last executing test programs: 7m57.533189144s ago: executing program 3 (id=874): r0 = dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) read$FUSE(r0, 0x0, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r4, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r5, 0x40103e05, &(0x7f00000003c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x1, 0xffffffff, 0x7f, 0x9, 0x100000000}) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x80740) r6 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VHOST_VDPA_GET_AS_NUM(r6, 0x8004af7a, &(0x7f0000000240)) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000180), 0x0) 7m56.674314453s ago: executing program 3 (id=876): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) ioctl$XFS_IOC_OPEN_BY_HANDLE(r0, 0xc038586b, &(0x7f0000000500)={r0, &(0x7f0000000180)='\x00', 0x100, &(0x7f0000000440)={@align=0xf, {0x4, 0x81, 0x7ff, 0x2e48}}, 0x7, &(0x7f0000000480)={@_ha_fsid}, 0x0}) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r4, 0x58, &(0x7f0000000340)={0x0, 0x0}}, 0x10) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r5}, 0xc) dup2(r6, r4) 7m53.256029061s ago: executing program 3 (id=883): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @local}, 0x2, 0x0, 0x1}}, 0x26) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r4 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) pread64(0xffffffffffffffff, &(0x7f0000000140)=""/4095, 0x69, 0xa) io_uring_register$IORING_REGISTER_MEM_REGION(0xffffffffffffffff, 0x22, &(0x7f0000000240)={0x0}, 0x1) fchdir(0xffffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r2, 0x1, 0x60bd27, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x1}]}, 0x34}}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) 7m52.718564257s ago: executing program 3 (id=886): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000380)='./file0\x00') 7m51.608853399s ago: executing program 3 (id=888): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x9a, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffff"], 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000000d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000be000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b44"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x100003}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0x200}, 0x10}, 0x94) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x1c7d, "0300005627de1100a3250300541886d5ff4144b0f26a07219808229ad9000100", 0xffffffffffffffff}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x2}) close(0x4) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000001c0)=""/53, 0x0, 0xfec00000}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000500)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x1, {{{@in6=@private0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0xffff}}}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x1, 0x80}}]}, 0xcc}}, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000880)={0x1, 0x0, [{0x0, 0xfef, &(0x7f0000001d80)=""/4079}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f000001aa40)=""/102400, 0x19000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0x94, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x80, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x5a, 0x2, 0x0, 0x0}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x94}}, 0x0) r7 = fsopen(&(0x7f0000000200)='devpts\x00', 0x1) fsmount(r7, 0x0, 0x0) 7m48.972735899s ago: executing program 3 (id=891): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000003100)=[{&(0x7f0000000080)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@nested={0x18, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0xc9}]}]}, 0x28}, {&(0x7f0000001d40)={0x11d0, 0x13, 0x500, 0x70bd2a, 0x25dfdbfd, "", [@nested={0xc, 0xfe, 0x0, 0x1, [@typed={0x8, 0x4c, 0x0, 0x0, @uid}]}, @generic="ac57b500c6b549b3dd309fa339219660c6a73b4e1559d60eccbad0ecf6938e5cd64dc5fa33173cffee623071839d6edc6e406ee970cde82a18b09db40c62c61295157b0754079e5883448efec153696eefd47ac8b4b233d1ead27f086da1f5ecc6548b99aebd72989757b89050295bc1b9832803840d91b140b44f91e851060e00d5c4f39fa9188fc795a50ba56a488e56b93525fe146beefe8fc75f7e504bc526144ed85ccb075d7e87d8b3217f1b3b4f275dc953f8fe87a25393cd94a1df897b47b819ce01f8a4ed8f1b9093105ca0950a31d42ff079ffa3420738201a75e161222f54697e93fbc233b22c2264eca9fa9d91e12217a8dfd07c124825b119b211bdb54f4d4d0bedd06594ef98269b5386bba2dd345dbb48bddc64d0e2eeef50c8d1e8f8a7bca31698359b0e67ecc922382ec3c4b55c73356337bd4b46bfb51ff658f32016e7e3197c20ec2dabac35439ed1779b4fb5f332f73f262ac0db898fb69836a28e2e01b769b24337c4afb39476bff5b41f8dd988baf4618da889f686c06c2bcd839effef248fb35aaa8b4c5d3f0e262c2bcd46bc143a3fbcab0baecb4cf1cb0011c2c35f7cdfc9d09d0d0f149214dc5b90642092bde3f7c9a18043b582d99364c82513b7524583cef501529086769824402b756ff867358a1f29c2570a526bb037a6f7439c79d6399f5cf3f90de1d1a6f27b38353ef652efc766f5b302c862a28d0b116763f6ba0ef893f92796ee87f944073f1ba66341d48ab6082949c4fd7eddcf7302806e855c4a5df106a82cf7e601f22b90585ce7a440efcf5b9b1b315e6425bae43601775d93b48d93e9af0b9bc75ed377216593b1963796e19a53d23d509869d16297e25f4b563c5037f2e74bfb643dce72399f3acb520b8ae23bb929cb5c8cc8ebeb65e52a166565c62f559b9b6cc918a0c244c0bc719de273ba157b33c926ca00a2380010147a9d9fc7ba7fb34594ae31fce8377293f9d5681eae8b1902fdb8ea767447f3fc41fd39abdc17715ad6536ba1d76b1ffb1052654a6937cd59bb3c059e73dbf567b71910407769c5a295f5d264d95589ea221a0e5bb92d71fad9b7bc16aa736ee3a144da5f92b59a8c92b3baf7c44fafd81c746f4e0756fb3dab2daac1f3d5e5e6579d347b992d6f56cf164488a6a677bf3f5329d780616594eeedc30b8809082c98caf82dfc53750d058a6048499d0fac669e509eff59e8d24ca3dcb6552bd7328b1d9d3d30079b0ce127aec768c54d3aa7042220ea8e089f7bd5040d480727947544b8a5006f853e91ef00a837aca5df365cbdb94f6c827e8545388deff06df2b43cb4ea56643127fc1d0927cdf9dc9aa43136d66949aeb5fcfd607534ace6262770945ed2ce18f28bb8ad4b031cd1ea820269647860b57049fbe31ffc81f76c584f608c7695041315cf77445b1ee6a332040bdc41882c880212d59c35776399feb42feab74992928d969bb3e04bf4b298241d6ec45adaae43e5f83ec5b9510268a2ea0773478171aca494e04c13fea83d61f09f2cd1d4669a6c901bc145036ab94c34fa7e73dc9dc92ce316fa506ffee09a925acf8a5e867468811b56423008d4fc8dd898446028edf2071e8adfe1df5bd4e29bbc0dd60e0e62953423b2233f414f301906ec81332fd431ebb289f6f6f0105fe90464943f22c8f17706ca6032731f0bc95416cb56f5a7abcb3e852803d34f8f8628a6fd9af85eb5ec86194f18ebdb231e2265aeeb836e3700affffff2b00aab4e889e2aa5ba76a413302e33374f4931beff14cc7f88eabd27dfb9f3944ecb097607a95f2bdd1572b0446b326141d2ccc65cf4cdc037330fbdd4a70a5c6e67d3dd76d04c8f4a770d0ffbd34836afd1cffa8535b4b101af87cfaae4b56154ceec543e40a03caeb14207bb417bb6c14ea26709f174695c6cd069714b302584c7a7ee27ef6db55586438e8969331142bbfa240f6a16f13a2e5f456b061a4d7d434b942e94810b5598b4fbf46fc5387d8f507cc82b64a62552ea3bda9b7162926a27b17b6b816f20f3e0baf4bbb68fc0e83e5c3d7a7299ca83103a141677c7d0c3be0a223de917f9d25d01f716b8b321708dc08dc3b2dec1a7261db1d454f71d0dfb0dad2a042ac1877c8007d794743668b0abbd0ddcbc94ba1fdbbfd50e69930d02812b829252c5c178ac174caba8d002b660db38d15b49e73c3fa92106d79278a9350f0aa9cabe98a9436abbcd31cc03c5a5ab8ec2d748f7c3112cccbdca381935485a3ba6feace5cf8351a1500db0b55a63e94354b50c25f69d25a2e5aebbcd2ae4f0367a767b320905e0d4e42edab3b25e38b982fb4cf03a24d97e1ccb356029be7fea185ad6336c24ffbc0883ef674bbfdcb0052db0ea79000ef317039a6d2f7c4d9c92ff12b56eac81de052bafc765a52457094b9c0409da0b63b9972953430de69c01e6024b9e677d441f4bc45e9c574e8366d70a01f1e7e0d9f61388030b4ace64d2c14057db4ad0d51495474d2701fa2f5e34fef2732f09fecd84859652b410524dff84853126a6200881899ed75798f6d888f9718db63240507ff86088de07d8d3cabafed3c358f939f1b2b696cc9bbef62d39f59859436aad7e3c78524d44d6337d4dec0bf43f5f030d146ad7345c27ba2fe9690cae3d44359fd9ba2c610d486e32cb7ed53b0958042681879386d8bdf6b1aa8bf0ddadea315396ad91282f8449cd7359ff35f721b4cb9c045baef4349b19095d031609b41d5d51dcbc89ff7dedb3dff2f134418aa9d9513dd5386ec106ef6be21fe0f8b1038af257b58c95910d5ed1e09393443e75fc5224785277fc8d3c156190096d97919c8f10f2cbebcf8fbb6fbefce557a61273a3d880d476330af8142b93b5e54237a6006effa26d7b9f7f27dead68eac08d8e6cc3f2902f82eb188295c0463c1ee7d84547a9fa95810dd25b567285cdebf372f0852116a2b9b79571e01c8598acf056ffadc444f69fe8b7b5b5759f30d7dee4e7ec240f5b2092c8376cc8caca4dc9971a17ec03b6ef797ff0611624fbe8ed06a18f1b079adea3b71907bd7f5c0f2f969f2bbda2918288b54a53ce5a987b1cfd565c533db7f15b91c4366a2b01b5ecece4d24db6ea9a3348fed8e054b75ac1ce13ac40a6cd5432f9d8d58f17d6263964a67b21c56ee937822275e8ffb5dde0dd3ea5b6ed46178d5a4e0b046c11600aaa5d7be3f73d8f57636f818690c5761b8104dacfcf7bf0fd3fa5e8be0bd86fa9ace1d255cd7008321cae82d71493eb6de76e651423fa77c63b8331b9b8cca357b6e2afd1d92c3069ed6321fc3e8a5c69ac37e19ef87dfb5818d34c3e525ec3fe7c76fbcfef7a747bf7ec4c2aec5aac4137a427afbe7355d3e6aa28e47f9dfe5b647a3aa13562a920174e69936febd2cf5335f16e84f98f7872f17e1849644b68e5672a6e22df6da85db6edcb16789601e24d36f7586187afc1aae2ad11c446f95875a9aa9713ea6fa97ed02baa8b05c30057bc07a9dda5c91cb20b871e99edf99b893f0e4dee3b86fe78ae109870da4dbaec3a02fa83659be20d125395eae630768ad0cee57290e400b44e41fc8ec62ca7afb82ad82bd9a960c072989044e3d36d5ec164cf4c69a3dd31971dff968248faeab70bc48f77f89effcd63cfc59776603f23f2aab508d5981c17c5fdf741a0aadb5a0249d6b96c7e4ff42a6ad61cf8f9bc29ac89c80cb7c8d6cf3295f87037a255f6d04523846d8f227f020f2f925242a6a3ca1d3a12d4fbc45790cf402a8dc8286dcad0b74dc1a3ac0fafcf8dd3ab149adfeb04060761d3c96303e53458bd586b884010db96031a3ed27363c269ed0190117aeef7493e64762082dde9a32ae04499b906b8a6b3a716479af6f8559cdd1743c0be995625ba7ec830820687f49b2ba446a82b92f3a006352e6da8a071ece5a9dd937d0b1ae535db6ceb1106e387d3de0e85d7ce22a9371f7943b27ab31179fc6f15725f21a839a1c750eb06b2e6199e6731237f637cb3c0aef426cfe7ef760c7c79adc7f91a13e7cd18ada674b405f51139c2426224a42083d75e01ebfd26bf5140d82d1cdc00d684f0e0f19dfdd38cf9287ac54b5db194db0b04a11d1975abc3414e55a11b11fa9396fa9c7ac1a8bbc7c594004e582d7e105c7297e16f78f946f601213b24c4a84d3a2bf77fe2f639d769ff5f1f342007b562a933d533543a78ba85568eef6768bfcd0f04a191293fcfed43cb2fe88d5ba020dc4408a41ae5ce1bafd8bd0110a9b685c8c7a8d2cf86c8b94d11c91639961295ce6e6c5bc599c62616d4f0a98ed14ca603a982be23dd013e1b2cccc5c7e2ed31320a5e59307d7521704677a07962c90548757b0ace81a64cba3c7bd3b3c1bf613de4a13c2527eb556caa7ddb2bc4591fce7389d3297906ffdf48a9062c667db7fedd1dff85d4db84c9a7421672e51d119d8aa89bb651977d19828edd4e9866c8d4b35efcbe375b45921ea37cf4cf94718d4d9c07d0806f52b847f3a0e874ca592e71fcb9e59a667ccd6a996a6ff37b079e1342bdca7b421caf6d9f8a19ef13235624f03c0ca3c39f75b728f504539caed3e0d62a2924809b3ff2e6b16e6978ee6062464835f35d090017c7f4401e2ae04b690d3012e4b68668707c6a10c079435874dc42b1bb8acec0aee592793d7c46ed8cc7d7e405aaa2bd19ee2e7b01340e10f0ab12d09ecbf9875a9143e649c0d7d55ceba3f3e9832dc824ee8de71458c15ae553934e8e3f40a3dff7fa9ce343c6e8327fcce16cd017e85f4b8311593101bf40606f7d060c830bfa2ddee299528ebee265f0dd935ab352eb517935ec28cf8c509c2297256609dd3b2ac87e16e851ce869a779a25687fc4f59b563da3c3ba40743d12134cfa1c1ab1620788b58c7700a32502aff6d428bf2f8f3d8bf2cada088910687c1cbb1b4acc4a9f609ddff315f422c4c805cc3d65c014d98adf5ea150f0f94bd5ed65cff1e00ef7ac0200738bda23ef03fcb8f20a4e6ff572507a9d782dd9852a58dbb7a8a49540135efaa43ad857d27c88248a2edfe306992e9f257ac3bf1b125dc030f94c0955973bcf4413b182d4529f8c0ec4b7421e9f866a9c1bdd010589c20432068625fe379e9a218903b7231916478d526df53191ae791235558e4466a792e6ebd809d9555d0034ab41ff834c7e4428b0d8bff5c1d0cb84991d3b956e52b5cbfac98ccbdcfff27145085b6ba33e722046580fde893e77263670c3c09f867bd52a42d0c61b97c2912eca48668b1a4cda64c3b78f6e056d8b551da2abd78a7b9ecf01460223a8046865b124c6b9139ad59ed8a99838c766b3a773f0e0fb234b5e5b083d09a81f50eceeecf8c9cc44401d16e581f66c775c2ee4889408896a79865da4b8dfe8ee5718b0baeaa3006d758b25472fae2f268251c92a1463753f279a4156d5e75a36dd730650ede93f93f8ff23dffd77bf0f292fa659f9b7c7b0a98c268cac833cc966b506290d13ea3f496da382f036bfb0e1f296654669dea4e4083c38ff6e6e0df5669efc2c724a104a5000da0784db896b10255754cf221877cc82411ba53e81a7a0e084c02f7ff2807defe85774df34c14d56989ba9f9e3", @generic="6fe7904c0f1a9745ebeedc69427c8c5b56305fc6b9d72d63ff9cc3d7a462eae031d7aa7ac082b40ac948fdb480a2b4da96811ed3b767dfe2e0ae386bc6f6f11238c3", @typed={0x14, 0x5e, 0x0, 0x0, @ipv6=@loopback}, @generic="8425860415e78e1279564a500ebbb5bf4171d183f56fe35b3bdf39b5e6fba24bbf56893c3e4f1b3e218145c3d1128644b2c04e2f94876369f3452d48a9507dd3f4fc379716ec577be1bdbd99146c78fb5e4063cf20a72a6627474fa6fd028a11813acd5224be7a136ffd085baa928b2662a2c61d85085b0f1a84447a74b562cd7afc623afcef05ecd61b2d12c788dc7a5a91279801082057b3c3c20a35cbea", @nested={0x109, 0x2b, 0x0, 0x1, [@typed={0x8, 0x16, 0x0, 0x0, @uid}, @generic="c808f54ba63ef46cecb097789a5aa44aad098364ddf151a27e35e25945b3960f566444c32aa5aa32a79c17a0359fbc7e43904b3ac6e5109426b209d8cf6f5372ec20ee8bcb8c3d2f135534bd665c7a7440a122cc69f76a87a006e2a12efaafe470431806dec6acf0cf97956fff24c4ba7658bf1f301ba345f2ff89f5f4940b488683b679de516467d42fe78374fc97d1a2f03929b74171e8fe04f6c0d14fa3c4f4d0f4140b4458a807f11968df31697290f2bc6bd43d1033c071c7e1d231fa67bcec3ad8461cd68c73d9bc33436b2ea1a98b20d1330244ae510a35bcbaf07ea6f9c7991dcd52a6a7e5395ddb1ffb36b2ea", @typed={0x8, 0x12a, 0x0, 0x0, @pid=0xffffffffffffffff}, @nested={0x4, 0x12c}]}, @generic="aa934129e6c606b987d620bc6f91573b9226729ce4f86cc14101c7e336bdb0814bbd3f66d29e97da8210f422427af825a958"]}, 0x11d0}], 0x2, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42797000) r1 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000080)={'syz0\x00', {0x3, 0x0, 0x4, 0x1}, 0x3e, [0x1, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x1db, 0x0, 0x10000000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1000000, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x2b, 0x7, 0x2, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x2, 0x0, 0xfffffffe, 0x5d1d8547]}, 0x45c) syz_open_dev$radio(&(0x7f0000000500), 0x0, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) read$FUSE(r1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800006, 0x12, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x1) setsockopt$TIPC_MCAST_BROADCAST(r3, 0x10f, 0x85) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x108, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000202505a1a44000000001010902f60001010000000904000012020600000b2406000000000000597205240014006d240f0100000000000000000000241c010005030000241309f796dfb9dca3eafc37c90608675ee590b3220d70b7fa564a8ac7a5230263aae676da070d7d2c28bbc71b9a6d36a49b14c87aee9adc22413ccb328a2e1b04443c2d1f93ee99a99ab3e29778d9cc0809ab6534c2422f512a6625df25811815d2812262decdb7d1e3d0100ca00e091cc8ed3378aaff0bc812a3533f1b2c08a0d2c5f013bd05"], 0x0) 7m47.970025149s ago: executing program 32 (id=891): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000003100)=[{&(0x7f0000000080)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@nested={0x18, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0xc9}]}]}, 0x28}, {&(0x7f0000001d40)={0x11d0, 0x13, 0x500, 0x70bd2a, 0x25dfdbfd, "", [@nested={0xc, 0xfe, 0x0, 0x1, [@typed={0x8, 0x4c, 0x0, 0x0, @uid}]}, @generic="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", @generic="6fe7904c0f1a9745ebeedc69427c8c5b56305fc6b9d72d63ff9cc3d7a462eae031d7aa7ac082b40ac948fdb480a2b4da96811ed3b767dfe2e0ae386bc6f6f11238c3", @typed={0x14, 0x5e, 0x0, 0x0, @ipv6=@loopback}, @generic="8425860415e78e1279564a500ebbb5bf4171d183f56fe35b3bdf39b5e6fba24bbf56893c3e4f1b3e218145c3d1128644b2c04e2f94876369f3452d48a9507dd3f4fc379716ec577be1bdbd99146c78fb5e4063cf20a72a6627474fa6fd028a11813acd5224be7a136ffd085baa928b2662a2c61d85085b0f1a84447a74b562cd7afc623afcef05ecd61b2d12c788dc7a5a91279801082057b3c3c20a35cbea", @nested={0x109, 0x2b, 0x0, 0x1, [@typed={0x8, 0x16, 0x0, 0x0, @uid}, @generic="c808f54ba63ef46cecb097789a5aa44aad098364ddf151a27e35e25945b3960f566444c32aa5aa32a79c17a0359fbc7e43904b3ac6e5109426b209d8cf6f5372ec20ee8bcb8c3d2f135534bd665c7a7440a122cc69f76a87a006e2a12efaafe470431806dec6acf0cf97956fff24c4ba7658bf1f301ba345f2ff89f5f4940b488683b679de516467d42fe78374fc97d1a2f03929b74171e8fe04f6c0d14fa3c4f4d0f4140b4458a807f11968df31697290f2bc6bd43d1033c071c7e1d231fa67bcec3ad8461cd68c73d9bc33436b2ea1a98b20d1330244ae510a35bcbaf07ea6f9c7991dcd52a6a7e5395ddb1ffb36b2ea", @typed={0x8, 0x12a, 0x0, 0x0, @pid=0xffffffffffffffff}, @nested={0x4, 0x12c}]}, @generic="aa934129e6c606b987d620bc6f91573b9226729ce4f86cc14101c7e336bdb0814bbd3f66d29e97da8210f422427af825a958"]}, 0x11d0}], 0x2, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42797000) r1 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000080)={'syz0\x00', {0x3, 0x0, 0x4, 0x1}, 0x3e, [0x1, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x1db, 0x0, 0x10000000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1000000, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x2b, 0x7, 0x2, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x2, 0x0, 0xfffffffe, 0x5d1d8547]}, 0x45c) syz_open_dev$radio(&(0x7f0000000500), 0x0, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) read$FUSE(r1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800006, 0x12, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x1) setsockopt$TIPC_MCAST_BROADCAST(r3, 0x10f, 0x85) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x109040, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x108, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000202505a1a44000000001010902f60001010000000904000012020600000b2406000000000000597205240014006d240f0100000000000000000000241c010005030000241309f796dfb9dca3eafc37c90608675ee590b3220d70b7fa564a8ac7a5230263aae676da070d7d2c28bbc71b9a6d36a49b14c87aee9adc22413ccb328a2e1b04443c2d1f93ee99a99ab3e29778d9cc0809ab6534c2422f512a6625df25811815d2812262decdb7d1e3d0100ca00e091cc8ed3378aaff0bc812a3533f1b2c08a0d2c5f013bd05"], 0x0) 2m57.42391279s ago: executing program 1 (id=1371): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000087000003d0301000000000095000000000000006926000000000000bf67000000000000150a00000fff07003506000043fe0000160600000ee60000bf050000000000001f620000000000006507000000000000460700004c0000000f72000000000000bf5400000000000007040000f0fff8ffad4201000000000095000000000000"], &(0x7f0000000100)='GPL\x00', 0xb, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @sk_skb=0x4}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, 0x0, 0x1, 0x4002) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, 0x3b) 2m56.035057879s ago: executing program 1 (id=1372): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000000c0)={0x2, 0x1, 0x238, 0x800b, 0x2, "02e29398581bd13e95ac00fcffff0f5d02000e", 0x800, 0x3}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000500)={0xb, 0xffffffffffffff00}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000009b80)=""/102392, 0x18ff8) syz_open_dev$video4linux(&(0x7f0000000fc0), 0x40, 0x2000) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, 0x0) socket$inet6(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r4 = fanotify_init(0xf00, 0x0) fanotify_mark(r4, 0x105, 0x40009975, r3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c2) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(0xffffffffffffffff, 0xfffffffc) socket(0x22, 0x2, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="1c", 0x10002, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, 0x0, 0x0) 2m55.120707661s ago: executing program 1 (id=1373): openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000000) r1 = socket$inet(0x2, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e000000000000000000000007000000890b040a1c01027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1200000, 0x1000}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040800}, 0x4) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x30008011}, 0x0) sendmsg$802154_dgram(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f0000000080)={0x0}, 0x7, 0x0, 0x0, 0x20000010}, 0x4090) mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5, 0x12, 0xffffffffffffffff, 0x180000000) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) write$binfmt_aout(r4, 0x0, 0xff2e) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, 0x36, 0x107, 0x70bd27, 0x0, {0x1, 0x7c}, [@typed={0x8, 0x7, 0x0, 0x0, @u32=0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r6, &(0x7f0000000000)={0x24, @none={0x0, 0x2}}, 0x14) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009bbd8b08e80430ffd1a601220301090222000100000000090400000129fddd000905e2"], 0x0) 2m51.983790312s ago: executing program 1 (id=1377): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x6, 0x0, 0x0, 0x90, 0x0, 0x79, 0x10, 0xb8}, [@ldst={0x5}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) r0 = add_key$keyring(0x0, &(0x7f0000001640)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000001540)='user\x00', &(0x7f0000001580)={'syz', 0x0}, &(0x7f00000015c0)='[:($]-@.