.107763][ T5683] usb 6-1: config 1 interface 0 has no altsetting 0 [ 638.200620][ T5683] usb 6-1: string descriptor 0 read error: -22 [ 638.225362][ T5683] usb 6-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice= 0.40 [ 638.253175][ T5683] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.916477][ T9733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 638.940925][ T9733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 639.200380][ T5683] usbhid 6-1:1.0: can't add hid device: -71 [ 639.224305][ T5683] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 639.356252][ T5683] usb 6-1: USB disconnect, device number 39 [ 639.440195][ T9756] netlink: 'syz.6.969': attribute type 4 has an invalid length. [ 639.478245][ T9756] netlink: 176 bytes leftover after parsing attributes in process `syz.6.969'. [ 639.747916][ T806] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 639.933539][ T806] usb 9-1: Using ep0 maxpacket: 32 [ 639.968003][ T806] usb 9-1: config 0 has an invalid interface number: 89 but max is 0 [ 640.002677][ T806] usb 9-1: config 0 has no interface number 0 [ 640.025164][ T806] usb 9-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 640.069887][ T806] usb 9-1: config 0 interface 89 has no altsetting 0 [ 640.144801][ T806] usb 9-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 640.199013][ T806] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.238770][ T806] usb 9-1: Product: syz [ 640.253017][ T806] usb 9-1: Manufacturer: syz [ 640.264423][ T806] usb 9-1: SerialNumber: syz [ 640.326463][ T806] usb 9-1: config 0 descriptor?? [ 640.359727][ T9772] syzkaller0: entered promiscuous mode [ 640.366406][ T9772] syzkaller0: entered allmulticast mode [ 640.434075][ T806] em28xx 9-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 640.481805][ T806] em28xx 9-1:0.89: Video interface 89 found: [ 640.819357][ T7812] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 641.008858][ T7812] usb 2-1: Using ep0 maxpacket: 32 [ 641.051990][ T806] em28xx 9-1:0.89: unknown em28xx chip ID (0) [ 641.062783][ T7812] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 641.097966][ T7812] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 641.145818][ T7812] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 641.174524][ T7812] usb 2-1: config 1 has no interface number 0 [ 641.205760][ T7812] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 641.267567][ T7812] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 641.330496][ T7812] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 641.378352][ T7812] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.490479][ T7812] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 641.522023][ T806] em28xx 9-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 641.556368][ T806] em28xx 9-1:0.89: board has no eeprom [ 641.634743][ T7812] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 641.860256][ T806] em28xx 9-1:0.89: Identified as Terratec Grabby (card=67) [ 641.886714][ T806] em28xx 9-1:0.89: analog set to bulk mode. [ 641.920159][ T7812] usb 2-1: USB disconnect, device number 62 [ 641.928349][ T7812] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 641.939218][ T5683] em28xx 9-1:0.89: Registering V4L2 extension [ 641.996405][ T806] usb 9-1: USB disconnect, device number 7 [ 642.070086][ T806] em28xx 9-1:0.89: Disconnecting em28xx [ 642.534075][ T5683] em28xx 9-1:0.89: Config register raw data: 0xffffffed [ 642.578422][ T5683] em28xx 9-1:0.89: AC97 chip type couldn't be determined [ 642.606701][ T5683] em28xx 9-1:0.89: No AC97 audio processor [ 642.671387][ T5683] usb 9-1: Decoder not found [ 642.699934][ T5683] em28xx 9-1:0.89: failed to create media graph [ 642.730122][ T5683] em28xx 9-1:0.89: V4L2 device video103 deregistered [ 642.809389][ T5683] em28xx 9-1:0.89: Registering snapshot button... [ 642.845768][ T5683] input: em28xx snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.89/input/input35 [ 642.926283][ T5683] em28xx 9-1:0.89: Remote control support is not available for this card. [ 642.981783][ T806] em28xx 9-1:0.89: Closing input extension [ 643.018306][ T806] em28xx 9-1:0.89: Deregistering snapshot button [ 643.153865][ T806] em28xx 9-1:0.89: Freeing device [ 643.248859][ T9798] netlink: 'syz.1.982': attribute type 2 has an invalid length. [ 643.300445][ T9798] netlink: 'syz.1.982': attribute type 9 has an invalid