last executing test programs: 7m23.956118312s ago: executing program 32 (id=192): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) 6m34.767217927s ago: executing program 2 (id=616): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000480)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x3) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x2000}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000080)=0x6) 6m34.58736949s ago: executing program 2 (id=619): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ed5696c5820fae0000000000000080beef911d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80000) sendmmsg$unix(r2, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44081}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x117, 0x2, [r0, 0xffffffffffffffff]}}], 0x14, 0x850}}], 0x2, 0x20008004) 6m34.494346436s ago: executing program 2 (id=621): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) mlock2(&(0x7f0000549000/0x1000)=nil, 0x1000, 0x0) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 6m34.322818504s ago: executing program 2 (id=624): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) umount2(&(0x7f0000000200)='./file0/../file0/../file0/../file0\x00', 0x1) 6m34.167598649s ago: executing program 2 (id=627): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x4c, r2, 0x1, 0x70bd27, 0x4, {0x5}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x2}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x7ff}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}]}, 0x4c}}, 0x0) 6m32.763199229s ago: executing program 2 (id=632): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6", 0x1, 0x840, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) 6m32.380107218s ago: executing program 33 (id=632): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6", 0x1, 0x840, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) 5m59.875141086s ago: executing program 0 (id=915): openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x60840, 0x8) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo/3\x00') r1 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) flock(r1, 0x2) fcntl$lock(r1, 0x25, &(0x7f0000000080)) pread64(r0, &(0x7f0000000300)=""/246, 0xf6, 0x0) 5m59.665090333s ago: executing program 0 (id=918): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) write(r0, &(0x7f00000000c0), 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0xf0f046}) 5m59.447351073s ago: executing program 0 (id=919): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000240)='./file0\x00', 0x8c7) lremovexattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000240)=@known='system.posix_acl_default\x00') 5m59.165369106s ago: executing program 0 (id=923): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x81) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) move_mount(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x46) 5m58.709766061s ago: executing program 0 (id=927): getrandom(&(0x7f0000000600)=""/274, 0xffffff4f, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000800)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0), 0x4903) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) 5m58.372361059s ago: executing program 0 (id=933): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x5, {0x5, 0x0, "b1a748"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f00000002c0)={0x60, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGFEATURE(r1, 0xc0404807, &(0x7f00000001c0)={0x1, "5fbaf77c49a9e363eed255a8164a43edd3fbf3f53506ab88ceae7536ba00c7498731efa3dafb0258a1a0e6dacafa3ba666a4c94f7af45941f84c2857c71600b2"}) 5m57.777760784s ago: executing program 34 (id=933): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x5, {0x5, 0x0, "b1a748"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f00000002c0)={0x60, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGFEATURE(r1, 0xc0404807, &(0x7f00000001c0)={0x1, "5fbaf77c49a9e363eed255a8164a43edd3fbf3f53506ab88ceae7536ba00c7498731efa3dafb0258a1a0e6dacafa3ba666a4c94f7af45941f84c2857c71600b2"}) 4m50.645440403s ago: executing program 1 (id=1460): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000100)=[{&(0x7f0000000500)="6e80000000000100000000000000000000000c81", 0x14}], 0x1, 0x9) r2 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r2, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x3, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x8000, 0x0) 4m50.442706496s ago: executing program 1 (id=1454): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='attr\x00') timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) getdents(r0, &(0x7f0000000040)=""/44, 0x2c) getdents64(r0, &(0x7f0000002f40)=""/4098, 0x1002) 4m48.154600897s ago: executing program 1 (id=1468): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000003c0)={0x2, 0x0, @ioapic={0xf000, 0x2, 0x1000, 0xeffffdff, 0x0, [{0x1, 0x80}, {0x19, 0x5, 0x0, '\x00', 0x10}, {0x78, 0x4, 0x0, '\x00', 0x1}, {0xfe, 0x0, 0x1, '\x00', 0x2}, {0x3c, 0xfd, 0x5, '\x00', 0xb}, {0x10, 0x0, 0x8, '\x00', 0xfd}, {0x8, 0x81, 0xbc}, {0x0, 0xc8, 0x0, '\x00', 0xf2}, {0x0, 0xd, 0x0, '\x00', 0xff}, {0x8, 0x6, 0xff, '\x00', 0x1}, {0x5, 0x1f, 0x0, '\x00', 0x2e}, {0x69, 0x50, 0x0, '\x00', 0x3}, {0x4, 0x5, 0x7, '\x00', 0x3}, {0x1, 0x4e, 0x2}, {0x2, 0x2, 0x4, '\x00', 0x2}, {0x0, 0x0, 0x0, '\x00', 0x3}, {0x1, 0x0, 0x4, '\x00', 0x1}, {0x0, 0x0, 0x0, '\x00', 0xf9}, {0x1, 0x4, 0x7, '\x00', 0x3}, {0x80, 0x6, 0x7, '\x00', 0x40}, {0x0, 0x1e}, {0x0, 0x0, 0xa, '\x00', 0xfe}, {0x1, 0x0, 0x0, '\x00', 0x11}, {0xfc, 0x87, 0x2e, '\x00', 0xff}]}}) 4m47.740691064s ago: executing program 1 (id=1474): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000600)='./file0/../file0/../file0/../file0\x00') 4m47.515135007s ago: executing program 1 (id=1476): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}, @TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @mcast1}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) 4m47.26121136s ago: executing program 1 (id=1480): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='htcp\x00', 0x5) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 4m44.006138897s ago: executing program 35 (id=1480): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='htcp\x00', 0x5) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 3m34.302062202s ago: executing program 6 (id=2108): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = syz_io_uring_setup(0x10e, &(0x7f0000000600)={0x0, 0x8d2dc, 0x0, 0xffffffff}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000540)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r1, 0x0, 0x0, 0x0, 0x800}) io_uring_enter(r2, 0x47f5, 0x0, 0x0, 0x0, 0x0) 3m33.842502562s ago: executing program 6 (id=2112): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0x707b, 0x0, 0xc, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x4, 0x0, 0x0) 3m33.465454216s ago: executing program 6 (id=2114): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)) dup3(r2, r1, 0x80000) r3 = epoll_create(0xe) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000180)={0x40000006}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0x20000000}) 3m33.269797222s ago: executing program 6 (id=2116): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x81) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x226) symlink(0x0, &(0x7f00000017c0)='./file0\x00') move_mount(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x245) 3m33.070013433s ago: executing program 6 (id=2120): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x1, 0x0, @pic={0x7, 0x7f, 0x0, 0x23, 0x6, 0xfe, 0x40, 0x1, 0x0, 0x8, 0x24, 0x0, 0x1, 0x63, 0x0, 0x3}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x401, 0x0, 0x0, 0x0, 0x5, 0x6c, 0x0, 0x8000000000000, 0x80000000000000, 0x0, 0x6, 0x0, 0x0, 0xff, 0x8001], 0x1, 0x40600}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m32.784738427s ago: executing program 6 (id=2125): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) connect$inet6(r1, &(0x7f0000000540)={0xa, 0x4e20, 0x7f, @loopback, 0x7}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x270bd2c, 0x5, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaac}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 3m32.530684384s ago: executing program 36 (id=2125): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) connect$inet6(r1, &(0x7f0000000540)={0xa, 0x4e20, 0x7f, @loopback, 0x7}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x270bd2c, 0x5, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaac}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 1m9.340365763s ago: executing program 7 (id=3234): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x80000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x8, 0x0, &(0x7f0000000280)=[@decrefs], 0x0, 0x0, 0x0}) 1m9.090885031s ago: executing program 7 (id=3245): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000280)={0x0, 0xbe41, 0x10100, 0x0, 0x3, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) poll(0x0, 0x0, 0x1d) 1m8.234657307s ago: executing program 7 (id=3243): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) io_uring_setup(0x479, &(0x7f00000002c0)={0x0, 0x3, 0x40, 0x2, 0x4000020}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0xd2, @time={0x95}}) 1m7.435405895s ago: executing program 7 (id=3249): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000240)='./file0/../file0/../file0/../file0\x00', &(0x7f00000000c0)='./file0\x00') 1m7.397081421s ago: executing program 7 (id=3251): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r0, &(0x7f0000003c00)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000400)="a1a48e2be56660d4289758c1aa311372d8e4123d217daba7f198b26a5dc42182b732c24f76f70f7169c41e187481818678ece311ac1a46d9c0edad6dfe9d9ced06282e19adf99a0ffc0e315431430608cc74bcdbbcdcbae27d4f69c03e46ffb1e2c1efd9711729183960d32ecd1d9c3dd048a6075cd929cfa7bc96e65428b4dc10577d835215b06fb8c38dd7fa81756e1ec20bace098ec88f4516d3d4fac3561e6eea38e2f54412e154f8a14a87237ee491f73f368438e45b349638ecbe730207b009bc68a14c798dbc954e468ee2a42c488be383046d44ce7ff1a74edce04d31947783130ceae10ce", 0xe9}, {&(0x7f0000000600)="eeb0476d31d4bfa8bc420e0a9f66d225a4637bbf541197a8ee8cb679053332b9bad3ff0a2354caaa9287d339432d9a1585fddc57efcf5db7f60fdd6874aeb92eec39525fb275d07f8352a653", 0x4c}], 0x2, &(0x7f0000000880)=ANY=[@ANYBLOB="88000000000000000a010000ff010000977fee08660abf68b16e8ce398c26cbf2a27f06d3469f4c7cf01ffee5d39bdee5ba8556faaeb330785b6a000ba76c448e076fc4d359b3a35cea20db5ab2e5892306dec79f4c4453c0c7f559e1127bd57ef9b0ed12b5d7d646db589dae35531fcaefde34d9031e603f49c869e2f561e8dd7b827a50000000010100000000000000a01000000000100656d6708a988518bcff1294cdf26ba31ebca0a29256f4e194641d0665ea522eeb0528258d92275b5c7b8c1d8115d8bd12bdef932bd6d78d93321d7ad46921b767712a887cf07e700c4f4912e5edcb1f087ec1bba2a9ed6ceea305ec6fa68314f5b1e8096b0f4bbb6f03b3b563854323fbc21a2a8c5165755f7e488c9271ace6ad60e9eeec62a95047b8e3b7181050c9d5865ff09a387e9edfb4146dd1388e7675d77e9221dc135d47f11cabd3cbdbc2ccc90f44850027952097d52529554d60fa42622a1d9c19f0fa61452d3cab17adaec169efa1e7600225180159f7c31a2c003b26bd900e7e450b50bc0717e26be946609c4fd3d529abad4dd0c07d85a37e7967c22ade3640d7252c9e7c543995e27e50b2996762df86466369f6cedde7b3b519f905e588b54a92934a5490deb7acc272ce35717edc68e431f0ea56be43c0dd379c667fd7dd8955e7ffdf1399dc5039e5a5833b9e8b3ba2b211dc6f73bfce6c7fdad4273bd0a7abe86cc8422178a1d40b96cbd2a08aaf1e11c79d3d3f5002e9e3d661d3649cb4b24e72c7bf5665fe4f65d9ab9ac58d36e6b8176ca133f79b352ad0dc9e3706334a06c52bfdc2c58b6b48225f3523b0e06b19cba0d0aa1f675aad5a0b365cd19f4511b15e13a5fddaaf388d074ddfa8aed105e424b2c17261159da1f0404dedeb291dd64ae61e9f0cde8f41f9f43f4aeb352b5f91eab3c141a3cbb796fe9715a1f7074ddc77e9da2175d93c957491e9adc155f7f93f49c2b8e95d1851e5abb6905e3bbd4b094ab356ad75f70bbbbd6f0c15eb30e889e3ee729ca0b7a7389fef0bb2acabe3dfb897114c5fa1ff5d3546ec9766dbd90e889682b71056201bb0b7383ac546efdecb26de8b1d227d3b1c2d651bc8eec2a2944063a70c31146e0a0be71a9a3f48b305ec62b0d986f238baf22fe6cfc95720d10ddd6f79fe569c194589762fcafd4a6c52f01a06e683867b93e4e65ff334d280d7cb3d53518d6e70df1ff41ecf3f3623ce0b3964c7e66c9bd2210d8d9e43dfb08c9b4b99277979f72fe067b4cd0c45038b57e7658e3c28cedcbdaf4d7bb773649514e45d2173c6178c92ec51d7336db6768e0aa3004c97162c3639dc3c7731b54ac463e8035a319e82d40f0683349456f7717a533cca3945bdeba85f95b51e2376b391d433970a2a027a6cc1f258cae5dd34d328e09b7c624b8c49837d1979832710890e8a8035ae0c7c0925e33012947b14d369b9bd82eb46fd9b94bc15cdb67eebe874130805f066b008561d7fa15a4112e67531a2933a72e0191b848606f6d6c9aa5d3006da06445817e6aedce10d2147b314fd29e51744e84b97fc2a70fa3abf6fe4db0dcf57234fcd431835565b32bbc6d42f243df92ffd31bbabfc6e8626b7ff1fd6ab5af940846f80554daa45aecc012534b23ef73e06987f116e303c9ec072c8421c732ef226b47479797a48f0006d06bc56977707f7aca7f2b7dd7d2dd13b64be369968a57147eb3a402d3f9ff9fcf0ef5129ea4d63d9f33b35f606b80d0f2c438d181730d6f98eaa7bc3bd305542d3ce27c655154795bc63ed0c9c3770f08acfdf2282043293976fe50343a4acf9c5a40f121f4bddd2012f1289e55d6461fbbb9f69497b953958efc560710d2c61ef8fcec574fc7cab393e97638fdcddb3ae1c7a327246259cc4ff644e9e1813295c4c9d4c10f2dbbee3cfad65778fd868093508da9c5f8fad9277dae5a7c8c5cc82620629eccc3f08bc05bac9a6bee9b807e88d3e39d04a8771046f025af8d78186120f565d19275438d7762ea8131e35ff7bd0cb7470a426637c6bda832ca8c7694bc8981713e876a7a94c0a52042d53be942ad77696fc067bd728db9b885746035b1ac27b99a30ee63f09f0a9dadb83146a595849caa52896ff7039716eaf729d587c5bf4c4e01475361de058c214a26457944f52e801996cffc193831a3213f0d756e55ec84e1ed01e91aa4e181884fd1fe59da4e35ad45535b3697156d7c7aec5e4e5172523f4cf0e0de8e7349ef0957689f8c7ff594ead82098d30c4a006a43998dc7e0e9fb919ee68e765be9121a3ec723b589d0c019213d241e09c634211c6b7f42199eb2469b835816493b149ef9a77f6809cd495262bb7151ac9a56ef9aa8bc7a129f9660c070b65d924a334b19cec159aabf11df305c8835fffd623332950f8106ccc4c228dfd5605429c9da2770b2fcb56e12b8edcff973d0ddaf172e2d213f763d8a7b27845bef24387771caeb60402f009335433d94faf75dbf0c7d6a950864063244a053facd841e167c4b9dbab4e1b79548dfeb056d0592f2b6ebaff1b474a84a99c14cd4ec16455a6c23760cf9ac0102949103bc13a380519645e49cfeb18cd5e0f8b3bca217e65f41b3bde0c25fe2ea29f4ad1bb194c7772cecd4cef1e0f8515b28a9ea5b4b1b53ac6836c2ae0b0a227190ee1bc9c02a856d5b30e9177266f0d20b49dc7af44fe6f0db120017fb6c344043f28b69e80f590c9ae5fecf30d480dd3cd9f46e1e88d437b63ecfe0dd6b6ce557045a97dfc4e0f814ed8fd08766414dda07b40033857ef583bf3fd47901a5eb3fd73952edb1f2f0fb8a0e7ebfa6f9d3149a6a65626c5d2ea00110bf441fb49bc117aa0b7d9d51d891c05132d3a44321aca528162bdbbdb6c98921dc13a76c690a5dfc2d981094ab38d51e2cf369220fdd9f9026afdbcedbf898265b23340f080c4f068c728aa5901dcf9ec594dcf06685300e59c15cb2973cda6839a9031645d8fc4bd28c0f1035c8787c2d10612a3e8bd2b3a8d3dfedbca530c9fc71fa8f205842e21bff6c5b6022d78caf33edf7245aaa92fc4a487a576cb40a374d20ab442d41e0f1e770cad24e296472693ab925212180ffb3d718b17539717dc5c5be59fdd4ac00b91ff218d14406afc9d8fc0acce57bb581f1df1ebf38a319a14780628bfe25bdc767a69a61030259732b47406f97ed838d024feb977bf3184c08f95c8e86eb16ffb85bf8d75d7c235fda7f740c78743c55b0e96aa6531afc85e483747d34db27148e0fef4cd80b27a9d7699449dfbe505662ebbc1cebd1d49a052210dfd61361035ff3fc081ad89c98aeaf368c673e2bc5e9fb6f7b7e10cdc6271233a4192b06b780682f01d2e2cd3fdb47b698d2c9cff0a38b5bd2832d5ee4a5a90929903fb93bc595d96b97e53da5bc93516c2c2ef86159d97ed72ed039b13681882717be367d9bdfbf3b09b3bcc42200a4f7eae3f8d846b17d8f2febc3555364add23dd315c62a030585432b52761620e703e830f71b0ccb5b4e94f312baec498cf8e8ae3be0065f3a4ea84f157f92198bab6778190dad5781ad611afdc5a86c8a32fb01d692e70eead0964a24edcde5353582f50a9ed3f01236a63e598ecbc0d679660f530135a8fe583624a162c6325d7b31350eac928492af8cad84284ec3a96b8331ac024952e6462b6a917b93d836aa493b75cd608e94fd19d91cbb4d4a714e3672bbc816c18d30ccb0e4720948bed9cd3056e2743732b923aef675ab455113940062e0854ec430f0af20c707b487a8bab7ef9409a18d7292f20872b5c49fa073b9a08306eaf74e75f46416a19c06b936717f922f331c9aa3425cbfda67d8a043bd7008e87b7af50c5cfc247f91ef7f86e5a6f4b4e7a9354e409c4c06377829e5042f64776ced32da4326ffb110a4378be4f8845a5dcbef59e09c362bd647cd8c59608ad780a6ab11d483387ecd8eacb3fab4adab988423421410e9ab26e30ae282ae2991ebc1563d5608318bd68dbcf41c9045e1546836fc4fc5e8e328bd5ca0effd76532de696b1e521b0708f32415906bfae5134ea613a43b69a74f066bc965f3b2d295965f17a3c38f73bc156e9c273c86cb18168e14bc836c9f67dc6f3b5f444e5f163840ac44b57cdde408e31d2e557c4cb426baf02c54a25e917935dbb1bba4f8805aaa74b2e8bb722ec5106df9e7e897f7665755f42ba8c28d54120e43d29fffb5f35ee7d7181380690ffab6a12ae1393444efe226a41a1ce88bb80bf3f206c898e53411a8ce658df57a4a557de65893df5431c0213f45c813938bcf5c26194641a98d5a315a4bf36cfce31b18431a63b5410d697d429d79c2b9fcb80c8c0deb1b01dc84f948b260a932acc3ada9ebaf5ec3a55495010f47b18ce756a2ffd97a51ca3118612cf57016fd424d5bafcabcdd5da48b0aeabc91dfbc22d422f98a6bc3b0581ac5e308380aa25e9b1a1fe0e1d3b900c30d3cb04b7123bbdf91675fd15afd99e05ec2bfcfb54f9f729c3a1d769841210b84974a69087ac12627ee7a017b289961a9340defd20c1dd9931e91bdd1c03c48168ead801933a87799a66954a0ca6322644b5c4d5e7af0e513b1f9d372d19589d73e62d7e58a494accdf2336258753fae4231485655317637aed4290e1700e53323ff9c1d7ef8175ef8616b733444b910672996f988f36f2d745591c881b43c1700d57f260f7012ee218d1a22b64a1c3293f8a8698cab25b027bd75c65be66c08ebe1915e83bc10d06a3e1527e21f14997050c10520505a5963b457f5710cfdf22348fa2e493c617e3544d32b7480eb1c34e62996aba77528f6dd433e405f4895bd47dcaa64b4076b60cb90fadf92cd62380557da44ce2fda8a5c56527de6d5eecad50f25b9b099e62639f404501ac4f6d9fae435c3c80518222c39d50114c3dad02db4ce64dc583dd55e1274430e7d01ba5f259a577dfdfb41071816b3eef1fb5c0dab429bda640296201001bb38dda4f540c56d0d8976790391be76cd087704f8681b5feab3ec91f2fe5c2eb8be4b14bfda21886e85d7b5dd81e0e1d9aaa4fccbf4516b3aa9d7ac567450f1fd6f31ae9938db1026bbdb249d35215e70b46d867335c730250c6b65d19346031a9c00f9ef44c0e9022814ee35f37c0b6bfe21288eccd1fb3edc451cbbf818728e46af1397e27ec9fd7aede6afdc80283b4a18c0460c83553676283ee8d58ff45c09aedc21e3526fd430eee10a1bc07d3435dc1e732d8170a9ba395ed7210273f58f6ce7bd22d77efade8653e3d207c9df98cb72a1a317e0f7f10b35b0c8e974da82c1210b54ad5ef34d8efa3be37b4e044f3e51cdbe1737d5147614703f1cc8f051f3de275909ff3b930427a46d8a9514cbf027189bd14d191fecf561a3a870ff64220b44d6653b21c84d1d7b0ddb79327c3fb3fe98dbb5c3f6ff721c73cced880bd0e8b18fc9391a48fa13cbf4ab7d0a560da495c7b634b4bb67a817d09879d4af63afb8bc8c1c619b441a39faa25d0400d024f88b613fe119870c50a067b14f240f895224c55aeead0aba724dc09a26cb5eafe816088e3a0f690f73cafe3673587dacb9ee750f015b274ffc5e9ceadac9119abdb242d52ce40058201f42a39c49ce4c6e3532a2c103139c132f17737ff281902fb75020bb5b5cbb97b7fd7c4acbb4ff59cb39c3886d190113f4072ad422187e69e7fe1213fbb9eec5ccde5be0d2b2775724995b0604ee0071c7929aaec63fbeb4367ec3b0d47a2b619872daafd8c1ca21fdd195161f370e219a78aa85c23ef339f9a4ca187a05227c8e821f88af7efa1323323332c1f14179348a7fdc7a072df65dd165137e4b9033dcf566b6e8fa03e55a34c4bd2b346b39d64765824bb35b17d41c77cf4e2d361896295a1c4f148ffe1914cfc5b8ce658d3182405bf321da7da48f0003c659612ec23ebd095879f8e8c4262f4a1534064494296eebe0def1e1801f9a1c6cc1f8e24261b686dbc201de7e9b44fd40d3354c9c2aaea230000000000000001701000007000000cf952ca1a5ba2f061972ae814e9ba8410b9718e039c6628bfb0bdd216f3ab0ac10100000000000000c000000010000009542153f63c622733a87291baefde18cb578a136285dfd686251727b4b636e39ddc9862154e8d60a0f532d46e34947e7589