last executing test programs: 1m1.321619039s ago: executing program 3 (id=79): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newtfilter={0x2c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0x9}, {0x0, 0xa}, {0x300, 0x1}}, [@TCA_CHAIN={0x6, 0xb, 0x1}]}, 0x2c}}, 0x0) 1m0.967291194s ago: executing program 3 (id=81): r0 = syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a4400001020301090248000101570040090400000002060000052406000005240000000d240f01000800000000000000042402000905810310"], 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xfecc) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="2ae0e710", 0x4, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x31, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/31, 0x1f}, 0x11}], 0x621, 0x10162, 0x0) timer_create(0x3, 0x0, &(0x7f00000001c0)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xe, &(0x7f0000001400)=ANY=[@ANYBLOB="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"], &(0x7f0000001e80)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10}, 0x94) timer_settime(r1, 0x0, &(0x7f0000001ec0)={{0x77359400}, {0x0, 0x9}}, 0x0) timer_gettime(r1, &(0x7f0000001f00)) socket$nl_route(0x10, 0x3, 0x0) utime(0x0, 0xfffffffffffffffc) syz_usb_connect$uac2(0x2, 0x7b, &(0x7f0000001f80)=ANY=[@ANYBLOB="1201100100000040732b3c00400001020301090269000301b28007080b0001010c200009040000000101200009240100000a0900090904010000010220000904010101010220000905010940000208140825010003101000090402000051dd469501aaac60f701022000090402010101022000090582090004ff08"], 0x0) syz_usb_connect$printer(0x3, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0) syz_usb_connect(0x0, 0x160, &(0x7f00000009c0)={{0x12, 0x1, 0x310, 0xf7, 0xf8, 0x2a, 0x10, 0x45e, 0x44b, 0xe6c5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x14e, 0x1, 0x7, 0x3, 0x20, 0xc, "", [{{0x9, 0x4, 0xed, 0xad, 0x5, 0x3a, 0xe9, 0x85, 0xff, [@uac_as={[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x2, 0x4, 0x9, 0x7}, @as_header={0x7, 0x24, 0x1, 0x81, 0x9f}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0xb, 0x3, 0x3, "8c"}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x10, 0x2, 0xe6}]}, @cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "f9e115c488"}, {0x5, 0x24, 0x0, 0xfffd}, {0xd, 0x24, 0xf, 0x1, 0x6ca, 0x800, 0xd3, 0x3}, {0x6, 0x24, 0x1a, 0xfffe, 0x4}, [@acm={0x4, 0x24, 0x2, 0x3}, @country_functional={0x8, 0x24, 0x7, 0x7, 0x7, [0xffff]}, @mdlm={0x15, 0x24, 0x12, 0xa}, @country_functional={0x6, 0x24, 0x7, 0x2, 0x7}, @obex={0x5, 0x24, 0x15, 0x3}]}], [{{0x9, 0x5, 0xb, 0x3, 0x10, 0x92, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xfe, 0x9}]}}, {{0x9, 0x5, 0x7, 0x3, 0x200, 0x0, 0x6, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x80, 0x8}]}}, {{0x9, 0x5, 0x0, 0x1, 0x40, 0x9, 0x9, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x28ac6002080961ad, 0x9, 0x81}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x9e, 0xe9}]}}, {{0x9, 0x5, 0x4, 0x2, 0x58, 0x0, 0x8, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x9, 0x7}]}}, {{0x9, 0x5, 0xf, 0x3, 0x200, 0x3, 0x0, 0x0, [@generic={0xd, 0xe, "71920bbd026d68736cd721"}, @generic={0x6e, 0xc, "a94331fd788cadf7b43c4326233949483e98974a9dcee6c98fb8afac1624462266e74a36b238615224e91ebcd5d3e19bb0a5622147c34a2209b736d6297abf044ea57b4d360a0648f039829eff5452a34c8dfc498afe760f1ac1b62bada2b4ec0ed22a6da5f7e347f662e4a5"}]}}]}}]}}]}}, &(0x7f00000013c0)={0xa, &(0x7f00000012c0)={0xa, 0x6, 0xa568e7cce492d8ea, 0x9, 0xee, 0x3, 0x10, 0x4}, 0x5, &(0x7f0000001300)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f0000001340)=@lang_id={0x4, 0x3, 0x41b}}, {0x0, 0x0}]}) syz_usb_disconnect(r0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000940)={0x44, &(0x7f0000000700)={0x40, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x40045b17, 0x0) 58.567813786s ago: executing program 3 (id=90): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) socket$rds(0x15, 0x5, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="f001000000010104200000000000000002000000240001801400018008000100e000000108000200000000000c0002800500010000000000240002800c00028005000100000000001400018008000100e000000108000200ac1e00010800074000000000"], 0x1f0}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x9) sendmsg$nl_route(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r2, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) socket$kcm(0x10, 0x6, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb47, 0x4, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f00000001c0)={0x0, 0x0, 0x6, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000200), &(0x7f0000000240)=0x2) r3 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r3, &(0x7f0000000280)={0x2, 0x4e20, @dev}, 0x10) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSWINSZ(0xffffffffffffffff, 0x5414, &(0x7f00000002c0)) 58.395513573s ago: executing program 3 (id=91): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000240)='\x00', 0x89901) move_mount(r1, &(0x7f0000000280)='.\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000340)='\x00', 0x9801) move_mount(r2, &(0x7f0000000380)='.\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000c80)='\x00', 0x89901) fchdir(r3) mount_setattr(0xffffffffffffff9c, &(0x7f0000000cc0)='.\x00', 0x8100, &(0x7f0000000d00)={0xf, 0x84, 0x20000}, 0x20) 58.13147743s ago: executing program 3 (id=92): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="100029bd7000ffdbdf250e000000340041090800080006"], 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000"], 0x48}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x0, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0x9, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x3c, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x3, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0xffffffff, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x6, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0xfa8, 0x200b398, 0x8001, 0xfffffffe, 0x4, 0x1c, 0x0, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x9, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xeb00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x8001, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x494, 0x7, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0x2ee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x40, 0x800003, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x2, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0x8, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7f7, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x8, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0xbbd6, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0xbe, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0xab6b]}, 0x45c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x77) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000408001d00ff03"], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = dup(0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 57.495861103s ago: executing program 3 (id=93): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x101400, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x200000000000006, &(0x7f0000000140)=0x1) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB], &(0x7f00000014c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001500), 0x8, 0x10, &(0x7f0000001540), 0x10}, 0x94) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r1) sendmsg$NL80211_CMD_DEL_STATION(r0, 0x0, 0x80000) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x1, r2}, 0x38) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r3) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000001c0)={0x207, 0xa8, {0x53, 0x8, 0x1ff, {0x1ff, 0x100}, {0x1ff, 0x841}, @ramp={0x6, 0x5, {0xe5b8, 0x7, 0x126, 0x8}}}, {0xa93fafa582969b1f, 0x3, 0x800, {0x0, 0xfff2}, {0x2}, @period={0x59, 0x6, 0x0, 0x57c9, 0x1, {0x1, 0x7, 0x1, 0x484}, 0x0, 0x0}}}) syz_usb_connect$uac3(0x3, 0xed, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201000200000040820582054000010203010902db000301008032080b0003010020000904000000010120000a2401003d00000000000c240a03030000000000000014240201010200030000000000000000000000001324030201030001030000000000000000000009040100000102200009040101010102200017240102000000000100010000000000000002100000000624020102100905010900020100000a25010000000000000009040200000102200009040201010102200017240101000000000100010000000000000002100000000624020102100905820900020100"], 0x0) 57.451297788s ago: executing program 32 (id=93): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x101400, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x200000000000006, &(0x7f0000000140)=0x1) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB], &(0x7f00000014c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001500), 0x8, 0x10, &(0x7f0000001540), 0x10}, 0x94) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) syz_clone(0x0, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r1) sendmsg$NL80211_CMD_DEL_STATION(r0, 0x0, 0x80000) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x1, r2}, 0x38) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r3) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r4, 0xc06855c8, &(0x7f00000001c0)={0x207, 0xa8, {0x53, 0x8, 0x1ff, {0x1ff, 0x100}, {0x1ff, 0x841}, @ramp={0x6, 0x5, {0xe5b8, 0x7, 0x126, 0x8}}}, {0xa93fafa582969b1f, 0x3, 0x800, {0x0, 0xfff2}, {0x2}, @period={0x59, 0x6, 0x0, 0x57c9, 0x1, {0x1, 0x7, 0x1, 0x484}, 0x0, 0x0}}}) syz_usb_connect$uac3(0x3, 0xed, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201000200000040820582054000010203010902db000301008032080b0003010020000904000000010120000a2401003d00000000000c240a03030000000000000014240201010200030000000000000000000000001324030201030001030000000000000000000009040100000102200009040101010102200017240102000000000100010000000000000002100000000624020102100905010900020100000a25010000000000000009040200000102200009040201010102200017240101000000000100010000000000000002100000000624020102100905820900020100"], 0x0) 8.325270582s ago: executing program 4 (id=349): ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x80000004, 0x5, 0xcb, 0x4f, 0x7c, 0x2, 0x80, 0x1, 0x3, 0x44, 0x8, 0x2, 0x10000000000e}, {0x12, 0xfffd, 0x6, 0x8, 0xe2, 0xff, 0x8, 0x4, 0xa, 0x13, 0x3, 0xc8, 0x2}, {0x1ff, 0x7, 0xd, 0x0, 0x25, 0x1, 0x81, 0xfb, 0x80, 0x4, 0x0, 0x2}], 0x378a}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000280)=[@code={0xa, 0x5a, {"0f380a669766ba6100b000ee2309c0da00008c000000ba000000000f30c4827941fac4e1f96e42e46505e7ee1921b9500b00000f328fe9209b7ce100c403790cdeb8010000000f01d9"}}], 0x5a}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x9}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x1, 0xc, 0x4d, 0x6, 0x4, 0x2, 0x42, 0x9, 0x1, 0x4, 0x2, 0x3, 0x3}, {0x1, 0x7, 0x7, 0x0, 0x8, 0x8, 0x49, 0xff, 0x2, 0x9, 0x9, 0xe, 0x20000000002}, {0x2, 0x3, 0x77, 0x84, 0x6, 0x7, 0xfd, 0x40, 0x4, 0x3, 0x4, 0x3, 0x80000000000}], 0xf87}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8.096735475s ago: executing program 4 (id=350): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000200)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000400)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000001180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 5.776013988s ago: executing program 0 (id=369): r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip_vs\x00') read$FUSE(r0, 0x0, 0x0) 5.775732908s ago: executing program 0 (id=370): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d01"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000200)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000400)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 5.704020996s ago: executing program 1 (id=371): ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x80000004, 0x5, 0xcb, 0x4f, 0x7c, 0x2, 0x80, 0x1, 0x3, 0x44, 0x8, 0x2, 0x10000000000e}, {0x12, 0xfffd, 0x6, 0x8, 0xe2, 0xff, 0x8, 0x4, 0xa, 0x13, 0x3, 0xc8, 0x2}, {0x1ff, 0x7, 0xd, 0x0, 0x25, 0x1, 0x81, 0xfb, 0x80, 0x4, 0x0, 0x2}], 0x378a}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000280)=[@code={0xa, 0x5a, {"0f380a669766ba6100b000ee2309c0da00008c000000ba000000000f30c4827941fac4e1f96e42e46505e7ee1921b9500b00000f328fe9209b7ce100c403790cdeb8010000000f01d9"}}], 0x5a}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x9}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x1, 0xc, 0x4d, 0x6, 0x4, 0x2, 0x42, 0x9, 0x1, 0x4, 0x2, 0x3, 0x3}, {0x1, 0x7, 0x7, 0x0, 0x8, 0x8, 0x49, 0xff, 0x2, 0x9, 0x9, 0xe, 0x20000000002}, {0x2, 0x3, 0x77, 0x84, 0x6, 0x7, 0xfd, 0x40, 0x4, 0x3, 0x4, 0x3, 0x80000000000}], 0xf87}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.624857984s ago: executing program 1 (id=372): socket(0x2, 0x80805, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x3, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @private=0xa010100}, 0x5}}, 0x2e) syz_emit_ethernet(0x4c, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "ffb00afe4e70"}}}}}}}, 0x0) recvmmsg(r1, &(0x7f0000003840)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x8}, {{&(0x7f0000002180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000003540)=[{0x0}, {&(0x7f0000003440)=""/228, 0xe4}], 0x2, &(0x7f00000035c0)=""/155, 0x9b}, 0x7fff}, {{&(0x7f0000003680)=@tipc=@name, 0x80, &(0x7f0000003700), 0x0, &(0x7f0000003740)=""/247, 0xf7}, 0x2}], 0x4, 0x10002, 0x0) 5.596269437s ago: executing program 1 (id=373): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x5, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x3c, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0xffffffff, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0xfffffffe, 0x4, 0x1c, 0x0, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x9, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xeb00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x9, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x0, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0x8, 0xfff, 0x10000a, 0x9, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x2, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0x8, 0x5, 0xfffffffe], [0xa76f, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x8, 0x3, 0x4, 0x80008001, 0xbbd6, 0x1, 0x2, 0x8, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0x3, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0xab6b]}, 0x45c) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,u']) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c000000020603000000000009"], 0x2c}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 4.66512093s ago: executing program 5 (id=374): socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x80001, 0x84) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000280), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='map_files\x00') r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r2, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r1], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) 4.606078936s ago: executing program 1 (id=375): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000880)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000008c0)=[@text32={0x20, &(0x7f0000000900)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900600000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000ba00000000b9c50d0000b800c80000b8010000000f01d90f2e4f2d4f2d9d53bf0000c4e16dd3010f2202", 0x63}], 0x1, 0xb, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 4.483949829s ago: executing program 1 (id=376): syz_open_dev$vim2m(0x0, 0x2, 0x2) r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000200)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000400)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000001180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 4.263111321s ago: executing program 2 (id=377): syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f00000002c0)) 4.225703404s ago: executing program 2 (id=378): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="100029bd7000ffdbdf250e000000340041090800080006"], 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000"], 0x48}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x0, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0x9, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x3c, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x3, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0xffffffff, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x6, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0xfa8, 0x200b398, 0x8001, 0xfffffffe, 0x4, 0x1c, 0x0, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x9, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xeb00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x8001, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x494, 0x7, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0x2ee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x40, 0x800003, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x2, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0x8, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7f7, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x8, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0xbbd6, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0xbe, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0xab6b]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x77) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000408001d00ff03"], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.126421914s ago: executing program 2 (id=379): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x7ff, 0x73c0, 0xfffffffb, 0xe795, 0x5, 0x5, 0x1, 0x7}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000005c0)={'syzkaller0\x00', @multicast}) shmget$private(0x0, 0x2000, 0x10, &(0x7f0000ffe000/0x2000)=nil) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000680)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x4, 0x10000000, 0xb, 0xdc}, 0x3, r7}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4015}, 0x40488d0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000800), 0x56) sendmsg$kcm(r5, &(0x7f0000000840)={&(0x7f0000000880)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000940)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 4.015858556s ago: executing program 2 (id=380): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000440)={0x0, 0xea60}, 