*\x94&$(/^\x00', r0) add_key$user(&(0x7f0000001680), 0x0, 0x0, 0x0, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x101000) ioctl$BLKGETDISKSEQ(r1, 0x80081280, &(0x7f00000001c0)) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) io_uring_setup(0x7a76, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) r3 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x88003) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000040)=0x85) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) ioctl$TCSBRKP(r4, 0x5425, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCXONC(r5, 0x540a, 0x2) ioctl$TCXONC(r5, 0x540a, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 2m49.213266129s ago: executing program 1 (id=1382): r0 = socket$l2tp6(0xa, 0x2, 0x73) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x128, 0x128, 0x4, [@func={0x3, 0x0, 0x0, 0xc, 0x4}, @enum64={0xc, 0x9, 0x0, 0x13, 0x1, 0x8, [{0x2, 0x1, 0x597}, {0x8, 0x913c, 0x602}, {0x10, 0x8d, 0xfffff5b8}, {0x2, 0x4}, {0x4, 0x7, 0x10001}, {0x2, 0x7, 0xe}, {0xe, 0x77914a42, 0x81}, {0x9, 0x4, 0x8000}, {0x7, 0x2, 0x3}]}, @int={0x6, 0x0, 0x0, 0x1, 0x0, 0x77, 0x0, 0x56, 0x2}, @fwd={0x5}, @func={0x7, 0x0, 0x0, 0xc, 0x1}, @datasec={0xf, 0x1, 0x0, 0xf, 0x1, [{0x2, 0x8, 0x10001}], "f0"}, @typedef={0x3}, @datasec={0xf, 0x6, 0x0, 0xf, 0x3, [{0x4, 0x6, 0x9}, {0x1, 0x0, 0x4}, {0x4, 0x17636000, 0x3c}, {0x4, 0xd910, 0x9}, {0x2, 0x5, 0x7}, {0x1, 0x7f, 0x80000001}], "b0f270"}]}, {0x0, [0x2e, 0x30]}}, &(0x7f0000000600)=""/199, 0x144, 0xc7, 0x1, 0x8}, 0x28) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000400)=""/120) writev(r2, 0x0, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f0000000080)={0x4, 0x7, 0x7, 0x10001, 0x5, "1afa86b62101b58680cdda128ed251c679583d", 0x3f, 0x80000008}) kexec_load(0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000140)='cgroup.max.descendants\x00', 0x2, 0x0) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0xfffffffc, @local}, 0x20) sendmmsg$inet6(r0, 0x0, 0x0, 0xff00) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg0\x00'}) 2m47.896093226s ago: executing program 1 (id=1384): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="270302", 0x3}], 0x1}, 0x5) 2m31.723357679s ago: executing program 33 (id=1384): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="270302", 0x3}], 0x1}, 0x5) 22.80113767s ago: executing program 5 (id=1621): socket$l2tp6(0xa, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x128, 0x128, 0x4, [@func={0x3, 0x0, 0x0, 0xc, 0x4}, @enum64={0xc, 0x9, 0x0, 0x13, 0x1, 0x8, [{0x2, 0x1, 0x597}, {0x8, 0x913c, 0x602}, {0x10, 0x8d, 0xfffff5b8}, {0x2, 0x4}, {0x4, 0x7, 0x10001}, {0x2, 0x7, 0xe}, {0xe, 0x77914a42, 0x81}, {0x9, 0x4, 0x8000}, {0x7, 0x2, 0x3}]}, @int={0x6, 0x0, 0x0, 0x1, 0x0, 0x77, 0x0, 0x56, 0x2}, @fwd={0x5}, @func={0x7, 0x0, 0x0, 0xc, 0x1}, @datasec={0xf, 0x1, 0x0, 0xf, 0x1, [{0x2, 0x8, 0x10001}], "f0"}, @typedef={0x3}, @datasec={0xf, 0x6, 0x0, 0xf, 0x3, [{0x4, 0x6, 0x9}, {0x1, 0x0, 0x4}, {0x4, 0x17636000, 0x3c}, {0x4, 0xd910, 0x9}, {0x2, 0x5, 0x7}, {0x1, 0x7f, 0x80000001}], "b0f270"}]}, {0x0, [0x2e, 0x30]}}, &(0x7f0000000600)=""/199, 0x144, 0xc7, 0x1, 0x8}, 0x28) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000400)=""/120) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0x4, 0x7, 0x7, 0x10001, 0x5, "1afa86b62101b58680cdda128ed251c679583d", 0x3f, 0x80000008}) 21.968984591s ago: executing program 5 (id=1623): syz_open_dev$evdev(0x0, 0x2, 0x862b01) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1011, 0x0, 0x300, 0x0, 0x0, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x8000000) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r4, 0x0, 0x10) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) 20.737060167s ago: executing program 5 (id=1627): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) madvise(&(0x7f0000e56000/0x4000)=nil, 0x4000, 0x11) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3d, 0x70bd27, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0x10001, 0xffffffffffffffff, 0x7, 0x3}, 0xa}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000"], 0x0}, 0x94) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=@known='trusted.syz\x00', &(0x7f0000000280)=""/249, 0xf9) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}}) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) 17.395342241s ago: executing program 5 (id=1634): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x3a}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) 16.468072993s ago: executing program 5 (id=1637): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20041090}, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r3, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='projid_map\x00') preadv2(r6, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x4, 0x2, 0x0) 11.792536885s ago: executing program 5 (id=1647): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="0a000300010000", 0x7) recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40001af, 0x12122, 0x0) 10.347409354s ago: executing program 4 (id=1650): socket$unix(0x1, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)="163280", 0x3}], 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 9.291886847s ago: executing program 4 (id=1651): r0 = getpgrp(0x0) prlimit64(r0, 0xe, &(0x7f0000000000)={0x8, 0x100000001000089}, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x7) socket$inet6(0xa, 0x1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r5, 0x0, 0x0) write$binfmt_elf32(r6, &(0x7f0000002180)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0xc, 0x2, 0x5, 0xf, 0x2, 0x3e, 0xe7d26f7, 0x65, 0x38, 0x212, 0x0, 0x7, 0x20, 0x1, 0x7, 0x4, 0x8001}, [{0x5, 0xfffffffe, 0x1, 0x3, 0x9, 0x9, 0x5}]}, 0x58) getpriority(0x2, 0x0) dup(0xffffffffffffffff) 7.712540178s ago: executing program 4 (id=1654): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20008000) syz_open_dev$I2C(0x0, 0x1, 0x10201) memfd_create(0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) mknod$loop(0x0, 0xfff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000043c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000000c0)={0x4c, r3, 0x1, 0x1, 0x8000000, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4084}, 0x4) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, r3, 0x301, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x20040000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x101) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) 6.141254909s ago: executing program 0 (id=1657): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x6, 0x0, 0x0, 0x90, 0x0, 0x79, 0x10, 0xb8}, [@ldst={0x5}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) r0 = add_key$keyring(0x0, &(0x7f0000001640)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000001540)='user\x00', &(0x7f0000001580)={'syz', 0x0}, &(0x7f00000015c0)='[:($]-@.*\x94&$(/^\x00', r0) add_key$user(&(0x7f0000001680), 0x0, &(0x7f0000001700)="dfbf724b37d8", 0x6, r0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x1214040, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x101000) ioctl$BLKGETDISKSEQ(r1, 0x80081280, &(0x7f00000001c0)) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) io_uring_setup(0x7a76, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) r3 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x88003) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000040)=0x85) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) ioctl$TCSBRKP(r4, 0x5425, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCXONC(r5, 0x540a, 0x2) ioctl$TCXONC(r5, 0x540a, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 5.573541127s ago: executing program 2 (id=1658): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x128, 0x128, 0x4, [@func={0x3, 0x0, 0x0, 0xc, 0x4}, @enum64={0xc, 0x9, 0x0, 0x13, 0x1, 0x8, [{0x2, 0x1, 0x597}, {0x8, 0x913c, 0x602}, {0x10, 0x8d, 0xfffff5b8}, {0x2, 0x4}, {0x4, 0x7, 0x10001}, {0x2, 0x7, 0xe}, {0xe, 0x77914a42, 0x81}, {0x9, 0x4, 0x8000}, {0x7, 0x2, 0x3}]}, @int={0x6, 0x0, 0x0, 0x1, 0x0, 0x77, 0x0, 0x56, 0x2}, @fwd={0x5}, @func={0x7, 0x0, 0x0, 0xc, 0x1}, @datasec={0xf, 0x1, 0x0, 0xf, 0x1, [{0x2, 0x8, 0x10001}], "f0"}, @typedef={0x3}, @datasec={0xf, 0x6, 0x0, 0xf, 0x3, [{0x4, 0x6, 0x9}, {0x1, 0x0, 0x4}, {0x4, 0x17636000, 0x3c}, {0x4, 0xd910, 0x9}, {0x2, 0x5, 0x7}, {0x1, 0x7f, 0x80000001}], "b0f270"}]}, {0x0, [0x2e, 0x30]}}, &(0x7f0000000600)=""/199, 0x144, 0xc7, 0x1, 0x8}, 0x28) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000400)=""/120) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0x4, 0x7, 0x7, 0x10001, 0x5, "1afa86b62101b58680cdda128ed251c679583d", 0x3f, 0x80000008}) 4.731868018s ago: executing program 2 (id=1659): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x7, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(0xffffffffffffffff, 0x4004510d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$dri(0x0, 0x1, 0x400) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000000, 0x0, 0xff, 0x1, 0xff}, 0x20) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="2d00000037020002070000000000000002000000000000000de99d0e2b8271598f862d9b14501121089e80f46456b0c6c03ca237119e7ffde0e3916bd9849d138efb1083c8961243cda517ba45e24aa6ef881376fde718e9f309e45039fd34f85e4bc98c41279752c4896af4ea987fb036a05eace1f188e8f26e5faf0e1e79500c9b1b7b53", @ANYRES32=0x0, @ANYRES64], 0x2d) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 4.666168189s ago: executing program 0 (id=1660): r0 = creat(&(0x7f0000000340)='./file0\x00', 0x28) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) r5 = pidfd_getfd(r4, r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) 3.563557283s ago: executing program 4 (id=1661): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0x0, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0x8, 0xb}, {0xffe0, 0xd}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x9, 0xb, 0x4}}}}]}, 0x40}}, 0x4010004) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="640000004ec6"}) 3.562884933s ago: executing program 0 (id=1662): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 3.279885507s ago: executing program 2 (id=1663): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'pcl730\x00', [0x100, 0x3ff, 0x1, 0x1, 0x858d, 0x100, 0x8, 0x20000000, 0x7, 0xa, 0x0, 0x7, 0x5, 0x401, 0x9, 0x0, 0x1, 0x8, 0xfe6, 0x401, 0x7, 0x2, 0x7, 0x4000009, 0x48, 0x7, 0x10, 0x5, 0x81, 0x7, 0x8]}) ppoll(&(0x7f0000000500)=[{r0, 0x2200}], 0x1, 0x0, 0x0, 0x0) 2.463432437s ago: executing program 0 (id=1664): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) madvise(&(0x7f0000e56000/0x4000)=nil, 0x4000, 0x11) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3d, 0x70bd27, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffff, 0x10001, 0xffffffffffffffff, 0x7, 0x3}, 0xa}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/14], 0x0}, 0x94) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000040)=@known='trusted.syz\x00', &(0x7f0000000280)=""/249, 0xf9) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}}) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) 2.372513228s ago: executing program 4 (id=1665): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) r2 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x30000015}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r3, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000002300)="27cb1547d73d51c2b9eb909bbb859214eabfa995b909a5faccc33d38140dc15d080af6eaf18b2031f0c88867e93763c3466f13a7e1c71f9b7ed9652a901d80e85e1ba265a9837970a9a20940b0208fa916a034be9eb50defe37271f579ecbb2f7e6157f8bac11e6657ddcd368291be85f6fbe3696d907770e9214e33190c4f9d0a048b2442a7dde887cf7c3f2e7fca619e0f1717850a65d661e72c55a293a7e4332309066fc4e40951535235d7a51b3c1bdfc5996f817e817caf5d035e24b79089ab10", 0xc3}], 0x1}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000140)="91790da0bd1c560e30633259f42abd712cb00cd5f83f5f8fd4be4ff744c36a3b11e84fb8d6e6ca9d8831796fb98a386d3ad837a9e92affe1ba18adfbe1ea97dfdc3e665f3d20948ea7a1f32fc8b737b8dbbad63cfea88639ec022f58243597a6a8f892a5bc1680da9111e2eefeaaa73f48fd9cb40256f609234533d1860d9694bdef8fb9152b0d6387dbbf25b8dbc5daf811a32c6dabce201eecc67cc65a2b6a95c7d696bb6087d6b2f347adf0a15f0d61cc543e33b70bd51768ef036cc9fe1513dfdf4e2668bc05d99df6e75a76a3cb006d987aca0b729f67008428a161d4adc05a8065b609a0b1303258ecbcecfaee5d", 0xf1}], 0x1}}], 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r3, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) socket(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) r6 = dup(r5) read$msr(r6, &(0x7f000001b000)=""/102391, 0x18ff7) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) 1.689908647s ago: executing program 0 (id=1666): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20041090}, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r1, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='projid_map\x00') preadv2(r4, &(0x7f0000001140)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x1, 0x4, 0x2, 0x0) 1.252782213s ago: executing program 2 (id=1667): socket$l2tp6(0xa, 0x2, 0x73) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x128, 0x128, 0x4, [@func={0x3, 0x0, 0x0, 0xc, 0x4}, @enum64={0xc, 0x9, 0x0, 0x13, 0x1, 0x8, [{0x2, 0x1, 0x597}, {0x8, 0x913c, 0x602}, {0x10, 0x8d, 0xfffff5b8}, {0x2, 0x4}, {0x4, 0x7, 0x10001}, {0x2, 0x7, 0xe}, {0xe, 0x77914a42, 0x81}, {0x9, 0x4, 0x8000}, {0x7, 0x2, 0x3}]}, @int={0x6, 0x0, 0x0, 0x1, 0x0, 0x77, 0x0, 0x56, 0x2}, @fwd={0x5}, @func={0x7, 0x0, 0x0, 0xc, 0x1}, @datasec={0xf, 0x1, 0x0, 0xf, 0x1, [{0x2, 0x8, 0x10001}], "f0"}, @typedef={0x3}, @datasec={0xf, 0x6, 0x0, 0xf, 0x3, [{0x4, 0x6, 0x9}, {0x1, 0x0, 0x4}, {0x4, 0x17636000, 0x3c}, {0x4, 0xd910, 0x9}, {0x2, 0x5, 0x7}, {0x1, 0x7f, 0x80000001}], "b0f270"}]}, {0x0, [0x2e, 0x30]}}, &(0x7f0000000600)=""/199, 0x144, 0xc7, 0x1, 0x8}, 0x28) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000400)=""/120) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000080)={0x4, 0x7, 0x7, 0x10001, 0x5, "1afa86b62101b58680cdda128ed251c679583d", 0x3f, 0x80000008}) 884.292978ms ago: executing program 4 (id=1668): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x6, 0x0, 0x0, 0x90, 0x0, 0x79, 0x10, 0xb8}, [@ldst={0x5}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) r0 = add_key$keyring(0x0, &(0x7f0000001640)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000001540)='user\x00', &(0x7f0000001580)={'syz', 0x0}, &(0x7f00000015c0)='[:($]-@.*\x94&$(/^\x00', r0) add_key$user(&(0x7f0000001680), 0x0, &(0x7f0000001700)="dfbf724b37d8", 0x6, r0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x1214040, 0x0) r1 = syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x101000) ioctl$BLKGETDISKSEQ(r1, 0x80081280, &(0x7f00000001c0)) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) io_uring_setup(0x7a76, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) r3 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x88003) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000040)=0x85) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) ioctl$TCSBRKP(r4, 0x5425, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCXONC(r5, 0x540a, 0x2) ioctl$TCXONC(r5, 0x540a, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4}, &(0x7f0000bbdffc)=0x0) timer_settime(r6, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 486.061174ms ago: executing program 2 (id=1669): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20008000) syz_open_dev$I2C(0x0, 0x1, 0x10201) memfd_create(0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) mknod$loop(0x0, 0xfff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f00000043c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000000c0)={0x4c, r3, 0x1, 0x1, 0x8000000, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4084}, 0x4) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, r3, 0x301, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x20040000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x101) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) 397.676105ms ago: executing program 0 (id=1670): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x40, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x60}, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x4000000000091}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$inet(0xa, 0x801, 0x84) connect$inet(r8, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r8, 0x8) r9 = accept4(r8, 0x0, 0x0, 0x0) close(r9) r10 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r9, 0x84, 0x82, &(0x7f0000000000)={r11, 0x81}, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x50) close(r4) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 0s ago: executing program 2 (id=1671): ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89e1, &(0x7f00000000c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty}) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x80001, 0x0) ioctl$RTC_ALM_READ(r0, 0x40187013, &(0x7f00000000c0)) kernel console output (not intermixed with test programs): 377.105114][ T5856] ldusb 4-1:0.55: Interrupt in endpoint not found [ 377.654589][ T5856] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 379.079818][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.093066][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.178142][ T27] usb 4-1: USB disconnect, device number 11 [ 379.409591][ T5856] usb 1-1: Using ep0 maxpacket: 8 [ 379.464643][ T5856] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 379.524030][ T5856] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 