last executing test programs: 6.730316833s ago: executing program 0 (id=1817): openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) open(0x0, 0x400, 0x43) socket$rds(0x15, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000009b80)=""/102392, 0x18ff8) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) landlock_restrict_self(r0, 0x8) 6.516437208s ago: executing program 3 (id=1818): r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(0x0, 0x400, 0x43) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000009b80)=""/102392, 0x18ff8) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) landlock_restrict_self(r0, 0x8) 6.329978935s ago: executing program 1 (id=1819): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f00000500070084"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6.32960959s ago: executing program 1 (id=1820): r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(0x0, 0x400, 0x43) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000009b80)=""/102392, 0x18ff8) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) landlock_restrict_self(r0, 0x8) 5.829537808s ago: executing program 2 (id=1822): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40000c1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x28f}, &(0x7f00000003c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185500, 0x12345}) landlock_create_ruleset(&(0x7f00000002c0)={0x2da8}, 0x18, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_enter(r4, 0x7277, 0x0, 0x0, 0x0, 0x0) 5.490059749s ago: executing program 1 (id=1823): openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000009b80)=""/102392, 0x18ff8) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) landlock_restrict_self(r0, 0x8) 5.330361714s ago: executing program 3 (id=1824): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000000)={0x13, 0x10, 0x7, {0x0, r3, 0x1}}, 0x18) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000a00), 0x8280, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) close(r4) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x2) ioctl$SNDRV_TIMER_IOCTL_INFO(r5, 0x80e85411, &(0x7f0000000400)) socket$inet6_sctp(0xa, 0x5, 0x84) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x0, 0x1000002d, 0x12000, 0x299c0, 0x7, 0x395400000000000, 0xfc5, 0x3, 0x5507}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010400000000000000000200e704050001000700000030692b5aebac0cd17186e7779be9ab9e218cc6ca0af0bd83226a6865a9f66727"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) 5.260402714s ago: executing program 0 (id=1825): r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(0x0, 0x400, 0x43) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000009b80)=""/102392, 0x18ff8) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) landlock_restrict_self(r0, 0x8) 4.89221152s ago: executing program 2 (id=1826): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f0000000000)={0x13, 0x10, 0x7, {0x0, r4, 0x1}}, 0x18) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000a00), 0x8280, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff000000004e04010000000000d3400202010000004704000001ed00007b130000000000001d440200000000007a0a00fe00ffffffc3030000e1000000b5000000000000009500000000000000023bc065b7a379d17cf9333379fc9e94af69912435f1a864a710aad58db6a6c3692e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5be14ecf7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e347a8ad880d2cd829b847400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c35b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af8612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5e69048ddff6da409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03fb8a63e089679216da18ec0ae564162a27afea62d84f3a10746443d64364f50000e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc286463a2b1e992894269f478341d02d0f5ad4bcb524a5a17f48a7382f13d000000225d85ae49cee383dc5049076b98fb6853ab39e415140200000020cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063be9261b2e1aab1675b34a22048516d6aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe0e669e5e20100005353193f82ade69d0540059fe6c7fe7cd8697502c7596566d6740300da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc02290beaeb883418f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24c87afce829ba0f85da6d8a8f18ea40ab959f6074ab2a4009b9e5f07ab5138aa6e3d37fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0cbe02b6e4114f244a9bf93f04beb72f0861f7580e6b0b384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a9b702cc1b6912a1e717d29135753208160fb04c98375b9cdbae2ed9dc7358f0ebadde0b728fe26e37037f27feeb741680f6f2f9a6a8346962a350845ffa0d829e4f79ad7d87906943408e6df3adbfd03aac93df8866fb010aecfed9092ca4d0f3e1116a0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a530600d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe92c7719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b1dba94a6ea80c33ead5722c3293986e02c8e0a6dda1eca493f14795bd068826fe8df15efaaeea831555877f958a19e499666a38d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a8784d0899ed888141e2fae6691d1aee1da02ba516467df3e7d1daac19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa57d2c93f49c47944fec01a8aa7749f3187e9efb00000000e0884160b765b07ec9ba020362310223c81e48d6d3b6e5b50d45248efe43a409773e3ed01cd663f3aaab9e1c0000f43b64bb54e5b30be3399e3dd1eb1cfd1935a323023fe5792879833c7eb356b95cfb135045b1d8f7da2fa5bfedef411d0791523a9e64c884e9dfed9cd413afe66bd8ee831cdb34726fe0434fbf44c7b33a853330bcaf37ba4e36705807468b37d32087e599165f1bce015145444ef5967b443222f46173cc876015b2d1874be9846f7c1653c02d2ef9a75fdc45820c69bbe1cb575f9aa21aa9d3d58bd5e5fe026142a72e24049b8400c4a28b2d5db8d5f53cb354fba19975fb0b3739baae51cb4b034993ef1463dcdba2da419b320420efdd091d7f6e83c8ac2ccc6c9392a42a33907421ab847c9590c213eda9a7e1db598a23e75a3c0933fc803ca994a86476b995c37c445f68fd99fb4d335ff00d15bc4630c993fffffe000000000000a236a791bcb6eff8d488041db6b8f2c158c2c3f4baacd0c8cc7eb1fd7fba93237e598771cf6f281aa72139"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) close(r5) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x2) ioctl$SNDRV_TIMER_IOCTL_INFO(r6, 0x80e85411, &(0x7f0000000400)) socket$inet6_sctp(0xa, 0x5, 0x84) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x0, 0x1000002d, 0x12000, 0x299c0, 0x7, 0x395400000000000, 0xfc5, 0x3, 0x5507}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010400000000000000000200e704050001000700000030692b5aebac0cd17186e7779be9ab9e218cc6ca0af0bd83226a6865a9f66727"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) 4.360960228s ago: executing program 3 (id=1827): openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(0x0, 0x400, 0x43) socket$rds(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000009b80)=""/102392, 0x18ff8) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) landlock_restrict_self(r0, 0x8) 3.827016998s ago: executing program 2 (id=1828): openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(0x0, 0x400, 0x43) socket$rds(0x15, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000009b80)=""/102392, 0x18ff8) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x8) 3.803471443s ago: executing program 1 (id=1829): socket(0x10, 0x3, 0x0) pipe(&(0x7f0000000040)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x18, &(0x7f0000000640)=ANY=[@ANYBLOB="00000f0000000900"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 3.729778628s ago: executing program 0 (id=1830): openat$apparmor_task_current(0xffffff9c, &(0x7f0000000a00), 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x102b, &(0x7f0000001c00)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x101d, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x1009, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd, "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"}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x7, 0x8) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) prlimit64(0x0, 0xa, &(0x7f0000000040)={0xa, 0x8b}, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000005000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"/302], 0xfc}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="180100002100010000000000fefffffffc020000000000000000000000000000fc020000000000000000000000000001fffc0000000000000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="02000000000000009c001100ac1414aa000000000000000000000000fc000000000000000000000000000001fc020000000000000000000000000000fe80000000000000000000020000000032"], 0x118}, 0x1, 0x0, 0x0, 0x800}, 0x42000) r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c4, 0x1004, 0xffffffffffffffff, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x80000004000000, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2.857641313s ago: executing program 3 (id=1831): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000009b40)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x4, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x81, 0x6, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x80000001, 0x8, 0x101, 0x3}, {0x3, 0x9, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x8}, {0x3, 0x4, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0x0, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x0, 0xffffffff}, {0x5, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0xffff997c, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x5, 0x2, 0xc, 0x8, 0x9, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x8, 0x7fff, 0x4, 0x8, 