0x10) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000cc0)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000d00)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000d40)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) sendmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x400c011) 3.530576774s ago: executing program 4 (id=381): syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x40c442) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/24], 0x50) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r0, 0x0, 0x48) 3.101233548s ago: executing program 2 (id=382): ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x80000004, 0x5, 0xcb, 0x4f, 0x7c, 0x2, 0x80, 0x1, 0x3, 0x44, 0x8, 0x2, 0x10000000000e}, {0x12, 0xfffd, 0x6, 0x8, 0xe2, 0xff, 0x8, 0x4, 0xa, 0x13, 0x3, 0xc8, 0x2}, {0x1ff, 0x7, 0xd, 0x0, 0x25, 0x1, 0x81, 0xfb, 0x80, 0x4, 0x0, 0x2}], 0x378a}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000280)=[@code={0xa, 0x5a, {"0f380a669766ba6100b000ee2309c0da00008c000000ba000000000f30c4827941fac4e1f96e42e46505e7ee1921b9500b00000f328fe9209b7ce100c403790cdeb8010000000f01d9"}}], 0x5a}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x9}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x1, 0xc, 0x4d, 0x6, 0x4, 0x2, 0x42, 0x9, 0x1, 0x4, 0x2, 0x3, 0x3}, {0x1, 0x7, 0x7, 0x0, 0x8, 0x8, 0x49, 0xff, 0x2, 0x9, 0x9, 0xe, 0x20000000002}, {0x2, 0x3, 0x77, 0x84, 0x6, 0x7, 0xfd, 0x40, 0x4, 0x3, 0x4, 0x3, 0x80000000000}], 0xf87}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.766201231s ago: executing program 0 (id=383): socket(0x2, 0x80805, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x3, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @private=0xa010100}, 0x5}}, 0x2e) syz_emit_ethernet(0x4c, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "ffb00afe4e70"}}}}}}}, 0x0) recvmmsg(r1, &(0x7f0000003840)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x8}, {{&(0x7f0000002180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000003540)=[{0x0}, {&(0x7f0000003440)=""/228, 0xe4}], 0x2, &(0x7f00000035c0)=""/155, 0x9b}, 0x7fff}, {{&(0x7f0000003680)=@tipc=@name, 0x80, &(0x7f0000003700), 0x0, &(0x7f0000003740)=""/247, 0xf7}, 0x2}], 0x4, 0x10002, 0x0) 2.701511318s ago: executing program 0 (id=384): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000240)={0xa, 0xffff, 0x3, @empty, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4001, 0x0, @empty}, 0x1c) connect$unix(r0, &(0x7f0000000680)=@file={0x0, './file0\x00'}, 0x6e) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x121002, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d1"}]}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x301, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xf0}, 0x1, 0x0, 0x0, 0x4000801}, 0x40) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1f, 0x0, 0x0, 0x0, 0x1, 0xc3, &(0x7f0000000500)=""/195}, 0x94) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000600)=@x86={0x1, 0x5, 0x4, 0x0, 0x2, 0xc4, 0x5, 0x4c, 0x4, 0x1, 0x8, 0x2, 0x0, 0xc, 0x0, 0x7, 0x0, 0x2, 0xf, '\x00', 0xff, 0xee4}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000640)={0x1, 0x0, [{0x40000070, 0x0, 0x6}]}) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newsa={0x150, 0x10, 0x413, 0x70bd29, 0x0, {{@in=@multicast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x20, 0x20}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x32}, @in6=@private1, {0x4, 0x8001, 0x0, 0xffffffffffffff45, 0xffffffffffffffff, 0xfffffffffffffffe, 0x7f}, {0x0, 0x7, 0xcc, 0x8}, {0x5}, 0x0, 0x0, 0x2, 0x1, 0x1}, [@algo_aead={0x5f, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x98, 0x40, "92ed85d6e6f036131ca9bd79ef58d999d13068"}}]}, 0x150}}, 0x20040084) 2.587682019s ago: executing program 5 (id=385): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x5, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x3c, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0xffffffff, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0xfffffffe, 0x4, 0x1c, 0x0, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x9, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xeb00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x9, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x0, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0x8, 0xfff, 0x10000a, 0x9, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x2, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0x8, 0x5, 0xfffffffe], [0xa76f, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x8, 0x3, 0x4, 0x80008001, 0xbbd6, 0x1, 0x2, 0x8, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0x3, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0xab6b]}, 0x45c) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,u']) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c000000020603000000000009"], 0x2c}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2.213701937s ago: executing program 2 (id=386): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000300), 0x129202, 0x0) ioctl$SNDCTL_DSP_STEREO(r0, 0xc0045003, &(0x7f0000001780)=0x180004) write$binfmt_elf32(r0, 0x0, 0x4cd) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000017c0)=0x1) write$dsp(r0, &(0x7f0000001800)="755a5398d512d39077459e67ee110daaf0413bc745ef85b89f2141d513969bd8", 0xffaa) 1.838844195s ago: executing program 0 (id=387): prctl$PR_MCE_KILL(0x4e, 0x1, 0x0) r0 = socket(0x10, 0x3, 0xc) write(r0, &(0x7f0000000000)="effd00001000ff00fd4344c007110000f3050a00dbfd010000000001ffdf00", 0xfe00) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x54}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000100)=0x8) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000140)=0x1c118f48e6f7345d) setxattr$system_posix_acl(&(0x7f0000000180)='.\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000200)={{}, {}, [], {}, [], {}, {0x20, 0x4}}, 0x14, 0x0) pwritev(r2, &(0x7f0000000240)=[{&(0x7f0000000280)="00214500002c00000000400600000a0000010a000002005000500000000100000001601003e8000000000101", 0x2c}], 0x1, 0x0, 0x0) pwritev(r2, &(0x7f00000002c0), 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0) ioctl$VIDIOC_S_FBUF(0xffffffffffffffff, 0x4030560b, &(0x7f0000000500)={0x82, 0x60, &(0x7f0000000480)="b3af09ed73110a7c71f0ef6d00b24f52e1e97ab926852d25480ef64b22435b30b5e8b40211534259bcbcd269c0ee4834fbb20b278982ffb545f7b1ed920d8b771997a2ef0bc6", {0x3, 0x8, 0xb5315258, 0x4, 0x7f, 0xb6, 0x8}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r3 = socket$inet(0x2, 0x1, 0x6) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000340)={0x6, @loopback, 0x1500, 0x0, 'dh\x00', 0x3d, 0x0, 0x36}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000380)={{0x6, @loopback, 0x1500, 0x0, 'rr\x00', 0x19}, {@loopback, 0x4908, 0x5, 0x1}}, 0x44) connect(r3, &(0x7f0000000400)=@in={0x2, 0x1500, @loopback}, 0x10) 1.730404286s ago: executing program 0 (id=388): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x250, 0xf1, 0x64, 0x96, 0x40, 0x7c0, 0x158b, 0xd9d2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x40, 0x4, 0xe0, 0x1, "", [{{0x9, 0x4, 0x2c, 0x7, 0x1, 0xa7, 0x3a, 0x30, 0x6, [], [{{0x9, 0x5, 0x83, 0x3, 0x200, 0x39, 0x7, 0x9}}]}}]}}]}}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) 1.642306044s ago: executing program 5 (id=389): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="100029bd7000ffdbdf250e000000340041090800080006"], 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000"], 0x48}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x0, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0x9, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x3c, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x3, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0xffffffff, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x6, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0xfa8, 0x200b398, 0x8001, 0xfffffffe, 0x4, 0x1c, 0x0, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x9, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xeb00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x8001, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x494, 0x7, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0x2ee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x40, 0x800003, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x2, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0x8, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7f7, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x8, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0xbbd6, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0xbe, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0xab6b]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x77) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000408001d00ff03"], 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.538843305s ago: executing program 4 (id=390): syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, 0x0) 1.527528056s ago: executing program 5 (id=391): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap$snddsp(&(0x7f00000fc000/0x1000)=nil, 0x1000, 0x1000000, 0x10, 0xffffffffffffffff, 0x6000) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) r2 = socket(0x10, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x303}, "000200", "e123c5876ff425b1ebe250a8486be34705f4f827ae60ecb65e528248d5552bff", "7e25837b", "15d0db2c77179e1a"}, 0x38) write$binfmt_script(r3, &(0x7f0000000500)={'#! ', './file0'}, 0xb) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) close_range(r2, r3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000200)=@add_del={0x2, &(0x7f0000000100)='geneve0\x00'}) bind$inet(r4, 0x0, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss={0x2, 0x40}, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x50) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r4, 0x0, 0x0, 0xb, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) shutdown(r4, 0x1) sendmsg$rds(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) 1.48511465s ago: executing program 4 (id=392): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x0, [0x8, 0x81, 0xaa, 0x6d9, 0x1, 0x9]}, &(0x7f0000000240)=0x78) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000100)={'broute\x00', 0x0, 0x0, 0x0, [0x8, 0x401, 0x5, 0x0, 0x911f, 0x100000001]}, &(0x7f0000000180)=0x78) 429.370187ms ago: executing program 1 (id=393): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d0102030109021200"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000200)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000300)={0x44, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000400)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 118.486988ms ago: executing program 4 (id=394): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0xc1485544, &(0x7f0000000100)=0x5) r2 = syz_open_dev$mtd(&(0x7f0000000140), 0xa, 0x28000) ioctl$MEMGETINFO(r2, 0x80204d01, &(0x7f0000000180)) ioctl(r2, 0x4, &(0x7f00000001c0)="64ffada3d3d9f0a8350962835b7054811dc82f7334ee9ab0adbc3698a62216524de0f7732ea90c42baba80d12ac725007c59746f9baa63c9f9ba8bd5fc5672bd8a9358deb15927d3cb0e9c3d877cc524ceac4c8f9919abd863ec0c984210e895b12112072857f61fb5ca7863c17646760b003e090300f277f02552ff4a2d805efdef99c8f6b28d2db0f455f803500cc4a888f179152addaa9362637628cd8be3e78a66be7a") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x801) mlock2(&(0x7f00001fa000/0x4000)=nil, 0x4000, 0x1) munlockall() ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000280)={0xaa, 0x98}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000300)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) r4 = userfaultfd(0x801) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x4b, &(0x7f0000000540)=0xfffffff7, 0x4) sendmmsg$inet6(r5, &(0x7f0000000640)=[{{&(0x7f0000000680)={0xa, 0x4e20, 0x0, @local, 0x1}, 0x1b, 0x0, 0x0, &(0x7f00000006c0)=[@dstopts={{0x18, 0x29, 0x37, {0x6c}}}, @pktinfo={{0x24, 0x29, 0x32, {@private2={0xfc, 0x2, '\x00', 0x1}}}}], 0x40, 0x7ffffff7}}], 0x1, 0x4004081) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup, 0xffffffffffffffff, 0x1d, 0x20}, 0x20) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000380)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa07, &(0x7f00000003c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000400)={0x1, @pix_mp={0x2000000, 0x231, 0x58565559, 0x5, 0xa, [{0x9, 0x6}, {0x6, 0x7}, {0x0, 0xfffffff8}, {0x8, 0x6}, {0x5, 0x7e1}, {0x7, 0x7}, {0x6, 0xb6b}, {0xffffffff, 0xfffffff7}], 0x66, 0x0, 0x3, 0x2}}) r6 = socket(0x1e, 0x1, 0x0) connect$tipc(r6, &(0x7f0000000500)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) sendmsg$TIPC_NL_KEY_FLUSH(r6, &(0x7f0000000580)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[], 0x14}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x1f, 0x701, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x24000081}, 0x0) 99.07314ms ago: executing program 5 (id=395): r0 = socket$packet(0x11, 0x2, 0x300) sendmmsg$sock(r0, &(0x7f0000000280)=[{{&(0x7f00000002c0)=@phonet={0x23, 0xff, 0x4, 0xa}, 0x80, 0x0}}], 0x1, 0x40001) 0s ago: executing program 5 (id=396): ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x80000004, 0x5, 0xcb, 0x4f, 0x7c, 0x2, 0x80, 0x1, 0x3, 0x44, 0x8, 0x2, 0x10000000000e}, {0x12, 0xfffd, 0x6, 0x8, 0xe2, 0xff, 0x8, 0x4, 0xa, 0x13, 0x3, 0xc8, 0x2}, {0x1ff, 0x7, 0xd, 0x0, 0x25, 0x1, 0x81, 0xfb, 0x80, 0x4, 0x0, 0x2}], 0x378a}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000280)=[@code={0xa, 0x5a, {"0f380a669766ba6100b000ee2309c0da00008c000000ba000000000f30c4827941fac4e1f96e42e46505e7ee1921b9500b00000f328fe9209b7ce100c403790cdeb8010000000f01d9"}}], 0x5a}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x9}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x1, 0xc, 0x4d, 0x6, 0x4, 0x2, 0x42, 0x9, 0x1, 0x4, 0x2, 0x3, 0x3}, {0x1, 0x7, 0x7, 0x0, 0x8, 0x8, 0x49, 0xff, 0x2, 0x9, 0x9, 0xe, 0x20000000002}, {0x2, 0x3, 0x77, 0x84, 0x6, 0x7, 0xfd, 0x40, 0x4, 0x3, 0x4, 0x3, 0x80000000000}], 0xf87}) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): EV_CHANGE): veth1_to_bridge: link becomes ready [ 66.987317][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.995664][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.002758][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.010716][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.028245][ T4201] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.054099][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.063315][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.088030][ T4201] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.104912][ T4201] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.124858][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.134148][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.144342][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.153351][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.162348][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.171202][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.179845][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.188980][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.201069][ T4200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.226583][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.234730][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.276487][ T4200] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.295206][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.306485][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.342772][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.352856][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.366046][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.373170][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.410376][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.421558][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.431351][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.440602][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.447824][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.456488][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.466115][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.477342][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.486032][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.494622][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.504200][ T4190] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.519327][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.529707][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.545335][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.553428][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.562023][ T4190] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.574303][ T4190] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.589282][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.611935][ T4190] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.627749][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.636339][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.646616][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.655114][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.669359][ T4200] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.683699][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.707994][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.724184][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.734966][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.742086][ T4267] Bluetooth: hci1: command 0x041b tx timeout [ 67.747421][ T7] Bluetooth: hci0: command 0x041b tx timeout [ 67.753379][ T4267] Bluetooth: hci2: command 0x041b tx timeout [ 67.770394][ T4201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.813754][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.822201][ T7] Bluetooth: hci3: command 0x041b tx timeout [ 67.827531][ T4267] Bluetooth: hci4: command 0x041b tx timeout [ 67.829429][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.843536][ T146] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.850770][ T146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.884616][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.904207][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.922346][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.931889][ T146] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.939024][ T146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.950589][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.959679][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.968580][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.979336][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.988308][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.008351][ T4201] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.024279][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.041849][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.055237][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.068500][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.082566][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.092073][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.112390][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.123416][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.132202][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.139278][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.150892][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.159549][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.168057][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.175123][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.199285][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.210077][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.218858][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.235531][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.245833][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.282340][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.294451][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.314014][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.324635][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.340611][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.351003][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 68.372137][ T4200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.390281][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.398954][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.406446][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 68.416473][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 68.433401][ T4201] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 68.450299][ T4201] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 68.474611][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.490247][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 68.499066][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 68.509146][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 68.518387][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 68.526575][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.560864][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.572460][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 68.581461][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.590498][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.602617][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 68.611301][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 68.620090][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.628510][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.642318][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.662908][ T4191] device veth0_vlan entered promiscuous mode [ 68.671608][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.685501][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.700593][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.732438][ T4200] device veth0_vlan entered promiscuous mode [ 68.754321][ T4201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.763657][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.774154][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.783157][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.791334][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.799702][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 68.808817][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 68.819314][ T3094] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.826379][ T3094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.834154][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 68.842804][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 68.851994][ T3094] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.859103][ T3094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.873989][ T4191] device veth1_vlan entered promiscuous mode [ 68.908208][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.916351][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.924594][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.934218][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.942630][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 68.951424][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 68.960812][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 68.969396][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 68.979713][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 68.988974][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 68.998328][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.006939][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.020859][ T4200] device veth1_vlan entered promiscuous mode [ 69.049022][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.059186][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.068926][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.078560][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.087389][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.125893][ T4196] device veth0_vlan entered promiscuous mode [ 69.132686][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 69.141350][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.151524][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.160095][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.170365][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.179086][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.186873][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.194525][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.202390][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.215260][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.224047][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.233041][ T4201] device veth0_vlan entered promiscuous mode [ 69.246320][ T4196] device veth1_vlan entered promiscuous mode [ 69.265108][ T4200] device veth0_macvtap entered promiscuous mode [ 69.281027][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 69.289758][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.301435][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.310664][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.319371][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.328865][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.337444][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.345689][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.356458][ T4191] device veth0_macvtap entered promiscuous mode [ 69.368884][ T4191] device veth1_macvtap entered promiscuous mode [ 69.379860][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.393573][ T4201] device veth1_vlan entered promiscuous mode [ 69.408673][ T4200] device veth1_macvtap entered promiscuous mode [ 69.454538][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.479724][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.494169][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.523275][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.533402][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.542181][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.560439][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.570810][ T4196] device veth0_macvtap entered promiscuous mode [ 69.583620][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.594209][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 69.611496][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 69.624768][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.641473][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.659336][ T4201] device veth0_macvtap entered promiscuous mode [ 69.668369][ T4196] device veth1_macvtap entered promiscuous mode [ 69.678635][ T4191] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.689027][ T4191] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.698542][ T4191] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.707395][ T4191] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.722371][ T4201] device veth1_macvtap entered promiscuous mode [ 69.732578][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.743982][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.755896][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.773253][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.784040][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.794072][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.804729][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.815840][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.823560][ T13] Bluetooth: hci2: command 0x040f tx timeout [ 69.826992][ T4267] Bluetooth: hci1: command 0x040f tx timeout [ 69.829862][ T13] Bluetooth: hci0: command 0x040f tx timeout [ 69.859104][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.866229][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.875309][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 69.884051][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.892200][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.900576][ T4266] Bluetooth: hci4: command 0x040f tx timeout [ 69.901308][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.907486][ T4266] Bluetooth: hci3: command 0x040f tx timeout [ 69.922404][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.931979][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.941010][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.948742][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.963365][ T4200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.974643][ T4200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.988295][ T4200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.996956][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.007781][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.017968][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.028764][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.040224][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.049353][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.061200][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.071249][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.082493][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.092586][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.103213][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.114117][ T4201] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.127865][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.136744][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.145865][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.155613][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.164715][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.173664][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.191469][ T4196] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.200401][ T4196] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.209333][ T4196] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.218893][ T4196] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.232609][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.244436][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.254656][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.266152][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.276026][ T4201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.286542][ T4201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.302894][ T4201] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.315748][ T4200] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.324646][ T4200] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.333519][ T4200] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.342328][ T4200] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.366501][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.376033][ T146] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.389698][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.398849][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.425010][ T4201] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.434375][ T4201] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.443687][ T4201] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.452434][ T4201] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.514279][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.522947][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.560539][ T4190] device veth0_vlan entered promiscuous mode [ 70.596425][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 70.604511][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 70.637451][ T4190] device veth1_vlan entered promiscuous mode [ 70.688418][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.696706][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.715326][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 70.733643][ T3094] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.792705][ T145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.801275][ T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.801890][ T145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.815616][ T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.829952][ T146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.833829][ T4190] device veth0_macvtap entered promiscuous mode [ 70.848820][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 70.858701][ T146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.864808][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.874852][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.884180][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.892112][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.900585][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.911606][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.952073][ T4190] device veth1_macvtap entered promiscuous mode [ 70.972254][ T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.980573][ T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.011655][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.024417][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.046956][ T146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.048738][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.056649][ T146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.071934][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.089922][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.101659][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.112113][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.122812][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.134965][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.145694][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.162756][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.174012][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.185138][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.197384][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.213490][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.225273][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.226287][ T4307] capability: warning: `syz.4.5' uses 32-bit capabilities (legacy support in use) [ 71.241899][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.255940][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.271268][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.283023][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.312489][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.321379][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.339555][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.343900][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.353567][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.362969][ T4310] IPVS: fo: FWM 3 0x00000003 - no destination available [ 71.378831][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.393953][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.404437][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.421657][ T1434] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.428317][ T1434] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.430557][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.449029][ T4190] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.457932][ T4190] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.468472][ T4190] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.477835][ T4190] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.485692][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.506416][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.702636][ T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.720896][ T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.767030][ T21] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 71.781558][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.804725][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.826134][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.870142][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.897300][ T4262] Bluetooth: hci0: command 0x0419 tx timeout [ 71.904132][ T4262] Bluetooth: hci2: command 0x0419 tx timeout [ 71.935531][ T4267] Bluetooth: hci1: command 0x0419 tx timeout [ 71.985493][ T4262] Bluetooth: hci3: command 0x0419 tx timeout [ 71.989348][ T4318] syz.3.4 (4318): drop_caches: 2 [ 72.012908][ T4262] Bluetooth: hci4: command 0x0419 tx timeout [ 72.087321][ T4302] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 72.189050][ T21] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 72.202970][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.245726][ T21] usb 5-1: config 0 descriptor?? [ 72.304058][ T21] cp210x 5-1:0.0: cp210x converter detected [ 72.490017][ T4302] usb 1-1: config index 0 