last executing test programs: 2m15.724082888s ago: executing program 2 (id=172): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20040051}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x40050}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000a80)={@local, @local, @val={@void, {0x8100, 0x2, 0x1, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x2e, 0x28, 0x65, 0x0, 0x10, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast2}, {{0x4e24, 0x4e20, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0xfffe, 0x0, 0x57}}}}}}, 0x0) 2m15.57470667s ago: executing program 2 (id=173): unshare(0x66000080) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="5000000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="0014000000000000280012800a000100767863616e0000c3cd001857738d920001000000", @ANYRES32=0x0, @ANYBLOB="004100002000010008001c00", @ANYRES32=r2], 0x50}}, 0x0) 2m13.642559525s ago: executing program 2 (id=183): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) pwritev(0xffffffffffffffff, 0x0, 0x0, 0xffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = userfaultfd(0x801) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f000023a000/0x2000)=nil, 0x2000}, 0x6}) r4 = socket$rxrpc(0x21, 0x2, 0x0) setsockopt$RXRPC_SECURITY_KEY(r4, 0x110, 0x1, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, &(0x7f00000000c0)="260f799f050000000f35f3af66baf80cb87cdbde82ef66bafc0c66ed0f20d835080000000f22d8b805000000b9000000000f01d967660fdb19c7442400f0000000c744240252b30000c7442406000000000f011c24c744240000400000c744240200000000c7442406000000000f011c240f01c4", 0x74}], 0x1, 0x14, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) 2m11.726569808s ago: executing program 2 (id=187): mknod$loop(0x0, 0x1, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) dup2(r2, r0) 2m11.502339457s ago: executing program 2 (id=188): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_SET_MSRS(r0, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="5f000000000000000a0100"]) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000240)={0x3, 0x39a, 0x0, &(0x7f0000000300)="c5a3b9bd6c64852dd8b87ecca33e2ac9cfc52fc5e18c", 0x0, 0x16}) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000ffff1a40d8048200b7ce0102829709021200010000000009040000000202010009"], 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x7, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) fgetxattr(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="6f73322e7d28245d25242e27230058331cd8600b3a30a3ea69b6e5901a5312c03512494ea8e06d34317dcc63f1bbdd6f0065947021bd161f90b7a0c1950b"], &(0x7f0000000140)=""/23, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r4, 0x80044dff, &(0x7f00000003c0)) bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) getpid() r7 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x0, 0x60) preadv(r7, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) read$FUSE(r7, &(0x7f0000005b80)={0x2020}, 0x2020) 2m11.010715786s ago: executing program 2 (id=191): syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000440), 0xa, 0x241) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000001480)={0xabb, 0xd, 0x5, "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"}) socket$packet(0x11, 0xa, 0x300) r1 = socket$netlink(0x10, 0x3, 0xa) r2 = dup(r1) r3 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) ftruncate(r3, 0x200004) sendfile(r2, r3, 0x0, 0x80001d00c0d1) syz_emit_ethernet(0x45, &(0x7f00000002c0)={@link_local, @local, @void, {@mpls_uc={0x8847, {[{0x8, 0x0, 0x1}, {0x3}, {0x8}, {0xd, 0x0, 0x1}, {0x9, 0x0, 0x1}, {}, {0x8001, 0x0, 0x1}, {0x3}], @ipv4=@generic={{0x5, 0x4, 0x0, 0x8, 0x17, 0x67, 0x0, 0x7, 0x2, 0x0, @empty, @local}, "a9f091"}}}}}, 0x0) 2m10.786982304s ago: executing program 32 (id=191): syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000440), 0xa, 0x241) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000001480)={0xabb, 0xd, 0x5, "4c6bc09f5a156f1ee39b763ddcbb626052103c678ce02c7a8d4b2e9f978d936e8a9a8d0f9a91407364422c1d56a3e707f9c9f70834d1f8038e02de39c389c18c8876b10a4c8f557eec57bb5c8d195560a0faca27b9add7ae7b59194f00b8bc3044fa1280368bd07416af150ec7301dcb542e8a5ccdf5f2c329241f847af2830ebe128153212bd1c84e34b753d6dd973c2192996294aeb613b9de6742b061b16b7ca511e2345119fa2a3611f8372908e3d4f5458888de9a829ce21c0a6a02cc32040e169e7a198444211a4801892fe447a60d1bb278289d120dbdf4bc75a1d26ada1f7ffbe67e57c438e3d35e7e8a86acddcadf4013ad97b9447c2aedb83749edc15d2d1f7316d783d195388c5ae2e975dc9140b40401010a2ca1058bd6f50a51ac43a3efb27af73f54a4c611db0d464a55c4d071e8df9f30c85be8122afcc10a8a40bfd7d2ad4bacc6b89018054a9eb7d93db7d902cb32d6d1829b6dc725cb7e3eaede569e668f2847bd94667f734a652ac87243ed3bc7efbb3f0edfae2716699c27e250df98ea65b6c6c1c098de543434f38272e9389ec051f28c8ae45f2ef3bf8b36d9e9961e1fbd2261d0cbc7b6f3007d07bf3634faf96c8e10d546932c2a010d6805b7ca76536077b7f8883e588dcf9c908331c672660a2a5f993c9740385a457d44bd107ee958d8db85e06a3525e2921102dbbdb107f7f95a8d877b11329d892153ce210a90862c930613534cfbd534437bf38bc63bd72e046693ac1669c909f5a95b731b12ef02c2cb027db6d9574f09b88cb82b10840517b322a178b918807f4c85449558218c942631570c6fcb0de4be5895381a51d0a54a549276eb2399dc11ef71e9157147bf782829861d8f7a156b37cbe01d73755c2bf312e2d400b8d80cd42daf2c31e85d6583952f103394301622d79b786795ff844a596adcaae6fecf023eb68a180c4e19a339bfcfed89b3f086c1449a78d671628988f8faee13fe3d4b07a910a8829cd805645f81598c6a35fbaa8ea0787ffc32eb0b4d179f51efb1af038ec19bc17e3577d3d461caf4a712f2732437c8c01a8ce692d5b1cbf3754653f4b7db3e09f192b7905fe627e311aa3269a4a773a237fe08e085500aebd3bd9577cfe7561f2f8d9677f4bc77e4bb6ed2f98529d0e4be386cd5e890f9d64bef36e37c63f45764963da94e5583f7c192fa1dfed9d44b7a4c5e7a44cdcdf92c57d5301909af8a5c002d3d07537c634ee113f07c16b677d3966e337b3360336ac8e52e0a35c23a873839395d3799d029c0ec745d77881afa8761459fb950f36c03c46e836130f8ad05cfe811431a61c0009a3414880db47a153f6fb8fd7dcce0515616e98b570c3cf0d5d3ed23c26156eb7812f66550b7614a001ccdfba83cdc4acee50f4567394094103f40810a22c3d9ea4ec4dfb3274b6294a5c794ed01cd91a81192e25a2990e6539c85d62fd3b2ac7b4ded24694fdf3725e3ba61f390e9c975a8bc051e2a9bc03c606e54ed9a6f048308deda12b5b96c25d6b04e01f429797e50e2de01ac699fa2a1fbca230bd826ace7eb735d4ee4ec114edbebdea54b8fb405ae840568528ea0aa761a0110751fe29b6cf038b3f1f0ad43a6d15c710da9552f036b197942d613240dd2826aebf681103e8e3bd9eda9dab1f375b8181daf0581cc7e041c412bdf6eb46bc634b1c499fc88d532d642019746d335ddf673af72834a86cfcd2ca33fc58c48789337171c36345d00b4383003b7a7eedb9a6e2a19273e274dad1ce5e0302c018fd952ff216a5e77da66be8aee7b1bea6808f1c618a0d9dcec0241ef9c5475b41ea0f15452ecab0ab8cc8b196e4c9674e92d10feb3255d96a60628e59b846514ed5ec6e474044934841a5c86cc89770ea5dd4c1e0811c9799b91ea303ff9387b43a9061beca388ab9e1c384f317853c7be99512c1a64c32a7d4ee09b7c703403cff0507ef858ac21273d665a6e25fb8005d4cd0a97b282c21067418767a1ff1db517dfdfa3db58d350d8b1afabfcb506a8ce5921dafd7432e69f702a532807766d79ab18cc035aa1ca7f699fa6243b8264f38c86f5b20637608ed66f3e9f9950982bd8869fef9a01fea3639bd7baf9ed7be25b1d46276bf69788ed716a60ef40bf045b5a9f779fc74147357e2a7fe97df4fcdc166da5cc8f70886c8d7300bf364c28098bfb2d29e6906717815e5552f281fef2476b3c780317f5bd61ed5c6f59d540188910aa8aae4d0851290169800e50caa894c98449b06ec5af6dc50c0b823069b6366dccf17da1e7f37fd6068e257c103aaf2d7f85e2d42f028cebb74f829a7045cc7908892d795c86067f37d22893b8bac527b55dcb4cc2fda3bbdd7ae91a75d95112768c9477c9d3665d18f00112de915e2f85b95a80b9775451a7c6d91181f40608c571d181cb8c81792e14e51bb9095f1d7b8860091c0d0a4a1c3e3d92d9136f2161a23feb517f83b2e570f5c1a6d52db5a35bb37a407977bfe48c7b5766d9dd2e85b6a6d08431c7235dd6a859ddb460db6bf6a4e4827315ecdeeab0b2a5c17513f57bfe65b28904d347359d2cc0d77b0f45b4f8b3bd0b5646eb9eca85b9160f7e9f9978b75026c019944a4af3436b32b14fd2d85b6aed31592e6a10e7a3c9caff27fb24172c509de9e1f7748b2230ced746a8de7fe3d790d34bbbacc66e648d9bd88a3eae604971d8822b38afab6ff9f1d79f3034a241228ae54cbf86599d2eca70eae2e6a848c92d33eb20c66793e162dbef282562fa1360959333aa19fa7e02b8305776b808a9cca46e857263ae0f6bccf0ef20626709f2ad32e3d66b3702b7c99cb09d70777c2f459d441260e4aa21a423b2a62cd8e724b202260da18578080e77ab8b2cef257375eb354ab187b3daa3b79c4640af85ef2ad3442104f58164360cc0234d221a3a28614fa43e2cb6271a2ddb8d3c22c7a36d97cec90547776aaa46b29c1658e2113fd819ade1d65d37ea953000a4c2902109d50a4f4f9e0aa95016132091e817b043ac5f0cc3b9366fcbb76bac83b9c49da917439c94ae2bfc002c3945976436e6253e3cabb9b5d0c913dba2346cc236cd48db0079c8357fa37c85ec3885cc438b0bf39c892eed66b2132158a895160ed639b61c8a7c9d00ad5359911019e1d11aeebb1043e4c827fd879a05867945f4611b2609f5b7302717f4f96a4ba768e741c4d6c59b90315eb71595e8729b14335aaa2fb8b9ebb2f620ae399b7c7a9336ff14b315059e00b5fec269f764038040cd3a4efcb73eb790794c753968d3c228b40310effe2a6312fced9616dc31586c367865f428b7ae4e17ca59182d0cbfd4ac146359749e33fd1ac55ec1f2168e18c79dbb307f86be04e2ed9066b5326ce6edf8b12ee703af79759ff5fa9694a6d5f69bf45e05cd39cd2cebca1c1e35878d0bd2464404740fbe71b0f9dff750edab2184f0c3f5c2c8346f638c93f35a2cdbcb1893cf44e4fbe6cf7555e15626b72572f61bda4052f9ec8eae383885f83300efcdad413fba4b75475631d874e7aab41dd59b827ea872640088c64965d0ea1e768c54d6b464b121ffb6252d0c8dc9f3cc8d845c1e39befccfa2f77b91bb65416745caf51f4dcd14d210d65ffd778ef3cc92475d2eff1d026d2f19e0af6cad4de43cbfc060654d235c693b959bcfdcb5d6e6e7e75b362c1bdc989d348654ad87b2d3bd77550d61cff23b7d004505f4e487af3a70fbfa163c0b9270eaede13c018db2d205e1073999a8998ad7a764b85b10c13dd333dc8514b082601848b9aee0fd57ea989d318360e759c7585840fd2afaa3a00f494bec7a68b76295f64f33feebfa9d9da4cc1f001e05938d37b5ea4ee4a122e21ee2eea437e68975733f3e"}) socket$packet(0x11, 0xa, 0x300) r1 = socket$netlink(0x10, 0x3, 0xa) r2 = dup(r1) r3 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) ftruncate(r3, 0x200004) sendfile(r2, r3, 0x0, 0x80001d00c0d1) syz_emit_ethernet(0x45, &(0x7f00000002c0)={@link_local, @local, @void, {@mpls_uc={0x8847, {[{0x8, 0x0, 0x1}, {0x3}, {0x8}, {0xd, 0x0, 0x1}, {0x9, 0x0, 0x1}, {}, {0x8001, 0x0, 0x1}, {0x3}], @ipv4=@generic={{0x5, 0x4, 0x0, 0x8, 0x17, 0x67, 0x0, 0x7, 0x2, 0x0, @empty, @local}, "a9f091"}}}}}, 0x0) 7.382232913s ago: executing program 0 (id=787): execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) r0 = syz_io_uring_setup(0x1104, &(0x7f0000000240)={0x0, 0x100, 0x80, 0x2, 0x333}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_NAPI(r0, 0x1b, &(0x7f0000000140)={0xfff, 0x6}, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000080), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000003, 0x12, r3, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) 7.28659925s ago: executing program 0 (id=789): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x8000000000000001, 0x1c1280) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000440)={r0, 0x0, {0x0, 0x0, 0x0, 0x400, 0x200000, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c18e8438ef2a565ef1e83323695c58d66500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200000000000000000000000200"}}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) 7.204433456s ago: executing program 0 (id=791): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e7cc6120c4108a81ad7d0102030109021b00010000c005090423000103000000090585"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000980)={0x60, 0x3, 0x4, "b3e71bff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 3.722054962s ago: executing program 0 (id=813): r0 = socket$rds(0x15, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xc3490000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_proto_private(r0, 0x89e1, &(0x7f0000001080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000000000/0x4000)=nil) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fchdir(r1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000005c0), 0x40000000008d82, 0x0) syz_io_uring_setup(0x7, 0x0, 0x0, &(0x7f0000001200)) r5 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xce9a, 0x8, 0x3, 0x40004330}, &(0x7f00000006c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0x1, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2}) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r10], 0x50}, 0x1, 0xba01}, 0x0) r11 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r11, 0xaf01, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000820}, 0x0) 3.425364446s ago: executing program 4 (id=807): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) execve(0x0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000380)=0x0) sched_setattr(r2, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@bridge_getneigh={0x20, 0x1e, 0xd01, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0xa001, 0x45001}}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1, 0x0, 0x0, 0x2000000}, 0x20) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x19, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000140)=0x2, 0x4) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) r6 = socket(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@gettaction={0x14, 0x32, 0x200, 0x70bd25, 0x25dfdbff}, 0x14}}, 0x880) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000000)={'team0\x00', &(0x7f0000000140)=@ethtool_sfeatures={0x3b, 0x2, [{0x209}, {0xffffff7e, 0x5461d6e7}]}}) r8 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) ioctl$VIDIOC_S_INPUT(r8, 0xc0045627, &(0x7f0000000180)=0x1) ioctl$VIDIOC_S_CROP(r8, 0x4014563c, &(0x7f0000000100)={0x9, {0xf8001002, 0x9, 0x6, 0xb}}) 2.908931127s ago: executing program 5 (id=815): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='[::/\xd9\xc0\xee*f#6\x96\n:\x00\x06m\x13\xd4\xa5\x86V\xf0|`\x85P\xdc\x9b\x03\x14\x17\x93\x06f\x92>|\xe1!\xa7\xca$\xd3\x94\x7fve|\xcd\xb5R\xae\x13IQ,J\x1a\x06v5\x97i\xf2\xec\xbeq\xad\x1a\x02\x8b\x94~\x8bn\x89\x16`_\xaf\xbf\xd1\xb87\xe3\x02\x9bz\x055\xb2\xff\xd3[\xc8\xe3\xd4\x1d\xdf\xabN\xe0Ee\xb2\xe1\xed\x02\xa9\x83K\xb6`0g\xa5)\xcdPaE\x1e\xa3I@\x84 g\xd5N\xe4\xefM\x8a\x92%7\xd8\f:\xc9\x8b7\x93r\x185H_\xd1\xab\xaa\xfc^\xd2\xfb\xda\xf3\xaf\xc6I\x8e\xb2G\xc6\xe5\x95c\xa1\xfb\x7f\x18t\xbbE\x12\xea\xa4\x9b\x9eB\x17\xbb4Fbc\xfd \'\x11\x15LM\xcd\x90\xd5K\xe1\x02_', 0x0) 2.786538687s ago: executing program 5 (id=816): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000480)=ANY=[], 0x1000f) 2.745183s ago: executing program 5 (id=818): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="00000102", 0xfffff, r0) syz_usb_connect(0x3, 0x24, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0xd8, 0x57, 0xe0, 0x40, 0xdfc, 0x1, 0xc19, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x3, [{{0x9, 0x4, 0xe5, 0x0, 0x0, 0x25, 0x7d, 0x27}}]}}]}}, 0x0) keyctl$read(0xb, r1, 0x0, 0x0) 2.658260737s ago: executing program 0 (id=819): write$dsp(0xffffffffffffffff, &(0x7f0000000200)='m', 0x1) r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) r1 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r1, &(0x7f0000000200)="a3", 0x1) ioctl$SNDRV_PCM_IOCTL_DRAIN(r1, 0x4144, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r1, 0x40084146, &(0x7f0000000140)=0xfff) 2.601529592s ago: executing program 0 (id=821): r0 = socket(0x10, 0x3, 0x0) syz_usb_connect$uac1(0x0, 0xa0, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8e, 0x3, 0x1, 0x10, 0x10, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8001, 0x9}, [@extension_unit={0x7, 0x24, 0x8, 0x4, 0x1, 0x5}, @selector_unit={0x6, 0x24, 0x5, 0x3, 0x40, 'n'}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x2, 0x3, 0x3, 0x1, 'b', 'Qq\t'}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x14, 0x4, 0x1, {0x7, 0x25, 0x1, 0x1, 0x7f, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x1, 0x5, 0x1002}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x6896, 0x2, 0x0, "78f4cd9535ca"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x7, 0x4, 0x3, {0x7, 0x25, 0x1, 0x2, 0xf4}}}}}}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) write(r0, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2f", 0xf) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x2e, 0x100008, 0x0, 0x8, 0xf, 0x3, 0x3, 0xfc, 0x0, 0x1, 0x0, 0x4000000, 0x0, 0xff, 0x0, 0xfffffeff}}) mmap$xdp(&(0x7f0000016000/0x4000)=nil, 0x4000, 0x700000d, 0x811, 0xffffffffffffffff, 0x180000000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r5 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) r6 = syz_clone3(&(0x7f0000000980)={0x10002000, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f00000007c0), {0x26}, &(0x7f0000000800)=""/55, 0x37, &(0x7f0000000840)=""/249, &(0x7f0000000940)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x9}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x2, r6, 0x3, &(0x7f0000000a00)) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @empty, 0x5}, 0x1c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00'}) sendmsg$nl_route_sched(r2, 0x0, 0x4000080) timerfd_create(0x8, 0x0) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) 2.422743796s ago: executing program 4 (id=823): socket$kcm(0x2, 0xa, 0x2) socket$kcm(0x2, 0xa, 0x2) socket$packet(0x11, 0x2, 0x300) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r0, &(0x7f0000001580)=[{&(0x7f00000004c0)=""/72, 0x48}], 0x1, 0x20000036, 0x0) 2.379617079s ago: executing program 4 (id=824): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @can, @xdp={0x2c, 0x4, 0x0, 0x15}, @hci={0x1f, 0x4, 0x1}, 0xc920, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x29a, 0x4e3e}) 2.25082276s ago: executing program 4 (id=826): mq_open(&(0x7f0000000000)='.