379.569497][ T5856] usb 1-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 379.605274][ T5856] usb 1-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 379.613534][ T5856] usb 1-1: Product: syz [ 379.654001][ T5856] usb 1-1: Manufacturer: syz [ 379.666010][ T5856] usb 1-1: SerialNumber: syz [ 379.697605][ T5856] usb 1-1: config 0 descriptor?? [ 379.718840][ T5856] imon_raw 1-1:0.0: IR endpoint missing [ 379.798805][ T5856] usb 1-1: USB disconnect, device number 14 [ 381.491074][ T7428] input: syz1 as /devices/virtual/input/input34 [ 385.735139][ T7459] program syz.0.448 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 387.395492][ T5815] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 388.554447][ T5815] usb 4-1: Using ep0 maxpacket: 16 [ 388.578044][ T5815] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 388.611388][ T5815] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 388.669081][ T5815] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 388.728159][ T5815] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 388.750763][ T5815] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 388.794571][ T5815] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 388.803892][ T5815] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 388.831739][ T5815] usb 4-1: Manufacturer: syz [ 388.845764][ T5815] usb 4-1: config 0 descriptor?? [ 390.474334][ T5815] rc_core: IR keymap rc-hauppauge not found [ 390.480427][ T5815] Registered IR keymap rc-empty [ 390.515515][ T5815] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 390.539871][ T7498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.458'. [ 390.551051][ T7498] netlink: 56 bytes leftover after parsing attributes in process `syz.1.458'. [ 390.569064][ T5815] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 390.584438][ T7496] tipc: Started in network mode [ 390.618078][ T5815] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 390.619886][ T7496] tipc: Node identity 721484a14b2a, cluster identity 4711 [ 390.650697][ T5815] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input35 [ 390.703795][ T7496] tipc: Enabled bearer , priority 0 [ 390.716229][ T5815] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 390.739452][ T7500] syzkaller0: entered promiscuous mode [ 390.764362][ T5815] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 390.773102][ T7500] syzkaller0: entered allmulticast mode [ 390.794387][ T5815] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 390.844547][ T5815] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 390.891808][ T5815] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 390.985506][ T5815] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 391.047640][ T7500] tipc: Resetting bearer [ 391.332892][ T5815] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 391.353838][ T7507] input: syz1 as /devices/virtual/input/input36 [ 391.596030][ T5815] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 391.781376][ T7495] tipc: Resetting bearer [ 391.784347][ T5815] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 392.127212][ T5815] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 392.312666][ T7495] tipc: Disabling bearer [ 392.317039][ T5815] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 392.359315][ T5815] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 392.390085][ T5815] usb 4-1: USB disconnect, device number 12 [ 392.937303][ T5856] tipc: Node number set to 960398497 [ 396.313770][ T7535] syzkaller0: entered promiscuous mode [ 396.319751][ T7535] syzkaller0: entered allmulticast mode [ 396.337232][ T7539] netlink: 32 bytes leftover after parsing attributes in process `syz.0.468'. [ 396.349705][ T7539] netlink: 32 bytes leftover after parsing attributes in process `syz.0.468'. [ 397.338859][ T7545] input: syz1 as /devices/virtual/input/input37 [ 398.535563][ T7548] netlink: 28 bytes leftover after parsing attributes in process `syz.1.470'. [ 398.545192][ T7548] netlink: 28 bytes leftover after parsing attributes in process `syz.1.470'. [ 402.062535][ T7575] netlink: 32 bytes leftover after parsing attributes in process `syz.0.477'. [ 402.104750][ T7575] netlink: 32 bytes leftover after parsing attributes in process `syz.0.477'. [ 403.879930][ T7591] input: syz1 as /devices/virtual/input/input38 [ 404.851523][ T7596] netlink: 28 bytes leftover after parsing attributes in process `syz.1.480'. [ 404.861092][ T7596] netlink: 28 bytes leftover after parsing attributes in process `syz.1.480'. [ 404.878983][ T7596] netlink: 28 bytes leftover after parsing attributes in process `syz.1.480'. [ 404.889643][ T7596] netlink: 28 bytes leftover after parsing attributes in process `syz.1.480'. [ 405.153846][ T27] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 405.390466][ T27] usb 4-1: config index 0 descriptor too short (expected 1572, got 36) [ 405.437457][ T27] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 405.494314][ T27] usb 4-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 405.503446][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.533036][ T27] usb 4-1: Product: syz [ 405.565976][ T27] usb 4-1: Manufacturer: syz [ 405.570663][ T27] usb 4-1: SerialNumber: syz [ 405.626698][ T27] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input39 [ 405.817807][ T5123] bcm5974 4-1:1.0: could not read from device [ 405.859878][ T5123] bcm5974 4-1:1.0: could not read from device [ 405.881398][ T27] bcm5974 4-1:1.0: could not read from device [ 405.997398][ T27] input: failed to attach handler mousedev to device input39, error: -5 [ 406.115226][ T5123] bcm5974 4-1:1.0: could not read from device [ 406.159942][ T27] usb 4-1: USB disconnect, device number 13 [ 408.974646][ T7632] input: syz1 as /devices/virtual/input/input40 [ 410.270828][ T7642] netlink: 28 bytes leftover after parsing attributes in process `syz.0.492'. [ 410.283133][ T7642] netlink: 28 bytes leftover after parsing attributes in process `syz.0.492'. [ 410.295264][ T7642] netlink: 28 bytes leftover after parsing attributes in process `syz.0.492'. [ 410.304466][ T7642] netlink: 28 bytes leftover after parsing attributes in process `syz.0.492'. [ 410.770885][ T7652] tipc: Enabled bearer , priority 0 [ 410.834088][ T7652] syzkaller0: entered promiscuous mode [ 410.896300][ T7652] syzkaller0: entered allmulticast mode [ 411.456363][ T7657] tipc: Resetting bearer [ 411.542940][ T7651] tipc: Resetting bearer [ 411.665174][ T7651] tipc: Disabling bearer [ 411.894501][ T27] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 412.131804][ T27] usb 4-1: config index 0 descriptor too short (expected 1572, got 36) [ 412.140690][ T27] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 412.330068][ T27] usb 4-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 412.348896][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.361878][ T27] usb 4-1: Product: syz [ 412.368559][ T27] usb 4-1: Manufacturer: syz [ 412.373298][ T27] usb 4-1: SerialNumber: syz [ 412.452703][ T27] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input41 [ 412.526684][ T7672] input: syz1 as /devices/virtual/input/input42 [ 412.652814][ T27] bcm5974 4-1:1.0: could not read from device [ 412.804798][ T27] input: failed to attach handler mousedev to device input41, error: -5 [ 412.857297][ T27] usb 4-1: USB disconnect, device number 14 [ 414.187912][ T7685] comedi comedi0: 8255: I/O port conflict (0x5,4) [ 414.194510][ T7685] comedi comedi0: 8255: I/O port conflict (0x2,4) [ 414.201012][ T7685] comedi comedi0: 8255: I/O port conflict (0x1,4) [ 416.464942][ T7709] input: syz1 as /devices/virtual/input/input43 [ 418.500781][ T7729] Bluetooth: hci0: invalid length 0, exp 2 for type 11 [ 421.415226][ T7754] input: syz1 as /devices/virtual/input/input44 [ 422.573560][ T7759] netlink: 28 bytes leftover after parsing attributes in process `syz.3.528'. [ 422.582608][ T7759] netlink: 28 bytes leftover after parsing attributes in process `syz.3.528'. [ 422.592009][ T7759] netlink: 28 bytes leftover after parsing attributes in process `syz.3.528'. [ 422.600929][ T7759] netlink: 28 bytes leftover after parsing attributes in process `syz.3.528'. [ 424.664835][ T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 425.053748][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 425.107157][ T9] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 425.162147][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 425.309490][ T9] usb 4-1: config 0 has no interface number 0 [ 425.418139][ T9] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 425.428195][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.448220][ T9] usb 4-1: Product: syz [ 425.458372][ T9] usb 4-1: Manufacturer: syz [ 425.482158][ T9] usb 4-1: SerialNumber: syz [ 425.510672][ T9] usb 4-1: config 0 descriptor?? [ 425.772804][ T9] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 426.157921][ T9] usb 4-1: qt2_attach - failed to power on unit: -71 [ 426.167373][ T9] quatech2: probe of 4-1:0.51 failed with error -71 [ 426.210777][ T9] usb 4-1: USB disconnect, device number 15 [ 426.260613][ T7796] netlink: 8 bytes leftover after parsing attributes in process `syz.2.539'. [ 426.271004][ T7796] netlink: 56 bytes leftover after parsing attributes in process `syz.2.539'. [ 426.552433][ T7800] input: syz1 as /devices/virtual/input/input45 [ 427.800748][ T7807] netlink: 28 bytes leftover after parsing attributes in process `syz.3.541'. [ 427.810689][ T7807] netlink: 28 bytes leftover after parsing attributes in process `syz.3.541'. [ 427.842765][ T7807] netlink: 28 bytes leftover after parsing attributes in process `syz.3.541'. [ 427.904620][ T7807] netlink: 28 bytes leftover after parsing attributes in process `syz.3.541'. [ 430.094473][ T5856] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 430.294377][ T5856] usb 1-1: Using ep0 maxpacket: 8 [ 430.315272][ T5856] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 430.323546][ T5856] usb 1-1: config 0 has no interface number 0 [ 430.330026][ T5856] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 430.341982][ T5856] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 430.352903][ T5856] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 430.470352][ T5856] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 430.519267][ T5856] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.571658][ T5856] usb 1-1: config 0 descriptor?? [ 430.623343][ T5856] ldusb 1-1:0.55: Interrupt in endpoint not found [ 430.834549][ T27] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 430.856720][ T5816] usb 1-1: USB disconnect, device number 15 [ 431.034618][ T27] usb 3-1: Using ep0 maxpacket: 32 [ 431.090842][ T27] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 431.099171][ T27] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 431.110102][ T27] usb 3-1: config 0 has no interface number 0 [ 431.146798][ T27] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 431.157288][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.165648][ T27] usb 3-1: Product: syz [ 431.170268][ T27] usb 3-1: Manufacturer: syz [ 431.181676][ T27] usb 3-1: SerialNumber: syz [ 431.213309][ T27] usb 3-1: config 0 descriptor?? [ 431.246008][ T27] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 431.849723][ T27] usb 3-1: qt2_attach - failed to power on unit: -71 [ 431.857854][ T27] quatech2: probe of 3-1:0.51 failed with error -71 [ 431.887058][ T27] usb 3-1: USB disconnect, device number 12 [ 432.362690][ T7851] netlink: 28 bytes leftover after parsing attributes in process `syz.0.554'. [ 432.362814][ T7851] netlink: 28 bytes leftover after parsing attributes in process `syz.0.554'. [ 432.365195][ T7851] netlink: 28 bytes leftover after parsing attributes in process `syz.0.554'. [ 432.365243][ T7851] netlink: 28 bytes leftover after parsing attributes in process `syz.0.554'. [ 434.706106][ T7863] Bluetooth: hci0: unsupported parameter 255 [ 434.755097][ T7863] Bluetooth: hci0: unsupported parameter 255 [ 434.890411][ T7873] fuse: Bad value for 'rootmode' [ 437.196668][ T7896] netlink: 28 bytes leftover after parsing attributes in process `syz.2.569'. [ 437.208120][ T7896] netlink: 28 bytes leftover after parsing attributes in process `syz.2.569'. [ 437.236146][ T7896] netlink: 28 bytes leftover after parsing attributes in process `syz.2.569'. [ 437.245653][ T7896] netlink: 28 bytes leftover after parsing attributes in process `syz.2.569'. [ 438.141703][ T5816] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 438.544239][ T5816] usb 1-1: Using ep0 maxpacket: 32 [ 438.573413][ T5816] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 438.638741][ T5816] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 438.728062][ T5816] usb 1-1: config 0 has no interface number 0 [ 438.983673][ T7911] Bluetooth: hci0: unsupported parameter 255 [ 438.986285][ T5816] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 438.990029][ T7911] Bluetooth: hci0: unsupported parameter 255 [ 439.025038][ T5816] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.033126][ T5816] usb 1-1: Product: syz [ 439.083721][ T5816] usb 1-1: Manufacturer: syz [ 439.093169][ T5816] usb 1-1: SerialNumber: syz [ 439.523277][ T5816] usb 1-1: config 0 descriptor?? [ 439.624759][ T5816] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 439.827909][ T7919] tipc: Enabled bearer , priority 0 [ 439.862192][ T5816] usb 1-1: qt2_attach - failed to power on unit: -71 [ 439.870449][ T5816] quatech2: probe of 1-1:0.51 failed with error -71 [ 439.883172][ T7919] syzkaller0: entered promiscuous mode [ 439.904310][ T7919] syzkaller0: entered allmulticast mode [ 439.919139][ T5816] usb 1-1: USB disconnect, device number 16 [ 440.209243][ T7919] tipc: Resetting bearer [ 440.543648][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.554276][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.606070][ T7918] tipc: Resetting bearer [ 441.098938][ T7918] tipc: Disabling bearer [ 441.301284][ T27] tipc: Node number set to 1444463890 [ 445.715843][ T7970] process 'syz.2.591' launched './file1' with NULL argv: empty string added [ 445.917114][ T7972] tipc: Started in network mode [ 445.922226][ T7972] tipc: Node identity 9622c55e9bd6, cluster identity 4711 [ 445.964749][ T7972] tipc: Enabled bearer , priority 0 [ 445.987718][ T7972] syzkaller0: entered promiscuous mode [ 446.006208][ T7972] syzkaller0: entered allmulticast mode [ 446.056262][ T7972] tipc: Resetting bearer [ 446.098212][ T7971] tipc: Resetting bearer [ 446.163982][ T7971] tipc: Disabling bearer [ 450.914638][ T5856] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 451.234432][ T5856] usb 4-1: Using ep0 maxpacket: 32 [ 451.259237][ T5856] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 451.310833][ T5856] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 451.382430][ T5856] usb 4-1: config 0 has no interface number 0 [ 451.442897][ T5856] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 451.452457][ T5856] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.468266][ T5856] usb 4-1: Product: syz [ 451.472824][ T5856] usb 4-1: Manufacturer: syz [ 451.480605][ T5856] usb 4-1: SerialNumber: syz [ 451.505450][ T5856] usb 4-1: config 0 descriptor?? [ 451.539554][ T5856] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 451.584355][ T5816] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 451.804576][ T5816] usb 2-1: Using ep0 maxpacket: 8 [ 451.965179][ T5816] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 452.038678][ T5856] usb 4-1: qt2_attach - failed to power on unit: -71 [ 452.062239][ T5816] usb 2-1: config 0 has no interface number 0 [ 452.066823][ T5856] quatech2: probe of 4-1:0.51 failed with error -71 [ 452.072394][ T5816] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 452.087001][ T5856] usb 4-1: USB disconnect, device number 16 [ 452.120513][ T5816] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 452.145809][ T5816] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 452.611789][ T5816] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 452.756271][ T5816] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.867939][ T5816] usb 2-1: config 0 descriptor?? [ 452.958208][ T5816] ldusb 2-1:0.55: Interrupt in endpoint not found [ 453.288708][ T5856] usb 2-1: USB disconnect, device number 14 [ 453.425456][ T8020] netlink: 32 bytes leftover after parsing attributes in process `syz.2.606'. [ 453.434568][ T8020] netlink: 32 bytes leftover after parsing attributes in process `syz.2.606'. [ 454.362175][ T8035] fuse: Bad value for 'rootmode' [ 456.874278][ T5816] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 457.058481][ T5816] usb 2-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 457.075816][ T5816] usb 2-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 457.088426][ T5816] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.103152][ T5816] usb 2-1: Product: syz [ 457.113677][ T5816] usb 2-1: Manufacturer: syz [ 457.121997][ T5816] usb 2-1: SerialNumber: syz [ 457.126830][ T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 457.144057][ T5816] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 457.158313][ T5816] dvb-usb: bulk message failed: -22 (3/0) [ 457.202773][ T5816] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 457.214732][ T5816] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 457.223060][ T5816] usb 2-1: media controller created [ 457.261088][ T5816] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 457.324229][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 457.331508][ T9] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 457.377782][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 457.408566][ T5816] DVB: Unable to find symbol mt352_attach() [ 457.415474][ T9] usb 1-1: config 0 has no interface number 0 [ 457.432961][ T5816] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 457.447474][ T9] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 457.457328][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.468123][ T5816] dvb-usb: bulk message failed: -22 (3/0) [ 457.475085][ T9] usb 1-1: Product: syz [ 457.480817][ T9] usb 1-1: Manufacturer: syz [ 457.486452][ T9] usb 1-1: SerialNumber: syz [ 457.496127][ T9] usb 1-1: config 0 descriptor?? [ 457.503948][ T9] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 457.513048][ T5816] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 457.670549][ T5816] usb 2-1: USB disconnect, device number 15 [ 460.521825][ T9] usb 1-1: qt2_attach - failed to power on unit: -71 [ 460.545561][ T5816] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 460.571450][ T9] quatech2: probe of 1-1:0.51 failed with error -71 [ 460.614711][ T9] usb 1-1: USB disconnect, device number 17 [ 462.979433][ T8078] fuse: Bad value for 'rootmode' [ 467.192449][ T8102] Unsupported ieee802154 address type: 0 [ 467.474255][ T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 467.675514][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 