length. [ 643.360921][ T9798] netlink: 'syz.1.982': attribute type 1 has an invalid length. [ 643.420510][ T9798] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.982'. [ 643.463405][ T9792] loop6: detected capacity change from 0 to 4096 [ 643.525211][ T9792] EXT4-fs: inline encryption not supported [ 643.623673][ T9792] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 643.661014][ T9792] EXT4-fs (loop6): Test dummy encryption mode enabled [ 643.719283][ T9792] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c198, mo2=0003] [ 643.789458][ T9792] System zones: 0-5 [ 643.857897][ T9792] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 644.620211][ T5677] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 644.834409][ T5677] usb 6-1: Using ep0 maxpacket: 8 [ 645.062244][ T5677] usb 6-1: config 1 interface 0 has no altsetting 0 [ 645.193426][ T5677] usb 6-1: string descriptor 0 read error: -22 [ 645.253525][ T5677] usb 6-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice= 0.40 [ 645.335289][ T5677] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.206995][ T9802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 646.441147][ T9802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 646.788279][ T5677] usbhid 6-1:1.0: can't add hid device: -71 [ 646.846590][ T5677] usbhid 6-1:1.0: probe with driver usbhid failed with error -71 [ 646.995577][ T5677] usb 6-1: USB disconnect, device number 40 [ 648.736887][ T9833] netlink: 'syz.5.993': attribute type 10 has an invalid length. [ 648.815398][ T9833] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.877608][ T5683] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 648.927810][ T5677] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 649.058605][ T9833] bridge0: port 2(bridge_slave_1) entered blocking state [ 649.066404][ T9833] bridge0: port 2(bridge_slave_1) entered forwarding state [ 649.118108][ T5677] usb 2-1: Using ep0 maxpacket: 32 [ 649.144554][ T5677] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 649.166453][ T5677] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 649.185339][ T9833] team0: Port device bridge0 added [ 649.198787][ T5677] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 649.243212][ T5677] usb 2-1: config 1 has no interface number 0 [ 649.273616][ T5677] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 649.334534][ T5677] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 649.423844][ T5677] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 649.473986][ T5677] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.682032][ T5677] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 649.719103][ T5683] usb 9-1: Using ep0 maxpacket: 32 [ 649.812577][ T5677] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 650.201327][ T5677] usb 2-1: USB disconnect, device number 63 [ 650.311780][ T5677] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 650.694180][ T5683] usb 9-1: config 0 has an invalid interface number: 89 but max is 0 [ 650.702611][ T5683] usb 9-1: config 0 has no interface number 0 [ 650.709184][ T5683] usb 9-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 650.719340][ T5683] usb 9-1: config 0 interface 89 has no altsetting 0 [ 650.755827][ T5683] usb 9-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 650.765341][ T5683] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.528069][ T5583] Bluetooth: hci1: command 0x0406 tx timeout [ 651.680453][ T5683] usb 9-1: Product: syz [ 651.684906][ T5683] usb 9-1: Manufacturer: syz [ 651.689948][ T5683] usb 9-1: SerialNumber: syz [ 651.704362][ T5683] usb 9-1: config 0 descriptor?? [ 651.710910][ T5683] usb 9-1: can't set config #0, error -71 [ 651.722114][ T5683] usb 9-1: USB disconnect, device number 8 [ 652.020644][ T7867] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 652.931312][ T5683] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 653.129658][ T5683] usb 9-1: Using ep0 maxpacket: 16 [ 653.161159][ T5683] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 653.227822][ T5683] usb 9-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 653.249625][ T5683] usb 9-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 653.291641][ T5683] usb 9-1: Product: syz [ 653.301714][ T5683] usb 9-1: Manufacturer: syz [ 653.336428][ T5683] usb 9-1: SerialNumber: syz [ 653.376042][ T5683] usb 9-1: config 0 descriptor?? [ 653.918172][ T806] usb 9-1: USB disconnect, device number 9 [ 654.577852][ T806] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 654.667764][ T5677] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 654.778789][ T806] usb 2-1: Using ep0 maxpacket: 32 [ 654.813808][ T806] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 654.837622][ T806] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 654.861265][ T5677] usb 8-1: Using ep0 maxpacket: 32 [ 654.886426][ T806] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 654.902735][ T5677] usb 8-1: config 0 has an invalid interface number: 89 but max is 0 [ 654.943392][ T806] usb 2-1: config 1 has no interface number 0 [ 654.950665][ T5677] usb 8-1: config 0 has no interface number 0 [ 654.950789][ T5677] usb 8-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 654.950923][ T5677] usb 8-1: config 0 interface 89 has no altsetting 0 [ 654.969584][ T5677] usb 8-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 655.026762][ T806] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 655.039776][ T5677] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.074628][ T806] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 655.107904][ T5677] usb 8-1: Product: syz [ 655.110662][ T806] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 655.114142][ T5677] usb 8-1: Manufacturer: syz [ 655.151034][ T5677] usb 8-1: SerialNumber: syz [ 655.166373][ T806] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 655.192272][ T9886] loop6: detected capacity change from 0 to 4096 [ 655.206985][ T5677] usb 8-1: config 0 descriptor?? [ 655.274381][ T9886] EXT4-fs: inline encryption not supported [ 655.288746][ T5677] em28xx 8-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 655.333213][ T806] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 655.356352][ T9886] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 655.398271][ T5677] em28xx 8-1:0.89: Video interface 89 found: [ 655.439029][ T9886] EXT4-fs (loop6): Test dummy encryption mode enabled [ 655.477581][ T806] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 655.545075][ T9886] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c198, mo2=0003] [ 655.669212][ T9886] System zones: 0-5 [ 655.727955][ T9886] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 656.490581][ T5683] snd_usb_pod 2-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 656.536427][ T5677] em28xx 8-1:0.89: unknown em28xx chip ID (0) [ 657.109618][ T9872] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 657.167013][ T5677] em28xx 8-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 657.234611][ T5677] em28xx 8-1:0.89: board has no eeprom [ 657.568047][ T5677] em28xx 8-1:0.89: Identified as Terratec Grabby (card=67) [ 657.643753][ T5677] em28xx 8-1:0.89: analog set to bulk mode. [ 657.711612][ T5686] em28xx 8-1:0.89: Registering V4L2 extension [ 657.916378][ T5677] usb 8-1: USB disconnect, device number 19 [ 658.081403][ T1949] usb 2-1: USB disconnect, device number 64 [ 658.113452][ T5677] em28xx 8-1:0.89: Disconnecting em28xx [ 658.210714][ T1949] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 658.793378][ T5686] em28xx 8-1:0.89: Config register raw data: 0xffffffed [ 658.960526][ T5686] em28xx 8-1:0.89: AC97 chip type couldn't be determined [ 659.041175][ T5686] em28xx 8-1:0.89: No AC97 audio processor [ 659.198619][ T5686] usb 8-1: Decoder not found [ 659.203535][ T5686] em28xx 8-1:0.89: failed to create media graph [ 659.290075][ T5686] em28xx 8-1:0.89: V4L2 device video103 deregistered [ 659.378263][ T5686] em28xx 8-1:0.89: Registering snapshot button... [ 659.451006][ T5686] input: em28xx snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.89/input/input36 [ 659.783512][ T5686] em28xx 8-1:0.89: Remote control support is not available for this card. [ 659.915714][ T5677] em28xx 8-1:0.89: Closing input extension [ 659.953337][ T5677] em28xx 8-1:0.89: Deregistering snapshot button [ 660.377136][ T5677] em28xx 8-1:0.89: Freeing device [ 662.447187][ T9915] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 663.448736][ T9937] fuse: Unknown parameter 'user_id00000000000000000000' [ 664.089483][ T5677] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 664.348368][ T5677] usb 8-1: Using ep0 maxpacket: 16 [ 664.436926][ T7867] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 664.457766][ T5677] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 664.534564][ T5677] usb 8-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 664.563428][ T5677] usb 8-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 664.621050][ T5677] usb 8-1: Product: syz [ 664.657162][ T5677] usb 8-1: Manufacturer: syz [ 664.681331][ T5677] usb 8-1: SerialNumber: syz [ 664.762761][ T5677] usb 8-1: config 0 descriptor?? [ 665.008466][ T5683] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 665.223072][ T5683] usb 9-1: Using ep0 maxpacket: 32 [ 665.253404][ T5683] usb 9-1: config 0 has an invalid interface number: 89 but max is 0 [ 665.299635][ T5683] usb 9-1: config 0 has no interface number 0 [ 665.300177][ T5686] usb 8-1: USB disconnect, device number 20 [ 665.349687][ T5683] usb 9-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 665.415709][ T5683] usb 9-1: config 0 interface 89 has no altsetting 0 [ 665.468739][ T5683] usb 9-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 665.506955][ T5683] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.544583][ T5683] usb 9-1: Product: syz [ 665.562877][ T5683] usb 9-1: Manufacturer: syz [ 665.585045][ T5683] usb 9-1: SerialNumber: syz [ 665.609667][ T806] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 665.654629][ T5683] usb 9-1: config 0 descriptor?? [ 665.715991][ T5683] em28xx 9-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 665.757736][ T5683] em28xx 9-1:0.89: Video interface 89 found: [ 665.798831][ T806] usb 7-1: Using ep0 maxpacket: 32 [ 665.837750][ T806] usb 7-1: config index 0 descriptor too short (expected 35577, got 27) [ 665.868319][ T806] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 665.949866][ T806] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 665.986735][ T806] usb 7-1: config 1 has no interface number 0 [ 666.021349][ T806] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 666.048165][ T806] usb 7-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 666.064603][ T806] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 666.074274][ T806] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.124975][ T806] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found [ 666.349326][ T5683] em28xx 9-1:0.89: unknown em28xx chip ID (0) [ 666.363978][ T806] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now attached [ 666.662507][ T806] usb 7-1: USB disconnect, device number 10 [ 666.699838][ T806] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected [ 666.854802][ T5683] em28xx 9-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 666.905639][ T5683] em28xx 9-1:0.89: board has no eeprom [ 667.208974][ T5683] em28xx 9-1:0.89: Identified as Terratec Grabby (card=67) [ 667.252077][ T5683] em28xx 9-1:0.89: analog set to bulk mode. [ 667.275938][ T806] em28xx 9-1:0.89: Registering V4L2 extension [ 667.335516][ T5683] usb 9-1: USB disconnect, device number 10 [ 667.372531][ T5683] em28xx 9-1:0.89: Disconnecting em28xx [ 667.843691][ T806] em28xx 9-1:0.89: Config register raw data: 0xffffffed [ 667.905696][ T806] em28xx 9-1:0.89: AC97 chip type couldn't be determined [ 667.943471][ T806] em28xx 9-1:0.89: No AC97 audio processor [ 668.019426][ T806] usb 9-1: Decoder not found [ 668.053154][ T806] em28xx 9-1:0.89: failed to create media graph [ 668.088404][ T806] em28xx 9-1:0.89: V4L2 device video103 deregistered [ 668.129235][ T806] em28xx 9-1:0.89: Registering snapshot button... [ 668.175781][ T806] input: em28xx snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.89/input/input37 [ 668.253694][ T806] em28xx 9-1:0.89: Remote control support is not available for this card. [ 668.305272][ T5683] em28xx 9-1:0.89: Closing input extension [ 668.322692][ T5683] em28xx 9-1:0.89: Deregistering snapshot button [ 668.336841][T10004] fuse: Bad value for 'fd' [ 668.533282][T10010] ve: renamed from dummy0 (while UP) [ 668.558351][ T5683] em28xx 9-1:0.89: Freeing device [ 668.598015][ T5881] udevd[5881]: setting mode of /dev/bus/usb/009/010 to 020664 failed: No such file or directory [ 668.678189][ T5881] udevd[5881]: setting owner of /dev/bus/usb/009/010 to uid=0, gid=0 failed: No such file or directory [ 668.737805][T10003] loop8: detected capacity change from 0 to 4096 [ 668.795415][T10003] EXT4-fs: inline encryption not supported [ 668.846708][T10003] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 668.884879][T10003] EXT4-fs (loop8): Test