{+:+^\x00', 0x40, 0x56, 0x0) 2.24843168s ago: executing program 3 (id=827): r0 = socket$inet(0x2, 0x801, 0x0) sendto$inet(r0, 0x0, 0xe803, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) pipe(&(0x7f00000000c0)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) socket(0x2d, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r3, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r3, 0x0, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000480)=[{&(0x7f0000000180)="480000001400197f09004b0101048c590288ffffff010001000000000028213ee20600d4ff5bffff00c7e5ed5e00000000000000000000eaf60d18125d4b18857a9eace3dbe8b12c", 0xfe0e}], 0x1) 2.224118682s ago: executing program 4 (id=828): r0 = syz_usb_connect(0x0, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000280)={&(0x7f0000002080)=[{0x8, 0x211, 0x0, 0x0}, {0x401, 0x4658966eeb93c24b, 0x0, 0x0}], 0x2}) 1.404298178s ago: executing program 3 (id=829): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_ringparam={0x11, 0x5, 0xfffffffd, 0xa3, 0x40000000, 0x5, 0x5, 0x80000000, 0xfe}}) 1.287168587s ago: executing program 3 (id=830): sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020800000100000000000001000000000100140003"], 0x18}}, 0x0) io_setup(0x30, &(0x7f0000000600)=0x0) pipe2$9p(&(0x7f00000000c0), 0x4000) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="01", 0x24}]) 1.194783885s ago: executing program 3 (id=833): r0 = socket(0x2a, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYRES32], 0x58}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[], 0x50) socket$netlink(0x10, 0x3, 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f00000000c0)={0x100000011, @multicast2, 0x0, 0x0, 'wrr\x00', 0x19e172f08959ac4a, 0x10001, 0x47}, 0x2c) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 1.103000262s ago: executing program 5 (id=834): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/tty/ldiscs\x00', 0x0, 0x0) lseek(r0, 0x9, 0x0) 1.046781957s ago: executing program 3 (id=835): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x1d7a, 0x1c1400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000400)=ANY=[], 0x1df) write$binfmt_misc(r1, &(0x7f0000000600)="d4c1eda47ef902b191d7d08b238b860a09f3a94b0ef55e21cd563eac2501000000f617", 0x23) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 1.034526127s ago: executing program 1 (id=836): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) r2 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r2, &(0x7f0000000340)={'#! ', './file0'}, 0xb) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 983.872302ms ago: executing program 5 (id=837): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a8008"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 854.702832ms ago: executing program 3 (id=838): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fsopen(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000400), r3, 0x0, 0x3, 0x1}}, 0x20) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) read$FUSE(r4, 0x0, 0x0) r5 = socket(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0xc08, 0x3, 0x418, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x2a0, 0x2e8, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {}, {}, {0xfffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x478) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x20101, 0xff8}) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000280)={0x3, 0x0, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) 854.587112ms ago: executing program 5 (id=839): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, 0x0, 0x0) socket(0x2, 0x80805, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$mice(0xffffffffffffff9c, 0x0, 0x40800) unlinkat(r3, 0x0, 0x200) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x97ff) 800.600916ms ago: executing program 1 (id=840): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffd) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001000), 0x581, 0x40000000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000003590000a2bc5603ca00000f7f89000000200000", 0x2f}], 0x1) 637.778739ms ago: executing program 1 (id=841): capset(0x0, &(0x7f0000000040)={0x200000, 0x220000, 0xc, 0x0, 0x2, 0xfffffffe}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8913, &(0x7f0000000040)={'tunl0\x00', @remote}) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 454.864084ms ago: executing program 1 (id=842): write$dsp(0xffffffffffffffff, &(0x7f0000000200)='m', 0x1) r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) r1 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r1, &(0x7f0000000200)="a3", 0x1) ioctl$SNDRV_PCM_IOCTL_DRAIN(r1, 0x4144, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r1, 0x40084146, &(0x7f0000000140)=0xfff) 86.098733ms ago: executing program 4 (id=843): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000240)={[&(0x7f0000000180)='=\x8d5\x10\xe4\x93\xb1j\xfb\xd4\x03\x10jJ\xac\xfa\xc4\x9a~\xe5R\x9bW\x14\xeb\xb8\xe9\xd8\x94GYLqCy\x80\x1d\x95)\b\xf9\x96\xfb\xdb\xb1\xda\xbe\xcf\x97uZ\xc1\xb3\x1c.1\xdf\x14y\x87\xd5\xf9\xeb\x88%\x1d{x\xfb\xf2D\xc6\xdd\xd7\xa3%\xd0\'_\xeb\x98\xf8\xa6\x03\x00\x00\x00K\xd5\xe87\xfc\xb1\xe2\fH\xa5&']}) 85.498323ms ago: executing program 1 (id=853): r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) write$dsp(r0, &(0x7f0000000200)='m', 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x801) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r2 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r2, &(0x7f0000000200)="a3", 0x1) ioctl$SNDRV_PCM_IOCTL_DRAIN(r2, 0x4144, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40084146, &(0x7f0000000140)=0xfff) 0s ago: executing program 1 (id=844): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, 0x0, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x158) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000fedbdf25fc000000000000000000000000000000ac1414bb00000000000000000000000000000400000000000a0060", @ANYBLOB='\x00'/56], 0xb8}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x9}, {0x0, 0x0, 0x1}}}, 0xb8}}, 0x4000) kernel console output (not intermixed with test programs): ridge0: port 3(syz_tun) entered disabled state [ 71.275896][ T4459] device syz_tun entered promiscuous mode [ 71.308237][ T4459] bridge0: port 3(syz_tun) entered blocking state [ 71.314808][ T4459] bridge0: port 3(syz_tun) entered forwarding state [ 71.483887][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.490529][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.629985][ T4468] tipc: Started in network mode [ 71.644149][ T4468] tipc: Node identity 267ebe7eb879, cluster identity 4711 [ 71.668877][ T4468] tipc: Enabled bearer , priority 0 [ 71.707169][ T4470] device syzkaller0 entered promiscuous mode [ 71.766979][ T4468] tipc: Resetting bearer [ 71.814764][ T4465] tipc: Resetting bearer [ 71.839398][ T4465] tipc: Disabling bearer [ 71.868708][ T4262] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 71.908336][ T4246] usb 5-1: USB disconnect, device number 3 [ 72.248705][ T7] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 72.279769][ T4262] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 72.360036][ T4292] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 72.458911][ T4262] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 72.468153][ T4262] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.485339][ T4262] usb 2-1: Product: syz [ 72.506225][ T4262] usb 2-1: Manufacturer: syz [ 72.515695][ T4262] usb 2-1: SerialNumber: syz [ 72.548036][ T4262] usb 2-1: config 0 descriptor?? [ 72.579234][ T4289] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 72.601160][ T4262] em28xx 2-1:0.0: New device syz syz @ 12 Mbps (2040:0264, interface 0, class 0) [ 72.625778][ T4262] em28xx 2-1:0.0: Device initialization failed. [ 72.649246][ T4262] em28xx 2-1:0.0: Device must be connected to a high-speed USB 2.0 port. [ 72.679150][ T7] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 72.696795][ T7] usb 1-1: config 0 has no interface number 0 [ 72.725629][ T7] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 72.750930][ T7] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 72.782177][ T7] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 72.793911][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.824657][ T7] usb 1-1: config 0 descriptor?? [ 72.843005][ T4227] usb 2-1: USB disconnect, device number 4 [ 72.849168][ T4471] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 72.880218][ T7] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 72.929136][ T4292] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 72.947919][ T4292] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.968822][ T4289] usb 4-1: config 0 has no interfaces? [ 72.992878][ T4292] usb 3-1: Product: syz [ 73.004509][ T4292] usb 3-1: Manufacturer: syz [ 73.033785][ T4292] usb 3-1: SerialNumber: syz [ 73.074467][ T4292] usb 3-1: config 0 descriptor?? [ 73.112829][ T4227] usb 1-1: USB disconnect, device number 2 [ 73.128944][ T4289] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 73.139811][ T4292] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 73.156013][ T4289] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.165170][ T4292] usb 3-1: setting power ON [ 73.182712][ T4292] dvb-usb: bulk message failed: -22 (2/0) [ 73.192235][ T4289] usb 4-1: Product: syz [ 73.196445][ T4289] usb 4-1: Manufacturer: syz [ 73.249392][ T4292] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 73.259920][ T4289] usb 4-1: SerialNumber: syz [ 73.274068][ T4289] usb 4-1: config 0 descriptor?? [ 73.322548][ T4292] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) error while loading driver (-19) [ 73.395976][ T4292] dvb_usb_cxusb: probe of 3-1:0.0 failed with error -22 [ 73.454135][ T4292] usb 3-1: USB disconnect, device number 3 [ 73.892558][ T7] usb 4-1: USB disconnect, device number 4 [ 74.298183][ T4512] tipc: Started in network mode [ 74.308916][ T4512] tipc: Node identity 2e7d9fb9b633, cluster identity 4711 [ 74.326038][ T4512] tipc: Enabled bearer , priority 0 [ 74.345207][ T4512] device syzkaller0 entered promiscuous mode [ 74.426142][ T4512] tipc: Resetting bearer [ 74.435388][ T4509] tipc: Resetting bearer [ 74.469372][ T4509] tipc: Disabling bearer [ 74.611641][ T7] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 75.198919][ T7] usb 1-1: config 0 has no interfaces? [ 75.379270][ T7] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 75.399155][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.444843][ T7] usb 1-1: Product: syz [ 75.461955][ T7] usb 1-1: Manufacturer: syz [ 75.464726][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 75.498458][ T7] usb 1-1: SerialNumber: syz [ 75.524127][ T7] usb 1-1: config 0 descriptor?? [ 76.613566][ T1111] cfg80211: failed to load regulatory.db [ 76.736072][ T4532] syz.4.60 uses obsolete (PF_INET,SOCK_PACKET) [ 76.823626][ T4262] usb 1-1: USB disconnect, device number 3 [ 77.217146][ T4548] tipc: Enabled bearer , priority 0 [ 77.246915][ T4548] device syzkaller0 entered promiscuous mode [ 77.356425][ T4548] tipc: Resetting bearer [ 77.398523][ T4546] tipc: Resetting bearer [ 77.417430][ T4546] tipc: Disabling bearer [ 78.788674][ T4292] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 78.818747][ T1325] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 79.068763][ T1325] usb 2-1: Using ep0 maxpacket: 16 [ 79.178911][ T4292] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 79.208428][ T4292] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.262986][ T4292] usb 3-1: config 0 descriptor?? [ 79.311049][ T4292] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 79.522961][ T4575] program syz.2.70 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 79.539399][ T4575] netlink: 8 bytes leftover after parsing attributes in process `syz.2.70'. [ 81.438847][ T4292] gp8psk: usb out operation failed. [ 81.445163][ T4292] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 81.470078][ T4292] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 81.542375][ T4292] usb 3-1: USB disconnect, device number 4 [ 81.591988][ T1325] usb 2-1: unable to get BOS descriptor or descriptor too short [ 81.679065][ T1325] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 81.692404][ T1325] usb 2-1: can't read configurations, error -71 [ 82.188723][ T4292] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 82.598762][ T4292] usb 3-1: config 0 has no interfaces? [ 82.808763][ T4292] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 82.858335][ T4292] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.898748][ T4292] usb 3-1: Product: syz [ 82.917394][ T4292] usb 3-1: Manufacturer: syz [ 82.948767][ T4292] usb 3-1: SerialNumber: syz [ 83.000435][ T4292] usb 3-1: config 0 descriptor?? [ 83.534355][ T4618] batman_adv: batadv0: Adding interface: dummy0 [ 83.543005][ T4618] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.580175][ T4618] batman_adv: batadv0: Interface activated: dummy0 [ 83.701195][ T4621] batadv0: mtu less than device minimum [ 83.745880][ T4621] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 83.757958][ T4621] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 83.770606][ T4621] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 83.782212][ T4621] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 83.793764][ T4621] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 83.805895][ T4621] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 83.817427][ T4621] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 83.829403][ T4621] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 83.840965][ T4621] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 85.428678][ T4227] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 85.469719][ T4292] usb 3-1: USB disconnect, device number 5 [ 85.621551][ T4656] Zero length message leads to an empty skb [ 85.679005][ T4227] usb 4-1: Using ep0 maxpacket: 32 [ 85.798876][ T4227] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 85.818207][ T4662] netlink: 12 bytes leftover after parsing attributes in process `syz.0.100'. [ 85.822202][ T4227] usb 4-1: config 0 has no interface number 0 [ 85.998893][ T4227] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 86.018760][ T4227] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.078293][ T4227] usb 4-1: Product: syz [ 86.105902][ T4227] usb 4-1: Manufacturer: syz [ 86.140062][ T4227] usb 4-1: SerialNumber: syz [ 86.191130][ T4227] usb 4-1: config 0 descriptor?? [ 86.250525][ T4227] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 86.363617][ T1325] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 86.473437][ T4227] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 86.496961][ T4227] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 86.648704][ T1325] usb 5-1: Using ep0 maxpacket: 32 [ 86.688672][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 9 [ 86.788847][ T1325] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 86.821039][ T4227] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 86.853308][ T1325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.901779][ T7] usb 4-1: USB disconnect, device number 5 [ 86.908672][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 86.946792][ T7] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 86.991155][ T7] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 87.029336][ T1325] usb 5-1: config 0 descriptor?? [ 87.033872][ T7] quatech2 4-1:0.51: device disconnected [ 87.188795][ T4227] usb 1-1: config 0 has no interfaces? [ 87.388790][ T1325] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 87.449042][ T4227] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 87.460908][ T1325] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 87.481515][ T4227] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.510331][ T4227] usb 1-1: Product: syz [ 87.521035][ T4227] usb 1-1: Manufacturer: syz [ 87.527363][ T4695] device vlan2 entered promiscuous mode [ 87.533266][ T4227] usb 1-1: SerialNumber: syz [ 87.538516][ T4695] device bond0 entered promiscuous mode [ 87.560401][ T4227] usb 1-1: config 0 descriptor?? [ 87.569863][ T4695] device bond_slave_0 entered promiscuous mode [ 87.594909][ T4695] device bond_slave_1 entered promiscuous mode [ 87.619363][ T1325] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 87.626806][ T1325] usb 5-1: media controller created [ 87.665848][ T4670] az6027: more than 2 i2c messages at a time is not handled yet. TODO. [ 88.003282][ T1325] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 90.088957][ T1325] az6027: usb out operation failed. (-71) [ 90.108799][ T1325] az6027: usb out operation failed. (-71) [ 90.114560][ T1325] stb0899_attach: Driver disabled by Kconfig [ 90.166907][ T1325] az6027: no front-end attached [ 90.166907][ T1325] [ 90.218738][ T1325] az6027: usb out operation failed. (-71) [ 90.225027][ T1325] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 90.276396][ T1325] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input5 [ 90.340567][ T1325] dvb-usb: schedule remote query interval to 400 msecs. [ 90.361114][ T1325] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 90.401384][ T1325] usb 5-1: USB disconnect, device number 4 [ 90.464011][ T4289] usb 1-1: USB disconnect, device number 4 [ 90.591390][ T1325] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 90.630421][ T4729] tipc: Enabled bearer , priority 0 [ 90.644409][ T4729] device syzkaller0 entered promiscuous mode [ 90.695958][ T4729] tipc: Resetting bearer [ 90.746232][ T4728] tipc: Resetting bearer [ 90.789852][ T4728] tipc: Disabling bearer [ 91.110231][ T4740] tipc: Enabled bearer , priority 0 [ 91.137582][ T4740] device syzkaller0 entered promiscuous mode [ 91.195755][ T4740] tipc: Resetting bearer [ 91.229488][ T4739] tipc: Resetting bearer [ 91.250885][ T4739] tipc: Disabling bearer [ 91.349015][ T4717] delete_channel: no stack [ 91.858666][ T4227] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 92.228862][ T4227] usb 5-1: config 0 has no interfaces? [ 92.411452][ T4227] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 92.456467][ T4227] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.478035][ T4227] usb 5-1: Product: syz [ 92.484702][ T4227] usb 5-1: Manufacturer: syz [ 92.492008][ T4227] usb 5-1: SerialNumber: syz [ 92.505398][ T4227] usb 5-1: config 0 descriptor?? [ 92.718783][ T1325] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 93.109098][ T1325] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 93.124502][ T1325] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.188044][ T1325] usb 1-1: config 0 descriptor?? [ 93.250705][ T1325] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 93.329341][ T4782] tipc: Enabled bearer , priority 0 [ 93.364694][ T4782] device syzkaller0 entered promiscuous mode [ 93.379985][ T4782] tipc: Resetting bearer [ 93.423305][ T4779] tipc: Resetting bearer [ 93.449453][ T4779] tipc: Disabling bearer [ 93.457901][ T4772] program syz.0.134 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 93.475547][ T4772] net_ratelimit: 10 callbacks suppressed [ 93.475561][ T4772] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 93.511374][ T1325] gp8psk: usb in 128 operation failed. [ 93.548842][ T1325] gp8psk: usb in 137 operation failed. [ 93.561367][ T1325] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 