818a6744106f8dc876ec7014bb82a5b0848a9d6628195fd7ad1cf582e86ff5c0df818a6effdbe710a32a70f129fb6a74ee3a920950ee24646caa557f8327d0f3e3f1d6ca844f40f5bd75c031328daced8c5c42aebd95a1f0a4c2cdbd26a47ddaa48fdd92555da40481317fd0ebf9ff8dbeab1bd4bd7dc0efd1e4f9097ad6e9c81356086faf384a066b657ffba8c40be7c5d854c23d6b34d7ad3b148c380de9a1f1e89c1921c55c6c87018deee2f7b3dbb5d05b8b4d6964f5391440e44e981ec22cb61ffa860728dc32d451ebdeca49083b7425afde34c29e65b5e085e5ad77a564629dc77f539e7b97aababdeb532ac70d4fdf1bf14fae5ac1c277ba52ea7fc6536a02268ddde35e37546c44d3046f96b94d1953a0de453bc59203e58705286620d36a94829132fac41118e0d6405c20ce1734308886f9921e2f472310f704bbd6e1bb74230878dcb08089890f1d74828b8443fe836c613980b555616375a0d0199b606a31f63d9fb845359d12f3cacf129948d0d014b41f6300e1ae269f463b5061f1cf7211e429049d2aaa86bcae66cd062969f911cdfbdb5cbe7fed4a10f83352ceada5558f4a96df48cc56710df9de677eaef555b13d020ea11c7b356aa87d0910bfc48ff053b337035f0c4091c088f8c5ae2ebc229149fef46fc3b88e88ec48b78a69a0efacba5ccbb219e8b47f95d67f972a396dfa1e880c41e8d37804818150989d8f434ac0ea72286824f173616e2a2f90ac64268677580260888193b6d71959fc057f6e3794a46e33105959ba271fcccbb639b59c8ef0e6f991a7e644309d04170eac10c9d2e58e06aed39d2dfc3038e4d3fdaba12ec51e077497060cf2d8545e1124e815f0ca00f41936355aa701987391ddeaacbdd81e0d18c49a509d0838bcc7356749d4020b9991143465e27b52bd968640c35a0cadd267b08258a3d0bda93a078b71ab9df0fd8a279d5485f17c334756341d549c7f60d44ba289abf9c40ca95a327e81ef9d166ab3294398edde3d956fd238ac408e35f618b526816874d678c28e06b9eaad33df904461310af4e5ae888ce7ded903c0039aa66831efa16c76a5f4fbac76ff399caf3de4dd1cadf1f2748c5f01dec0c086f72e398158b036c988a6fad85326cca990bd17dc76f79ece93e524281a9a0baab5cdbc57fe8f205a31d150474cec4a1468a526134c9e53b5597dd3418d3868767527072012be06c82235000d639822770b404326467932934cfa7a29e651062c7f5718c54b8429a69c91fbb59ebe6e594992b184dd80cfb659539680f71302ae4cfb162166ae5b366346d15ce31bbb46ea3c16ac92642a1a639830c70d0166ae6a4138c4e0337270e70e8942f1bf733b935e4bc28cd9e8c0b8cd435020062c5c96139b45685ff021ce746f6356c73ae45ce5cb5ffb5186a4649deac529d7e744c7d3a72feeb04a74f91f6c209b3f74cdfd691dd6d0e4f71da3b803acc8f224a4451c47059cd13df24627c35260db1162477026ff3f876c695ac295ff3826ef4b327cf5cf56e0a87e7b5e41efda3482b02a5ba43bff18c89e4450696c8925bfb218ea3676abea2da7001a685569f55d69f9e695215fb36a7afea8ac681fd420a40ab2175c80427eb201848f2e8819616f76397e2892074a535c2920fcac8840064f8dc35e98e48f7bc713267c0f0dc1d64b7ae7465a4b7248d21465966afa80524ce72eef00f0754ef289890ad8011a9cd3c4e84a5d53d5405b93cc5160fed837c5e3fb440b39912e37f2a1556bc99740910bf6069815f6767291de7c01292efb66b5899c0da48b9e2fd63988b617621ee21c59989c120790a9067408900c03c070870517aaed9e51502239e339df5cd7cd98a524d3ca76adc48ec403d0a6c12a276e018f6405f02ef7617c809c6bf68f9f93be00b44c9f30fb533d1af39a481d66828d93dd5b8f6e83400ce05bc2b25eeffdb74324addc92335f2c37163a7c44982377ede1967ce311e9710f9edc8dc161229e9e541f11129725aca9c893c4273d22816ca7b2517c34bc606de8e6aca8bb65a11ffceca9e8e99a54b3b47784470d429af9f46113947de221c93e8d619ba2800d75584383b2497ca37f5bee2d89f3ec8a33ce76fa71e257595b1fdf5811da8778c8c4cafffa81ce83a8786e67e43ba72d6ca4e34c59cd43eec187cc6009277d622bf027beff2660ad469a1cb5cc501ad139dc1e92feaf224965b80337a72ebc4991e193be572ea37259f9663bf2eb58de0d74d3fc351223e21acb1b8b2e1fe2be0ce0faaa64bce226a66873a0ce6336c39cc10eb188506783c85a7868457674696e88d469331686ecc5d28066f77b37034414529022b9f6b18d1227acc3c4bf22a7654dffd7a5b7d8b9267e27b04e56e1f57f0c8d8c70e91586ee4b43ee72e16e80757040a5dc9e28e98398a8b592e1ec4d0a1a93aa0351efcea901e17e2d9273faad5edc024d2a4a31ad6f317c4dc9ec9dc7d6f58546d89b3b98bd4d93c362052c3b08da569b1353f5e35fe597afadd601ad5446b71da84a92a64a44b36f12fd87a8273c2e7e22da49bc182ebcf0565c631c6576b178bf7b8547a4a9999148553e8db15eee826b83ba54904afd9b1a0054db82b1e649cff8de2380a6ccfee16f66236b4a6ed6e0afe333fa16f1d3a97ecba17c88da4af66adccdca8292dabcdf5fbec8af5a8ec46013d46e38e8cc8b8c045c1735c955507a26a52f683480105bd71e9af054a18dfa9233e351c431d64e96ad656ce739224875151d0dc753fc67a6320e3d88dfadf409212668ba7100753bdc04eed3e5d97e84bc45e798b34a2500fae6bcc7093f89060915567991958055812a41fdfbce29e90e2b20929eec5840acd8f99cbaf38263cf5cd48ac654debcde9c850f130b713cec8008910d40cdc2fe474d2051725bff1a2a8151f60a1ce1e8bbbbba109ffc18d72da3c14d0ddbb4b69027c02e2c2ec763753ead761b7c23a588234135dbc69389bcb2258d03d2c52fcb7d33b4dd68714c9b74e2642c4e14597fc517a2b5a227bfa3f34e6f35c56ee3606bbf3ae83cf4e97396d2adbbf6bb7e41b75e8cd82a28270c055795161d7d980a6e546cc7aa639cd112538d5e2dd0bb0ad0028893a8c5bdbf0161a6efe32f8157ca29d95fd8a0e8c5db60fe179928b4e3868de053765e71996bdf2eda6efe104537f55ad2af4105133d62cfc69e49639b0976bdcaccab2da5e92b28b43cf59380f1f7b5d477506735db6ee980d1d74d2a557a75c07a60af034b576c34d5542d2f3251ad3bf4f4c595459b72e99dc7ed81f1507241410500fb98aef469f4ca40c4ce08d46ac1997808a9f18b399b939bac256e98c957b784b118f20f8b37b72c8feece5499d1b9f37f4451c35b05801966829aebff700ebb914ed3f551b3f63b859e333a8d0f6e3fde60e394cba8d1d46a11e46ea66d84a9931d282b02fa746ccd3049ca10828eb872099061956ae8f059f0b82455a5ddf4439e1134ecc4414c0579a6f32876ecbfc4a0e51b25bb849c0a220520342c966b6b58b62ddd7747f1544e154240775abcaa72386abaeebb15560e9d55d50944706d47cd732badacd453ffbaf4b85cf08e8f6a1b01774aea5b00782b29fe499c6d64fd2f6b513703d57aa3352879c99b9707bdcc57e170a1591bf3283b1bc0a13abd2e08e597fa88be9a58fa800b474a1a57653a3474bf85e482c2b9c70e43dfb498ab48ddd37a386c9538e0522b2d1714693bef46ee481643b18f01c9d5c6ce3a0c0041a2912df3c76696d40d47ee8a393ce334de0243acb1f73fbec336a5e69bd39fadf160805f71fc2a40009d7dd109d83083339726900c901e762580a41c3b6a978ea4446a8ab47d8da5958cd6f2696926024d82f11db1111d2c5ca5503680a303102ad084aef507c95cfd5d391619f24e06721488e599a8a2daed7c68ae66c202074e882876c583aa6b64f038961592c0d52ba10c58b7a466784e9d7e1abf9ff1110ae496dc32153a418af29f226248d5fb470479ebf76c088398aec84b24f2e6ec96c6df80e691115e0ada6cc5b4781ffdcf73e15e23b80116b54cb674f003829dfe716a5306e68a788e3e5eab05900794c9afaac762c20fbea0dc8bdc2a6fb0a8141c32753586132c4dbeca8c638f97733b30690b85c8b719154e4cef75c1dbd7aed2dc94617ff0141994d01dff35d52ad78d041c0ba76ac3196854f28222da401e7b5e531ffb5e7300073aa78b8fcc6ae9a9c483e137087995059b8283b84d1b63f1893c935f5457a96c138004f196a7dbc3a2690906fc28036ae1d2b9271a69196c98f5b2c9f26ceb7ffb2110606273aca97128d0b63bdec10ade2ce9b3a3f5c1eff2485e214b69a0c57a3def50750c36b66932e6542a5a85b7990a9dcb0f03c8be5c6b3045814ad40ff984f5a72b51978581f4d6e52e6723042eed330c3593296d20b5a2137305cf124d34f45a1e8405495bc5638f01a476c7dacc1002cf72e600b3804215f728287a7812e3e82c188984cd8b8128ae4e480e50054991887d1b25c917a5eeb347146c986746eb0c104c6e58b1273429b7126d6494b69a7ea2fe51b560a13487ccee368f695bce02212e56819214aefd1848c6c574a38bc16efc07ad9bea780b15b1838fd4bf66fd2b2db79e3b23c30e279e5f42af63a49f88186c23245523570cc5713bebbae9ba5e00400ca585c13017fd9f8c368ba7ff06c8072425a65e6bd16b980d47960fb5f188c2fda3696b4da80ef0fc0ad0f2709fdccb555e4aafb117b7becda2fcdbd171185193e613e3106ec73cbe505707ae69d9c00c5778815083676baa447ff3d1513425b5d86a189bc1a34d3cfcc4f57b1968ac159dea9dc09c9705fa3d14f5fe06776fecbafc4a999fc6f0c5ad15cad4c2df6915a41c9276b928b4d4148d698f57f0fc73eccfb6f57893cad1886ac988fa91b6c16f97a1bcb7f571086a24ce2f4852a9191822b0e338997a02b9c91c66263d50dbc72827db3ad7135339044b0efcaf55133364918120640e6305a69b4e9bfe0a4c0fbb13d727bc6e6d41e538cf77051c882ecbcff660651a63ce0e9539d8d95e931c90e444301f383707b64812d8b09c9b055cbec7f0d6f72a80ffe32b19f301ff9102bdb2f714228100fc779a5c638f245e6536d7b472999176da1744eaedb15756a0065ffbdec25dcec0b97b5b134af8dd0db450119e358883f823f9a341267e1409b5723c872d7b1c5d49f1a1dfd1defbe204f846442010880813f9c6b4c3db2cf08d957d9fb075bb44411c7c48615dfc994af9a9bd57921720c2fcb8c511a2260042bcc48ad10fd5e2895d9e33ed8c24eea946237fc03d186ce431155906395b2e29d91ba3019cf6a1f524ffbb0aec5cefc67613493718acca9cb81a12686cc92217d8a58cfc75b9e0a2bb9afa56bb6343d4caf98510f323dc63ebcdc8ca8d3963538cd496f483cf8c10b6583f6af0a7cb9dfc8d06e4bcea9377b70ee05e28758d67c4898466dbd9f7ed0e48d1814d136410d5414666c1f4a59c0fb2b886b38981bc339d25be855c609475552aea56dd27e02e5d8b6af8e976bfc0336237609f2b7985bbb99b7d2e93ae1582664ed9d77f576d813d83285c0ecdd9de7d253029aba31ca00501d30d63d995021858b9ef0010ec5cba5e10dcb2f2baf64c44b8d67df9de5105679c021b022430de8afa1c3e9c046011b7cdd4cb5d92b6330"], 0x2108}}], 0x1, 0x0) sendto$inet(r0, &(0x7f0000000240)="b76dde7f1ccb05bbfa986c20cf4a2f0353c23853b79f0cd9491da6e5b17a5951d5d11e7cfe0e78cfc60498be4b9ecf8a1b95d9a9e6e3193eef81b0c1b5b3cbaa5c3ba1e161e8646df0936e6225821035ef7f5d6d96cc916fa3fd95b314118af77d8764493d3c3e81296201a68d98277912f3d59e690e378c233635e9d3feec94edd7b743afa5856e42e2d51a6367914ac7ff0526a4baddc03789432a73ea0c93592207ccf419a08b51741c8fed9e647641aba6e652edf8708e50ea89407442f4f13e0c07c09d5bacd7278bdabc0846d70424ff8bcae7e5cd14b49c9afb85207512ad2037", 0xe4, 0x404c851, 0x0, 0x0) 1m7.197272858s ago: executing program 7 (id=3254): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={@dev, 0x78, r1}) r2 = socket(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) ioctl(r2, 0x8916, &(0x7f0000000000)) ioctl(r2, 0x8936, &(0x7f0000000000)) 1m6.977850603s ago: executing program 37 (id=3254): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={@dev, 0x78, r1}) r2 = socket(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) ioctl(r2, 0x8916, &(0x7f0000000000)) ioctl(r2, 0x8936, &(0x7f0000000000)) 3.908303141s ago: executing program 4 (id=3715): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x2, 0x3}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x1, {0x43, 0x1, 0x1}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f0000000400)={&(0x7f00000008c0), 0x58, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) 3.245829732s ago: executing program 4 (id=3726): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000004e00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@assoc={0x18, 0x117, 0x4, 0x40}], 0x18}], 0x1, 0x0) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000980)={0x50, 0xb, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x4}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private1}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x6001}, 0x10044001) recvmsg(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000200)=""/96, 0x60}], 0x1}, 0x2) 3.191346581s ago: executing program 4 (id=3717): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$alg(r1, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x810}, 0x20044000) sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x38, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x36}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) recvmsg$kcm(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)=""/26, 0x2f}, {&(0x7f0000000380)=""/21, 0x15}], 0x2}, 0x40000000) 2.93052176s ago: executing program 4 (id=3720): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000000140009050000000000000000021f0020", @ANYRES32=r2, @ANYBLOB="08000100e0000002080002000a01010008000400ac1414aa08000400ffffffff08000a000100000008000200e0"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0) 2.92975637s ago: executing program 9 (id=3721): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)="f994f216", 0x4}], 0x1}, 0x24000090) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x880, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7], 0xdddd1000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.584634434s ago: executing program 4 (id=3725): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000022000000a00300000500000001", @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000080), &(0x7f0000000240), 0x1800, r2, 0x0, 0x500}, 0x38) 2.490549604s ago: executing program 3 (id=3727): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) io_submit(0x0, 0x1, &(0x7f0000000500)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 2.475574882s ago: executing program 9 (id=3728): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) 2.148081045s ago: executing program 5 (id=3731): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x110, &(0x7f0000000200)={0x0, 0xfec9, 0x800, 0x1, 0x3d4}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0) 2.136145792s ago: executing program 3 (id=3732): r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000040)=0x1000, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x3d10, 0x4) sendto$inet6(r0, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/85, 0x55}, 0xffffff80}], 0x1, 0x2001, 0x0) 1.727409246s ago: executing program 3 (id=3733): socket$kcm(0x2, 0x5, 0x84) syz_open_dev$media(&(0x7f0000000040), 0x4c6c, 0x200) socket(0x40000000015, 0x5, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r0], 0x448}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) 1.645087581s ago: executing program 3 (id=3734): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={0x0, 0x20}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newlink={0x4c, 0x10, 0xffffff1f, 0xffeffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x0) 1.629285482s ago: executing program 5 (id=3735): ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000040)={0x1, 0x0, {0x0, 0x0, 0x101c, 0x0, 0x0, 0x6, 0x0, 0x1}}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x6a800, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f000014e000/0x2000)=nil], &(0x7f0000000040), 0x0, 0x2) 1.491588827s ago: executing program 9 (id=3736): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) lseek(r0, 0x1, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0x66f3098a9041ef33, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0x6}, {0xffe0}}}, 0x24}}, 0x8000) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x802c550a, &(0x7f0000000000)=ANY=[]) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000000)={'geneve0\x00'}) 1.318627595s ago: executing program 8 (id=3737): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="182e0000", @ANYRES32=r1, @ANYBLOB="000000000208000085"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 1.318384392s ago: executing program 9 (id=3738): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc73}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6], 0x0, 0x8340}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0x7, 0x7, 0x0, 0x0, 0x3db2, 0xe, 0x80, 0xe, 0x3, 0x80, 0x9, 0x5, 0x0, 0x7, 0x4, 0xce, 0x3, 0x9, 0xca, '\x00', 0xe, 0xffffffff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.128014223s ago: executing program 4 (id=3739): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x4b, 0xec, 0x2, 0x20, 0x6a2, 0x3, 0xb48c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x9, 0x0, 0x0, 0xc9, 0xc8, 0xb7}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 1.113468288s ago: executing program 3 (id=3740): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000400)=0x1, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.055367592s ago: executing program 5 (id=3741): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d) r0 = inotify_init1(0x800) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x6400000c) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') pread64(r2, &(0x7f0000000140)=""/116, 0x74, 0x4) 963.542487ms ago: executing program 8 (id=3742): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x6e) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) io_setup(0x42, &(0x7f0000000100)=0x0) io_submit(r2, 0x1, &(0x7f0000000580)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000000)='e', 0x3f}]) sendmmsg$alg(r1, &(0x7f0000005e00)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001640)="f5", 0x1}], 0x1, &(0x7f0000002940)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10, 0x10}], 0x1, 0x0) 896.913629ms ago: executing program 5 (id=3743): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000, 0x2000, 0x1}) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) 815.273182ms ago: executing program 3 (id=3744): r0 = syz_usb_connect(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000001600)={0x14, &(0x7f0000000200)={0x20, 0x4, 0x2, {0x2, 0x10}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) 739.322826ms ago: executing program 8 (id=3745): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000010010c"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 679.982653ms ago: executing program 8 (id=3746): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0x8021}, 0x80) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24008040, 0x0, 0x0) 630.627252ms ago: executing program 5 (id=3747): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x5) r1 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x80, 0x4, 0x3cc}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r4 = socket$inet_sctp(0x2, 0x1, 0x84) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r4, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 301.555181ms ago: executing program 8 (id=3748): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x400000000010, 0x3, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x5) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x1) pselect6(0x40, &(0x7f0000000240)={0x2, 0x0, 0x7, 0x3, 0x3, 0x0, 0x100, 0x5}, &(0x7f00000000c0)={0x1d, 0xfffffffffffffffe, 0x40, 0x7eff, 0x0, 0x1, 0x0, 0x8}, 0x0, 0x0, 0x0) 219.380284ms ago: executing program 9 (id=3749): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x1000, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x1000, 0x2}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e1e, @broadcast}, 0x10) 138.86551ms ago: executing program 5 (id=3750): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x78, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x48, 0x2, [@TCA_FLOW_EMATCHES={0x44, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x5b, 0x1, 0x0, 0x0, {{0x8, 0x9, 0x40}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c014) 123.635129ms ago: executing program 8 (id=3751): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r3, {}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) 0s ago: executing program 9 (id=3752): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000000140009050000000000000000021f0020", @ANYRES32=r2, @ANYBLOB="08000100e0000002080002000a01010008000400ac1414aa08000400ffffffff08000a000100000008000200e0"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0) kernel console output (not intermixed with test programs): 5 subj=unconfined pid=14136 comm="syz.9.2653" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf706e539 code=0x0 [ 401.036065][ T5895] usb 8-1: USB disconnect, device number 32 [ 401.367128][T14140] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2655'. [ 401.377023][T14140] netlink: 'syz.3.2655': attribute type 4 has an invalid length. [ 401.575283][T14154] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2659'. [ 402.545209][ T5968] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 402.600741][T14188] loop8: detected capacity change from 0 to 1 [ 402.610188][ T5992] loop8: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 402.620919][ T5992] loop8: p1 size 132 extends beyond EOD, truncated [ 402.629301][ T5992] loop8: p2 start 7 is beyond EOD, truncated [ 402.638187][ T5992] loop8: p3 size 7 extends beyond EOD, truncated [ 402.645826][ T5992] loop8: p4 start 65545 is beyond EOD, truncated [ 402.652379][ T5992] loop8: p5 start 2814540723 is beyond EOD, truncated [ 402.662045][ T5992] loop8: p6 start 3659533425 is beyond EOD, truncated [ 402.676215][T14188] loop8: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 402.682531][T14188] loop8: p1 size 132 extends beyond EOD, truncated [ 402.690915][T14188] loop8: p2 start 7 is beyond EOD, truncated [ 402.705061][T14188] loop8: p3 size 7 extends beyond EOD, truncated [ 402.705158][ T5968] usb 10-1: Using ep0 maxpacket: 16 [ 402.718863][T14188] loop8: p4 start 65545 is beyond EOD, truncated [ 402.720677][ T5968] usb 10-1: config 0 has no interfaces? [ 402.725824][ T5895] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 402.734739][ T5968] usb 10-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 402.749964][T14188] loop8: p5 start 2814540723 is beyond EOD, truncated [ 402.754224][ T5968] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.766241][ T5968] usb 10-1: Product: syz [ 402.770647][ T5968] usb 10-1: Manufacturer: syz [ 402.770691][T14188] loop8: p6 start 3659533425 is beyond EOD, [ 402.775950][ T5968] usb 10-1: SerialNumber: syz [ 402.777151][T14188] truncated [ 402.786285][ T5968] usb 10-1: config 0 descriptor?? [ 402.825089][ T5916] usb 9-1: new low-speed USB device number 17 using dummy_hcd [ 402.848527][ T5881] udevd[5881]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 402.856724][ T5992] udevd[5992]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 402.905679][ T5895] usb 4-1: Using ep0 maxpacket: 8 [ 402.911698][T14190] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2675'. [ 402.914772][ T5895] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 402.921458][T14190] netlink: 204 bytes leftover after parsing attributes in process `syz.5.2675'. [ 402.942919][ T5992] udevd[5992]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 402.943430][ T5881] udevd[5881]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 402.958614][ T5895] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 402.976861][ T5916] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 402.986160][ T5916] usb 9-1: config 0 has no interface number 0 [ 402.992658][ T5916] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 402.995066][ T5895] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 403.039235][ T5895] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 403.039383][ T5916] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 403.053976][ T5895] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 403.083204][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.118227][ T5916] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 403.142185][ T5916] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.157424][ T5968] usb 10-1: USB disconnect, device number 7 [ 403.180031][ T5916] usb 9-1: config 0 descriptor?? [ 403.182240][T14192] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2676'. [ 403.190499][T14185] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 403.213953][ T5916] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 403.324891][ T5895] usb 4-1: usb_control_msg returned -32 [ 403.330635][ T5895] usbtmc 4-1:16.0: can't read capabilities [ 403.431442][ T10] usb 9-1: USB disconnect, device number 17 [ 403.437488][ C0] iowarrior 9-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 403.515190][ T5916] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 403.685475][ T5916] usb 6-1: Using ep0 maxpacket: 8 [ 403.719148][ T5916] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 403.738500][ T5916] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.767511][ T5916] usb 6-1: config 0 descriptor?? [ 403.959338][ T5895] usb 4-1: USB disconnect, device number 36 [ 404.043049][ T5916] asix 6-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 404.854835][T14219] syzkaller1: entered promiscuous mode [ 404.875464][T14219] syzkaller1: entered allmulticast mode [ 405.259143][ T5916] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 405.294849][ T5916] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 405.313625][ T5916] asix 6-1:0.0: probe with driver asix failed with error -71 [ 405.337650][ T5916] usb 6-1: USB disconnect, device number 44 [ 407.097036][ T10] IPVS: starting estimator thread 0... [ 407.195188][T14271] IPVS: using max 27 ests per chain, 64800 per kthread [ 407.719609][ T9001] IPVS: stop unused estimator thread 0... [ 409.421360][ T30] audit: type=1326 audit(1751574974.409:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14309 comm="syz.3.2718" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x0 [ 410.162243][ T49] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.343396][ T49] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.424418][T14346] syzkaller1: entered promiscuous mode [ 410.439939][T14346] syzkaller1: entered allmulticast mode [ 410.523971][ T49] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.819362][ T49] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.904043][T14356] ÿ: renamed from bond_slave_0 (while UP) [ 410.989544][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 411.008873][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 411.017070][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 411.028785][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 411.038781][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 411.178298][ T49] bridge_slave_1: left allmulticast mode [ 411.189835][ T49] bridge_slave_1: left promiscuous mode [ 411.200609][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.211451][ T49] bridge_slave_0: left allmulticast mode [ 411.225086][ T49] bridge_slave_0: left promiscuous mode [ 411.233249][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.770967][ T30] audit: type=1326 audit(1751574976.759:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14373 comm="syz.3.2744" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 411.828490][ T30] audit: type=1326 audit(1751574976.789:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14373 comm="syz.3.2744" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 411.907441][ T30] audit: type=1326 audit(1751574976.789:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14373 comm="syz.3.2744" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 411.974481][ T30] audit: type=1326 audit(1751574976.789:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14373 comm="syz.3.2744" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 412.009175][ T30] audit: type=1326 audit(1751574976.789:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14373 comm="syz.3.2744" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 412.038340][ T30] audit: type=1326 audit(1751574976.789:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14373 comm="syz.3.2744" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 412.104808][ T30] audit: type=1326 audit(1751574976.789:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14373 comm="syz.3.2744" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 412.175749][ T30] audit: type=1326 audit(1751574976.789:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14373 comm="syz.3.2744" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 412.220906][ T5895] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 412.231579][ T30] audit: type=1326 audit(1751574976.789:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14373 comm="syz.3.2744" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x7ffc0000 [ 412.417519][ T5895] usb 4-1: Using ep0 maxpacket: 16 [ 412.428881][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 412.431178][ T5895] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 412.449800][ T5895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 412.467331][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 412.475842][ T5895] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 412.475869][ T5895] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 412.475896][ T5895] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 412.511452][ T5895] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 412.525067][ T5895] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 412.537866][ T5895] usb 4-1: Manufacturer: syz [ 412.549705][ T5895] usb 4-1: config 0 descriptor?? [ 412.564099][ T49] bond0 (unregistering): Released all slaves [ 412.907439][ T5895] rc_core: IR keymap rc-hauppauge not found [ 412.913487][ T5895] Registered IR keymap rc-empty [ 412.920972][ T5895] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 412.949243][ T49] bond1 (unregistering): Released all slaves [ 412.955128][ T5895] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 412.980857][ T5895] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 412.997251][ T5895] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input64 [ 413.012733][ T5895] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 413.035281][ T5895] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 413.067086][ T5895] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 413.115868][ T5895] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 413.117305][ T5917] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 413.146380][ T5895] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 413.207417][ T5833] Bluetooth: hci0: command tx timeout [ 413.215935][ T5895] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 413.243268][ T5895] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 413.290443][ T5895] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 413.335114][ T5917] usb 9-1: Using ep0 maxpacket: 8 [ 413.345488][ T5895] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 413.374844][ T5917] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 413.376089][ T5895] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 413.417575][ T5895] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 413.423628][ T5917] usb 9-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 413.435296][ T5895] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 413.452710][ T5895] usb 4-1: USB disconnect, device number 37 [ 413.492549][ T5917] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.504626][ T5917] usb 9-1: config 0 descriptor?? [ 413.514918][ T5917] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 413.650631][T14407] pim6reg1: entered promiscuous mode [ 413.671091][T14407] pim6reg1: entered allmulticast mode [ 413.825708][T14414] veth0: entered promiscuous mode [ 413.847046][T14414] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2755'. [ 413.954187][T14414] veth0 (unregistering): left promiscuous mode [ 414.118062][ T49] hsr_slave_0: left promiscuous mode [ 414.147744][ T49] hsr_slave_1: left promiscuous mode [ 414.182199][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 414.204565][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 414.228455][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 414.237283][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 414.267515][ T49] veth1_macvtap: left promiscuous mode [ 414.273256][ T49] veth0_macvtap: left promiscuous mode [ 414.279651][ T49] veth1_vlan: left promiscuous mode [ 414.286110][ T49] veth0_vlan: left promiscuous mode [ 414.305419][ T5895] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 414.487510][ T5895] usb 4-1: config 0 has an invalid interface number: 230 but max is 0 [ 414.499602][ T5895] usb 4-1: config 0 has no interface number 0 [ 414.506192][ T5895] usb 4-1: config 0 interface 230 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 414.519000][ T5895] usb 4-1: config 0 interface 230 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 414.531106][ T5895] usb 4-1: config 0 interface 230 has no altsetting 0 [ 414.540965][ T5895] usb 4-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 414.550968][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.559185][ T5895] usb 4-1: Product: syz [ 414.563642][ T5895] usb 4-1: Manufacturer: syz [ 414.568530][ T5895] usb 4-1: SerialNumber: syz [ 414.576382][ T5895] usb 4-1: config 0 descriptor?? [ 414.582295][T14421] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 414.590672][T14421] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 414.601316][ T5895] ums-usbat 4-1:0.230: USB Mass Storage device detected [ 414.629738][ T5895] ums-usbat 4-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 414.969050][ T5915] usb 9-1: USB disconnect, device number 18 [ 415.083700][ T49] team0 (unregistering): Port device team_slave_1 removed [ 415.140827][ T49] team0 (unregistering): Port device team_slave_0 removed [ 415.292960][ T5833] Bluetooth: hci0: command tx timeout [ 416.021728][T14361] chnl_net:caif_netlink_parms(): no params data found [ 416.049851][ T5915] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 416.236899][ T5915] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 416.262636][ T5915] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.382916][ T5915] usb 9-1: config 0 descriptor?? [ 416.399487][T14361] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.413137][ T5915] cp210x 9-1:0.0: cp210x converter detected [ 416.415331][T14361] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.451481][T14361] bridge_slave_0: entered allmulticast mode [ 416.482920][T14361] bridge_slave_0: entered promiscuous mode [ 416.510467][T14361] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.525215][T14361] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.526622][ T49] IPVS: stop unused estimator thread 0... [ 416.538573][T14361] bridge_slave_1: entered allmulticast mode [ 416.541961][T14361] bridge_slave_1: entered promiscuous mode [ 416.815855][ T5915] cp210x 9-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 416.914503][T14361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 416.964587][T14361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 417.060655][ T5915] usb 9-1: cp210x converter now attached to ttyUSB0 [ 417.119431][ T5895] ums-usbat 4-1:0.230: probe with driver ums-usbat failed with error -5 [ 417.139469][T14361] team0: Port device team_slave_0 added [ 417.175502][ T5895] usb 4-1: USB disconnect, device number 38 [ 417.186635][T14361] team0: Port device team_slave_1 added [ 417.241012][ T5916] usb 9-1: USB disconnect, device number 19 [ 417.265782][ T5916] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 417.320077][ T5916] cp210x 9-1:0.0: device disconnected [ 417.365434][ T5833] Bluetooth: hci0: command tx timeout [ 417.401549][T14361] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 417.416450][T14361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.455178][T14361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 417.481684][T14477] macvlan0: entered allmulticast mode [ 417.490664][T14477] bond0: (slave macvlan0): Error -98 calling set_mac_address [ 417.519174][T14361] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 417.529407][T14361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 417.559680][T14361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 417.813277][T14361] hsr_slave_0: entered promiscuous mode [ 417.855698][T14361] hsr_slave_1: entered promiscuous mode [ 419.446301][ T5833] Bluetooth: hci0: command tx timeout [ 421.121933][T14538] loop8: detected capacity change from 0 to 16385 [ 421.357760][T14544] loop8: detected capacity change from 16385 to 16321 [ 422.331556][T14573] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2789'. [ 422.628606][T14585] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2795'. [ 423.045639][T14361] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 423.072854][T14361] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 423.157042][T14361] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 423.188646][T14361] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 423.630409][T14361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 423.670421][T14361] 8021q: adding VLAN 0 to HW filter on device team0 [ 423.707427][ T9001] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.714733][ T9001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.787001][ T9001] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.794206][ T9001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.899525][T14616] input: syz0 as /devices/virtual/input/input65 [ 424.351918][T14361] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 424.399306][T14361] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 424.656478][T14361] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 424.718632][T14637] netlink: 532 bytes leftover after parsing attributes in process `syz.7.2808'. [ 425.099569][T14361] veth0_vlan: entered promiscuous mode [ 425.292805][T14655] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2814'. [ 425.304744][T14655] netlink: 68 bytes leftover after parsing attributes in process `syz.7.2814'. [ 425.322116][T14361] veth1_vlan: entered promiscuous mode [ 425.658619][T14361] veth0_macvtap: entered promiscuous mode [ 425.719104][T14361] veth1_macvtap: entered promiscuous mode [ 425.758482][T14673] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2817'. [ 425.811175][T14673] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2817'. [ 425.859842][T14361] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 425.922501][T14361] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 426.003056][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 426.003071][ T30] audit: type=1326 audit(1751574990.989:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14642 comm="syz.5.2810" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f53539 code=0x0 [ 426.074454][T14361] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.083874][T14361] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.099115][T14361] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.111142][T14361] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.235057][ T5915] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 426.356085][T14689] loop2: detected capacity change from 0 to 7 [ 426.433602][T14689] Dev loop2: unable to read RDB block 7 [ 426.440004][ T5915] usb 9-1: Using ep0 maxpacket: 32 [ 426.476018][ T5915] usb 9-1: config 64 has an invalid interface number: 4 but max is 0 [ 426.515122][ T5915] usb 9-1: config 64 has no interface number 0 [ 426.515152][T14689] loop2: unable to read partition table [ 426.531661][ T5915] usb 9-1: config 64 interface 4 has no altsetting 0 [ 426.561158][ T5915] usb 9-1: New USB device found, idVendor=05c6, idProduct=9215, bcdDevice=28.46 [ 426.562286][T14689] loop2: partition table beyond EOD, [ 426.580783][ T5915] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.594891][T14689] truncated [ 426.599755][T14689] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 426.610360][ T5915] usb 9-1: Product: syz [ 426.614569][ T5915] usb 9-1: Manufacturer: syz [ 426.625466][ T5915] usb 9-1: SerialNumber: syz [ 426.638476][ T9001] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.663752][ T9001] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.854608][ T9017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.861944][ T5915] qmi_wwan 9-1:64.4: probe with driver qmi_wwan failed with error -22 [ 426.886807][ T9017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.926130][ T5915] usb 9-1: USB disconnect, device number 20 [ 427.921349][T14739] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2832'. [ 427.965876][T14739] netlink: 'syz.8.2832': attribute type 15 has an invalid length. [ 427.991844][T14739] netlink: 'syz.8.2832': attribute type 18 has an invalid length. [ 428.030850][T14739] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.040247][T14739] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.049021][T14739] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.058012][T14739] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 428.109184][T14739] vxlan0: entered promiscuous mode [ 428.200202][T14715] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2828'. [ 428.254077][T14715] netlink: 'syz.7.2828': attribute type 4 has an invalid length. [ 429.502481][T14783] net_ratelimit: 10 callbacks suppressed [ 429.502500][T14783] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 429.703506][ T30] audit: type=1326 audit(1751574994.689:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14752 comm="syz.9.2835" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff7539 code=0x0 [ 429.805207][ T5895] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 429.975086][ T5895] usb 9-1: Using ep0 maxpacket: 16 [ 430.039602][ T5895] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 430.090622][ T5895] usb 9-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 430.114257][ T5895] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.147694][ T5895] usb 9-1: config 0 descriptor?? [ 430.592198][ T5895] kye 0003:0458:5016.002D: control desc unexpectedly large [ 430.669718][ T5895] input: HID 0458:5016 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0458:5016.002D/input/input66 [ 430.967489][ T5895] input: HID 0458:5016 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0458:5016.002D/input/input67 [ 431.012755][T14821] netlink: 'syz.9.2849': attribute type 4 has an invalid length. [ 431.020655][ T24] IPVS: starting estimator thread 0... [ 431.104845][T14823] netlink: 'syz.9.2849': attribute type 4 has an invalid length. [ 431.115023][T14822] IPVS: using max 31 ests per chain, 74400 per kthread [ 431.122439][ T5895] kye 0003:0458:5016.002D: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.8-1/input0 [ 431.201519][T14824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.267911][T14824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.417150][ T24] usb 9-1: USB disconnect, device number 21 [ 431.452238][T14827] fido_id[14827]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory [ 431.762640][ T36] IPVS: stop unused estimator thread 0... [ 433.195146][ T5895] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 433.407139][ T5895] usb 8-1: Using ep0 maxpacket: 32 [ 433.459920][ T5895] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.505342][ T5895] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.539753][ T5895] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 433.579466][ T5895] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.591578][ T5895] usb 8-1: config 0 descriptor?? [ 433.745026][ T5916] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 433.917041][ T5916] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 433.928432][ T5916] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 433.940842][ T5916] usb 10-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 433.950251][ T5916] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.961708][ T5916] usb 10-1: config 0 descriptor?? [ 434.009209][ T5895] koneplus 0003:1E7D:2D51.002E: unknown main item tag 0x0 [ 434.021765][ T5895] koneplus 0003:1E7D:2D51.002E: unknown main item tag 0x0 [ 434.030026][ T5895] koneplus 0003:1E7D:2D51.002E: unknown main item tag 0x0 [ 434.037751][ T5895] koneplus 0003:1E7D:2D51.002E: unknown main item tag 0x0 [ 434.046079][ T5895] koneplus 0003:1E7D:2D51.002E: unknown main item tag 0x0 [ 434.065313][ T5895] koneplus 0003:1E7D:2D51.002E: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.7-1/input0 [ 434.390951][ T5916] cp2112 0003:10C4:EA90.002F: report_id 0 is invalid [ 434.413422][ T5916] cp2112 0003:10C4:EA90.002F: item 0 0 1 8 parsing failed [ 434.422125][ T5895] usb 8-1: USB disconnect, device number 33 [ 434.440372][ T5916] cp2112 0003:10C4:EA90.002F: parse failed [ 434.460783][ T5916] cp2112 0003:10C4:EA90.002F: probe with driver cp2112 failed with error -22 [ 434.477923][T14906] bond0: entered promiscuous mode [ 434.499893][T14906] bond_slave_0: entered promiscuous mode [ 434.519534][T14906] bond_slave_1: entered promiscuous mode [ 434.527822][T14906] batadv0: entered promiscuous mode [ 434.536680][T14906] hsr2: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 434.549908][T14906] hsr2: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 434.598707][ T5915] usb 10-1: USB disconnect, device number 8 [ 434.609374][T14906] 8021q: adding VLAN 0 to HW filter on device hsr2 [ 434.651745][T14906] bond0: left promiscuous mode [ 434.663285][T14906] bond_slave_0: left promiscuous mode [ 434.670316][T14906] bond_slave_1: left promiscuous mode [ 434.678379][T14906] batadv0: left promiscuous mode [ 435.150226][T14923] syzkaller1: entered promiscuous mode [ 435.165026][T14923] syzkaller1: entered allmulticast mode [ 435.545029][T14917] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2879'. [ 435.591906][T14917] netlink: 'syz.8.2879': attribute type 4 has an invalid length. [ 435.836451][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 436.045566][T14955] binder: 14954:14955 ioctl c0306201 80000700 returned -14 [ 436.851032][T14987] loop8: detected capacity change from 0 to 16385 [ 437.015846][T14991] loop8: detected capacity change from 16385 to 16321 [ 437.513274][T15004] loop2: detected capacity change from 0 to 7 [ 437.531623][T15004] Dev loop2: unable to read RDB block 7 [ 437.545399][T14977] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2905'. [ 437.572794][T15004] loop2: unable to read partition table [ 437.575576][T14977] netlink: 'syz.9.2905': attribute type 4 has an invalid length. [ 437.602142][T15004] loop2: partition table beyond EOD, truncated [ 437.650812][T15004] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 438.681381][T15026] loop8: detected capacity change from 0 to 16385 [ 438.948831][T15029] loop8: detected capacity change from 16385 to 16321 [ 439.074790][T15040] loop6: detected capacity change from 0 to 7 [ 439.126454][T15040] Dev loop6: unable to read RDB block 7 [ 439.175043][ T5915] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 439.185374][T15040] loop6: unable to read partition table [ 439.191258][T15040] loop6: partition table beyond EOD, truncated [ 439.224330][T15040] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 439.345282][ T5915] usb 10-1: Using ep0 maxpacket: 32 [ 439.356254][ T5915] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.379903][ T5915] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 439.470677][ T5915] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 439.495890][ T5915] usb 10-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 439.515221][ T5915] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.553723][ T5915] usb 10-1: config 0 descriptor?? [ 440.021430][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.035098][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.042826][ T5915] logitech 0003:046D:C295.0030: hidraw0: USB HID v0.04 Device [HID 046d:c295] on usb-dummy_hcd.9-1/input0 [ 440.062907][ T5915] logitech 0003:046D:C295.0030: no inputs found [ 440.256143][ T5915] usb 10-1: USB disconnect, device number 9 [ 440.276517][T15059] fido_id[15059]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/10-1/report_descriptor': No such file or directory [ 440.978360][T15054] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2931'. [ 441.027593][T15055] netlink: 'syz.5.2931': attribute type 4 has an invalid length. [ 442.020501][ T30] audit: type=1326 audit(1751575007.009:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15071 comm="syz.8.2939" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x0 [ 442.689013][T15114] netlink: 'syz.9.2955': attribute type 1 has an invalid length. [ 442.713664][T15114] netlink: 168864 bytes leftover after parsing attributes in process `syz.9.2955'. [ 443.291866][ T30] audit: type=1804 audit(1751575008.279:614): pid=15130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.2959" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="ramfs" ino=61057 res=1 errno=0 [ 443.384088][T15133] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2961'. [ 443.575966][T15139] netlink: 'syz.8.2964': attribute type 4 has an invalid length. [ 443.643316][T15139] netlink: 'syz.8.2964': attribute type 4 has an invalid length. [ 443.855231][ T5915] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 444.035180][ T5915] usb 6-1: Using ep0 maxpacket: 16 [ 444.045319][ T5915] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 444.067502][ T5915] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 444.078505][ T5915] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 444.092300][ T5915] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 444.101925][ T5915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.126635][ T5915] usb 6-1: config 0 descriptor?? [ 444.305358][ T5916] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 444.515027][ T5916] usb 9-1: Using ep0 maxpacket: 8 [ 444.522241][ T5916] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 444.533395][ T5916] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 444.542668][ T5916] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.554707][ T5916] usb 9-1: config 0 descriptor?? [ 444.601510][ T5915] microsoft 0003:045E:07DA.0031: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 444.621807][ T5915] microsoft 0003:045E:07DA.0031: no inputs found [ 444.629217][ T5915] microsoft 0003:045E:07DA.0031: could not initialize ff, continuing anyway [ 444.789440][ T5968] usb 6-1: USB disconnect, device number 45 [ 444.810910][ T5916] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 445.013302][T15168] fido_id[15168]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 445.236545][ T5968] usb 9-1: USB disconnect, device number 22 [ 445.548765][T15185] netlink: 1052 bytes leftover after parsing attributes in process `syz.3.2982'. [ 448.424838][T15259] loop8: detected capacity change from 0 to 16385 [ 448.875410][T15262] loop8: detected capacity change from 16385 to 16321 [ 449.115274][ T5915] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 449.306012][ T5915] usb 8-1: Using ep0 maxpacket: 32 [ 449.318103][ T5915] usb 8-1: config 0 has an invalid interface number: 67 but max is 0 [ 449.348091][ T5915] usb 8-1: config 0 has no interface number 0 [ 449.387407][ T5915] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 449.425105][ T5915] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.453892][ T5915] usb 8-1: Product: syz [ 449.485336][ T5915] usb 8-1: Manufacturer: syz [ 449.489996][ T5915] usb 8-1: SerialNumber: syz [ 449.540063][ T5915] usb 8-1: config 0 descriptor?? [ 449.626293][ T5915] smsc95xx v2.0.0 [ 450.234839][T15284] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 450.443723][ T5915] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 450.485360][ T5915] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 450.578574][T15289] netlink: 'syz.5.3021': attribute type 4 has an invalid length. [ 450.647922][T15291] netlink: 'syz.5.3021': attribute type 4 has an invalid length. [ 450.715479][T15292] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3022'. [ 450.912092][ T5915] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 450.933797][ T5915] smsc95xx 8-1:0.67: probe with driver smsc95xx failed with error -71 [ 450.964612][ T5915] usb 8-1: USB disconnect, device number 34 [ 450.977762][T15296] syzkaller1: entered promiscuous mode [ 451.015355][T15296] syzkaller1: entered allmulticast mode [ 451.366982][T15307] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3027'. [ 451.382689][T15307] netlink: 104 bytes leftover after parsing attributes in process `syz.9.3027'. [ 451.393161][T15307] netlink: 104 bytes leftover after parsing attributes in process `syz.9.3027'. [ 451.763547][T15318] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3030'. [ 452.206362][T15328] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3035'. [ 452.285068][ T5968] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 452.469537][ T5968] usb 6-1: Using ep0 maxpacket: 32 [ 452.529134][ T5968] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 452.547822][ T5968] usb 6-1: config 0 has no interface number 0 [ 452.575398][ T5968] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 452.619255][ T5968] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 452.655482][ T5968] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.673928][ T5968] usb 6-1: Product: syz [ 452.710031][ T5968] usb 6-1: Manufacturer: syz [ 452.714686][ T5968] usb 6-1: SerialNumber: syz [ 452.801622][ T5968] usb 6-1: config 0 descriptor?? [ 452.824616][ T5968] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 452.845857][ T5968] em28xx 6-1:0.132: Video interface 132 found: [ 453.249278][ T5968] em28xx 6-1:0.132: unknown em28xx chip ID (0) [ 453.369123][ T30] audit: type=1804 audit(1751575018.359:615): pid=15355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3044" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="ramfs" ino=62776 res=1 errno=0 [ 453.555077][ T5916] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 453.727924][ T5916] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 453.745022][ T24] usb 8-1: new full-speed USB device number 35 using dummy_hcd [ 453.753565][ T5916] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 453.766258][ T5916] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 453.776608][ T5916] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.788861][ T5916] usb 9-1: config 0 descriptor?? [ 453.885208][ T5968] em28xx 6-1:0.132: failed to read eeprom (err=-110) [ 453.895129][ T5968] em28xx 6-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 453.937242][ T24] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 453.950050][ T24] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 453.967867][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 453.980040][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 453.990352][ T24] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 454.022258][ T24] usb 8-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 454.034426][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 454.049095][ T24] usb 8-1: Product: syz [ 454.053343][ T24] usb 8-1: Manufacturer: syz [ 454.061982][ T24] usb 8-1: SerialNumber: syz [ 454.074753][ T24] usb 8-1: config 0 descriptor?? [ 454.125060][ T5968] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 454.132960][ T5968] em28xx 6-1:0.132: analog set to bulk mode. [ 454.145586][ T5831] em28xx 6-1:0.132: Registering V4L2 extension [ 454.160721][ T5968] usb 6-1: USB disconnect, device number 46 [ 454.170059][ T5968] em28xx 6-1:0.132: Disconnecting em28xx [ 454.279426][ T5915] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 454.293346][ T24] radio-si470x 8-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 454.314030][ T24] radio-si470x 8-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 454.376628][ T5831] em28xx 6-1:0.132: Config register raw data: 0xffffffed [ 454.383712][ T5831] em28xx 6-1:0.132: AC97 chip type couldn't be determined [ 454.391514][ T5831] em28xx 6-1:0.132: No AC97 audio processor [ 454.399327][ T5831] usb 6-1: Decoder not found [ 454.403957][ T5831] em28xx 6-1:0.132: failed to create media graph [ 454.412956][ T5831] em28xx 6-1:0.132: V4L2 device video103 deregistered [ 454.424018][ T5831] em28xx 6-1:0.132: Remote control support is not available for this card. [ 454.433049][ T5968] em28xx 6-1:0.132: Closing input extension [ 454.451543][ T5968] em28xx 6-1:0.132: Freeing device [ 454.455257][ T5915] usb 4-1: Using ep0 maxpacket: 16 [ 454.476865][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 454.488784][ T24] radio-si470x 8-1:0.0: software version 0, hardware version 0 [ 454.503528][ T5915] usb 4-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 454.507231][ T24] radio-si470x 8-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 454.532532][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.560998][ T24] radio-si470x 8-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 454.562238][ T5915] usb 4-1: config 0 descriptor?? [ 454.699975][ T24] radio-si470x 8-1:0.0: submitting int urb failed (-90) [ 455.024259][ T5915] kye 0003:0458:5016.0033: control desc unexpectedly large [ 455.026001][ T5916] uclogic 0003:256C:006D.0032: v1 frame probing failed: -71 [ 455.043370][ T5916] uclogic 0003:256C:006D.0032: failed probing parameters: -71 [ 455.051370][ T5916] uclogic 0003:256C:006D.0032: probe with driver uclogic failed with error -71 [ 455.062076][ T5915] input: HID 0458:5016 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5016.0033/input/input69 [ 455.071543][ T5916] usb 9-1: USB disconnect, device number 23 [ 455.181965][ T5915] input: HID 0458:5016 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5016.0033/input/input70 [ 455.252121][ T5915] kye 0003:0458:5016.0033: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.3-1/input0 [ 455.504378][ T24] radio-si470x 8-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 455.515767][ T30] audit: type=1326 audit(1751575020.489:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15394 comm="syz.9.3059" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff7539 code=0x0 [ 455.538874][ T24] radio-si470x 8-1:0.0: probe with driver radio-si470x failed with error -22 [ 455.578674][ T24] usb 8-1: USB disconnect, device number 35 [ 455.591052][T15376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.640255][T15376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.674834][ T5827] usb 4-1: USB disconnect, device number 39 [ 456.030228][T15410] netlink: 31396 bytes leftover after parsing attributes in process `syz.8.3064'. [ 456.885241][ T5895] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 457.069854][ T5895] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 457.084986][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.106831][ T5895] usb 4-1: config 0 descriptor?? [ 457.528126][ T30] audit: type=1326 audit(1751575022.519:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15438 comm="syz.7.3076" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff2539 code=0x7fc00000 [ 457.697681][ T5827] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 457.885271][ T5827] usb 6-1: Using ep0 