last executing test programs: 17m11.275643032s ago: executing program 0 (id=1): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r0 = socket$netlink(0x10, 0x3, 0x0) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x1401}, {0xffffffffffffffff, 0x600}], 0x2, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x108402) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x7, 0xfffffffffffffffc, 0x800, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000200)=0x40) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x2c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x10000}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x2004c015}, 0x8080) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000300)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r6, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000dfff00"}}) sendmmsg(r0, 0x0, 0x0, 0x0) 17m9.23812303s ago: executing program 0 (id=8): r0 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f00000010c0)='.\x00', &(0x7f0000000000)='proc\x00', 0x80, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000040)='ns\x00') readlinkat(r2, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000440)=""/163, 0xa3) 17m8.739980297s ago: executing program 0 (id=10): socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x60140, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket(0x28, 0x5, 0x0) sendmmsg(r1, 0x0, 0x0, 0x24008094) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f00000000c0)={{0x2, 0x4e21, @multicast2}, {0x60b, @random="ca286995b0d0"}, 0x4, {0x2, 0x4e20, @broadcast}, 'geneve0\x00'}) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000009a65d0860040800dec30102030109021b050000000000090400000178eaf50009058437"], 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x86, 0x4400) socket$inet6_sctp(0xa, 0x1, 0x84) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000569000/0x18000)=nil, 0x0, 0x0, 0x30, 0x0, 0x0) ioctl$SIOCRSSL2CALL(0xffffffffffffffff, 0x89e2, 0x0) 17m5.215597934s ago: executing program 0 (id=18): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x4780, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x20202) syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x80000000, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x101a01) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) 17m4.803570158s ago: executing program 0 (id=21): openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="5000000002060108000034e4000000000000000805000400000000000900020073797a3100000000050005000200000016000300686173683a6e65742c706f72742c6e65740000000500010007"], 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 16m49.542421897s ago: executing program 32 (id=21): openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="5000000002060108000034e4000000000000000805000400000000000900020073797a3100000000050005000200000016000300686173683a6e65742c706f72742c6e65740000000500010007"], 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 11m11.869369085s ago: executing program 2 (id=833): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000529000/0x2000)=nil, 0x2000, 0x16) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = open$dir(&(0x7f0000000180)='./file0\x00', 0x80300, 0x14) name_to_handle_at(r3, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000440)=@OVL_FILEID_V1={0x98, 0xf8, {'\x00', {0x0, 0xfb, 0x95, 0x3, 0xcb, "cb855c16fdeb8034a74432cec71df33d", "09d828ae6f149ed4b9fdf209497ea90d52fff15e13f14dc388648b91f711371e9fd5ded95ce75f8ee6ed6122eea11ca1c3da1260bd5548ec6fdd6639531788687c98e17ef71ad7a2d51da0397c3b61a56c18d23c4b62a0e21c9d4a0298df1a5d6c777efe98d28043d52ae9a01c009c0e4d7624811feb697611f47649c8f69c17"}}}, &(0x7f0000000500), 0x600) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x13f, 0x1}}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50483, 0x21401}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_LINK={0x8}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20048044}, 0x24000000) socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000040)={{{@in=@rand_addr=0x64010100, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e23, 0x0, 0xffff, 0x8000, 0x2}, {0x40, 0x1, 0x0, 0xffffffffffff, 0x5, 0xfffffffffffffffa}, {0x2, 0x0, 0x4, 0x2}, 0x8, 0x0, 0x1, 0x0, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x0, 0x33}, 0xa, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3507, 0x4, 0x1, 0x0, 0x2, 0x7c, 0xfffffffe}}, 0xe8) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) 11m9.6087996s ago: executing program 2 (id=838): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6(0xa, 0x805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x0) ioctl$FE_READ_STATUS(r3, 0x80046f45, &(0x7f0000000400)) 11m7.295819367s ago: executing program 2 (id=846): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x50) openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$SEG6_CMD_SETHMAC(r0, 0x0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4, @loopback}, 0x10) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000000100)=0x5, 0x4) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000d80), 0x36f, 0x20102, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000380)={0x2, {{0xa, 0x4e20, 0x1, @mcast1, 0x1000}}, {{0xa, 0x4e22, 0x7, @empty, 0x3ff}}}, 0x108) 11m6.111373917s ago: executing program 2 (id=848): bind(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000240)={0x13, 0x10, 0x10f, {0x0, r1, 0x2}}, 0x18) 11m5.643360832s ago: executing program 2 (id=853): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0), 0x0, 0x9880) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) accept$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, &(0x7f00000000c0)=0x10) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000019440)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) 11m4.495673031s ago: executing program 2 (id=857): syz_io_uring_setup(0xd24, &(0x7f0000000180)={0x0, 0x289b, 0x10000, 0x1, 0x323}, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) 10m49.464785181s ago: executing program 33 (id=857): syz_io_uring_setup(0xd24, &(0x7f0000000180)={0x0, 0x289b, 0x10000, 0x1, 0x323}, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) 9m34.09410132s ago: executing program 4 (id=1066): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001500), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f00000005c0)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x841}, 0x20000080) 9m32.987569078s ago: executing program 4 (id=1069): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, 0x0, 0x2042, 0x19d) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r4 = fanotify_init(0xf00, 0x1000) fanotify_mark(r4, 0x105, 0x10000839, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) readv(r4, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) 9m31.363573385s ago: executing program 4 (id=1075): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) r3 = fanotify_init(0x81, 0x40000) fanotify_mark(r3, 0x105, 0x40001032, r2, 0x0) read$FUSE(r3, &(0x7f0000002300)={0x2020}, 0x2020) 9m30.105894158s ago: executing program 4 (id=1079): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000880)={0x2, 0x40000090, 0x0, &(0x7f0000000780)}) 9m29.555520487s ago: executing program 4 (id=1082): signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x0) memfd_create(&(0x7f0000000180)='\x8a\'\x0e\xda4N\x0e\xea\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\x01\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc0\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5%\xdd\x19\x03K\x98\xf5`\xcb\x1e\x99\x83\xcd\b\xd1\x02R\xae\x80z\xc4]V\xfa\xdc\x1f\xf9\x15\n8Z\xd2}\xf5\xe4\x9f5\x9b7\xaf\xb7o\x01\xf9', 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x7, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x1, 0x40002) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000080)}, {0x0}], 0x2) r4 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r4, &(0x7f0000000140)={'full'}, 0xfffffdef) 9m28.529337243s ago: executing program 4 (id=1085): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x1, 0x6, 0xfa11, 0xffefffff}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$netlink(0x10, 0x3, 0x4) syz_usb_connect(0x2, 0x36, &(0x7f00000008c0)=ANY=[@ANYBLOB="120100001b767f2051045251b9c0010203030902240001000000000904000002526f590009"], 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x17) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r3, 0x0, 0x0) signalfd4(r3, &(0x7f0000000000)={[0x7]}, 0x8, 0x80000) socket(0x1e, 0x4, 0x0) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f0000000140)) writev(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}], 0x1) write$cgroup_int(r2, &(0x7f0000000040)=0x1f00, 0x12) 9m13.203842695s ago: executing program 34 (id=1085): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0x1, 0x6, 0xfa11, 0xffefffff}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') socket$netlink(0x10, 0x3, 0x4) syz_usb_connect(0x2, 0x36, &(0x7f00000008c0)=ANY=[@ANYBLOB="120100001b767f2051045251b9c0010203030902240001000000000904000002526f590009"], 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x17) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r3, 0x0, 0x0) signalfd4(r3, &(0x7f0000000000)={[0x7]}, 0x8, 0x80000) socket(0x1e, 0x4, 0x0) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f0000000140)) writev(0xffffffffffffffff, &(0x7f0000000080)=[{0x0}], 0x1) write$cgroup_int(r2, &(0x7f0000000040)=0x1f00, 0x12) 1m26.887331343s ago: executing program 3 (id=2410): signalfd(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000a00)=""/102400, 0x19000) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001ac0)={0x5c, r2, 0x5, 0x0, 0xfffffffe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @device_b}, 0x0, @random=0x6, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x5c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r4, 0x1, 0x70bd25, 0x1, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00'}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x25dfdbfd, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r5}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 1m23.685075924s ago: executing program 3 (id=2423): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) 1m23.403763904s ago: executing program 3 (id=2427): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000002040)='./file0\x00', 0x8) epoll_create1(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb80393884d01a507, 0x4008032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x121000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x280, 0x1000, 0x3e000000, 0x2, 0x0, {0x0, 0x9}, {0x350, 0x20002, 0xfffffffd}, {0xf4ef}, {0x4000005, 0x0, 0x1}, 0x1, 0x100, 0x0, 0xd614, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x3, 0x4}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1ff, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r6, &(0x7f000001aa40)=""/102392, 0x18ff8) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) 1m21.814850459s ago: executing program 3 (id=2438): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) 1m21.559843948s ago: executing program 3 (id=2441): syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b1"], 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000a00)={{0x12, 0x1, 0x200, 0x7, 0x63, 0xd4, 0x40, 0x4fc, 0x504b, 0x52c4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x7, 0x20, 0x2e, "", [{{0x9, 0x4, 0x4b, 0xf, 0x0, 0x5d, 0xf9, 0xd5, 0x38}}]}}]}}, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xaa001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1400000026000900030008008000000002"], 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4000000) syz_usb_connect$cdc_ecm(0x1, 0x8c, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f00000006c0)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x110, 0x10, 0xf, 0x2, 0x40, 0xfc}, 0x0, 0x0, 0x8, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x429}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x2c30}}, {0xaa, &(0x7f00000002c0)=@string={0xaa, 0x3, "5aad5e09b76cbc84a0fc3a01c62995ec636115e780f4065721484a00fafb96276580d34473764878f970019cbc2de1eca812c15c77f34e64ae48b78fc244b43e89828fb26381ae3eb8de1177d0ea96d3fae31254d2e99722a53ce0291bbc2276f1f93a1337602a5dcfda969a32a61f44c3c889ac3a431fc948cfc8859471d1a28790ab6fb73061ce23c328de122906dbf090627a5cccc2de70229662275fc7d75837301bdebcf27b"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0xc0a}}, {0x88, &(0x7f00000003c0)=@string={0x88, 0x3, "d0b4d9a31e9867a1f3de37334d914c00ac64c68899e87927bba60c20bdaf5b689b1d03aee29cbe24c4b779f5512ba75eefc05808e1f79fbd79e2257f9fe5ebc16d5e6265b09890c9538a34c307bc49c0bb6a58ca0f7380846cf0e1934a9ba10a81b4ebbe09bd68fd150acba0497c60c6b2364f5f8fed23663d474ad5111fefc7a02b7ae515e5"}}, {0xe7, &(0x7f0000000480)=@string={0xe7, 0x3, "580c4b627d67095f2c745d62ba8075a2f1cc94aa4085ba0526777b48ea702a031734d007bcf5b36245e7b3023c00f89ac94ed1fe4d571f68f824b6810e321061250e66f808af7aa98949119790e22986ca66ff8a212390152672043b9071b0293bc15b7793dfcb02e63052c3a34cf2ae249273dce9306d75a4146fc73dc112596b4bddd37d13098e497867e9e33a21b890907ae19718789592afb5ae2ff9ade21aae06039ecec09d1fd06abb964c01cf32b033a85839081f7f9d1a9f038b45f179cf168c0b599529252b5e0446439994f57223fdfab1e0627f2f411d8e30aab9931ee6d501"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x440a}}, {0xd5, &(0x7f00000005c0)=@string={0xd5, 0x3, "b573246625a180e56443bf3f30de8c77bd1c8ba8da01abc7d0650909e295bf1fde02568dd429d4afee991a99a020df11fd9f2a9d61ad413ea522b27c0e14051666794ab787b0fb0a838e31b3fc379620ff49221672c49f98616925523d3b13fc0a37d0c36ffbfedf58d201a159d496670f4df6b2eda3d2cecd04837b0c7b0784241ed3af4a7c77eea723107bde606e68a01dcd87134a5bca457eaa09f9e3e0571c34d48a0dc032d2d61940ec7e540bc440203be998c87a46b855d893c158ff88d2ab10815f6b919f0d4166cde3f613d92869e1"}}]}) timer_create(0x8, &(0x7f0000000340)={0x0, 0x21, 0x1, @thr={0x0, 0x0}}, &(0x7f0000bbdffc)) socket$alg(0x26, 0x5, 0x0) r3 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000000)={0x4, 0x1, 0x6, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x980912, 0x0, '\x00', @p_u32=&(0x7f0000000080)=0x1}}) 1m21.169172252s ago: executing program 3 (id=2446): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010400000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) 1m20.314223552s ago: executing program 35 (id=2446): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010400000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) 6.90842398s ago: executing program 6 (id=2716): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000002040)='./file0\x00', 0x8) epoll_create1(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb80393884d01a507, 0x4008032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x121000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x280, 0x1000, 0x3e000000, 0x2, 0x0, {0x0, 0x9}, {0x350, 0x20002, 0xfffffffd}, {0xf4ef}, {0x4000005, 0x0, 0x1}, 0x1, 0x100, 0x0, 0xd614, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x3, 0x4}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1ff, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x72, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r6, &(0x7f000001aa40)=""/102392, 0x18ff8) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) 6.527461623s ago: executing program 5 (id=2720): r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x101, 0x0, 0x300, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) ftruncate(0xffffffffffffffff, 0x2007ffb) close(0xffffffffffffffff) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000480)=@generic={&(0x7f0000000440)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0x1, 0x1, 0x401}, 0x10, 0x1efbf, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000500)=[{0x2, 0x1, 0x9, 0x5}]}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r5, &(0x7f0000007700), 0x318, 0xfc0, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x80085665, &(0x7f00000000c0)={0x2, 0x203, 0x2}) 6.444916326s ago: executing program 8 (id=2721): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003580)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x503}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}, @IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}]}, 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x4}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x50}}, 0x8000) 4.631024779s ago: executing program 8 (id=2725): socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14, r1, 0x32b, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x24000800}, 0x8000) 4.515617683s ago: executing program 1 (id=2726): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$inet(0x2, 0x3, 0x2) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}, 0xffffffff}], 0x1, 0x102, 0x0) sendto$inet(r0, 0x0, 0x0, 0x800, &(0x7f0000000100)={0x2, 0x4e24, @multicast1}, 0x6f) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) 4.400410587s ago: executing program 6 (id=2728): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000340)=0x15, 0x4) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe) 3.700230481s ago: executing program 8 (id=2730): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f00000004c0)={&(0x7f0000000100)={0x1d, r1}, 0x10, &(0x7f00000001c0)={&(0x7f0000000680)=@canfd={{0x4}, 0x25, 0x2, 0x0, 0x0, "d9d2a7ae9dcf4d69beb15eec7d344087db3bf1d23ce4e5320ed7e06f51a642a2ffe41cecf2ed670bd1a9c6363fd3c9440abf43540285588003fd7e950b08d518"}, 0x48}, 0x1, 0x0, 0x0, 0x84844}, 0x400c890) 3.679170452s ago: executing program 5 (id=2731): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x24048058) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@deltclass={0x24, 0x29, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x15, 