93.603088][ T1325] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 93.627875][ T1325] usb 1-1: USB disconnect, device number 5 [ 94.233644][ T4800] kvm: pic: single mode not supported [ 94.254113][ T4800] kvm: pic: level sensitive irq not supported [ 94.270251][ T4800] kvm: pic: level sensitive irq not supported [ 94.287848][ T4800] kvm: pic: level sensitive irq not supported [ 94.298435][ T4800] kvm: pic: level sensitive irq not supported [ 94.353957][ T4800] kvm: pic: single mode not supported [ 94.360579][ T4800] kvm: pic: level sensitive irq not supported [ 94.404284][ T4800] kvm: pic: level sensitive irq not supported [ 94.456572][ T4800] kvm: pic: level sensitive irq not supported [ 94.482833][ T4818] tipc: Enabled bearer , priority 0 [ 94.499687][ T4800] kvm: pic: level sensitive irq not supported [ 94.499791][ T4800] kvm: pic: level sensitive irq not supported [ 94.562244][ T4820] device syzkaller0 entered promiscuous mode [ 94.725360][ T4818] tipc: Resetting bearer [ 94.831793][ T4817] tipc: Resetting bearer [ 94.860470][ T4817] tipc: Disabling bearer [ 95.327285][ T4289] usb 5-1: USB disconnect, device number 5 [ 95.652504][ T4844] netlink: 40 bytes leftover after parsing attributes in process `syz.2.158'. [ 95.671423][ T4844] netlink: 80 bytes leftover after parsing attributes in process `syz.2.158'. [ 95.712501][ T4844] netlink: 40 bytes leftover after parsing attributes in process `syz.2.158'. [ 95.736427][ T4844] netlink: 80 bytes leftover after parsing attributes in process `syz.2.158'. [ 95.764484][ T4844] netlink: 40 bytes leftover after parsing attributes in process `syz.2.158'. [ 95.779014][ T4844] netlink: 80 bytes leftover after parsing attributes in process `syz.2.158'. [ 96.025348][ T4862] tipc: Started in network mode [ 96.049622][ T4862] tipc: Node identity 9a9ae2437384, cluster identity 4711 [ 96.056888][ T4862] tipc: Enabled bearer , priority 0 [ 96.083037][ T4863] device syzkaller0 entered promiscuous mode [ 96.117564][ T4862] tipc: Resetting bearer [ 96.136459][ T4860] tipc: Resetting bearer [ 96.179397][ T4860] tipc: Disabling bearer [ 96.560644][ T1325] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 96.659359][ T4289] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 96.969803][ T1325] usb 2-1: unable to get BOS descriptor or descriptor too short [ 97.048862][ T4289] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 97.058510][ T4289] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.071703][ T1325] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 97.084898][ T1325] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 97.112008][ T4289] usb 5-1: config 0 descriptor?? [ 97.121671][ T1325] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 97.170641][ T4289] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 97.298989][ T1325] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 97.320844][ T1325] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.338693][ T1325] usb 2-1: Product: syz [ 97.360298][ T1325] usb 2-1: Manufacturer: syz [ 97.380764][ T1325] usb 2-1: SerialNumber: syz [ 97.402127][ T4872] program syz.4.167 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 97.421939][ T4872] netlink: 8 bytes leftover after parsing attributes in process `syz.4.167'. [ 97.758853][ T1325] usb 2-1: 0:2 : does not exist [ 97.820105][ T1325] usb 2-1: USB disconnect, device number 7 [ 98.078753][ T7] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 98.241684][ T4896] loop2: detected capacity change from 0 to 7 [ 98.275105][ T4896] Dev loop2: unable to read RDB block 7 [ 98.288357][ T4896] loop2: unable to read partition table [ 98.306041][ T4896] loop2: partition table beyond EOD, truncated [ 98.321575][ T4896] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 98.338798][ T4227] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 98.468817][ T7] usb 3-1: config 0 has no interfaces? [ 98.598742][ T4227] usb 1-1: Using ep0 maxpacket: 8 [ 98.648856][ T7] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 98.672185][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.702552][ T7] usb 3-1: Product: syz [ 98.714982][ T7] usb 3-1: Manufacturer: syz [ 98.723412][ T7] usb 3-1: SerialNumber: syz [ 98.756394][ T7] usb 3-1: config 0 descriptor?? [ 98.761865][ T4227] usb 1-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e [ 98.782037][ T4227] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.821933][ T4227] usb 1-1: config 0 descriptor?? [ 98.914143][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 98.960156][ T4907] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 99.049141][ T4887] netlink: 24 bytes leftover after parsing attributes in process `syz.2.173'. [ 99.128441][ T1325] usb 3-1: USB disconnect, device number 6 [ 99.359222][ T4289] gp8psk: usb out operation failed. [ 99.366136][ T4289] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 99.433857][ T4289] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 99.479391][ T4289] usb 5-1: USB disconnect, device number 6 [ 99.976695][ T4922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.184'. [ 100.013080][ T4922] netlink: 8 bytes leftover after parsing attributes in process `syz.3.184'. [ 102.066880][ T1108] usb 1-1: USB disconnect, device number 6 [ 102.301970][ T4943] tipc: Enabled bearer , priority 0 [ 102.339544][ T4943] device syzkaller0 entered promiscuous mode [ 102.403493][ T4942] tipc: Resetting bearer [ 102.460786][ T4942] tipc: Disabling bearer [ 102.628388][ T4951] netlink: 4 bytes leftover after parsing attributes in process `syz.1.193'. [ 103.423188][ T4958] chnl_net:caif_netlink_parms(): no params data found [ 103.760015][ T4958] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.800250][ T4958] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.821884][ T4958] device bridge_slave_0 entered promiscuous mode [ 103.889857][ T4958] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.928187][ T4958] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.937175][ T4958] device bridge_slave_1 entered promiscuous mode [ 104.080029][ T4958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.141526][ T4958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.290982][ T4958] team0: Port device team_slave_0 added [ 104.311180][ T4958] team0: Port device team_slave_1 added [ 104.378766][ T1108] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 104.423502][ T4958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.436834][ T4958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.490691][ T4958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.517655][ T4958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.531125][ T4958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.593972][ T4958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.714620][ T4958] device hsr_slave_0 entered promiscuous mode [ 104.729395][ T4958] device hsr_slave_1 entered promiscuous mode [ 104.746616][ T4958] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.765851][ T4958] Cannot create hsr debugfs directory [ 104.771635][ T1108] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.798971][ T1108] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.843274][ T1108] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 104.863533][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.893578][ T1108] usb 2-1: config 0 descriptor?? [ 105.213664][ T4958] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 105.238731][ T4227] Bluetooth: hci1: command 0x0409 tx timeout [ 105.325015][ T4958] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 105.363989][ T4958] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 105.381823][ T1108] hid-steam 0003:28DE:1142.0001: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 105.440658][ T1108] hid-steam 0003:28DE:1142.0002: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 105.498354][ T4958] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 105.538903][ T1108] hid-steam 0003:28DE:1142.0001: Steam wireless receiver connected [ 105.923349][ T4958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.985532][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 105.995587][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 106.012795][ T4958] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.063356][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 106.071769][ T5018] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.104298][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 106.119108][ T4302] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.126239][ T4302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.149811][ T4246] usb 2-1: USB disconnect, device number 8 [ 106.174850][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 106.193844][ T4246] hid-steam 0003:28DE:1142.0001: Steam wireless receiver disconnected [ 106.217002][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 106.246995][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 106.277131][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.284346][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.292537][ T5019] netlink: 4 bytes leftover after parsing attributes in process `syz.4.211'. [ 106.343785][ T5020] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.390264][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 106.407178][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 106.456815][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 106.528469][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 106.582080][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 106.619871][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 106.642752][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 106.668880][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 106.687485][ T3050] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 106.722574][ T4958] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 106.779054][ T4958] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 106.807038][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 106.824271][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 106.845455][ T5026] tipc: Enabled bearer , priority 0 [ 106.879523][ T5023] device syzkaller0 entered promiscuous mode [ 106.980178][ T3050] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.030046][ T5022] tipc: Resetting bearer [ 107.081592][ T5022] tipc: Disabling bearer [ 107.104812][ T5016] loop3: detected capacity change from 0 to 40427 [ 107.154854][ T3050] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.214494][ T5016] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 107.251729][ T5016] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 107.284090][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 107.302011][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 107.318784][ T4227] Bluetooth: hci1: command 0x041b tx timeout [ 107.352845][ T3050] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.412095][ T5016] F2FS-fs (loop3): Found nat_bits in checkpoint [ 107.429167][ T4958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.452336][ T3050] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.746935][ T5016] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 107.759007][ T5016] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 107.946311][ T3050] tipc: Left network mode [ 108.564473][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 108.589845][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 108.730424][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 108.745905][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 108.782879][ T4958] device veth0_vlan entered promiscuous mode [ 108.822216][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 108.860405][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 108.955425][ T4958] device veth1_vlan entered promiscuous mode [ 109.042241][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 109.069551][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 109.101704][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 109.139478][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 109.176374][ T4958] device veth0_macvtap entered promiscuous mode [ 109.224046][ T4958] device veth1_macvtap entered promiscuous mode [ 109.408863][ T4227] Bluetooth: hci1: command 0x040f tx timeout [ 109.466164][ T4958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.504786][ T4958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.552887][ T4958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.591061][ T4958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.613646][ T4958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.634542][ T4958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.662472][ T4958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.693477][ T4958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.723158][ T4958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.747385][ T4958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.784767][ T4958] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.848366][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 109.870578][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 109.909521][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 109.949069][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 109.995356][ T4958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.028534][ T4958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.066481][ T4958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.098753][ T4958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.109435][ T4958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.143179][ T4958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.174093][ T4958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.202100][ T4958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.222257][ T4958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.244353][ T4958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.276302][ T4958] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.333289][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 110.369558][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 110.370027][ T5083] loop1: detected capacity change from 0 to 32768 [ 110.410638][ T4958] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.430002][ T4958] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.465729][ T4958] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.500555][ T5083] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.221 (5083) [ 110.561690][ T4958] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.567396][ T5078] loop0: detected capacity change from 0 to 40427 [ 110.608003][ T5083] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 110.658843][ T5083] BTRFS info (device loop1): force clearing of disk cache [ 110.678047][ T5078] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 110.706557][ T5078] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 110.715721][ T5083] BTRFS info (device loop1): force zlib compression, level 3 [ 110.778725][ T5083] BTRFS info (device loop1): setting nodatacow [ 110.827510][ T5083] BTRFS info (device loop1): enabling auto defrag [ 110.855686][ T5078] F2FS-fs (loop0): Found nat_bits in checkpoint [ 110.868843][ T5083] BTRFS info (device loop1): max_inline at 0 [ 110.874891][ T5083] BTRFS info (device loop1): using free space tree [ 110.948740][ T5083] BTRFS info (device loop1): has skinny extents [ 110.955420][ T3050] device hsr_slave_0 left promiscuous mode [ 110.966280][ T3050] device hsr_slave_1 left promiscuous mode [ 111.063909][ T5078] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 111.081877][ T5078] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 111.104310][ T3050] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.129259][ T3050] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 111.159491][ T3050] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.259050][ T3050] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.323694][ T3050] device bridge_slave_1 left promiscuous mode [ 111.368879][ T5083] BTRFS info (device loop1): enabling ssd optimizations [ 111.380440][ T3050] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.404312][ T5083] BTRFS info (device loop1): clearing free space tree [ 111.413815][ T5083] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 111.424821][ T5083] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 111.427463][ T3050] device bridge_slave_0 left promiscuous mode [ 111.479252][ T13] Bluetooth: hci1: command 0x0419 tx timeout [ 111.490140][ T5083] BTRFS info (device loop1): creating free space tree [ 111.501552][ T5083] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 111.513190][ T5083] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 111.530282][ T3050] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.744718][ T3050] device veth1_macvtap left promiscuous mode [ 111.769941][ T3050] device veth0_macvtap left promiscuous mode [ 111.776088][ T3050] device veth1_vlan left promiscuous mode [ 111.815644][ T3050] device veth0_vlan left promiscuous mode [ 111.858943][ T5083] loop1: detected capacity change from 32768 to 0 [ 112.113405][ T144] loop: Write error at byte offset 9223372036860092415, length 4096. [ 112.139029][ C0] blk_update_request: I/O error, dev loop1, sector 10384 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 112.150939][ C0] BTRFS error (device loop1): bdev /dev/loop1 errs: wr 1, rd 0, flush 0, corrupt 0, gen 0 [ 112.216964][ T5127] F2FS-fs (loop0): Failed to start F2FS issue_checkpoint_thread (-12) [ 112.260832][ T144] loop: Write error at byte offset 9223372036860018687, length 4096. [ 112.280183][ C1] blk_update_request: I/O error, dev loop1, sector 10240 op 0x1:(WRITE) flags 0x1800 phys_seg 1 prio class 0 [ 112.292027][ C1] BTRFS error (device loop1): bdev /dev/loop1 errs: wr 2, rd 0, flush 0, corrupt 0, gen 0 [ 112.302631][ T144] loop: Write error at byte offset 9223372036860047359, length 4096. [ 112.329028][ C1] blk_update_request: I/O error, dev loop1, sector 10296 op 0x1:(WRITE) flags 0x1800 phys_seg 4 prio class 0 [ 112.340803][ C1] BTRFS