0x9}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x81, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0x9}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001}, {0x0, 0x6, 0x8000, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0xad, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5202, 0x2, 0x53ce, 0x3}, {0xffffff81, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x6, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x3ff, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x8000, 0x7, 0x9}, {0xff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x4, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x9, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0xffff, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b5}, {0xa24b, 0x947d, 0x3, 0x4, 0x80000000, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x6}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x0, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0x7, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x7, 0x7}, {0x20000006, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x5, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x4, 0x7, 0x4, 0x78d, 0xffffcff9, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x4}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x4}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x5}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r6, &(0x7f0000002900)={&(0x7f0000000500)=@xdp={0x2c, 0x8, r4, 0xc}, 0x80, &(0x7f0000002f40)=[{&(0x7f0000000180)="270302", 0x3}], 0x1}, 0x4) 2.788827179s ago: executing program 0 (id=1832): r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(0x0, 0x400, 0x43) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000009b80)=""/102392, 0x18ff8) iopl(0x3) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) landlock_restrict_self(r0, 0x8) 2.782478073s ago: executing program 3 (id=1833): openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) open(0x0, 0x400, 0x43) socket$rds(0x15, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000009b80)=""/102392, 0x18ff8) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) landlock_restrict_self(r0, 0x8) 2.530019034s ago: executing program 2 (id=1834): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.122025308s ago: executing program 1 (id=1835): r0 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) close(0x3) syz_io_uring_setup(0x239, &(0x7f0000000980)={0x0, 0x0, 0x10100}, &(0x7f0000000180), &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) 2.121539462s ago: executing program 2 (id=1836): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$video4linux(0x0, 0x7fff, 0x48b03) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f0000000000)={0x13, 0x10, 0x7, {0x0, r4, 0x1}}, 0x18) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x80085665, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000a00), 0x8280, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) close(r5) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x2) ioctl$SNDRV_TIMER_IOCTL_INFO(r6, 0x80e85411, &(0x7f0000000400)) socket$inet6_sctp(0xa, 0x5, 0x84) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x0, 0x1000002d, 0x12000, 0x299c0, 0x7, 0x395400000000000, 0xfc5, 0x3, 0x5507}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010400000000000000000200e704050001000700000030692b5aebac0cd17186e7779be9ab9e218cc6ca0af0bd83226a6865a9f66727"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) 1.479629157s ago: executing program 0 (id=1837): r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(0x0, 0x400, 0x43) socket$rds(0x15, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000009b80)=""/102392, 0x18ff8) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) landlock_restrict_self(r0, 0x8) 1.384267421s ago: executing program 3 (id=1838): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(0x0, 0x400, 0x43) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000009b80)=""/102392, 0x18ff8) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) landlock_restrict_self(r0, 0x8) 1.112982881s ago: executing program 2 (id=1839): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0xfc80, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYRESHEX], 0xa4}, 0x1, 0x0, 0x0, 0x5050}, 0x40000c1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$kcm(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x28f}, &(0x7f00000003c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0/file0\x00', 0x60, 0x185500, 0x12345}) landlock_create_ruleset(&(0x7f00000002c0)={0x2da8}, 0x18, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_enter(r3, 0x7277, 0x0, 0x0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.100754114s ago: executing program 1 (id=1840): r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(0x0, 0x400, 0x43) socket$rds(0x15, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000009b80)=""/102392, 0x18ff8) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) landlock_restrict_self(r0, 0x8) 0s ago: executing program 0 (id=1841): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000000)={0x13, 0x10, 0x7, {0x0, r3, 0x1}}, 0x18) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x80085665, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000dc0)={0x38, 0x5, 0x8, 0x9, 0x0, 0x9, 0x0, 0xaa, 0xfa11, 0xffffffff}, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000a00), 0x8280, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff000000004e04010000000000d3400202010000004704000001ed00007b130000000000001d440200000000007a0a00fe00ffffffc3030000e1000000b5000000000000009500000000000000023bc065b7a379d17cf9333379fc9e94af69912435f1a864a710aad58db6a6c3692e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5be14ecf7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e347a8ad880d2cd829b847400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c35b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af8612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5e69048ddff6da409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03fb8a63e089679216da18ec0ae564162a27afea62d84f3a10746443d64364f50000e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc286463a2b1e992894269f478341d02d0f5ad4bcb524a5a17f48a7382f13d000000225d85ae49cee383dc5049076b98fb6853ab39e415140200000020cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063be9261b2e1aab1675b34a22048516d6aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe0e669e5e20100005353193f82ade69d0540059fe6c7fe7cd8697502c7596566d6740300da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc02290beaeb883418f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24c87afce829ba0f85da6d8a8f18ea40ab959f6074ab2a4009b9e5f07ab5138aa6e3d37fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0cbe02b6e4114f244a9bf93f04beb72f0861f7580e6b0b384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a9b702cc1b6912a1e717d29135753208160fb04c98375b9cdbae2ed9dc7358f0ebadde0b728fe26e37037f27feeb741680f6f2f9a6a8346962a350845ffa0d829e4f79ad7d87906943408e6df3adbfd03aac93df8866fb010aecfed9092ca4d0f3e1116a0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a530600d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe92c7719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b1dba94a6ea80c33ead5722c3293986e02c8e0a6dda1eca493f14795bd068826fe8df15efaaeea831555877f958a19e499666a38d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a8784d0899ed888141e2fae6691d1aee1da02ba516467df3e7d1daac19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa57d2c93f49c47944fec01a8aa7749f3187e9efb00000000e0884160b765b07ec9ba020362310223c81e48d6d3b6e5b50d45248efe43a409773e3ed01cd663f3aaab9e1c0000f43b64bb54e5b30be3399e3dd1eb1cfd1935a323023fe5792879833c7eb356b95cfb135045b1d8f7da2fa5bfedef411d0791523a9e64c884e9dfed9cd413afe66bd8ee831cdb34726fe0434fbf44c7b33a853330bcaf37ba4e36705807468b37d32087e599165f1bce015145444ef5967b443222f46173cc876015b2d1874be9846f7c1653c02d2ef9a75fdc45820c69bbe1cb575f9aa21aa9d3d58bd5e5fe026142a72e24049b8400c4a28b2d5db8d5f53cb354fba19975fb0b3739baae51cb4b034993ef1463dcdba2da419b320420efdd091d7f6e83c8ac2ccc6c9392a42a33907421ab847c9590c213eda9a7e1db598a23e75a3c0933fc803ca994a86476b995c37c445f68fd99fb4d335ff00d15bc4630c993fffffe000000000000a236a791bcb6eff8d488041db6b8f2c158c2c3f4baacd0c8cc7eb1fd7fba93237e598771cf6f281aa72139"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) close(r4) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x2) ioctl$SNDRV_TIMER_IOCTL_INFO(r5, 0x80e85411, &(0x7f0000000400)) socket$inet6_sctp(0xa, 0x5, 0x84) sched_setattr(0x0, &(0x7f0000000340)={0x38, 0x0, 0x1000002d, 0x12000, 0x299c0, 0x7, 0x395400000000000, 0xfc5, 0x3, 0x5507}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000000306010400000000000000000200e704050001000700000030692b5aebac0cd17186e7779be9ab9e218cc6ca0af0bd83226a6865a9f66727"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) kernel console output (not intermixed with test programs): syz.1.756'. [ 275.497827][ T9326] nbd: socks must be embedded in a SOCK_ITEM attr [ 275.645761][ T9311] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 275.649873][ T9311] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 275.651994][ T9311] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 275.654065][ T9311] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 275.656084][ T9311] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 275.908458][ T8817] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 275.994036][ T9336] netlink: 4 bytes leftover after parsing attributes in process `syz.2.757'. [ 