descriptor too short (expected 65349, got 72) [ 72.496000][ T4318] ODEBUG: Out of memory. ODEBUG disabled [ 72.691285][ T4302] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9170, bcdDevice= 1.08 [ 72.713137][ T4302] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.737183][ T21] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 72.755645][ T4302] usb 1-1: Product: syz [ 72.768435][ T4318] syz.3.4 (4318): drop_caches: 2 [ 72.774097][ T4302] usb 1-1: Manufacturer: syz [ 72.779768][ T4302] usb 1-1: SerialNumber: syz [ 72.805322][ T21] usb 5-1: cp210x converter now attached to ttyUSB0 [ 72.924571][ T4326] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2'. [ 72.955423][ T4326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 73.027108][ T4302] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 73.056712][ T21] usb 5-1: USB disconnect, device number 2 [ 73.102067][ T21] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 73.122577][ T21] cp210x 5-1:0.0: device disconnected [ 73.497421][ T4266] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 73.520886][ T4302] usb 1-1: driver API: 1.9.9 2016-02-15 [1-1] [ 73.535634][ T4302] usb 1-1: firmware API: 1.9.6 2012-07-07 [ 73.555252][ T4333] netlink: 112 bytes leftover after parsing attributes in process `syz.3.11'. [ 73.766874][ T4266] usb 3-1: Using ep0 maxpacket: 16 [ 73.890202][ T4266] usb 3-1: config index 0 descriptor too short (expected 51443, got 18) [ 74.006961][ C1] usb 1-1: received invalid command response:got -4, instead of 0 [ 74.015125][ C1] usb 1-1: restart device (9) [ 74.057785][ T4266] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 74.087585][ T4266] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.107619][ T4266] usb 3-1: Product: syz [ 74.112039][ T4266] usb 3-1: Manufacturer: syz [ 74.135079][ T4266] usb 3-1: SerialNumber: syz [ 74.175015][ T4266] r8152-cfgselector 3-1: config 0 descriptor?? [ 74.216884][ C1] usb 1-1: received invalid command response:got -4, instead of 0 [ 74.649778][ T26] audit: type=1800 audit(1794149180.959:2): pid=4331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.10" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 74.787718][ T4302] usb 1-1: firmware upload failed (-110). [ 74.887395][ T4266] r8152-cfgselector 3-1: Unknown version 0x0000 [ 74.895528][ T4266] r8152-cfgselector 3-1: bad CDC descriptors [ 74.905191][ T4268] usb 1-1: USB disconnect, device number 2 [ 74.947226][ T4266] r8152-cfgselector 3-1: Unknown version 0x0000 [ 74.969629][ T4266] r8152-cfgselector 3-1: USB disconnect, device number 2 [ 75.614551][ T4268] rxe_eth0 speed is unknown, defaulting to 1000 [ 75.867507][ T7] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 76.116985][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 76.237027][ T7] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.252339][ T7] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 76.264888][ T7] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 76.284101][ T7] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 76.295696][ T7] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 76.310295][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.373581][ T7] hub 3-1:1.0: bad descriptor, ignoring hub [ 76.384653][ T7] hub: probe of 3-1:1.0 failed with error -5 [ 76.428869][ T7] cdc_wdm 3-1:1.0: skipping garbage [ 76.463255][ T7] cdc_wdm 3-1:1.0: skipping garbage [ 76.495882][ T7] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 76.522512][ T7] cdc_wdm 3-1:1.0: Unknown control protocol [ 76.913062][ T4377] loop2: detected capacity change from 0 to 7 [ 76.936152][ T4377] Dev loop2: unable to read RDB block 7 [ 76.945946][ T4377] loop2: AHDI p2 p3 [ 76.950156][ T4377] loop2: partition table partially beyond EOD, truncated [ 76.959382][ T4377] loop2: p3 start 335544320 is beyond EOD, truncated [ 77.284708][ T4385] netlink: 136 bytes leftover after parsing attributes in process `syz.4.22'. [ 77.296879][ T1110] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 77.311353][ T4385] netlink: 8 bytes leftover after parsing attributes in process `syz.4.22'. [ 77.383496][ T7] wacom 0003:056A:003F.0001: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 77.581200][ T4391] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 77.623812][ T4387] fido_id[4387]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 77.710762][ T1110] usb 4-1: unable to get BOS descriptor or descriptor too short [ 77.796987][ T1110] usb 4-1: config 64 has an invalid interface number: 44 but max is 0 [ 77.815847][ T1110] usb 4-1: config 64 has no interface number 0 [ 77.829515][ T1110] usb 4-1: config 64 interface 44 altsetting 7 endpoint 0x83 has an invalid bInterval 57, changing to 9 [ 77.864819][ T1110] usb 4-1: config 64 interface 44 has no altsetting 0 [ 77.976458][ T4397] netlink: 112 bytes leftover after parsing attributes in process `syz.4.25'. [ 78.038183][ T1110] usb 4-1: New USB device found, idVendor=07c0, idProduct=158b, bcdDevice=d9.d2 [ 78.061978][ T1110] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.102714][ T1110] usb 4-1: Product: syz [ 78.123787][ T1110] usb 4-1: Manufacturer: syz [ 78.159110][ T1110] usb 4-1: SerialNumber: syz [ 78.492994][ T4401] syz.4.26 uses obsolete (PF_INET,SOCK_PACKET) [ 78.508105][ T1110] iowarrior 4-1:64.44: no interrupt-out endpoint found [ 78.545961][ T1110] usb 4-1: USB disconnect, device number 2 [ 78.572366][ T4401] Zero length message leads to an empty skb [ 79.117337][ T4406] netlink: 'syz.0.37': attribute type 1 has an invalid length. [ 79.451626][ T4415] device syzkaller0 entered promiscuous mode [ 79.857174][ T1110] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 80.257058][ T4262] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 80.397624][ T1110] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 80.406752][ T1110] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.455420][ T1110] usb 1-1: Product: syz [ 80.467083][ T1110] usb 1-1: Manufacturer: syz [ 80.473563][ T1110] usb 1-1: SerialNumber: syz [ 80.485211][ T1110] usb 1-1: config 0 descriptor?? [ 80.757690][ T4262] usb 4-1: config index 0 descriptor too short (expected 65349, got 72) [ 80.767002][ T1110] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 80.947245][ T4262] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9170, bcdDevice= 1.08 [ 80.978754][ T4262] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.015885][ T4262] usb 4-1: Product: syz [ 81.029624][ T4262] usb 4-1: Manufacturer: syz [ 81.035996][ T4262] usb 4-1: SerialNumber: syz [ 81.189570][ T4375] cdc_wdm 3-1:1.0: Error autopm - -16 [ 81.189720][ T4268] usb 3-1: USB disconnect, device number 3 [ 81.247236][ T4262] usb 4-1: reset high-speed USB device number 3 using dummy_hcd [ 81.330911][ T4443] netlink: 136 bytes leftover after parsing attributes in process `syz.2.34'. [ 81.373848][ T4443] netlink: 8 bytes leftover after parsing attributes in process `syz.2.34'. [ 81.501564][ T7] wacom 0003:056A:003F.0002: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 81.652618][ T4445] fido_id[4445]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 81.688522][ T4266] usb 4-1: driver API: 1.9.9 2016-02-15 [1-1] [ 81.723973][ T4266] usb 4-1: firmware API: 1.9.6 2012-07-07 [ 82.186887][ C0] usb 4-1: received invalid command response:got -4, instead of 0 [ 82.195036][ C0] usb 4-1: restart device (9) [ 82.283315][ T4302] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 82.406837][ C0] usb 4-1: received invalid command response:got -4, instead of 0 [ 82.747146][ T4302] usb 2-1: unable to get BOS descriptor or descriptor too short [ 82.850493][ T4302] usb 2-1: config 64 has an invalid interface number: 44 but max is 0 [ 82.850514][ T4302] usb 2-1: config 64 has no interface number 0 [ 82.850533][ T4302] usb 2-1: config 64 interface 44 altsetting 7 endpoint 0x83 has an invalid bInterval 57, changing to 9 [ 82.850550][ T4302] usb 2-1: config 64 interface 44 has no altsetting 0 [ 82.938439][ T4266] usb 4-1: firmware upload failed (-110). [ 83.038424][ T4302] usb 2-1: New USB device found, idVendor=07c0, idProduct=158b, bcdDevice=d9.d2 [ 83.076872][ T7] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 83.094603][ T4302] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.114877][ T4302] usb 2-1: Product: syz [ 83.126863][ T4302] usb 2-1: Manufacturer: syz [ 83.131527][ T4302] usb 2-1: SerialNumber: syz [ 83.238923][ T4268] usb 4-1: USB disconnect, device number 3 [ 83.446946][ T7] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.497073][ T1110] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 83.515695][ T4302] iowarrior 2-1:64.44: no interrupt-out endpoint found [ 83.519115][ T1110] usb 1-1: USB disconnect, device number 3 [ 83.553335][ T4302] usb 2-1: USB disconnect, device number 2 [ 83.617010][ T7] usb 3-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 83.620417][ T4465] netlink: 'syz.4.41': attribute type 1 has an invalid length. [ 83.661005][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.675029][ T7] usb 3-1: Product: syz [ 83.680585][ T7] usb 3-1: Manufacturer: syz [ 83.686087][ T7] usb 3-1: SerialNumber: syz [ 83.782327][ T4467] device syzkaller0 entered promiscuous mode [ 84.016378][ T4469] xt_nat: multiple ranges no longer supported [ 84.017174][ T7] usb 3-1: 1:1 : unsupported format bits 0x20000 [ 84.067056][ T7] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 84.092667][ T7] usb 3-1: 2:1 : unsupported format bits 0x20000 [ 84.160609][ T7] usb 3-1: USB disconnect, device number 4 [ 84.386869][ T1110] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 84.468831][ T4481] netlink: 'syz.0.47': attribute type 1 has an invalid length. [ 84.916919][ T1110] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 84.926197][ T1110] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.934778][ T1110] usb 2-1: Product: syz [ 84.939450][ T1110] usb 2-1: Manufacturer: syz [ 84.944135][ T1110] usb 2-1: SerialNumber: syz [ 84.963105][ T1110] usb 2-1: config 0 descriptor?? [ 85.180337][ T4494] netlink: 'syz.0.52': attribute type 1 has an invalid length. [ 85.227055][ T1110] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 85.297056][ T4496] device syzkaller0 entered promiscuous mode [ 85.657094][ T21] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 86.118349][ T21] usb 1-1: unable to get BOS descriptor or descriptor too short [ 86.207082][ T21] usb 1-1: config 64 has an invalid interface number: 44 but max is 0 [ 86.219193][ T21] usb 1-1: config 64 has no interface number 0 [ 86.228981][ T21] usb 1-1: config 64 interface 44 altsetting 7 endpoint 0x83 has an invalid bInterval 57, changing to 9 [ 86.241786][ T21] usb 1-1: config 64 interface 44 has no altsetting 0 [ 86.457277][ T21] usb 1-1: New USB device found, idVendor=07c0, idProduct=158b, bcdDevice=d9.d2 [ 86.484494][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.505315][ T21] usb 1-1: Product: syz [ 86.517310][ T21] usb 1-1: Manufacturer: syz [ 86.525062][ T21] usb 1-1: SerialNumber: syz [ 86.788755][ T23] cfg80211: failed to load regulatory.db [ 86.902000][ T21] iowarrior 1-1:64.44: no interrupt-out endpoint found [ 86.924052][ T21] usb 1-1: USB disconnect, device number 4 [ 87.405017][ T4531] netlink: 'syz.0.64': attribute type 1 has an invalid length. [ 87.456875][ T21] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 87.716956][ T1110] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -32 [ 87.745484][ T1110] usb 2-1: USB disconnect, device number 3 [ 87.856957][ T21] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.908910][ T21] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 88.136975][ T21] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 88.158962][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.172140][ T21] usb 4-1: Product: syz [ 88.176392][ T21] usb 4-1: Manufacturer: syz [ 88.181593][ T21] usb 4-1: SerialNumber: syz [ 88.455680][ T4527] udc-core: couldn't find an available UDC or it's busy [ 88.483983][ T4527] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 88.516866][ T23] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 88.530969][ T4527] udc-core: couldn't find an available UDC or it's busy [ 88.551623][ T4527] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 88.572090][ T4527] udc-core: couldn't find an available UDC or it's busy [ 88.599295][ T4527] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 88.667945][ T21] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 88.699679][ T21] usb 4-1: USB disconnect, device number 4 [ 88.927101][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.945969][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.966282][ T23] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 88.982776][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.004931][ T23] usb 1-1: config 0 descriptor?? [ 89.510078][ T23] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 89.525101][ T23] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 89.544615][ T23] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 89.566502][ T23] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 89.596598][ T23] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 89.615241][ T23] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 89.639100][ T23] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 89.681202][ T23] cp2112 0003:10C4:EA90.0003: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 89.837030][ T23] cp2112 0003:10C4:EA90.0003: Part Number: 0x00 Device Version: 0x00 [ 90.356879][ T4268] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 90.478899][ T4536] cp2112 0003:10C4:EA90.0003: Error starting transaction: -38 [ 90.526909][ T21] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 90.527080][ T23] cp2112 0003:10C4:EA90.0003: error reading lock byte: -71 [ 90.530433][ T23] usb 1-1: USB disconnect, device number 5 [ 90.636824][ T4268] usb 3-1: Using ep0 maxpacket: 16 [ 90.802514][ T4570] fido_id[4570]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 90.847013][ T4268] usb 3-1: config 252 has an invalid interface number: 15 but max is 0 [ 90.855717][ T4268] usb 3-1: config 252 has no interface number 0 [ 90.890874][ T4268] usb 3-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 91.007085][ T21] usb 5-1: unable to get BOS descriptor or descriptor too short [ 91.035736][ T4572] netlink: 'syz.1.75': attribute type 1 has an invalid length. [ 91.097143][ T4268] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 91.137102][ T4268] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.147064][ T21] usb 5-1: config 64 has an invalid interface number: 44 but max is 0 [ 91.165564][ T21] usb 5-1: config 64 has no interface number 0 [ 91.173546][ T21] usb 5-1: config 64 interface 44 altsetting 7 endpoint 0x83 has an invalid bInterval 57, changing to 9 [ 91.194558][ T4268] usb 3-1: Product: syz [ 91.204531][ T4268] usb 3-1: Manufacturer: syz [ 91.214642][ T4268] usb 3-1: SerialNumber: syz [ 91.224807][ T21] usb 5-1: config 64 interface 44 has no altsetting 0 [ 91.348293][ T4268] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 91.407144][ T4261] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 91.436965][ T21] usb 5-1: New USB device found, idVendor=07c0, idProduct=158b, bcdDevice=d9.d2 [ 91.446009][ T4579] netlink: 'syz.3.79': attribute type 11 has an invalid length. [ 91.449882][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.462122][ T21] usb 5-1: Product: syz [ 91.466395][ T21] usb 5-1: Manufacturer: syz [ 91.471129][ T21] usb 5-1: SerialNumber: syz [ 91.493676][ T4268] usb 3-1: USB disconnect, device number 5 [ 91.499803][ T1279] usb 3-1: Failed to submit usb control message: -71 [ 91.506732][ T1279] usb 3-1: unable to send the bmi data to the device: -71 [ 91.526821][ T1279] usb 3-1: unable to get target info from device [ 91.533336][ T1279] usb 3-1: could not get target info (-71) [ 91.539721][ T1279] usb 3-1: could not probe fw (-71) [ 91.788165][ T21] iowarrior 5-1:64.44: no interrupt-out endpoint found [ 91.800240][ T21] usb 5-1: USB disconnect, device number 3 [ 91.947101][ T4261] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 91.967842][ T4261] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.977123][ T7] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 91.999466][ T4261] usb 1-1: Product: syz [ 92.006965][ T4261] usb 1-1: Manufacturer: syz [ 92.017846][ T4261] usb 1-1: SerialNumber: syz [ 92.072177][ T4261] usb 1-1: config 0 descriptor?? [ 92.337073][ T4261] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 92.345623][ T7] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 92.377293][ T7] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 92.416864][ T4266] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 92.617455][ T7] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 92.626746][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.676963][ T4266] usb 2-1: Using ep0 maxpacket: 8 [ 92.694793][ T7] usb 4-1: Product: syz [ 92.712614][ T7] usb 4-1: Manufacturer: syz [ 92.727626][ T7] usb 4-1: SerialNumber: syz [ 92.796950][ T4266] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 92.823308][ T4266] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 92.866301][ T4266] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 92.911619][ T4266] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 92.954729][ T4266] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 92.992706][ T4585] udc-core: couldn't find an available UDC or it's busy [ 93.011094][ T4585] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 93.018971][ T4266] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.063460][ T4585] udc-core: couldn't find an available UDC or it's busy [ 93.072862][ T4585] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 93.096580][ T4585] udc-core: couldn't find an available UDC or it's busy [ 93.105165][ T4266] hub 2-1:1.0: bad descriptor, ignoring hub [ 93.114826][ T4266] hub: probe of 2-1:1.0 failed with error -5 [ 93.134703][ T4266] cdc_wdm 2-1:1.0: skipping garbage [ 93.160661][ T4585] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 93.176417][ T4266] cdc_wdm 2-1:1.0: skipping garbage [ 93.211089][ T4266] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 93.218324][ T7] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 93.243763][ T7] usb 4-1: USB disconnect, device number 5 [ 93.256606][ T4266] cdc_wdm 2-1:1.0: Unknown control protocol [ 