467.686665][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 467.731889][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 467.767408][ T9] usb 1-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 467.811416][ T9] usb 1-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 467.853615][ T9] usb 1-1: Product: syz [ 467.858020][ T9] usb 1-1: Manufacturer: syz [ 467.862666][ T9] usb 1-1: SerialNumber: syz [ 467.885902][ T9] usb 1-1: config 0 descriptor?? [ 467.900527][ T9] imon_raw 1-1:0.0: IR endpoint missing [ 468.004595][ T5856] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 468.009325][ T8111] input: syz1 as /devices/virtual/input/input46 [ 468.214343][ T5856] usb 2-1: Using ep0 maxpacket: 32 [ 468.260878][ T5856] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 468.269548][ T5856] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 468.283385][ T5856] usb 2-1: config 0 has no interface number 0 [ 468.318164][ T9] usb 1-1: USB disconnect, device number 18 [ 468.336403][ T5856] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 468.391516][ T5856] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.431647][ T5856] usb 2-1: Product: syz [ 468.444740][ T5856] usb 2-1: Manufacturer: syz [ 468.449492][ T5856] usb 2-1: SerialNumber: syz [ 468.478121][ T5856] usb 2-1: config 0 descriptor?? [ 468.605754][ T5856] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 469.449709][ T5856] usb 2-1: qt2_attach - failed to power on unit: -71 [ 469.475063][ T5856] quatech2: probe of 2-1:0.51 failed with error -71 [ 469.513462][ T5856] usb 2-1: USB disconnect, device number 16 [ 470.588551][ T8124] fuse: Bad value for 'rootmode' [ 471.110259][ T8134] netlink: 72 bytes leftover after parsing attributes in process `syz.1.640'. [ 471.293893][ T8138] netlink: 'syz.0.642': attribute type 10 has an invalid length. [ 471.458458][ T8138] team0: Port device dummy0 added [ 471.471184][ T8141] Unsupported ieee802154 address type: 0 [ 471.511242][ T8140] netlink: 'syz.0.642': attribute type 10 has an invalid length. [ 471.542161][ T8140] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 471.744490][ T5856] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 471.934418][ T5856] usb 2-1: Using ep0 maxpacket: 8 [ 471.950135][ T5856] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 471.971717][ T5856] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 472.001645][ T5856] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 472.019334][ T5856] usb 2-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 472.032667][ T5856] usb 2-1: Product: syz [ 472.043638][ T5856] usb 2-1: Manufacturer: syz [ 472.052721][ T5856] usb 2-1: SerialNumber: syz [ 472.170335][ T5856] usb 2-1: config 0 descriptor?? [ 472.225282][ T8138] syz.0.642 (8138) used greatest stack depth: 20744 bytes left [ 472.236965][ T5856] imon_raw 2-1:0.0: IR endpoint missing [ 472.263127][ T8140] team0: Port device dummy0 removed [ 472.315082][ T8140] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 472.714342][ T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 474.100525][ T5816] usb 2-1: USB disconnect, device number 17 [ 474.606602][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 474.797627][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 474.910554][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 474.975593][ T9] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 475.013567][ T9] usb 4-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 475.054406][ T9] usb 4-1: Product: syz [ 475.058668][ T9] usb 4-1: Manufacturer: syz [ 475.100242][ T9] usb 4-1: SerialNumber: syz [ 475.123225][ T9] usb 4-1: config 0 descriptor?? [ 475.152752][ T9] imon_raw 4-1:0.0: IR endpoint missing [ 475.284290][ T5856] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 475.387021][ T27] usb 4-1: USB disconnect, device number 17 [ 475.434603][ T5816] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 475.484426][ T5856] usb 2-1: Using ep0 maxpacket: 32 [ 475.492568][ T5856] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 475.520940][ T5856] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 475.560278][ T5856] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 475.599219][ T5856] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 475.609179][ T5856] usb 2-1: SerialNumber: syz [ 475.632724][ T5856] cdc_ether 2-1:1.0: skipping garbage [ 475.639379][ T5856] cdc_ether 2-1:1.0: skipping garbage [ 475.645328][ T5856] usb 2-1: bad CDC descriptors [ 475.664502][ T5816] usb 1-1: Using ep0 maxpacket: 16 [ 475.682914][ T5816] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 475.728558][ T5816] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 475.758171][ T5816] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 475.784835][ T5816] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 475.819242][ T5816] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 475.833674][ T5856] usb 2-1: USB disconnect, device number 18 [ 475.872743][ T5816] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 475.886192][ T5816] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 475.912896][ T5816] usb 1-1: Manufacturer: syz [ 475.935617][ T5816] usb 1-1: config 0 descriptor?? [ 476.232741][ T8161] fuse: Bad value for 'rootmode' [ 476.384296][ T5816] rc_core: IR keymap rc-hauppauge not found [ 476.390288][ T5816] Registered IR keymap rc-empty [ 476.404326][ T5816] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 476.471562][ T5816] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 476.506306][ T5816] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 476.551766][ T5816] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input47 [ 476.615328][ T5816] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 476.654895][ T5816] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 476.699320][ T5816] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 476.754298][ T5816] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 477.294373][ T5816] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 477.334263][ T5816] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 477.375809][ T5816] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 477.495362][ T5816] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 477.536886][ T5816] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 477.653429][ T8182] Unsupported ieee802154 address type: 0 [ 477.659408][ T5816] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 478.111746][ T5816] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 478.137993][ T5816] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 478.231259][ T8188] program syz.3.658 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 478.488707][ T5816] usb 1-1: USB disconnect, device number 19 [ 479.040437][ T8195] fuse: Bad value for 'rootmode' [ 479.184484][ T5816] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 479.374441][ T5816] usb 1-1: Using ep0 maxpacket: 8 [ 479.421119][ T5816] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 479.444850][ T5816] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 479.504659][ T5816] usb 1-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 479.524448][ T5816] usb 1-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 479.532617][ T5816] usb 1-1: Product: syz [ 479.551529][ T5816] usb 1-1: Manufacturer: syz [ 479.557238][ T5816] usb 1-1: SerialNumber: syz [ 479.577846][ T5816] usb 1-1: config 0 descriptor?? [ 479.586269][ T5816] imon_raw 1-1:0.0: IR endpoint missing [ 479.891838][ T5816] usb 1-1: USB disconnect, device number 20 [ 481.396428][ T8216] overlayfs: missing 'lowerdir' [ 484.278937][ T8227] fuse: Bad value for 'rootmode' [ 485.139816][ T8236] program syz.0.670 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 485.822054][ T8242] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 488.429586][ T8254] Unsupported ieee802154 address type: 0 [ 488.809583][ T5816] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 489.074404][ T5816] usb 3-1: Using ep0 maxpacket: 8 [ 489.086159][ T5816] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 489.111226][ T5816] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 489.116535][ T8268] fuse: Bad value for 'rootmode' [ 489.279637][ T5816] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 489.332943][ T5816] usb 3-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 489.354528][ T5816] usb 3-1: Product: syz [ 489.358775][ T5816] usb 3-1: Manufacturer: syz [ 489.520423][ T5816] usb 3-1: SerialNumber: syz [ 489.742696][ T5816] usb 3-1: config 0 descriptor?? [ 489.832321][ T5816] imon_raw 3-1:0.0: IR endpoint missing [ 490.464487][ T5816] usb 3-1: USB disconnect, device number 13 [ 491.004425][ T5856] usb 4-1: new low-speed USB device number 18 using dummy_hcd [ 491.412736][ T5856] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 492.084303][ T5856] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 492.131183][ T5856] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 492.175828][ T5856] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 492.196628][ T8294] overlayfs: overlapping lowerdir path [ 492.221048][ T5856] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 492.316879][ T8297] program syz.2.685 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 492.418651][ T5856] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 492.576281][ T967] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 492.596219][ T5856] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 492.603793][ T5856] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 492.616342][ T5856] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 492.890464][ T5856] usb 4-1: string descriptor 0 read error: -22 [ 492.897131][ T5856] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 492.906673][ T5856] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.914971][ T967] usb 1-1: Using ep0 maxpacket: 16 [ 492.923872][ T967] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 492.957775][ T967] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 492.979761][ T5856] adutux 4-1:168.0: interrupt endpoints not found [ 492.986861][ T967] usb 1-1: config 0 has no interface number 0 [ 492.996048][ T967] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 493.016347][ T967] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.034320][ T967] usb 1-1: Product: syz [ 493.044496][ T967] usb 1-1: Manufacturer: syz [ 493.049522][ T967] usb 1-1: SerialNumber: syz [ 493.098005][ T967] usb 1-1: config 0 descriptor?? [ 493.112400][ T967] usb 1-1: Found UVC 0.00 device syz (046d:08f3) [ 493.124504][ T967] usb 1-1: No valid video chain found. [ 493.337044][ T5816] usb 1-1: USB disconnect, device number 21 [ 493.377298][ T967] usb 4-1: USB disconnect, device number 18 [ 495.100158][ T8309] netlink: 4 bytes leftover after parsing attributes in process `syz.0.689'. [ 495.178016][ T8309] misc userio: No port type given on /dev/userio [ 497.205777][ T8329] Unsupported ieee802154 address type: 0 [ 497.356448][ T8332] overlayfs: overlapping lowerdir path [ 497.457198][ T8337] program syz.2.695 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 497.487514][ T5856] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 497.694393][ T5856] usb 2-1: Using ep0 maxpacket: 8 [ 497.731652][ T5856] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 497.744025][ T5856] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 497.815360][ T5856] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 497.825706][ T5856] usb 2-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 497.844519][ T5856] usb 2-1: Product: syz [ 497.848756][ T5856] usb 2-1: Manufacturer: syz [ 497.897418][ T5856] usb 2-1: SerialNumber: syz [ 497.918345][ T5856] usb 2-1: config 0 descriptor?? [ 497.986870][ T5856] imon_raw 2-1:0.0: IR endpoint missing [ 498.166091][ T5856] usb 2-1: USB disconnect, device number 19 [ 500.667011][ T8366] netlink: 12 bytes leftover after parsing attributes in process `syz.2.705'. [ 500.884330][ T5856] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 501.094270][ T5856] usb 1-1: Using ep0 maxpacket: 32 [ 501.115927][ T5856] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 501.144405][ T5856] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 501.194789][ T5856] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 501.204422][ T5856] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 501.222757][ T5856] usb 1-1: SerialNumber: syz [ 501.249377][ T5856] cdc_ether 1-1:1.0: skipping garbage [ 501.271576][ T5856] cdc_ether 1-1:1.0: skipping garbage [ 501.291932][ T5856] usb 1-1: bad CDC descriptors [ 502.056080][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.125765][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.161903][ T5856] usb 1-1: USB disconnect, device number 22 [ 502.271047][ T8378] Unsupported ieee802154 address type: 0 [ 502.554330][ T967] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 502.744290][ T967] usb 4-1: Using ep0 maxpacket: 8 [ 502.775116][ T967] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 502.799895][ T967] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 502.879763][ T967] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 502.890472][ T967] usb 4-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 502.924325][ T967] usb 4-1: Product: syz [ 502.928802][ T967] usb 4-1: Manufacturer: syz [ 502.933748][ T967] usb 4-1: SerialNumber: syz [ 502.967920][ T967] usb 4-1: config 0 descriptor?? [ 503.412699][ T967] imon_raw 4-1:0.0: IR endpoint missing [ 503.553957][ T8388] syzkaller0: entered promiscuous mode [ 503.584358][ T8388] syzkaller0: entered allmulticast mode [ 503.629580][ T5856] usb 4-1: USB disconnect, device number 19 [ 504.744585][ T8399] overlayfs: overlapping lowerdir path [ 504.880319][ T8401] program syz.2.709 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 505.664321][ T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 505.820827][ T9] usb 4-1: device descriptor read/64, error -71 [ 506.094380][ T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 508.044813][ T9] usb 4-1: device descriptor read/64, error -71 [ 508.169291][ T9] usb usb4-port1: attempt power cycle [ 509.126214][ T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 509.165102][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 509.177591][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 509.190867][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 509.216025][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 509.225591][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 509.233783][ T9] usb 4-1: SerialNumber: syz [ 509.252829][ T9] cdc_ether 4-1:1.0: skipping garbage [ 509.260457][ T9] cdc_ether 4-1:1.0: skipping garbage [ 509.273647][ T9] usb 4-1: bad CDC descriptors [ 509.839280][ T967] usb 4-1: USB disconnect, device number 22 [ 510.530546][ T8430] fuse: Bad value for 'fd' [ 510.695817][ T8435] overlayfs: overlapping lowerdir path [ 510.877469][ T8437] program syz.3.725 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 511.019959][ T8436] Unsupported ieee802154 address type: 0 [ 511.324586][ T967] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 513.454205][ T967] usb 2-1: Using ep0 maxpacket: 8 [ 513.461407][ T967] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 513.472095][ T967] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 513.493316][ T967] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 513.502861][ T967] usb 2-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 513.511620][ T967] usb 2-1: Product: syz [ 513.516079][ T967] usb 2-1: Manufacturer: syz [ 513.520806][ T967] usb 2-1: SerialNumber: syz [ 513.531117][ T967] usb 2-1: config 0 descriptor?? [ 513.545362][ T967] imon_raw 2-1:0.0: IR endpoint missing [ 513.622481][ T967] usb 2-1: USB disconnect, device number 20 [ 513.709844][ T9] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 513.906370][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 513.935885][ T9] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 513.964339][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 514.004551][ T9] usb 1-1: config 0 has no interface number 0 [ 514.013636][ T9] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 514.043334][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.063639][ T9] usb 1-1: Product: syz [ 514.070214][ T9] usb 1-1: Manufacturer: syz [ 514.080592][ T9] usb 1-1: SerialNumber: syz [ 514.092505][ T9] usb 1-1: config 0 descriptor?? [ 514.106034][ T9] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 514.283560][ T8456] netlink: 'syz.3.731': attribute type 4 has an invalid length. [ 514.660243][ T5815] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 514.834586][ T5815] usb 3-1: device descriptor read/64, error -71 [ 515.104431][ T5815] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 515.274727][ T5815] usb 3-1: device descriptor read/64, error -71 [ 515.410988][ T5815] usb usb3-port1: attempt power cycle [ 515.854423][ T5815] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 515.945392][ T5815] usb 3-1: device descriptor read/8, error -71 [ 516.149343][ T9] usb 1-1: qt2_attach - failed to power on unit: -71 [ 516.174197][ T9] quatech2: probe of 1-1:0.51 failed with error -71 [ 516.204601][ T9] usb 1-1: USB disconnect, device number 23 [ 516.234615][ T5815] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 516.485349][ T5815] usb 3-1: device descriptor read/8, error -71 [ 517.634212][ T5815] usb usb3-port1: unable to enumerate USB device [ 521.894284][ T5815] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 522.154575][ T5815] usb 2-1: Using ep0 maxpacket: 8 [ 522.185283][ T5815] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 522.193594][ T5815] usb 2-1: config 0 has no interface number 0 [ 522.224300][ T5815] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 522.254244][ T5815] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 522.274499][ T5815] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 522.304308][ T5815] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 522.319677][ T5815] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.345471][ T5815] usb 2-1: config 0 descriptor?? [ 522.356503][ T5815] ldusb 2-1:0.55: Interrupt in endpoint not found [ 522.600051][ T5815] usb 2-1: USB disconnect, device number 21 [ 522.895360][ T8490] Unsupported ieee802154 address type: 0 [ 523.464215][ T5815] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 523.864500][ T5815] usb 4-1: Using ep0 maxpacket: 8 [ 524.171352][ T5815] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 524.423133][ T5815] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 524.496783][ T5815] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 524.506895][ T5815] usb 4-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 524.524219][ T5815] usb 4-1: Product: syz [ 524.535185][ T5815] usb 4-1: Manufacturer: syz [ 524.560360][ T5815] usb 4-1: SerialNumber: syz [ 524.573251][ T5815] usb 4-1: config 0 descriptor?? [ 524.587921][ T5815] imon_raw 4-1:0.0: IR endpoint missing [ 524.642053][ T8503] syzkaller0: entered promiscuous mode [ 524.664627][ T8503] syzkaller0: entered allmulticast mode [ 525.253218][ T9] usb 4-1: USB disconnect, device number 23 [ 525.638212][ T8513] overlayfs: overlapping lowerdir path [ 525.798842][ T8516] program syz.0.746 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 527.386004][ T8523] fuse: Bad value for 'fd' [ 530.554756][ T8536] netlink: 32 bytes leftover after parsing attributes in process `syz.0.752'. [ 530.563886][ T8536] netlink: 32 bytes leftover after parsing attributes in process `syz.0.752'. [ 536.846725][ T8578] netlink: 32 bytes leftover after parsing attributes in process `syz.1.765'. [ 536.867831][ T8578] netlink: 32 bytes leftover after parsing attributes in process `syz.1.765'. [ 537.420717][ T8581] fuse: Bad value for 'fd' [ 541.530088][ T8605] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEO' [ 542.687870][ T787] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 542.726120][ T8611] fuse: Bad value for 'fd' [ 542.975517][ T787] usb 2-1: Using ep0 maxpacket: 8 [ 543.027328][ T787] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 543.120071][ T787] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 543.148229][ T787] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 543.173157][ T787] usb 2-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 543.184321][ T787] usb 2-1: Product: syz [ 543.188548][ T787] usb 2-1: Manufacturer: syz [ 543.193186][ T787] usb 2-1: SerialNumber: syz [ 543.223720][ T787] usb 2-1: config 0 descriptor?? [ 543.233322][ T787] imon_raw 2-1:0.0: IR endpoint missing [ 543.438933][ T967] usb 2-1: USB disconnect, device number 22 [ 544.974204][ T787] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 545.486519][ T787] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 545.654679][ T787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.674561][ T787] usb 1-1: Product: syz [ 545.684403][ T787] usb 1-1: Manufacturer: syz [ 545.694258][ T787] usb 1-1: SerialNumber: syz [ 545.735803][ T787] usb 1-1: config 0 descriptor?? [ 546.128419][ T787] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 547.484523][ T5815] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 547.652774][ T787] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 547.664256][ T5815] usb 3-1: Using ep0 maxpacket: 32 [ 547.692389][ T787] usb 1-1: USB disconnect, device number 24 [ 547.701555][ T5815] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 547.728979][ T5815] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 547.756254][ T5815] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 547.765873][ T5815] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 547.773915][ T5815] usb 3-1: SerialNumber: syz [ 549.057930][ T5815] cdc_ether 3-1:1.0: skipping garbage [ 549.111600][ T5815] cdc_ether 3-1:1.0: skipping garbage [ 549.157045][ T5815] usb 3-1: bad CDC descriptors [ 549.263472][ T5815] usb 3-1: USB disconnect, device number 18 [ 550.865343][ T8647] sctp: failed to load transform for md5: -2 [ 556.764367][ T5856] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 556.954335][ T5856] usb 1-1: Using ep0 maxpacket: 8 [ 556.965628][ T5856] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 556.984424][ T5856] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 557.026657][ T5856] usb 1-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 557.044247][ T5856] usb 1-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 557.056390][ T5856] usb 1-1: Product: syz [ 557.066276][ T5856] usb 1-1: Manufacturer: syz [ 557.104268][ T5856] usb 1-1: SerialNumber: syz [ 557.252553][ T5856] usb 1-1: config 0 descriptor?? [ 557.262453][ T5856] imon_raw 1-1:0.0: IR endpoint missing [ 557.865639][ T5856] usb 1-1: USB disconnect, device number 25 [ 563.400149][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.406945][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.443384][ T8754] overlayfs: overlapping lowerdir path [ 565.444431][ T5856] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 565.458290][ T8757] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEO' [ 565.654327][ T5856] usb 2-1: Using ep0 maxpacket: 8 [ 565.665157][ T5856] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 565.676292][ T5856] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 565.693482][ T5856] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 565.702953][ T5856] usb 2-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 565.712054][ T5856] usb 2-1: Product: syz [ 565.784266][ T5856] usb 2-1: Manufacturer: syz [ 565.789334][ T5856] usb 2-1: SerialNumber: syz [ 565.820355][ T5856] usb 2-1: config 0 descriptor?? [ 565.830227][ T8758] program syz.2.814 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 565.832057][ T5856] imon_raw 2-1:0.0: IR endpoint missing [ 566.158507][ T5815] usb 2-1: USB disconnect, device number 23 [ 568.146834][ T8782] Unsupported ieee802154 address type: 0 [ 568.672641][ T5856] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 570.285318][ T5856] usb 1-1: Using ep0 maxpacket: 8 [ 570.311438][ T5856] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 570.415725][ T5856] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 570.470982][ T5856] usb 1-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 570.490328][ T5856] usb 1-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 570.516033][ T5856] usb 1-1: Product: syz [ 570.520549][ T5856] usb 1-1: Manufacturer: syz [ 570.530800][ T5856] usb 1-1: SerialNumber: syz [ 570.545176][ T5856] usb 1-1: config 0 descriptor?? [ 570.553837][ T5856] imon_raw 1-1:0.0: IR endpoint missing [ 570.744801][ T5856] usb 1-1: USB disconnect, device number 26 [ 573.101858][ T5815] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 573.354874][ T5815] usb 3-1: Using ep0 maxpacket: 8 [ 573.435719][ T5815] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 573.641635][ T5815] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 574.250111][ T5815] usb 3-1: string descriptor 0 read error: -71 [ 574.274468][ T5815] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 574.283614][ T5815] usb 3-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 574.365901][ T5815] usb 3-1: config 0 descriptor?? [ 574.391896][ T5815] usb 3-1: can't set config #0, error -71 [ 574.471768][ T5815] usb 3-1: USB disconnect, device number 19 [ 574.841198][ T8828] Unsupported ieee802154 address type: 0 [ 574.994567][ T5815] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 575.114525][ T787] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 575.374500][ T787] usb 1-1: Using ep0 maxpacket: 8 [ 575.439360][ T5815] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 575.476643][ T787] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 575.552199][ T5815] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.592478][ T787] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 575.652133][ T5815] usb 3-1: Product: syz [ 575.693737][ T5815] usb 3-1: Manufacturer: syz [ 575.719702][ T787] usb 1-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 575.765830][ T5815] usb 3-1: SerialNumber: syz [ 575.819350][ T787] usb 1-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 575.893674][ T5815] usb 3-1: config 0 descriptor?? [ 575.935653][ T787] usb 1-1: Product: syz [ 576.005433][ T787] usb 1-1: Manufacturer: syz [ 576.087177][ T787] usb 1-1: SerialNumber: syz [ 576.315560][ T787] usb 1-1: config 0 descriptor?? [ 576.602759][ T5815] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 576.614426][ T787] imon_raw 1-1:0.0: IR endpoint missing [ 577.824770][ T9] usb 1-1: USB disconnect, device number 27 [ 577.994519][ T5815] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 578.022052][ T5815] usb 3-1: USB disconnect, device number 20 [ 579.183939][ T8845] overlayfs: overlapping lowerdir path [ 579.409110][ T8850] program syz.1.842 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 580.685154][ T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 580.904713][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 580.912981][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 580.928202][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 580.943464][ T9] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 580.952990][ T9] usb 3-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 580.961428][ T9] usb 3-1: Product: syz [ 580.965946][ T9] usb 3-1: Manufacturer: syz [ 580.970745][ T9] usb 3-1: SerialNumber: syz [ 580.984356][ T9] usb 3-1: config 0 descriptor?? [ 581.000931][ T9] imon_raw 3-1:0.0: IR endpoint missing [ 581.054794][ T5815] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 581.188300][ T8866] overlayfs: overlapping lowerdir path [ 581.284772][ T5815] usb 1-1: Using ep0 maxpacket: 32 [ 581.388344][ T5815] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 581.431948][ T967] usb 3-1: USB disconnect, device number 21 [ 581.432442][ T5815] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 581.704979][ T5815] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 581.757478][ T5815] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 581.779841][ T5815] usb 1-1: SerialNumber: syz [ 581.923114][ T5815] cdc_ether 1-1:1.0: skipping garbage [ 581.947092][ T5815] cdc_ether 1-1:1.0: skipping garbage [ 581.952652][ T5815] usb 1-1: bad CDC descriptors [ 582.334793][ T967] usb 1-1: USB disconnect, device number 28 [ 583.022218][ T8872] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEO' [ 584.740165][ T8890] fuse: Bad value for 'fd' [ 585.424180][ T967] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 585.614305][ T967] usb 3-1: Using ep0 maxpacket: 32 [ 585.629027][ T967] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 585.640346][ T967] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 585.661585][ T967] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 585.754167][ T967] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 585.762466][ T967] usb 3-1: SerialNumber: syz [ 585.798296][ T967] cdc_ether 3-1:1.0: skipping garbage [ 585.804020][ T967] cdc_ether 3-1:1.0: skipping garbage [ 585.809733][ T967] usb 3-1: bad CDC descriptors [ 585.965539][ T8903] netlink: 16 bytes leftover after parsing attributes in process `syz.1.860'. [ 586.057058][ T967] usb 3-1: USB disconnect, device number 22 [ 586.135196][ T8903] bond1: entered promiscuous mode [ 586.175476][ T8903] 8021q: adding VLAN 0 to HW filter on device bond1 [ 586.614209][ T8912] overlayfs: overlapping lowerdir path [ 586.752243][ T8914] program syz.1.863 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 589.398650][ T8927] netlink: 28 bytes leftover after parsing attributes in process `syz.2.869'. [ 589.407765][ T8927] netlink: 28 bytes leftover after parsing attributes in process `syz.2.869'. [ 589.417118][ T8927] netlink: 28 bytes leftover after parsing attributes in process `syz.2.869'. [ 589.426049][ T8927] netlink: 28 bytes leftover after parsing attributes in process `syz.2.869'. [ 590.900952][ T8943] netlink: 4 bytes leftover after parsing attributes in process `syz.1.873'. [ 591.161720][ T967] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 591.554259][ T967] usb 1-1: Using ep0 maxpacket: 32 [ 591.591682][ T967] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 591.622446][ T967] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 591.665556][ T967] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 591.684183][ T967] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 591.704158][ T967] usb 1-1: SerialNumber: syz [ 592.671181][ T967] cdc_ether 1-1:1.0: skipping garbage [ 592.684198][ T967] cdc_ether 1-1:1.0: skipping garbage [ 592.690122][ T967] usb 1-1: bad CDC descriptors [ 592.894627][ T9] usb 1-1: USB disconnect, device number 29 [ 596.612119][ T8981] overlayfs: overlapping lowerdir path [ 598.264491][ T8991] random: crng reseeded on system resumption [ 599.367898][ T1073] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.096754][ T1073] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.262728][ T1073] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.593482][ T1073] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.259571][ T1073] tipc: Left network mode [ 603.129118][ T9032] netlink: 32 bytes leftover after parsing attributes in process `syz.1.899'. [ 603.139513][ T9032] netlink: 32 bytes leftover after parsing attributes in process `syz.1.899'. [ 603.208431][ T5783] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 603.240536][ T5783] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 603.251490][ T5783] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 603.285290][ T5783] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 603.300701][ T5783] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 603.313572][ T5783] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 603.385356][ T9] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 603.684480][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 603.695132][ T9] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 603.718626][ T9] usb 1-1: config 0 has no interface number 0 [ 603.920275][ T9] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 604.073129][ T9] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 604.176021][ T9] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 604.357077][ T9] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 604.396382][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.423717][ T9] usb 1-1: config 0 descriptor?? [ 604.439381][ T9] ldusb 1-1:0.55: Interrupt in endpoint not found [ 604.883934][ T9030] netlink: 'syz.0.901': attribute type 3 has an invalid length. [ 604.896923][ T9] usb 1-1: USB disconnect, device number 30 [ 604.905317][ T9030] netlink: 'syz.0.901': attribute type 3 has an invalid length. [ 605.434985][ T5783] Bluetooth: hci1: command tx timeout [ 608.087995][ T9031] chnl_net:caif_netlink_parms(): no params data found [ 608.115322][ T5783] Bluetooth: hci1: command tx timeout [ 608.486110][ T1073] hsr_slave_0: left promiscuous mode [ 608.492250][ T1073] hsr_slave_1: left promiscuous mode [ 608.498471][ T1073] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 608.535525][ T1073] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 608.592408][ T1073] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 608.624308][ T1073] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 608.646103][ T1073] bridge_slave_1: left allmulticast mode [ 608.651972][ T1073] bridge_slave_1: left promiscuous mode [ 608.915090][ T1073] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.099418][ T1073] bridge_slave_0: left allmulticast mode [ 609.238402][ T1073] bridge_slave_0: left promiscuous mode [ 609.268441][ T1073] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.436152][ T9090] overlayfs: missing 'lowerdir' [ 610.194624][ T5783] Bluetooth: hci1: command tx timeout [ 610.341649][ T1073] veth1_macvtap: left promiscuous mode [ 610.354785][ T1073] veth0_macvtap: left promiscuous mode [ 610.360613][ T1073] veth1_vlan: left promiscuous mode [ 610.384982][ T1073] veth0_vlan: left promiscuous mode [ 612.250550][ T1073] team0 (unregistering): Port device team_slave_1 removed [ 612.254264][ T27] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 612.280713][ T5816] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 612.288858][ T5783] Bluetooth: hci1: command tx timeout [ 612.321933][ T1073] team0 (unregistering): Port device team_slave_0 removed [ 612.365291][ T1073] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 612.421338][ T1073] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 612.448204][ T27] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 612.457579][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.469470][ T27] usb 3-1: Product: syz [ 612.473726][ T27] usb 3-1: Manufacturer: syz [ 612.478850][ T27] usb 3-1: SerialNumber: syz [ 612.486724][ T5816] usb 1-1: config index 0 descriptor too short (expected 1572, got 36) [ 612.492010][ T27] usb 3-1: config 0 descriptor?? [ 612.509053][ T5816] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 612.527204][ T5816] usb 1-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 612.536884][ T5816] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.546524][ T5816] usb 1-1: Product: syz [ 612.550834][ T5816] usb 1-1: Manufacturer: syz [ 612.555940][ T5816] usb 1-1: SerialNumber: syz [ 612.576868][ T5816] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 612.713438][ T27] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 612.790484][ T5816] usb 1-1: USB disconnect, device number 31 [ 612.927416][ T1073] bond0 (unregistering): Released all slaves [ 613.044863][ T9084] netlink: 32 bytes leftover after parsing attributes in process `syz.1.910'. [ 613.053983][ T9084] netlink: 32 bytes leftover after parsing attributes in process `syz.1.910'. [ 613.109212][ T9031] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.125471][ T9031] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.133878][ T9031] bridge_slave_0: entered allmulticast mode [ 613.155834][ T9031] bridge_slave_0: entered promiscuous mode [ 613.177382][ T9031] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.185896][ T9031] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.193383][ T9031] bridge_slave_1: entered allmulticast mode [ 613.204597][ T9031] bridge_slave_1: entered promiscuous mode [ 613.303447][ T9031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 613.322088][ T9031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 613.418396][ T9031] team0: Port device team_slave_0 added [ 613.451531][ T9031] team0: Port device team_slave_1 added [ 613.605702][ T9031] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 613.605773][ T9031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 613.605827][ T9031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 613.646014][ T9031] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 613.646033][ T9031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 613.646060][ T9031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 613.683349][ C0] vkms_vblank_simulate: vblank timer overrun [ 613.759786][ T9031] hsr_slave_0: entered promiscuous mode [ 613.823755][ T9031] hsr_slave_1: entered promiscuous mode [ 613.859783][ T9031] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 613.869810][ T9031] Cannot create hsr debugfs directory [ 614.307573][ T27] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 614.354957][ T27] usb 3-1: USB disconnect, device number 23 [ 615.045585][ T9130] overlayfs: missing 'lowerdir' [ 615.450753][ T9031] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 615.492947][ T9031] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 615.517178][ T9031] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 