error (device loop1): bdev /dev/loop1 errs: wr 3, rd 0, flush 0, corrupt 0, gen 0 [ 112.368413][ T4182] BTRFS: error (device loop1) in __btrfs_update_delayed_inode:995: errno=-5 IO failure [ 112.380971][ T4182] BTRFS info (device loop1): forced readonly [ 112.387783][ T4182] BTRFS: error (device loop1) in __btrfs_run_delayed_items:1089: errno=-5 IO failure [ 112.436269][ T4182] BTRFS warning (device loop1): Skipping commit of aborted transaction. [ 112.458716][ T4182] BTRFS: error (device loop1) in cleanup_transaction:2020: errno=-5 IO failure [ 112.500973][ T4182] BTRFS: error (device loop1) in free_log_tree:3416: errno=-5 IO failure [ 112.514406][ T4182] BTRFS: error (device loop1) in free_log_tree:3416: errno=-5 IO failure [ 112.830497][ T3050] team0 (unregistering): Port device team_slave_1 removed [ 112.880305][ T3050] team0 (unregistering): Port device team_slave_0 removed [ 112.958813][ T3050] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.000932][ T3050] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.265901][ T3050] bond0 (unregistering): Released all slaves [ 113.507695][ T5093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.525204][ T5093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.585000][ T386] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.606180][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 113.615952][ T386] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.633894][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 113.686620][ T5158] device syzkaller0 entered promiscuous mode [ 113.748533][ T5037] Set syz1 is full, maxelem 65536 reached [ 113.868881][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 113.879376][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 114.238715][ T4292] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 114.274369][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 114.608688][ T4227] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 114.624501][ T4292] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 114.828901][ T4292] usb 6-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 114.858373][ T4292] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.881875][ T4292] usb 6-1: Product: syz [ 114.886093][ T4292] usb 6-1: Manufacturer: syz [ 114.938899][ T4292] usb 6-1: SerialNumber: syz [ 115.018745][ T4227] usb 2-1: config 0 has no interfaces? [ 115.021365][ T4292] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input6 [ 115.230791][ T3546] bcm5974 6-1:1.0: could not read from device [ 115.327057][ T4292] usb 6-1: USB disconnect, device number 2 [ 115.338815][ T3546] bcm5974 6-1:1.0: could not read from device [ 115.459033][ T4227] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 115.514336][ T4227] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.514364][ T4227] usb 2-1: Product: syz [ 115.514379][ T4227] usb 2-1: Manufacturer: syz [ 115.514395][ T4227] usb 2-1: SerialNumber: syz [ 115.526037][ T4227] usb 2-1: config 0 descriptor?? [ 115.740254][ T5215] netlink: 4 bytes leftover after parsing attributes in process `syz.3.237'. [ 116.004823][ T5215] team0 (unregistering): Port device team_slave_0 removed [ 116.113338][ T5215] team0 (unregistering): Port device team_slave_1 removed [ 116.334109][ T5229] device syzkaller0 entered promiscuous mode [ 116.465754][ T5219] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.750744][ T5219] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.928424][ T5219] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.104979][ T5219] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.484628][ T5219] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.555238][ T5219] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.622889][ T5219] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.685926][ T5219] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.189779][ T7] usb 2-1: USB disconnect, device number 9 [ 118.430146][ T5263] netlink: 4 bytes leftover after parsing attributes in process `syz.1.247'. [ 119.198857][ T4200] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 119.534694][ T5270] infiniband syz1: set active [ 119.575085][ T5270] infiniband syz1: added syz_tun [ 119.696736][ T5221] ODEBUG: Out of memory. ODEBUG disabled [ 119.967968][ T5270] RDS/IB: syz1: added [ 119.972984][ T5270] smc: adding ib device syz1 with port count 1 [ 120.028114][ T5270] smc: ib device syz1 port 1 has pnetid [ 120.306221][ T4200] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 120.329856][ T4200] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 120.353170][ T4200] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 120.396324][ T4200] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.467807][ T5283] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 121.053052][ T5283] fuse: Unknown parameter 'rootmod' [ 121.567332][ T5221] Set syz1 is full, maxelem 65536 reached [ 122.178660][ T4292] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 122.338323][ T5330] loop5: detected capacity change from 0 to 32768 [ 122.385522][ T5330] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.254 (5330) [ 122.484783][ T5330] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 122.518258][ T5330] BTRFS info (device loop5): force clearing of disk cache [ 122.548259][ T5330] BTRFS info (device loop5): force zlib compression, level 3 [ 122.579540][ T5330] BTRFS info (device loop5): setting nodatacow [ 122.585728][ T5330] BTRFS info (device loop5): enabling auto defrag [ 122.628715][ T4292] usb 1-1: config 0 has no interfaces? [ 122.645084][ T5351] mmap: syz.4.257 (5351) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 122.659290][ T5330] BTRFS info (device loop5): max_inline at 0 [ 122.665333][ T5330] BTRFS info (device loop5): using free space tree [ 122.698023][ T5330] BTRFS info (device loop5): has skinny extents [ 122.720546][ T4262] usb 4-1: USB disconnect, device number 6 [ 122.948812][ T4292] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 122.965902][ T4292] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.010010][ T4292] usb 1-1: Product: syz [ 123.048015][ T4292] usb 1-1: Manufacturer: syz [ 123.079205][ T5330] BTRFS info (device loop5): enabling ssd optimizations [ 123.095944][ T4292] usb 1-1: SerialNumber: syz [ 123.106635][ T5330] BTRFS info (device loop5): clearing free space tree [ 123.112517][ T4292] usb 1-1: config 0 descriptor?? [ 123.138913][ T5330] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 123.255204][ T5330] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 123.313188][ T5330] BTRFS info (device loop5): creating free space tree [ 123.371716][ T5330] BTRFS info (device loop5): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 123.401876][ T5330] BTRFS info (device loop5): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 123.489166][ T5390] netlink: 4 bytes leftover after parsing attributes in process `syz.1.260'. [ 123.735781][ T5390] team0 (unregistering): Port device team_slave_0 removed [ 123.749004][ T5330] loop_set_status: loop5 () has still dirty pages (nrpages=4) [ 123.858339][ T5390] team0 (unregistering): Port device team_slave_1 removed [ 124.029316][ T5391] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.653718][ T5391] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.904810][ T5391] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.115823][ T5391] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.264259][ T5391] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.335104][ T5391] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.355505][ T5425] kvm [5424]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4000 [ 125.392253][ T5391] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.406104][ T5425] kvm [5424]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x4000 [ 125.448477][ T5425] kvm [5424]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x4000 [ 125.463098][ T5391] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.542219][ T5425] kvm [5424]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x4000 [ 125.620722][ T5425] kvm [5424]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x4000 [ 125.751224][ T5425] kvm [5424]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x4000 [ 125.863954][ T5425] kvm [5424]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x4000 [ 126.004275][ T5414] usb 1-1: USB disconnect, device number 7 [ 126.414537][ T5447] device batadv_slave_1 entered promiscuous mode [ 126.469057][ T5447] netlink: 4 bytes leftover after parsing attributes in process `syz.1.271'. [ 126.478657][ T4292] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 126.508858][ T5447] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.533133][ T5447] batadv0: mtu less than device minimum [ 126.574471][ T5447] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 126.587292][ T5447] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 126.600240][ T5447] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 126.613061][ T5447] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 126.625976][ T5447] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 126.639143][ T5447] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 126.651924][ T5447] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 126.664629][ T5447] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 126.677449][ T5447] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 126.690254][ T5447] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 126.859724][ T4292] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 126.885111][ T4292] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 126.926659][ T4292] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 126.962154][ T4292] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.019045][ T5444] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 127.346658][ T5447] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.447115][ T5444] fuse: Unknown parameter 'rootmod' [ 127.708295][ T5444] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 128.694013][ T5466] tipc: Started in network mode [ 128.744280][ T5466] tipc: Node identity 92bea542d6d, cluster identity 4711 [ 128.815198][ T5466] tipc: Enabled bearer , priority 0 [ 128.899119][ T5469] device syzkaller0 entered promiscuous mode [ 128.952219][ T5472] tipc: Enabled bearer , priority 0 [ 128.976370][ T5472] device syzkaller0 entered promiscuous mode [ 129.038235][ T5472] tipc: Resetting bearer [ 129.053773][ T5465] tipc: Resetting bearer [ 129.116729][ T5465] tipc: Disabling bearer [ 129.134171][ T5471] tipc: Resetting bearer [ 129.156234][ T5471] tipc: Disabling bearer [ 129.354502][ T5482] tipc: Enabled bearer , priority 0 [ 129.781955][ T5413] usb 6-1: USB disconnect, device number 3 [ 130.480173][ T4262] tipc: Node number set to 822760699 [ 131.986212][ T5538] tipc: Enabled bearer , priority 0 [ 131.995827][ T5538] device syzkaller0 entered promiscuous mode [ 132.036266][ T5538] tipc: Resetting bearer [ 132.050091][ T5537] tipc: Resetting bearer [ 132.075829][ T5537] tipc: Disabling bearer [ 132.088703][ T4227] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 132.541150][ T4227] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.559823][ T4227] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.585441][ T4227] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 132.612267][ T4227] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.645796][ T4227] usb 6-1: config 0 descriptor?? [ 132.919364][ T5413] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 132.922329][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.938697][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.130717][ T4227] hid-steam 0003:28DE:1142.0003: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 133.165340][ T4227] hid-steam 0003:28DE:1142.0004: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 133.248787][ T4227] hid-steam 0003:28DE:1142.0003: Steam wireless receiver connected [ 133.278856][ T5413] usb 5-1: config 0 has no interfaces? [ 133.347239][ T5572] tipc: Enabled bearer , priority 0 [ 133.407037][ T5572] device syzkaller0 entered promiscuous mode [ 133.445019][ T5413] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 133.464728][ T5572] tipc: Resetting bearer [ 133.480880][ T5413] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.495742][ T5413] usb 5-1: Product: syz [ 133.505218][ T5413] usb 5-1: Manufacturer: syz [ 133.519073][ T5413] usb 5-1: SerialNumber: syz [ 133.538908][ T5569] tipc: Resetting bearer [ 133.555552][ T5413] usb 5-1: config 0 descriptor?? [ 133.584140][ T5569] tipc: Disabling bearer [ 134.448730][ T4227] usb 6-1: reset high-speed USB device number 4 using dummy_hcd [ 135.038045][ T5602] netlink: 20 bytes leftover after parsing attributes in process `syz.0.311'. [ 135.334278][ T5413] usb 6-1: USB disconnect, device number 4 [ 135.364200][ T5413] hid-steam 0003:28DE:1142.0003: Steam wireless receiver disconnected [ 135.774083][ T5621] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.313'. [ 135.968987][ T5619] input: syz1 as /devices/virtual/input/input7 [ 136.847202][ T4227] usb 5-1: USB disconnect, device number 7 [ 136.968766][ T5148] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 137.388989][ T5148] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.410178][ T5148] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.448757][ T5148] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 137.498741][ T4227] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 137.498809][ T5148] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.556352][ T5656] loop4: detected capacity change from 0 to 32768 [ 137.579130][ T5148] usb 4-1: config 0 descriptor?? [ 137.620970][ T5656] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.320 (5656) [ 137.660716][ T5656] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 137.685045][ T5656] BTRFS info (device loop4): enabling auto defrag [ 137.698796][ T5656] BTRFS info (device loop4): doing ref verification [ 137.711038][ T5656] BTRFS info (device loop4): use no compression [ 137.725630][ T5656] BTRFS info (device loop4): force clearing of disk cache [ 137.740818][ T5656] BTRFS info (device loop4): max_inline at 4096 [ 137.756124][ T5656] BTRFS info (device loop4): disabling free space tree [ 137.768781][ T5656] BTRFS info (device loop4): has skinny extents [ 137.868799][ T4227] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.886522][ T4227] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.918852][ T4227] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 137.929009][ T4227] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.965535][ T4227] usb 1-1: config 0 descriptor?? [ 138.056164][ T5656] BTRFS info (device loop4): enabling ssd optimizations [ 138.064813][ T5148] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 138.073560][ T5148] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 138.079615][ T5656] BTRFS info (device loop4): clearing free space tree [ 138.088629][ T5148] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 138.106285][ T5148] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 138.108200][ T5656] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 138.118766][ T5148] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 138.130370][ T5148] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 138.138102][ T5148] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 138.151680][ T5148] cp2112 0003:10C4:EA90.0005: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 138.197689][ T5656] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 138.290390][ T5148] cp2112 0003:10C4:EA90.0005: Part Number: 0x00 Device Version: 0x00 [ 138.463171][ T4227] hid-steam 0003:28DE:1142.0006: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 138.525480][ T4227] hid-steam 0003:28DE:1142.0007: hidraw1: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 138.551503][ T5656] BTRFS info (device loop4): balance: start -d -m [ 138.648695][ T4227] hid-steam 0003:28DE:1142.0006: Steam wireless receiver connected [ 138.661344][ T5711] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.326'. [ 138.683030][ T5656] BTRFS info (device loop4): relocating block group 6881280 flags data|metadata [ 138.802302][ T5709] input: syz1 as /devices/virtual/input/input8 [ 138.899139][ T5656] BTRFS info (device loop4): relocating block group 5242880 flags data|metadata [ 138.931393][ T5638] cp2112 0003:10C4:EA90.0005: Error starting transaction: -38 [ 138.984744][ T5148] cp2112 0003:10C4:EA90.0005: error reading lock byte: -71 [ 139.038752][ T5148] usb 4-1: USB disconnect, device number 7 [ 139.232333][ T5719] fido_id[5719]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 139.444775][ T5656] BTRFS info (device loop4): found 9 extents, stage: move data extents [ 139.561660][ T5656] BTRFS info (device loop4): found 1 extents, stage: update data pointers [ 139.678040][ T5656] BTRFS info (device loop4): balance: ended with status: 0 [ 139.848719][ T5415] usb 1-1: reset high-speed USB device number 8 using dummy_hcd [ 140.249000][ T5148] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 140.678858][ T5148] usb 4-1: config 0 has no interfaces? [ 140.720594][ T4227] usb 1-1: USB disconnect, device number 8 [ 140.739634][ T4227] hid-steam 0003:28DE:1142.0006: Steam wireless receiver disconnected [ 140.898839][ T5148] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 140.908077][ T5746] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 140.947390][ T5148] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.032834][ T5148] usb 4-1: Product: syz [ 141.062461][ T5148] usb 4-1: Manufacturer: syz [ 141.067179][ T5148] usb 4-1: SerialNumber: syz [ 141.131561][ T5148] usb 4-1: config 0 descriptor?? [ 141.203114][ T5746] usb 6-1: Using ep0 maxpacket: 8 [ 141.328764][ T5746] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.529387][ T5746] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 141.556361][ T5746] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.596210][ T5746] usb 6-1: Product: syz [ 141.621381][ T5746] usb 6-1: Manufacturer: syz [ 141.641508][ T5746] usb 6-1: SerialNumber: syz [ 141.711233][ T5746] usbtest 6-1:1.0: couldn't get