93.474755][ T4612] netlink: 'syz.4.88': attribute type 1 has an invalid length. [ 93.897076][ T7] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 94.079554][ T4623] netlink: 112 bytes leftover after parsing attributes in process `syz.3.90'. [ 94.146926][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 94.267147][ T7] usb 5-1: config index 0 descriptor too short (expected 51443, got 18) [ 94.436802][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 94.456803][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 94.466801][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 94.477163][ T7] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 94.575047][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.646581][ T4268] usb 2-1: USB disconnect, device number 4 [ 94.649642][ T7] usb 5-1: Product: syz [ 94.652587][ T4615] cdc_wdm 2-1:1.0: Error autopm - -16 [ 94.656651][ T7] usb 5-1: Manufacturer: syz [ 94.656671][ T7] usb 5-1: SerialNumber: syz [ 94.760402][ T7] r8152-cfgselector 5-1: config 0 descriptor?? [ 94.832805][ T4261] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -32 [ 94.866661][ T4261] usb 1-1: USB disconnect, device number 6 [ 95.159359][ T3094] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.259060][ T26] audit: type=1800 audit(1794149201.569:3): pid=4618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.89" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 95.274170][ T3094] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.387045][ T3094] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.454340][ T7] r8152-cfgselector 5-1: Unknown version 0x0000 [ 95.466929][ T7] r8152-cfgselector 5-1: bad CDC descriptors [ 95.492053][ T3094] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.496919][ T7] r8152-cfgselector 5-1: Unknown version 0x0000 [ 95.558784][ T7] r8152-cfgselector 5-1: USB disconnect, device number 4 [ 95.638699][ T4638] rxe_eth0 speed is unknown, defaulting to 1000 [ 95.930056][ T4650] netlink: 'syz.2.99': attribute type 1 has an invalid length. [ 96.160458][ T4638] chnl_net:caif_netlink_parms(): no params data found [ 96.287636][ T4664] netlink: 112 bytes leftover after parsing attributes in process `syz.2.102'. [ 96.297282][ T4262] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 96.413095][ T4638] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.428233][ T4638] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.436423][ T4638] device bridge_slave_0 entered promiscuous mode [ 96.459908][ T4638] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.477750][ T4638] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.487376][ T4638] device bridge_slave_1 entered promiscuous mode [ 96.537225][ T4638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.555836][ T4638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.615808][ T4638] team0: Port device team_slave_0 added [ 96.669876][ T4638] team0: Port device team_slave_1 added [ 96.687242][ T4262] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.716986][ T4262] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 96.774573][ T4638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.784248][ T4638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.868376][ T4638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.927181][ T7] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 96.935275][ T4638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.955662][ T4638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.956867][ T21] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 96.983602][ T4638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.011977][ T4262] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 97.053030][ T4262] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.064075][ T4262] usb 5-1: Product: syz [ 97.075002][ T4262] usb 5-1: Manufacturer: syz [ 97.081225][ T4262] usb 5-1: SerialNumber: syz [ 97.175178][ T4638] device hsr_slave_0 entered promiscuous mode [ 97.182988][ T4638] device hsr_slave_1 entered promiscuous mode [ 97.190341][ T4638] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.204836][ T4638] Cannot create hsr debugfs directory [ 97.236859][ T21] usb 1-1: Using ep0 maxpacket: 8 [ 97.273065][ T4267] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 97.366557][ T21] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.384834][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.396894][ T21] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 97.403464][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.405973][ T21] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 97.446811][ T4694] udc-core: couldn't find an available UDC or it's busy [ 97.456131][ T7] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 97.485881][ T4694] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 97.493679][ T21] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 97.500135][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.536941][ T21] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 97.540930][ T4694] udc-core: couldn't find an available UDC or it's busy [ 97.560023][ T4694] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 97.566380][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.574371][ T4694] udc-core: couldn't find an available UDC or it's busy [ 97.586509][ T4694] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 97.609542][ T7] usb 3-1: config 0 descriptor?? [ 97.635910][ T4655] udc-core: couldn't find an available UDC or it's busy [ 97.644246][ T21] hub 1-1:1.0: bad descriptor, ignoring hub [ 97.650724][ T21] hub: probe of 1-1:1.0 failed with error -5 [ 97.661208][ T4266] Bluetooth: hci2: command 0x0409 tx timeout [ 97.667939][ T4655] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 97.677837][ T21] cdc_wdm 1-1:1.0: skipping garbage [ 97.683072][ T21] cdc_wdm 1-1:1.0: skipping garbage [ 97.712043][ T21] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 97.718554][ T21] cdc_wdm 1-1:1.0: Unknown control protocol [ 97.742595][ T3094] device hsr_slave_0 left promiscuous mode [ 97.749690][ T3094] device hsr_slave_1 left promiscuous mode [ 97.775484][ T3094] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.799461][ T3094] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.829571][ T3094] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.846995][ T4267] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 97.856087][ T4267] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.876871][ T3094] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.906982][ T4267] usb 2-1: Product: syz [ 97.911201][ T4267] usb 2-1: Manufacturer: syz [ 97.926842][ T4267] usb 2-1: SerialNumber: syz [ 97.933412][ T4267] usb 2-1: config 0 descriptor?? [ 97.941468][ T3094] device bridge_slave_1 left promiscuous mode [ 97.958067][ T3094] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.975423][ T3094] device bridge_slave_0 left promiscuous mode [ 97.991889][ T3094] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.032110][ T3094] device veth1_macvtap left promiscuous mode [ 98.043608][ T3094] device veth0_macvtap left promiscuous mode [ 98.053891][ T3094] device veth1_vlan left promiscuous mode [ 98.069970][ T3094] device veth0_vlan left promiscuous mode [ 98.079010][ T7] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 98.087424][ T7] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 98.094418][ T7] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 98.102087][ T7] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 98.109438][ T7] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 98.116665][ T7] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 98.124079][ T7] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 98.136389][ T7] cp2112 0003:10C4:EA90.0004: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 98.206988][ T4267] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 98.298099][ T7] cp2112 0003:10C4:EA90.0004: Part Number: 0x00 Device Version: 0x00 [ 98.307064][ T4268] usb 1-1: USB disconnect, device number 7 [ 98.492580][ T3094] team0 (unregistering): Port device team_slave_1 removed [ 98.519042][ T3094] team0 (unregistering): Port device team_slave_0 removed [ 98.535234][ T3094] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.564716][ T3094] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.650395][ T3094] bond0 (unregistering): Released all slaves [ 98.716152][ T4638] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 98.726512][ T4262] cdc_ether: probe of 5-1:1.0 failed with error -22 [ 98.772287][ T4262] usb 5-1: USB disconnect, device number 5 [ 98.784127][ T4638] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 98.824081][ T4638] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 98.836359][ T4638] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 98.938595][ T4676] cp2112 0003:10C4:EA90.0004: Error starting transaction: -38 [ 98.968448][ T7] cp2112 0003:10C4:EA90.0004: error reading lock byte: -71 [ 98.987565][ T7] usb 3-1: USB disconnect, device number 6 [ 99.058069][ T4638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.068326][ T4713] capability: warning: `syz.0.107' uses deprecated v2 capabilities in a way that may be insecure [ 99.129066][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 99.151783][ T156] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 99.171597][ T4638] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.174830][ T4716] fido_id[4716]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 99.247628][ T4689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 99.259054][ T4689] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 99.277408][ T4689] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.284646][ T4689] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.337145][ T4689] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 99.356647][ T4689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 99.377600][ T4689] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 99.394524][ T4689] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.401801][ T4689] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.429250][ T4689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 99.448306][ T4689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 99.484343][ T4689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 99.494656][ T4689] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 99.524631][ T4689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 99.536182][ T4689] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 99.554485][ T4689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 99.565585][ T4689] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 99.599292][ T4638] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 99.616926][ T4262] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 99.618047][ T4638] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 99.641813][ T4689] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 99.663536][ T4689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 99.681543][ T4689] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 99.712763][ T4735] netlink: 'syz.4.111': attribute type 1 has an invalid length. [ 99.747080][ T4266] Bluetooth: hci2: command 0x041b tx timeout [ 99.877011][ T4262] usb 1-1: Using ep0 maxpacket: 16 [ 99.997218][ T4262] usb 1-1: config 252 has an invalid interface number: 15 but max is 0 [ 100.010340][ T4262] usb 1-1: config 252 has no interface number 0 [ 100.031797][ T4262] usb 1-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 100.165920][ T4689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 100.177353][ T4689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 100.242622][ T4638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.247204][ T4262] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 100.265089][ T4262] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.296375][ T4262] usb 1-1: Product: syz [ 100.302673][ T4262] usb 1-1: Manufacturer: syz [ 100.328168][ T4262] usb 1-1: SerialNumber: syz [ 100.430755][ T4262] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 100.575320][ T4763] netlink: 112 bytes leftover after parsing attributes in process `syz.4.113'. [ 100.625775][ T4262] usb 1-1: USB disconnect, device number 8 [ 100.626949][ T1279] usb 1-1: Failed to submit usb control message: -71 [ 100.664538][ T1279] usb 1-1: unable to send the bmi data to the device: -71 [ 100.686980][ T4267] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -32 [ 100.725656][ T4267] usb 2-1: USB disconnect, device number 5 [ 100.731650][ T1279] usb 1-1: unable to get target info from device [ 100.756895][ T1279] usb 1-1: could not get target info (-71) [ 100.777743][ T1279] usb 1-1: could not probe fw (-71) [ 101.071816][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 101.087684][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 101.133972][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 101.158688][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 101.206294][ T4638] device veth0_vlan entered promiscuous mode [ 101.225616][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 101.238493][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 101.279134][ T4638] device veth1_vlan entered promiscuous mode [ 101.357980][ T4780] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 101.388055][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 101.397390][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 101.415853][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 101.448203][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 101.477743][ T4638] device veth0_macvtap entered promiscuous mode [ 101.578855][ T4638] device veth1_macvtap entered promiscuous mode [ 101.628531][ T4638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.666275][ T4638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.700152][ T4638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.739874][ T4638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.784893][ T4638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.817236][ T1110] Bluetooth: hci2: command 0x040f tx timeout [ 101.827505][ T4638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.854700][ T4638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.897152][ T4638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.931834][ T4638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.962790][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 101.982228][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 102.063295][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 102.101393][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 102.177602][ T4638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.227147][ T4638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.263343][ T4638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.327516][ T4638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.369441][ T4638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.396815][ T4638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.419477][ T4638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.461003][ T4638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.491887][ T4638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.537069][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 102.563620][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 102.621900][ T4638] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.647492][ T4638] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.696124][ T4638] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.735683][ T4638] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.002766][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.019971][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.079754][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 103.169098][ T1279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.209597][ T1279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.267300][ T4689] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 103.534699][ T4831] device syzkaller0 entered promiscuous mode [ 103.726998][ T4262] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 103.900981][ T1110] Bluetooth: hci2: command 0x0419 tx timeout [ 103.916926][ T7] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 104.154488][ T4851] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 104.227607][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 104.247034][ T4302] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 104.287051][ T4262] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 104.336361][ T4262] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.352515][ T4262] usb 1-1: Product: syz [ 104.357420][ T4262] usb 1-1: Manufacturer: syz [ 104.367101][ T4262] usb 1-1: SerialNumber: syz [ 104.377407][ T7] usb 3-1: config index 0 descriptor too short (expected 51443, got 18) [ 104.397525][ T4262] usb 1-1: config 0 descriptor?? [ 104.583650][ T7] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 104.596858][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.617673][ T7] usb 3-1: Product: syz [ 104.621889][ T7] usb 3-1: Manufacturer: syz [ 104.634873][ T7] usb 3-1: SerialNumber: syz [ 104.651853][ T7] r8152-cfgselector 3-1: config 0 descriptor?? [ 104.661756][ T4262] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 104.773237][ T4302] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 104.793376][ T4302] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.814506][ T4302] usb 2-1: Product: syz [ 104.822436][ T4302] usb 2-1: Manufacturer: syz [ 104.827204][ T4302] usb 2-1: SerialNumber: syz [ 104.848206][ T4302] usb 2-1: config 0 descriptor?? [ 105.106981][ T4302] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 105.149127][ T26] audit: type=1800 audit(1794149211.459:4): pid=4839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.126" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 105.169839][ T7] r8152-cfgselector 3-1: Unknown version 0x0000 [ 105.176203][ T7] r8152-cfgselector 3-1: bad CDC descriptors [ 105.227070][ T7] r8152-cfgselector 3-1: Unknown version 0x0000 [ 105.246302][ T7] r8152-cfgselector 3-1: USB disconnect, device number 7 [ 105.587061][ T4268] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 105.646989][ T4274] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 