615.547621][ T9031] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 616.141576][ T9031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 616.301163][ T9031] 8021q: adding VLAN 0 to HW filter on device team0 [ 616.618760][ T1073] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.625982][ T1073] bridge0: port 1(bridge_slave_0) entered forwarding state [ 616.672544][ T1073] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.679770][ T1073] bridge0: port 2(bridge_slave_1) entered forwarding state [ 617.687736][ T9154] netlink: 4 bytes leftover after parsing attributes in process `syz.2.924'. [ 618.380455][ T9149] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEO' [ 620.262790][ T9031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 620.610318][ T9180] overlayfs: missing 'lowerdir' [ 623.083522][ T9203] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEO' [ 623.457959][ T9031] veth0_vlan: entered promiscuous mode [ 623.518722][ T9031] veth1_vlan: entered promiscuous mode [ 623.755923][ T9031] veth0_macvtap: entered promiscuous mode [ 623.794220][ T9031] veth1_macvtap: entered promiscuous mode [ 623.906928][ T9031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 623.954966][ T9031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.043303][ T9031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 624.108086][ T9031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.178275][ T9031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 624.189433][ T9031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.245258][ T9031] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 624.322859][ T9031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 624.347958][ T9031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.441270][ T9031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 624.554279][ T9031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.606982][ T9031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 624.646211][ T9031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.696919][ T9031] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 624.739115][ T9031] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.851551][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.864031][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.885504][ T9031] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.148707][ T9031] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.301773][ T9031] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.823525][ T9245] netlink: 32 bytes leftover after parsing attributes in process `syz.1.936'. [ 625.857598][ T9245] netlink: 32 bytes leftover after parsing attributes in process `syz.1.936'. [ 626.204254][ T9243] overlayfs: missing 'lowerdir' [ 626.794643][ T4273] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 626.808713][ T4273] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 626.891104][ T31] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 626.905331][ T31] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 627.478673][ T9258] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEO' [ 633.854904][ T9294] overlayfs: missing 'lowerdir' [ 640.674383][ T9367] overlayfs: missing 'lowerdir' [ 647.575355][ T9413] overlayfs: missing 'lowerdir' [ 650.872307][ T9427] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEO' [ 651.232794][ T9438] netlink: 32 bytes leftover after parsing attributes in process `syz.4.972'. [ 651.243235][ T9438] netlink: 32 bytes leftover after parsing attributes in process `syz.4.972'. [ 652.322712][ T9451] netlink: 28 bytes leftover after parsing attributes in process `syz.4.976'. [ 652.356197][ T9451] netlink: 28 bytes leftover after parsing attributes in process `syz.4.976'. [ 652.405370][ T9451] netlink: 28 bytes leftover after parsing attributes in process `syz.4.976'. [ 652.415290][ T9451] netlink: 28 bytes leftover after parsing attributes in process `syz.4.976'. [ 653.784946][ T9463] overlayfs: missing 'lowerdir' [ 655.698775][ T9470] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEO' [ 658.441282][ T9506] netlink: 28 bytes leftover after parsing attributes in process `syz.2.987'. [ 658.464145][ T9506] netlink: 28 bytes leftover after parsing attributes in process `syz.2.987'. [ 658.475645][ T9506] netlink: 28 bytes leftover after parsing attributes in process `syz.2.987'. [ 658.485852][ T9506] netlink: 28 bytes leftover after parsing attributes in process `syz.2.987'. [ 658.748194][ T9516] netlink: 32 bytes leftover after parsing attributes in process `syz.4.981'. [ 658.758437][ T9516] netlink: 32 bytes leftover after parsing attributes in process `syz.4.981'. [ 660.327013][ T9508] overlayfs: missing 'lowerdir' [ 661.294332][ T967] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 661.570303][ T967] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 661.628477][ T967] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 661.651837][ T967] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 661.661473][ T967] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 661.684392][ T967] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 661.711540][ T967] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 661.739069][ T967] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 661.754347][ T967] usb 5-1: Product: syz [ 661.758574][ T967] usb 5-1: Manufacturer: syz [ 661.913075][ T967] cdc_wdm 5-1:1.0: skipping garbage [ 661.932307][ T967] cdc_wdm 5-1:1.0: skipping garbage [ 661.987366][ T967] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 661.993553][ T967] cdc_wdm 5-1:1.0: Unknown control protocol [ 662.641935][ T5816] usb 5-1: USB disconnect, device number 2 [ 662.668911][ T9554] overlayfs: overlapping lowerdir path [ 662.834232][ T9557] program syz.1.997 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 663.613328][ T9562] overlayfs: missing 'lowerdir' [ 665.924139][ T9579] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEO' [ 666.058217][ T9583] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1002'. [ 666.074458][ T9583] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1002'. [ 666.121675][ T9583] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1002'. [ 666.131508][ T9583] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1002'. [ 668.400820][ T9608] netlink: 32 bytes leftover after parsing attributes in process `syz.2.999'. [ 668.410861][ T9608] netlink: 32 bytes leftover after parsing attributes in process `syz.2.999'. [ 669.144796][ T9610] overlayfs: missing 'lowerdir' [ 670.091480][ T9618] lo speed is unknown, defaulting to 1000 [ 670.098466][ T9618] lo speed is unknown, defaulting to 1000 [ 670.112901][ T9618] lo speed is unknown, defaulting to 1000 [ 670.139124][ T9618] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 670.178654][ T9618] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 670.937135][ T9618] lo speed is unknown, defaulting to 1000 [ 670.987700][ T9618] lo speed is unknown, defaulting to 1000 [ 671.008772][ T9627] overlayfs: overlapping lowerdir path [ 671.027670][ T9618] lo speed is unknown, defaulting to 1000 [ 671.111550][ T9629] program syz.2.1010 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 671.598927][ T9618] lo speed is unknown, defaulting to 1000 [ 677.745934][ T967] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 677.954795][ T967] usb 3-1: Using ep0 maxpacket: 8 [ 677.971994][ T967] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 678.010985][ T967] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 678.163281][ T967] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 678.212073][ T967] usb 3-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 678.232266][ T967] usb 3-1: Product: syz [ 678.240864][ T967] usb 3-1: Manufacturer: syz [ 678.247776][ T967] usb 3-1: SerialNumber: syz [ 678.271323][ T967] usb 3-1: config 0 descriptor?? [ 678.392501][ T967] imon_raw 3-1:0.0: IR endpoint missing [ 678.748083][ T967] usb 3-1: USB disconnect, device number 24 [ 680.350248][ T9695] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1020'. [ 680.360957][ T9695] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1020'. [ 680.372911][ T9695] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1020'. [ 680.382300][ T9695] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1020'. [ 682.092732][ T9709] overlayfs: overlapping lowerdir path [ 682.199617][ T9710] program syz.1.1024 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 682.757881][ T9718] bridge0: entered promiscuous mode [ 683.282248][ T9712] bridge0: left promiscuous mode [ 684.969109][ T9729] overlayfs: overlapping lowerdir path [ 685.314587][ T27] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 685.544275][ T27] usb 1-1: Using ep0 maxpacket: 32 [ 685.568615][ T27] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 685.581367][ T27] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 685.600172][ T27] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 685.611358][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 685.622397][ T27] usb 1-1: SerialNumber: syz [ 685.652031][ T27] cdc_ether 1-1:1.0: skipping garbage [ 685.661965][ T27] cdc_ether 1-1:1.0: skipping garbage [ 685.668379][ T27] usb 1-1: bad CDC descriptors [ 685.861571][ T27] usb 1-1: USB disconnect, device number 32 [ 686.771801][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.778596][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.085591][ T5814] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 688.404368][ T5814] usb 5-1: Using ep0 maxpacket: 8 [ 688.459936][ T5814] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 688.582812][ T9756] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1032'. [ 688.592415][ T9756] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1032'. [ 688.603921][ T9756] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1032'. [ 688.614605][ T9756] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1032'. [ 689.094327][ T5814] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 689.858689][ T5814] usb 5-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 689.966597][ T5814] usb 5-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 690.038110][ T5814] usb 5-1: Product: syz [ 690.068277][ T5814] usb 5-1: Manufacturer: syz [ 690.112472][ T5814] usb 5-1: SerialNumber: syz [ 690.221765][ T5814] usb 5-1: config 0 descriptor?? [ 690.301060][ T5814] usb 5-1: can't set config #0, error -71 [ 690.398324][ T5814] usb 5-1: USB disconnect, device number 3 [ 694.503028][ T9785] overlayfs: overlapping lowerdir path [ 694.605886][ T9790] program syz.4.1039 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 695.648215][ T9801] bridge0: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 696.878450][ T9801] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.886034][ T9801] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.894643][ T9801] bridge0: entered allmulticast mode [ 697.464121][ T9807] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1043'. [ 697.473312][ T9807] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1043'. [ 697.485821][ T9807] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1043'. [ 697.495320][ T9807] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1043'. [ 698.069933][ T9810] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1044'. [ 698.111412][ T9810] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1044'. [ 700.986820][ T9823] overlayfs: overlapping lowerdir path [ 702.062955][ T9828] program syz.2.1038 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 708.266219][ T9879] overlayfs: overlapping lowerdir path [ 708.911422][ T9879] program syz.0.1053 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 709.445261][ T9890] bridge0: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 709.501924][ T9890] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.510146][ T9890] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.540576][ T9890] bridge0: entered allmulticast mode [ 709.737852][ T9896] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1059'. [ 719.284272][ T5838] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 719.594144][ T5838] usb 3-1: Using ep0 maxpacket: 32 [ 719.601277][ T5838] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 719.618291][ T5838] usb 3-1: config 0 has no interface number 0 [ 719.636473][ T5838] usb 3-1: config 0 interface 184 has no altsetting 0 [ 720.028780][ T9960] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEO' [ 720.099188][ T5838] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 720.119185][ T5838] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.364341][ T5838] usb 3-1: Product: syz [ 720.368671][ T5838] usb 3-1: Manufacturer: syz [ 720.373439][ T5838] usb 3-1: SerialNumber: syz [ 720.420571][ T5838] usb 3-1: config 0 descriptor?? [ 720.479366][ T5838] smsc75xx v1.0.0 [ 721.529758][ T5838] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 721.564160][ T5838] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 721.577407][ T5838] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 721.590040][ T5838] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 721.601120][ T5838] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 721.613308][ T5838] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 721.626014][ T5838] smsc75xx: probe of 3-1:0.184 failed with error -71 [ 721.657052][ T5838] usb 3-1: USB disconnect, device number 25 [ 723.013491][ T9970] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEO' [ 724.455546][ T9985] overlayfs: failed to resolve './file0': -2 [ 726.938039][T10004] overlayfs: overlapping lowerdir path [ 727.235902][ T5838] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 727.457369][ T5838] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 727.474178][ T5838] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.504075][ T5838] usb 5-1: Product: syz [ 727.514648][ T5838] usb 5-1: Manufacturer: syz [ 727.529680][ T5838] usb 5-1: SerialNumber: syz [ 727.559662][ T5838] usb 5-1: config 0 descriptor?? [ 727.875849][ T5838] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 729.224396][ T5838] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32 [ 729.316578][ T5788] Bluetooth: hci1: command 0x0406 tx timeout [ 729.950242][T10023] overlayfs: failed to resolve './file0': -2 [ 730.849619][ T5838] usb 5-1: USB disconnect, device number 4 [ 733.045929][T10053] overlayfs: overlapping lowerdir path [ 733.197211][T10055] program syz.0.1102 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 734.218186][T10066] syzkaller0: entered promiscuous mode [ 734.249446][T10066] syzkaller0: entered allmulticast mode [ 739.223745][T10097] bridge0: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 740.930209][T10101] syzkaller0: entered promiscuous mode [ 740.944234][T10101] syzkaller0: entered allmulticast mode [ 743.326146][T10112] overlayfs: overlapping lowerdir path [ 743.465040][T10114] program syz.4.1116 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 746.583642][T10132] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1124'. [ 746.593937][T10132] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1124'. [ 747.545860][T10136] bridge0: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 749.189267][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 749.195907][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 750.046636][T10147] syzkaller0: entered promiscuous mode [ 750.052204][T10147] syzkaller0: entered allmulticast mode [ 750.578362][T10151] overlayfs: overlapping lowerdir path [ 750.775239][T10152] program syz.1.1130 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 757.452284][T10190] overlayfs: overlapping lowerdir path [ 757.711300][T10194] lo speed is unknown, defaulting to 1000 [ 757.718280][T10194] lo speed is unknown, defaulting to 1000 [ 757.727387][T10194] lo speed is unknown, defaulting to 1000 [ 757.821888][T10194] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 758.445302][T10194] lo speed is unknown, defaulting to 1000 [ 758.458276][T10194] lo speed is unknown, defaulting to 1000 [ 758.470309][T10194] lo speed is unknown, defaulting to 1000 [ 758.576954][T10194] lo speed is unknown, defaulting to 1000 [ 762.534572][T10220] syzkaller0: entered promiscuous mode [ 762.540302][T10220] syzkaller0: entered allmulticast mode [ 763.335999][ T9247] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 763.544321][ T9247] usb 1-1: Using ep0 maxpacket: 8 [ 763.557969][ T9247] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 763.576972][ T9247] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 763.587375][ T9247] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 763.597131][ T9247] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.624970][ T9247] usb 1-1: config 0 descriptor?? [ 764.105138][ T9247] usb 1-1: USB disconnect, device number 33 [ 765.144669][ T9248] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 765.444309][ T9248] usb 1-1: Using ep0 maxpacket: 16 [ 765.505691][ T9248] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 765.524150][ T9248] usb 1-1: config 0 has no interface number 0 [ 765.533762][ T9248] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 765.563678][ T9248] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 765.661053][T10238] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1148'. [ 765.671311][T10238] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1148'. [ 766.127766][ T9248] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 766.187637][ T9248] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.211499][ T9248] usb 1-1: Product: syz [ 766.224224][ T9248] usb 1-1: Manufacturer: syz [ 766.229031][ T9248] usb 1-1: SerialNumber: syz [ 766.299842][ T9248] usb 1-1: config 0 descriptor?? [ 766.320875][T10233] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 766.329383][T10233] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 766.412892][T10240] overlayfs: overlapping lowerdir path [ 766.531693][T10241] program syz.4.1154 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 766.831974][T10233] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 766.851635][T10233] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 767.184155][ T9248] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 769.988875][ T9248] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 770.034416][ T9248] asix: probe of 1-1:0.34 failed with error -71 [ 770.087815][ T9248] usb 1-1: USB disconnect, device number 34 [ 771.241199][T10268] siw: device registration error -23 [ 772.169362][T10273] bridge0: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 773.075065][T10273] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.083470][T10273] bridge0: port 1(bridge_slave_0) entered disabled state [ 773.091222][T10273] bridge0: entered allmulticast mode [ 775.163922][T10293] overlayfs: overlapping lowerdir path [ 