276.000994][ T9336] netlink: 44 bytes leftover after parsing attributes in process `syz.2.757'. [ 276.004090][ T9336] netlink: 44 bytes leftover after parsing attributes in process `syz.2.757'. [ 276.239457][ T8817] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.243185][ T8817] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.257710][ T8817] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 276.261986][ T8817] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 276.264955][ T8817] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.268930][ T8817] usb 8-1: config 0 descriptor?? [ 276.683263][ T8817] usbhid 8-1:0.0: can't add hid device: -71 [ 276.689890][ T8817] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 276.693738][ T8817] usb 8-1: USB disconnect, device number 27 [ 276.770651][ T9346] netlink: 4 bytes leftover after parsing attributes in process `syz.0.759'. [ 276.776790][ T9346] netlink: 44 bytes leftover after parsing attributes in process `syz.0.759'. [ 276.783465][ T9346] netlink: 44 bytes leftover after parsing attributes in process `syz.0.759'. [ 277.245865][ T9352] capability: warning: `syz.3.761' uses deprecated v2 capabilities in a way that may be insecure [ 277.609698][ T9349] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 277.612032][ T9349] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 277.614323][ T9349] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 277.616451][ T9349] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 278.198341][ T9360] netlink: 4 bytes leftover after parsing attributes in process `syz.0.763'. [ 278.206420][ T9360] netlink: 200 bytes leftover after parsing attributes in process `syz.0.763'. [ 278.211582][ T9360] netlink: 200 bytes leftover after parsing attributes in process `syz.0.763'. [ 279.310928][ T9372] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 279.314553][ T9372] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 279.318099][ T9372] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 279.321471][ T9372] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 279.933604][ T9405] netlink: 4 bytes leftover after parsing attributes in process `syz.0.771'. [ 279.938165][ T9405] netlink: 44 bytes leftover after parsing attributes in process `syz.0.771'. [ 279.941182][ T9405] netlink: 44 bytes leftover after parsing attributes in process `syz.0.771'. [ 280.002364][ T9407] netlink: 4 bytes leftover after parsing attributes in process `syz.3.769'. [ 280.620434][ T5301] Bluetooth: hci0: command 0x0406 tx timeout [ 280.643137][ T9416] nbd: socks must be embedded in a SOCK_ITEM attr [ 280.657129][ T6051] block nbd64: NBD_DISCONNECT [ 280.662729][ T9418] kvm: pic: non byte write [ 280.679745][ T9418] kvm: pic: non byte write [ 280.708219][ T9418] kvm: pic: non byte write [ 280.710808][ T9418] kvm: pic: non byte write [ 280.714972][ T9418] kvm: pic: non byte write [ 280.717518][ T9418] kvm: pic: non byte write [ 280.720029][ T9418] kvm: pic: single mode not supported [ 280.720916][ T9418] kvm: pic: non byte write [ 280.725610][ T9418] kvm: pic: non byte write [ 281.337831][ T5940] Bluetooth: hci1: command 0x0406 tx timeout [ 281.339957][ T5301] Bluetooth: hci3: command 0x0406 tx timeout [ 281.341992][ T5947] Bluetooth: hci2: command 0x0406 tx timeout [ 281.880280][ T9443] __nla_validate_parse: 9 callbacks suppressed [ 281.880291][ T9443] netlink: 4 bytes leftover after parsing attributes in process `syz.1.778'. [ 281.886739][ T9443] netlink: 44 bytes leftover after parsing attributes in process `syz.1.778'. [ 281.889704][ T9443] netlink: 44 bytes leftover after parsing attributes in process `syz.1.778'. [ 282.783989][ T9458] netlink: 4 bytes leftover after parsing attributes in process `syz.3.782'. [ 282.796897][ T9458] netlink: 44 bytes leftover after parsing attributes in process `syz.3.782'. [ 282.803236][ T9458] netlink: 44 bytes leftover after parsing attributes in process `syz.3.782'. [ 283.056625][ T9457] netlink: 4 bytes leftover after parsing attributes in process `syz.1.783'. [ 283.061122][ T9457] netlink: 44 bytes leftover after parsing attributes in process `syz.1.783'. [ 283.064152][ T9457] netlink: 44 bytes leftover after parsing attributes in process `syz.1.783'. [ 283.417679][ T5947] Bluetooth: hci3: command 0x0406 tx timeout [ 283.640129][ T9470] netlink: 4 bytes leftover after parsing attributes in process `syz.3.785'. [ 284.499347][ T9489] kvm: pic: non byte write [ 284.501534][ T9489] kvm: pic: non byte write [ 284.515526][ T9489] kvm: pic: single mode not supported [ 285.097234][ T9504] kvm: pic: level sensitive irq not supported [ 285.128231][ T9504] kvm: pic: level sensitive irq not supported [ 285.479276][ T9513] syzkaller0: entered promiscuous mode [ 285.484063][ T9513] syzkaller0: entered allmulticast mode [ 286.882026][ T9545] 9pnet_virtio: no channels available for device syz [ 287.014249][ T9533] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 287.017810][ T9533] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 287.027697][ T9533] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 287.030220][ T9533] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 287.033589][ T9533] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 287.169537][ T9549] syzkaller0: entered promiscuous mode [ 287.171436][ T9549] syzkaller0: entered allmulticast mode [ 287.572068][ T9558] picdev_write: 22 callbacks suppressed [ 287.572089][ T9558] kvm: pic: non byte write [ 287.577196][ T9558] kvm: pic: non byte write [ 287.591505][ T9558] kvm: pic: level sensitive irq not supported [ 287.592215][ T9558] kvm: pic: non byte write [ 287.596221][ T9558] kvm: pic: non byte write [ 287.602772][ T9558] kvm: pic: non byte write [ 287.604677][ T9558] kvm: pic: non byte write [ 287.609301][ T9558] kvm: pic: non byte write [ 287.619790][ T9558] kvm: pic: non byte write [ 287.622789][ T9558] kvm: pic: non byte write [ 287.624966][ T9558] kvm: pic: non byte write [ 287.628902][ T9558] kvm: pic: level sensitive irq not supported [ 288.388224][ T5947] Bluetooth: hci0: command 0x0406 tx timeout [ 288.927111][ T9578] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 288.930205][ T9578] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 288.932297][ T9578] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 288.934336][ T9578] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 289.089523][ T9600] __nla_validate_parse: 14 callbacks suppressed [ 289.089544][ T9600] netlink: 4 bytes leftover after parsing attributes in process `syz.3.812'. [ 289.099929][ T9600] netlink: 44 bytes leftover after parsing attributes in process `syz.3.812'. [ 289.102886][ T9600] netlink: 44 bytes leftover after parsing attributes in process `syz.3.812'. [ 289.493781][ T9606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.814'. [ 289.508704][ T9606] netlink: 44 bytes leftover after parsing attributes in process `syz.2.814'. [ 289.512946][ T9606] netlink: 44 bytes leftover after parsing attributes in process `syz.2.814'. [ 289.602217][ T9608] netlink: 4 bytes leftover after parsing attributes in process `syz.0.813'. [ 290.202643][ T9622] fuse: Bad value for 'fd' [ 290.714349][ T9619] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 290.717177][ T9619] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 290.721016][ T9619] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 290.723777][ T9619] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 291.270917][ T9638] netlink: 4 bytes leftover after parsing attributes in process `syz.2.822'. [ 291.276952][ T9638] netlink: 44 bytes leftover after parsing attributes in process `syz.2.822'. [ 291.281739][ T9638] netlink: 44 bytes leftover after parsing attributes in process `syz.2.822'. [ 292.389498][ T9648] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 292.394287][ T9648] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 292.399382][ T9648] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 292.403576][ T9648] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 293.480411][ T9673] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 293.496676][ T9673] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 293.498887][ T9673] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 293.501065][ T9673] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 294.388365][ T1324] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 294.580753][ T1324] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 294.593781][ T1324] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 294.636777][ T1324] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 294.644635][ T1324] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 294.667897][ T1324] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 294.688874][ T1324] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 294.693354][ T1324] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 294.697214][ T1324] usb 7-1: Product: syz [ 294.701729][ T1324] usb 7-1: Manufacturer: syz [ 294.779954][ T1324] cdc_wdm 7-1:1.0: skipping garbage [ 294.785113][ T1324] cdc_wdm 7-1:1.0: skipping garbage [ 294.801726][ T1324] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 294.808271][ T1324] cdc_wdm 7-1:1.0: Unknown control protocol [ 295.507725][ T5301] Bluetooth: hci1: command 0x0406 tx timeout [ 295.577809][ T5301] Bluetooth: hci3: command 0x0406 tx timeout [ 295.587700][ T5301] Bluetooth: hci2: command 0x0406 tx timeout [ 295.846910][ T9704] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 295.850676][ T9704] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 295.854259][ T9704] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 295.858396][ T9704] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 296.835343][ T9723] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 296.838337][ T9723] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 296.841254][ T9723] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 296.844065][ T9723] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 297.129467][ T9745] kvm: pic: level sensitive irq not supported [ 297.129870][ T9745] kvm: pic: level sensitive irq not supported [ 297.134841][ T9745] kvm: pic: level sensitive irq not supported [ 297.137668][ T9745] kvm: pic: single mode not supported [ 297.154056][ T9745] kvm: pic: single mode not supported [ 297.157805][ T9745] kvm: pic: level sensitive irq not supported [ 297.160170][ T9745] kvm: pic: single mode not supported [ 297.164907][ T9745] kvm: pic: single mode not supported [ 297.166887][ T9745] kvm: pic: level sensitive irq not supported [ 297.176150][ T9745] kvm: pic: single mode not supported [ 297.178305][ T9745] kvm: pic: level sensitive irq not supported [ 297.189169][ T9745] kvm: pic: single mode not supported [ 297.191429][ T9745] kvm: pic: level sensitive irq not supported [ 297.326956][ T1324] usb 7-1: USB disconnect, device number 30 [ 297.709520][ T9764] 9pnet_virtio: no channels available for device syz [ 297.875547][ T9771] fuse: Bad value for 'fd' [ 298.105447][ T9752] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 298.108732][ T9752] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 298.111913][ T9752] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 298.115049][ T9752] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 298.186661][ T9769] __nla_validate_parse: 7 callbacks suppressed [ 298.186790][ T9769] netlink: 4 bytes leftover after parsing attributes in process `syz.1.849'. [ 298.193777][ T9769] netlink: 200 bytes leftover after parsing attributes in process `syz.1.849'. [ 298.196961][ T9769] netlink: 200 bytes leftover after parsing attributes in process `syz.1.849'. [ 299.070523][ T9789] syzkaller0: entered promiscuous mode [ 299.072370][ T9789] syzkaller0: entered allmulticast mode [ 299.418039][ T5301] Bluetooth: hci0: command 0x0406 tx timeout [ 299.660297][ T9795] netlink: 4 bytes leftover after parsing attributes in process `syz.2.856'. [ 300.096549][ T9798] netlink: 4 bytes leftover after parsing attributes in process `syz.0.857'. [ 300.101530][ T9798] netlink: 200 bytes leftover after parsing attributes in process `syz.0.857'. [ 300.105755][ T9798] netlink: 200 bytes leftover after parsing attributes in process `syz.0.857'. [ 300.137922][ T5301] Bluetooth: hci3: command 0x0406 tx timeout [ 300.137969][ T5947] Bluetooth: hci2: command 0x0406 tx timeout [ 300.140745][ T5301] Bluetooth: hci1: command 0x0406 tx timeout [ 300.806469][ T9804] kvm: pic: level sensitive irq not supported [ 300.806769][ T9804] kvm: pic: single mode not supported [ 300.811109][ T9804] kvm: pic: single mode not supported [ 300.813644][ T9804] kvm: pic: single mode not supported [ 300.815903][ T9804] kvm: pic: level sensitive irq not supported [ 300.830485][ T9804] kvm: pic: single mode not supported [ 300.833094][ T9804] kvm: pic: level sensitive irq not supported [ 302.100049][ T9833] netfs: Couldn't get user pages (rc=-14) [ 302.263482][ T9842] netlink: 4 bytes leftover after parsing attributes in process `syz.2.865'. [ 302.774454][ T9831] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 302.776771][ T9831] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 302.783454][ T9831] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 302.786196][ T9831] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 303.597742][ T1468] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 303.603467][ T9876] netlink: 4 bytes leftover after parsing attributes in process `syz.1.870'. [ 303.616302][ T9876] netlink: 200 bytes leftover after parsing attributes in process `syz.1.870'. [ 303.620209][ T9876] netlink: 200 bytes leftover after parsing attributes in process `syz.1.870'. [ 303.818634][ T10] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 303.839333][ T1468] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.842736][ T1468] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.845741][ T1468] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 303.857668][ T1468] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 303.860581][ T1468] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.865021][ T1468] usb 5-1: config 0 descriptor?? [ 303.990297][ T10] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 303.993933][ T10] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 303.999422][ T10] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 304.002402][ T10] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 304.005898][ T10] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 304.012119][ T10] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 304.015138][ T10] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 304.017983][ T10] usb 8-1: Product: syz [ 304.019515][ T10] usb 8-1: Manufacturer: syz [ 304.026962][ T10] cdc_wdm 8-1:1.0: skipping garbage [ 304.029649][ T10] cdc_wdm 8-1:1.0: skipping garbage [ 304.033493][ T10] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 304.036152][ T10] cdc_wdm 8-1:1.0: Unknown control protocol [ 304.137688][ T5940] Bluetooth: hci0: command 0x0406 tx timeout [ 304.280714][ T1468] plantronics 0003:047F:FFFF.0019: reserved main item tag 0xd [ 304.283863][ T1468] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 304.286443][ T1468] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 304.296331][ T1468] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 304.300434][ T1468] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 304.304229][ T1468] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 304.348511][ T1468] plantronics 0003:047F:FFFF.0019: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 304.489099][ T1468] usb 5-1: USB disconnect, device number 41 [ 304.778111][ T5940] Bluetooth: hci1: command 0x0406 tx timeout [ 304.857924][ T5940] Bluetooth: hci3: command 0x0406 tx timeout [ 304.858911][ T5947] Bluetooth: hci2: command 0x0406 tx timeout [ 305.689831][ T9887] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 305.692788][ T9887] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 305.695600][ T9887] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 305.698574][ T9887] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 306.209477][ T1468] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 306.254950][ T1324] usb 8-1: USB disconnect, device number 28 [ 306.378388][ T1468] usb 5-1: Using ep0 maxpacket: 32 [ 306.382606][ T1468] usb 5-1: config 0 has no interfaces? [ 306.387348][ T1468] usb 5-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 306.390971][ T1468] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.393637][ T1468] usb 5-1: Product: syz [ 306.395197][ T1468] usb 5-1: Manufacturer: syz [ 306.396894][ T1468] usb 5-1: SerialNumber: syz [ 306.402120][ T1468] usb 5-1: config 0 descriptor?? [ 306.611150][ T1468] usb 5-1: USB disconnect, device number 42 [ 306.697748][ T5940] Bluetooth: hci0: command 0x0406 tx timeout [ 307.018089][ T24] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 307.169681][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.174117][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.177926][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 307.183146][ T24] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 307.186667][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.193112][ T24] usb 7-1: config 0 descriptor?? [ 307.405198][ T9928] netlink: 4 bytes leftover after parsing attributes in process `syz.0.893'. [ 307.409626][ T9929] netlink: 4 bytes leftover after parsing attributes in process `syz.1.892'. [ 307.418457][ T9929] netlink: 200 bytes leftover after parsing attributes in process `syz.1.892'. [ 307.422009][ T9929] netlink: 200 bytes leftover after parsing attributes in process `syz.1.892'. [ 307.443181][ T9928] netlink: 44 bytes leftover after parsing attributes in process `syz.0.893'. [ 307.446178][ T9928] netlink: 44 bytes leftover after parsing attributes in process `syz.0.893'. [ 307.603691][ T24] plantronics 0003:047F:FFFF.001A: reserved main item tag 0xd [ 307.608427][ T24] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 307.613004][ T24] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 307.617567][ T24] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 307.623534][ T24] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 307.628655][ T24] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 307.638296][ T24] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 307.738464][ T5947] Bluetooth: hci3: command 0x0406 tx timeout [ 307.740985][ T5940] Bluetooth: hci2: command 0x0406 tx timeout [ 307.748407][ T5940] Bluetooth: hci1: command 0x0406 tx timeout [ 307.863754][ T6012] usb 7-1: USB disconnect, device number 31 [ 308.114887][ T9934] netlink: 8 bytes leftover after parsing attributes in process `syz.3.895'. [ 308.215396][ T9938] pic_ioport_write: 29 callbacks suppressed [ 308.215415][ T9938] kvm: pic: level sensitive irq not supported [ 308.218809][ T9938] pic_ioport_write: 