maxpacket: 16 [ 457.899906][ T5827] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 457.925905][ T5827] usb 6-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 457.937145][ T5827] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.952292][ T5827] usb 6-1: config 0 descriptor?? [ 458.171223][ T30] audit: type=1326 audit(1751575023.159:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15438 comm="syz.7.3076" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7ff2558 code=0x7fc00000 [ 458.412114][ T5827] kye 0003:0458:5016.0034: control desc unexpectedly large [ 458.464992][ T5827] input: HID 0458:5016 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5016.0034/input/input72 [ 458.562083][ T5895] usb 4-1: Cannot set autoneg [ 458.585516][ T5895] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 458.632722][ T5827] input: HID 0458:5016 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5016.0034/input/input73 [ 458.750999][ T5895] usb 4-1: USB disconnect, device number 40 [ 458.805527][ T5827] kye 0003:0458:5016.0034: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.5-1/input0 [ 458.942397][T15469] syzkaller1: entered promiscuous mode [ 458.985158][T15469] syzkaller1: entered allmulticast mode [ 459.076590][T15472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.103843][T15472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.167330][ T5895] usb 6-1: USB disconnect, device number 47 [ 460.546107][T15503] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3098'. [ 460.720299][T15507] netlink: 'syz.9.3101': attribute type 1 has an invalid length. [ 460.755052][ T5895] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 460.917658][ T5895] usb 9-1: Using ep0 maxpacket: 16 [ 460.929408][ T5895] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 461.010333][ T5895] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 461.035967][ T5895] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.041098][T15508] bond1: (slave bridge1): making interface the new active one [ 461.059449][ T5895] usb 9-1: Product: syz [ 461.072848][ T5895] usb 9-1: Manufacturer: syz [ 461.105162][ T5895] usb 9-1: SerialNumber: syz [ 461.108560][T15508] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 461.187336][ T5895] usb 9-1: config 0 descriptor?? [ 461.229667][ T5895] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 461.304791][ T5895] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 461.354779][ T30] audit: type=1326 audit(1751575026.339:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15481 comm="syz.3.3092" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf705e539 code=0x0 [ 461.831914][ T5895] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 462.251024][T15536] syzkaller1: entered promiscuous mode [ 462.257480][T15536] syzkaller1: entered allmulticast mode [ 462.468419][ T5895] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 462.510038][ T5895] em28xx 9-1:0.0: board has no eeprom [ 462.605153][ T5895] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 462.625864][ T5895] em28xx 9-1:0.0: dvb set to bulk mode. [ 462.652424][ T5915] em28xx 9-1:0.0: Binding DVB extension [ 462.698951][ T5895] usb 9-1: USB disconnect, device number 24 [ 462.716966][ T5895] em28xx 9-1:0.0: Disconnecting em28xx [ 462.882131][ T5915] em28xx 9-1:0.0: Registering input extension [ 462.904094][ T5895] em28xx 9-1:0.0: Closing input extension [ 462.986898][ T5895] em28xx 9-1:0.0: Freeing device [ 463.875168][ T5968] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 464.065071][ T5968] usb 6-1: Using ep0 maxpacket: 8 [ 464.117526][ T5968] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 464.139705][ T5968] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.169803][ T5968] usb 6-1: Product: syz [ 464.174553][ T5968] usb 6-1: Manufacturer: syz [ 464.195100][ T5968] usb 6-1: SerialNumber: syz [ 464.216151][ T5968] usb 6-1: config 0 descriptor?? [ 464.495183][ T5968] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 464.615637][ T30] audit: type=1326 audit(1751575029.609:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15564 comm="syz.7.3121" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7ff2539 code=0x0 [ 465.329037][ T5968] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 465.354460][ T5968] usb 6-1: USB disconnect, device number 48 [ 465.443331][T15613] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3141'. [ 465.505232][ T5895] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 465.665102][ T5895] usb 8-1: Using ep0 maxpacket: 8 [ 465.672201][ T5895] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 465.684295][ T5895] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 465.704408][ T5895] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 465.725035][ T5895] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 465.751642][ T5895] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 465.780094][ T5895] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.988625][T15622] loop2: detected capacity change from 0 to 7 [ 466.011831][ T5895] usb 8-1: GET_CAPABILITIES returned 0 [ 466.025761][ T5895] usbtmc 8-1:16.0: can't read capabilities [ 466.031981][T15622] Dev loop2: unable to read RDB block 7 [ 466.044765][T15622] loop2: unable to read partition table [ 466.051578][T15622] loop2: partition table beyond EOD, truncated [ 466.078405][T15622] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 466.123196][T15625] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3146'. [ 466.155611][T15625] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3146'. [ 466.235949][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 466.245102][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 466.254208][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 466.263925][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 466.273046][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 466.282156][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 466.292884][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 466.302025][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 466.311147][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 466.321856][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 466.330978][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 466.340040][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 466.349094][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 466.358818][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 466.367983][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 466.377098][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 466.397400][ T5895] usb 8-1: USB disconnect, device number 36 [ 467.308866][ T5916] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 467.496625][ T5916] usb 10-1: Using ep0 maxpacket: 16 [ 467.533607][ T5916] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 467.559586][ T5916] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 467.592040][ T5916] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 467.631378][ T5916] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 467.649458][ T5916] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.687398][ T5916] usb 10-1: Product: syz [ 467.691703][ T5916] usb 10-1: Manufacturer: syz [ 467.715034][ T5916] usb 10-1: SerialNumber: syz [ 467.765049][ T5827] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 467.989312][ T5827] usb 4-1: Using ep0 maxpacket: 32 [ 468.015452][ T5827] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 468.055012][ T5827] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.061583][T15660] loop6: detected capacity change from 0 to 7 [ 468.082543][ T5827] usb 4-1: config 0 descriptor?? [ 468.088448][T15660] Dev loop6: unable to read RDB block 7 [ 468.147771][ T5827] gspca_main: sunplus-2.14.0 probing 041e:400b [ 468.149044][T15660] loop6: unable to read partition table [ 468.160238][ T5916] usb 10-1: 2:1 : format type 0 is detected, processed as PCM [ 468.269364][T15660] loop6: partition table beyond EOD, truncated [ 468.285118][T15660] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 468.376247][T15662] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4093662463 (4093662463 ns) > initial count (1099723850 ns). Using initial count to start timer. [ 468.787771][T15665] syzkaller1: entered promiscuous mode [ 468.803766][T15665] syzkaller1: entered allmulticast mode [ 469.303569][ T5916] usb 10-1: USB disconnect, device number 10 [ 469.664990][ T5827] gspca_sunplus: reg_w_riv err -71 [ 469.670252][ T5827] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 469.720170][ T5827] usb 4-1: USB disconnect, device number 41 [ 470.640807][T15702] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3175'. [ 471.866099][T15746] netlink: 'syz.3.3193': attribute type 12 has an invalid length. [ 471.879466][T15746] netlink: 'syz.3.3193': attribute type 29 has an invalid length. [ 471.894595][T15746] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3193'. [ 471.915101][T15746] netlink: 'syz.3.3193': attribute type 2 has an invalid length. [ 471.929867][T15746] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3193'. [ 472.505072][ T5827] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 472.693018][ T5827] usb 4-1: Using ep0 maxpacket: 16 [ 472.704953][ T5827] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 472.714134][ T5827] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 472.745803][ T5827] usb 4-1: config 0 has no interface number 0 [ 472.792253][ T5827] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 472.811703][ T5895] usb 10-1: new low-speed USB device number 11 using dummy_hcd [ 472.833937][ T5827] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.855013][ T5827] usb 4-1: Product: syz [ 472.859325][ T5827] usb 4-1: Manufacturer: syz [ 472.874178][ T5827] usb 4-1: SerialNumber: syz [ 472.911905][ T5827] usb 4-1: config 0 descriptor?? [ 472.931241][ T5827] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 472.977372][ T5895] usb 10-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 473.012954][ T5827] usb 4-1: No valid video chain found. [ 473.025428][ T5895] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.055264][ T5895] usb 10-1: config 0 descriptor?? [ 473.120043][ T30] audit: type=1326 audit(1751575038.109:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15778 comm="syz.8.3207" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ee558 code=0x7ffc0000 [ 473.158285][ T5827] usb 4-1: USB disconnect, device number 42 [ 473.207436][ T30] audit: type=1326 audit(1751575038.149:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15778 comm="syz.8.3207" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ee558 code=0x7ffc0000 [ 473.251703][ T30] audit: type=1326 audit(1751575038.149:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15778 comm="syz.8.3207" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ee558 code=0x7ffc0000 [ 473.305983][ T30] audit: type=1326 audit(1751575038.149:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15778 comm="syz.8.3207" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 473.317123][T15776] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 473.349513][ T30] audit: type=1326 audit(1751575038.149:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15778 comm="syz.8.3207" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ee558 code=0x7ffc0000 [ 473.374785][ T30] audit: type=1326 audit(1751575038.149:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15778 comm="syz.8.3207" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ee558 code=0x7ffc0000 [ 473.401371][ T30] audit: type=1326 audit(1751575038.149:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15778 comm="syz.8.3207" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ee558 code=0x7ffc0000 [ 473.482410][ T30] audit: type=1326 audit(1751575038.149:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15778 comm="syz.8.3207" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 473.544578][ T30] audit: type=1326 audit(1751575038.149:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15778 comm="syz.8.3207" exe="/root/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf70ee558 code=0x7ffc0000 [ 473.654868][ T30] audit: type=1326 audit(1751575038.159:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15778 comm="syz.8.3207" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70ee539 code=0x7ffc0000 [ 474.515312][ T24] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 474.517187][ T5895] asix 10-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 474.549706][ T5895] asix 10-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 474.572272][ T5895] asix 10-1:0.0: probe with driver asix failed with error -71 [ 474.592636][ T5895] usb 10-1: USB disconnect, device number 11 [ 474.690327][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 474.715048][ T24] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 474.724790][ T24] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 474.747245][ T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 474.772342][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.795548][ T24] usb 4-1: Product: syz [ 474.799768][ T24] usb 4-1: Manufacturer: syz [ 474.812265][ T24] usb 4-1: SerialNumber: syz [ 475.077575][ T24] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 43 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 475.178521][T15822] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3226'. [ 475.265160][ T5827] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 475.468529][ T5827] usb 6-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 475.492107][ T5827] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.539282][ T5827] usb 6-1: config 0 descriptor?? [ 475.563825][ T5827] gspca_main: spca508-2.14.0 probing 8086:0110 [ 475.782172][ T5827] gspca_spca508: reg_read err -32 [ 475.796294][ T5827] gspca_spca508: reg_read err -32 [ 475.802547][ T5827] gspca_spca508: reg_read err -32 [ 476.010471][ T5827] gspca_spca508: reg_read err -32 [ 476.224275][ T5827] gspca_spca508: reg write: error -71 [ 476.239585][ T5827] spca508 6-1:0.0: probe with driver spca508 failed with error -71 [ 476.259392][ T5827] usb 6-1: USB disconnect, device number 49 [ 477.006483][T15857] syzkaller1: entered promiscuous mode [ 477.018908][T15857] syzkaller1: entered allmulticast mode [ 477.381914][T15863] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 477.877641][T15873] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 477.895047][ T5895] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 477.929803][ T5833] Bluetooth: hci3: command 0x0406 tx timeout [ 478.059548][ T5895] usb 9-1: Using ep0 maxpacket: 16 [ 478.068666][ T5895] usb 9-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 478.088376][ T5895] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 478.103285][ T5895] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 478.115398][ T5895] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 478.124888][ T5895] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.133304][ T5895] usb 9-1: Product: syz [ 478.137991][ T5895] usb 9-1: Manufacturer: syz [ 478.142657][ T5895] usb 9-1: SerialNumber: syz [ 478.201243][T15879] kvm: user requested TSC rate below hardware speed [ 478.463811][T13962] syz_tun (unregistering): left promiscuous mode [ 478.595097][ T5895] usb 9-1: 0:2 : does not exist [ 478.664618][T15892] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3253'. [ 479.542375][ T5915] usb 9-1: USB disconnect, device number 25 [ 479.563756][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 479.576429][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 479.587382][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 479.598697][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 479.609795][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 479.648109][ T5932] udevd[5932]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 480.340771][T15803] usblp0:failed reading printer status (-110) [ 480.423335][ T5915] usb 4-1: USB disconnect, device number 43 [ 480.460096][ T5915] usblp0: removed [ 480.575778][T15915] input: syz1 as /devices/virtual/input/input76 [ 480.582006][ T5968] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 480.691670][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 480.708209][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 480.724275][ T59] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 480.735304][ T5968] usb 6-1: Using ep0 maxpacket: 8 [ 480.747457][ T5968] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 480.761792][ T5968] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.770890][ T59] bond0 (unregistering): Released all slaves [ 480.774964][ T5968] usb 6-1: Product: syz [ 480.785264][ T5968] usb 6-1: Manufacturer: syz [ 480.789898][ T5968] usb 6-1: SerialNumber: syz [ 480.808704][ T5968] usb 6-1: config 0 descriptor?? [ 480.900488][ T59] tipc: Left network mode [ 481.026013][ T5968] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 481.403127][ T59] batadv_slave_0: left promiscuous mode [ 481.419026][ T59] hsr_slave_0: left promiscuous mode [ 481.431776][ T59] hsr_slave_1: left promiscuous mode [ 481.438836][ T59] batman_adv: batadv0: Removing interface: dummy0 [ 481.454469][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 481.463788][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 481.773635][ T5833] Bluetooth: hci1: command tx timeout [ 481.845316][ T5827] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 482.033803][ T5827] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.050582][ T5827] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 482.067365][ T5827] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 482.076790][ T5827] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.088543][ T5827] usb 9-1: config 0 descriptor?? [ 482.160846][ T59] team0 (unregistering): Port device team_slave_1 removed [ 482.250957][ T5968] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 482.282733][ T59] team0 (unregistering): Port device team_slave_0 removed [ 482.294851][ T5968] usb 6-1: USB disconnect, device number 50 [ 482.517206][ T5827] plantronics 0003:047F:FFFF.0035: unknown main item tag 0x0 [ 482.556927][ T5827] plantronics 0003:047F:FFFF.0035: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 482.833782][ T5968] usb 9-1: USB disconnect, device number 26 [ 483.845593][ T5833] Bluetooth: hci1: command tx timeout [ 483.949821][T15895] chnl_net:caif_netlink_parms(): no params data found [ 484.620614][T15895] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.638776][T15895] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.647419][T15895] bridge_slave_0: entered allmulticast mode [ 484.661080][T15895] bridge_slave_0: entered promiscuous mode [ 484.681132][T15895] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.692178][T15895] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.706845][T15895] bridge_slave_1: entered allmulticast mode [ 484.714720][T15895] bridge_slave_1: entered promiscuous mode [ 484.993968][T15895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 485.045480][T15895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 485.169683][T15895] team0: Port device team_slave_0 added [ 485.190419][T15895] team0: Port device team_slave_1 added [ 485.315176][ T5968] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 485.529801][ T5968] usb 9-1: Using ep0 maxpacket: 16 [ 485.562078][T15895] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 485.585550][ T5968] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.605029][T15895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 485.645044][ T5968] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 485.695014][ T5968] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 485.739753][T15895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 485.750992][ T5968] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 485.782663][ T5968] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.795524][T15895] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 485.814336][T15895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 485.841678][ T5968] usb 9-1: config 0 descriptor?? [ 485.920976][T15895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 485.928306][ T5833] Bluetooth: hci1: command tx timeout [ 486.345092][ T5916] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 486.524739][ T5968] microsoft 0003:045E:07DA.0036: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0 [ 486.567939][ T5916] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 486.584026][ T5916] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 486.588722][T15895] hsr_slave_0: entered promiscuous mode [ 486.599611][ T5968] microsoft 0003:045E:07DA.0036: no inputs found [ 486.614162][ T5968] microsoft 0003:045E:07DA.0036: could not initialize ff, continuing anyway [ 486.624268][T15895] hsr_slave_1: entered promiscuous mode [ 486.624578][ T5916] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 486.643570][ T5968] usb 9-1: USB disconnect, device number 27 [ 486.645181][T15895] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 486.649680][ T5916] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 486.667644][ T5916] usb 6-1: SerialNumber: syz [ 486.685887][T15895] Cannot create hsr debugfs directory [ 486.743010][T16064] fido_id[16064]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 486.933526][ T5916] usb 6-1: 0:2 : does not exist [ 486.995833][ T5916] usb 6-1: USB disconnect, device number 51 [ 487.144855][ T5992] udevd[5992]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 487.645408][ T5916] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 487.826322][ T5916] usb 4-1: Using ep0 maxpacket: 32 [ 487.870661][ T5916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 487.930302][ T5916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 487.982471][ T5916] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 488.006317][ T5833] Bluetooth: hci1: command tx timeout [ 488.016410][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.077456][ T5916] usb 4-1: config 0 descriptor?? [ 488.128923][ T5916] hub 4-1:0.0: USB hub found [ 488.288730][T16100] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3313'. [ 488.322519][ T5916] hub 4-1:0.0: 1 port detected [ 488.945057][ T43] hub 4-1:0.0: activate --> -90 [ 489.225046][ T5916] usb 10-1: new full-speed USB device number 12 using dummy_hcd [ 489.276476][ T5827] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 489.420580][ T5916] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 489.432418][T15895] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 489.446082][ T5916] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 489.462238][ T5916] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 489.465529][ T5827] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 489.472528][ T43] usb 4-1: USB disconnect, device number 44 [ 489.492732][ T5916] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 489.499996][T15895] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 489.517084][ T5827] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 489.553522][ T5916] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 489.564175][ T5827] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 489.580621][ T5827] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 489.584253][T15895] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 489.599547][ T5916] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 489.619730][ T5916] usb 10-1: Manufacturer: syz [ 489.623725][ T5827] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 489.635347][ T5916] usb 10-1: config 0 descriptor?? [ 489.647177][T15895] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 489.660410][ T5827] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 489.694461][ T5827] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 489.724135][ T5827] usb 6-1: Product: syz [ 489.741449][ T5827] usb 6-1: Manufacturer: syz [ 489.770959][ T5827] cdc_wdm 6-1:1.0: skipping garbage [ 489.814357][ T5827] cdc_wdm 6-1:1.0: skipping garbage [ 489.833455][ T5827] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 489.860462][ T5827] cdc_wdm 6-1:1.0: Unknown control protocol [ 489.917609][T15895] 8021q: adding VLAN 0 to HW filter on device bond0 [ 489.996899][T15895] 8021q: adding VLAN 0 to HW filter on device team0 [ 490.058113][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.065320][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 490.075216][ T5916] rc_core: IR keymap rc-hauppauge not found [ 490.081152][ T5916] Registered IR keymap rc-empty [ 490.103098][ T5916] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 490.140198][ T9001] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.147603][ T9001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 490.167501][ T5916] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 490.206247][ T5916] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0 [ 490.233534][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 490.240187][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 490.246982][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 490.253626][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 490.260471][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 490.267108][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 490.269391][ T5916] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input78 [ 490.273765][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 490.292276][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 490.319899][ T5827] usb 6-1: USB disconnect, device number 52 [ 490.401828][ T5916] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 490.492946][ T5916] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 490.513265][T15895] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 490.537794][ T5916] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 490.575499][ T5916] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 490.605781][ T5916] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 490.636797][ T5916] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 490.675963][ T5916] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 490.698092][T15895] veth0_vlan: entered promiscuous mode [ 490.715770][ T5916] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 490.740002][ T5916] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 490.760957][T15895] veth1_vlan: entered promiscuous mode [ 490.790322][ T5916] mceusb 10-1:0.0: Error: mce write submit urb error = -90 [ 490.796228][T16181] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3329'. [ 490.845614][ T5916] mceusb 10-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 490.880062][ T5916] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 490.911366][T15895] veth0_macvtap: entered promiscuous mode [ 490.943683][ T5916] usb 10-1: USB disconnect, device number 12 [ 490.948674][T15895] veth1_macvtap: entered promiscuous mode [ 491.027970][T15895] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 491.067995][T15895] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 491.099778][T15895] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.129230][T15895] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.153810][T15895] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.180419][T15895] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.493981][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.517963][T16204] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3334'. [ 491.531182][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.554882][T16204] netlink: 'syz.9.3334': attribute type 11 has an invalid length. [ 491.581573][T16204] netlink: 'syz.9.3334': attribute type 18 has an invalid length. [ 491.629450][T16204] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 491.638400][T16204] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 491.647220][T16204] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 491.656095][T16204] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 491.688402][T16204] vxlan0: entered promiscuous mode [ 491.738010][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.776248][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.108838][T16281] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3355'. [ 494.133740][T16281] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3355'. [ 495.380485][T16322] netlink: 'syz.5.3365': attribute type 12 has an invalid length. [ 495.422367][T16322] netlink: 'syz.5.3365': attribute type 29 has an invalid length. [ 495.445363][T16322] netlink: 148 bytes leftover after parsing attributes in process `syz.5.3365'. [ 496.045832][ T5895] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 496.225318][ T5895] usb 6-1: Using ep0 maxpacket: 32 [ 496.249551][ T5895] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 496.267076][ T5895] usb 6-1: config 0 has no interface number 0 [ 496.290777][ T5895] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 496.317387][ T5895] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 496.340018][ T5895] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.394995][ T5895] usb 6-1: Product: syz [ 496.401066][ T5895] usb 6-1: Manufacturer: syz [ 496.423041][ T5895] usb 6-1: SerialNumber: syz [ 496.454064][ T5895] usb 6-1: config 0 descriptor?? [ 496.512245][ T5895] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 496.552943][ T5895] em28xx 6-1:0.132: Video interface 132 found: [ 496.583371][T16358] netlink: 'syz.3.3377': attribute type 1 has an invalid length. [ 496.713127][T16363] bond1: (slave gretap1): making interface the new active one [ 496.738950][T16363] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 496.902008][ T5895] em28xx 6-1:0.132: unknown em28xx chip ID (0) [ 497.285872][ T43] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 497.335531][ T5895] em28xx 6-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 497.365247][ T5895] em28xx 6-1:0.132: board has no eeprom [ 497.455007][ T5895] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 497.458872][ T43] usb 9-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 497.467851][ T5895] em28xx 6-1:0.132: analog set to bulk mode. [ 497.496609][ T923] em28xx 6-1:0.132: Registering V4L2 extension [ 497.500126][ T43] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.536348][ T43] usb 9-1: Product: syz [ 497.547792][ T43] usb 9-1: Manufacturer: syz [ 497.561469][ T43] usb 9-1: SerialNumber: syz [ 497.578280][ T43] usb 9-1: config 0 descriptor?? [ 497.632705][ T43] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 497.690323][T16115] usb 6-1: USB disconnect, device number 53 [ 497.697142][ T923] em28xx 6-1:0.132: failed to trigger read from i2c address 0x4a (error=-19) [ 497.704741][T16115] em28xx 6-1:0.132: Disconnecting em28xx [ 497.890405][ T923] em28xx 6-1:0.132: Config register raw data: 0xffffffed [ 497.918176][ T923] em28xx 6-1:0.132: AC97 chip type couldn't be determined [ 497.938411][ T923] em28xx 6-1:0.132: No AC97 audio processor [ 497.969538][ T923] usb 6-1: Decoder not found [ 497.975193][ T923] em28xx 6-1:0.132: failed to create media graph [ 497.981579][ T923] em28xx 6-1:0.132: V4L2 device video103 deregistered [ 498.025879][ T923] em28xx 6-1:0.132: Remote control support is not available for this card. [ 498.055344][T16115] em28xx 6-1:0.132: Closing input extension [ 498.127857][T16115] em28xx 6-1:0.132: Freeing device [ 498.586204][ T30] kauditd_printk_skb: 484 callbacks suppressed [ 498.586221][ T30] audit: type=1326 audit(1751575063.579:1115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16420 comm="syz.9.3391" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7ff7539 code=0x0 [ 498.679289][ T30] audit: type=1326 audit(1751575063.609:1116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16421 comm="syz.5.3392" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53539 code=0x7fc00000 [ 498.694960][T16430] netlink: 'syz.3.3394': attribute type 4 has an invalid length. [ 498.707290][ T30] audit: type=1326 audit(1751575063.609:1117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16421 comm="syz.5.3392" exe="/root/syz-executor" sig=0 arch=40000003 syscall=329 compat=1 ip=0xf7f53539 code=0x7fc00000 [ 498.742766][ T30] audit: type=1326 audit(1751575063.619:1118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16421 comm="syz.5.3392" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f53539 code=0x7fc00000 [ 498.775393][T16432] netlink: 'syz.3.3394': attribute type 4 has an invalid length. [ 499.104544][ T43] gspca_sunplus: reg_r err -71 [ 499.115298][ T43] sunplus 9-1:0.0: probe with driver sunplus failed with error -71 [ 499.171529][ T43] usb 9-1: USB disconnect, device number 28 [ 500.762993][T16477] netlink: 'syz.3.3405': attribute type 1 has an invalid length. [ 501.455248][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.461609][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.035234][ T923] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 503.225104][ T923] usb 5-1: Using ep0 maxpacket: 32 [ 503.246394][ T923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 503.273897][ T923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 42399, setting to 1024 [ 503.313406][ T923] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 503.333392][ T923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.368643][ T923] usb 5-1: config 0 descriptor?? [ 503.424898][T16546] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 503.442527][ T923] hub 5-1:0.0: USB hub found [ 503.651361][ T923] hub 5-1:0.0: 1 port detected [ 504.676174][ T923] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 504.683610][ T5895] usb 5-1: USB disconnect, device number 5 [ 505.933272][T16653] VFS: Mount too revealing [ 507.005803][ T43] usb 6-1: new low-speed USB device number 54 using dummy_hcd [ 507.155026][ T5917] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 507.199401][ T43] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 507.215019][ T43] usb 6-1: config 179 has no interface number 0 [ 507.221878][ T43] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 507.242346][ T43] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 507.253588][ T43] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 507.272964][ T43] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 58368, setting to 8 [ 507.289164][ T43] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 507.310468][ T43] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 507.320317][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.341145][ T5917] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 507.354489][ T5917] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 507.369650][ T5917] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 507.380724][T16671] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 507.399015][ T43] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 507.409436][T16115] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 507.425621][ T5917] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 507.450425][ T43] xpad 6-1:179.65: probe with driver xpad failed with error -5 [ 507.471595][ T5917] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 507.493532][ T5917] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 507.513586][ T5917] usb 4-1: Manufacturer: syz [ 507.533870][ T5917] usb 4-1: config 0 descriptor?? [ 507.608155][ T43] usb 6-1: USB disconnect, device number 54 [ 507.620252][T16115] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 507.637332][T16115] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 507.647587][T16115] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.661344][T16115] usb 10-1: config 0 descriptor?? [ 507.689374][T16115] pwc: Askey VC010 type 2 USB webcam detected. [ 507.845531][ T5917] rc_core: IR keymap rc-hauppauge not found [ 507.851513][ T5917] Registered IR keymap rc-empty [ 507.865930][ T5917] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 507.906090][ T5917] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 507.949852][ T5917] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 507.966296][ T5917] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input79 [ 508.014412][ T5917] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 508.045617][ T5917] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 508.075865][ T5917] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 508.090758][T16115] pwc: recv_control_msg error -32 req 02 val 2b00 [ 508.100123][T16115] pwc: recv_control_msg error -32 req 02 val 2700 [ 508.109284][T16115] pwc: recv_control_msg error -32 req 02 val 2c00 [ 508.116601][ T5917] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 508.150765][ T5917] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 508.195348][ T5917] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 508.235100][ T5917] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 508.285310][ T5917] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 508.311033][ T5917] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 508.336683][T16115] pwc: recv_control_msg error -71 req 04 val 1300 [ 508.349320][T16115] pwc: recv_control_msg error -71 req 04 val 1400 [ 508.365657][T16115] pwc: recv_control_msg error -71 req 02 val 2000 [ 508.376475][ T5917] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 508.386384][T16115] pwc: recv_control_msg error -71 req 02 val 2100 [ 508.393386][T16115] pwc: recv_control_msg error -71 req 04 val 1500 [ 508.401042][T16115] pwc: recv_control_msg error -71 req 02 val 2500 [ 508.420815][ T5917] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 508.436783][T16115] pwc: recv_control_msg error -71 req 02 val 2400 [ 508.453663][ T5917] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 