endpoints, -22 [ 141.751523][ T5746] usbtest: probe of 6-1:1.0 failed with error -22 [ 141.968151][ T5746] usb 6-1: USB disconnect, device number 5 [ 144.313783][ T5415] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 144.335709][ T5825] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 144.421011][ T5825] kvm: pic: non byte read [ 144.445197][ T5825] kvm: pic: non byte read [ 144.459153][ T5825] kvm: pic: non byte read [ 144.464092][ T5825] kvm: pic: non byte read [ 144.497291][ T5825] kvm: pic: level sensitive irq not supported [ 144.508087][ T5825] kvm: pic: non byte read [ 144.544208][ T5825] kvm: pic: single mode not supported [ 144.544240][ T5825] kvm: pic: level sensitive irq not supported [ 144.552063][ T5825] kvm: pic: non byte read [ 144.563049][ T5825] kvm: pic: level sensitive irq not supported [ 144.563132][ T5825] kvm: pic: non byte read [ 144.575271][ T5825] kvm: pic: non byte read [ 144.718835][ T5415] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.770686][ T5415] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.811277][ T5415] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 144.837079][ T5415] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.885836][ T5415] usb 1-1: config 0 descriptor?? [ 144.962660][ T4227] usb 4-1: USB disconnect, device number 8 [ 145.129257][ T5843] netlink: 27 bytes leftover after parsing attributes in process `syz.3.352'. [ 145.338241][ T5854] netlink: 'syz.3.357': attribute type 10 has an invalid length. [ 145.382135][ T5415] hid-steam 0003:28DE:1142.0008: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 145.448535][ T5415] hid-steam 0003:28DE:1142.0009: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 145.548881][ T5415] hid-steam 0003:28DE:1142.0008: Steam wireless receiver connected [ 146.288683][ T5148] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 146.558669][ T5148] usb 4-1: Using ep0 maxpacket: 8 [ 146.708831][ T5148] usb 4-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e [ 146.727316][ T5148] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.763972][ T5148] usb 4-1: config 0 descriptor?? [ 147.109065][ T5148] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 147.337067][ T5878] tipc: Enabled bearer , priority 0 [ 147.377729][ T5878] tipc: Resetting bearer [ 147.393225][ T5877] tipc: Disabling bearer [ 147.420158][ T5147] usb 1-1: USB disconnect, device number 9 [ 147.504304][ T5147] hid-steam 0003:28DE:1142.0008: Steam wireless receiver disconnected [ 147.618707][ T5148] usb 2-1: config 0 has no interfaces? [ 147.798752][ T5148] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 147.829699][ T5148] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.856383][ T5148] usb 2-1: Product: syz [ 147.881362][ T5148] usb 2-1: Manufacturer: syz [ 147.892420][ T5148] usb 2-1: SerialNumber: syz [ 147.906993][ T5148] usb 2-1: config 0 descriptor?? [ 148.092823][ T5891] raw_sendmsg: syz.5.369 forgot to set AF_INET. Fix it! [ 149.318825][ T5413] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 149.463148][ T5147] usb 4-1: USB disconnect, device number 9 [ 149.580442][ T5907] tipc: Enabled bearer , priority 0 [ 149.593601][ T5911] input: syz0 as /devices/virtual/input/input9 [ 149.615324][ T5907] tipc: Resetting bearer [ 149.671686][ T5906] tipc: Disabling bearer [ 149.746034][ T5916] vivid-002: disconnect [ 149.759152][ T5413] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.771835][ T5916] vivid-002: reconnect [ 149.784830][ T5413] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.816320][ T5413] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 149.886326][ T5413] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.945530][ T5413] usb 5-1: config 0 descriptor?? [ 149.960245][ T5926] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 149.993534][ T5925] device syzkaller1 entered promiscuous mode [ 150.308393][ T1111] usb 2-1: USB disconnect, device number 10 [ 150.500334][ T5413] usbhid 5-1:0.0: can't add hid device: -71 [ 150.506662][ T5413] usbhid: probe of 5-1:0.0 failed with error -71 [ 150.532015][ T5413] usb 5-1: USB disconnect, device number 8 [ 150.978799][ T5414] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 151.041072][ T5962] process 'syz.5.390' launched './file1' with NULL argv: empty string added [ 151.164924][ T5953] sp0: Synchronizing with TNC [ 151.228704][ T5414] usb 2-1: Using ep0 maxpacket: 8 [ 151.359165][ T5414] usb 2-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e [ 151.393231][ T5414] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.427170][ T5414] usb 2-1: config 0 descriptor?? [ 153.158804][ T5414] Bluetooth: hci1: command 0x0405 tx timeout [ 154.407084][ T5415] usb 2-1: USB disconnect, device number 11 [ 154.704326][ T5961] [U] è [ 155.018681][ T5415] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 155.398726][ T5415] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.418749][ T5415] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 155.464780][ T5415] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.508747][ T4227] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 155.537620][ T5415] usb 2-1: config 0 descriptor?? [ 155.610754][ T5415] pwc: Askey VC010 type 2 USB webcam detected. [ 155.898994][ T4227] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.974396][ T4227] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.988854][ T4227] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 155.997979][ T4227] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.023891][ T4227] usb 4-1: config 0 descriptor?? [ 156.038908][ T5415] pwc: recv_control_msg error -32 req 02 val 2b00 [ 156.088741][ T5415] pwc: recv_control_msg error -32 req 02 val 2700 [ 156.128765][ T5415] pwc: recv_control_msg error -32 req 02 val 2c00 [ 156.178691][ T5415] pwc: recv_control_msg error -32 req 04 val 1000 [ 156.224424][ T5415] pwc: recv_control_msg error -32 req 04 val 1300 [ 156.269708][ T5415] pwc: recv_control_msg error -32 req 04 val 1400 [ 156.318778][ T5415] pwc: recv_control_msg error -32 req 02 val 2000 [ 156.348774][ T5414] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 156.358898][ T5415] pwc: recv_control_msg error -32 req 02 val 2100 [ 156.409972][ T5415] pwc: recv_control_msg error -32 req 04 val 1500 [ 156.458812][ T5415] pwc: recv_control_msg error -32 req 02 val 2500 [ 156.504108][ T5415] pwc: recv_control_msg error -32 req 02 val 2400 [ 156.579289][ T4227] usbhid 4-1:0.0: can't add hid device: -71 [ 156.585307][ T4227] usbhid: probe of 4-1:0.0 failed with error -71 [ 156.614614][ T4227] usb 4-1: USB disconnect, device number 10 [ 156.620877][ T5414] usb 5-1: Using ep0 maxpacket: 8 [ 156.738917][ T5414] usb 5-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e [ 156.757894][ T5414] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.772955][ T5414] usb 5-1: config 0 descriptor?? [ 156.800144][ T5992] udc-core: couldn't find an available UDC or it's busy [ 156.824923][ T5992] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 156.888781][ T5415] pwc: recv_control_msg error -71 req 02 val 2900 [ 156.908802][ T5415] pwc: recv_control_msg error -71 req 02 val 2800 [ 156.928782][ T5415] pwc: recv_control_msg error -71 req 04 val 1100 [ 156.955730][ T5415] pwc: recv_control_msg error -71 req 04 val 1200 [ 156.988269][ T5415] pwc: Registered as video103. [ 157.066996][ T5415] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input10 [ 157.153494][ T5415] usb 2-1: USB disconnect, device number 12 [ 157.690072][ T6053] program syz.1.419 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 159.588727][ T5147] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 159.782862][ T5415] usb 5-1: USB disconnect, device number 9 [ 159.960485][ T5147] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.988076][ T5147] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.009507][ T5147] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 160.056544][ T5147] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.086508][ T5147] usb 6-1: config 0 descriptor?? [ 160.513644][ T6108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 160.523921][ T6108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.535704][ T6108] device dummy0 entered promiscuous mode [ 160.548280][ T6108] device netdevsim0 entered promiscuous mode [ 160.569326][ T5093] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 160.658750][ T5147] usbhid 6-1:0.0: can't add hid device: -71 [ 160.665711][ T5147] usbhid: probe of 6-1:0.0 failed with error -71 [ 160.698756][ T5147] usb 6-1: USB disconnect, device number 6 [ 161.221826][ T4262] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 161.478798][ T4262] usb 2-1: Using ep0 maxpacket: 8 [ 161.598828][ T4262] usb 2-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e [ 161.616195][ T4262] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.658924][ T4262] usb 2-1: config 0 descriptor?? [ 162.015852][ T6138] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 163.691038][ T5414] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 164.058903][ T5414] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.095051][ T5414] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.138626][ T5414] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 164.194439][ T5414] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.240046][ T5414] usb 4-1: config 0 descriptor?? [ 164.616487][ T5148] usb 2-1: USB disconnect, device number 13 [ 164.742788][ T5414] hid-steam 0003:28DE:1142.000A: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 164.804834][ T5414] hid-steam 0003:28DE:1142.000B: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 164.888689][ T5414] hid-steam 0003:28DE:1142.000A: Steam wireless receiver connected [ 165.618635][ T5414] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 165.778786][ T5415] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 165.978830][ T5414] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.994972][ T5414] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 166.012173][ T5414] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.043445][ T5414] usb 6-1: config 0 descriptor?? [ 166.178712][ T5415] usb 2-1: config 0 has no interfaces? [ 166.338737][ T5415] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 166.352664][ T5415] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.375785][ T5415] usb 2-1: Product: syz [ 166.387342][ T5415] usb 2-1: Manufacturer: syz [ 166.402836][ T5415] usb 2-1: SerialNumber: syz [ 166.422281][ T5415] usb 2-1: config 0 descriptor?? [ 166.580170][ T5414] keytouch 0003:0926:3333.000C: fixing up Keytouch IEC report descriptor [ 166.604410][ T5414] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.000C/input/input11 [ 166.759100][ T5414] keytouch 0003:0926:3333.000C: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 166.772576][ T5413] usb 4-1: USB disconnect, device number 11 [ 166.803747][ T5413] hid-steam 0003:28DE:1142.000A: Steam wireless receiver disconnected [ 166.893714][ T5414] usb 6-1: USB disconnect, device number 7 [ 167.002944][ T6196] fido_id[6196]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 168.178693][ T4262] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 168.269192][ T5148] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 168.430930][ T5746] usb 2-1: USB disconnect, device number 14 [ 168.523385][ T5148] usb 6-1: Using ep0 maxpacket: 8 [ 168.600032][ T4262] usb 5-1: unable to get BOS descriptor or descriptor too short [ 168.650779][ T5148] usb 6-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e [ 168.676004][ T5148] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.688792][ T4262] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 168.702923][ T4262] usb 5-1: config 1 has an invalid descriptor of length 81, skipping remainder of the config [ 168.734796][ T5148] usb 6-1: config 0 descriptor?? [ 168.745185][ T4262] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 168.918934][ T4262] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 168.944798][ T4262] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.990910][ T4262] usb 5-1: Product: syz [ 169.014234][ T4262] usb 5-1: Manufacturer: syz [ 169.032587][ T4262] usb 5-1: SerialNumber: syz [ 171.083733][ T4262] usb 5-1: 0:2 : does not exist [ 171.130678][ T4262] usb 5-1: USB disconnect, device number 10 [ 171.230926][ T1325] usb 6-1: USB disconnect, device number 8 [ 171.548816][ T4262] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 171.948931][ T4262] usb 5-1: config 0 has no interfaces? [ 172.108787][ T4262] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 172.126227][ T4262] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.149414][ T4262] usb 5-1: Product: syz [ 172.164186][ T4262] usb 5-1: Manufacturer: syz [ 172.173868][ T4262] usb 5-1: SerialNumber: syz [ 172.194064][ T4262] usb 5-1: config 0 descriptor?? [ 172.879404][ T26] audit: type=1326 audit(1755473248.790:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6269 comm="syz.0.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57c6b99be9 code=0x7ffc0000 [ 172.981676][ T26] audit: type=1326 audit(1755473248.810:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6269 comm="syz.0.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f57c6b99be9 code=0x7ffc0000 [ 173.125455][ T26] audit: type=1326 audit(1755473248.810:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6269 comm="syz.0.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57c6b99be9 code=0x7ffc0000 [ 173.349808][ T26] audit: type=1326 audit(1755473248.810:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6269 comm="syz.0.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f57c6b99be9 code=0x7ffc0000 [ 173.511591][ T26] audit: type=1326 audit(1755473248.810:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6269 comm="syz.0.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57c6b99be9 code=0x7ffc0000 [ 173.611063][ T26] audit: type=1326 audit(1755473248.810:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6269 comm="syz.0.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f57c6b99be9 code=0x7ffc0000 [ 173.757683][ T26] audit: type=1326 audit(1755473248.810:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6269 comm="syz.0.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57c6b99be9 code=0x7ffc0000 [ 173.888263][ T26] audit: type=1326 audit(1755473248.810:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6269 comm="syz.0.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f57c6b99be9 code=0x7ffc0000 [ 173.963009][ T26] audit: type=1326 audit(1755473248.810:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6269 comm="syz.0.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57c6b99be9 code=0x7ffc0000 [ 174.091560][ T26] audit: type=1326 audit(1755473248.810:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6269 comm="syz.0.489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f57c6b99be9 code=0x7ffc0000 [ 174.782422][ T5413] usb 5-1: USB disconnect, device number 11 [ 174.819240][ T5414] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 175.208837][ T5414] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.218677][ T5148] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 175.259594][ T5414] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.296320][ T5414] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 175.320748][ T5414] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.354475][ T5414] usb 2-1: config 0 descriptor?? [ 175.608801][ T5148] usb 4-1: config 0 has no interfaces? [ 175.773851][ T5148] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 175.795061][ T5148] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.823189][ T5148] usb 4-1: Product: syz [ 175.837685][ T5148] usb 4-1: Manufacturer: syz [ 175.862467][ T5148] usb 4-1: SerialNumber: syz [ 175.887649][ T5148] usb 4-1: config 0 descriptor?? [ 175.895334][ T5414] hid-steam 0003:28DE:1142.000D: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 175.958773][ T5413] Bluetooth: hci0: command 0x0406 tx timeout [ 175.967723][ T5413] Bluetooth: hci3: command 0x0406 tx timeout [ 175.985654][ T5414] hid-steam 0003:28DE:1142.000E: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 176.030667][ T5413] Bluetooth: hci4: command 0x0406 tx timeout [ 176.036762][ T5413] Bluetooth: hci2: command 0x0406 tx timeout [ 176.101571][ T5414] hid-steam 0003:28DE:1142.000D: Steam wireless receiver connected [ 177.980831][ T5148] usb 2-1: USB disconnect, device number 15 [ 178.004526][ T5148] hid-steam 0003:28DE:1142.000D: Steam wireless receiver disconnected [ 178.578729][ T5148] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 178.593845][ T5414] usb 4-1: USB disconnect, device number 12 [ 178.641898][ T4262] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 178.890839][ T5148] usb 2-1: Using ep0 maxpacket: 32 [ 178.929070][ T5746] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 179.009013][ T5148] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA6, skipping [ 179.024035][ T5148] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 179.036727][ T5148] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 179.049173][ T4262] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.064664][ T4262] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.078799][ T4262] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 179.090656][ T4262] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.106122][ T4262] usb 6-1: config 0 descriptor?? [ 179.178718][ T5746] usb 5-1: Using ep0 maxpacket: 8 [ 179.229145][ T5148] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 179.248710][ T5148] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.264500][ T5148] usb 2-1: Product: syz [ 179.279626][ T5148] usb 2-1: Manufacturer: syz [ 179.289773][ T5148] usb 2-1: SerialNumber: syz [ 179.299165][ T5746] usb 5-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e [ 179.310569][ T5148] usb 2-1: config 0 descriptor?? [ 179.319132][ T5746] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.348355][ T5746] usb 5-1: config 0 descriptor?? [ 179.532722][ T6391] netlink: 16 bytes leftover after parsing attributes in process `syz.0.534'. [ 179.648804][ T4262] usbhid 6-1:0.0: can't add hid device: -71 [ 179.654986][ T4262] usbhid: probe of 6-1:0.0 failed with error -71 [ 179.666739][ T4262] usb 6-1: USB disconnect, device number 9 [ 180.737321][ T5746] usb 2-1: USB disconnect, device number 16 [ 182.427721][ T5148] usb 5-1: USB disconnect, device number 12 [ 182.778637][ T5414] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 183.148858][ T5414] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.210961][ T5414] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.256562][ T5414] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 183.303916][ T5414] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.360970][ T5414] usb 2-1: config 0 descriptor?? [ 183.781938][ T5746] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 183.909719][ T5414] usbhid 2-1:0.0: can't add hid device: -71 [ 183.936039][ T5414] usbhid: probe of 2-1:0.0 failed with error -71 [ 184.005453][ T5414] usb 2-1: USB disconnect, device number 17 [ 184.044057][ T6472] netlink: 12 bytes leftover after parsing attributes in process `syz.0.560'. [ 184.058943][ T5746] usb 6-1: Using ep0 maxpacket: 8 [ 184.199375][ T5746] usb 6-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e [ 184.213740][ T5746] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.286689][ T5746] usb 6-1: config 0 descriptor?? [ 184.717646][ T6500] loop2: detected capacity change from 0 to 7 [ 184.807777][ T6500] Dev loop2: unable to read RDB block 7 [ 184.838841][ T6500] loop2: unable to read partition table [ 184.859069][ T6500] loop2: partition table beyond EOD, truncated [ 184.874193][ T6500] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 185.089274][ T5746] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 185.534762][ T5746] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 185.555936][ T5746] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 185.759171][ T5746] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 185.781116][ T5746] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.807311][ T5746] usb 2-1: Product: syz [ 185.831604][ T5746] usb 2-1: Manufacturer: syz [ 185.837481][ T5746] usb 2-1: SerialNumber: syz [ 186.328870][ T5746] usb 2-1: cannot find UAC_HEADER [ 186.386472][ T5746] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 186.514085][ T4490] udevd[4490]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 186.533613][ T5148] usb 2-1: USB disconnect, device number 18 [ 186.812400][ T5148] usb 6-1: USB disconnect, device number 10 [ 188.817990][ C1] sd 0:0:1:0: tag#1479 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 188.827922][ C1] sd 0:0:1:0: tag#1479 CDB: Write(10) 2a 00 00 00 00 00 00 00 40 00 00 00 [ 189.328636][ T5413] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 189.588621][ T5413] usb 4-1: Using ep0 maxpacket: 8 [ 189.720179][ T5413] usb 4-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e [ 189.747418][ T5413] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.823004][ T5413] usb 4-1: config 0 descriptor?? [ 190.428686][ T5413] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 190.918845][ T5413] usb 6-1: unable to get BOS descriptor or descriptor too short [ 190.938948][ T5415] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 191.008772][ T5413] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 191.029060][ T5413] usb 6-1: config 1 has an invalid descriptor of length 81, skipping remainder of the config [ 191.059645][ T5413] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 191.258864][ T5413] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 191.285898][ T5413] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.358236][ T5413] usb 6-1: Product: syz [ 191.398092][ T5413] usb 6-1: Manufacturer: syz [ 191.423857][ T5413] usb 6-1: SerialNumber: syz [ 191.698744][ T5415] usb 2-1: config 0 has no interfaces? [ 191.879039][ T5415] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 191.900024][ T5415] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.928906][ T5413] usb 6-1: 0:2 : does not exist [ 191.961078][ T5415] usb 2-1: Product: syz [ 191.978298][ T5413] usb 6-1: USB disconnect, device number 11 [ 191.992205][ T5415] usb 2-1: Manufacturer: syz [ 192.005478][ T5415] usb 2-1: SerialNumber: syz [ 192.015940][ T5415] usb 2-1: config 0 descriptor?? [ 192.219326][ T4490] udevd[4490]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 193.048690][ T5413] usb 4-1: USB disconnect, device number 13 [ 193.154669][ T6616] netlink: 24 bytes leftover after parsing attributes in process `syz.4.607'. [ 193.340729][ T4184] Bluetooth: unknown link type 6 [ 193.596823][ T1325] usb 2-1: USB disconnect, device number 19 [ 193.708710][ T5746] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 194.088739][ T5746] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 194.105523][ T5746] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 194.119563][ T5746] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 194.131489][ T5746] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 194.298844][ T5746] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 194.312514][ T5746] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.330906][ T5746] usb 4-1: Product: syz [ 194.341786][ T5746] usb 4-1: Manufacturer: syz [ 194.353902][ T5746] usb 4-1: SerialNumber: syz [ 194.362348][ T1428] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.368716][ T1428] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.394512][ T5746] usb 4-1: config 0 descriptor?? [ 194.663618][ T5746] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 194.929115][ T6625] usb 4-1: Couldn't submit interrupt_out_urb -90 [ 194.938167][ T5413] usb 4-1: USB disconnect, device number 14 [ 195.398686][ T5413] Bluetooth: hci2: command 0x0409 tx timeout [ 195.639010][ T5414] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 195.798728][ T5415] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 196.048860][ T5414] usb 6-1: config 0 has no interfaces? [ 196.058712][ T5415] usb 4-1: Using ep0 maxpacket: 16 [ 196.188887][ T5415] usb 4-1: config index 0 descriptor too short (expected 1810, got 18) [ 196.198018][ T5415] usb 4-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=44.e6 [ 196.207602][ T5415] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.216419][ T5414] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 196.226420][ T5414] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.236626][ T5415] usb 4-1: config 0 descriptor?? [ 196.241887][ T5414] usb 6-1: Product: syz [ 196.246094][ T5414] usb 6-1: Manufacturer: syz [ 196.250866][ T5414] usb 6-1: SerialNumber: syz [ 196.257657][ T5414] usb 6-1: config 0 descriptor?? [ 196.280233][ T5415] gspca_main: etoms-2.14.0 probing 102c:6151 [ 196.398758][ T5413] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 196.687148][ T5413] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 196.768768][ T5413] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 196.777909][ T5413] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 196.789127][ T5413] usb 5-1: config 0 interface 0 has no altsetting 0 [ 196.868917][ T5413] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 196.877997][ T5413] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 196.889210][ T5413] usb 5-1: config 0 interface 0 has no altsetting 0 [ 196.968988][ T5413] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 196.978048][ T5413] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 196.989906][ T5413] usb 5-1: config 0 interface 0 has no altsetting 0 [ 197.078913][ T5413] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 197.088191][ T5413] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 197.100111][ T5413] usb 5-1: config 0 interface 0 has no altsetting 0 [ 197.178883][ T5413] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 197.190768][ T5413] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 197.203811][ T5413] usb 5-1: config 0 interface 0 has no altsetting 0 [ 197.288828][ T5413] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 197.304520][ T5413] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 197.333664][ T5413] usb 5-1: config 0 interface 0 has no altsetting 0 [ 197.418792][ T5413] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 197.429243][ T5413] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 197.440645][ T5413] usb 5-1: config 0 interface 0 has no altsetting 0 [ 197.518668][ T5413] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 197.530216][ T5413] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 197.544743][ T5413] usb 5-1: config 0 interface 0 has no altsetting 0 [ 197.729124][ T5413] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 197.744757][ T5413] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 197.756918][ T5413] usb 5-1: Product: syz [ 197.767310][ T5413] usb 5-1: Manufacturer: syz [ 197.772209][ T5413] usb 5-1: SerialNumber: syz [ 197.787163][ T5413] usb 5-1: config 0 descriptor?? [ 197.844128][ T5413] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 [ 198.207810][ T5414] usb 5-1: USB disconnect, device number 13 [ 198.213925][ C0] usb 5-1: yurex_control_callback - control failed: -71 [ 198.223934][ T6705] yurex 5-1:0.0: yurex_write - failed to send bulk msg, error -19 [ 198.249164][ T5414] yurex 5-1:0.0: USB YUREX #0 now disconnected [ 198.322819][ T5746] usb 6-1: USB disconnect, device number 12 [ 198.324018][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880289acc00: rx timeout, send abort [ 198.838207][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880289acc00: abort rx timeout. Force session deactivation [ 198.898664][ T5415] usb 4-1: USB disconnect, device number 15 [ 199.878645][ T5415] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 200.110535][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 200.110553][ T26] audit: type=1326 audit(1755473276.020:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6747 comm="syz.1.656" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fda2e2abbe9 code=0x0 [ 200.359575][ T5415] usb 6-1: unable to get BOS descriptor or descriptor too short [ 200.426839][ T26] audit: type=1326 audit(1755473276.330:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6755 comm="syz.3.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28973edbe9 code=0x7ffc0000 [ 200.488960][ T5415] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 200.504492][ T5415] usb 6-1: config 1 has an invalid descriptor of length 81, skipping remainder of the config [ 200.516583][ T26] audit: type=1326 audit(1755473276.360:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6755 comm="syz.3.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f28973edbe9 code=0x7ffc0000 [ 200.544245][ T5415] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 200.575001][ T26] audit: type=1326 audit(1755473276.360:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6755 comm="syz.3.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f28973edc23 code=0x7ffc0000 [ 200.668922][ T5746] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 200.680278][ T26] audit: type=1326 audit(1755473276.360:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6755 comm="syz.3.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f28973edc23 code=0x7ffc0000 [ 200.704490][ T26] audit: type=1326 audit(1755473276.360:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6755 comm="syz.3.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28973edbe9 code=0x7ffc0000 [ 200.728888][ T5415] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 200.738421][ T5415] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.746971][ T5415] usb 6-1: Product: syz [ 200.751418][ T5415] usb 6-1: Manufacturer: syz [ 200.756210][ T5415] usb 6-1: SerialNumber: syz [ 200.761141][ T26] audit: type=1326 audit(1755473276.370:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6755 comm="syz.3.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28973edbe9 code=0x7ffc0000 [ 200.785201][ T26] audit: type=1326 audit(1755473276.370:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6755 comm="syz.3.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28973edbe9 code=0x7ffc0000 [ 200.844467][ T26] audit: type=1326 audit(1755473276.370:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6755 comm="syz.3.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28973edbe9 code=0x7ffc0000 [ 200.875489][ T26] audit: type=1326 audit(1755473276.370:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6755 comm="syz.3.658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28973edbe9 code=0x7ffc0000 [ 200.988658][ T5746] usb 5-1: Using ep0 maxpacket: 8 [ 201.118848][ T5746] usb 5-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e [ 201.150745][ T5746] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.177765][ T5746] usb 5-1: config 0 descriptor?? [ 201.249999][ T5415] usb 6-1: 0:2 : does not exist [ 201.306130][ T5415] usb 6-1: USB disconnect, device number 13 [ 201.978723][ T4262] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 202.358738][ T4262] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 202.373698][ T4262] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 202.397248][ T4262] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 202.445970][ T4262] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 202.620622][ T4262] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 202.635836][ T4262] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.659264][ T4262] usb 6-1: Product: syz [ 202.686325][ T4262] usb 6-1: Manufacturer: syz [ 202.699418][ T4262] usb 6-1: SerialNumber: syz [ 202.792684][ T4262] usb 6-1: config 0 descriptor?? [ 203.063037][ T4262] adutux 6-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 203.308611][ T6772] usb 6-1: Couldn't submit interrupt_out_urb -90 [ 203.344241][ T4262] usb 6-1: USB disconnect, device number 14 [ 203.446059][ T5746] usb 5-1: USB disconnect, device number 14 [ 203.975557][ T6806] kvm [6805]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x4000 [ 203.993042][ T6806] kvm [6805]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x4002 [ 204.014352][ T6806] kvm [6805]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0xc0040d2 [ 204.035079][ T6806] kvm [6805]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0x186 data 0x4000 [ 204.059188][ T6806] kvm [6805]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0x187 data 0x4002 [ 204.076081][ T6814] loop7: detected capacity change from 0 to 7 [ 204.126310][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 204.137467][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 204.229034][ T6814] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 204.309534][ T6814] Buffer I/O error on dev loop7, logical block 0, async page read [ 204.326329][ T6814] ldm_validate_partition_table(): Disk read failed. [ 204.340489][ T6814] Dev loop7: unable to read RDB block 0 [ 204.349739][ T6814] loop7: unable to read partition table [ 204.355724][ T6814] loop7: partition table beyond EOD, truncated [ 204.371186][ T6814] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 207.043053][ T6856] net_ratelimit: 10 callbacks suppressed [ 207.043071][ T6856] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 207.268621][ T5746] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 207.338637][ T5148] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 207.679089][ T5746] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 207.701051][ T5746] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 207.742632][ T5746] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 207.759643][ T5148] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 207.777118][ T5746] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 207.793332][ T5148] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 207.818648][ T5148] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 207.827829][ T5148] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.884010][ T6857] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 207.970549][ T5746] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 208.011052][ T5746] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.042627][ T5746] usb 5-1: Product: syz [ 208.068785][ T5746] usb 5-1: Manufacturer: syz [ 208.082737][ T5746] usb 5-1: SerialNumber: syz [ 208.102841][ T5746] usb 5-1: config 0 descriptor?? [ 208.183154][ T6857] fuse: Unknown parameter 'rootmod' [ 208.349866][ T5746] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 208.437370][ T1111] usb 6-1: USB disconnect, device number 15 [ 208.566158][ T6853] usb 5-1: Couldn't submit interrupt_out_urb -90 [ 208.581510][ T5148] usb 5-1: USB disconnect, device number 15 [ 209.298609][ T5746] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 209.698823][ T5746] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.710043][ T5746] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.722218][ T5746] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 209.735727][ T5746] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 209.744869][ T5746] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.754759][ T5746] usb 4-1: config 0 descriptor?? [ 210.250840][ T5746] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 210.258343][ T5746] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 210.266335][ T5746] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 210.274035][ T5746] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 210.281821][ T5746] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 210.289361][ T5746] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 210.296758][ T5746] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 210.304221][ T5746] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 210.311774][ T5746] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 210.318613][ T1111] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 210.319308][ T5746] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 210.335253][ T5746] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 210.342871][ T5746] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 210.350671][ T5746] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 210.358667][ T5746] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 