29 callbacks suppressed [ 308.218827][ T9938] kvm: pic: single mode not supported [ 308.224095][ T9938] kvm: pic: level sensitive irq not supported [ 308.229267][ T9938] kvm: pic: single mode not supported [ 308.233128][ T9938] kvm: pic: single mode not supported [ 308.236574][ T9938] kvm: pic: single mode not supported [ 308.240110][ T9938] kvm: pic: single mode not supported [ 308.242958][ T9938] kvm: pic: single mode not supported [ 308.247202][ T9938] kvm: pic: single mode not supported [ 308.249643][ T9938] kvm: pic: level sensitive irq not supported [ 308.252508][ T9938] kvm: pic: single mode not supported [ 308.255161][ T9938] kvm: pic: level sensitive irq not supported [ 308.277724][ T9938] kvm: pic: level sensitive irq not supported [ 308.288687][ T9938] kvm: pic: level sensitive irq not supported [ 308.291598][ T9938] kvm: pic: level sensitive irq not supported [ 308.294588][ T9938] kvm: pic: level sensitive irq not supported [ 308.299014][ T9938] kvm: pic: single mode not supported [ 308.301022][ T9938] kvm: pic: level sensitive irq not supported [ 308.361868][ T9943] netfs: Couldn't get user pages (rc=-14) [ 308.447764][ T1324] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 308.707900][ T1324] usb 8-1: Using ep0 maxpacket: 16 [ 308.711906][ T1324] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 308.715819][ T1324] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 308.720332][ T1324] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 308.726697][ T1324] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 308.731406][ T1324] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.734862][ T1324] usb 8-1: Product: syz [ 308.737759][ T1324] usb 8-1: Manufacturer: syz [ 308.740738][ T1324] usb 8-1: SerialNumber: syz [ 309.021118][ T1324] usb 8-1: 0:2 : does not exist [ 309.027185][ T1324] usb 8-1: 1:0: cannot get min/max values for control 4 (id 1) [ 309.078928][ T1324] usb 8-1: USB disconnect, device number 29 [ 309.186684][ T9942] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 309.195395][ T9942] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 309.200281][ T9942] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 309.204016][ T9942] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 310.077708][ T29] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 310.081874][ T9973] __nla_validate_parse: 1 callbacks suppressed [ 310.081886][ T9973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.901'. [ 310.092669][ T9973] netlink: 200 bytes leftover after parsing attributes in process `syz.1.901'. [ 310.095626][ T9973] netlink: 200 bytes leftover after parsing attributes in process `syz.1.901'. [ 310.126172][ T9974] netlink: 4 bytes leftover after parsing attributes in process `syz.2.904'. [ 310.130393][ T9974] netlink: 44 bytes leftover after parsing attributes in process `syz.2.904'. [ 310.133576][ T9974] netlink: 44 bytes leftover after parsing attributes in process `syz.2.904'. [ 310.229996][ T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.235884][ T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.241794][ T29] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 310.250316][ T29] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 310.254875][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.266960][ T29] usb 8-1: config 0 descriptor?? [ 310.377792][ T5940] Bluetooth: hci0: command 0x0406 tx timeout [ 310.678383][ T29] plantronics 0003:047F:FFFF.001B: reserved main item tag 0xd [ 310.681204][ T29] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 310.695353][ T29] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 310.699084][ T29] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 310.704225][ T29] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 310.706688][ T29] plantronics 0003:047F:FFFF.001B: unknown main item tag 0x0 [ 310.729232][ T29] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 310.954354][ T6024] usb 8-1: USB disconnect, device number 30 [ 311.237771][ T1468] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 311.258908][ T5947] Bluetooth: hci2: command 0x0406 tx timeout [ 311.258953][ T5301] Bluetooth: hci1: command 0x0406 tx timeout [ 311.261505][ T5940] Bluetooth: hci3: command 0x0406 tx timeout [ 311.387692][ T1468] usb 7-1: Using ep0 maxpacket: 32 [ 311.390714][ T1468] usb 7-1: config 0 has no interfaces? [ 311.394184][ T1468] usb 7-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 311.397137][ T1468] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.408356][ T1468] usb 7-1: Product: syz [ 311.417824][ T1468] usb 7-1: Manufacturer: syz [ 311.419988][ T1468] usb 7-1: SerialNumber: syz [ 311.424220][ T1468] usb 7-1: config 0 descriptor?? [ 311.637904][ T6024] usb 7-1: USB disconnect, device number 32 [ 312.402628][ T9997] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 312.407956][ T9997] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 312.418065][ T9997] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 312.421143][ T9997] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 312.899617][T10027] netlink: 4 bytes leftover after parsing attributes in process `syz.0.916'. [ 312.906056][T10027] netlink: 44 bytes leftover after parsing attributes in process `syz.0.916'. [ 312.909546][T10027] netlink: 44 bytes leftover after parsing attributes in process `syz.0.916'. [ 313.335465][T10036] 9pnet_virtio: no channels available for device syz [ 313.539020][T10038] netlink: 4 bytes leftover after parsing attributes in process `syz.2.917'. [ 313.753720][T10024] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 313.756511][T10024] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 313.759386][T10024] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 313.761680][T10024] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 314.347780][ T10] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 314.510345][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.514098][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.517231][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 314.521767][ T10] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 314.525046][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.529199][ T10] usb 7-1: config 0 descriptor?? [ 314.935938][T10050] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 314.936313][ T10] plantronics 0003:047F:FFFF.001C: reserved main item tag 0xd [ 314.938607][T10050] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 314.941054][ T10] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 314.943027][T10050] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 314.945494][ T10] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 314.948191][T10050] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 314.950700][ T10] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 314.956407][ T10] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 314.959587][ T10] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x0 [ 314.965038][ T10] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 315.209095][ T1324] usb 7-1: USB disconnect, device number 33 [ 316.387974][ T5301] Bluetooth: hci0: command 0x0406 tx timeout [ 316.680074][T10091] __nla_validate_parse: 2 callbacks suppressed [ 316.680086][T10091] netlink: 4 bytes leftover after parsing attributes in process `syz.1.931'. [ 316.685685][T10091] netlink: 44 bytes leftover after parsing attributes in process `syz.1.931'. [ 316.688706][T10091] netlink: 44 bytes leftover after parsing attributes in process `syz.1.931'. [ 316.773413][T10092] netfs: Couldn't get user pages (rc=-14) [ 317.028729][ T5301] Bluetooth: hci3: command 0x0406 tx timeout [ 317.031440][ T5947] Bluetooth: hci1: command 0x0406 tx timeout [ 317.034049][ T5940] Bluetooth: hci2: command 0x0406 tx timeout [ 317.330048][T10103] netlink: 4 bytes leftover after parsing attributes in process `syz.2.935'. [ 317.336084][T10103] netlink: 200 bytes leftover after parsing attributes in process `syz.2.935'. [ 317.340229][T10103] netlink: 200 bytes leftover after parsing attributes in process `syz.2.935'. [ 317.441579][T10090] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 317.444911][T10090] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 317.448819][T10090] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 317.453537][T10090] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 317.717758][ T50] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 317.777820][ T6024] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 317.887739][ T50] usb 8-1: Using ep0 maxpacket: 32 [ 317.892080][ T50] usb 8-1: config 0 has no interfaces? [ 317.897780][ T50] usb 8-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 317.907963][ T50] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.911507][ T50] usb 8-1: Product: syz [ 317.913310][ T50] usb 8-1: Manufacturer: syz [ 317.915388][ T50] usb 8-1: SerialNumber: syz [ 317.929835][ T50] usb 8-1: config 0 descriptor?? [ 317.939113][ T6024] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.942630][ T6024] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.947762][ T6024] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 317.953409][ T6024] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 317.957315][ T6024] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.969189][ T6024] usb 6-1: config 0 descriptor?? [ 318.155173][ T6012] usb 8-1: USB disconnect, device number 31 [ 