0x9}, {0xf, 0xf}, {0xffe0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.564136296s ago: executing program 8 (id=2732): open(&(0x7f00000000c0)='./file0\x00', 0x100400, 0x108) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000004c00)}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6d8a80f9637e0c2a3f9623478134b943d5fba4f7e0ceed66c93cc8b", 0xe6}, {&(0x7f0000000bc0)}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f17", 0x19}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x60}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x2, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3.520141947s ago: executing program 1 (id=2734): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1000430, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000002c0)="4a2b5af6b9c8af77a75979705a0754", 0xf) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 3.351016633s ago: executing program 6 (id=2735): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x4}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x50}}, 0x8000) 3.245437347s ago: executing program 1 (id=2736): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000080)={0x20002, 0x9, {}, {0xee00}, 0x700000000000, 0x4}) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x10002) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x0, 0x709, 0x0, 0x25dfdbfd, {0x2e}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$kcm(0x29, 0x7, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000000340)) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000000)={0x0, 0xfff, "568b21", 0x0, 0x9}) recvmsg$kcm(r1, &(0x7f0000000cc0)={&(0x7f0000000280)=@alg, 0x80, &(0x7f0000000b40)=[{&(0x7f00000006c0)=""/159, 0x9f}, {&(0x7f0000000780)=""/126, 0x7e}, {&(0x7f0000000800)=""/31, 0x1f}, {&(0x7f0000000840)=""/243, 0xf3}, {&(0x7f0000000940)=""/129, 0x81}, {&(0x7f0000000a00)=""/164, 0xa4}], 0x6}, 0x2002) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='pim6reg1\x00', 0x10) 3.213204848s ago: executing program 7 (id=2737): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x1c, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x162e9ce9}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 3.179988999s ago: executing program 8 (id=2738): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000002040)='./file0\x00', 0x8) epoll_create1(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb80393884d01a507, 0x4008032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x121000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x280, 0x1000, 0x3e000000, 0x2, 0x0, {0x0, 0x9}, {0x350, 0x20002, 0xfffffffd}, {0xf4ef}, {0x4000005, 0x0, 0x1}, 0x1, 0x100, 0x0, 0xd614, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x3, 0x4}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1ff, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x72, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r6, &(0x7f000001aa40)=""/102392, 0x18ff8) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) 3.177146679s ago: executing program 6 (id=2739): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4048010}, 0x40000) 2.899193729s ago: executing program 5 (id=2740): sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0}, 0x8000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100fdffffff000000001d00000008000300", @ANYRES32=r2, @ANYBLOB="40002f800c0002000000000000000000080001"], 0x5c}}, 0x0) 2.835611301s ago: executing program 7 (id=2741): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan1\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x34, r2, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}]}, 0x34}}, 0x0) 2.721711005s ago: executing program 6 (id=2742): r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x101, 0x0, 0x300, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) ftruncate(0xffffffffffffffff, 0x2007ffb) close(0xffffffffffffffff) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000480)=@generic={&(0x7f0000000440)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0x1, 0x1, 0x401}, 0x10, 0x1efbf, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000500)=[{0x2, 0x1, 0x9, 0x5}]}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r5, &(0x7f0000007700), 0x318, 0xfc0, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x80085665, &(0x7f00000000c0)={0x2, 0x203, 0x2}) 2.266481021s ago: executing program 5 (id=2743): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8000000000000001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x0, 0x9, 0x4, 0x1, 0x7043}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fdd000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.603639714s ago: executing program 7 (id=2744): setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, &(0x7f0000000200)=0xd, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendmsg$can_raw(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000100)={0x1d, r0}, 0x10, &(0x7f00000001c0)={&(0x7f0000000680)=@canfd={{0x4}, 0x25, 0x2, 0x0, 0x0, "d9d2a7ae9dcf4d69beb15eec7d344087db3bf1d23ce4e5320ed7e06f51a642a2ffe41cecf2ed670bd1a9c6363fd3c9440abf43540285588003fd7e950b08d518"}, 0x48}, 0x1, 0x0, 0x0, 0x84844}, 0x400c890) 961.966506ms ago: executing program 6 (id=2745): r0 = socket$inet_sctp(0x2, 0x1, 0x84) io_setup(0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000280)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) dup2(r1, r1) clock_gettime(0x0, &(0x7f0000000200)) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) accept$inet(r0, 0x0, 0x0) 949.743307ms ago: executing program 1 (id=2746): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1000430, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000002c0)="4a2b5af6b9c8af77a75979705a0754", 0xf) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 799.598792ms ago: executing program 7 (id=2747): socket$netlink(0x10, 0x3, 0x10) r0 = timerfd_create(0x0, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) readv(r0, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0xf6d, 0x0, 0xd, 0x7fffffff, 0x0, 0x4, 0x200000000000000, 0x0, 0x100, 0x0, 0x0, 0x9, 0x3, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x1000, 0x2000000000008, 0x9, 0x3, 0x8000000000005a, 0x3}) dup(0xffffffffffffffff) 676.889166ms ago: executing program 5 (id=2748): open(&(0x7f00000000c0)='./file0\x00', 0x100400, 0x108) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000004c00)}, {&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e98e92fe2fd18e63d4d5699814d9843367774e155678592d0eec07073e851f50827bde418748aa0741684fe603e34dcc960678c7b3e71e48befa166d4a5247325fa881fc7857a8caadde6a2ac9cdcc4ead01267dbb4c639d6d8a80f9637e0c2a3f9623478134b943d5fba4f7e0ceed66c93cc8b", 0xe6}, {&(0x7f0000000bc0)}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f17", 0x19}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x60}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x2, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 612.009818ms ago: executing program 1 (id=2749): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x5c, r1, 0x1, 0xffffffff, 0x400002, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x10000000}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @empty}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private0={0xfc, 0x0, '\x00', 0x1}}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x5c}, 0x1, 0x620b}, 0x0) 463.611413ms ago: executing program 7 (id=2750): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x20) ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000080)) 233.637272ms ago: executing program 1 (id=2751): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xfff9, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xf3f, 0x30bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x45aa, 0x2, 0x6}, {0x1, 0x0, 0x2}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20041090}, 0x810) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x4}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000600)="1e", 0x1}], 0x1}, 0x4c00c) 201.788973ms ago: executing program 7 (id=2752): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4048010}, 0x40000) 155.602424ms ago: executing program 5 (id=2753): r0 = socket(0x10, 0x803, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r2 = socket(0x40000000015, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2716, &(0x7f00000198c0)=""/102393, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) recvmmsg(r0, &(0x7f0000005b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/188, 0xbc}, 0xaca4}, {{0x0, 0x0, 0x0}, 0x1}, {{&(0x7f0000004a00)=@un=@abs, 0x80, &(0x7f0000005b00)}}], 0x3, 0x20, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 0s ago: executing program 8 (id=2754): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000010006ec087edfea625c900000000000a700000001c0a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000004400048024000180090001006d"], 0x98}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) kernel console output (not intermixed with test programs): =0 [ 900.738017][ T4330] usb 8-1: Manufacturer: syz [ 900.755557][ T4330] usb 8-1: config 0 descriptor?? [ 901.099684][ T4314] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 901.284760][T12755] netlink: 'syz.1.1970': attribute type 6 has an invalid length. [ 901.379735][ T4314] usb 4-1: Using ep0 maxpacket: 16 [ 901.644857][ T4314] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 901.718109][ T4314] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 901.819868][ T4314] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 901.828999][ T4314] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.873020][ T4314] usb 4-1: config 0 descriptor?? [ 901.879935][ T4330] rc_core: IR keymap rc-hauppauge not found [ 901.885937][ T4330] Registered IR keymap rc-empty [ 901.901816][ T4330] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 901.908928][T12759] netlink: 'syz.6.1971': attribute type 1 has an invalid length. [ 901.940895][T12759] 8021q: adding VLAN 0 to HW filter on device bond5 [ 902.172508][ T4330] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 902.220435][ T4330] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 902.710188][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 902.934618][ T4314] usbhid 4-1:0.0: can't add hid device: -71 [ 902.942626][ T4330] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input23 [ 902.957220][ T4314] usbhid: probe of 4-1:0.0 failed with error -71 [ 902.984856][ T4314] usb 4-1: USB disconnect, device number 51 [ 903.115593][ T4330] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 903.151312][ T4330] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 903.202365][ T4330] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 903.240695][ T4330] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 903.281141][ T4330] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 903.329853][ T4330] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 903.369702][ T4330] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 903.400181][ T4330] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 903.430296][ T4330] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 903.459689][ T4330] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 903.662675][ T4330] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 903.679754][ T4330] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 903.711329][ T4330] usb 8-1: USB disconnect, device number 11 [ 903.928271][T12781] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1976'. [ 903.999671][ C1] net_ratelimit: 5 callbacks suppressed [ 903.999688][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 904.015206][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 904.025002][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 904.756799][T12799] misc userio: The device must be registered before sending interrupts [ 905.545129][T12785] binder: 12776:12785 ioctl c0306201 0 returned -14 [ 905.993003][T12815] netlink: 'syz.3.1985': attribute type 1 has an invalid length. [ 906.069760][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 906.080600][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 906.090957][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 906.285799][T12815] 8021q: adding VLAN 0 to HW filter on device bond15 [ 906.293910][T12813] netlink: 'syz.6.1984': attribute type 6 has an invalid length. [ 906.739678][ T4330] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 907.173276][ T4330] usb 2-1: config 0 has no interfaces? [ 907.349628][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 907.359654][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 907.369861][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 907.519655][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 907.745697][T12825] random: crng reseeded on system resumption [ 907.776207][ T4330] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 907.827017][ T4330] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 907.878515][ T4330] usb 2-1: config 0 descriptor?? [ 908.171612][ T4330] usb 2-1: USB disconnect, device number 42 [ 908.969618][T12387] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 909.169750][T12387] usb 4-1: Using ep0 maxpacket: 16 [ 909.320144][T12387] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 909.344301][T12387] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 909.404635][T12387] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 909.435013][T12387] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.467804][T12387] usb 4-1: config 0 descriptor?? [ 910.062870][T12387] usbhid 4-1:0.0: can't add hid device: -71 [ 910.069673][ C0] net_ratelimit: 2 callbacks suppressed [ 910.069691][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 910.085024][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 910.094830][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 910.149700][T12387] usbhid: probe of 4-1:0.0 failed with error -71 [ 910.569735][T12387] usb 4-1: USB disconnect, device number 52 [ 911.349602][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 911.349644][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 911.360052][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 911.369546][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 911.378820][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 911.388370][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 912.124500][T12878] random: crng reseeded on system resumption [ 913.589641][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 913.999897][ T4316] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 914.630483][T12906] netlink: 'syz.3.2009': attribute type 6 has an invalid length. [ 914.769731][ T4316] usb 6-1: Using ep0 maxpacket: 16 [ 914.794541][ T4316] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 914.823266][ T4316] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 914.865515][ T4316] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 914.876543][ T4316] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 915.113371][ T4316] usb 6-1: config 0 descriptor?? [ 916.027061][ T4316] usbhid 6-1:0.0: can't add hid device: -71 [ 916.044530][ T4316] usbhid: probe of 6-1:0.0 failed with error -71 [ 916.066591][ T4316] usb 6-1: USB disconnect, device number 42 [ 916.103104][T12928] random: crng reseeded on system resumption [ 917.909705][ C0] net_ratelimit: 8 callbacks suppressed [ 917.909726][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 917.926279][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 918.458646][T12950] Bluetooth: hci0: invalid len left 7, exp >= 50 [ 918.709695][ T4280] Bluetooth: hci0: command 0x0401 tx timeout [ 919.152057][T12960] loop2: detected capacity change from 0 to 7 [ 919.285306][ T4385] Dev loop2: unable to read RDB block 7 [ 919.291868][ T4385] loop2: AHDI p1 p2 p3 [ 919.321577][ T4385] loop2: partition table partially beyond EOD, truncated [ 919.362480][ T4385] loop2: p1 start 1601398130 is beyond EOD, truncated [ 919.383907][ T4385] loop2: p2 start 1702059890 is beyond EOD, truncated [ 919.484479][T12960] Dev loop2: unable to read RDB block 7 [ 919.570403][T12960] loop2: AHDI p1 p2 p3 [ 919.574872][T12960] loop2: partition table partially beyond EOD, truncated [ 919.594430][T12960] loop2: p1 start 1601398130 is beyond EOD, truncated [ 919.604565][T12960] loop2: p2 start 1702059890 is beyond EOD, truncated [ 919.764723][T12958] netlink: 'syz.1.2026': attribute type 6 has an invalid length. [ 920.309741][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 920.319825][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 920.329679][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 920.339658][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 920.349663][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 920.359659][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 921.029624][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 921.039948][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 921.386995][T12985] Bluetooth: hci0: unsupported parameter 255 [ 921.434038][T12985] Bluetooth: hci0: unsupported parameter 255 [ 921.763273][T12994] random: crng reseeded on system resumption [ 921.819790][ T4316] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 922.009575][ T4316] usb 2-1: Using ep0 maxpacket: 16 [ 922.017612][ T4316] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 922.068122][ T4316] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 922.128969][ T4316] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 922.159208][ T4316] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 922.194632][ T4316] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 922.249232][ T4316] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 922.274876][ T4316] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 922.289846][ T4316] usb 2-1: Manufacturer: syz [ 922.325749][ T4316] usb 2-1: config 0 descriptor?? [ 922.849838][ T4316] rc_core: IR keymap rc-hauppauge not found [ 922.880059][ T4316] Registered IR keymap rc-empty [ 922.890909][ T4316] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 922.949784][ T4316] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 922.984578][ T4316] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 923.066173][ T4316] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input24 [ 923.121327][ T4316] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 923.160986][ T4316] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 923.219739][ T4316] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 923.289961][ T4316] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 923.399728][ T4316] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 923.439817][ T4316] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 923.481391][ T4316] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 923.525453][ T4316] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 923.580012][ T4316] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 923.629606][ T4316] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 923.660527][ T4316] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 923.679708][ C1] net_ratelimit: 1 callbacks suppressed [ 923.679764][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 923.695287][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 923.705270][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 923.715175][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 923.725033][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 923.735063][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 923.783479][ T4316] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 923.856517][ T4316] usb 2-1: USB disconnect, device number 43 [ 924.959609][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 924.969741][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 924.979858][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 925.180049][T13032] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2045'. [ 925.294269][T13032] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2045'. [ 925.450475][T13022] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 925.457156][T13022] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 925.609846][T13022] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 925.617148][T13022] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 925.735233][ T4280] Bluetooth: hci0: Opcode 0x0c1a failed: -112 [ 925.754482][T13022] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 925.772368][T13022] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 925.793045][T13022] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 925.805354][T13022] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 925.815588][T13022] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 926.099640][ T4718] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 926.290163][ T4718] usb 8-1: Using ep0 maxpacket: 16 [ 926.302388][ T4718] usb 8-1: unable to get BOS descriptor or descriptor too short [ 926.341782][ T4718] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 926.403261][ T4718] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 926.453233][ T4718] usb 8-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 926.532724][ T4718] usb 8-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 926.588433][ T4718] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.625247][ T4718] usb 8-1: Product: syz [ 926.638606][ T4718] usb 8-1: Manufacturer: syz [ 926.658102][ T4718] usb 8-1: SerialNumber: syz [ 927.005662][T13067] random: crng reseeded on system resumption [ 927.663392][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 928.719812][ C0] net_ratelimit: 5 callbacks suppressed [ 928.719827][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 928.735518][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 928.745252][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 929.561439][ T4718] usb 8-1: Audio class v2/v3 interfaces need an interface association [ 929.595173][ T4718] snd-usb-audio: probe of 8-1:1.0 failed with error -22 [ 929.672454][ T4718] usb 8-1: 1:2 : does not exist [ 929.817768][ T4718] usb 8-1: USB disconnect, device number 12 [ 930.356153][T13116] netlink: 'syz.3.2066': attribute type 6 has an invalid length. [ 930.738029][T13123] xt_hashlimit: size too large, truncated to 1048576 [ 930.869716][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 930.879602][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 930.889405][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 931.029762][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 931.039897][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 931.049785][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 931.671759][ T1277] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 931.681294][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.687602][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.439605][ T4330] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 932.689621][ T4330] usb 8-1: Using ep0 maxpacket: 16 [ 932.696852][ T4330] usb 8-1: unable to get BOS descriptor or descriptor too short [ 932.737170][ T4330] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 932.796982][ T4330] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 932.846362][ T4330] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 932.911002][ T4330] usb 8-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 932.963865][ T4330] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 933.008898][T13148] random: crng reseeded on system resumption [ 933.020251][ T4330] usb 8-1: Product: syz [ 933.056630][ T4330] usb 8-1: Manufacturer: syz [ 933.097224][ T4330] usb 8-1: SerialNumber: syz [ 934.239671][ C1] net_ratelimit: 3 callbacks suppressed [ 934.239692][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 934.255772][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 934.265602][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 934.399653][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 934.409685][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 934.419444][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 935.237201][ T4330] usb 8-1: Audio class v2/v3 interfaces need an interface association [ 935.279614][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 935.289789][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 935.299747][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 935.330125][ T4330] snd-usb-audio: probe of 8-1:1.0 failed with error -22 [ 935.420031][ T4330] usb 8-1: 1:2 : does not exist [ 935.494139][ T4330] usb 8-1: USB disconnect, device number 13 [ 936.647556][T13191] netlink: 'syz.6.2078': attribute type 6 has an invalid length. [ 937.679643][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 937.735408][T13202] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2082'. [ 937.760771][T13202] comedi comedi0: Minor 2 could not be opened [ 938.839875][ T4718] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 939.029964][ T4718] usb 6-1: Using ep0 maxpacket: 16 [ 939.041131][ T4718] usb 6-1: unable to get BOS descriptor or descriptor too short [ 939.123843][ T4718] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 939.135875][ T4718] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 939.154922][ T4718] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 939.334717][ T4718] usb 6-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 939.417731][ T4718] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.472894][ T4718] usb 6-1: Product: syz [ 939.477145][ T4718] usb 6-1: Manufacturer: syz [ 939.484040][ T4718] usb 6-1: SerialNumber: syz [ 939.563642][T13226] netlink: 'syz.3.2087': attribute type 6 has an invalid length. [ 939.906332][ T4718] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 939.956003][ T4718] snd-usb-audio: probe of 6-1:1.0 failed with error -22 [ 940.007005][ T4718] usb 6-1: 1:2 : does not exist [ 940.095506][ T4718] usb 6-1: USB disconnect, device number 43 [ 941.269721][ C1] net_ratelimit: 8 callbacks suppressed [ 941.269740][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 941.286035][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 941.296129][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 941.429739][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 941.440623][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 941.451169][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 941.641799][T13245] netlink: 'syz.3.2093': attribute type 6 has an invalid length. [ 942.073976][T13249] loop2: detected capacity change from 0 to 7 [ 942.138846][ T4385] Dev loop2: unable to read RDB block 7 [ 942.201819][ T4385] loop2: AHDI p1 p2 p3 [ 942.206082][ T4385] loop2: partition table partially beyond EOD, truncated [ 942.309613][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 942.319444][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 942.329354][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 942.429870][ T4385] loop2: p1 start 1601398130 is beyond EOD, truncated [ 942.475088][ T4385] loop2: p2 start 1702059890 is beyond EOD, truncated [ 942.494337][T13249] Dev loop2: unable to read RDB block 7 [ 942.516723][T13249] loop2: AHDI p1 p2 p3 [ 942.539634][T13249] loop2: partition table partially beyond EOD, truncated [ 942.615202][T13249] loop2: p1 start 1601398130 is beyond EOD, truncated [ 942.632242][T13249] loop2: p2 start 1702059890 is beyond EOD, truncated [ 943.779739][ T4718] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 943.802450][T13268] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 943.979622][ T4718] usb 6-1: Using ep0 maxpacket: 16 [ 944.001799][ T4718] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 944.036844][ T4718] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 944.089621][ T4718] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 944.140577][ T4718] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 944.189805][ T4718] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 944.236980][ T4718] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 944.277967][ T4718] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 944.310866][ T4718] usb 6-1: Manufacturer: syz [ 944.330253][ T6954] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 944.350352][ T4718] usb 6-1: config 0 descriptor?? [ 944.529927][ T6954] usb 7-1: Using ep0 maxpacket: 16 [ 944.545931][ T6954] usb 7-1: unable to get BOS descriptor or descriptor too short [ 944.554007][T13294] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2104'. [ 944.562159][T13294] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2104'. [ 944.658995][ T6954] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 944.965185][T12387] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 944.965185][ T6954] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 944.965263][ T6954] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 944.995909][ T6954] usb 7-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 945.007783][T13294] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2104'. [ 945.017223][ T6954] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.109749][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 945.130506][ T6954] usb 7-1: Product: syz [ 945.147301][T13294] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2104'. [ 945.157579][T13294] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2104'. [ 945.166838][ T6954] usb 7-1: Manufacturer: syz [ 945.171691][ T6954] usb 7-1: SerialNumber: syz [ 945.204021][T12387] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 945.224828][T12387] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 945.276467][T12387] usb 2-1: config 220 contains an unexpected descriptor of type 0x1, skipping [ 945.307454][T12387] usb 2-1: config 220 descriptor has 1 excess byte, ignoring [ 945.325625][T12387] usb 2-1: config 220 has no interface number 2 [ 945.334197][T12387] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 945.360529][T12387] usb 2-1: config 220 interface 0 has no altsetting 0 [ 945.367583][T12387] usb 2-1: config 220 interface 76 has no altsetting 0 [ 945.383914][T12387] usb 2-1: config 220 interface 1 has no altsetting 0 [ 945.433739][T12387] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 945.456017][T12387] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.484351][T12387] usb 2-1: Product: syz [ 945.497135][T12387] usb 2-1: Manufacturer: syz [ 945.503219][T12387] usb 2-1: SerialNumber: syz [ 945.617821][ T6954] usb 7-1: Audio class v2/v3 interfaces need an interface association [ 945.647482][ T6954] snd-usb-audio: probe of 7-1:1.0 failed with error -22 [ 945.703162][ T6954] usb 7-1: 1:2 : does not exist [ 945.740162][T12387] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 945.752150][T12387] usb 2-1: No valid video chain found. [ 945.766486][T12387] usb 2-1: selecting invalid altsetting 0 [ 945.824292][ T6954] usb 7-1: USB disconnect, device number 19 [ 945.852906][T12387] usb 2-1: selecting invalid altsetting 0 [ 945.879433][T12387] usbtest: probe of 2-1:220.1 failed with error -22 [ 945.950360][T12387] usb 2-1: USB disconnect, device number 44 [ 946.949685][ T4718] rc_core: IR keymap rc-hauppauge not found [ 946.955844][ T4718] Registered IR keymap rc-empty [ 946.988971][ T4718] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 947.048454][ T4718] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 947.055336][T13315] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 947.110714][ T4718] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 947.230544][ T4718] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input25 [ 947.593727][ T4718] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 947.719703][ T4718] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 947.929741][ T4718] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 948.001809][ T4718] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 948.034423][T13315] net_ratelimit: 6 callbacks suppressed [ 948.037802][T13315] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 948.069729][ T4718] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 948.109652][ T4718] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 948.162450][ T4718] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 948.219670][ T4718] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 948.272992][ T4718] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 948.330064][ T4718] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 948.380812][ T4718] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 948.400254][ T4718] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 948.459101][ T4718] usb 6-1: USB disconnect, device number 44 [ 948.869668][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 948.879839][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 948.889913][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 949.070417][ T4718] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 949.312028][ T4718] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 949.329893][ T4718] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 949.356012][ T4718] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 949.422375][ T4718] usb 6-1: config 0 descriptor?? [ 949.460391][ T4718] pwc: Askey VC010 type 2 USB webcam detected. [ 949.749610][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 949.759672][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 949.770032][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 949.861143][ T4718] pwc: recv_control_msg error -32 req 02 val 2b00 [ 949.887864][ T4718] pwc: recv_control_msg error -32 req 02 val 2700 [ 949.937807][ T4718] pwc: recv_control_msg error -32 req 02 val 2c00 [ 949.968256][ T4718] pwc: recv_control_msg error -32 req 04 val 1000 [ 950.018936][ T4718] pwc: recv_control_msg error -32 req 04 val 1300 [ 950.031371][ T4718] pwc: recv_control_msg error -32 req 04 val 1400 [ 950.059636][ T4718] pwc: recv_control_msg error -32 req 02 val 2000 [ 950.074808][ T4718] pwc: recv_control_msg error -32 req 02 val 2100 [ 950.089960][ T4718] pwc: recv_control_msg error -32 req 04 val 1500 [ 950.101825][ T4718] pwc: recv_control_msg error -32 req 02 val 2500 [ 950.113610][T13350] loop2: detected capacity change from 0 to 7 [ 950.129612][ T4718] pwc: recv_control_msg error -32 req 02 val 2400 [ 950.137830][ T4346] Dev loop2: unable to read RDB block 7 [ 950.143585][ T4346] loop2: AHDI p1 p2 p3 [ 950.148727][ T4718] pwc: recv_control_msg error -32 req 02 val 2600 [ 950.168581][ T4346] loop2: partition table partially beyond EOD, truncated [ 950.178610][ T4718] pwc: recv_control_msg error -32 req 02 val 2900 [ 950.186759][ T4718] pwc: recv_control_msg error -32 req 02 val 2800 [ 950.200861][ T4346] loop2: p1 start 1601398130 is beyond EOD, truncated [ 950.207773][ T4346] loop2: p2 start 1702059890 is beyond EOD, truncated [ 950.216538][T13350] Dev loop2: unable to read RDB block 7 [ 950.225459][T13350] loop2: AHDI p1 p2 p3 [ 950.230334][T13350] loop2: partition table partially beyond EOD, truncated [ 950.254602][T13350] loop2: p1 start 1601398130 is beyond EOD, truncated [ 950.262217][T13350] loop2: p2 start 1702059890 is beyond