dummy encryption mode enabled [ 668.934937][T10003] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c198, mo2=0003] [ 668.963222][T10003] System zones: 0-5 [ 669.024374][T10003] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 669.903261][ T5686] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 670.248974][ T5686] usb 6-1: Using ep0 maxpacket: 16 [ 670.277808][ T5686] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 670.406933][ T5686] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 670.484005][ T5686] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 670.574721][ T5686] usb 6-1: Product: syz [ 670.596419][ T5686] usb 6-1: Manufacturer: syz [ 670.637709][ T5686] usb 6-1: SerialNumber: syz [ 670.715012][ T5686] usb 6-1: config 0 descriptor?? [ 671.428164][ T5686] usb 6-1: USB disconnect, device number 41 [ 673.807595][ T5683] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 674.153285][T10055] netlink: 'syz.1.1049': attribute type 10 has an invalid length. [ 674.225143][T10055] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.395757][T10055] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.403524][T10055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 674.625247][T10055] team0: Port device bridge0 added [ 674.662055][T10058] ve: renamed from dummy0 (while UP) [ 676.849875][ T5683] usb 8-1: device not accepting address 21, error -71 [ 676.982520][ T8637] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 677.341317][ T806] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 677.537751][ T806] usb 7-1: Using ep0 maxpacket: 16 [ 677.574084][ T806] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 677.655713][ T806] usb 7-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 677.703300][ T806] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 677.735712][ T806] usb 7-1: Product: syz [ 677.753509][ T806] usb 7-1: Manufacturer: syz [ 677.776111][ T806] usb 7-1: SerialNumber: syz [ 677.855751][ T806] usb 7-1: config 0 descriptor?? [ 678.262953][ T806] usb 7-1: USB disconnect, device number 11 [ 678.788613][ T5677] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 678.997950][ T5677] usb 9-1: Using ep0 maxpacket: 32 [ 679.037233][ T5677] usb 9-1: config index 0 descriptor too short (expected 35577, got 27) [ 679.073964][ T5677] usb 9-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 679.108798][ T5677] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 679.147100][ T5677] usb 9-1: config 1 has no interface number 0 [ 679.167574][ T5677] usb 9-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 679.210225][ T5677] usb 9-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 679.275198][ T5677] usb 9-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 679.322208][ T5677] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.393425][ T5677] snd_usb_pod 9-1:1.1: Line 6 Pocket POD found [ 679.581702][ T5677] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now attached [ 679.684382][T10116] loop6: detected capacity change from 0 to 4096 [ 679.721812][T10116] EXT4-fs: inline encryption not supported [ 679.798741][T10116] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 679.837972][T10116] EXT4-fs (loop6): Test dummy encryption mode enabled [ 679.902332][T10116] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c198, mo2=0003] [ 679.962503][T10116] System zones: 0-5 [ 679.999797][T10116] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 680.686501][T10093] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 680.893463][ T806] usb 9-1: USB disconnect, device number 11 [ 680.928840][ T5686] snd_usb_pod 9-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 680.987574][ T806] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now disconnected [ 683.446245][T10146] TC_ACT_REPEAT abuse ? [ 683.450701][T10146] ===================================================== [ 683.458327][T10146] BUG: KMSAN: uninit-value in __skb_flow_dissect+0x2013/0xa060 [ 683.466119][T10146] __skb_flow_dissect+0x2013/0xa060 [ 683.471570][T10146] cake_enqueue+0x114b/0xf6c0 [ 683.476477][T10146] __dev_queue_xmit+0x23c3/0x5a00 [ 683.481788][T10146] packet_xmit+0x8f/0x710 [ 683.486343][T10146] packet_sendmsg+0x8c6b/0x9d60 [ 683.491411][T10146] ____sys_sendmsg+0xf37/0xfd0 [ 683.496531][T10146] ___sys_sendmsg+0x271/0x3b0 [ 683.501553][T10146] __x64_sys_sendmsg+0x211/0x3e0 [ 