105.826922][ T4268] usb 6-1: Using ep0 maxpacket: 8 [ 105.947016][ T4268] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.957831][ T4268] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 105.967037][ T4268] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.976706][ T4268] usb 6-1: config 0 descriptor?? [ 106.018483][ T4268] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 106.087067][ T4274] usb 5-1: unable to get BOS descriptor or descriptor too short [ 106.177130][ T4274] usb 5-1: config 64 has an invalid interface number: 44 but max is 0 [ 106.185446][ T4274] usb 5-1: config 64 has no interface number 0 [ 106.195068][ T4274] usb 5-1: config 64 interface 44 altsetting 7 endpoint 0x83 has an invalid bInterval 57, changing to 9 [ 106.206428][ T4274] usb 5-1: config 64 interface 44 has no altsetting 0 [ 106.242516][ T4908] netlink: 116 bytes leftover after parsing attributes in process `syz.2.136'. [ 106.397164][ T4274] usb 5-1: New USB device found, idVendor=07c0, idProduct=158b, bcdDevice=d9.d2 [ 106.406417][ T4274] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.414465][ T4274] usb 5-1: Product: syz [ 106.418847][ T4274] usb 5-1: Manufacturer: syz [ 106.423471][ T4274] usb 5-1: SerialNumber: syz [ 106.757985][ T4274] iowarrior 5-1:64.44: no interrupt-out endpoint found [ 106.768948][ T4274] usb 5-1: USB disconnect, device number 6 [ 107.219718][ T4919] netlink: 'syz.4.139': attribute type 1 has an invalid length. [ 107.233529][ T4262] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -32 [ 107.251369][ T4262] usb 1-1: USB disconnect, device number 9 [ 107.637137][ T21] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 107.767438][ T4926] device syzkaller0 entered promiscuous mode [ 107.777198][ T4268] gspca_vc032x: reg_w err -71 [ 107.781950][ T4268] vc032x: probe of 6-1:0.0 failed with error -71 [ 107.795533][ T4268] usb 6-1: USB disconnect, device number 2 [ 107.856987][ T4302] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -32 [ 107.876651][ T4302] usb 2-1: USB disconnect, device number 6 [ 107.883033][ T21] usb 5-1: Using ep0 maxpacket: 32 [ 108.021639][ T21] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 108.031270][ T21] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.041877][ T21] usb 5-1: config 0 has no interface number 0 [ 108.048078][ T21] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 108.058695][ T21] usb 5-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 108.072036][ T21] usb 5-1: config 0 interface 196 has no altsetting 0 [ 108.242393][ T21] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 108.248484][ T4937] netlink: 112 bytes leftover after parsing attributes in process `syz.2.144'. [ 108.261816][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.280157][ T21] usb 5-1: Product: syz [ 108.287168][ T21] usb 5-1: Manufacturer: syz [ 108.297536][ T21] usb 5-1: SerialNumber: syz [ 108.333879][ T21] usb 5-1: config 0 descriptor?? [ 108.367140][ T4923] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 108.633848][ T21] ipheth 5-1:0.196: Unable to find endpoints [ 108.660846][ T21] usb 5-1: USB disconnect, device number 7 [ 108.676862][ T4302] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 108.676963][ T4262] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 108.917670][ T4262] usb 3-1: device descriptor read/64, error -71 [ 108.923614][ T4302] usb 2-1: Using ep0 maxpacket: 16 [ 109.145926][ T4951] netlink: 'syz.4.150': attribute type 1 has an invalid length. [ 109.206943][ T4262] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 109.212399][ T4302] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 109.234012][ T4302] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.250864][ T4302] usb 2-1: Product: syz [ 109.263158][ T4302] usb 2-1: Manufacturer: syz [ 109.268092][ T4302] usb 2-1: SerialNumber: syz [ 109.396869][ T4262] usb 3-1: device descriptor read/64, error -71 [ 109.466909][ T21] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 109.502679][ T4957] netlink: 116 bytes leftover after parsing attributes in process `syz.5.154'. [ 109.527955][ T4262] usb usb3-port1: attempt power cycle [ 109.538975][ T4302] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 109.578838][ T4302] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 109.602234][ T4302] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 109.627502][ T4302] usb 2-1: media controller created [ 109.665195][ T4302] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 109.792639][ T4962] input: syz1 as /devices/virtual/input/input15 [ 109.825488][ T4302] dvb_usb_gl861: probe of 2-1:157.0 failed with error -5 [ 109.881286][ T21] usb 1-1: unable to get BOS descriptor or descriptor too short [ 109.946988][ T4262] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 109.977431][ T21] usb 1-1: config 64 has an invalid interface number: 44 but max is 0 [ 109.995884][ T21] usb 1-1: config 64 has no interface number 0 [ 110.006541][ T21] usb 1-1: config 64 interface 44 altsetting 7 endpoint 0x83 has an invalid bInterval 57, changing to 9 [ 110.022725][ T21] usb 1-1: config 64 interface 44 has no altsetting 0 [ 110.032029][ T4302] usb 2-1: USB disconnect, device number 7 [ 110.067103][ T4262] usb 3-1: device descriptor read/8, error -71 [ 110.116904][ T1110] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 110.187144][ T21] usb 1-1: New USB device found, idVendor=07c0, idProduct=158b, bcdDevice=d9.d2 [ 110.206665][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.215148][ T21] usb 1-1: Product: syz [ 110.236963][ T21] usb 1-1: Manufacturer: syz [ 110.251941][ T21] usb 1-1: SerialNumber: syz [ 110.356965][ T4262] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 110.364623][ T1110] usb 5-1: Using ep0 maxpacket: 8 [ 110.457389][ T4262] usb 3-1: device descriptor read/8, error -71 [ 110.496895][ T1110] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.516840][ T1110] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 110.525923][ T1110] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.552922][ T1110] usb 5-1: config 0 descriptor?? [ 110.588460][ T21] iowarrior 1-1:64.44: no interrupt-out endpoint found [ 110.588702][ T4262] usb usb3-port1: unable to enumerate USB device [ 110.614865][ T1110] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 110.615988][ T21] usb 1-1: USB disconnect, device number 10 [ 111.064374][ T4987] netlink: 'syz.0.163': attribute type 1 has an invalid length. [ 112.035309][ T5000] device bridge1 entered promiscuous mode [ 112.045557][ T5002] netlink: 116 bytes leftover after parsing attributes in process `syz.0.165'. [ 112.070457][ T5005] netlink: 112 bytes leftover after parsing attributes in process `syz.2.168'. [ 112.346964][ T1110] gspca_vc032x: reg_w err -71 [ 112.351755][ T1110] vc032x: probe of 5-1:0.0 failed with error -71 [ 112.407663][ T1110] usb 5-1: USB disconnect, device number 8 [ 112.476983][ T4302] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 112.846943][ T4302] usb 6-1: config 1 has an invalid interface number: 3 but max is 0 [ 112.875574][ T4302] usb 6-1: config 1 has no interface number 0 [ 113.063538][ T5040] netlink: 'syz.2.174': attribute type 1 has an invalid length. [ 113.071875][ T4302] usb 6-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 113.087400][ T4302] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.095783][ T4302] usb 6-1: Product: syz [ 113.102961][ T4302] usb 6-1: Manufacturer: syz [ 113.116293][ T4302] usb 6-1: SerialNumber: syz [ 113.358190][ T5015] udc-core: couldn't find an available UDC or it's busy [ 113.376477][ T5015] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 113.477070][ T4302] usb 6-1: skipping empty audio interface (v1) [ 113.543813][ T4302] snd-usb-audio: probe of 6-1:1.3 failed with error -22 [ 113.564623][ T4302] usb 6-1: USB disconnect, device number 3 [ 113.808881][ T4327] udevd[4327]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 113.941869][ T5066] netlink: 112 bytes leftover after parsing attributes in process `syz.0.182'. [ 114.159192][ T5078] netlink: 'syz.0.186': attribute type 1 has an invalid length. [ 114.196888][ T1110] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 114.205993][ T5081] device syzkaller0 entered promiscuous mode [ 114.376950][ T4274] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 114.413386][ T5085] input: syz1 as /devices/virtual/input/input16 [ 114.456934][ T1110] usb 2-1: Using ep0 maxpacket: 16 [ 114.586936][ T1110] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 114.821031][ T1110] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 114.839503][ T1110] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.876846][ T1110] usb 2-1: Product: syz [ 114.883450][ T1110] usb 2-1: Manufacturer: syz [ 114.894709][ T1110] usb 2-1: SerialNumber: syz [ 114.935205][ T1110] r8152-cfgselector 2-1: config 0 descriptor?? [ 114.967067][ T4274] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 114.976177][ T4274] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.010800][ T4274] usb 6-1: Product: syz [ 115.053886][ T4274] usb 6-1: Manufacturer: syz [ 115.081913][ T4274] usb 6-1: SerialNumber: syz [ 115.114587][ T4274] usb 6-1: config 0 descriptor?? [ 115.377018][ T4274] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 115.436953][ T1110] r8152-cfgselector 2-1: Unknown version 0x0000 [ 115.450588][ T1110] r8152-cfgselector 2-1: bad CDC descriptors [ 115.487057][ T1110] r8152-cfgselector 2-1: Unknown version 0x0000 [ 115.510597][ T1110] r8152-cfgselector 2-1: USB disconnect, device number 8 [ 115.756047][ T5115] netlink: 112 bytes leftover after parsing attributes in process `syz.2.196'. [ 115.986955][ T5122] ip_tables: iptables: counters copy to user failed while replacing table [ 116.132629][ T5126] device syzkaller0 entered promiscuous mode [ 116.817462][ T23] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 117.155299][ T5154] netlink: 'syz.2.202': attribute type 1 has an invalid length. [ 117.347208][ T23] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 117.363725][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.390230][ T23] usb 2-1: Product: syz [ 117.396948][ T23] usb 2-1: Manufacturer: syz [ 117.401585][ T23] usb 2-1: SerialNumber: syz [ 117.436946][ T7] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 117.443013][ T23] usb 2-1: config 0 descriptor?? [ 117.727026][ T23] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 117.896957][ T7] usb 5-1: unable to get BOS descriptor or descriptor too short [ 117.957069][ T4274] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -32 [ 117.983646][ T4274] usb 6-1: USB disconnect, device number 4 [ 118.007050][ T7] usb 5-1: config 64 has an invalid interface number: 44 but max is 0 [ 118.021150][ T7] usb 5-1: config 64 has no interface number 0 [ 118.056976][ T1110] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 118.072567][ T7] usb 5-1: config 64 interface 44 altsetting 7 endpoint 0x83 has an invalid bInterval 57, changing to 9 [ 118.104277][ T7] usb 5-1: config 64 interface 44 has no altsetting 0 [ 118.297401][ T7] usb 5-1: New USB device found, idVendor=07c0, idProduct=158b, bcdDevice=d9.d2 [ 118.319987][ T5177] fuse: Unknown parameter '0x0000000000000009' [ 118.326670][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.334969][ T7] usb 5-1: Product: syz [ 118.339846][ T1110] usb 3-1: device descriptor read/64, error -71 [ 118.356927][ T7] usb 5-1: Manufacturer: syz [ 118.371901][ T7] usb 5-1: SerialNumber: syz [ 118.642932][ T1110] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 118.717760][ T7] iowarrior 5-1:64.44: no interrupt-out endpoint found [ 118.766586][ T7] usb 5-1: USB disconnect, device number 9 [ 118.877022][ T1110] usb 3-1: device descriptor read/64, error -71 [ 118.898253][ T5192] netlink: 112 bytes leftover after parsing attributes in process `syz.0.209'. [ 118.940859][ T4302] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 119.007117][ T1110] usb usb3-port1: attempt power cycle [ 119.200854][ T4302] usb 6-1: Using ep0 maxpacket: 16 [ 119.275670][ T5205] device syzkaller0 entered promiscuous mode [ 119.317193][ T4302] usb 6-1: config index 0 descriptor too short (expected 51443, got 18) [ 119.346959][ T7] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 119.446956][ T1110] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 119.477189][ T4302] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 119.494250][ T4302] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.524698][ T4302] usb 6-1: Product: syz [ 119.531542][ T4302] usb 6-1: Manufacturer: syz [ 119.546503][ T4302] usb 6-1: SerialNumber: syz [ 119.556371][ T4302] r8152-cfgselector 6-1: config 0 descriptor?? [ 119.574422][ T1110] usb 3-1: device descriptor read/8, error -71 [ 119.636923][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 119.783275][ T7] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 119.802741][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.867027][ T1110] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 119.878549][ T7] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 119.992294][ T1110] usb 3-1: device descriptor read/8, error -71 [ 120.057863][ T4302] r8152-cfgselector 6-1: Unknown version 0x0000 [ 120.064573][ T4302] r8152-cfgselector 6-1: bad CDC descriptors [ 120.106906][ T4302] r8152-cfgselector 6-1: Unknown version 0x0000 [ 120.119047][ T4302] r8152-cfgselector 6-1: USB disconnect, device number 5 [ 120.137167][ T1110] usb usb3-port1: unable to enumerate USB device [ 120.467014][ T23] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -32 [ 120.497075][ T23] usb 2-1: USB disconnect, device number 9 [ 120.557024][ T7] gspca_nw80x: reg_w err -71 [ 120.561735][ T7] nw80x: probe of 1-1:3.0 failed with error -71 [ 120.604936][ T7] usb 1-1: USB disconnect, device number 11 [ 120.652030][ T5241] netlink: 'syz.5.214': attribute type 1 has an invalid length. [ 121.074777][ T5261] netlink: 112 bytes leftover after parsing attributes in process `syz.2.220'. [ 121.097043][ T5267] fuse: Unknown parameter '0x0000000000000009' [ 121.183392][ T7] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 121.426923][ T21] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 121.597223][ T1110] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 121.807071][ T7] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 121.822208][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.837059][ T21] usb 5-1: unable to get BOS descriptor or descriptor too short [ 121.846808][ T7] usb 6-1: Product: syz [ 121.851012][ T7] usb 6-1: Manufacturer: syz [ 121.855693][ T7] usb 6-1: SerialNumber: syz [ 121.876163][ T7] usb 6-1: config 0 descriptor?? [ 121.936971][ T21] usb 5-1: config 64 has an invalid interface number: 44 but max is 0 [ 121.946414][ T21] usb 5-1: config 64 has no interface number 0 [ 121.990765][ T21] usb 5-1: config 64 interface 44 altsetting 7 endpoint 0x83 has an invalid bInterval 57, changing to 9 [ 122.022026][ T21] usb 5-1: config 64 interface 44 has no altsetting 0 [ 122.038353][ T1110] usb 1-1: unable to get BOS descriptor or descriptor too short [ 122.097637][ T1110] usb 1-1: not running at top speed; connect to a high speed hub [ 122.137103][ T7] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 122.187025][ T21] usb 5-1: New USB device found, idVendor=07c0, idProduct=158b, bcdDevice=d9.d2 [ 122.197025][ T1110] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4 [ 122.212462][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.243486][ T21] usb 5-1: Product: syz [ 122.250343][ T21] usb 5-1: Manufacturer: syz [ 122.256456][ T21] usb 5-1: SerialNumber: syz [ 122.387188][ T1110] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 122.416683][ T1110] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.432070][ T1110] usb 1-1: Product: syz [ 122.438012][ T1110] usb 1-1: Manufacturer: syz [ 122.442640][ T1110] usb 1-1: SerialNumber: syz [ 122.587568][ T21] iowarrior 5-1:64.44: no interrupt-out endpoint found [ 122.596896][ T4274] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 122.610061][ T21] usb 5-1: USB disconnect, device number 10 [ 122.726205][ T1110] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 122.896908][ T4274] usb 2-1: Using ep0 maxpacket: 16 [ 122.927154][ T1110] usb 1-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 122.935680][ T1110] usb 1-1: found format II with max.bitrate = 4, frame size=7372 [ 123.036932][ T4274] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 123.098057][ T5297] netlink: 'syz.4.227': attribute type 1 has an invalid length. [ 123.167074][ T4261] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 123.239121][ T4274] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 123.253410][ T4274] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.266111][ T4274] usb 2-1: Product: syz [ 123.276270][ T4274] usb 2-1: Manufacturer: syz [ 123.281590][ T4274] usb 2-1: SerialNumber: syz [ 123.309043][ T4274] r8152-cfgselector 2-1: config 0 descriptor?? [ 123.349474][ T1110] usb 1-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 123.372402][ T1110] usb 1-1: found format II with max.bitrate = 4, frame size=7372 [ 123.380563][ T4261] usb 3-1: device descriptor read/64, error -71 [ 123.557009][ T1110] usb 1-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 123.568577][ T4274] r8152-cfgselector 2-1: Unknown version 0x0000 [ 123.587115][ T4274] r8152-cfgselector 2-1: Unknown version 0x0000 [ 123.594530][ T4274] r8152-cfgselector 2-1: bad CDC descriptors [ 123.629873][ T23] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 123.648730][ T1110] usb 1-1: USB disconnect, device number 12 [ 123.667045][ T4261] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 123.696975][ T4274] r8152-cfgselector 2-1: Unknown version 0x0000 [ 123.725437][ T4274] r8152-cfgselector 2-1: USB disconnect, device number 10 [ 123.867038][ T4261] usb 3-1: device descriptor read/64, error -71 [ 123.944809][ T4301] udevd[4301]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 123.997043][ T4261] usb usb3-port1: attempt power cycle [ 123.997352][ T23] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 124.018786][ T23] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 124.034654][ T23] usb 5-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 124.132207][ T23] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 124.150071][ T23] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 