775.257259][T10294] program syz.0.1166 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 777.952605][T10316] siw: device registration error -23 [ 778.701997][ T9248] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 779.027882][ T9248] usb 2-1: Using ep0 maxpacket: 32 [ 779.167883][ T9248] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 779.334157][ T9248] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 779.376670][ T9248] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 779.409826][ T9248] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 779.421591][ T9248] usb 2-1: SerialNumber: syz [ 779.437722][ T9248] cdc_ether 2-1:1.0: skipping garbage [ 779.443182][ T9248] cdc_ether 2-1:1.0: skipping garbage [ 779.459861][ T9248] usb 2-1: bad CDC descriptors [ 779.556078][T10325] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1173'. [ 779.592103][T10325] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1173'. [ 779.676520][ T9248] usb 2-1: USB disconnect, device number 24 [ 783.784717][T10351] overlayfs: overlapping lowerdir path [ 784.013443][T10351] program syz.2.1179 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 784.465560][T10355] overlayfs: missing 'lowerdir' [ 784.792540][T10357] syzkaller0: entered promiscuous mode [ 784.814117][T10357] syzkaller0: entered allmulticast mode [ 791.385353][T10361] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1183'. [ 791.414393][T10361] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1183'. [ 791.772415][T10406] overlayfs: overlapping lowerdir path [ 791.870568][T10407] program syz.0.1192 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 794.488318][T10424] overlayfs: missing 'lowerdir' [ 795.244196][T10428] syzkaller0: entered promiscuous mode [ 795.254200][T10428] syzkaller0: entered allmulticast mode [ 801.819547][T10434] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1200'. [ 801.828945][T10434] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1200'. [ 802.207257][T10469] overlayfs: overlapping lowerdir path [ 802.362734][T10471] program syz.2.1205 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 806.103558][T10491] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1212'. [ 806.114071][T10491] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1212'. [ 807.038215][T10493] syzkaller0: entered promiscuous mode [ 807.053899][T10493] syzkaller0: entered allmulticast mode [ 810.451794][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 810.464491][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 813.460430][T10530] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1221'. [ 813.505480][T10530] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1221'. [ 813.834379][ T9247] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 814.504354][ T9247] usb 5-1: Using ep0 maxpacket: 8 [ 814.525353][ T9247] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 814.562456][ T9247] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 814.700676][ T9247] usb 5-1: config 0 has no interface number 0 [ 814.724228][ T9247] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 814.772189][ T9247] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.265951][ T9247] usb 5-1: config 0 descriptor?? [ 816.298499][ T9247] ldusb 5-1:0.55: Interrupt in endpoint not found [ 816.514515][ T9247] usb 5-1: USB disconnect, device number 5 [ 816.598048][T10557] syzkaller0: entered promiscuous mode [ 816.603638][T10557] syzkaller0: entered allmulticast mode [ 821.044349][T10567] syzkaller0: entered promiscuous mode [ 821.049975][T10567] syzkaller0: entered allmulticast mode [ 822.661106][T10598] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1234'. [ 822.674469][T10598] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1234'. [ 827.013041][T10636] bridge0: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 828.117024][T10636] bridge0: port 2(bridge_slave_1) entered disabled state [ 828.124626][T10636] bridge0: port 1(bridge_slave_0) entered disabled state [ 828.132411][T10636] bridge0: entered allmulticast mode [ 832.458785][T10660] overlayfs: missing 'lowerdir' [ 832.594452][T10662] syzkaller0: entered promiscuous mode [ 832.610357][T10662] syzkaller0: entered allmulticast mode [ 833.524612][ T27] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 834.990751][T10676] binder: BINDER_SET_CONTEXT_MGR already set [ 835.064179][T10676] binder: 10675:10676 ioctl 4018620d 200000000040 returned -16 [ 835.153636][ T27] usb 2-1: Using ep0 maxpacket: 8 [ 835.160810][ T27] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 835.184220][ T27] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 835.233943][ T27] usb 2-1: config 0 has no interface number 0 [ 835.253438][ T27] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 835.284252][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.323829][ T27] usb 2-1: config 0 descriptor?? [ 835.376880][ T27] ldusb 2-1:0.55: Interrupt in endpoint not found [ 835.584568][ T27] usb 2-1: USB disconnect, device number 25 [ 837.853756][T10702] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1268'. [ 838.114948][T10709] syzkaller0: entered promiscuous mode [ 838.120622][T10709] syzkaller0: entered allmulticast mode [ 840.332184][T10719] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 840.404344][T10719] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 841.407497][T10728] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1278'. [ 846.531317][T10749] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEO' [ 846.882518][T10755] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 846.901792][T10755] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 847.234540][T10760] overlayfs: overlapping lowerdir path [ 847.363846][T10761] program syz.0.1282 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 853.256635][T10800] overlayfs: overlapping lowerdir path [ 853.413316][T10803] program syz.1.1298 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 857.279472][T10829] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1306'. [ 858.395704][T10839] overlayfs: overlapping lowerdir path [ 858.491722][T10842] program syz.2.1312 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 862.930763][T10870] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1318'. [ 863.058528][T10880] siw: device registration error -23 [ 864.019610][T10887] overlayfs: overlapping lowerdir path [ 864.104161][T10888] program syz.1.1324 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 867.946257][T10912] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1332'. [ 868.848237][T10922] siw: device registration error -23 [ 870.597409][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.644542][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.141053][T10950] overlayfs: overlapping lowerdir path [ 872.250437][T10951] program syz.0.1341 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 873.545907][T10957] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1342'. [ 874.672701][T10975] siw: device registration error -23 [ 877.971254][T10998] overlayfs: overlapping lowerdir path [ 878.796160][T11002] program syz.0.1354 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 880.741344][T11024] siw: device registration error -23 [ 884.369683][T11044] syzkaller0: entered promiscuous mode [ 884.388968][T11044] syzkaller0: entered allmulticast mode [ 886.093345][ T5814] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 886.260588][ T5814] usb 3-1: device descriptor read/64, error -71 [ 886.278308][T11058] overlayfs: overlapping lowerdir path [ 886.488364][T11060] program syz.1.1368 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 886.604328][ T5814] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 886.874231][ T5814] usb 3-1: device descriptor read/64, error -71 [ 887.104951][ T5814] usb usb3-port1: attempt power cycle [ 887.534320][ T5814] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 887.612308][ T5814] usb 3-1: device descriptor read/8, error -71 [ 888.584065][ T5814] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 888.637495][ T5814] usb 3-1: device descriptor read/8, error -71 [ 888.773567][ T5814] usb usb3-port1: unable to enumerate USB device [ 893.209016][T11085] Unsupported ieee802154 address type: 0 [ 893.514354][ T9248] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 893.740128][ T9248] usb 2-1: Using ep0 maxpacket: 8 [ 893.779647][ T9248] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 893.829848][ T9248] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 893.894912][ T9248] usb 2-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 893.941545][ T9248] usb 2-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 893.993374][ T9248] usb 2-1: Product: syz [ 894.016347][ T9248] usb 2-1: Manufacturer: syz [ 894.053897][ T9248] usb 2-1: SerialNumber: syz [ 894.157643][ T9248] usb 2-1: config 0 descriptor?? [ 894.255874][ T9248] imon_raw 2-1:0.0: IR endpoint missing [ 896.193608][ T9248] usb 2-1: USB disconnect, device number 26 [ 896.546902][T11097] overlayfs: overlapping lowerdir path [ 900.573404][T11133] Unsupported ieee802154 address type: 0 [ 900.614600][ T9] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 901.570926][ T9248] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 901.604369][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 901.701299][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 901.804298][ T9248] usb 5-1: Using ep0 maxpacket: 8 [ 901.883487][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 901.921588][ T9248] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 902.136538][ T9248] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 902.271339][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 902.411109][ T9248] usb 5-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 902.450630][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 902.590407][ T9248] usb 5-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 902.619497][ T9] usb 3-1: SerialNumber: syz [ 902.704007][T11129] syzkaller0: entered promiscuous mode [ 902.771438][ T9248] usb 5-1: Product: syz [ 902.846337][T11129] syzkaller0: entered allmulticast mode [ 902.895081][ T9248] usb 5-1: Manufacturer: syz [ 902.924648][ T9] cdc_ether 3-1:1.0: skipping garbage [ 903.000690][ T9248] usb 5-1: SerialNumber: syz [ 903.044222][ T9] cdc_ether 3-1:1.0: skipping garbage [ 903.156315][ T9] usb 3-1: bad CDC descriptors [ 903.305320][ T9248] usb 5-1: config 0 descriptor?? [ 903.427305][ T9] usb 3-1: USB disconnect, device number 30 [ 903.497054][ T9248] imon_raw 5-1:0.0: IR endpoint missing [ 903.648936][ T9248] usb 5-1: USB disconnect, device number 6 [ 904.324202][ T967] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 904.734081][ T967] usb 1-1: Using ep0 maxpacket: 32 [ 904.813865][ T967] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 904.864062][ T967] usb 1-1: config 0 has no interface number 0 [ 904.896148][ T967] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 904.906487][ T967] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.915869][ T967] usb 1-1: Product: syz [ 904.920183][ T967] usb 1-1: Manufacturer: syz [ 904.925332][ T967] usb 1-1: SerialNumber: syz [ 904.941801][ T967] usb 1-1: config 0 descriptor?? [ 904.953485][ T967] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 905.186934][ T967] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 905.213285][ T967] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 905.218663][T11155] overlayfs: overlapping lowerdir path [ 905.348143][T11157] program syz.4.1390 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 906.396163][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 906.439192][ T967] usb 1-1: USB disconnect, device number 35 [ 906.726626][ T967] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 906.743772][ T967] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 906.805496][ T967] quatech2 1-1:0.51: device disconnected [ 908.738150][T11176] Unsupported ieee802154 address type: 0 [ 909.528474][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 910.304253][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 910.385798][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 910.647861][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 910.827757][ T9] usb 5-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 911.136746][ T9] usb 5-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 911.194106][ T9] usb 5-1: Product: syz [ 911.198377][ T9] usb 5-1: Manufacturer: syz [ 911.268358][ T9] usb 5-1: SerialNumber: syz [ 911.421134][ T9] usb 5-1: config 0 descriptor?? [ 911.489979][ T9] usb 5-1: can't set config #0, error -71 [ 912.119590][ T9] usb 5-1: USB disconnect, device number 7 [ 912.164132][ T5814] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 912.564174][ T5814] usb 3-1: Using ep0 maxpacket: 32 [ 912.807623][ T5814] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 912.854057][ T5814] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 912.941326][ T5814] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 912.974188][ T5814] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 913.002791][ T5814] usb 3-1: SerialNumber: syz [ 913.016340][ T5814] cdc_ether 3-1:1.0: skipping garbage [ 913.022018][ T5814] cdc_ether 3-1:1.0: skipping garbage [ 913.044131][ T5814] usb 3-1: bad CDC descriptors [ 915.254483][T11206] siw: device registration error -23 [ 915.994829][T11203] overlayfs: overlapping lowerdir path [ 916.163909][T11209] program syz.4.1403 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 917.801722][ T5788] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 917.836195][ T5788] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 917.856162][ T5788] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 917.875719][ T5788] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 917.894159][ T5788] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 917.904160][ T5788] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 919.958212][ T5783] Bluetooth: hci4: command tx timeout [ 922.034185][ T5783] Bluetooth: hci4: command tx timeout [ 922.082989][T11244] siw: device registration error -23 [ 922.715803][ T5814] usb 3-1: USB disconnect, device number 31 [ 922.794780][T11220] lo speed is unknown, defaulting to 1000 [ 925.144547][ T5783] Bluetooth: hci4: command tx timeout [ 925.515987][T11220] chnl_net:caif_netlink_parms(): no params data found [ 927.154134][ T5783] Bluetooth: hci4: command tx timeout [ 928.378164][T11180] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.569688][T11180] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.619651][T11220] bridge0: port 1(bridge_slave_0) entered blocking state [ 928.630283][T11220] bridge0: port 1(bridge_slave_0) entered disabled state [ 928.638461][T11220] bridge_slave_0: entered allmulticast mode [ 928.669212][T11220] bridge_slave_0: entered promiscuous mode [ 928.704069][ T967] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 928.744314][ T9] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 928.749338][T11180] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.786168][T11220] bridge0: port 2(bridge_slave_1) entered blocking state [ 928.811069][T11220] bridge0: port 2(bridge_slave_1) entered disabled state [ 928.841450][T11220] bridge_slave_1: entered allmulticast mode [ 928.855593][T11220] bridge_slave_1: entered promiscuous mode [ 928.892317][T11180] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 928.894207][ T967] usb 5-1: Using ep0 maxpacket: 16 [ 928.916696][ T967] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 928.928077][ T967] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 928.948286][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 928.958481][ T967] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 928.961838][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 928.994013][ T967] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 929.006721][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 929.033895][ T967] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 929.056773][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 929.057478][ T967] usb 5-1: config 0 descriptor?? [ 929.090906][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 929.115155][ T9] usb 3-1: SerialNumber: syz [ 929.126542][T11220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 929.155215][ T9] cdc_ether 3-1:1.0: skipping garbage [ 929.160774][ T9] cdc_ether 3-1:1.0: skipping garbage [ 929.187624][ T9] usb 3-1: bad CDC descriptors [ 929.188895][T11220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 929.376992][T11220] team0: Port device team_slave_0 added [ 929.381159][ T9] usb 3-1: USB disconnect, device number 32 [ 929.409540][T11220] team0: Port device team_slave_1 added [ 929.516355][ T967] hid (null): global environment stack underflow [ 929.590257][ T967] shield 0003:0955:7214.0001: global environment stack underflow [ 929.604285][ T967] shield 0003:0955:7214.0001: item 0 4 1 11 parsing failed [ 929.618620][ T967] shield 0003:0955:7214.0001: Parse failed [ 929.628076][ T967] shield: probe of 0003:0955:7214.0001 failed with error -22 [ 929.744824][T11220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 929.772924][T11220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 929.824089][T11220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 929.830405][ T967] usb 5-1: USB disconnect, device number 8 [ 929.837106][T11220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 929.849555][T11220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 929.889654][T11220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 930.231187][T11220] hsr_slave_0: entered promiscuous mode [ 930.282247][T11220] hsr_slave_1: entered promiscuous mode [ 931.405180][T11220] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 931.478594][T11220] Cannot create hsr debugfs directory [ 932.045485][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.056671][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.634326][ T5814] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 933.907880][ T5814] usb 1-1: Using ep0 maxpacket: 8 [ 933.926398][ T5814] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 933.937244][ T5814] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 933.958504][ T5814] usb 1-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 934.684021][ T5814] usb 1-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 934.692207][ T5814] usb 1-1: Product: syz [ 934.696947][ T5814] usb 1-1: Manufacturer: syz [ 934.701757][ T5814] usb 1-1: SerialNumber: syz [ 934.725348][ T5814] usb 1-1: config 0 descriptor?? [ 934.776386][ T5814] imon_raw 1-1:0.0: IR endpoint missing [ 936.394468][ T28] audit: type=1326 audit(1777964124.014:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11329 comm="syz.4.1431" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe618d9cdd9 code=0x7fc00000 [ 936.492721][ T9] usb 1-1: USB disconnect, device number 36 [ 938.615674][T11220] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 938.641525][T11220] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 939.256531][T11220] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 939.287093][T11220] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 939.547728][T11180] hsr_slave_0: left promiscuous mode [ 939.574146][T11180] hsr_slave_1: left promiscuous mode [ 939.580602][T11180] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 939.590614][T11180] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 939.990487][T11180] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 940.107421][T11180] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 940.128230][T11180] bridge_slave_1: left allmulticast mode [ 940.134504][T11180] bridge_slave_1: left promiscuous mode [ 940.141666][T11180] bridge0: port 2(bridge_slave_1) entered disabled state [ 940.170757][T11180] bridge_slave_0: left allmulticast mode [ 940.176948][T11180] bridge_slave_0: left promiscuous mode [ 940.187271][T11180] bridge0: port 1(bridge_slave_0) entered disabled state [ 940.308378][T11180] veth1_macvtap: left promiscuous mode [ 940.316841][T11180] veth0_macvtap: left promiscuous mode [ 940.332693][T11180] veth1_vlan: left promiscuous mode [ 940.344770][T11180] veth0_vlan: left promiscuous mode [ 941.257135][T11180] bond1 (unregistering): Released all slaves [ 941.284154][ T5814] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 942.224415][ T5814] usb 5-1: Using ep0 maxpacket: 32 [ 942.236295][ T5814] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 942.259654][ T5814] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 942.265807][T11383] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1440'. [ 942.279483][ T5814] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 942.295784][ T5814] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 942.303852][ T5814] usb 5-1: SerialNumber: syz [ 942.324332][ T5814] cdc_ether 5-1:1.0: skipping garbage [ 942.329807][ T5814] cdc_ether 5-1:1.0: skipping garbage [ 942.335947][ T5814] usb 5-1: bad CDC descriptors [ 943.718230][T11180] team0 (unregistering): Port device team_slave_1 removed [ 943.791040][T11180] team0 (unregistering): Port device team_slave_0 removed [ 943.880351][T11180] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 943.976129][T11180] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 944.556434][T11180] bond0 (unregistering): Released all slaves [ 944.715635][ T9247] lo speed is unknown, defaulting to 1000 [ 944.818950][ T9247] usb 5-1: USB disconnect, device number 9 [ 944.984405][T11220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 945.696735][T11220] 8021q: adding VLAN 0 to HW filter on device team0 [ 946.170904][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state [ 946.178176][ T4273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 946.273119][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state [ 946.280416][ T4273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 947.800926][T11220] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 950.695385][T11220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 952.418614][T11220] veth0_vlan: entered promiscuous mode [ 952.456951][T11220] veth1_vlan: entered promiscuous mode [ 953.257252][T11220] veth0_macvtap: entered promiscuous mode [ 953.295840][T11220] veth1_macvtap: entered promiscuous mode [ 954.314760][T11220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 954.340397][T11220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 954.400736][T11220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 954.434385][T11220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 954.454761][T11220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 954.473790][T11220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 954.495396][T11220] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 954.517303][T11220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 954.533750][T11220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 954.554499][ T9248] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 954.764329][T11220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 954.775570][T11220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 954.809258][T11220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 954.851795][T11220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 955.034531][ T9248] usb 5-1: Using ep0 maxpacket: 32 [ 955.059135][T11220] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 955.143504][ T9248] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 955.194113][ T9248] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 955.211963][T11220] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.261670][T11220] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.272167][ T9248] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 955.294210][T11220] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.303102][ T9248] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 955.319589][T11220] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.334019][ T9248] usb 5-1: SerialNumber: syz [ 955.387461][ T9248] cdc_ether 5-1:1.0: skipping garbage [ 955.419456][ T9248] cdc_ether 5-1:1.0: skipping garbage [ 955.434037][ T9248] usb 5-1: bad CDC descriptors [ 955.549320][ T4273] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 955.629587][ T4273] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 955.659186][ T9247] usb 5-1: USB disconnect, device number 10 [ 955.766457][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 955.811258][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 957.300772][T11516] lo speed is unknown, defaulting to 1000 [ 957.345202][T11516] lo speed is unknown, defaulting to 1000 [ 957.379785][T11516] lo speed is unknown, defaulting to 1000 [ 957.404574][T11516] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 957.425003][T11516] lo speed is unknown, defaulting to 1000 [ 957.431594][T11516] lo speed is unknown, defaulting to 1000 [ 957.526919][T11516] lo speed is unknown, defaulting to 1000 [ 957.539462][T11516] lo speed is unknown, defaulting to 1000 [ 959.104720][ T5838] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 959.415835][ T5838] usb 5-1: Using ep0 maxpacket: 8 [ 959.498443][ T5838] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 959.629067][ T5838] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 959.904236][ T5814] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 961.864211][ T5838] usb 5-1: string descriptor 0 read error: -71 [ 961.888344][ T5838] usb 5-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 961.898190][ T5838] usb 5-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 961.925255][ T5838] usb 5-1: config 0 descriptor?? [ 961.956237][ T5838] usb 5-1: can't set config #0, error -71 [ 961.984463][ T5838] usb 5-1: USB disconnect, device number 11 [ 962.768805][T11550] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1468'. [ 963.362962][ T9248] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 963.626677][ T9248] usb 5-1: Using ep0 maxpacket: 32 [ 963.754508][ T9248] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 963.964418][ T9248] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 964.117649][ T9248] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 964.155317][ T9248] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 964.190652][ T9248] usb 5-1: SerialNumber: syz [ 964.229302][ T9248] cdc_ether 5-1:1.0: skipping garbage [ 964.270697][ T9248] cdc_ether 5-1:1.0: skipping garbage [ 964.283661][ T9248] usb 5-1: bad CDC descriptors [ 964.738604][ T9248] usb 5-1: USB disconnect, device number 12 [ 965.404244][ T9247] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 965.636757][ T9247] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 965.926111][ T9248] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 966.224076][ T9248] usb 5-1: Using ep0 maxpacket: 8 [ 966.319672][ T9248] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 966.448032][ T9248] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 966.610432][ T9248] usb 5-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 966.736155][ T9248] usb 5-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 966.855318][ T9248] usb 5-1: Product: syz [ 966.908020][ T9248] usb 5-1: Manufacturer: syz [ 966.972804][ T9248] usb 5-1: SerialNumber: syz [ 967.114070][ T9248] usb 5-1: config 0 descriptor?? [ 967.305098][ T9248] imon_raw 5-1:0.0: IR endpoint missing [ 968.359423][ T9247] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 968.640910][ T9247] usb 1-1: string descriptor 0 read error: -71 [ 968.654207][ T9247] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 968.664153][ T9247] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.685968][ T9247] usb 1-1: config 0 descriptor?? [ 968.692899][ T9247] usb 1-1: can't set config #0, error -71 [ 968.702019][ T9247] usb 1-1: USB disconnect, device number 37 [ 968.717455][ T9248] usb 5-1: USB disconnect, device number 13 [ 972.784371][ T5838] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 973.027754][ T5838] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 973.399949][ T9] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 974.024211][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 974.124830][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 974.256843][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 974.408021][ T9] usb 1-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 974.533080][ T9] usb 1-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 974.651271][ T9] usb 1-1: Product: syz [ 974.719985][ T9] usb 1-1: Manufacturer: syz [ 974.792176][ T9] usb 1-1: SerialNumber: syz [ 974.978287][ T9] usb 1-1: config 0 descriptor?? [ 975.256639][ T9] imon_raw 1-1:0.0: IR endpoint missing [ 975.400962][ T5838] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 976.030567][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 976.098429][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 976.106178][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 976.115398][ T5838] usb 6-1: string descriptor 0 read error: -71 [ 976.122059][ T5838] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 976.132020][ T5838] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 976.154474][ T27] usb 1-1: USB disconnect, device number 38 [ 976.163181][ T5838] usb 6-1: config 0 descriptor?? [ 976.172347][ T5838] usb 6-1: can't set config #0, error -71 [ 976.181888][ T5838] usb 6-1: USB disconnect, device number 3 [ 980.339251][ T5814] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 980.597497][ T5814] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 980.860738][ T5814] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 980.940755][ T5814] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.993061][ T5814] usb 3-1: Product: syz [ 981.023438][ T5814] usb 3-1: Manufacturer: syz [ 981.051530][ T5814] usb 3-1: SerialNumber: syz [ 981.078149][ T5814] usb 3-1: config 0 descriptor?? [ 982.470109][T11496] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 982.825479][T11496] usb 5-1: Using ep0 maxpacket: 8 [ 982.934812][T11496] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 983.168595][T11496] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 983.488613][T11496] usb 5-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 983.666173][T11496] usb 5-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 983.811720][T11496] usb 5-1: Product: syz [ 983.878274][T11496] usb 5-1: Manufacturer: syz [ 983.949685][T11496] usb 5-1: SerialNumber: syz [ 984.252501][T11496] usb 5-1: config 0 descriptor?? [ 984.513766][T11496] imon_raw 5-1:0.0: IR endpoint missing [ 985.411432][ T9] usb 3-1: USB disconnect, device number 33 [ 985.658102][T11496] usb 5-1: USB disconnect, device number 14 [ 989.133358][T11726] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1503'. [ 990.110507][T11757] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1510'. [ 990.604315][T11757] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1510'. [ 990.813547][T11762] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1512'. [ 993.480976][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.494454][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1000.623803][T11853] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1530'. [ 1000.634228][T11853] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1530'. [ 1003.749265][T11879] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1534'. [ 1003.769341][T11879] veth1_vlan: left promiscuous mode [ 1003.816740][T11882] overlayfs: overlapping lowerdir path [ 1006.946882][T11917] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1544'. [ 1007.814628][T11924] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1545'. [ 1007.865305][T11924] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1545'. [ 1019.505704][T12024] syzkaller0: entered promiscuous mode [ 1019.511268][T12024] syzkaller0: entered allmulticast mode [ 1037.616005][ T5814] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1039.324241][ T5814] usb 1-1: Using ep0 maxpacket: 32 [ 1039.332551][ T5814] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1039.373986][ T5814] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 1039.406587][ T5814] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1039.444012][ T5814] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1039.452180][ T5814] usb 1-1: SerialNumber: syz [ 1039.488407][ T5814] cdc_ether 1-1:1.0: skipping garbage [ 1039.513027][ T5814] cdc_ether 1-1:1.0: skipping garbage [ 1039.534597][ T5814] usb 1-1: bad CDC descriptors [ 1039.763171][ T27] usb 1-1: USB disconnect, device number 39 [ 1041.646707][ T5788] Bluetooth: hci4: command 0x0406 tx timeout [ 1041.850477][T12234] binder: 12233:12234 ioctl c018620c 200000000140 returned -1 [ 1042.721504][T12252] Bluetooth: MGMT ver 1.22 [ 1042.869931][T12256] syzkaller0: entered promiscuous mode [ 1042.877727][T12256] syzkaller0: entered allmulticast mode [ 1044.565608][T12268] netlink: 280 bytes leftover after parsing attributes in process `syz.2.1619'. [ 1051.851900][T12326] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1051.859716][T12326] IPv6: NLM_F_CREATE should be set when creating new route [ 1051.903805][T12326] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1635'. [ 1051.994983][T12328] kvm: pic: non byte write [ 1053.467142][T12342] input: syz1 as /devices/virtual/input/input48 [ 1054.963162][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.969718][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1057.824657][T12367] tipc: Enabling of bearer rejected, failed to enable media [ 1061.649498][T12401] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1656'. [ 1062.305323][T12406] program syz.0.1657 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1064.912774][T12425] tipc: Started in network mode [ 1064.920977][T12425] tipc: Node identity dea8e2530bde, cluster identity 4711 [ 1064.944656][T12425] tipc: Enabled bearer , priority 0 [ 1065.354045][T12425] tipc: Resetting bearer [ 1065.615362][T12424] tipc: Disabling bearer [ 1067.759000][T12452] program syz.4.1668 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1068.393749][T12463] [ 1068.396226][T12463] ============================= [ 1068.401113][T12463] WARNING: suspicious RCU usage [ 1068.406076][T12463] syzkaller #0 Not tainted [ 1068.410528][T12463] ----------------------------- [ 1068.415558][T12463] net/mac80211/iface.c:378 suspicious rcu_dereference_protected() usage! [ 1068.424054][T12463] [ 1068.424054][T12463] other info that might help us debug this: [ 1068.424054][T12463] [ 1068.435080][T12463] [ 1068.435080][T12463] rcu_scheduler_active = 2, debug_locks = 1 [ 1068.443177][T12463] 1 lock held by syz.0.1670/12463: [ 1068.448446][T12463] #0: ffffffff8e3c2ac8 (rtnl_mutex){+.+.}-{3:3}, at: devinet_ioctl+0x30c/0x1c40 [ 1068.458242][T12463] [ 1068.458242][T12463] stack backtrace: [ 1068.464303][T12463] CPU: 1 PID: 12463 Comm: syz.0.1670 Not tainted syzkaller #0 [ 1068.471901][T12463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1068.482013][T12463] Call Trace: [ 1068.485349][T12463] [ 1068.488316][T12463] dump_stack_lvl+0x18c/0x250 [ 1068.493133][T12463] ? show_regs_print_info+0x20/0x20 [ 1068.498385][T12463] ? load_image+0x420/0x420 [ 1068.502985][T12463] lockdep_rcu_suspicious+0x1e1/0x300 [ 1068.508728][T12463] ieee80211_check_concurrent_iface+0x475/0x950 [ 1068.515474][T12463] ieee80211_open+0xc1/0x200 [ 1068.520303][T12463] __dev_open+0x2cb/0x430 [ 1068.524861][T12463] ? dev_open+0x190/0x190 [ 1068.529243][T12463] __dev_change_flags+0x211/0x6a0 [ 1068.534320][T12463] ? dev_get_flags+0x1c0/0x1c0 [ 1068.539135][T12463] ? mutex_lock_nested+0x20/0x20 [ 1068.544204][T12463] ? apparmor_capable+0x137/0x1a0 [ 1068.549312][T12463] dev_change_flags+0x88/0x1a0 [ 1068.554137][T12463] devinet_ioctl+0x95c/0x1c40 [ 1068.558871][T12463] ? inet_ifa_byprefix+0x2a0/0x2a0 [ 1068.564028][T12463] ? _copy_from_user+0xa5/0xe0 [ 1068.569046][T12463] ? get_user_ifreq+0x12b/0x180 [ 1068.573979][T12463] inet_ioctl+0x42b/0x560 [ 1068.578438][T12463] ? tomoyo_path_number_perm+0x217/0x620 [ 1068.584119][T12463] ? inet_shutdown+0x370/0x370 [ 1068.589011][T12463] ? slab_free_freelist_hook+0x130/0x1a0 [ 1068.594725][T12463] ? tomoyo_path_number_perm+0x500/0x620 [ 1068.600402][T12463] ? __kmem_cache_free+0xba/0x1e0 [ 1068.605484][T12463] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1068.610998][T12463] sock_do_ioctl+0xfc/0x310 [ 1068.615609][T12463] ? sock_show_fdinfo+0xb0/0xb0 [ 1068.620523][T12463] sock_ioctl+0x5ba/0x7e0 [ 1068.624898][T12463] ? sock_poll+0x3e0/0x3e0 [ 1068.629639][T12463] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1068.634638][T12463] ? security_file_ioctl+0x80/0xa0 [ 1068.639889][T12463] ? sock_poll+0x3e0/0x3e0 [ 1068.644345][T12463] __se_sys_ioctl+0xfd/0x170 [ 1068.648992][T12463] do_syscall_64+0x55/0xa0 [ 1068.653485][T12463] ? clear_bhb_loop+0x40/0x90 [ 1068.658278][T12463] ? clear_bhb_loop+0x40/0x90 [ 1068.663010][T12463] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1068.669566][T12463] RIP: 0033:0x7f81aeb9cdd9 [ 1068.674032][T12463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1068.693787][T12463] RSP: 002b:00007f81afa5e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1068.702263][T12463] RAX: ffffffffffffffda RBX: 00007f81aee16360 RCX: 00007f81aeb9cdd9 [ 1068.710683][T12463] RDX: 0000200000002280 RSI: 0000000000008914 RDI: 0000000000000005 [ 1068.718999][T12463] RBP: 00007f81aec32d69 R08: 0000000000000000 R09: 0000000000000000 [ 1068.727205][T12463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1068.735358][T12463] R13: 00007f81aee163f8 R14: 00007f81aee16360 R15: 00007fff8f2e8ed8 [ 1068.743415][T12463] [ 1068.940728][T12461] sctp: failed to load transform for md5: -2