508.469050][T16115] pwc: recv_control_msg error -71 req 02 val 2600 [ 508.493197][T16115] pwc: recv_control_msg error -71 req 02 val 2900 [ 508.505460][ T5917] usb 4-1: USB disconnect, device number 45 [ 508.524608][T16115] pwc: recv_control_msg error -71 req 02 val 2800 [ 508.537645][T16115] pwc: recv_control_msg error -71 req 04 val 1100 [ 508.554764][T16115] pwc: recv_control_msg error -71 req 04 val 1200 [ 508.601246][T16115] pwc: Registered as video103. [ 508.663291][T16115] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input80 [ 508.725033][T16115] usb 10-1: USB disconnect, device number 13 [ 508.935026][ T5888] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 508.968511][T16722] binder: 16721:16722 ioctl c0306201 80000640 returned -22 [ 509.111519][ T5888] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 509.143255][ T5888] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 509.154104][ T5888] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 509.164192][ T5888] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.193901][ T5888] usb 9-1: config 0 descriptor?? [ 509.385125][T16115] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 509.627879][ T5888] pyra 0003:1E7D:2CF6.0037: unknown main item tag 0x0 [ 509.634731][ T5888] pyra 0003:1E7D:2CF6.0037: unknown main item tag 0x0 [ 509.665078][T16115] usb 10-1: Using ep0 maxpacket: 32 [ 509.685981][T16115] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 509.699211][ T5888] pyra 0003:1E7D:2CF6.0037: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.8-1/input0 [ 509.721280][T16115] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 509.740011][T16115] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 509.789942][T16115] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.836413][T16115] usb 10-1: config 0 descriptor?? [ 509.866792][T16115] hub 10-1:0.0: USB hub found [ 509.936057][T16753] netlink: 'syz.3.3468': attribute type 1 has an invalid length. [ 510.014503][T16753] 8021q: adding VLAN 0 to HW filter on device bond2 [ 510.060676][T16115] hub 10-1:0.0: 1 port detected [ 510.074707][T16753] dummy0: entered promiscuous mode [ 510.144102][T16753] bond2: (slave dummy0): making interface the new active one [ 510.170491][T16753] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 510.428318][ T5888] pyra 0003:1E7D:2CF6.0037: couldn't init struct pyra_device [ 510.448543][ T5888] pyra 0003:1E7D:2CF6.0037: couldn't install mouse [ 510.480659][ T5888] pyra 0003:1E7D:2CF6.0037: probe with driver pyra failed with error -71 [ 510.532478][ T5888] usb 9-1: USB disconnect, device number 29 [ 510.719560][T16115] hub 10-1:0.0: activate --> -90 [ 511.285566][ T923] usb 10-1: USB disconnect, device number 14 [ 511.552106][T16799] netlink: 'syz.8.3478': attribute type 1 has an invalid length. [ 511.746244][T16803] bond1: (slave bridge1): making interface the new active one [ 511.790477][T16803] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 512.259482][T16814] netlink: 'syz.8.3483': attribute type 1 has an invalid length. [ 512.763207][T16840] input: syz0 as /devices/virtual/input/input81 [ 512.842668][T16832] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.851712][T16832] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.875083][ T923] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 512.961524][T16832] batman_adv: batadv0: Interface deactivated: dummy0 [ 513.065012][ T923] usb 10-1: Using ep0 maxpacket: 16 [ 513.094617][ T923] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 513.115797][ T923] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 513.165004][ T923] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.187526][ T923] usb 10-1: config 0 descriptor?? [ 513.364010][T16832] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 513.637566][ T923] mcp2221 0003:04D8:00DD.0038: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.9-1/input0 [ 513.900709][T16832] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.915245][T16832] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.961943][T16832] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.995223][T16832] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.059702][ T5915] usb 10-1: USB disconnect, device number 15 [ 514.295289][T16832] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 514.304638][T16832] netdevsim netdevsim8 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 514.314004][T16832] netdevsim netdevsim8 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 514.323358][T16832] netdevsim netdevsim8 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 514.362727][T16868] syzkaller1: entered promiscuous mode [ 514.372528][T16868] syzkaller1: entered allmulticast mode [ 514.984631][T16898] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3507'. [ 516.565139][T16115] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 516.728302][T16954] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.736092][T16954] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.773085][T16115] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 516.834515][T16115] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 516.844486][ T43] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 516.934542][T16115] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 517.004124][T16954] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 517.020114][T16954] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 517.054162][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 517.102989][ T43] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 517.131216][T16115] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 517.158168][T16115] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 517.178317][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.195226][T16115] usb 9-1: Product: syz [ 517.214490][T16115] usb 9-1: Manufacturer: syz [ 517.221085][ T43] usb 6-1: config 0 descriptor?? [ 517.232803][T16115] usb 9-1: SerialNumber: syz [ 517.377186][T16954] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.402238][T16954] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.430533][T16954] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.455072][T16954] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.473451][ T43] usbhid 6-1:0.0: can't add hid device: -71 [ 517.489179][T16115] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 30 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 517.512109][ T43] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 517.542718][ T43] usb 6-1: USB disconnect, device number 55 [ 517.772592][ T5915] usb 9-1: USB disconnect, device number 30 [ 517.794491][T16945] usblp0: removed [ 518.005079][ T43] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 518.199340][ T43] usb 6-1: Using ep0 maxpacket: 32 [ 518.216050][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 518.235028][ T43] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 518.259148][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.297570][ T43] usb 6-1: config 0 descriptor?? [ 518.322006][ T43] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 518.373711][ T43] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 518.595892][T17001] syzkaller1: entered promiscuous mode [ 518.601663][T17001] syzkaller1: entered allmulticast mode [ 518.728862][T16953] ldusb 6-1:0.0: Read buffer overflow, 297 bytes dropped [ 518.758204][ T5888] usb 6-1: USB disconnect, device number 56 [ 518.779342][ T5888] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 518.835022][ T43] usb 9-1: new full-speed USB device number 31 using dummy_hcd [ 519.002004][ T43] usb 9-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 519.018996][ T43] usb 9-1: config 0 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 519.052832][ T43] usb 9-1: config 0 interface 0 has no altsetting 0 [ 519.073068][ T43] usb 9-1: New USB device found, idVendor=047f, idProduct=c055, bcdDevice= 0.00 [ 519.085164][ T43] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.105966][ T43] usb 9-1: config 0 descriptor?? [ 519.112364][T17003] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 519.341300][T17003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.365912][T17003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.384675][ T43] usbhid 9-1:0.0: can't add hid device: -71 [ 519.419717][ T43] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 519.451049][ T43] usb 9-1: USB disconnect, device number 31 [ 519.571562][T17029] netlink: 1964 bytes leftover after parsing attributes in process `syz.4.3534'. [ 519.622015][T17029] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3534'. [ 519.945233][ T43] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 520.136166][ T43] usb 9-1: Using ep0 maxpacket: 32 [ 520.160561][ T43] usb 9-1: config 0 interface 0 altsetting 4 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 520.211709][ T43] usb 9-1: config 0 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 520.266937][ T43] usb 9-1: config 0 interface 0 has no altsetting 0 [ 520.274396][ T43] usb 9-1: New USB device found, idVendor=047f, idProduct=c055, bcdDevice= 0.00 [ 520.291709][ T43] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.312122][ T43] usb 9-1: config 0 descriptor?? [ 520.327631][ T43] hub 9-1:0.0: bad descriptor, ignoring hub [ 520.334017][ T43] hub 9-1:0.0: probe with driver hub failed with error -5 [ 520.791994][ T43] plantronics 0003:047F:C055.0039: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:c055] on usb-dummy_hcd.8-1/input0 [ 521.176319][ T5895] usb 9-1: USB disconnect, device number 32 [ 521.178944][T17080] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3548'. [ 522.494354][T17125] input: syz1 as /devices/virtual/input/input82 [ 522.683819][T17132] usb usb8: usbfs: process 17132 (syz.4.3564) did not claim interface 11 before use [ 523.505504][ T5916] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 523.672109][T17174] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3579'. [ 523.700937][ T5916] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 523.737410][ T5916] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 523.792198][ T5916] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 523.847071][ T5916] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 523.883770][ T5916] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 523.905506][ T5916] usb 6-1: Product: syz [ 523.910866][ T5916] usb 6-1: Manufacturer: syz [ 523.928154][ T5916] usb 6-1: SerialNumber: syz [ 524.174572][ T5916] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 57 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 524.509826][ T5916] usb 6-1: USB disconnect, device number 57 [ 524.570055][T17157] usblp0: removed [ 526.504030][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 526.513630][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 526.527803][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 526.556399][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 526.576634][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 527.065722][ T5915] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 527.288375][ T5915] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 527.311824][ T5915] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 527.360013][ T5915] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 527.399803][ T5915] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.421601][T17268] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 527.457748][ T5915] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 527.567305][T17264] chnl_net:caif_netlink_parms(): no params data found [ 527.577730][ T5916] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 527.775437][ T5916] usb 5-1: config 0 has an invalid interface number: 199 but max is 0 [ 527.823291][ T5916] usb 5-1: config 0 has no interface number 0 [ 527.830159][ T5888] usb 9-1: USB disconnect, device number 33 [ 527.849730][ T5916] usb 5-1: config 0 interface 199 has no altsetting 0 [ 527.879421][ T5916] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=8e.1e [ 527.895929][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.914174][ T5916] usb 5-1: Product: syz [ 527.927835][ T5916] usb 5-1: Manufacturer: syz [ 527.932537][ T5916] usb 5-1: SerialNumber: syz [ 527.954185][ T5916] usb 5-1: config 0 descriptor?? [ 528.208723][ T5916] usbtest 5-1:0.199: couldn't get endpoints, -22 [ 528.215982][ T5916] usbtest 5-1:0.199: probe with driver usbtest failed with error -22 [ 528.243245][ T5916] usb 5-1: USB disconnect, device number 6 [ 528.277689][T17264] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.304724][T17264] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.314003][T17264] bridge_slave_0: entered allmulticast mode [ 528.323067][T17264] bridge_slave_0: entered promiscuous mode [ 528.366164][T17264] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.373332][T17264] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.381988][T17264] bridge_slave_1: entered allmulticast mode [ 528.390559][T17264] bridge_slave_1: entered promiscuous mode [ 528.461869][T17264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 528.479474][T17264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 528.653938][ T5833] Bluetooth: hci3: command tx timeout [ 528.686662][T17264] team0: Port device team_slave_0 added [ 528.771645][T17264] team0: Port device team_slave_1 added [ 529.033762][T17264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 529.076293][T17264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 529.169271][T17264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 529.228393][T17264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 529.252840][T17264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 529.319902][T17264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 529.405652][ T5915] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 529.454566][T17354] loop2: detected capacity change from 0 to 7 [ 529.482325][ T5992] Dev loop2: unable to read RDB block 7 [ 529.491847][ T5992] loop2: unable to read partition table [ 529.503417][ T5992] loop2: partition table beyond EOD, truncated [ 529.513309][T17264] hsr_slave_0: entered promiscuous mode [ 529.520416][T17264] hsr_slave_1: entered promiscuous mode [ 529.529801][T17354] Dev loop2: unable to read RDB block 7 [ 529.535647][ T5888] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 529.546829][T17264] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 529.554433][T17264] Cannot create hsr debugfs directory [ 529.560294][T17354] loop2: unable to read partition table [ 529.566914][T17354] loop2: partition table beyond EOD, truncated [ 529.567704][ T5915] usb 6-1: Using ep0 maxpacket: 16 [ 529.584772][T17354] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 529.604136][ T5915] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 529.628654][ T5915] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 529.650785][ T5915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.672749][ T5915] usb 6-1: config 0 descriptor?? [ 529.705008][ T5888] usb 10-1: Using ep0 maxpacket: 32 [ 529.712339][ T5888] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 529.728363][ T5888] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 529.748534][ T5888] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 529.777722][ T5888] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 529.809480][ T5888] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 529.839017][ T5888] usb 10-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 529.852998][ T5888] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.870417][ T5888] usb 10-1: Product: syz [ 529.879219][ T5888] usb 10-1: Manufacturer: syz [ 529.890689][ T5888] usb 10-1: SerialNumber: syz [ 529.913797][ T5888] usb 10-1: config 0 descriptor?? [ 530.005575][T17264] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.076695][T17264] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.129071][ T5915] mcp2221 0003:04D8:00DD.003A: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 530.310028][T17264] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.368414][ T5888] iforce 10-1:0.0: usb_submit_urb failed: -32 [ 530.386903][ T5888] input input83: Device does not respond to id packet M [ 530.396500][ T5888] iforce 10-1:0.0: usb_submit_urb failed: -32 [ 530.403547][ T5888] input input83: Device does not respond to id packet P [ 530.420478][ T5888] iforce 10-1:0.0: usb_submit_urb failed: -32 [ 530.428167][ T5888] input input83: Device does not respond to id packet B [ 530.437276][ T5888] input input83: Limiting number of effects to 32 (device reports 101) [ 530.500084][T17264] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.621656][ T43] usb 6-1: USB disconnect, device number 58 [ 530.638953][ T5888] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 530.676693][ T5888] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 530.707212][ T5888] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 530.715367][ T5888] iforce 10-1:0.0: usb_submit_urb failed: -71 [ 530.725209][ T5833] Bluetooth: hci3: command tx timeout [ 530.732665][ T5888] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input83 [ 530.824643][ T5888] usb 10-1: USB disconnect, device number 16 [ 530.974795][T17264] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 530.992291][T17264] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 531.009929][T17264] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 531.022218][T17264] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 531.182290][T17264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 531.274387][T17264] 8021q: adding VLAN 0 to HW filter on device team0 [ 531.298724][ T3544] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.305943][ T3544] bridge0: port 1(bridge_slave_0) entered forwarding state [ 531.423617][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.430901][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 531.661902][T17264] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 531.911809][T17264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 532.072410][T17264] veth0_vlan: entered promiscuous mode [ 532.188539][T17264] veth1_vlan: entered promiscuous mode [ 532.329228][T17264] veth0_macvtap: entered promiscuous mode [ 532.364331][T17264] veth1_macvtap: entered promiscuous mode [ 532.471251][T17264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 532.512605][T17264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 532.558856][T17264] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.618746][T17264] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.663258][T17264] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.701524][T17264] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.805911][ T5841] Bluetooth: hci3: command tx timeout [ 533.029928][ T9003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.047398][ T9003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.171972][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.193108][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.355856][ T5895] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 533.487909][T17459] input: syz1 as /devices/virtual/input/input84 [ 533.545258][ T5895] usb 9-1: Using ep0 maxpacket: 32 [ 533.562041][ T5895] usb 9-1: config index 0 descriptor too short (expected 38678, got 435) [ 533.600788][ T5895] usb 9-1: config 228 has too many interfaces: 239, using maximum allowed: 32 [ 533.629052][ T5895] usb 9-1: config 228 has an invalid descriptor of length 0, skipping remainder of the config [ 533.679995][ T5895] usb 9-1: config 228 has 0 interfaces, different from the descriptor's value: 239 [ 533.718700][ T5895] usb 9-1: New USB device found, idVendor=0856, idProduct=bc00, bcdDevice=b2.7f [ 533.737413][ T5895] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.761554][ T5895] usb 9-1: Product: syz [ 533.815136][ T5895] usb 9-1: Manufacturer: syz [ 533.819798][ T5895] usb 9-1: SerialNumber: syz [ 534.248669][ T5841] Bluetooth: hci0: command 0x0406 tx timeout [ 534.431765][T17484] netlink: 'syz.5.3653': attribute type 1 has an invalid length. [ 534.467805][ T5917] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 534.515873][T17484] 8021q: adding VLAN 0 to HW filter on device bond4 [ 534.592138][ T5895] usb 9-1: USB disconnect, device number 34 [ 534.685491][ T5917] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 534.719761][ T5917] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 534.741880][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.769003][ T5917] usb 4-1: config 0 descriptor?? [ 534.886124][ T5833] Bluetooth: hci3: command tx timeout [ 535.010113][ T5917] usbhid 4-1:0.0: can't add hid device: -71 [ 535.036926][ T5917] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 535.078578][ T5917] usb 4-1: USB disconnect, device number 46 [ 535.464256][T17511] input: syz1 as /devices/virtual/input/input85 [ 535.625147][ T5888] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 535.673813][T17517] loop2: detected capacity change from 0 to 7 [ 535.681897][T17516] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3660'. [ 535.702631][T17517] loop2: [ 535.710541][T17517] loop2: partition table partially beyond EOD, truncated [ 535.826373][ T5888] usb 4-1: Using ep0 maxpacket: 32 [ 535.870010][ T5888] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 535.916918][ T5888] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 535.945000][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.988536][ T5888] usb 4-1: config 0 descriptor?? [ 536.042367][ T5888] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 536.103485][ T5888] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 536.155007][ T5916] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 536.245254][ T43] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 536.345047][ T5916] usb 9-1: Using ep0 maxpacket: 8 [ 536.357189][ T5916] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 536.402017][ T5916] usb 9-1: config 0 has no interface number 0 [ 536.421251][ T5916] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 536.435076][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 536.463284][ T5916] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 536.478949][T17479] ldusb 4-1:0.0: Read buffer overflow, 297 bytes dropped [ 536.484374][ T43] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 536.504936][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.513227][ T5916] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.533207][ T5888] usb 4-1: USB disconnect, device number 47 [ 536.540960][ T43] usb 5-1: Product: syz [ 536.549870][ T5916] usb 9-1: config 0 descriptor?? [ 536.555344][ T43] usb 5-1: Manufacturer: syz [ 536.559968][ T43] usb 5-1: SerialNumber: syz [ 536.580376][ T5916] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 536.592225][ T43] usb 5-1: config 0 descriptor?? [ 536.616519][ T43] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 536.647574][ T5888] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 536.801608][ T5895] usb 9-1: USB disconnect, device number 35 [ 537.829668][ T43] usb 5-1: Quatech SSU-100 USB to Serial Driver converter now attached to ttyUSB0 [ 537.965034][ T5915] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 538.043311][ T5888] usb 5-1: USB disconnect, device number 7 [ 538.070040][ T5888] ssu100 ttyUSB0: Quatech SSU-100 USB to Serial Driver converter now disconnected from ttyUSB0 [ 538.153565][ T5888] ssu100 5-1:0.0: device disconnected [ 538.265358][ T5915] usb 10-1: Using ep0 maxpacket: 16 [ 538.365059][ T5915] usb 10-1: too many configurations: 123, using maximum allowed: 8 [ 538.380238][ T5915] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 538.405724][ T5915] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 538.427547][ T5915] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 538.448015][ T5915] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 538.471398][ T5915] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 538.494627][ T5915] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 538.565875][ T5915] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 538.597165][ T5915] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 538.646888][ T5915] usb 10-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 538.660178][ T5915] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 538.724977][ T5915] usb 10-1: SerialNumber: syz [ 538.746024][ T5915] usb 10-1: config 0 descriptor?? [ 538.764415][ T5915] input: bcm5974 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/input/input86 [ 538.967809][T17564] input: syz1 as /devices/virtual/input/input87 [ 538.999647][ T5185] bcm5974 10-1:0.0: could not read from device [ 539.045194][ T5185] bcm5974 10-1:0.0: could not read from device [ 539.065280][ T5915] usb 10-1: USB disconnect, device number 17 [ 540.023599][T17610] loop6: detected capacity change from 0 to 7 [ 540.071294][T17613] netlink: 'syz.5.3699': attribute type 3 has an invalid length. [ 540.072558][T17610] Dev loop6: unable to read RDB block 7 [ 540.091213][T17610] loop6: AHDI p1 p2 p3 [ 540.096196][T17610] loop6: partition table partially beyond EOD, truncated [ 540.109110][T17610] loop6: p1 start 926365495 is beyond EOD, truncated [ 540.127524][T17618] netlink: 'syz.8.3698': attribute type 1 has an invalid length. [ 540.151265][T17610] loop6: p2 size 116 extends beyond EOD, truncated [ 540.250440][T17618] 8021q: adding VLAN 0 to HW filter on device bond2 [ 540.269773][ T5992] udevd[5992]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 540.335587][T17620] bond2: (slave gretap1): making interface the new active one [ 540.354258][T17620] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 540.875498][ T5888] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 540.965933][ T5915] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 541.035198][ T5888] usb 9-1: Using ep0 maxpacket: 32 [ 541.043630][ T5888] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 541.060331][ T5888] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 541.072779][ T5888] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 541.075276][ T5895] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 541.083316][ T5888] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 541.105861][ T5888] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 541.120782][ T5888] usb 9-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 541.132483][ T5888] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.155318][ T5915] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 541.174999][ T5915] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 541.185642][ T5915] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 541.192595][ T5888] usb 9-1: Product: syz [ 541.199146][ T5915] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 541.203364][ T5888] usb 9-1: Manufacturer: syz [ 541.222590][ T5888] usb 9-1: SerialNumber: syz [ 541.229904][ T5915] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.233037][ T5888] usb 9-1: config 0 descriptor?? [ 541.246472][ T5915] usb 10-1: config 0 descriptor?? [ 541.263669][ T5895] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 541.276090][ T5895] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 541.295356][ T5895] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 541.315494][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.338503][T17646] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 541.354661][ T5895] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 541.595326][T17656] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 541.658671][ T30] audit: type=1326 audit(1751575106.649:1119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17659 comm="syz.5.3714" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f53539 code=0x0 [ 541.685387][ T5888] iforce 9-1:0.0: usb_submit_urb failed: -32 [ 541.701643][ T5888] input input88: Device does not respond to id packet M [ 541.707027][ T5915] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 541.722608][ T5888] iforce 9-1:0.0: usb_submit_urb failed: -32 [ 541.744426][ T5915] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 541.745833][ T5888] input input88: Device does not respond to id packet P [ 541.752213][ T5915] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 541.785585][ T5916] usb 4-1: USB disconnect, device number 48 [ 541.796800][ T5915] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 541.811011][ T5915] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 541.832823][ T5888] iforce 9-1:0.0: usb_submit_urb failed: -32 [ 541.848800][ T5915] plantronics 0003:047F:FFFF.003B: unknown main item tag 0x0 [ 541.859544][ T5888] input input88: Device does not respond to id packet B [ 541.883654][ T5888] input input88: Limiting number of effects to 32 (device reports 101) [ 541.895001][ T5915] plantronics 0003:047F:FFFF.003B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 542.091077][ T5888] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 542.113080][ T5888] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 542.121638][ T5888] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 542.123037][ T5915] usb 10-1: USB disconnect, device number 18 [ 542.129697][ T5888] iforce 9-1:0.0: usb_submit_urb failed: -71 [ 542.147122][ T5888] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input88 [ 542.195042][ T5888] usb 9-1: USB disconnect, device number 36 [ 543.009954][T17686] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3720'. [ 543.315606][T17699] loop2: detected capacity change from 0 to 7 [ 543.331149][T17699] Dev loop2: unable to read RDB block 7 [ 543.344189][T17699] loop2: AHDI p2 [ 543.373592][T17699] loop2: partition table partially beyond EOD, truncated [ 543.420957][T17706] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3728'. [ 544.399545][T17725] netlink: 'syz.3.3734': attribute type 1 has an invalid length. [ 544.614230][T17730] loop2: detected capacity change from 0 to 7 [ 544.654104][T17730] Dev loop2: unable to read RDB block 7 [ 544.665082][T17730] loop2: unable to read partition table [ 544.673720][T17730] loop2: partition table beyond EOD, truncated [ 544.684840][T17730] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 544.975211][ T5915] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 545.155369][ T5915] usb 5-1: Using ep0 maxpacket: 32 [ 545.155449][ T5888] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 545.178134][ T5915] usb 5-1: config 0 has an invalid interface number: 9 but max is 0 [ 545.194211][ T5915] usb 5-1: config 0 has no interface number 0 [ 545.203644][ T5915] usb 5-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 545.213330][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.224405][ T5915] usb 5-1: Product: syz [ 545.230664][ T5915] usb 5-1: Manufacturer: syz [ 545.236419][ T5915] usb 5-1: SerialNumber: syz [ 545.253310][ T5915] usb 5-1: config 0 descriptor?? [ 545.279966][ T5915] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 545.327719][ T5888] usb 4-1: Using ep0 maxpacket: 8 [ 545.346037][ T5888] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 545.365271][ T5888] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 545.392289][ T5888] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 545.434242][ T5888] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 545.479365][ T5888] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 545.537597][ T5888] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 545.575793][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.817167][ T5888] usb 4-1: usb_control_msg returned -32 [ 545.835529][ T5888] usbtmc 4-1:16.0: can't read capabilities [ 545.851548][T17760] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 545.863492][T17760] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 545.871945][T17760] CPU: 0 UID: 0 PID: 17760 Comm: syz.8.3751 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(full) [ 545.884031][T17760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 545.894112][T17760] RIP: 0010:qfq_qlen_notify+0x29/0x70 [ 545.899514][T17760] Code: 90 f3 0f 1e fa 41 57 41 56 53 48 89 f3 49 89 fe e8 ac 6b 3f f8 4c 8d 7b 58 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 ff e8 59 ee a2 f8 49 8b 07 4c 39 f8 74 1c [ 545.915749][T17763] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3752'. [ 545.919121][T17760] RSP: 0018:ffffc9000da66fc8 EFLAGS: 00010202 [ 545.919145][T17760] RAX: 000000000000000b RBX: 0000000000000000 RCX: dffffc0000000000 [ 545.942102][T17760] RDX: ffffc90004ca2000 RSI: 0000000000000b64 RDI: 0000000000000b65 [ 545.950086][T17760] RBP: dffffc0000000000 R08: ffff88802b859e00 R09: 0000000000000002 [ 545.958071][T17760] R10: 00000000ffffffff R11: ffffffff8980e2e0 R12: 0000000000000000 [ 545.966046][T17760] R13: ffff888031ef4000 R14: ffff888031ef4000 R15: 0000000000000058 [ 545.974018][T17760] FS: 0000000000000000(0000) GS:ffff888125c50000(0063) knlGS:00000000f50deb40 [ 545.982950][T17760] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 545.989530][T17760] CR2: 00000000800012c0 CR3: 000000004ae88000 CR4: 00000000003526f0 [ 545.997500][T17760] DR0: 0000040000000000 DR1: 0000000000000007 DR2: 0000000000000006 [ 546.005466][T17760] DR3: 0000000000000006 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 546.013432][T17760] Call Trace: [ 546.016705][T17760] [ 546.019636][T17760] qdisc_tree_reduce_backlog+0x299/0x480 [ 546.025275][T17760] ? qdisc_tree_reduce_backlog+0x3c/0x480 [ 546.030993][T17760] fq_change+0x1519/0x1f50 [ 546.035414][T17760] ? __pfx_fq_change+0x10/0x10 [ 546.040184][T17760] ? __hrtimer_setup+0x187/0x210 [ 546.045122][T17760] fq_init+0x699/0x960 [ 546.049188][T17760] ? __pfx_fq_init+0x10/0x10 [ 546.053769][T17760] ? __pfx_fq_init+0x10/0x10 [ 546.058349][T17760] ? __pfx_fq_init+0x10/0x10 [ 546.062933][T17760] qdisc_create+0x7a9/0xea0 [ 546.067447][T17760] tc_modify_qdisc+0x1426/0x2010 [ 546.072398][T17760] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 546.077695][T17760] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 546.082985][T17760] rtnetlink_rcv_msg+0x77c/0xb70 [ 546.087919][T17760] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 546.093023][T17760] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 546.098478][T17760] netlink_rcv_skb+0x205/0x470 [ 546.103234][T17760] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 546.108684][T17760] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 546.113967][T17760] ? netlink_deliver_tap+0x2e/0x1b0 [ 546.119159][T17760] ? netlink_deliver_tap+0x2e/0x1b0 [ 546.124358][T17760] netlink_unicast+0x758/0x8d0 [ 546.129116][T17760] netlink_sendmsg+0x805/0xb30 [ 546.133873][T17760] ? __pfx_netlink_sendmsg+0x10/0x10 [ 546.139153][T17760] ? __import_iovec+0x5d4/0x7f0 [ 546.143993][T17760] ? aa_sock_msg_perm+0x94/0x160 [ 546.148922][T17760] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 546.154200][T17760] ? __pfx_netlink_sendmsg+0x10/0x10 [ 546.159480][T17760] __sock_sendmsg+0x219/0x270 [ 546.164160][T17760] ____sys_sendmsg+0x505/0x830 [ 546.168917][T17760] ? __pfx_____sys_sendmsg+0x10/0x10 [ 546.174210][T17760] ? __pfx_futex_wake_mark+0x10/0x10 [ 546.179490][T17760] ___sys_sendmsg+0x21f/0x2a0 [ 546.184163][T17760] ? __pfx____sys_sendmsg+0x10/0x10 [ 546.189366][T17760] ? __fget_files+0x2a/0x420 [ 546.193949][T17760] ? __fget_files+0x3a0/0x420 [ 546.198620][T17760] __sys_sendmsg+0x164/0x220 [ 546.203203][T17760] ? __pfx___sys_sendmsg+0x10/0x10 [ 546.208309][T17760] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 546.214899][T17760] ? lockdep_hardirqs_on+0x9c/0x150 [ 546.220099][T17760] __do_fast_syscall_32+0xb6/0x2b0 [ 546.225211][T17760] do_fast_syscall_32+0x34/0x80 [ 546.230074][T17760] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 546.236406][T17760] RIP: 0023:0xf70ee539 [ 546.240480][T17760] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 546.260092][T17760] RSP: 002b:00000000f50de55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 546.268506][T17760] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000200 [ 546.276472][T17760] RDX: 0000000004008000 RSI: 0000000000000000 RDI: 0000000000000000 [ 546.284452][T17760] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 546.292424][T17760] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 546.300398][T17760] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 546.308373][T17760] [ 546.311390][T17760] Modules linked in: [ 546.315415][T17760] ---[ end trace 0000000000000000 ]--- [ 546.320898][T17760] RIP: 0010:qfq_qlen_notify+0x29/0x70 [ 546.326332][T17760] Code: 90 f3 0f 1e fa 41 57 41 56 53 48 89 f3 49 89 fe e8 ac 6b 3f f8 4c 8d 7b 58 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 ff e8 59 ee a2 f8 49 8b 07 4c 39 f8 74 1c [ 546.345993][T17760] RSP: 0018:ffffc9000da66fc8 EFLAGS: 00010202 [ 546.352078][T17760] RAX: 000000000000000b RBX: 0000000000000000 RCX: dffffc0000000000 [ 546.360085][T17760] RDX: ffffc90004ca2000 RSI: 0000000000000b64 RDI: 0000000000000b65 [ 546.368083][T17760] RBP: dffffc0000000000 R08: ffff88802b859e00 R09: 0000000000000002 [ 546.376086][T17760] R10: 00000000ffffffff R11: ffffffff8980e2e0 R12: 0000000000000000 [ 546.384076][T17760] R13: ffff888031ef4000 R14: ffff888031ef4000 R15: 0000000000000058 [ 546.392084][T17760] FS: 0000000000000000(0000) GS:ffff888125c50000(0063) knlGS:00000000f50deb40 [ 546.401034][T17760] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 546.407635][T17760] CR2: 00000000800012c0 CR3: 000000004ae88000 CR4: 00000000003526f0 [ 546.415845][T17760] DR0: 0000040000000000 DR1: 0000000000000007 DR2: 0000000000000006 [ 546.423936][T17760] DR3: 0000000000000006 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 546.431957][T17760] Kernel panic - not syncing: Fatal exception in interrupt [ 546.439410][T17760] Kernel Offset: disabled [ 546.443747][T17760] Rebooting in 86400 seconds..