124.173757][ T23] usb 5-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 124.216642][ T5308] netlink: 112 bytes leftover after parsing attributes in process `syz.0.232'. [ 124.273370][ T23] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 124.286941][ T23] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 124.313612][ T23] usb 5-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 124.357687][ T4274] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 124.436844][ T4261] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 124.497127][ T23] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 124.506645][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.521784][ T23] usb 5-1: Product: syz [ 124.525995][ T23] usb 5-1: Manufacturer: syz [ 124.532468][ T23] usb 5-1: SerialNumber: syz [ 124.548038][ T4261] usb 3-1: device descriptor read/8, error -71 [ 124.767062][ T7] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -32 [ 124.776547][ T7] usb 6-1: USB disconnect, device number 6 [ 124.828458][ T23] adutux 5-1:168.0: interrupt endpoints not found [ 124.844430][ T23] usb 5-1: USB disconnect, device number 11 [ 124.846986][ T4261] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 124.926966][ T4274] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 124.936065][ T4274] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.944724][ T4274] usb 2-1: Product: syz [ 124.949693][ T4274] usb 2-1: Manufacturer: syz [ 124.954324][ T4274] usb 2-1: SerialNumber: syz [ 124.970605][ T4274] usb 2-1: config 0 descriptor?? [ 124.987139][ T4261] usb 3-1: device descriptor read/8, error -71 [ 125.118539][ T4261] usb usb3-port1: unable to enumerate USB device [ 125.236955][ T4274] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 125.349388][ T5312] kvm [5310]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc2 data 0x7 [ 125.359027][ T5312] kvm [5310]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc1 data 0x7 [ 125.546926][ T23] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 125.786843][ T23] usb 6-1: Using ep0 maxpacket: 32 [ 125.836867][ T21] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 125.908705][ T23] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 125.919384][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.968381][ T23] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 126.076914][ T21] usb 1-1: Using ep0 maxpacket: 32 [ 126.196932][ T21] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 126.268874][ T5330] netlink: 'syz.4.238': attribute type 1 has an invalid length. [ 126.367108][ T21] usb 1-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 126.376207][ T2242] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 126.386432][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.399242][ T21] usb 1-1: Product: syz [ 126.407122][ T21] usb 1-1: Manufacturer: syz [ 126.415307][ T21] usb 1-1: SerialNumber: syz [ 126.607344][ T23] gspca_nw80x: reg_w err -71 [ 126.612129][ T23] nw80x: probe of 6-1:3.0 failed with error -71 [ 126.634587][ T23] usb 6-1: USB disconnect, device number 7 [ 126.737075][ T21] usb 1-1: selecting invalid altsetting 1 [ 126.777061][ T2242] usb 3-1: unable to get BOS descriptor or descriptor too short [ 126.867262][ T2242] usb 3-1: config 64 has an invalid interface number: 44 but max is 0 [ 126.885753][ T2242] usb 3-1: config 64 has no interface number 0 [ 126.902327][ T2242] usb 3-1: config 64 interface 44 altsetting 7 endpoint 0x83 has an invalid bInterval 57, changing to 9 [ 126.915603][ T2242] usb 3-1: config 64 interface 44 has no altsetting 0 [ 126.957033][ T21] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 126.957082][ T21] dvb_usb_lmedm04: probe of 1-1:2.0 failed with error -22 [ 127.087033][ T2242] usb 3-1: New USB device found, idVendor=07c0, idProduct=158b, bcdDevice=d9.d2 [ 127.192959][ T2242] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.204460][ T2242] usb 3-1: Product: syz [ 127.209412][ T2242] usb 3-1: Manufacturer: syz [ 127.214219][ T2242] usb 3-1: SerialNumber: syz [ 127.548006][ T2242] iowarrior 3-1:64.44: no interrupt-out endpoint found [ 127.571249][ T2242] usb 3-1: USB disconnect, device number 20 [ 127.586867][ T21] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 127.627053][ T1110] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 127.896897][ T1110] usb 5-1: Using ep0 maxpacket: 16 [ 127.996970][ T21] usb 6-1: unable to get BOS descriptor or descriptor too short [ 128.037298][ T4274] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -32 [ 128.039299][ T21] usb 6-1: not running at top speed; connect to a high speed hub [ 128.044685][ T1110] usb 5-1: config index 0 descriptor too short (expected 51443, got 18) [ 128.063143][ T4274] usb 2-1: USB disconnect, device number 11 [ 128.126937][ T21] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4 [ 128.257140][ T1110] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 128.257312][ T23] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 128.266536][ T1110] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.283065][ T1110] usb 5-1: Product: syz [ 128.287694][ T1110] usb 5-1: Manufacturer: syz [ 128.292393][ T1110] usb 5-1: SerialNumber: syz [ 128.297238][ T21] usb 6-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 128.306540][ T21] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.313021][ T1110] r8152-cfgselector 5-1: config 0 descriptor?? [ 128.314656][ T21] usb 6-1: Product: syz [ 128.325221][ T21] usb 6-1: Manufacturer: syz [ 128.329923][ T21] usb 6-1: SerialNumber: syz [ 128.589889][ T21] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 128.602044][ T1110] r8152-cfgselector 5-1: Unknown version 0x0000 [ 128.607407][ T2242] usb 1-1: USB disconnect, device number 13 [ 128.615562][ T5347] netlink: 'syz.0.246': attribute type 32 has an invalid length. [ 128.637322][ T1110] r8152-cfgselector 5-1: Unknown version 0x0000 [ 128.643774][ T1110] r8152-cfgselector 5-1: bad CDC descriptors [ 128.707298][ T1110] r8152-cfgselector 5-1: Unknown version 0x0000 [ 128.727062][ T1110] r8152-cfgselector 5-1: USB disconnect, device number 12 [ 128.807165][ T23] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 128.816588][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.825059][ T21] usb 6-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 128.833708][ T23] usb 3-1: Product: syz [ 128.838462][ T21] usb 6-1: found format II with max.bitrate = 4, frame size=7372 [ 128.846310][ T23] usb 3-1: Manufacturer: syz [ 128.851282][ T23] usb 3-1: SerialNumber: syz [ 128.869261][ T23] usb 3-1: config 0 descriptor?? [ 129.126937][ T23] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 129.141428][ T2242] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 129.264375][ T21] usb 6-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 129.282628][ T21] usb 6-1: found format II with max.bitrate = 4, frame size=7372 [ 129.342966][ T2242] usb 1-1: device descriptor read/64, error -71 [ 129.468343][ T21] usb 6-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 129.523705][ T21] usb 6-1: USB disconnect, device number 8 [ 129.626893][ T2242] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 129.747579][ T4327] udevd[4327]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 129.833116][ T2242] usb 1-1: device descriptor read/64, error -71 [ 129.967128][ T2242] usb usb1-port1: attempt power cycle [ 130.377068][ T2242] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 130.467020][ T2242] usb 1-1: device descriptor read/8, error -71 [ 130.631601][ T5374] netlink: 'syz.1.254': attribute type 1 has an invalid length. [ 130.736947][ T2242] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 130.848744][ T2242] usb 1-1: device descriptor read/8, error -71 [ 130.941429][ T5378] netlink: 112 bytes leftover after parsing attributes in process `syz.5.256'. [ 130.977070][ T2242] usb usb1-port1: unable to enumerate USB device [ 131.074569][ T5381] device syzkaller0 entered promiscuous mode [ 131.531126][ T5391] kvm [5390]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc2 data 0x7 [ 131.585915][ T5391] kvm [5390]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc1 data 0x7 [ 131.595086][ T4261] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 131.626957][ T23] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -32 [ 131.648149][ T23] usb 3-1: USB disconnect, device number 21 [ 131.856921][ T4261] usb 6-1: Using ep0 maxpacket: 32 [ 132.007126][ T4261] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 132.015189][ T4261] usb 6-1: config 0 has no interface number 0 [ 132.236875][ T5409] netlink: 'syz.2.265': attribute type 1 has an invalid length. [ 132.266928][ T4261] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 132.287460][ T4261] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.295514][ T4261] usb 6-1: Product: syz [ 132.350027][ T4261] usb 6-1: Manufacturer: syz [ 132.355378][ T4261] usb 6-1: SerialNumber: syz [ 132.402701][ T4261] usb 6-1: config 0 descriptor?? [ 132.488807][ T4261] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 132.515146][ T4261] usb 6-1: selecting invalid altsetting 1 [ 132.538910][ T4261] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 132.594422][ T4261] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 132.627123][ T4261] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 132.653116][ T4261] usb 6-1: media controller created [ 132.690012][ T5389] process 'syz.5.260' launched '/dev/fd/3' with NULL argv: empty string added [ 132.716639][ T4261] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 132.816874][ T4268] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 132.867177][ T1434] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.873512][ T1434] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.902606][ T4261] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 132.918476][ T4261] zl10353_read_register: readreg error (reg=127, ret==-71) [ 132.947006][ T4261] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 133.020121][ T4261] usb 6-1: USB disconnect, device number 9 [ 133.217089][ T4268] usb 3-1: unable to get BOS descriptor or descriptor too short [ 133.229641][ T5421] netlink: 112 bytes leftover after parsing attributes in process `syz.4.269'. [ 133.297113][ T4268] usb 3-1: config 64 has an invalid interface number: 44 but max is 0 [ 133.316830][ T4268] usb 3-1: config 64 has no interface number 0 [ 133.325038][ T5426] device syzkaller0 entered promiscuous mode [ 133.331489][ T4268] usb 3-1: config 64 interface 44 altsetting 7 endpoint 0x83 has an invalid bInterval 57, changing to 9 [ 133.346941][ T4268] usb 3-1: config 64 interface 44 has no altsetting 0 [ 133.517187][ T4268] usb 3-1: New USB device found, idVendor=07c0, idProduct=158b, bcdDevice=d9.d2 [ 133.532227][ T4268] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.563643][ T4268] usb 3-1: Product: syz [ 133.584113][ T4268] usb 3-1: Manufacturer: syz [ 133.595687][ T4268] usb 3-1: SerialNumber: syz [ 133.770560][ T2242] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 133.948257][ T4268] iowarrior 3-1:64.44: no interrupt-out endpoint found [ 133.979243][ T2242] usb 6-1: device descriptor read/64, error -71 [ 133.986991][ T4261] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 133.997415][ T4268] usb 3-1: USB disconnect, device number 22 [ 134.246835][ T2242] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 134.452875][ T2242] usb 6-1: device descriptor read/64, error -71 [ 134.571211][ T4261] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 134.576969][ T2242] usb usb6-port1: attempt power cycle [ 134.590712][ T4261] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.609321][ T4261] usb 2-1: Product: syz [ 134.613531][ T4261] usb 2-1: Manufacturer: syz [ 134.636792][ T4261] usb 2-1: SerialNumber: syz [ 134.673513][ T4261] usb 2-1: config 0 descriptor?? [ 134.962654][ T4261] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 135.006946][ T2242] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 135.107044][ T2242] usb 6-1: device descriptor read/8, error -71 [ 135.376897][ T2242] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 135.487082][ T2242] usb 6-1: device descriptor read/8, error -71 [ 135.604534][ T5470] device syzkaller0 entered promiscuous mode [ 135.609433][ T2242] usb usb6-port1: unable to enumerate USB device [ 136.883940][ T5488] netlink: 'syz.4.289': attribute type 1 has an invalid length. [ 136.908404][ T5489] kvm [5484]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc2 data 0x7 [ 136.957325][ T5489] kvm [5484]: vcpu0, guest rIP: 0x9114 disabled perfctr wrmsr: 0xc1 data 0x7 [ 137.507678][ T4261] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -32 [ 137.553782][ T4261] usb 2-1: USB disconnect, device number 12 [ 137.649044][ T5508] device syzkaller0 entered promiscuous mode [ 138.234679][ T4261] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 138.447657][ T5524] netlink: 'syz.0.300': attribute type 1 has an invalid length. [ 138.567018][ T4261] usb 3-1: no configurations [ 138.582461][ T4261] usb 3-1: can't read configurations, error -22 [ 138.796889][ T4261] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 138.826784][ T5538] device syzkaller0 entered promiscuous mode [ 138.832555][ T1110] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 139.106983][ T1110] usb 2-1: Using ep0 maxpacket: 16 [ 139.127134][ T4261] usb 3-1: no configurations [ 139.131949][ T4261] usb 3-1: can't read configurations, error -22 [ 139.147162][ T4261] usb usb3-port1: attempt power cycle [ 139.273416][ T1110] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.293475][ T1110] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.322891][ T1110] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 139.354429][ T1110] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 139.373953][ T1110] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.401178][ T1110] usb 2-1: config 0 descriptor?? [ 139.457176][ T5561] netlink: 'syz.4.314': attribute type 1 has an invalid length. [ 139.596890][ T4261] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 139.747123][ T4261] usb 3-1: no configurations [ 139.751934][ T4261] usb 3-1: can't read configurations, error -22 [ 139.899105][ T1110] hid-generic 0003:0955:7214.0005: unknown main item tag 0x2 [ 139.916884][ T4261] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 139.932166][ T1110] hid-generic 0003:0955:7214.0005: hidraw0: USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 139.990599][ T5571] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 140.057140][ T4261] usb 3-1: no configurations [ 140.061774][ T4261] usb 3-1: can't read configurations, error -22 [ 140.081341][ T4261] usb usb3-port1: unable to enumerate USB device [ 140.102283][ T2242] usb 2-1: USB disconnect, device number 13 [ 140.357910][ T5581] device syzkaller0 entered promiscuous mode [ 140.497357][ T5580] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 140.516485][ T5580] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 140.563216][ T4268] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 140.730490][ T5594] netlink: 'syz.1.325': attribute type 1 has an invalid length. [ 140.937082][ T4268] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.975790][ T4268] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 141.006227][ T4268] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.044445][ T4268] usb 1-1: config 0 descriptor?? [ 141.397022][ T4268] usbhid 1-1:0.0: can't add hid device: -71 [ 141.405507][ T4268] usbhid: probe of 1-1:0.0 failed with error -71 [ 141.443308][ T4268] usb 1-1: USB disconnect, device number 18 [ 141.506871][ T4261] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 141.697156][ T5617] device syzkaller0 entered promiscuous mode [ 141.866992][ T4268] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 141.917118][ T4261] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 142.108500][ T4268] usb 1-1: Using ep0 maxpacket: 32 [ 142.137117][ T4261] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 142.155785][ T4261] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.184859][ T4261] usb 6-1: Product: syz [ 142.199505][ T4261] usb 6-1: Manufacturer: syz [ 142.204390][ T4261] usb 6-1: SerialNumber: syz [ 142.227087][ T4268] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.259352][ T4268] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 142.284454][ T4268] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.306062][ T5626] netlink: 'syz.2.336': attribute type 1 has an invalid length. [ 142.329419][ T4268] usb 1-1: config 0 descriptor?? [ 142.367917][ T4268] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 142.388882][ T4268] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 142.484864][ T5613] udc-core: couldn't find an available UDC or it's busy [ 142.510962][ T5613] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 142.567908][ T4261] cdc_ether 6-1:1.0: skipping garbage [ 142.576430][ T4261] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 142.617423][ T4261] usb 6-1: USB disconnect, device number 14 [ 142.783536][ T4268] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 142.795076][ T23] usb 1-1: USB disconnect, device number 19 [ 142.815671][ T23] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 143.067053][ T4268] usb 3-1: no configurations [ 143.071681][ T4268] usb 3-1: can't read configurations, error -22 [ 143.146857][ T4261] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 143.187031][ T1110] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 143.259091][ T4268] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 143.426867][ T4261] usb 6-1: Using ep0 maxpacket: 8 [ 143.557224][ T4268] usb 3-1: no configurations [ 143.561892][ T4268] usb 3-1: can't read configurations, error -22 [ 143.577631][ T4261] usb 6-1: config index 0 descriptor too short (expected 301, got 72) [ 143.596942][ T4268] usb usb3-port1: attempt power cycle [ 143.607059][ T4261] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 143.630825][ T5646] device syzkaller0 entered promiscuous mode [ 143.634746][ T4261] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 143.647457][ T1110] usb 2-1: unable to get BOS descriptor or descriptor too short [ 143.695737][ T4261] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 143.706244][ T4261] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 