EOD, truncated [ 950.349729][ T4711] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 950.401059][ T4718] pwc: recv_control_msg error -71 req 04 val 1200 [ 950.417130][ T4718] pwc: Registered as video103. [ 950.424787][ T4718] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input26 [ 950.455906][ T4718] usb 6-1: USB disconnect, device number 45 [ 950.573474][ T4711] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 950.582589][ T4711] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 950.593528][ T4711] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 950.608189][ T4711] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 950.622268][ T4711] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 950.655012][ T4711] usb 8-1: Manufacturer: syz [ 950.684717][ T4711] usb 8-1: config 0 descriptor?? [ 950.702987][ T4711] igorplugusb 8-1:0.0: incorrect number of endpoints [ 950.912493][T13348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 951.012139][T13348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 951.320871][T13371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 951.329726][T13371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 951.345988][T13371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 951.356752][T13371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 952.229645][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 952.239790][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 952.250701][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 953.092705][ T4718] usb 8-1: USB disconnect, device number 14 [ 953.189590][ C0] net_ratelimit: 3 callbacks suppressed [ 953.189610][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 953.205112][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 953.215021][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 953.355409][T13383] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 953.674981][T13383] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 956.389644][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 956.399629][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 956.409728][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 956.469658][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 956.479418][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 956.489385][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 957.563630][T13416] input: syz1 as /devices/virtual/input/input27 [ 960.069635][ C1] net_ratelimit: 3 callbacks suppressed [ 960.069651][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 960.085350][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 960.095633][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 960.149600][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 960.159643][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 960.169335][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 961.519645][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 961.529715][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 961.539514][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 962.229775][ T4330] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 962.408626][ T4330] usb 8-1: device descriptor read/64, error -71 [ 962.435276][T13465] netlink: 'syz.1.2152': attribute type 6 has an invalid length. [ 962.999719][ T4330] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 963.169977][ T4330] usb 8-1: device descriptor read/64, error -71 [ 963.287847][T13484] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2159'. [ 963.297527][ T4330] usb usb8-port1: attempt power cycle [ 963.303497][T13484] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2159'. [ 963.389796][ T4711] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 964.003790][ T4711] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 964.040424][ T4711] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 964.067854][ T4711] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 964.076414][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 964.089674][ T4330] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 964.124668][ T4711] usb 7-1: config 0 descriptor?? [ 964.160466][ T4330] usb 8-1: device descriptor read/8, error -71 [ 964.181559][ T4711] pwc: Askey VC010 type 2 USB webcam detected. [ 964.405772][T13495] device syzkaller0 entered promiscuous mode [ 964.429560][ T4330] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 964.477885][ T4330] usb 8-1: device descriptor read/8, error -71 [ 964.571417][ T4711] pwc: recv_control_msg error -32 req 02 val 2b00 [ 964.580789][ T4711] pwc: recv_control_msg error -32 req 02 val 2700 [ 964.597344][ T4711] pwc: recv_control_msg error -32 req 02 val 2c00 [ 964.609897][ T4330] usb usb8-port1: unable to enumerate USB device [ 964.616877][ T4711] pwc: recv_control_msg error -32 req 04 val 1000 [ 964.640437][ T4711] pwc: recv_control_msg error -32 req 04 val 1300 [ 964.656276][ T4711] pwc: recv_control_msg error -32 req 04 val 1400 [ 964.674987][ T4711] pwc: recv_control_msg error -32 req 02 val 2000 [ 964.734584][ T4718] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 964.902450][ T4711] pwc: recv_control_msg error -71 req 04 val 1500 [ 964.929649][ T4718] usb 2-1: Using ep0 maxpacket: 16 [ 964.935235][ T4711] pwc: recv_control_msg error -71 req 02 val 2500 [ 964.943619][ T4718] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 964.961005][ T4718] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 964.972903][ T4711] pwc: recv_control_msg error -71 req 02 val 2400 [ 964.992639][ T4718] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 965.009873][ T4711] pwc: recv_control_msg error -71 req 02 val 2600 [ 965.016723][ T4718] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 965.027184][ T4711] pwc: recv_control_msg error -71 req 02 val 2900 [ 965.041277][ T4718] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 965.058860][ T4711] pwc: recv_control_msg error -71 req 02 val 2800 [ 965.078292][ T4718] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 965.093231][ T4711] pwc: recv_control_msg error -71 req 04 val 1100 [ 965.109677][ C0] net_ratelimit: 5 callbacks suppressed [ 965.109698][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 965.125530][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 965.135412][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 965.151474][ T4718] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 965.160102][ T4711] pwc: recv_control_msg error -71 req 04 val 1200 [ 965.169413][ T4718] usb 2-1: Manufacturer: syz [ 965.184118][ T4711] pwc: Registered as video103. [ 965.201132][ T4718] usb 2-1: config 0 descriptor?? [ 965.215998][ T4711] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input28 [ 965.553205][ T4711] usb 7-1: USB disconnect, device number 20 [ 965.689573][ T4718] rc_core: IR keymap rc-hauppauge not found [ 965.695695][ T4718] Registered IR keymap rc-empty [ 965.761568][ T4718] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 965.789648][ T4718] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 965.896241][ T4718] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 965.985422][ T4718] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input29 [ 966.139388][ T4718] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 966.199670][ T4718] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 966.241390][ T4718] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 966.296387][ T4718] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 966.339859][ T4718] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 966.379687][ T4718] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 966.429953][ T4718] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 966.489772][ T4718] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 966.519699][ T4718] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 966.559624][ T4718] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 966.716449][ T4718] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 966.730697][ T4718] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 966.759135][ T4718] usb 2-1: USB disconnect, device number 45 [ 967.989632][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 967.999546][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 968.009379][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 968.069593][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 968.079437][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 968.089540][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 968.799786][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 970.104702][T13560] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2182'. [ 970.649826][T13572] netlink: 'syz.3.2187': attribute type 1 has an invalid length. [ 970.684751][T13572] 8021q: adding VLAN 0 to HW filter on device bond16 [ 970.959633][T13576] loop2: detected capacity change from 0 to 7 [ 971.557865][ T4385] Dev loop2: unable to read RDB block 7 [ 971.567410][ T4385] loop2: AHDI p1 p2 p3 [ 971.594902][ T4385] loop2: partition table partially beyond EOD, truncated [ 971.637820][ T4385] loop2: p1 start 1601398130 is beyond EOD, truncated [ 971.681132][ T4385] loop2: p2 start 1702059890 is beyond EOD, truncated [ 971.747480][T13576] Dev loop2: unable to read RDB block 7 [ 971.767331][T13576] loop2: AHDI p1 p2 p3 [ 971.779709][T13576] loop2: partition table partially beyond EOD, truncated [ 971.802863][T13576] loop2: p1 start 1601398130 is beyond EOD, truncated [ 971.826781][T13576] loop2: p2 start 1702059890 is beyond EOD, truncated [ 971.992066][ C0] net_ratelimit: 1 callbacks suppressed [ 971.992087][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 972.007777][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 972.017629][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 972.149697][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 972.159630][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 972.169632][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 972.229699][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 972.239873][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 972.250233][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 972.973302][T13595] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 973.004640][T13595] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 973.015078][T13595] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 973.053284][T13598] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2194'. [ 973.089848][T13598] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2194'. [ 973.177860][T13607] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2198'. [ 973.432607][T13607] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 973.487633][T13607] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 973.549408][T13607] bond0 (unregistering): Released all slaves [ 973.560403][T13610] netlink: 'syz.3.2199': attribute type 1 has an invalid length. [ 973.579917][T13610] 8021q: adding VLAN 0 to HW filter on device bond17 [ 973.812950][T13618] netlink: 176 bytes leftover after parsing attributes in process `syz.7.2203'. [ 974.009539][T13620] misc userio: The device must be registered before sending interrupts [ 975.219731][ T4718] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 975.380860][ T4718] usb 7-1: device descriptor read/64, error -71 [ 975.649565][ T4718] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 975.839666][ T4718] usb 7-1: device descriptor read/64, error -71 [ 975.960250][ T4718] usb usb7-port1: attempt power cycle [ 976.369971][ T4718] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 976.450297][ T4718] usb 7-1: device descriptor read/8, error -71 [ 976.749616][ T4718] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 976.771346][T13674] random: crng reseeded on system resumption [ 976.790832][ T4718] usb 7-1: device descriptor read/8, error -71 [ 976.920264][ T4718] usb usb7-port1: unable to enumerate USB device [ 979.551815][T13698] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 979.688841][T13698] net_ratelimit: 4 callbacks suppressed [ 979.688920][T13698] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 979.910131][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 979.920487][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 979.930791][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 980.069620][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 980.079671][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 980.089624][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 981.309586][ T6954] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 981.504520][ T6954] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 981.536102][ T6954] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 981.556966][ T6954] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 981.615421][ T6954] usb 8-1: config 0 descriptor?? [ 981.647207][ T6954] pwc: Askey VC010 type 2 USB webcam detected. [ 982.229835][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 982.239822][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 982.249719][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 982.533058][ T6954] pwc: recv_control_msg error -32 req 02 val 2b00 [ 982.560572][ T6954] pwc: recv_control_msg error -32 req 02 val 2700 [ 982.568478][ T6954] pwc: recv_control_msg error -32 req 02 val 2c00 [ 982.600088][ T4330] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 982.612453][ T6954] pwc: recv_control_msg error -32 req 04 val 1000 [ 982.639951][ T6954] pwc: recv_control_msg error -32 req 04 val 1300 [ 982.648482][ T6954] pwc: recv_control_msg error -32 req 04 val 1400 [ 982.674346][ T6954] pwc: recv_control_msg error -32 req 02 val 2000 [ 982.770155][ T4330] usb 7-1: device descriptor read/64, error -71 [ 983.001547][ T6954] pwc: recv_control_msg error -71 req 04 val 1500 [ 983.136597][ T6954] pwc: recv_control_msg error -71 req 02 val 2500 [ 983.302160][ T4330] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 983.400867][ T6954] pwc: recv_control_msg error -71 req 02 val 2400 [ 983.420278][ T6954] pwc: recv_control_msg error -71 req 02 val 2600 [ 983.446911][ T6954] pwc: recv_control_msg error -71 req 02 val 2900 [ 983.453909][ T6954] pwc: recv_control_msg error -71 req 02 val 2800 [ 983.461299][ T6954] pwc: recv_control_msg error -71 req 04 val 1100 [ 983.468191][ T6954] pwc: recv_control_msg error -71 req 04 val 1200 [ 983.475993][ T6954] pwc: Registered as video103. [ 983.582868][ T4330] usb 7-1: device descriptor read/64, error -71 [ 983.659050][ T6954] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input30 [ 983.701122][ T4330] usb usb7-port1: attempt power cycle [ 983.805887][ T6954] usb 8-1: USB disconnect, device number 19 [ 984.109579][ T4330] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 984.151729][ T4330] usb 7-1: device descriptor read/8, error -71 [ 984.419670][ T4330] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 984.480173][ T4330] usb 7-1: device descriptor read/8, error -71 [ 984.481201][T13743] random: crng reseeded on system resumption [ 984.619770][ T4330] usb usb7-port1: unable to enumerate USB device [ 986.149686][ C0] net_ratelimit: 6 callbacks suppressed [ 986.149706][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 986.165691][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 986.175547][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 986.355810][T13765] netlink: 763 bytes leftover after parsing attributes in process `syz.7.2251'. [ 987.249690][ T4330] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 987.429594][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 987.440224][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 987.451062][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 987.810736][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 987.820801][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 987.830570][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 988.001444][ T4330] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 988.039716][ T4330] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 988.064692][ T4330] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 988.097581][ T4330] usb 2-1: config 0 descriptor?? [ 988.122768][ T4330] pwc: Askey VC010 type 2 USB webcam detected. [ 988.503493][ T4718] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 988.552143][T13788] misc userio: The device must be registered before sending interrupts [ 988.960519][ T4330] pwc: recv_control_msg error -32 req 02 val 2b00 [ 988.968376][ T4330] pwc: recv_control_msg error -32 req 02 val 2700 [ 988.993818][ T4330] pwc: recv_control_msg error -32 req 02 val 2c00 [ 989.009602][ T4718] usb 6-1: device descriptor read/64, error -71 [ 989.069730][ T4330] pwc: recv_control_msg error -32 req 04 val 1000 [ 989.097131][ T4330] pwc: recv_control_msg error -32 req 04 val 1300 [ 989.123710][ T4330] pwc: recv_control_msg error -32 req 04 val 1400 [ 989.133358][T13797] netlink: 'syz.6.2262': attribute type 1 has an invalid length. [ 989.160298][T13797] 8021q: adding VLAN 0 to HW filter on device bond6 [ 989.191254][ T4330] pwc: recv_control_msg error -32 req 02 val 2000 [ 989.281813][ T4718] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 989.402429][ T4330] pwc: recv_control_msg error -71 req 04 val 1500 [ 989.423668][ T4330] pwc: recv_control_msg error -71 req 02 val 2500 [ 989.439624][ T4718] usb 6-1: device descriptor read/64, error -71 [ 989.473907][ T4330] pwc: recv_control_msg error -71 req 02 val 2400 [ 989.482780][ T4330] pwc: recv_control_msg error -71 req 02 val 2600 [ 989.490047][ T4330] pwc: recv_control_msg error -71 req 02 val 2900 [ 989.497432][ T4330] pwc: recv_control_msg error -71 req 02 val 2800 [ 989.513130][ T4330] pwc: recv_control_msg error -71 req 04 val 1100 [ 989.525225][ T4330] pwc: recv_control_msg error -71 req 04 val 1200 [ 989.549937][ T4330] pwc: Registered as video103. [ 989.566270][ T4330] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input31 [ 989.570904][ T4718] usb usb6-port1: attempt power cycle [ 989.603005][ T4330] usb 2-1: USB disconnect, device number 46 [ 989.855284][T13807] netlink: 'syz.6.2265': attribute type 29 has an invalid length. [ 989.915005][T13807] netlink: 'syz.6.2265': attribute type 29 has an invalid length. [ 990.019685][ T4718] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 990.069712][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 990.085739][ T4718] usb 6-1: device descriptor read/8, error -71 [ 990.369759][ T4718] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 990.435233][ T4718] usb 6-1: device descriptor read/8, error -71 [ 991.017937][ T4718] usb usb6-port1: unable to enumerate USB device [ 991.720696][T13839] binder: 13828:13839 ioctl c0306201 0 returned -14 [ 991.909588][ C1] net_ratelimit: 1 callbacks suppressed [ 991.909607][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 991.909644][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 991.916543][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 991.925847][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 991.935633][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 991.945302][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 992.447309][T13850] loop2: detected capacity change from 0 to 7 [ 992.468929][ T4385] Dev loop2: unable to read RDB block 7 [ 992.477740][ T4385] loop2: AHDI p1 p2 p3 [ 992.503732][ T4385] loop2: partition table partially beyond EOD, truncated [ 992.514874][ T4385] loop2: p1 start 1601398130 is beyond EOD, truncated [ 992.540509][ T4385] loop2: p2 start 1702059890 is beyond EOD, truncated [ 992.573248][T13850] Dev loop2: unable to read RDB block 7 [ 992.589144][T13850] loop2: AHDI p1 p2 p3 [ 992.610680][T13850] loop2: partition table partially beyond EOD, truncated [ 992.645487][T13850] loop2: p1 start 1601398130 is beyond EOD, truncated [ 992.655116][T13850] loop2: p2 start 1702059890 is beyond EOD, truncated [ 992.939803][ T6954] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 993.099550][ T6954] usb 8-1: device descriptor read/64, error -71 [ 993.112029][ T1277] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 993.121525][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.127986][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.189698][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 993.200004][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 993.209901][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 993.379604][ T6954] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 993.559628][ T6954] usb 8-1: device descriptor read/64, error -71 [ 993.679859][ T6954] usb usb8-port1: attempt power cycle [ 993.871215][T13876] binder: 13873:13876 ioctl c0306201 0 returned -14 [ 994.109758][ T6954] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 994.164676][ T6954] usb 8-1: device descriptor read/8, error -71 [ 994.489574][ T6954] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 994.540257][ T6954] usb 8-1: device descriptor read/8, error -71 [ 994.713361][ T6954] usb usb8-port1: unable to enumerate USB device [ 996.287852][T13891] device syzkaller0 entered promiscuous mode [ 996.424698][T13898] random: crng reseeded on system resumption [ 996.958372][T13908] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2300'. [ 997.189631][ C0] net_ratelimit: 6 callbacks suppressed [ 997.189647][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 997.205367][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 997.215420][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 998.265932][T13919] netlink: 'syz.3.2304': attribute type 1 has an invalid length. [ 998.287053][T13919] 8021q: adding VLAN 0 to HW filter on device bond18 [ 999.334289][T13940] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2311'. [ 1000.069624][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1000.079778][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1000.089826][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1000.213245][T13937] misc userio: The device must be registered before sending interrupts [ 1000.309726][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1000.319780][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1000.329589][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1001.235755][T13959] binder: 13954:13959 ioctl c0306201 0 returned -14 [ 1001.256427][T13951] loop2: detected capacity change from 0 to 7 [ 1001.279711][ T4385] Dev loop2: unable to read RDB block 7 [ 1001.285717][ T4385] loop2: AHDI p1 p2 p3 [ 1001.336885][ T4385] loop2: partition table partially beyond EOD, truncated [ 1001.349854][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1001.385705][ T4385] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1001.428899][ T4385] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1001.460862][T13951] Dev loop2: unable to read RDB block 7 [ 1001.470691][T13951] loop2: AHDI p1 p2 p3 [ 1001.500258][T13951] loop2: partition table partially beyond EOD, truncated [ 1001.556947][T13951] loop2: p1 start 1601398130 is beyond EOD, truncated [ 1001.586079][T13951] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1001.904982][T13977] random: crng reseeded on system resumption [ 1004.130150][ T4330] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1004.177072][T14003] netlink: 'syz.5.2329': attribute type 6 has an invalid length. [ 1004.309576][ C1] net_ratelimit: 1 callbacks suppressed [ 1004.309600][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1004.325229][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1004.335116][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1004.377385][ T4330] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1004.408095][ T4330] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1004.453330][ T4330] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1004.470299][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1004.480934][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1004.485669][ T4330] usb 2-1: config 0 descriptor?? [ 1004.491000][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1004.506782][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1004.517950][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1004.529131][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1004.705983][ T4330] pwc: Askey VC010 type 2 USB webcam detected. [ 1004.891979][T14008] binder: 14007:14008 ioctl c0306201 0 returned -14 [ 1005.059562][ T4330] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1005.077469][ T4330] pwc: recv_control_msg error -32 req 02 val 2700 [ 1005.094306][ T4330] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1005.120115][ T4330] pwc: recv_control_msg error -32 req 04 val 1000 [ 1005.140305][ T4330] pwc: recv_control_msg error -32 req 04 val 1300 [ 1005.152203][ T4330] pwc: recv_control_msg error -32 req 04 val 1400 [ 1005.166953][T14020] blktrace: Concurrent blktraces are not allowed on sg0 [ 1005.167880][ T4330] pwc: recv_control_msg error -32 req 02 val 2000 [ 1005.186834][ T4330] pwc: recv_control_msg error -32 req 02 val 2100 [ 1005.198206][ T4330] pwc: recv_control_msg error -32 req 04 val 1500 [ 1005.211252][ T4330] pwc: recv_control_msg error -32 req 02 val 2500 [ 1005.223857][ T4330] pwc: recv_control_msg error -32 req 02 val 2400 [ 1005.243999][ T4330] pwc: recv_control_msg error -32 req 02 val 2600 [ 1005.261474][ T4330] pwc: recv_control_msg error -32 req 02 val 2900 [ 1005.486495][ T4330] pwc: recv_control_msg error -71 req 04 val 1100 [ 1005.501205][ T4330] pwc: recv_control_msg error -71 req 04 val 1200 [ 1005.542197][ T4330] pwc: Registered as video103. [ 1005.565893][ T4330] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input32 [ 1005.617553][ T4330] usb 2-1: USB disconnect, device number 47 [ 1006.024396][T14028] input: syz1 as /devices/virtual/input/input33 [ 1007.669599][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1009.006368][T14057] netlink: 'syz.3.2345': attribute type 1 has an invalid length. [ 1009.038674][T14057] 8021q: adding VLAN 0 to HW filter on device bond19 [ 1009.513484][T14070] input: syz1 as /devices/virtual/input/input34 [ 1011.189589][ C1] net_ratelimit: 8 callbacks suppressed [ 1011.189610][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1011.205174][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1011.215088][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1011.439663][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1011.449666][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1011.460106][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1011.470236][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1011.480128][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1011.490085][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1012.449519][ T14] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1012.649808][ T14] usb 4-1: Using ep0 maxpacket: 16 [ 1012.657789][ T14] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1012.718862][ T14] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1012.760066][ T14] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1012.795095][ T14] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1012.857031][ T14] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1012.889881][ T14] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1012.903813][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.912576][ T14] usb 4-1: Product: syz [ 1012.917080][ T14] usb 4-1: Manufacturer: syz [ 1012.972037][ T14] usb 4-1: SerialNumber: syz [ 1013.019533][T12387] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 1013.241781][T12387] usb 8-1: config 220 has an invalid descriptor of length 1, skipping remainder of the config [ 1013.331213][T12387] usb 8-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 1013.359847][T12387] usb 8-1: config 220 interface 0 has no altsetting 0 [ 1013.383672][T12387] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1013.399750][T12387] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1013.410425][T12387] usb 8-1: Product: syz [ 1013.419635][T12387] usb 8-1: Manufacturer: syz [ 1013.424672][T12387] usb 8-1: SerialNumber: syz [ 1013.472722][ T14] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 1013.491045][ T14] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 1013.512124][ T14] usb 4-1: 1:2 : does not exist [ 1013.594949][ T14] usb 4-1: USB disconnect, device number 53 [ 1013.664177][T12387] usb 8-1: Found UVC 0.00 device syz (8086:0b07) [ 1013.721769][T12387] usb 8-1: No valid video chain found. [ 1013.743910][T12387] usb 8-1: USB disconnect, device number 24 [ 1014.036355][T14098] device syzkaller0 entered promiscuous mode [ 1015.585424][T14112] random: crng reseeded on system resumption [ 1015.749650][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1015.767164][T14121] netlink: 'syz.6.2367': attribute type 39 has an invalid length. [ 1019.089706][ T14] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1019.429563][ C1] net_ratelimit: 8 callbacks suppressed [ 1019.429585][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1019.445295][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1019.455111][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1019.669617][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1019.679630][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1019.689532][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1019.699494][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1019.709287][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1019.719149][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1020.079695][ T14] usb 4-1: Using ep0 maxpacket: 16 [ 1020.269886][ T14] usb 4-1: device descriptor read/all, error -71 [ 1022.869607][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1023.399614][ T4330] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1023.609575][ T4330] usb 6-1: Using ep0 maxpacket: 16 [ 1023.631772][ T4330] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1023.670666][ T4330] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1023.689641][ T4330] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1023.708199][ T4330] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1023.728522][ T4330] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1023.747473][ T4330] usb 6-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1023.757476][ T4330] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1023.769976][ T4330] usb 6-1: Product: syz [ 1023.780484][ T4330] usb 6-1: Manufacturer: syz [ 1023.789913][ T4330] usb 6-1: SerialNumber: syz [ 1023.855522][T14213] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1024.238920][ T4330] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 1024.257538][ T4330] snd-usb-audio: probe of 6-1:1.0 failed with error -22 [ 1024.269843][ T4330] usb 6-1: 1:2 : does not exist [ 1024.301205][ T4330] usb 6-1: USB disconnect, device number 50 [ 1024.682997][ T4346] udevd[4346]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1026.140729][T14240] netlink: 'syz.7.2404': attribute type 1 has an invalid length. [ 1026.189735][T14240] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1026.348395][T14244] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2406'. [ 1026.599858][ T4330] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1026.801628][ T4330] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1026.826292][ T4330] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 1026.831184][T14256] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1026.853533][ T4330] usb 2-1: config 220 interface 0 has no altsetting 0 [ 1026.872102][ T4330] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1026.890831][ T4330] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.899204][ T4330] usb 2-1: Product: syz [ 1026.904133][ T4330] usb 2-1: Manufacturer: syz [ 1026.909025][ T4330] usb 2-1: SerialNumber: syz [ 1026.945595][T14256] net_ratelimit: 9 callbacks suppressed [ 1026.945654][T14256] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1026.951643][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1026.951947][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1026.952192][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1027.137335][ T4330] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 1027.144561][ T4330] usb 2-1: No valid video chain found. [ 1027.181588][ T4330] usb 2-1: USB disconnect, device number 48 [ 1027.269688][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1027.279838][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1027.289760][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1027.299735][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1027.309573][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1027.319654][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1027.709742][ T6954] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1028.159639][ T6954] usb 7-1: Using ep0 maxpacket: 16 [ 1028.193361][ T6954] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1028.248017][ T6954] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1028.304538][ T6954] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1028.355537][ T6954] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1028.416018][ T6954] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1028.490295][ T6954] usb 7-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1028.535180][ T6954] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.579689][ T6954] usb 7-1: Product: syz [ 1028.592114][ T6954] usb 7-1: Manufacturer: syz [ 1028.606853][ T6954] usb 7-1: SerialNumber: syz [ 1029.065981][ T6954] usb 7-1: Audio class v2/v3 interfaces need an interface association [ 1029.106560][ T6954] snd-usb-audio: probe of 7-1:1.0 failed with error -22 [ 1029.157732][ T6954] usb 7-1: 1:2 : does not exist [ 1029.244681][ T6954] usb 7-1: USB disconnect, device number 29 [ 1029.556110][ T4385] udevd[4385]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1030.576847][T14316] blktrace: Concurrent blktraces are not allowed on sg0 [ 1031.372809][T14318] netlink: 112 bytes leftover after parsing attributes in process `syz.6.2433'. [ 1031.389637][T12387] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1031.589841][T12387] usb 2-1: Using ep0 maxpacket: 16 [ 1031.601701][T12387] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1031.646321][T12387] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1031.692253][T12387] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1031.724730][T12387] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1031.771379][T12387] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1031.807408][T12387] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1031.827145][T12387] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.848699][T12387] usb 2-1: Product: syz [ 1031.871670][T12387] usb 2-1: Manufacturer: syz [ 1031.876708][T12387] usb 2-1: SerialNumber: syz [ 1032.324236][T12387] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 1032.360066][T12387] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 1032.387761][T12387] usb 