318.376350][ T6024] plantronics 0003:047F:FFFF.001D: reserved main item tag 0xd [ 318.384989][ T6024] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 318.388613][ T6024] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 318.392112][ T6024] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 318.395347][ T6024] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 318.398787][ T6024] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 318.409673][ T6024] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 318.644434][ T6024] usb 6-1: USB disconnect, device number 35 [ 318.707850][ T5301] Bluetooth: hci0: command 0x0406 tx timeout [ 319.120154][T10137] netlink: 4 bytes leftover after parsing attributes in process `syz.0.948'. [ 319.125503][T10137] netlink: 180 bytes leftover after parsing attributes in process `syz.0.948'. [ 319.129551][T10137] netlink: 180 bytes leftover after parsing attributes in process `syz.0.948'. [ 319.205623][T10142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.944'. [ 319.497783][ T5947] Bluetooth: hci1: command 0x0406 tx timeout [ 319.500044][ T5940] Bluetooth: hci2: command 0x0406 tx timeout [ 319.502393][ T5301] Bluetooth: hci3: command 0x0406 tx timeout [ 319.517728][ T1324] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 319.669808][ T1324] usb 6-1: Using ep0 maxpacket: 16 [ 319.674053][ T1324] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 319.678114][ T1324] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 319.682448][ T1324] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 319.688916][ T1324] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 319.693028][ T1324] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.696485][ T1324] usb 6-1: Product: syz [ 319.702553][ T1324] usb 6-1: Manufacturer: syz [ 319.704630][ T1324] usb 6-1: SerialNumber: syz [ 319.999441][ T1324] usb 6-1: 0:2 : does not exist [ 320.187432][ T1324] usb 6-1: 1:0: cannot get min/max values for control 4 (id 1) [ 320.269935][ T1324] usb 6-1: USB disconnect, device number 36 [ 320.282408][ T5956] udevd[5956]: setting owner of /dev/snd/controlC3 to uid=0, gid=29 failed: No such file or directory [ 321.487979][ T39] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 321.637990][ T39] usb 7-1: Using ep0 maxpacket: 16 [ 321.641530][ T39] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 321.644497][ T39] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 321.648440][ T39] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 321.653383][ T39] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 321.656338][ T39] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.659375][ T39] usb 7-1: Product: syz [ 321.660793][ T39] usb 7-1: Manufacturer: syz [ 321.662436][ T39] usb 7-1: SerialNumber: syz [ 321.743556][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 321.746359][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.807722][ T1468] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 321.887053][ T39] usb 7-1: 0:2 : does not exist [ 321.891892][ T39] usb 7-1: 1:0: cannot get min/max values for control 4 (id 1) [ 321.925209][ T39] usb 7-1: USB disconnect, device number 34 [ 321.935180][ T5956] udevd[5956]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 321.960225][ T1468] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.967694][ T1468] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.971411][ T1468] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 321.977816][ T1468] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 321.985179][ T1468] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.007265][ T1468] usb 5-1: config 0 descriptor?? [ 322.418329][ T1468] plantronics 0003:047F:FFFF.001E: reserved main item tag 0xd [ 322.421174][ T1468] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 322.421191][ T1468] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 322.421204][ T1468] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 322.421217][ T1468] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 322.456072][ T1468] plantronics 0003:047F:FFFF.001E: unknown main item tag 0x0 [ 322.466277][T10185] __nla_validate_parse: 8 callbacks suppressed [ 322.466291][T10185] netlink: 4 bytes leftover after parsing attributes in process `syz.1.955'. [ 322.472979][ T1468] plantronics 0003:047F:FFFF.001E: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 322.481154][T10185] netlink: 180 bytes leftover after parsing attributes in process `syz.1.955'. [ 322.485105][T10185] netlink: 180 bytes leftover after parsing attributes in process `syz.1.955'. [ 322.714971][ T24] usb 5-1: USB disconnect, device number 43 [ 323.547794][ T24] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 323.697688][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 323.701109][ T24] usb 6-1: config 0 has no interfaces? [ 323.706364][ T24] usb 6-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 323.712063][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.715714][ T24] usb 6-1: Product: syz [ 323.718322][ T24] usb 6-1: Manufacturer: syz [ 323.720778][ T24] usb 6-1: SerialNumber: syz [ 323.724892][T10202] netlink: 4 bytes leftover after parsing attributes in process `syz.2.958'. [ 323.730856][ T24] usb 6-1: config 0 descriptor?? [ 323.734868][T10202] netlink: 44 bytes leftover after parsing attributes in process `syz.2.958'. [ 323.738886][T10202] netlink: 44 bytes leftover after parsing attributes in process `syz.2.958'. [ 323.943051][ T24] usb 6-1: USB disconnect, device number 37 [ 324.634985][T10214] netlink: 4 bytes leftover after parsing attributes in process `syz.3.963'. [ 324.647871][T10214] netlink: 200 bytes leftover after parsing attributes in process `syz.3.963'. [ 324.651930][T10214] netlink: 200 bytes leftover after parsing attributes in process `syz.3.963'. [ 324.807702][ T1468] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 324.961712][ T1468] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.968594][ T1468] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 324.973512][ T1468] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 324.979371][ T1468] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 324.983926][ T1468] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.004313][ T1468] usb 5-1: config 0 descriptor?? [ 325.157501][T10218] netlink: 8 bytes leftover after parsing attributes in process `syz.2.966'. [ 325.419444][ T1468] plantronics 0003:047F:FFFF.001F: reserved main item tag 0xd [ 325.422176][ T1468] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 325.425000][ T1468] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 325.427852][ T1468] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 325.430396][ T1468] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 325.432890][ T1468] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 325.438127][ T1468] plantronics 0003:047F:FFFF.001F: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 325.467786][ T60] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 325.627723][ T60] usb 7-1: Using ep0 maxpacket: 16 [ 325.632266][ T60] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 325.635414][ T60] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 325.638844][ T60] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 325.646739][ T60] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 325.650884][ T60] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.654473][ T60] usb 7-1: Product: syz [ 325.656398][ T60] usb 7-1: Manufacturer: syz [ 325.658816][ T60] usb 7-1: SerialNumber: syz [ 325.689181][ T10] usb 5-1: USB disconnect, device number 44 [ 325.885666][ T60] usb 7-1: 0:2 : does not exist [ 325.893541][ T60] usb 7-1: 1:0: cannot get min/max values for control 4 (id 1) [ 325.912683][ T60] usb 7-1: USB disconnect, device number 35 [ 325.934868][ T5956] udevd[5956]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 328.237750][ T50] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 328.392440][ T50] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.401920][ T50] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.406629][ T50] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 328.406678][ T50] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 328.406700][ T50] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.422559][ T50] usb 6-1: config 0 descriptor?? [ 328.841547][ T50] plantronics 0003:047F:FFFF.0020: reserved main item tag 0xd [ 328.846144][ T50] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 328.848896][ T50] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 328.851544][ T50] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 328.854446][ T50] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 328.857239][ T50] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 328.864768][ T50] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 329.113387][ T39] usb 6-1: USB disconnect, device number 38 [ 329.644197][T10282] __nla_validate_parse: 6 callbacks suppressed [ 329.644256][T10282] netlink: 4 bytes leftover after parsing attributes in process `syz.2.981'. [ 329.759252][T10282] nbd: socks must be embedded in a SOCK_ITEM attr [ 329.912462][ T5956] udevd[5956]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 330.105438][T10303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.982'. [ 330.113676][T10303] netlink: 44 bytes leftover after parsing attributes in process `syz.1.982'. [ 330.117940][T10303] netlink: 44 bytes