683.506705][T10146] x64_sys_call+0x1e20/0x3ea0 [ 683.511705][T10146] do_syscall_64+0x15d/0x3c0 [ 683.516504][T10146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.522649][T10146] [ 683.525037][T10146] [ 683.525037][T10146] [ 683.534003][T10146] Uninit was stored to memory at: [ 683.539433][T10146] skb_data_move+0x3b4/0x4f0 [ 683.544186][T10146] skb_vlan_push+0x647/0xb70 [ 683.549018][T10146] tcf_vlan_act+0xc09/0x12c0 [ 683.553799][T10146] tcf_action_exec+0x21f/0x1190 [ 683.558910][T10146] mall_classify+0x183/0x290 [ 683.563669][T10146] tcf_classify+0x855/0x1ca0 [ 683.568574][T10146] cake_enqueue+0x168/0xf6c0 [ 683.573341][T10146] __dev_queue_xmit+0x23c3/0x5a00 [ 683.578625][T10146] packet_xmit+0x8f/0x710 [ 683.583104][T10146] packet_sendmsg+0x8c6b/0x9d60 [ 683.588171][T10146] ____sys_sendmsg+0xf37/0xfd0 [ 683.593104][T10146] ___sys_sendmsg+0x271/0x3b0 [ 683.598033][T10146] __x64_sys_sendmsg+0x211/0x3e0 [ 683.603143][T10146] x64_sys_call+0x1e20/0x3ea0 [ 683.608061][T10146] do_syscall_64+0x15d/0x3c0 [ 683.612776][T10146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.618894][T10146] [ 683.621276][T10146] Uninit was stored to memory at: [ 683.626552][T10146] skb_data_move+0x3b4/0x4f0 [ 683.631409][T10146] skb_vlan_push+0x647/0xb70 [ 683.636155][T10146] tcf_vlan_act+0xc09/0x12c0 [ 683.640969][T10146] tcf_action_exec+0x21f/0x1190 [ 683.645967][T10146] mall_classify+0x183/0x290 [ 683.650762][T10146] tcf_classify+0x855/0x1ca0 [ 683.655522][T10146] cake_enqueue+0x168/0xf6c0 [ 683.660349][T10146] __dev_queue_xmit+0x23c3/0x5a00 [ 683.665547][T10146] packet_xmit+0x8f/0x710 [ 683.670111][T10146] packet_sendmsg+0x8c6b/0x9d60 [ 683.675096][T10146] ____sys_sendmsg+0xf37/0xfd0 [ 683.680116][T10146] ___sys_sendmsg+0x271/0x3b0 [ 683.684959][T10146] __x64_sys_sendmsg+0x211/0x3e0 [ 683.690167][T10146] x64_sys_call+0x1e20/0x3ea0 [ 683.695007][T10146] do_syscall_64+0x15d/0x3c0 [ 683.699799][T10146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.705833][T10146] [ 683.708295][T10146] Uninit was stored to memory at: [ 683.713580][T10146] pskb_expand_head+0x497/0x1a40 [ 683.718774][T10146] skb_vlan_push+0x444/0xb70 [ 683.723518][T10146] tcf_vlan_act+0xc09/0x12c0 [ 683.728368][T10146] tcf_action_exec+0x21f/0x1190 [ 683.733388][T10146] mall_classify+0x183/0x290 [ 683.738179][T10146] tcf_classify+0x855/0x1ca0 [ 683.742935][T10146] cake_enqueue+0x168/0xf6c0 [ 683.747770][T10146] __dev_queue_xmit+0x23c3/0x5a00 [ 683.752962][T10146] packet_xmit+0x8f/0x710 [ 683.757512][T10146] packet_sendmsg+0x8c6b/0x9d60 [ 683.762501][T10146] ____sys_sendmsg+0xf37/0xfd0 [ 683.767524][T10146] ___sys_sendmsg+0x271/0x3b0 [ 683.772376][T10146] __x64_sys_sendmsg+0x211/0x3e0 [ 683.777571][T10146] x64_sys_call+0x1e20/0x3ea0 [ 683.782406][T10146] do_syscall_64+0x15d/0x3c0 [ 683.787126][T10146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.793241][T10146] [ 683.795617][T10146] Uninit was stored to memory at: [ 683.801032][T10146] skb_data_move+0x3b4/0x4f0 [ 683.805798][T10146] skb_vlan_push+0x647/0xb70 [ 683.810660][T10146] tcf_vlan_act+0xc09/0x12c0 [ 683.815406][T10146] tcf_action_exec+0x21f/0x1190 [ 683.820500][T10146] mall_classify+0x183/0x290 [ 683.825220][T10146] tcf_classify+0x855/0x1ca0 [ 683.830082][T10146] cake_enqueue+0x168/0xf6c0 [ 683.834837][T10146] __dev_queue_xmit+0x23c3/0x5a00 [ 683.840161][T10146] packet_xmit+0x8f/0x710 [ 683.844639][T10146] packet_sendmsg+0x8c6b/0x9d60 [ 683.849715][T10146] ____sys_sendmsg+0xf37/0xfd0 [ 683.854658][T10146] ___sys_sendmsg+0x271/0x3b0 [ 683.859605][T10146] __x64_sys_sendmsg+0x211/0x3e0 [ 683.864727][T10146] x64_sys_call+0x1e20/0x3ea0 [ 683.869657][T10146] do_syscall_64+0x15d/0x3c0 [ 683.874379][T10146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.880523][T10146] [ 683.882918][T10146] Uninit was stored to memory at: [ 683.888287][T10146] skb_data_move+0x3b4/0x4f0 [ 683.893055][T10146] skb_vlan_push+0x647/0xb70 [ 683.897888][T10146] tcf_vlan_act+0xc09/0x12c0 [ 683.902627][T10146] tcf_action_exec+0x21f/0x1190 [ 683.907710][T10146] mall_classify+0x183/0x290 [ 683.912422][T10146] tcf_classify+0x855/0x1ca0 [ 683.917184][T10146] cake_enqueue+0x168/0xf6c0 [ 683.922018][T10146] __dev_queue_xmit+0x23c3/0x5a00 [ 683.927216][T10146] packet_xmit+0x8f/0x710 [ 683.931770][T10146] packet_sendmsg+0x8c6b/0x9d60 [ 683.936835][T10146] ____sys_sendmsg+0xf37/0xfd0 [ 683.941912][T10146] ___sys_sendmsg+0x271/0x3b0 [ 