2-1: 1:2 : does not exist [ 1032.459574][T12387] usb 2-1: USB disconnect, device number 49 [ 1033.019894][T14346] blktrace: Concurrent blktraces are not allowed on sg0 [ 1033.067839][ T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.211561][ T4385] udevd[4385]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1033.231079][ T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.238752][T14353] netlink: 'syz.5.2448': attribute type 3 has an invalid length. [ 1033.405569][T14353] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2448'. [ 1033.460585][ T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1033.643650][ T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1034.455382][T13040] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1034.468324][T13040] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1034.477799][T13040] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1034.488827][T13040] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1034.526870][T13040] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1034.534737][T13040] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1034.550263][ C0] net_ratelimit: 9 callbacks suppressed [ 1034.550282][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1034.566080][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1034.576030][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1034.586318][ T4280] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1034.620613][ T4280] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1034.628055][ T4280] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1034.636068][ T4280] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1034.655816][ T4280] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1034.663424][ T4280] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1034.919552][T12387] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1035.109571][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1035.119673][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1035.130275][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1035.151283][T12387] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 1035.168766][T14389] xt_hashlimit: size too large, truncated to 1048576 [ 1035.179852][T12387] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1035.216995][T12387] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1035.270282][T12387] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1035.297990][T12387] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1035.316810][T12387] usb 2-1: Manufacturer: syz [ 1035.343837][T12387] usb 2-1: config 0 descriptor?? [ 1035.369870][ T4311] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1035.375178][T12387] igorplugusb 2-1:0.0: incorrect number of endpoints [ 1035.562345][T14377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1035.579802][ T4311] usb 6-1: Using ep0 maxpacket: 16 [ 1035.585621][T14377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1035.599884][ T4311] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1035.813580][ T4311] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1035.828331][ T4311] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1035.837578][ T4311] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1035.849123][ T4311] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1035.881446][ T4311] usb 6-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1035.978346][T14402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1035.989779][T14402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1036.684259][ T4311] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.697054][ T4311] usb 6-1: Product: syz [ 1036.705714][ T4311] usb 6-1: Manufacturer: syz [ 1036.710747][ T4280] Bluetooth: hci3: command 0x0409 tx timeout [ 1036.720190][ T4311] usb 6-1: SerialNumber: syz [ 1037.057589][ T9] bond1: (slave gretap1): Releasing active interface [ 1037.096852][T14372] chnl_net:caif_netlink_parms(): no params data found [ 1037.167848][ T4311] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 1037.183047][ T4311] snd-usb-audio: probe of 6-1:1.0 failed with error -22 [ 1037.206244][ T4311] usb 6-1: 1:2 : does not exist [ 1037.267646][ T4311] usb 6-1: USB disconnect, device number 51 [ 1037.330643][ T4346] udevd[4346]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1037.654431][T14372] bridge0: port 1(bridge_slave_0) entered blocking state [ 1037.695075][T14372] bridge0: port 1(bridge_slave_0) entered disabled state [ 1037.707587][T14372] device bridge_slave_0 entered promiscuous mode [ 1037.747986][T14372] bridge0: port 2(bridge_slave_1) entered blocking state [ 1037.808411][T14372] bridge0: port 2(bridge_slave_1) entered disabled state [ 1037.820091][ T4711] usb 2-1: USB disconnect, device number 50 [ 1037.903085][T14372] device bridge_slave_1 entered promiscuous mode [ 1037.989593][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1037.999773][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1038.009781][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1038.212628][T14372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1038.236978][ T9] device hsr_slave_0 left promiscuous mode [ 1038.271548][ T9] device hsr_slave_1 left promiscuous mode [ 1038.282852][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1038.331021][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1038.352248][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1038.370167][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1038.395643][ T9] bridge0: port 3(batadv0) entered disabled state [ 1038.436471][ T9] device bridge_slave_1 left promiscuous mode [ 1038.453815][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 1038.497853][ T9] device bridge_slave_0 left promiscuous mode [ 1038.506186][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 1038.629863][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1038.734676][ T9] device veth1_macvtap left promiscuous mode [ 1038.784994][ T9] device veth0_macvtap left promiscuous mode [ 1038.800550][ T4280] Bluetooth: hci3: command 0x041b tx timeout [ 1038.807017][ T9] device veth1_vlan left promiscuous mode [ 1039.610812][T14459] random: crng reseeded on system resumption [ 1040.869837][T13040] Bluetooth: hci3: command 0x040f tx timeout [ 1040.907771][ T9] bond19 (unregistering): Released all slaves [ 1041.246911][ T9] bond18 (unregistering): Released all slaves [ 1041.519569][ C1] net_ratelimit: 4 callbacks suppressed [ 1041.519587][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1041.535370][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1041.545376][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1041.582800][ T9] bond17 (unregistering): Released all slaves [ 1042.057326][ T9] bond16 (unregistering): Released all slaves [ 1042.069580][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1042.079559][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1042.089485][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1042.368008][ T9] bond15 (unregistering): Released all slaves [ 1042.611771][ T9] bond14 (unregistering): Released all slaves [ 1042.959642][T13040] Bluetooth: hci3: command 0x0419 tx timeout [ 1043.068967][ T9] bond13 (unregistering): Released all slaves [ 1043.326931][ T9] bond12 (unregistering): Released all slaves [ 1043.577256][ T9] bond11 (unregistering): Released all slaves [ 1043.809020][ T9] bond10 (unregistering): Released all slaves [ 1044.064455][ T9] bond9 (unregistering): Released all slaves [ 1044.332905][ T9] bond8 (unregistering): Released all slaves [ 1045.033616][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1045.043562][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1045.053498][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1045.108678][ T9] bond7 (unregistering): Released all slaves [ 1045.403684][ T9] bond6 (unregistering): Released all slaves [ 1045.443615][T14498] xt_hashlimit: size too large, truncated to 1048576 [ 1045.591867][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1045.715330][ T9] bond5 (unregistering): Released all slaves [ 1046.007341][ T9] bond4 (unregistering): Released all slaves [ 1046.220842][ T9] bond3 (unregistering): Released all slaves [ 1046.434575][ T9] bond2 (unregistering): Released all slaves [ 1046.696653][ T9] bond1 (unregistering): Released all slaves [ 1047.484039][ T9] team0 (unregistering): Port device team_slave_1 removed [ 1047.558142][ T9] team0 (unregistering): Port device team_slave_0 removed [ 1047.634044][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1047.696513][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1048.132437][ T9] bond0 (unregistering): Released all slaves [ 1048.266490][T14372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1048.307330][T14470] netlink: 'syz.7.2476': attribute type 1 has an invalid length. [ 1048.488347][T14490] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1048.511697][T14490] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 1048.519228][T14490] net_ratelimit: 2 callbacks suppressed [ 1048.519238][T14490] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1048.549639][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1048.559635][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1048.569320][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1048.617541][T14516] random: crng reseeded on system resumption [ 1048.791382][T14372] team0: Port device team_slave_0 added [ 1048.855836][T14372] team0: Port device team_slave_1 added [ 1048.995053][T14372] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1049.050186][T14372] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1049.163655][T14372] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1049.189608][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1049.199662][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1049.209546][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1049.222820][T14372] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1049.230737][T14372] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1049.296412][T14372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1049.558154][T14372] device hsr_slave_0 entered promiscuous mode [ 1049.587739][T14372] device hsr_slave_1 entered promiscuous mode [ 1049.609152][T14372] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1049.635331][T14372] Cannot create hsr debugfs directory [ 1050.800225][T14372] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1050.836748][T14372] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1050.866730][T14372] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1050.888468][T14372] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1051.094899][T14372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1051.131095][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1051.174962][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1051.213770][T14372] 8021q: adding VLAN 0 to HW filter on device team0 [ 1051.260860][T13944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1051.277611][T13944] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1051.303245][T13944] bridge0: port 1(bridge_slave_0) entered blocking state [ 1051.310621][T13944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1051.368543][T13944] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1051.388581][T13944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1051.414157][T13944] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1051.442201][T13944] bridge0: port 2(bridge_slave_1) entered blocking state [ 1051.449586][T13944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1051.478905][T13944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1051.512338][T14555] xt_hashlimit: size too large, truncated to 1048576 [ 1051.522605][T13944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1051.551496][T13944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1051.576029][T13944] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1051.615669][T13944] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1051.637694][T13944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1051.677966][T13944] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1051.703231][T13944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1051.714826][T13944] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1051.727585][T13944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1051.746908][T13944] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1051.827202][T14372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1051.909663][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1051.919568][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1051.929557][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1053.075736][ T8414] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1053.103547][ T8414] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1053.145897][T14372] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1053.189719][T14526] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 1053.391680][T14526] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 1053.400967][T14526] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1053.439643][T14526] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1053.492352][T14526] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1053.532688][T14526] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1053.565270][T14526] usb 8-1: Manufacturer: syz [ 1053.600336][T14526] usb 8-1: config 0 descriptor?? [ 1053.630576][T14526] igorplugusb 8-1:0.0: incorrect number of endpoints [ 1053.830697][T14582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1053.866906][T14582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1054.098793][T14609] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2509'. [ 1054.108229][T14609] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2509'. [ 1054.119385][T14609] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2509'. [ 1054.215829][T14610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1054.225780][T14610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1054.240176][T14610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1054.250459][T14610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1054.579848][ T1277] net_ratelimit: 3 callbacks suppressed [ 1054.579887][ T1277] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1054.597320][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.605205][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.428846][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1055.451842][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1055.499146][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1055.518549][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1055.555005][T14372] device veth0_vlan entered promiscuous mode [ 1055.573562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1055.594834][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1055.602422][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1055.602744][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1055.602968][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1055.711868][T14372] device veth1_vlan entered promiscuous mode [ 1055.857890][T13944] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1055.895718][T13944] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1056.005039][ T4330] usb 8-1: USB disconnect, device number 25 [ 1056.046144][T13944] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1056.229578][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1056.239551][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1056.249500][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1056.301722][T13944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1056.494555][T14372] device veth0_macvtap entered promiscuous mode [ 1056.547190][T14372] device veth1_macvtap entered promiscuous mode [ 1056.595018][T14372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1056.685349][T14372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1056.709764][T14372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1056.729281][T14372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1056.746129][T14372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1056.768942][T14372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1056.784502][T14372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1056.849717][T14372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1056.880295][T14372] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1056.918571][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1057.053748][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1057.081053][T14372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1057.141215][T14642] misc userio: The device must be registered before sending interrupts [ 1057.468936][T14372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1057.525697][T14372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1057.551200][T14372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1057.590421][T14372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1057.640462][T14372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1057.807371][T14372] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1057.960306][T14372] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1058.044390][T14372] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1058.164337][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1058.214742][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1058.307678][T14372] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1058.361173][T14372] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1058.443637][T14372] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1058.569476][T14372] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1058.839978][ T4501] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1058.847980][ T4501] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1058.927193][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1058.974646][ T4501] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1059.020320][ T4501] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1059.044648][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1059.189826][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1059.199771][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1059.209658][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1059.240848][T14673] ªªªªªª: renamed from vlan0 [ 1059.265474][T14675] netlink: 160 bytes leftover after parsing attributes in process `syz.6.2525'. [ 1059.442831][T14678] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2526'. [ 1059.650347][T14679] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2526'. [ 1059.689459][T14679] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2526'. [ 1059.829574][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1059.840160][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1059.850620][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1059.996187][T14679] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2526'. [ 1060.012380][T14679] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2526'. [ 1062.789803][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1062.799783][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1062.809670][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1063.220164][T14727] xt_hashlimit: size too large, truncated to 1048576 [ 1063.509897][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1063.517910][T14734] device syzkaller0 entered promiscuous mode [ 1063.520344][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1063.535654][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1063.547998][T14737] netlink: 'syz.7.2542': attribute type 1 has an invalid length. [ 1064.800689][T14758] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2547'. [ 1064.900435][T14758] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2547'. [ 1064.970723][T14758] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2547'. [ 1065.321413][T14758] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2547'. [ 1065.352988][T14758] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2547'. [ 1065.507222][T14765] misc userio: The device must be registered before sending interrupts [ 1066.179645][T14526] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 1066.441092][T14526] usb 8-1: config 220 has an invalid interface number: 76 but max is 2 [ 1066.466219][T14526] usb 8-1: config 220 descriptor has 1 excess byte, ignoring [ 1066.487285][T14526] usb 8-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 1066.536191][T14526] usb 8-1: config 220 has no interface number 1 [ 1066.561664][T14526] usb 8-1: config 220 interface 0 has no altsetting 0 [ 1066.568621][T14526] usb 8-1: config 220 interface 76 has no altsetting 0 [ 1066.627435][T14526] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1066.649568][T14526] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.689863][T14526] usb 8-1: Product: syz [ 1066.694120][T14526] usb 8-1: Manufacturer: syz [ 1066.709886][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1066.719851][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1066.729729][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1066.749563][T14526] usb 8-1: SerialNumber: syz [ 1066.997468][T14526] usb 8-1: Found UVC 7.01 device syz (8086:0b07) [ 1067.029763][T14526] usb 8-1: No valid video chain found. [ 1067.079746][T14526] usb 8-1: USB disconnect, device number 26 [ 1067.359649][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1067.369760][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1067.379671][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1067.388882][T14811] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2564'. [ 1067.471523][T14811] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2564'. [ 1067.512646][T14811] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2564'. [ 1067.526904][T14811] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2564'. [ 1067.538844][T14811] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2564'. [ 1067.980355][T14814] random: crng reseeded on system resumption [ 1070.309670][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.0 [ 1070.639544][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1070.649601][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1070.659900][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1071.480397][ T4316] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1071.680229][ T4316] usb 7-1: Using ep0 maxpacket: 16 [ 1071.688999][ T4316] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1071.730340][ T4316] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1071.769616][ T4316] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1071.816255][ T4316] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1071.886169][ T4316] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1071.930280][ T4316] usb 7-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1071.944149][ T4316] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1071.954619][ T4316] usb 7-1: Product: syz [ 1071.958838][ T4316] usb 7-1: Manufacturer: syz [ 1071.966801][ T4316] usb 7-1: SerialNumber: syz [ 1072.177751][T14908] xt_hashlimit: size too large, truncated to 1048576 [ 1072.410595][ T4316] usb 7-1: Audio class v2/v3 interfaces need an interface association [ 1072.438925][ T4316] snd-usb-audio: probe of 7-1:1.0 failed with error -22 [ 1072.491644][ T4316] usb 7-1: 1:2 : does not exist [ 1072.570090][ T4316] usb 7-1: USB disconnect, device number 30 [ 1073.999530][ C1] net_ratelimit: 3 callbacks suppressed [ 1073.999548][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1074.015626][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1074.025511][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1074.247691][T14945] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2601'. [ 1074.265643][T14945] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2601'. [ 1074.278590][T14945] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2601'. [ 1074.289951][T14945] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2601'. [ 1074.300287][T14945] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2601'. [ 1074.674036][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1074.683826][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1074.693705][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1074.834948][T14947] device syzkaller0 entered promiscuous mode [ 1075.359731][ T4316] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1075.561023][ T4316] usb 7-1: Using ep0 maxpacket: 16 [ 1075.604704][ T4316] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1075.627406][ T4316] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1075.650639][ T4316] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1075.660291][ T4316] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1075.672470][ T4316] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1075.711276][ T6954] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 1075.720973][ T4316] usb 7-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1075.736014][ T4316] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1075.744953][ T4316] usb 7-1: Product: syz [ 1075.749175][ T4316] usb 7-1: Manufacturer: syz [ 1075.754511][ T4316] usb 7-1: SerialNumber: syz [ 1075.959623][ T6954] usb 8-1: config 220 has an invalid interface number: 76 but max is 2 [ 1075.968023][ T6954] usb 8-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1075.984271][ T6954] usb 8-1: config 220 descriptor has 1 excess byte, ignoring [ 1075.992047][ T6954] usb 8-1: config 220 has no interface number 2 [ 1075.998518][ T6954] usb 8-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1076.013328][ T6954] usb 8-1: config 220 interface 0 has no altsetting 0 [ 1076.020450][ T6954] usb 8-1: config 220 interface 76 has no altsetting 0 [ 1076.027486][ T6954] usb 8-1: config 220 interface 1 has no altsetting 0 [ 1076.065265][ T6954] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1076.074837][ T6954] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1076.083316][ T6954] usb 8-1: Product: syz [ 1076.088449][ T6954] usb 8-1: Manufacturer: syz [ 1076.093418][ T6954] usb 8-1: SerialNumber: syz [ 1076.206330][ T4316] usb 7-1: Audio class v2/v3 interfaces need an interface association [ 1076.231707][ T4316] snd-usb-audio: probe of 7-1:1.0 failed with error -22 [ 1076.252952][ T4316] usb 7-1: 1:2 : does not exist [ 1076.292680][ T4316] usb 7-1: USB disconnect, device number 31 [ 1076.338094][ T6954] usb 8-1: Found UVC 7.01 device syz (8086:0b07) [ 1076.355231][ T6954] usb 8-1: No valid video chain found. [ 1076.398240][ T6954] usb 8-1: USB disconnect, device number 27 [ 1076.580652][T14961] udevd[14961]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1077.832421][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1077.842614][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1077.853357][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1078.389626][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1079.864863][T14973] netlink: 'syz.1.2612': attribute type 1 has an invalid length. [ 1079.906677][T14993] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2615'. [ 1080.302060][T15012] xt_hashlimit: size too large, truncated to 1048576 [ 1080.470170][ T4311] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1080.549699][ T6954] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 1080.679594][ T4311] usb 9-1: Using ep0 maxpacket: 16 [ 1080.688313][ T4311] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1080.724189][ T4311] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1080.761964][ T4311] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1080.773932][ T6954] usb 8-1: config 220 has an invalid interface number: 76 but max is 2 [ 1080.789325][ T6954] usb 8-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1080.838120][ T4311] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1080.857764][ T6954] usb 8-1: config 220 descriptor has 1 excess byte, ignoring [ 1080.887128][ T6954] usb 8-1: config 220 has no interface number 2 [ 1080.895099][ T4311] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1080.922370][ T6954] usb 8-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1080.945395][ T4311] usb 9-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1080.990520][ T6954] usb 8-1: config 220 interface 0 has no altsetting 0 [ 1080.997633][ T4311] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1081.025074][ T6954] usb 8-1: config 220 interface 76 has no altsetting 0 [ 1081.036020][ T4311] usb 9-1: Product: syz [ 1081.046416][ T4311] usb 9-1: Manufacturer: syz [ 1081.051736][ T6954] usb 8-1: config 220 interface 1 has no altsetting 0 [ 1081.063242][ T4311] usb 9-1: SerialNumber: syz [ 1081.075166][ T6954] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1081.116959][ T6954] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1081.170255][ T6954] usb 8-1: Product: syz [ 1081.174633][ T6954] usb 8-1: Manufacturer: syz [ 1081.187939][ T6954] usb 8-1: SerialNumber: syz [ 1081.189943][ C0] net_ratelimit: 2 callbacks suppressed [ 1081.190006][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1081.208569][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1081.218592][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1081.471144][ T6954] usb 8-1: Found UVC 7.01 device syz (8086:0b07) [ 1081.484559][ T6954] usb 8-1: No valid video chain found. [ 1081.514287][ T4311] usb 9-1: Audio class v2/v3 interfaces need an interface association [ 1081.535149][ T4311] snd-usb-audio: probe of 9-1:1.0 failed with error -22 [ 1081.563670][ T6954] usb 8-1: USB disconnect, device number 28 [ 1081.579780][ T4330] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1081.595416][ T4311] usb 9-1: 1:2 : does not exist [ 1081.646642][ T4311] usb 9-1: USB disconnect, device number 2 [ 1081.749586][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1081.759845][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1081.769882][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1081.801901][ T4330] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 1081.817909][ T4330] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1081.836975][T15037] device macvlan0 entered promiscuous mode [ 1081.843483][ T4330] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1081.862635][ T4330] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1081.882221][ T4330] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1081.907213][ T4330] usb 2-1: Manufacturer: syz [ 1081.933190][ T4330] usb 2-1: config 0 descriptor?? [ 1081.946478][ T4330] igorplugusb 2-1:0.0: incorrect number of endpoints [ 1082.164133][T15029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1082.185354][T15029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1082.402058][T15046] netlink: 'syz.8.2629': attribute type 1 has an invalid length. [ 1082.437721][T15046] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1082.516327][T15052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1082.526125][T15052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1083.206219][T15046] bond1: (slave gretap1): making interface the new active one [ 1083.215107][T15046] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1083.224215][T11364] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 1083.810263][T15054] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2630'. [ 1084.385652][T14526] usb 2-1: USB disconnect, device number 51 [ 1084.629722][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1084.639674][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1084.649526][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1085.090252][T15074] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2637'. [ 1085.199596][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1085.842208][T14526] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1086.079592][T14526] usb 2-1: Using ep0 maxpacket: 16 [ 1086.087318][T14526] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1086.111284][T14526] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1086.157770][T14526] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1086.189505][T14526] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1086.227088][T14526] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1086.464122][T14526] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1086.473489][T14526] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.482123][T14526] usb 2-1: Product: syz [ 1086.486432][T14526] usb 2-1: Manufacturer: syz [ 1086.491521][T14526] usb 2-1: SerialNumber: syz [ 1086.556129][T15098] input: syz1 as /devices/virtual/input/input35 [ 1086.914017][T14526] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 1086.929853][ T4330] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 1086.945861][T14526] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 1086.965685][T14526] usb 2-1: 1:2 : does not exist [ 1086.993857][T14526] usb 2-1: USB disconnect, device number 52 [ 1087.111631][ T4330] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 1087.139721][ T4330] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1087.179632][ T4330] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1087.228241][ T4330] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1087.262434][ T4330] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1087.278584][ T4330] usb 8-1: Manufacturer: syz [ 1087.300609][ T4330] usb 8-1: config 0 descriptor?? [ 1087.310170][T15116] netlink: 'syz.8.2650': attribute type 1 has an invalid length. [ 1087.326002][ T4330] igorplugusb 8-1:0.0: incorrect number of endpoints [ 1087.346030][T15116] netlink: 'syz.8.2650': attribute type 2 has an invalid length. [ 1087.535228][T15102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1087.560404][T15102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1087.926618][T15132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1087.938393][T15132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1088.952628][ C0] net_ratelimit: 2 callbacks suppressed [ 1088.952644][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1088.968187][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1088.978182][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1089.246525][T15131] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2655'. [ 1089.295194][T15131] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2655'. [ 1089.325911][T15131] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2655'. [ 1089.355274][T15131] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2655'. [ 1089.384498][T15131] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2655'. [ 1089.718605][T15144] xt_hashlimit: size too large, truncated to 1048576 [ 1090.110280][ T6954] usb 8-1: USB disconnect, device number 29 [ 1091.036309][T15151] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1091.117153][T15162] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2662'. [ 