210.366222][ T5746] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 210.374226][ T5746] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 210.388617][ T5746] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 210.718934][ T1111] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.738663][ T1111] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.751861][ T1111] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 210.763074][ T1111] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.787529][ T1111] usb 5-1: config 0 descriptor?? [ 211.099037][ T5148] usb 4-1: USB disconnect, device number 16 [ 211.272128][ T1111] hid-steam 0003:28DE:1142.0010: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 211.303759][ T1111] hid-steam 0003:28DE:1142.0011: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 211.388807][ T1111] hid-steam 0003:28DE:1142.0010: Steam wireless receiver connected [ 212.418766][ T5148] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 212.668756][ T5148] usb 2-1: Using ep0 maxpacket: 8 [ 212.788691][ T5148] usb 2-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e [ 212.798688][ T5148] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.809684][ T5148] usb 2-1: config 0 descriptor?? [ 212.968743][ T1325] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 213.204651][ T5746] usb 5-1: USB disconnect, device number 16 [ 213.221189][ T5746] hid-steam 0003:28DE:1142.0010: Steam wireless receiver disconnected [ 213.338830][ T1325] usb 6-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.359920][ T1325] usb 6-1: config 0 interface 0 has no altsetting 0 [ 213.376568][ T1325] usb 6-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 213.399838][ T1325] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.443377][ T1325] usb 6-1: config 0 descriptor?? [ 213.921347][ T1325] hid-alps 0003:044E:1215.0012: hidraw0: USB HID v0.04 Device [HID 044e:1215] on usb-dummy_hcd.5-1/input0 [ 214.132062][ T1325] usb 6-1: USB disconnect, device number 16 [ 215.122360][ T5148] usb 2-1: USB disconnect, device number 20 [ 215.755017][ T6987] loop7: detected capacity change from 0 to 7 [ 215.794371][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 215.805518][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 215.819846][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 215.830834][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 215.877718][ T6987] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 215.902787][ T6987] Buffer I/O error on dev loop7, logical block 0, async page read [ 215.915820][ T6987] ldm_validate_partition_table(): Disk read failed. [ 215.925885][ T6987] Dev loop7: unable to read RDB block 0 [ 215.934655][ T6987] loop7: unable to read partition table [ 215.943297][ T6987] loop7: partition table beyond EOD, truncated [ 215.952131][ T6987] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 216.010446][ T5415] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 216.306502][ T6994] netlink: 12 bytes leftover after parsing attributes in process `syz.5.734'. [ 216.378888][ T5415] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.395602][ T5415] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.421600][ T5415] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 216.443348][ T5415] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.468064][ T5415] usb 5-1: config 0 descriptor?? [ 216.913600][ T7011] netlink: 16 bytes leftover after parsing attributes in process `syz.5.739'. [ 216.924489][ T7011] netlink: 20 bytes leftover after parsing attributes in process `syz.5.739'. [ 216.950723][ T5415] hid-steam 0003:28DE:1142.0013: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 216.993878][ T5415] hid-steam 0003:28DE:1142.0014: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.4-1/input0 [ 217.068677][ T5415] hid-steam 0003:28DE:1142.0013: Steam wireless receiver connected [ 217.076686][ T1111] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 217.148677][ T5414] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 217.468805][ T1111] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 217.488666][ T1111] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 217.508108][ T1111] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 217.525861][ T1111] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.568975][ T5414] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.583528][ T7004] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 217.595245][ T5414] usb 4-1: config 0 interface 0 has no altsetting 0 [ 217.605908][ T5414] usb 4-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 217.646768][ T5414] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.729454][ T5414] usb 4-1: config 0 descriptor?? [ 217.950762][ T7004] fuse: Unknown parameter 'rootmod' [ 218.221754][ T5414] hid-alps 0003:044E:1215.0015: hidraw1: USB HID v0.04 Device [HID 044e:1215] on usb-dummy_hcd.3-1/input0 [ 218.280944][ T7004] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 218.331714][ T5414] usb 2-1: USB disconnect, device number 21 [ 218.428124][ T5413] usb 4-1: USB disconnect, device number 17 [ 218.687374][ T7026] loop7: detected capacity change from 0 to 7 [ 218.706704][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 218.717635][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 218.731545][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 218.742457][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 218.751266][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 218.762236][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 218.783838][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 218.794785][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 218.808627][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 218.819573][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 218.827978][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 218.838910][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 218.847030][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 218.858000][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 218.866596][ T4490] ldm_validate_partition_table(): Disk read failed. [ 218.892037][ T4490] Dev loop7: unable to read RDB block 0 [ 218.899176][ T4490] loop7: unable to read partition table [ 218.908663][ T5746] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 218.917596][ T4490] loop7: partition table beyond EOD, truncated [ 218.932988][ T7026] ldm_validate_partition_table(): Disk read failed. [ 218.945917][ T7026] Dev loop7: unable to read RDB block 0 [ 218.960789][ T7026] loop7: unable to read partition table [ 218.971377][ T5415] usb 5-1: USB disconnect, device number 17 [ 218.992258][ T5415] hid-steam 0003:28DE:1142.0013: Steam wireless receiver disconnected [ 219.008896][ T7026] loop7: partition table beyond EOD, truncated [ 219.021460][ T7026] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 219.056537][ T3561] ldm_validate_partition_table(): Disk read failed. [ 219.068102][ T3561] Dev loop7: unable to read RDB block 0 [ 219.084107][ T3561] loop7: unable to read partition table [ 219.095116][ T3561] loop7: partition table beyond EOD, truncated [ 219.278760][ T5746] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.293427][ T5746] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.304676][ T5746] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 219.325729][ T5746] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 219.336280][ T5746] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.352380][ T5746] usb 6-1: config 0 descriptor?? [ 219.840565][ T5746] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 219.848017][ T5746] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 219.868617][ T5746] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 219.881705][ T5746] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 219.900023][ T5746] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 219.914709][ T5746] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 219.927574][ T5746] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 219.941093][ T5746] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 219.948811][ T5746] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 219.961013][ T5746] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 219.986464][ T5746] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 219.994494][ T5746] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 220.002569][ T5746] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 220.010497][ T5746] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 220.018084][ T5746] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 220.026285][ T5746] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving [ 220.053069][ T5746] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 220.621854][ T1111] usb 6-1: USB disconnect, device number 17 [ 221.168609][ T1111] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 221.258737][ T5415] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 221.375156][ T7056] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 221.387990][ T7056] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 221.548766][ T5415] usb 4-1: Using ep0 maxpacket: 8 [ 221.589728][ T1111] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.626806][ T1111] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.656647][ T1111] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 221.668812][ T5415] usb 4-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice= 3.0e [ 221.692142][ T5415] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.710427][ T1111] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.726467][ T5415] usb 4-1: config 0 descriptor?? [ 221.735297][ T1111] usb 6-1: config 0 descriptor?? [ 221.997117][ T5415] usb 4-1: USB disconnect, device number 18 [ 222.242170][ T1111] hid-steam 0003:28DE:1142.0017: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 222.283469][ T1111] hid-steam 0003:28DE:1142.0018: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 222.388911][ T1111] hid-steam 0003:28DE:1142.0017: Steam wireless receiver connected [ 222.707782][ T7084] netlink: 4 bytes leftover after parsing attributes in process `syz.3.765'. [ 223.242358][ T4289] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 223.513785][ T4289] usb 4-1: Using ep0 maxpacket: 16 [ 223.638939][ T4289] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.664435][ T4289] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.687506][ T4289] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 223.706021][ T4289] usb 4-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 223.715677][ T4289] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.743591][ T4289] usb 4-1: config 0 descriptor?? [ 223.928638][ T5413] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 224.015352][ T7117] sch_tbf: burst 151 is lower than device syzkaller0 mtu (1514) ! [ 224.076515][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 224.076532][ T26] audit: type=1326 audit(1755473299.980:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7118 comm="syz.5.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f297dfa1be9 code=0x7ffc0000 [ 224.105070][ C0] vkms_vblank_simulate: vblank timer overrun [ 224.125016][ T26] audit: type=1326 audit(1755473300.030:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7118 comm="syz.5.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f297dfa1be9 code=0x7ffc0000 [ 224.178180][ T26] audit: type=1326 audit(1755473300.030:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7118 comm="syz.5.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f297dfa1be9 code=0x7ffc0000 [ 224.188718][ T5413] usb 2-1: Using ep0 maxpacket: 16 [ 224.217229][ T26] audit: type=1326 audit(1755473300.030:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7118 comm="syz.5.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f297dfa1be9 code=0x7ffc0000 [ 224.244382][ T7094] fuse: Bad value for 'fd' [ 224.260891][ T26] audit: type=1326 audit(1755473300.030:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7118 comm="syz.5.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f297dfa1be9 code=0x7ffc0000 [ 224.296734][ T26] audit: type=1326 audit(1755473300.060:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7118 comm="syz.5.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f297dfa1be9 code=0x7ffc0000 [ 224.329534][ T5746] usb 6-1: USB disconnect, device number 18 [ 224.379811][ T7127] udc-core: couldn't find an available UDC or it's busy [ 224.381236][ T5746] hid-steam 0003:28DE:1142.0017: Steam wireless receiver disconnected [ 224.397105][ T26] audit: type=1326 audit(1755473300.060:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7118 comm="syz.5.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f297dfa1be9 code=0x7ffc0000 [ 224.397110][ T7127] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 224.397145][ T26] audit: type=1326 audit(1755473300.060:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7118 comm="syz.5.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f297dfa1be9 code=0x7ffc0000 [ 224.419229][ C0] vkms_vblank_simulate: vblank timer overrun [ 224.458817][ T26] audit: type=1326 audit(1755473300.070:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7118 comm="syz.5.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f297dfa1be9 code=0x7ffc0000 [ 224.481668][ T26] audit: type=1326 audit(1755473300.070:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7118 comm="syz.5.779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f297dfa1be9 code=0x7ffc0000 [ 224.487397][ T7123] 8021q: adding VLAN 0 to HW filter on device bond1 [ 224.503754][ C0] vkms_vblank_simulate: vblank timer overrun [ 224.528894][ T5413] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 224.545067][ T7127] udc-core: couldn't find an available UDC or it's busy [ 224.577417][ T7127] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 224.753095][ T5413] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 224.769579][ T5413] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.790411][ T5413] usb 2-1: Product: syz [ 224.801220][ T5413] usb 2-1: Manufacturer: syz [ 224.812367][ T5413] usb 2-1: SerialNumber: syz [ 224.833588][ T5413] usb 2-1: config 0 descriptor?? [ 224.858742][ T4262] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 224.905665][ T5413] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 224.928827][ T5413] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 225.228907][ T4262] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 225.250325][ T4262] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.267369][ T4262] usb 5-1: config 0 descriptor?? [ 225.574661][ T5413] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 226.078770][ T4289] usbhid 4-1:0.0: can't add hid device: -71 [ 226.084799][ T4289] usbhid: probe of 4-1:0.0 failed with error -71 [ 226.108987][ T5413] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 226.113858][ T4289] usb 4-1: USB disconnect, device number 19 [ 226.117668][ T5413] em28xx 2-1:0.0: board has no eeprom [ 226.538620][ T5413] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 226.546845][ T5413] em28xx 2-1:0.0: dvb set to bulk mode. [ 226.560903][ T5414] em28xx 2-1:0.0: Binding DVB extension [ 226.654295][ T7154] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 226.661330][ T7154] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 226.677069][ T7154] vhci_hcd vhci_hcd.0: Device attached [ 226.718186][ T7155] vhci_hcd: connection closed [ 226.721106][ T5093] vhci_hcd: stop threads [ 226.733015][ T5746] usb 2-1: USB disconnect, device number 22 [ 226.739882][ T5093] vhci_hcd: release socket [ 226.740161][ T5746] em28xx 2-1:0.0: Disconnecting em28xx [ 226.744606][ T5093] vhci_hcd: disconnect device [ 226.768097][ T7114] em28xx 2-1:0.0: writing to i2c device at 0x0 failed (error=-19) [ 226.821644][ T5414] em28xx 2-1:0.0: Registering input extension [ 226.839292][ T5746] em28xx 2-1:0.0: Closing input extension [ 226.940067][ T5746] em28xx 2-1:0.0: Freeing device [ 227.058714][ T4262] usb 5-1: Cannot set autoneg [ 227.063545][ T4262] MOSCHIP usb-ethernet driver: probe of 5-1:0.0 failed with error -71 [ 227.082392][ T4262] usb 5-1: USB disconnect, device number 18 [ 227.158723][ T5413] Bluetooth: hci1: command 0x0406 tx timeout [ 227.538835][ T5413] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 227.788761][ T5413] usb 4-1: Using ep0 maxpacket: 16 [ 227.858697][ T1111] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 227.908749][ T5413] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 227.920510][ T5413] usb 4-1: config 0 has no interface number 0 [ 227.931091][ T5413] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 228.098756][ T5413] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 228.107853][ T5413] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.126620][ T5413] usb 4-1: Product: syz [ 228.131325][ T5413] usb 4-1: Manufacturer: syz [ 228.136039][ T5413] usb 4-1: SerialNumber: syz [ 228.144197][ T5413] usb 4-1: config 0 descriptor?? [ 228.178921][ T7162] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 228.199312][ T5413] asix: probe of 4-1:0.251 failed with error -22 [ 228.230111][ T1111] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.249213][ T1111] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.260853][ T1111] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 228.275293][ T1111] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 228.308665][ T1111] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.333561][ T1111] usb 2-1: config 0 descriptor?? [ 228.618780][ T5746] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 228.809947][ T1111] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 228.826187][ T1111] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 228.834463][ T1111] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 228.845847][ T1111] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 228.851544][ T7184] kvm: vcpu 0: requested 1664 ns lapic timer period limited to 200000 ns [ 228.853698][ T1111] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 228.878660][ T1111] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 228.886255][ T1111] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 228.902907][ T1111] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 228.919158][ T1111] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 228.933388][ T1111] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 228.951422][ T1111] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 228.968712][ T1111] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 228.986502][ T1111] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 228.988833][ T5746] usb 5-1: config 0 has an invalid interface number: 229 but max is 0 [ 229.008709][ T5746] usb 5-1: config 0 has no interface number 0 [ 229.015018][ T1111] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 229.015116][ T5746] usb 5-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice= c.19 [ 229.032198][ T5746] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.040404][ T1111] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 229.056102][ T1111] plantronics 0003:047F:FFFF.0019: No inputs registered, leaving [ 229.056681][ T5746] usb 5-1: config 0 descriptor?? [ 229.098163][ T1111] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 229.370235][ T1111] usb 5-1: USB disconnect, device number 19 [ 229.604613][ T1111] usb 2-1: USB disconnect, device number 23 [ 230.169316][ T7207] netlink: 12 bytes leftover after parsing attributes in process `syz.5.810'. [ 230.404707][ T1111] usb 4-1: USB disconnect, device number 20 [ 230.625517][ T7221] netlink: 'syz.3.817': attribute type 6 has an invalid length. [ 230.948730][ T5148] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 231.338766][ T5148] usb 6-1: config 0 has an invalid interface number: 229 but max is 0 [ 231.355332][ T5148] usb 6-1: config 0 has no interface number 0 [ 231.366108][ T5148] usb 6-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice= c.19 [ 231.392776][ T5148] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.416945][ T5148] usb 6-1: config 0 descriptor?? [ 231.428730][ T1111] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 231.678654][ T1111] usb 5-1: Using ep0 maxpacket: 16 [ 231.689361][ T5148] usb 6-1: USB disconnect, device number 19 [ 231.958986][ T1111] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 231.976695][ T1111] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.000244][ T1111] usb 5-1: Product: syz [ 232.004523][ T1111] usb 5-1: Manufacturer: syz [ 232.019613][ T1111] usb 5-1: SerialNumber: syz [ 232.036349][ T1111] usb 5-1: config 0 descriptor?? [ 232.339867][ T7265] loop6: detected capacity change from 0 to 1 [ 232.358066][ T7265] Dev loop6: unable to read RDB block 1 [ 232.387928][ T7265] loop6: unable to read partition table [ 232.396905][ T7265] loop6: partition table beyond EOD, truncated [ 232.404578][ T7265] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 232.519836][ T1111] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 232.581493][ T1111] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 232.609012][ T1111] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 232.620543][ T1111] usb 5-1: media controller created [ 232.677301][ T1111] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 232.727332][ T7246] dtv5100: wlen = 0, aborting. [ 232.744087][ T7284] loop2: detected capacity change from 0 to 7 [ 232.767805][ T7284] loop2: [ 232.778784][ T7284] loop2: partition table partially beyond EOD, truncated [ 232.838872][ T1111] zl10353_read_register: readreg error (reg=127, ret==0) [ 232.873129][ T1111] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 232.907495][ T1111] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 232.976267][ T1111] usb 5-1: USB disconnect, device number 20 [ 233.035256][ T1111] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 233.425450][ T7294] ================================================================== [ 233.434087][ T7294] BUG: KASAN: slab-out-of-bounds in xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 233.443332][ T7294] Read of size 1 at addr ffff88806054f600 by task syz.1.844/7294 [ 233.451165][ T7294] [ 233.453827][ T7294] CPU: 0 PID: 7294 Comm: syz.1.844 Not tainted 5.15.189-syzkaller #0 [ 233.461924][ T7294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 233.472097][ T7294] Call Trace: [ 233.475404][ T7294] [ 233.478366][ T7294] dump_stack_lvl+0x168/0x230 [ 233.483076][ T7294] ? show_regs_print_info+0x20/0x20 [ 233.488305][ T7294] ? load_image+0x3b0/0x3b0 [ 233.492835][ T7294] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 233.498237][ T7294] ? xfrm_pol_bin_obj+0x140/0x140 [ 233.503288][ T7294] print_address_description+0x60/0x2d0 [ 233.508863][ T7294] ? xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 233.515386][ T7294] kasan_report+0xdf/0x130 [ 233.519830][ T7294] ? xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 233.526362][ T7294] xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 233.532723][ T7294] ? xfrm_policy_addr_delta+0x212/0x340 [ 233.538307][ T7294] xfrm_policy_inexact_insert_node+0x950/0xb60 [ 233.544487][ T7294] ? __kasan_kmalloc+0xb5/0xf0 [ 233.549276][ T7294] ? xfrm_policy_alloc+0x75/0x2b0 [ 233.554336][ T7294] xfrm_policy_inexact_alloc_chain+0x7cf/0xea0 [ 233.560515][ T7294] ? xfrm_policy_inexact_insert+0xe0/0x1460 [ 233.566441][ T7294] xfrm_policy_inexact_insert+0xe0/0x1460 [ 233.572201][ T7294] ? __get_hash_thresh+0x105/0x410 [ 233.577346][ T7294] ? policy_hash_bysel+0x10a/0x570 [ 233.582580][ T7294] xfrm_policy_insert+0x112/0x930 [ 233.587732][ T7294] xfrm_add_policy+0x4d6/0x860 [ 233.592636][ T7294] ? xfrm_dump_sa_done+0xc0/0xc0 [ 233.597589][ T7294] ? apparmor_capable+0x12c/0x190 [ 233.602643][ T7294] ? __nla_parse+0x3c/0x50 [ 233.607189][ T7294] xfrm_user_rcv_msg+0x58d/0x860 [ 233.612143][ T7294] ? xfrm_netlink_rcv+0x90/0x90 [ 233.617015][ T7294] ? xfrm_netlink_rcv+0x66/0x90 [ 233.621862][ T7294] ? xfrm_netlink_rcv+0x66/0x90 [ 233.626721][ T7294] ? xfrm_netlink_rcv+0x66/0x90 [ 233.631582][ T7294] ? __mutex_lock_common+0x431/0x2390 [ 233.636995][ T7294] ? __copy_skb_header+0x417/0x5a0 [ 233.642118][ T7294] ? __skb_clone+0x480/0x790 [ 233.646732][ T7294] netlink_rcv_skb+0x1e0/0x430 [ 233.651491][ T7294] ? xfrm_netlink_rcv+0x90/0x90 [ 233.656605][ T7294] ? netlink_ack+0xb60/0xb60 [ 233.661218][ T7294] ? __lock_acquire+0x7c60/0x7c60 [ 233.666240][ T7294] xfrm_netlink_rcv+0x75/0x90 [ 233.670927][ T7294] netlink_unicast+0x774/0x920 [ 233.675789][ T7294] netlink_sendmsg+0x8ab/0xbc0 [ 233.680691][ T7294] ? netlink_getsockopt+0x560/0x560 [ 233.685920][ T7294] ? aa_sock_msg_perm+0x94/0x150 [ 233.690889][ T7294] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 233.696190][ T7294] ? security_socket_sendmsg+0x7c/0xa0 [ 233.701759][ T7294] ? netlink_getsockopt+0x560/0x560 [ 233.706974][ T7294] ____sys_sendmsg+0x5a2/0x8c0 [ 233.711762][ T7294] ? memset+0x1e/0x40 [ 233.715744][ T7294] ? __sys_sendmsg_sock+0x30/0x30 [ 233.720778][ T7294] ? import_iovec+0x6f/0xa0 [ 233.725290][ T7294] ___sys_sendmsg+0x1f0/0x260 [ 233.729971][ T7294] ? __sys_sendmsg+0x250/0x250 [ 233.734807][ T7294] ? __fdget+0x18b/0x210 [ 233.739077][ T7294] __se_sys_sendmsg+0x190/0x250 [ 233.743930][ T7294] ? __x64_sys_sendmsg+0x80/0x80 [ 233.748859][ T7294] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 233.754848][ T7294] ? lockdep_hardirqs_on+0x94/0x140 [ 233.760055][ T7294] do_syscall_64+0x4c/0xa0 [ 233.764472][ T7294] ? clear_bhb_loop+0x30/0x80 [ 233.769146][ T7294] ? clear_bhb_loop+0x30/0x80 [ 233.773815][ T7294] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 233.779714][ T7294] RIP: 0033:0x7fda2e2abbe9 [ 233.784124][ T7294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.804017][ T7294] RSP: 002b:00007fda2c513038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 233.812543][ T7294] RAX: ffffffffffffffda RBX: 00007fda2e4d2fa0 RCX: 00007fda2e2abbe9 [ 233.820537][ T7294] RDX: 0000000000004000 RSI: 0000200000000580 RDI: 0000000000000004 [ 233.828766][ T7294] RBP: 00007fda2e32ee19 R08: 0000000000000000 R09: 0000000000000000 [ 233.836848][ T7294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 233.844854][ T7294] R13: 00007fda2e4d3038 R14: 00007fda2e4d2fa0 R15: 00007ffdd67a0cd8 [ 233.852858][ T7294] [ 233.855889][ T7294] [ 233.858204][ T7294] Allocated by task 7294: [ 233.862529][ T7294] __kasan_kmalloc+0xb5/0xf0 [ 233.867125][ T7294] sk_prot_alloc+0xe7/0x210 [ 233.871642][ T7294] sk_alloc+0x2f/0x310 [ 233.875731][ T7294] pfkey_create+0xd8/0x560 [ 233.880166][ T7294] __sock_create+0x47b/0x900 [ 233.884773][ T7294] __sys_socket+0xe2/0x170 [ 233.889217][ T7294] __x64_sys_socket+0x76/0x80 [ 233.893890][ T7294] do_syscall_64+0x4c/0xa0 [ 233.898491][ T7294] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 233.904413][ T7294] [ 233.906725][ T7294] Last potentially related work creation: [ 233.912424][ T7294] kasan_save_stack+0x35/0x60 [ 233.917100][ T7294] kasan_record_aux_stack+0xb8/0x100 [ 233.922371][ T7294] insert_work+0x54/0x3d0 [ 233.926708][ T7294] __queue_work+0x9c5/0xd50 [ 233.931197][ T7294] queue_work_on+0x11d/0x1d0 [ 233.935779][ T7294] tty_release_struct+0xb4/0xd0 [ 233.940723][ T7294] tty_release+0xd0c/0x16c0 [ 233.945247][ T7294] __fput+0x234/0x930 [ 233.949232][ T7294] task_work_run+0x125/0x1a0 [ 233.953819][ T7294] exit_to_user_mode_loop+0x10f/0x130 [ 233.959195][ T7294] exit_to_user_mode_prepare+0xb1/0x140 [ 233.964746][ T7294] syscall_exit_to_user_mode+0x16/0x40 [ 233.970283][ T7294] do_syscall_64+0x58/0xa0 [ 233.974696][ T7294] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 233.980793][ T7294] [ 233.983289][ T7294] Second to last potentially related work creation: [ 233.989870][ T7294] kasan_save_stack+0x35/0x60 [ 233.994551][ T7294] kasan_record_aux_stack+0xb8/0x100 [ 233.999887][ T7294] call_rcu+0x182/0x930 [ 234.004031][ T7294] addrconf_ifdown+0x16f5/0x1970 [ 234.008971][ T7294] addrconf_notify+0x445/0xf00 [ 234.013725][ T7294] raw_notifier_call_chain+0xcb/0x160 [ 234.019190][ T7294] unregister_netdevice_many+0xf57/0x18f0 [ 234.024921][ T7294] unregister_netdevice_queue+0x31c/0x360 [ 234.030631][ T7294] __tun_detach+0xd4a/0x1500 [ 234.035213][ T7294] tun_chr_close+0x109/0x1b0 [ 234.039798][ T7294] __fput+0x234/0x930 [ 234.043782][ T7294] task_work_run+0x125/0x1a0 [ 234.048402][ T7294] exit_to_user_mode_loop+0x10f/0x130 [ 234.053773][ T7294] exit_to_user_mode_prepare+0xb1/0x140 [ 234.059317][ T7294] syscall_exit_to_user_mode+0x16/0x40 [ 234.064771][ T7294] do_syscall_64+0x58/0xa0 [ 234.069274][ T7294] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 234.075160][ T7294] [ 234.077490][ T7294] The buggy address belongs to the object at ffff88806054f000 [ 234.077490][ T7294] which belongs to the cache kmalloc-2k of size 2048 [ 234.091545][ T7294] The buggy address is located 1536 bytes inside of [ 234.091545][ T7294] 2048-byte region [ffff88806054f000, ffff88806054f800) [ 234.104984][ T7294] The buggy address belongs to the page: [ 234.110715][ T7294] page:ffffea0001815200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x60548 [ 234.120866][ T7294] head:ffffea0001815200 order:3 compound_mapcount:0 compound_pincount:0 [ 234.129198][ T7294] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 234.137380][ T7294] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888016842000 [ 234.145964][ T7294] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000 [ 234.154626][ T7294] page dumped because: kasan: bad access detected [ 234.161027][ T7294] page_owner tracks the page as allocated [ 234.166746][ T7294] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4190, ts 55854763307, free_ts 15395384582 [ 234.185972][ T7294] get_page_from_freelist+0x1b77/0x1c60 [ 234.191527][ T7294] __alloc_pages+0x1e1/0x470 [ 234.196115][ T7294] new_slab+0xc0/0x4b0 [ 234.200265][ T7294] ___slab_alloc+0x81e/0xdf0 [ 234.204851][ T7294] __kmalloc_track_caller+0x1cb/0x330 [ 234.210247][ T7294] kmemdup+0x22/0x50 [ 234.214146][ T7294] neigh_sysctl_register+0x9b/0xa80 [ 234.219337][ T7294] devinet_sysctl_register+0xa8/0x1f0 [ 234.224713][ T7294] inetdev_event+0xd47/0x1360 [ 234.229395][ T7294] raw_notifier_call_chain+0xcb/0x160 [ 234.234984][ T7294] dev_change_name+0x671/0xbd0 [ 234.239765][ T7294] do_setlink+0x99d/0x3980 [ 234.244184][ T7294] rtnl_newlink+0x1419/0x17d0 [ 234.248992][ T7294] rtnetlink_rcv_msg+0x9b9/0xe60 [ 234.253969][ T7294] netlink_rcv_skb+0x1e0/0x430 [ 234.258733][ T7294] netlink_unicast+0x774/0x920 [ 234.263499][ T7294] page last free stack trace: [ 234.268195][ T7294] free_unref_page_prepare+0x637/0x6c0 [ 234.273663][ T7294] free_unref_page+0x94/0x280 [ 234.278423][ T7294] free_contig_range+0x96/0xf0 [ 234.283179][ T7294] destroy_args+0xef/0x8b0 [ 234.287621][ T7294] debug_vm_pgtable+0x318/0x370 [ 234.292591][ T7294] do_one_initcall+0x1ee/0x680 [ 234.297352][ T7294] do_initcall_level+0x137/0x1f0 [ 234.302283][ T7294] do_initcalls+0x4b/0x90 [ 234.306703][ T7294] kernel_init_freeable+0x3ce/0x560 [ 234.311903][ T7294] kernel_init+0x19/0x1b0 [ 234.316227][ T7294] ret_from_fork+0x1f/0x30 [ 234.320632][ T7294] [ 234.322945][ T7294] Memory state around the buggy address: [ 234.328660][ T7294] ffff88806054f500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 234.336710][ T7294] ffff88806054f580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc [ 234.344869][ T7294] >ffff88806054f600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 234.352955][ T7294] ^ [ 234.357034][ T7294] ffff88806054f680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 234.365093][ T7294] ffff88806054f700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 234.373145][ T7294] ================================================================== [ 234.381195][ T7294] Disabling lock debugging due to kernel taint [ 234.387489][ T7294] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 234.394695][ T7294] CPU: 0 PID: 7294 Comm: syz.1.844 Tainted: G B 5.15.189-syzkaller #0 [ 234.404162][ T7294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 234.414205][ T7294] Call Trace: [ 234.417479][ T7294] [ 234.420410][ T7294] dump_stack_lvl+0x168/0x230 [ 234.425218][ T7294] ? show_regs_print_info+0x20/0x20 [ 234.430548][ T7294] ? load_image+0x3b0/0x3b0 [ 234.435229][ T7294] panic+0x2c9/0x7f0 [ 234.439312][ T7294] ? bpf_jit_dump+0xd0/0xd0 [ 234.443901][ T7294] ? _raw_spin_unlock_irqrestore+0xa5/0x100 [ 234.449877][ T7294] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 234.455939][ T7294] ? _raw_spin_unlock+0x40/0x40 [ 234.460817][ T7294] ? xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 234.467344][ T7294] check_panic_on_warn+0x80/0xa0 [ 234.472570][ T7294] ? xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 234.479115][ T7294] end_report+0x6d/0xf0 [ 234.483357][ T7294] kasan_report+0x102/0x130 [ 234.488055][ T7294] ? xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 234.494577][ T7294] xfrm_policy_inexact_list_reinsert+0x5df/0x690 [ 234.500933][ T7294] ? xfrm_policy_addr_delta+0x212/0x340 [ 234.506471][ T7294] xfrm_policy_inexact_insert_node+0x950/0xb60 [ 234.512623][ T7294] ? __kasan_kmalloc+0xb5/0xf0 [ 234.517378][ T7294] ? xfrm_policy_alloc+0x75/0x2b0 [ 234.522392][ T7294] xfrm_policy_inexact_alloc_chain+0x7cf/0xea0 [ 234.528542][ T7294] ? xfrm_policy_inexact_insert+0xe0/0x1460 [ 234.534552][ T7294] xfrm_policy_inexact_insert+0xe0/0x1460 [ 234.540263][ T7294] ? __get_hash_thresh+0x105/0x410 [ 234.545502][ T7294] ? policy_hash_bysel+0x10a/0x570 [ 234.550619][ T7294] xfrm_policy_insert+0x112/0x930 [ 234.555774][ T7294] xfrm_add_policy+0x4d6/0x860 [ 234.560550][ T7294] ? xfrm_dump_sa_done+0xc0/0xc0 [ 234.565509][ T7294] ? apparmor_capable+0x12c/0x190 [ 234.570570][ T7294] ? __nla_parse+0x3c/0x50 [ 234.574999][ T7294] xfrm_user_rcv_msg+0x58d/0x860 [ 234.580578][ T7294] ? xfrm_netlink_rcv+0x90/0x90 [ 234.585444][ T7294] ? xfrm_netlink_rcv+0x66/0x90 [ 234.590295][ T7294] ? xfrm_netlink_rcv+0x66/0x90 [ 234.595154][ T7294] ? xfrm_netlink_rcv+0x66/0x90 [ 234.600017][ T7294] ? __mutex_lock_common+0x431/0x2390 [ 234.605397][ T7294] ? __copy_skb_header+0x417/0x5a0 [ 234.610543][ T7294] ? __skb_clone+0x480/0x790 [ 234.615134][ T7294] netlink_rcv_skb+0x1e0/0x430 [ 234.619895][ T7294] ? xfrm_netlink_rcv+0x90/0x90 [ 234.624742][ T7294] ? netlink_ack+0xb60/0xb60 [ 234.629368][ T7294] ? __lock_acquire+0x7c60/0x7c60 [ 234.634405][ T7294] xfrm_netlink_rcv+0x75/0x90 [ 234.639090][ T7294] netlink_unicast+0x774/0x920 [ 234.643860][ T7294] netlink_sendmsg+0x8ab/0xbc0 [ 234.648723][ T7294] ? netlink_getsockopt+0x560/0x560 [ 234.654095][ T7294] ? aa_sock_msg_perm+0x94/0x150 [ 234.659048][ T7294] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 234.664352][ T7294] ? security_socket_sendmsg+0x7c/0xa0 [ 234.669826][ T7294] ? netlink_getsockopt+0x560/0x560 [ 234.675196][ T7294] ____sys_sendmsg+0x5a2/0x8c0 [ 234.679966][ T7294] ? memset+0x1e/0x40 [ 234.683953][ T7294] ? __sys_sendmsg_sock+0x30/0x30 [ 234.688973][ T7294] ? import_iovec+0x6f/0xa0 [ 234.693471][ T7294] ___sys_sendmsg+0x1f0/0x260 [ 234.698170][ T7294] ? __sys_sendmsg+0x250/0x250 [ 234.703026][ T7294] ? __fdget+0x18b/0x210 [ 234.707274][ T7294] __se_sys_sendmsg+0x190/0x250 [ 234.712120][ T7294] ? __x64_sys_sendmsg+0x80/0x80 [ 234.717063][ T7294] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 234.723154][ T7294] ? lockdep_hardirqs_on+0x94/0x140 [ 234.728358][ T7294] do_syscall_64+0x4c/0xa0 [ 234.732775][ T7294] ? clear_bhb_loop+0x30/0x80 [ 234.737447][ T7294] ? clear_bhb_loop+0x30/0x80 [ 234.742132][ T7294] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 234.748034][ T7294] RIP: 0033:0x7fda2e2abbe9 [ 234.752462][ T7294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.772208][ T7294] RSP: 002b:00007fda2c513038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 234.780633][ T7294] RAX: ffffffffffffffda RBX: 00007fda2e4d2fa0 RCX: 00007fda2e2abbe9 [ 234.788623][ T7294] RDX: 0000000000004000 RSI: 0000200000000580 RDI: 0000000000000004 [ 234.796595][ T7294] RBP: 00007fda2e32ee19 R08: 0000000000000000 R09: 0000000000000000 [ 234.804575][ T7294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 234.812581][ T7294] R13: 00007fda2e4d3038 R14: 00007fda2e4d2fa0 R15: 00007ffdd67a0cd8 [ 234.820552][ T7294] [ 234.823672][ T7294] Kernel Offset: disabled [ 234.827991][ T7294] Rebooting in 86400 seconds..