683.946776][T10146] __x64_sys_sendmsg+0x211/0x3e0 [ 683.952000][T10146] x64_sys_call+0x1e20/0x3ea0 [ 683.956841][T10146] do_syscall_64+0x15d/0x3c0 [ 683.961644][T10146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.967769][T10146] [ 683.970154][T10146] Uninit was stored to memory at: [ 683.975431][T10146] skb_data_move+0x3b4/0x4f0 [ 683.980294][T10146] skb_vlan_push+0x647/0xb70 [ 683.985041][T10146] tcf_vlan_act+0xc09/0x12c0 [ 683.989864][T10146] tcf_action_exec+0x21f/0x1190 [ 683.994861][T10146] mall_classify+0x183/0x290 [ 683.999669][T10146] tcf_classify+0x855/0x1ca0 [ 684.004428][T10146] cake_enqueue+0x168/0xf6c0 [ 684.009251][T10146] __dev_queue_xmit+0x23c3/0x5a00 [ 684.014444][T10146] packet_xmit+0x8f/0x710 [ 684.019004][T10146] packet_sendmsg+0x8c6b/0x9d60 [ 684.023986][T10146] ____sys_sendmsg+0xf37/0xfd0 [ 684.029002][T10146] ___sys_sendmsg+0x271/0x3b0 [ 684.033845][T10146] __x64_sys_sendmsg+0x211/0x3e0 [ 684.039064][T10146] x64_sys_call+0x1e20/0x3ea0 [ 684.043900][T10146] do_syscall_64+0x15d/0x3c0 [ 684.048696][T10146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.054733][T10146] [ 684.057111][T10146] Uninit was stored to memory at: [ 684.062460][T10146] skb_data_move+0x3b4/0x4f0 [ 684.067239][T10146] skb_vlan_push+0x647/0xb70 [ 684.072065][T10146] tcf_vlan_act+0xc09/0x12c0 [ 684.076795][T10146] tcf_action_exec+0x21f/0x1190 [ 684.081885][T10146] mall_classify+0x183/0x290 [ 684.086595][T10146] tcf_classify+0x855/0x1ca0 [ 684.091443][T10146] cake_enqueue+0x168/0xf6c0 [ 684.096189][T10146] __dev_queue_xmit+0x23c3/0x5a00 [ 684.101470][T10146] packet_xmit+0x8f/0x710 [ 684.105946][T10146] packet_sendmsg+0x8c6b/0x9d60 [ 684.111010][T10146] ____sys_sendmsg+0xf37/0xfd0 [ 684.115949][T10146] ___sys_sendmsg+0x271/0x3b0 [ 684.120880][T10146] __x64_sys_sendmsg+0x211/0x3e0 [ 684.125994][T10146] x64_sys_call+0x1e20/0x3ea0 [ 684.130914][T10146] do_syscall_64+0x15d/0x3c0 [ 684.135633][T10146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.141768][T10146] [ 684.144155][T10146] Uninit was created at: [ 684.148736][T10146] kmem_cache_alloc_node_noprof+0x3cd/0x12c0 [ 684.154904][T10146] __alloc_skb+0x855/0x1190 [ 684.159645][T10146] alloc_skb_with_frags+0xc5/0x990 [ 684.164928][T10146] sock_alloc_send_pskb+0xacb/0xc60 [ 684.170456][T10146] packet_sendmsg+0x6ed5/0x9d60 [ 684.175506][T10146] ____sys_sendmsg+0xf37/0xfd0 [ 684.180548][T10146] ___sys_sendmsg+0x271/0x3b0 [ 684.185400][T10146] __x64_sys_sendmsg+0x211/0x3e0 [ 684.190609][T10146] x64_sys_call+0x1e20/0x3ea0 [ 684.195448][T10146] do_syscall_64+0x15d/0x3c0 [ 684.200270][T10146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.206309][T10146] [ 684.208838][T10146] CPU: 1 UID: 0 PID: 10146 Comm: syz.1.1075 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 684.220035][T10146] Tainted: [L]=SOFTLOCKUP [ 684.224437][T10146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 684.234696][T10146] ===================================================== [ 684.241788][T10146] Disabling lock debugging due to kernel taint [ 684.248160][T10146] Kernel panic - not syncing: kmsan.panic set ... [ 684.254690][T10146] CPU: 1 UID: 0 PID: 10146 Comm: syz.1.1075 Tainted: G B L syzkaller #0 PREEMPT(lazy) [ 684.265804][T10146] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 684.271426][T10146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 684.281598][T10146] Call Trace: [ 684.284956][T10146] [ 684.287964][T10146] __dump_stack+0x26/0x30 [ 684.292446][T10146] dump_stack_lvl+0x50/0x1c0 [ 684.297182][T10146] ? dump_stack+0x12/0x25 [ 684.301659][T10146] dump_stack+0x1e/0x25 [ 684.305956][T10146] vpanic+0x7b4/0x1430 [ 684.310211][T10146] panic+0x15d/0x160 [ 684.314317][T10146] kmsan_report+0x31a/0x320 [ 684.319002][T10146] ? kmsan_get_metadata+0xf1/0x160 [ 684.324296][T10146] ? __msan_warning+0x1b/0x30 [ 684.329127][T10146] ? __skb_flow_dissect+0x2013/0xa060 [ 684.334678][T10146] ? cake_enqueue+0x114b/0xf6c0 [ 684.339700][T10146] ? __dev_queue_xmit+0x23c3/0x5a00 [ 684.345069][T10146] ? packet_xmit+0x8f/0x710 [ 684.349720][T10146] ? packet_sendmsg+0x8c6b/0x9d60 [ 684.354887][T10146] ? ____sys_sendmsg+0xf37/0xfd0 [ 684.360010][T10146] ? ___sys_sendmsg+0x271/0x3b0 [ 684.365070][T10146] ? __x64_sys_sendmsg+0x211/0x3e0 [ 684.370365][T10146] ? x64_sys_call+0x1e20/0x3ea0 [ 684.375391][T10146] ? do_syscall_64+0x15d/0x3c0 [ 684.380294][T10146] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.386521][T10146] ? kmsan_get_metadata+0xf1/0x160 [ 684.391826][T10146] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 684.398334][T10146] ? kmsan_get_metadata+0xf1/0x160 [ 684.403631][T10146] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 684.409633][T10146] ? __skb_flow_dissect+0x1fc1/0xa060 [ 684.415174][T10146] ? filter_irq_stacks+0x49/0x190 [ 684.420385][T10146] ? stack_depot_save_flags+0x35/0x790 [ 684.426025][T10146] ? kmsan_get_metadata+0xf1/0x160 [ 684.431334][T10146] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 684.437845][T10146] ? kmsan_get_metadata+0xf1/0x160 [ 684.443158][T10146] __msan_warning+0x1b/0x30 [ 684.447822][T10146] __skb_flow_dissect+0x2013/0xa060 [ 684.453245][T10146] ? kmsan_get_metadata+0xf1/0x160 [ 684.458549][T10146] ? cake_enqueue+0xea1/0xf6c0 [ 684.463490][T10146] ? filter_irq_stacks+0x49/0x190 [ 684.468698][T10146] ? break_cow+0x3e0/0x650 [ 684.473261][T10146] cake_enqueue+0x114b/0xf6c0 [ 684.478108][T10146] ? kmsan_get_metadata+0xf1/0x160 [ 684.483435][T10146] ? kmsan_disable_current+0x40/0x40 [ 684.488925][T10146] ? packet_sendmsg+0x6e50/0x9d60 [ 684.494102][T10146] ? ____sys_sendmsg+0xe91/0xfd0 [ 684.499222][T10146] ? ___sys_sendmsg+0x1a0/0x3b0 [ 684.504262][T10146] ? __x64_sys_sendmsg+0x1e0/0x3e0 [ 684.509571][T10146] ? is_module_text_address+0x1f4/0x240 [ 684.515272][T10146] ? kmsan_get_metadata+0x71/0x160 [ 684.520582][T10146] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 684.526594][T10146] ? filter_irq_stacks+0x49/0x190 [ 684.531770][T10146] ? kmsan_get_metadata+0xf1/0x160 [ 684.537067][T10146] ? kmsan_get_metadata+0xf1/0x160 [ 684.542355][T10146] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 684.548368][T10146] ? __dev_queue_xmit+0xae1/0x5a00 [ 684.553676][T10146] ? filter_irq_stacks+0x49/0x190 [ 684.558872][T10146] ? kmsan_get_metadata+0xf1/0x160 [ 684.564165][T10146] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 684.570153][T10146] ? __pfx_cake_enqueue+0x10/0x10 [ 684.575341][T10146] ? __pfx_cake_enqueue+0x10/0x10 [ 684.580533][T10146] __dev_queue_xmit+0x23c3/0x5a00 [ 684.585740][T10146] ? kmsan_get_metadata+0xf1/0x160 [ 684.591038][T10146] ? packet_sendmsg+0x85bf/0x9d60 [ 684.596210][T10146] ? __msan_warning+0x1b/0x30 [ 684.601055][T10146] ? filter_irq_stacks+0x13f/0x190 [ 684.606312][T10146] ? __dev_queue_xmit+0x2d4/0x5a00 [ 684.611653][T10146] packet_xmit+0x8f/0x710 [ 684.616130][T10146] ? packet_parse_headers+0x92b/0xa20 [ 684.621678][T10146] packet_sendmsg+0x8c6b/0x9d60 [ 684.626673][T10146] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 684.632671][T10146] ? aa_label_sk_perm+0x759/0x810 [ 684.637891][T10146] ? tomoyo_socket_bind_permission+0x361/0x370 [ 684.644236][T10146] ? __pfx_filter_irq_stacks+0x10/0x10 [ 684.649844][T10146] ? stack_depot_save_flags+0x35/0x790 [ 684.655456][T10146] ? kmsan_get_metadata+0xf1/0x160 [ 684.660752][T10146] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 684.667264][T10146] ? kmsan_get_metadata+0xf1/0x160 [ 684.672633][T10146] ? __pfx_packet_sendmsg+0x10/0x10 [ 684.677969][T10146] ____sys_sendmsg+0xf37/0xfd0 [ 684.682954][T10146] ___sys_sendmsg+0x271/0x3b0 [ 684.687801][T10146] ? kmsan_get_metadata+0xf1/0x160 [ 684.693146][T10146] ? kmsan_get_metadata+0xf1/0x160 [ 684.698435][T10146] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 684.704444][T10146] __x64_sys_sendmsg+0x211/0x3e0 [ 684.709580][T10146] ? kmsan_get_metadata+0xf1/0x160 [ 684.714883][T10146] x64_sys_call+0x1e20/0x3ea0 [ 684.719731][T10146] do_syscall_64+0x15d/0x3c0 [ 684.724462][T10146] ? clear_bhb_loop+0x50/0xa0 [ 684.729283][T10146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.735335][T10146] RIP: 0033:0x7f1a0b39ce59 [ 684.739871][T10146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 684.759625][T10146] RSP: 002b:00007f1a0c31a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 684.768186][T10146] RAX: ffffffffffffffda RBX: 00007f1a0b616090 RCX: 00007f1a0b39ce59 [ 684.776272][T10146] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000009 [ 684.784347][T10146] RBP: 00007f1a0b432d6f R08: 0000000000000000 R09: 0000000000000000 [ 684.792423][T10146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 684.800499][T10146] R13: 00007f1a0b616128 R14: 00007f1a0b616090 R15: 00007ffdcbc50478 [ 684.808880][T10146] [ 684.812267][T10146] Kernel Offset: disabled [ 684.816633][T10146] Rebooting in 86400 seconds..