143.727082][ T1110] usb 2-1: config 64 has an invalid interface number: 44 but max is 0 [ 143.745505][ T4261] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 143.763541][ T1110] usb 2-1: config 64 has no interface number 0 [ 143.770315][ T1110] usb 2-1: config 64 interface 44 altsetting 7 endpoint 0x83 has an invalid bInterval 57, changing to 9 [ 143.792078][ T4261] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 143.820340][ T1110] usb 2-1: config 64 interface 44 has no altsetting 0 [ 143.839262][ T4261] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.016880][ T4268] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 144.027110][ T1110] usb 2-1: New USB device found, idVendor=07c0, idProduct=158b, bcdDevice=d9.d2 [ 144.042296][ T1110] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.065766][ T1110] usb 2-1: Product: syz [ 144.074737][ T1110] usb 2-1: Manufacturer: syz [ 144.080661][ T1110] usb 2-1: SerialNumber: syz [ 144.140409][ T4261] usb 6-1: GET_CAPABILITIES returned 0 [ 144.147373][ T4261] usbtmc 6-1:16.0: can't read capabilities [ 144.158094][ T4268] usb 3-1: no configurations [ 144.162765][ T4268] usb 3-1: can't read configurations, error -22 [ 144.180030][ T5659] netlink: 'syz.4.348': attribute type 1 has an invalid length. [ 144.336854][ T4268] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 144.364345][ T4261] usb 6-1: USB disconnect, device number 15 [ 144.418151][ T1110] iowarrior 2-1:64.44: no interrupt-out endpoint found [ 144.434767][ T1110] usb 2-1: USB disconnect, device number 14 [ 144.476914][ T4268] usb 3-1: no configurations [ 144.481790][ T4268] usb 3-1: can't read configurations, error -22 [ 144.493032][ T4268] usb usb3-port1: unable to enumerate USB device [ 144.836849][ T4268] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 144.891463][ T2242] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 144.989887][ T5676] device syzkaller0 entered promiscuous mode [ 145.146876][ T2242] usb 1-1: Using ep0 maxpacket: 16 [ 145.266998][ T2242] usb 1-1: config index 0 descriptor too short (expected 51443, got 18) [ 145.356980][ T4268] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 145.366081][ T4268] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.374768][ T4268] usb 5-1: Product: syz [ 145.378989][ T4268] usb 5-1: Manufacturer: syz [ 145.383589][ T4268] usb 5-1: SerialNumber: syz [ 145.393034][ T4268] usb 5-1: config 0 descriptor?? [ 145.427145][ T2242] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 145.436210][ T2242] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.446564][ T2242] usb 1-1: Product: syz [ 145.450897][ T2242] usb 1-1: Manufacturer: syz [ 145.455501][ T2242] usb 1-1: SerialNumber: syz [ 145.456877][ T4261] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 145.469433][ T2242] r8152-cfgselector 1-1: config 0 descriptor?? [ 145.657034][ T4268] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 145.736817][ T4261] usb 2-1: Using ep0 maxpacket: 8 [ 145.886927][ T4261] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.906816][ T4261] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 145.915828][ T4261] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 145.927543][ T4261] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 145.942012][ T4261] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 145.951404][ T4261] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.952340][ T2242] r8152-cfgselector 1-1: Unknown version 0x0000 [ 145.975037][ T2242] r8152-cfgselector 1-1: bad CDC descriptors [ 145.996968][ T2242] r8152-cfgselector 1-1: Unknown version 0x0000 [ 146.005084][ T2242] r8152-cfgselector 1-1: USB disconnect, device number 20 [ 146.017896][ T4261] hub 2-1:1.0: bad descriptor, ignoring hub [ 146.026682][ T4261] hub: probe of 2-1:1.0 failed with error -5 [ 146.042378][ T4261] cdc_wdm 2-1:1.0: skipping garbage [ 146.047914][ T4261] cdc_wdm 2-1:1.0: skipping garbage [ 146.057828][ T4261] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 146.063761][ T4261] cdc_wdm 2-1:1.0: Unknown control protocol [ 146.556493][ T4261] usb 2-1: USB disconnect, device number 15 [ 146.651808][ T5703] device syzkaller0 entered promiscuous mode [ 146.846943][ T23] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 147.127412][ T2242] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 147.248371][ T23] usb 3-1: unable to get BOS descriptor or descriptor too short [ 147.346851][ T23] usb 3-1: config 64 has an invalid interface number: 44 but max is 0 [ 147.355076][ T23] usb 3-1: config 64 has no interface number 0 [ 147.370562][ T23] usb 3-1: config 64 interface 44 altsetting 7 endpoint 0x83 has an invalid bInterval 57, changing to 9 [ 147.386105][ T23] usb 3-1: config 64 interface 44 has no altsetting 0 [ 147.417221][ T2242] usb 1-1: no configurations [ 147.422381][ T2242] usb 1-1: can't read configurations, error -22 [ 147.546984][ T23] usb 3-1: New USB device found, idVendor=07c0, idProduct=158b, bcdDevice=d9.d2 [ 147.560623][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.571403][ T23] usb 3-1: Product: syz [ 147.575660][ T23] usb 3-1: Manufacturer: syz [ 147.586352][ T23] usb 3-1: SerialNumber: syz [ 147.591496][ T2242] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 147.877138][ T2242] usb 1-1: no configurations [ 147.881787][ T2242] usb 1-1: can't read configurations, error -22 [ 147.917111][ T2242] usb usb1-port1: attempt power cycle [ 147.938168][ T23] iowarrior 3-1:64.44: no interrupt-out endpoint found [ 147.966045][ T23] usb 3-1: USB disconnect, device number 31 [ 148.276884][ T4302] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 148.336865][ T2242] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 148.386832][ T21] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 148.477054][ T2242] usb 1-1: no configurations [ 148.481705][ T2242] usb 1-1: can't read configurations, error -22 [ 148.527681][ T5736] device syzkaller0 entered promiscuous mode [ 148.597183][ T4268] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32 [ 148.615047][ T4268] usb 5-1: USB disconnect, device number 13 [ 148.637079][ T4302] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.648884][ T2242] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 148.656678][ T4302] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.667278][ T4302] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 148.680658][ T4302] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 148.690165][ T4302] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.701364][ T4302] usb 6-1: config 0 descriptor?? [ 148.777039][ T2242] usb 1-1: no configurations [ 148.781712][ T2242] usb 1-1: can't read configurations, error -22 [ 148.788546][ T2242] usb usb1-port1: unable to enumerate USB device [ 148.907028][ T21] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 148.916365][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.924441][ T21] usb 2-1: Product: syz [ 148.928804][ T21] usb 2-1: Manufacturer: syz [ 148.933412][ T21] usb 2-1: SerialNumber: syz [ 148.947317][ T21] usb 2-1: config 0 descriptor?? [ 149.179166][ T4302] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 149.186867][ T4302] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 149.194413][ T4302] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 149.201960][ T4302] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 149.209513][ T21] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 149.217996][ T4302] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 149.225391][ T4302] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 149.232968][ T4302] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 149.240466][ T4302] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 149.248011][ T4302] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 149.255401][ T4302] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 149.263528][ T4302] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 149.270994][ T4302] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 149.278595][ T4302] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 149.285988][ T4302] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 149.293466][ T4302] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 149.301552][ T4302] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 149.317730][ T4302] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 149.476842][ T2242] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 149.492726][ T4302] usb 6-1: USB disconnect, device number 16 [ 149.550004][ T5744] kvm [5743]: vcpu0, guest rIP: 0x1db disabled perfctr wrmsr: 0xc2 data 0xb0006100004fbf [ 149.564164][ T5744] kvm [5743]: vcpu0, guest rIP: 0x1db disabled perfctr wrmsr: 0xc2 data 0xb000610000eaf3 [ 149.583109][ T5744] kvm [5743]: vcpu0, guest rIP: 0x1db disabled perfctr wrmsr: 0xc2 data 0xb000610000754d [ 149.595044][ T5744] kvm [5743]: vcpu0, guest rIP: 0x1db disabled perfctr wrmsr: 0xc1 data 0xb00061000070b5 [ 149.611042][ T5744] kvm [5743]: vcpu0, guest rIP: 0x1db disabled perfctr wrmsr: 0xc2 data 0xb0006100002fa5 [ 149.639141][ T5744] kvm [5743]: vcpu0, guest rIP: 0x1db disabled perfctr wrmsr: 0xc2 data 0xb0006100002093 [ 149.661979][ T5744] kvm [5743]: vcpu0, guest rIP: 0x1db disabled perfctr wrmsr: 0xc1 data 0xb00061000000ad [ 149.716848][ T2242] usb 5-1: Using ep0 maxpacket: 8 [ 149.719871][ T5744] kvm [5743]: vcpu0, guest rIP: 0x1db disabled perfctr wrmsr: 0xc2 data 0xb0006100006145 [ 149.752850][ T5744] kvm [5743]: vcpu0, guest rIP: 0x2ab disabled perfctr wrmsr: 0xc2 data 0xb00061000033d8 [ 149.805036][ T5744] kvm [5743]: vcpu0, guest rIP: 0x1db disabled perfctr wrmsr: 0xc2 data 0xb00061000040d7 [ 149.837094][ T2242] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 149.853108][ T2242] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 149.864729][ T2242] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 149.879506][ T2242] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 149.891272][ T2242] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 149.907724][ T2242] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.958877][ T2242] hub 5-1:1.0: bad descriptor, ignoring hub [ 149.964841][ T2242] hub: probe of 5-1:1.0 failed with error -5 [ 149.972142][ T2242] cdc_wdm 5-1:1.0: skipping garbage [ 149.977872][ T2242] cdc_wdm 5-1:1.0: skipping garbage [ 149.989971][ T2242] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 149.997182][ T2242] cdc_wdm 5-1:1.0: Unknown control protocol [ 150.569703][ T1110] usb 5-1: USB disconnect, device number 14 [ 150.824700][ T5786] netlink: 'syz.0.387': attribute type 1 has an invalid length. [ 151.228075][ T1110] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 151.494322][ T5797] rxe_eth0 speed is unknown, defaulting to 1000 [ 151.687047][ T1110] usb 1-1: unable to get BOS descriptor or descriptor too short [ 151.691248][ T21] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -32 [ 151.718264][ T21] usb 2-1: USB disconnect, device number 16 [ 151.807043][ T1110] usb 1-1: config 64 has an invalid interface number: 44 but max is 0 [ 151.825470][ T1110] usb 1-1: config 64 has no interface number 0 [ 151.831854][ T1110] usb 1-1: config 64 interface 44 altsetting 7 endpoint 0x83 has an invalid bInterval 57, changing to 9 [ 151.853230][ T1110] usb 1-1: config 64 interface 44 has no altsetting 0 [ 152.057114][ T1110] usb 1-1: New USB device found, idVendor=07c0, idProduct=158b, bcdDevice=d9.d2 [ 152.073380][ T1110] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.091716][ T1110] usb 1-1: Product: syz [ 152.095937][ T1110] usb 1-1: Manufacturer: syz [ 152.111897][ T1110] usb 1-1: SerialNumber: syz [ 152.459426][ T1110] iowarrior 1-1:64.44: no interrupt-out endpoint found [ 152.503620][ T1110] usb 1-1: USB disconnect, device number 25 [ 152.509796][ T4261] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 152.595696][ T5809] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 152.646448][ T5809] ------------[ cut here ]------------ [ 152.656236][ T5809] WARNING: CPU: 1 PID: 5809 at include/linux/fs.h:538 hugetlb_split+0x237/0x2a0 [ 152.665538][ T5809] Modules linked in: [ 152.673266][ T5809] CPU: 0 PID: 5809 Comm: syz.4.394 Not tainted syzkaller #0 [ 152.682452][ T5809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 152.693656][ T5809] RIP: 0010:hugetlb_split+0x237/0x2a0 [ 152.700170][ T5809] Code: bf ff 4c 89 f7 48 89 de 4c 89 fa 31 c9 5b 41 5c 41 5d 41 5e 41 5f 5d eb 7a e8 35 7e bf ff 0f 0b e9 62 fe ff ff e8 29 7e bf ff <0f> 0b e9 2d ff ff ff 48 c7 c1 d4 65 6d 8e 80 e1 07 80 c1 03 38 c1 [ 152.720638][ T5809] RSP: 0018:ffffc90003a178f0 EFLAGS: 00010287 [ 152.727084][ T5809] RAX: ffffffff81b9af67 RBX: 0000200000400000 RCX: 0000000000080000 [ 152.735334][ T5809] RDX: ffffc9000de51000 RSI: 0000000000000494 RDI: 0000000000000495 [ 152.744552][ T5809] RBP: 0000000000000000 R08: ffff888079dc2c3f R09: 1ffff1100f3b8587 [ 152.753889][ T5809] R10: dffffc0000000000 R11: ffffed100f3b8588 R12: ffff88804d1262b0 [ 152.764874][ T5809] R13: dffffc0000000000 R14: ffff88804d126210 R15: ffff88807533ee40 [ 152.778322][ T5809] FS: 00007fa400f856c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 152.793931][ T5809] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 152.802595][ T5809] CR2: 0000000000000000 CR3: 000000005a07d000 CR4: 00000000003526f0 [ 152.816024][ T5809] Call Trace: [ 152.821438][ T5809] [ 152.824504][ T5809] __vma_adjust+0x2da/0x1e30 [ 152.834572][ T5809] __split_vma+0x346/0x410 [ 152.841649][ T5809] userfaultfd_ioctl+0x2f93/0x41b0 [ 152.853187][ T5809] ? userfaultfd_poll+0x1c0/0x1c0 [ 152.862545][ T5809] ? kfree+0xef/0x2a0 [ 152.867072][ T5809] ? tomoyo_path_number_perm+0x5f7/0x6b0 [ 152.872896][ T5809] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 152.885314][ T5809] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 152.891740][ T5809] ? lock_chain_count+0x20/0x20 [ 152.897049][ T5809] ? bpf_lsm_file_ioctl+0x5/0x10 [ 152.902160][ T5809] ? security_file_ioctl+0x7c/0xa0 [ 152.912301][ T4261] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.924959][ T5809] ? userfaultfd_poll+0x1c0/0x1c0 [ 152.935218][ T4261] usb 2-1: config 0 has no interfaces? [ 152.941320][ T5809] __se_sys_ioctl+0xfa/0x170 [ 152.947762][ T5809] do_syscall_64+0x4c/0xa0 [ 152.953288][ T5809] ? clear_bhb_loop+0x30/0x80 [ 152.958839][ T5809] ? clear_bhb_loop+0x30/0x80 [ 152.963638][ T5809] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 152.970183][ T5809] RIP: 0033:0x7fa402d2eb19 [ 152.974731][ T5809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.995269][ T5809] RSP: 002b:00007fa400f85028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 153.004532][ T5809] RAX: ffffffffffffffda RBX: 00007fa402fb4fa0 RCX: 00007fa402d2eb19 [ 153.013231][ T5809] RDX: 0000200000000380 RSI: 00000000c020aa00 RDI: 0000000000000006 [ 153.022704][ T5809] RBP: 00007fa402dc6b70 R08: 0000000000000000 R09: 0000000000000000 [ 153.041266][ T5809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.055858][ T5809] R13: 00007fa402fb5038 R14: 00007fa402fb4fa0 R15: 00007fffbd970558 [ 153.069580][ T5809] [ 153.072735][ T5809] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 153.080050][ T5809] CPU: 0 PID: 5809 Comm: syz.4.394 Not tainted syzkaller #0 [ 153.087370][ T5809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 153.097446][ T5809] Call Trace: [ 153.100746][ T5809] [ 153.103704][ T5809] dump_stack_lvl+0x188/0x250 [ 153.108424][ T5809] ? show_regs_print_info+0x20/0x20 [ 153.113680][ T5809] ? load_image+0x410/0x410 [ 153.118268][ T5809] panic+0x2f8/0x850 [ 153.122201][ T5809] ? bpf_jit_dump+0xd0/0xd0 [ 153.126742][ T5809] ? hugetlb_split+0x237/0x2a0 [ 153.131540][ T5809] __warn+0x248/0x2b0 [ 153.135552][ T5809] ? hugetlb_split+0x237/0x2a0 [ 153.140346][ T5809] report_bug+0x1b9/0x2e0 [ 153.144712][ T5809] handle_bug+0x3a/0x70 [ 153.148912][ T5809] exc_invalid_op+0x16/0x40 [ 153.153615][ T5809] asm_exc_invalid_op+0x16/0x20 [ 153.158493][ T5809] RIP: 0010:hugetlb_split+0x237/0x2a0 [ 153.163890][ T5809] Code: bf ff 4c 89 f7 48 89 de 4c 89 fa 31 c9 5b 41 5c 41 5d 41 5e 41 5f 5d eb 7a e8 35 7e bf ff 0f 0b e9 62 fe ff ff e8 29 7e bf ff <0f> 0b e9 2d ff ff ff 48 c7 c1 d4 65 6d 8e 80 e1 07 80 c1 03 38 c1 [ 153.183526][ T5809] RSP: 0018:ffffc90003a178f0 EFLAGS: 00010287 [ 153.189648][ T5809] RAX: ffffffff81b9af67 RBX: 0000200000400000 RCX: 0000000000080000 [ 153.197653][ T5809] RDX: ffffc9000de51000 RSI: 0000000000000494 RDI: 0000000000000495 [ 153.205645][ T5809] RBP: 0000000000000000 R08: ffff888079dc2c3f R09: 1ffff1100f3b8587 [ 153.213648][ T5809] R10: dffffc0000000000 R11: ffffed100f3b8588 R12: ffff88804d1262b0 [ 153.221827][ T5809] R13: dffffc0000000000 R14: ffff88804d126210 R15: ffff88807533ee40 [ 153.229845][ T5809] ? hugetlb_split+0x237/0x2a0 [ 153.234653][ T5809] __vma_adjust+0x2da/0x1e30 [ 153.239316][ T5809] __split_vma+0x346/0x410 [ 153.243773][ T5809] userfaultfd_ioctl+0x2f93/0x41b0 [ 153.248934][ T5809] ? userfaultfd_poll+0x1c0/0x1c0 [ 153.253994][ T5809] ? kfree+0xef/0x2a0 [ 153.258008][ T5809] ? tomoyo_path_number_perm+0x5f7/0x6b0 [ 153.263672][ T5809] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 153.269201][ T5809] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 153.275307][ T5809] ? lock_chain_count+0x20/0x20 [ 153.280192][ T5809] ? bpf_lsm_file_ioctl+0x5/0x10 [ 153.285150][ T5809] ? security_file_ioctl+0x7c/0xa0 [ 153.290289][ T5809] ? userfaultfd_poll+0x1c0/0x1c0 [ 153.295342][ T5809] __se_sys_ioctl+0xfa/0x170 [ 153.299958][ T5809] do_syscall_64+0x4c/0xa0 [ 153.304397][ T5809] ? clear_bhb_loop+0x30/0x80 [ 153.309102][ T5809] ? clear_bhb_loop+0x30/0x80 [ 153.313815][ T5809] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 153.319737][ T5809] RIP: 0033:0x7fa402d2eb19 [ 153.324180][ T5809] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.343825][ T5809] RSP: 002b:00007fa400f85028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 153.352277][ T5809] RAX: ffffffffffffffda RBX: 00007fa402fb4fa0 RCX: 00007fa402d2eb19 [ 153.360274][ T5809] RDX: 0000200000000380 RSI: 00000000c020aa00 RDI: 0000000000000006 [ 153.368268][ T5809] RBP: 00007fa402dc6b70 R08: 0000000000000000 R09: 0000000000000000 [ 153.376264][ T5809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.384279][ T5809] R13: 00007fa402fb5038 R14: 00007fa402fb4fa0 R15: 00007fffbd970558 [ 153.392294][ T5809] [ 153.395440][ T5809] Kernel Offset: disabled [ 153.399977][ T5809] Rebooting in 86400 seconds..