1091.128508][T15151] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 1091.170112][T15151] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1091.446323][T15168] device syzkaller0 entered promiscuous mode [ 1091.504887][T15171] netlink: 'syz.6.2665': attribute type 16 has an invalid length. [ 1091.526451][T15171] netlink: 'syz.6.2665': attribute type 17 has an invalid length. [ 1091.678329][T15171] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1091.739849][T14523] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 1091.764692][T15171] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1091.931447][T14523] usb 8-1: Using ep0 maxpacket: 16 [ 1091.943622][T14523] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1091.985031][T14523] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1092.036668][T14523] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1092.079740][T14523] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1092.122329][T14523] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1092.185961][T14523] usb 8-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 1092.229570][T14523] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1092.248074][T14523] usb 8-1: Product: syz [ 1092.268346][T14523] usb 8-1: Manufacturer: syz [ 1092.278522][T14523] usb 8-1: SerialNumber: syz [ 1092.720434][T14523] usb 8-1: Audio class v2/v3 interfaces need an interface association [ 1092.728949][T14523] snd-usb-audio: probe of 8-1:1.0 failed with error -22 [ 1092.785478][T14523] usb 8-1: 1:2 : does not exist [ 1092.808712][T14523] usb 8-1: USB disconnect, device number 30 [ 1092.876340][T14509] udevd[14509]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1093.029685][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1093.039715][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1093.050087][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1093.479558][T15197] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2671'. [ 1093.711893][T15197] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2671'. [ 1093.723479][T15197] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2671'. [ 1093.735693][T15197] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2671'. [ 1093.746337][T15197] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2671'. [ 1094.115544][T15204] device syzkaller0 entered promiscuous mode [ 1094.959602][ T6954] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1095.182297][ T6954] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 1095.201746][ T6954] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1095.263348][ T6954] usb 6-1: config 220 descriptor has 1 excess byte, ignoring [ 1095.297019][ T6954] usb 6-1: config 220 has no interface number 2 [ 1095.340330][ T6954] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1095.399649][ T6954] usb 6-1: config 220 interface 0 has no altsetting 0 [ 1095.424967][ T6954] usb 6-1: config 220 interface 76 has no altsetting 0 [ 1095.452214][ T6954] usb 6-1: config 220 interface 1 has no altsetting 0 [ 1095.486528][ T6954] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1095.534204][ T6954] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.575920][T15226] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1095.620717][ T6954] usb 6-1: Product: syz [ 1095.625098][ T6954] usb 6-1: Manufacturer: syz [ 1095.648680][ T6954] usb 6-1: SerialNumber: syz [ 1095.775942][T15226] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1095.787567][T15226] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1095.912740][ T6954] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 1095.930452][ T6954] usb 6-1: No valid video chain found. [ 1095.982750][T15226] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1096.054476][ T6954] usb 6-1: USB disconnect, device number 52 [ 1096.164609][T15235] device syzkaller0 entered promiscuous mode [ 1096.479646][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1096.489623][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1096.499657][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1096.509474][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1100.149656][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1100.159672][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1100.169604][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1100.748350][T15243] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1100.778601][T15258] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2687'. [ 1101.493639][T15284] device syzkaller0 entered promiscuous mode [ 1101.605040][T15284] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2695'. [ 1101.713282][T15287] device syzkaller0 entered promiscuous mode [ 1102.311762][T15299] blktrace: Concurrent blktraces are not allowed on sg0 [ 1103.517918][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1103.527970][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1103.538055][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1105.788070][T15300] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2700'. [ 1105.799020][T15315] device macvlan0 entered promiscuous mode [ 1106.125674][T15327] sctp: [Deprecated]: syz.1.2711 (pid 15327) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1106.125674][T15327] Use struct sctp_sack_info instead [ 1106.170411][T15331] sctp: [Deprecated]: syz.6.2710 (pid 15331) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1106.170411][T15331] Use struct sctp_sack_info instead [ 1106.478541][T15340] blktrace: Concurrent blktraces are not allowed on sg0 [ 1107.029612][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1107.039797][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1107.049918][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1107.553040][T15366] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2720'. [ 1107.981155][T15369] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2720'. [ 1108.079926][T15369] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2720'. [ 1108.110851][T15371] device macvlan0 entered promiscuous mode [ 1108.155366][T15369] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2720'. [ 1108.257833][T15369] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2720'. [ 1109.977727][T15399] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2731'. [ 1109.988424][T15399] netlink: 'syz.5.2731': attribute type 18 has an invalid length. [ 1110.036224][T15399] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2731'. [ 1110.077645][T15399] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1110.086814][T15399] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1110.095699][T15399] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1110.104652][T15399] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1110.170038][T15399] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2731'. [ 1110.192561][T15399] netlink: 'syz.5.2731': attribute type 18 has an invalid length. [ 1110.247553][T15399] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2731'. [ 1110.389613][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1110.399788][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1111.189619][ T4280] Bluetooth: hci3: command 0x0405 tx timeout [ 1111.274927][T15432] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2742'. [ 1111.294352][T15432] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2742'. [ 1111.306195][T15432] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2742'. [ 1111.317341][T15432] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2742'. [ 1111.328331][T15432] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2742'. [ 1111.994520][T15436] blktrace: Concurrent blktraces are not allowed on sg0 [ 1113.424896][T15462] device syzkaller0 entered promiscuous mode [ 1113.478717][T15466] ------------[ cut here ]------------ [ 1113.484931][T15466] WARNING: CPU: 1 PID: 15466 at include/linux/skbuff.h:2876 em_nbyte_match+0x2cc/0x3e0 [ 1113.494880][T15466] Modules linked in: [ 1113.498927][T15466] CPU: 1 PID: 15466 Comm: syz.1.2751 Not tainted syzkaller #0 [ 1113.506635][T15466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1113.516760][T15466] RIP: 0010:em_nbyte_match+0x2cc/0x3e0 [ 1113.522386][T15466] Code: c0 eb 07 e8 26 53 1a f9 31 c0 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 10 53 1a f9 0f 0b e9 e5 fe ff ff e8 04 53 1a f9 <0f> 0b e9 00 fe ff ff 89 d1 80 e1 07 fe c1 38 c1 0f 8c 7a fd ff ff [ 1113.543236][T15466] RSP: 0018:ffffc90004c9f118 EFLAGS: 00010287 [ 1113.549492][T15466] RAX: ffffffff8868218c RBX: ffff88805ff79dc0 RCX: 0000000000080000 [ 1113.557714][T15466] RDX: ffffc9000ef42000 RSI: 0000000000000538 RDI: 0000000000000539 [ 1113.565778][T15466] RBP: 000000000000ffff R08: ffff888025008000 R09: 0000000000000003 [ 1113.573826][T15466] R10: 0000000000000002 R11: 0000000000000002 R12: dffffc0000000000 [ 1113.581844][T15466] R13: 1ffff1100bfef3ce R14: ffff88801bee6ed8 R15: 1ffff110037dcddb [ 1113.589881][T15466] FS: 00007f89e47826c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1113.599020][T15466] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1113.605850][T15466] CR2: 00007f89e4781ff8 CR3: 000000005dc9f000 CR4: 00000000003506e0 [ 1113.613869][T15466] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1113.621882][T15466] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1113.629998][T15466] Call Trace: [ 1113.633323][T15466] [ 1113.636370][T15466] __tcf_em_tree_match+0x1cb/0x7a0 [ 1113.641566][T15466] ? tcf_em_tree_dump+0x900/0x900 [ 1113.646818][T15466] ? rcu_read_lock_held+0x40/0x40 [ 1113.651906][T15466] ? __lock_acquire+0x12f4/0x7d10 [ 1113.657020][T15466] basic_classify+0x111/0x2c0 [ 1113.661859][T15466] tcf_classify+0x331/0xbf0 [ 1113.666408][T15466] multiq_enqueue+0xfb/0x4b0 [ 1113.669913][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1113.671140][T15466] ? sch_tree_unlock+0x1b0/0x1b0 [ 1113.681599][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1113.685675][T15466] ? do_raw_spin_lock+0x128/0x2f0 [ 1113.696219][ C0] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.40 [ 1113.700409][T15466] ? __rwlock_init+0x140/0x140 [ 1113.714823][T15466] dev_qdisc_enqueue+0x4c/0x2b0 [ 1113.719766][T15466] __dev_queue_xmit+0xfdc/0x37c0 [ 1113.724761][T15466] ? __dev_queue_xmit+0x26b/0x37c0 [ 1113.729935][T15466] ? netdev_core_pick_tx+0x340/0x340 [ 1113.735257][T15466] ? packet_parse_headers+0x7b8/0xab0 [ 1113.740959][T15466] ? packet_parse_headers+0x84b/0xab0 [ 1113.746679][T15466] ? __virt_addr_valid+0x188/0x540 [ 1113.751994][T15466] ? __check_object_size+0x500/0xa40 [ 1113.757351][T15466] ? skb_setup_tx_timestamp+0x1f0/0x1f0 [ 1113.763006][T15466] ? skb_copy_datagram_from_iter+0x5a8/0x690 [ 1113.769068][T15466] ? skb_put+0x117/0x210 [ 1113.773572][T15466] packet_sendmsg+0x3bc3/0x4e60 [ 1113.778584][T15466] ? __might_sleep+0xd0/0xd0 [ 1113.783625][T15466] ? verify_lock_unused+0x140/0x140 [ 1113.789227][T15466] ? aa_sk_perm+0x81f/0x950 [ 1113.794136][T15466] ? packet_getsockopt+0x9a0/0x9a0 [ 1113.799364][T15466] ? aa_sock_msg_perm+0x94/0x150 [ 1113.804492][T15466] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1113.810315][T15466] ? security_socket_sendmsg+0x7c/0xa0 [ 1113.816106][T15466] ? packet_getsockopt+0x9a0/0x9a0 [ 1113.822064][T15466] ____sys_sendmsg+0x5be/0x970 [ 1113.826902][T15466] ? __sys_sendmsg_sock+0x30/0x30 [ 1113.832139][T15466] ? __import_iovec+0x315/0x500 [ 1113.837230][T15466] ? import_iovec+0x6f/0xa0 [ 1113.842002][T15466] ___sys_sendmsg+0x2a2/0x360 [ 1113.846974][T15466] ? try_to_wake_up+0x67c/0x1080 [ 1113.852113][T15466] ? __sys_sendmsg+0x290/0x290 [ 1113.856976][T15466] __se_sys_sendmsg+0x1bb/0x2a0 [ 1113.861897][T15466] ? __x64_sys_sendmsg+0x80/0x80 [ 1113.866901][T15466] ? lockdep_hardirqs_on+0x94/0x140 [ 1113.872426][T15466] do_syscall_64+0x4c/0xa0 [ 1113.876875][T15466] ? clear_bhb_loop+0x60/0xb0 [ 1113.881678][T15466] ? clear_bhb_loop+0x60/0xb0 [ 1113.886401][T15466] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1113.892452][T15466] RIP: 0033:0x7f89e399c819 [ 1113.896900][T15466] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1113.916915][T15466] RSP: 002b:00007f89e4782028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1113.925402][T15466] RAX: ffffffffffffffda RBX: 00007f89e3c16090 RCX: 00007f89e399c819 [ 1113.933428][T15466] RDX: 000000000004c00c RSI: 00002000000000c0 RDI: 0000000000000005 [ 1113.941543][T15466] RBP: 00007f89e3a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1113.949664][T15466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1113.957764][T15466] R13: 00007f89e3c16128 R14: 00007f89e3c16090 R15: 00007ffe22ef1208 [ 1113.965859][T15466] [ 1113.968924][T15466] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1113.976249][T15466] CPU: 1 PID: 15466 Comm: syz.1.2751 Not tainted syzkaller #0 [ 1113.983745][T15466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1113.993922][T15466] Call Trace: [ 1113.997224][T15466] [ 1114.000201][T15466] dump_stack_lvl+0x188/0x24e [ 1114.005009][T15466] ? memcpy+0x3c/0x60 [ 1114.009028][T15466] ? show_regs_print_info+0x12/0x12 [ 1114.014496][T15466] ? load_image+0x400/0x400 [ 1114.019071][T15466] panic+0x2e5/0x730 [ 1114.023096][T15466] ? bpf_jit_dump+0xd0/0xd0 [ 1114.027678][T15466] __warn+0x2f8/0x4f0 [ 1114.031793][T15466] ? em_nbyte_match+0x2cc/0x3e0 [ 1114.036790][T15466] ? em_nbyte_match+0x2cc/0x3e0 [ 1114.041713][T15466] report_bug+0x2ba/0x4f0 [ 1114.046367][T15466] ? em_nbyte_match+0x2cc/0x3e0 [ 1114.052086][T15466] handle_bug+0x3a/0x70 [ 1114.056289][T15466] exc_invalid_op+0x16/0x40 [ 1114.061002][T15466] asm_exc_invalid_op+0x16/0x20 [ 1114.065881][T15466] RIP: 0010:em_nbyte_match+0x2cc/0x3e0 [ 1114.071550][T15466] Code: c0 eb 07 e8 26 53 1a f9 31 c0 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 10 53 1a f9 0f 0b e9 e5 fe ff ff e8 04 53 1a f9 <0f> 0b e9 00 fe ff ff 89 d1 80 e1 07 fe c1 38 c1 0f 8c 7a fd ff ff [ 1114.091182][T15466] RSP: 0018:ffffc90004c9f118 EFLAGS: 00010287 [ 1114.097291][T15466] RAX: ffffffff8868218c RBX: ffff88805ff79dc0 RCX: 0000000000080000 [ 1114.105380][T15466] RDX: ffffc9000ef42000 RSI: 0000000000000538 RDI: 0000000000000539 [ 1114.113373][T15466] RBP: 000000000000ffff R08: ffff888025008000 R09: 0000000000000003 [ 1114.121390][T15466] R10: 0000000000000002 R11: 0000000000000002 R12: dffffc0000000000 [ 1114.129402][T15466] R13: 1ffff1100bfef3ce R14: ffff88801bee6ed8 R15: 1ffff110037dcddb [ 1114.137418][T15466] ? em_nbyte_match+0x2cc/0x3e0 [ 1114.142333][T15466] ? em_nbyte_match+0x2cc/0x3e0 [ 1114.147232][T15466] __tcf_em_tree_match+0x1cb/0x7a0 [ 1114.152399][T15466] ? tcf_em_tree_dump+0x900/0x900 [ 1114.157464][T15466] ? rcu_read_lock_held+0x40/0x40 [ 1114.162522][T15466] ? __lock_acquire+0x12f4/0x7d10 [ 1114.167587][T15466] basic_classify+0x111/0x2c0 [ 1114.172306][T15466] tcf_classify+0x331/0xbf0 [ 1114.177041][T15466] multiq_enqueue+0xfb/0x4b0 [ 1114.181678][T15466] ? sch_tree_unlock+0x1b0/0x1b0 [ 1114.186850][T15466] ? do_raw_spin_lock+0x128/0x2f0 [ 1114.191944][T15466] ? __rwlock_init+0x140/0x140 [ 1114.196776][T15466] dev_qdisc_enqueue+0x4c/0x2b0 [ 1114.201680][T15466] __dev_queue_xmit+0xfdc/0x37c0 [ 1114.206678][T15466] ? __dev_queue_xmit+0x26b/0x37c0 [ 1114.212474][T15466] ? netdev_core_pick_tx+0x340/0x340 [ 1114.218076][T15466] ? packet_parse_headers+0x7b8/0xab0 [ 1114.223512][T15466] ? packet_parse_headers+0x84b/0xab0 [ 1114.229104][T15466] ? __virt_addr_valid+0x188/0x540 [ 1114.234272][T15466] ? __check_object_size+0x500/0xa40 [ 1114.240009][T15466] ? skb_setup_tx_timestamp+0x1f0/0x1f0 [ 1114.245825][T15466] ? skb_copy_datagram_from_iter+0x5a8/0x690 [ 1114.251937][T15466] ? skb_put+0x117/0x210 [ 1114.256223][T15466] packet_sendmsg+0x3bc3/0x4e60 [ 1114.261244][T15466] ? __might_sleep+0xd0/0xd0 [ 1114.265937][T15466] ? verify_lock_unused+0x140/0x140 [ 1114.271213][T15466] ? aa_sk_perm+0x81f/0x950 [ 1114.275855][T15466] ? packet_getsockopt+0x9a0/0x9a0 [ 1114.281105][T15466] ? aa_sock_msg_perm+0x94/0x150 [ 1114.286716][T15466] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1114.292120][T15466] ? security_socket_sendmsg+0x7c/0xa0 [ 1114.297618][T15466] ? packet_getsockopt+0x9a0/0x9a0 [ 1114.302758][T15466] ____sys_sendmsg+0x5be/0x970 [ 1114.307575][T15466] ? __sys_sendmsg_sock+0x30/0x30 [ 1114.312745][T15466] ? __import_iovec+0x315/0x500 [ 1114.317737][T15466] ? import_iovec+0x6f/0xa0 [ 1114.322300][T15466] ___sys_sendmsg+0x2a2/0x360 [ 1114.327123][T15466] ? try_to_wake_up+0x67c/0x1080 [ 1114.332105][T15466] ? __sys_sendmsg+0x290/0x290 [ 1114.337149][T15466] __se_sys_sendmsg+0x1bb/0x2a0 [ 1114.342176][T15466] ? __x64_sys_sendmsg+0x80/0x80 [ 1114.347811][T15466] ? lockdep_hardirqs_on+0x94/0x140 [ 1114.353317][T15466] do_syscall_64+0x4c/0xa0 [ 1114.357860][T15466] ? clear_bhb_loop+0x60/0xb0 [ 1114.362565][T15466] ? clear_bhb_loop+0x60/0xb0 [ 1114.367291][T15466] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1114.373223][T15466] RIP: 0033:0x7f89e399c819 [ 1114.377690][T15466] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1114.397516][T15466] RSP: 002b:00007f89e4782028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1114.406168][T15466] RAX: ffffffffffffffda RBX: 00007f89e3c16090 RCX: 00007f89e399c819 [ 1114.414283][T15466] RDX: 000000000004c00c RSI: 00002000000000c0 RDI: 0000000000000005 [ 1114.422545][T15466] RBP: 00007f89e3a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1114.430544][T15466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1114.438990][T15466] R13: 00007f89e3c16128 R14: 00007f89e3c16090 R15: 00007ffe22ef1208 [ 1114.447128][T15466] [ 1114.450770][T15466] Kernel Offset: disabled [ 1114.455273][T15466] Rebooting in 86400 seconds..