leftover after parsing attributes in process `syz.1.982'. [ 330.948899][T10316] netlink: 4 bytes leftover after parsing attributes in process `syz.1.986'. [ 330.959680][T10316] netlink: 44 bytes leftover after parsing attributes in process `syz.1.986'. [ 330.962894][T10316] netlink: 44 bytes leftover after parsing attributes in process `syz.1.986'. [ 331.513399][T10320] netlink: 4 bytes leftover after parsing attributes in process `syz.0.988'. [ 331.520103][T10320] netlink: 200 bytes leftover after parsing attributes in process `syz.0.988'. [ 331.523613][T10320] netlink: 200 bytes leftover after parsing attributes in process `syz.0.988'. [ 331.957759][ T6024] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 332.110448][ T6024] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.115375][ T6024] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.119572][ T6024] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 332.124955][ T6024] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 332.129174][ T6024] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.151764][ T6024] usb 6-1: config 0 descriptor?? [ 332.590319][ T6024] plantronics 0003:047F:FFFF.0021: reserved main item tag 0xd [ 332.593001][ T6024] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 332.598514][ T6024] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 332.601442][ T6024] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 332.604187][ T6024] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 332.607029][ T6024] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 332.618616][ T6024] plantronics 0003:047F:FFFF.0021: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 332.870651][ T6012] usb 6-1: USB disconnect, device number 39 [ 333.645210][T10351] syzkaller0: entered promiscuous mode [ 333.647819][T10351] syzkaller0: entered allmulticast mode [ 334.577011][ T5940] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 334.658764][T10365] __nla_validate_parse: 3 callbacks suppressed [ 334.658877][T10365] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1001'. [ 334.741156][T10365] nbd: socks must be embedded in a SOCK_ITEM attr [ 334.749522][ T6051] block nbd64: NBD_DISCONNECT [ 334.971931][ T5956] udevd[5956]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 336.377931][ T39] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 336.540270][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.548718][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.553285][ T39] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 336.597463][ T39] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 336.601784][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.607409][ T39] usb 5-1: config 0 descriptor?? [ 337.017464][ T39] plantronics 0003:047F:FFFF.0022: reserved main item tag 0xd [ 337.021436][ T39] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 337.024055][ T39] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 337.027439][ T39] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 337.030800][ T39] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 337.034178][ T39] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 337.044925][ T39] plantronics 0003:047F:FFFF.0022: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 337.274180][ T6012] usb 5-1: USB disconnect, device number 45 [ 338.101279][T10419] syzkaller0: entered promiscuous mode [ 338.103686][T10419] syzkaller0: entered allmulticast mode [ 339.710932][T10432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1018'. [ 339.845534][T10438] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1020'. [ 339.880458][T10438] nbd: socks must be embedded in a SOCK_ITEM attr [ 339.975940][ T5956] udevd[5956]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 340.846840][T10459] syzkaller0: entered promiscuous mode [ 340.848852][T10459] syzkaller0: entered allmulticast mode [ 342.620441][T10470] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1027'. [ 342.625331][T10470] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1027'. [ 342.628446][T10470] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1027'. [ 344.089024][T10487] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1030'. [ 344.098643][T10487] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1030'. [ 344.101517][T10487] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1030'. [ 346.280553][T10501] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 346.287048][T10501] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 346.292484][T10501] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 346.302741][T10501] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 346.304980][T10501] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 346.324676][T10501] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 346.461790][T10515] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.465072][T10515] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.541042][T10515] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 346.548852][T10515] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 346.660743][ T1254] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.663687][ T1254] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.677361][ T1254] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.698032][ T1254] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.017749][ T5301] Bluetooth: hci0: command 0x0406 tx timeout [ 347.115436][T10531] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1040'. [ 348.299520][ T5301] Bluetooth: hci1: command 0x0406 tx timeout [ 348.388317][ T5301] Bluetooth: hci3: command 0x0406 tx timeout [ 348.388366][ T5940] Bluetooth: hci2: command 0x0406 tx timeout [ 350.384228][T10571] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1050'. [ 350.444138][ T5940] Bluetooth: hci1: command 0x0406 tx timeout [ 350.457844][ T5940] Bluetooth: hci2: command 0x0406 tx timeout [ 350.933736][T10580] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1053'. [ 351.159799][ T5956] udevd[5956]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 354.133945][T10629] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1062'. [ 354.855385][T10644] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 354.863350][T10644] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 354.927275][ T43] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.930866][ T43] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.933740][ T43] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.936672][ T43] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.575231][T10657] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.578647][T10657] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.663212][T10657] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 355.677245][T10657] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 355.744621][ T59] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.747731][ T59] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.751011][ T59] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.754320][ T59] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.904133][ T5301] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 355.958422][T10666] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1072'. [ 356.061098][T10652] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 356.063361][T10652] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 356.065418][T10652] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 356.067427][T10652] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 356.073396][T10652] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 356.221531][ T6051] udevd[6051]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 356.733930][T10690] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1076'. [ 357.177712][ T5301] Bluetooth: hci0: command 0x0406 tx timeout [ 357.872391][T10705] input: syz0 as /devices/virtual/input/input18 [ 358.147738][ T5301] Bluetooth: hci3: command 0x0406 tx timeout [ 358.147803][ T5947] Bluetooth: hci1: command 0x0406 tx timeout [ 358.153045][ T5940] Bluetooth: hci2: command 0x0406 tx timeout [ 358.954094][T10722] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1088'. [ 359.686216][T10728] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1090'. [ 359.739930][T10728] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1090'. [ 359.891917][T10732] fuse: Bad value for 'fd' [ 359.981356][ T6028] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 360.127716][ T6028] usb 8-1: Using ep0 maxpacket: 16 [ 360.131820][ T6028] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 360.135357][ T6028] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 360.140132][ T6028] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 360.145560][ T6028] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 360.149768][ T6028] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.153135][ T6028] usb 8-1: Product: syz [ 360.154982][ T6028] usb 8-1: Manufacturer: syz [ 360.157016][ T6028] usb 8-1: SerialNumber: syz [ 360.227678][ T5940] Bluetooth: hci2: command 0x0406 tx timeout [ 360.347741][ T50] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 360.497763][ T50] usb 5-1: Using ep0 maxpacket: 32 [ 360.504744][ T50] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 360.508246][ T50] usb 5-1: can't read configurations, error -61 [ 360.572309][ T6028] usb 8-1: 0:2 : does not exist [ 360.637731][ T50] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 360.789743][ T50] usb 5-1: Using ep0 maxpacket: 32 [ 360.795219][ T50] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 360.808110][ T50] usb 5-1: can't read configurations, error -61 [ 360.810429][ T50] usb usb5-port1: attempt power cycle [ 361.147689][ T50] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 361.168562][ T50] usb 5-1: Using ep0 maxpacket: 32 [ 361.179599][ T50] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 361.197060][ T50] usb 5-1: can't read configurations, error -61 [ 361.302731][T10749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1097'. [ 361.327738][ T50] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 361.331828][T10749] nbd: socks must be embedded in a SOCK_ITEM attr [ 361.345050][ T6043] block nbd64: NBD_DISCONNECT [ 361.358588][ T50] usb 5-1: Using ep0 maxpacket: 32 [ 361.364066][ T50] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 361.367484][ T50] usb 5-1: can't read configurations, error -61 [ 361.370824][ T50] usb usb5-port1: unable to enumerate USB device [ 362.506708][ T6028] usb 8-1: 1:0: cannot get min/max values for control 6 (id 1) [ 362.547262][ T6028] usb 8-1: USB disconnect, device number 32 [ 362.565601][ T5956] udevd[5956]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 364.191679][T10794] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1108'. [ 364.487826][ T6373] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 364.638813][ T6373] usb 6-1: Using ep0 maxpacket: 16 [ 364.648329][ T6373] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 364.651318][ T6373] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 364.654861][ T6373] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 364.667670][ T6373] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 364.670592][ T6373] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.673678][ T6373] usb 6-1: Product: syz [ 364.675064][ T6373] usb 6-1: Manufacturer: syz [ 364.676579][ T6373] usb 6-1: SerialNumber: syz [ 364.917853][ T6373] usb 6-1: 0:2 : does not exist [ 364.940566][ T6373] usb 6-1: 1:0: cannot get min/max values for control 4 (id 1) [ 364.968901][ T6373] usb 6-1: USB disconnect, device number 40 [ 364.985488][ T5956] udevd[5956]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 365.228439][T10809] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1112'. [ 365.810899][T10822] input: syz0 as /devices/virtual/input/input19 [ 366.364848][T10831] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1116'. [ 366.430470][T10831] nbd: socks must be embedded in a SOCK_ITEM attr [ 366.551299][ T5956] udevd[5956]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 366.561627][T10839] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1117'. [ 366.719269][T10843] syzkaller0: entered promiscuous mode [ 366.721736][T10843] syzkaller0: entered allmulticast mode [ 367.862317][T10855] syzkaller0: entered promiscuous mode [ 367.864195][T10855] syzkaller0: entered allmulticast mode [ 368.097811][T10864] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 370.693741][T10895] syzkaller0: entered promiscuous mode [ 370.695655][T10895] syzkaller0: entered allmulticast mode [ 371.306355][ T5940] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 371.365190][T10910] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1138'. [ 371.394757][T10910] nbd: socks must be embedded in a SOCK_ITEM attr [ 371.397428][ T6051] block nbd64: NBD_DISCONNECT [ 371.566441][ T6051] udevd[6051]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 371.669857][T10925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 371.782600][T10927] input: syz0 as /devices/virtual/input/input23 [ 372.350154][T10934] input: syz0 as /devices/virtual/input/input24 [ 372.605071][T10937] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.729947][T10937] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.789270][T10937] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.858436][T10937] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.991620][ T59] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.007445][ T59] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.023664][ T59] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.042269][ T59] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.375875][T10962] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1153'. [ 374.558051][ T6373] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 374.647685][ T1324] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 374.720619][ T6373] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 374.724066][ T6373] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 374.728775][ T6373] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 374.732238][ T6373] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.741212][ T6373] usb 6-1: config 0 descriptor?? [ 374.750918][ T6373] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 374.807714][ T1324] usb 8-1: Using ep0 maxpacket: 16 [ 374.812807][ T1324] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 374.817770][ T1324] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 374.824745][ T1324] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 374.834418][ T1324] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 374.837691][ T1324] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.845884][ T1324] usb 8-1: Product: syz [ 374.847397][ T1324] usb 8-1: Manufacturer: syz [ 374.849526][ T1324] usb 8-1: SerialNumber: syz [ 375.207071][T10970] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 375.268701][ T1324] usb 8-1: 0:2 : does not exist [ 376.644414][T10981] input: syz0 as /devices/virtual/input/input26 [ 377.203781][ T1324] usb 8-1: 1:0: cannot get min/max values for control 6 (id 1) [ 377.240318][ T1324] usb 8-1: USB disconnect, device number 33 [ 377.257351][ T5956] udevd[5956]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 377.318777][ T50] usb 6-1: USB disconnect, device number 41 [ 378.215880][T11002] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.330596][T11002] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.494745][T11002] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.614323][T11002] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.723634][ T1142] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.735574][ T1142] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.747062][ T1142] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.754283][ T1142] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.871877][T11014] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1176'. [ 379.157735][ T24] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 379.309367][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 379.313692][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 379.319582][ T24] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 379.323561][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.329143][ T24] usb 7-1: config 0 descriptor?? [ 379.333711][ T24] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 380.453849][T11041] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 381.919526][ T8817] usb 7-1: USB disconnect, device number 36 [ 382.617805][ T6024] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 382.769577][ T6024] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 382.772456][ T6024] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 382.775723][ T6024] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 382.779484][ T6024] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 382.783076][ T6024] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 382.788674][ T6024] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 382.791978][ T6024] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 382.794796][ T6024] usb 7-1: Product: syz [ 382.796274][ T6024] usb 7-1: Manufacturer: syz [ 382.805359][ T6024] cdc_wdm 7-1:1.0: skipping garbage [ 382.807150][ T6024] cdc_wdm 7-1:1.0: skipping garbage [ 382.815545][ T6024] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 382.818116][ T6024] cdc_wdm 7-1:1.0: Unknown control protocol [ 383.180069][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.182201][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.372150][ T1324] usb 7-1: USB disconnect, device number 37 [ 385.447320][T11096] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.505507][T11096] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.567883][T11096] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.630723][T11096] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.683509][ T59] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.692030][ T59] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.699555][ T59] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.708790][ T59] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.252698][T11110] sd 0:0:0:0: PR command failed: 1026 [ 386.254879][T11110] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 386.257476][T11110] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 386.341430][T11116] input: syz0 as /devices/virtual/input/input27 [ 387.775645][T11140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 389.038042][ T6373] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 389.170589][ T6373] usb 6-1: device descriptor read/64, error -71 [ 389.409991][ T6373] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 389.557739][ T6373] usb 6-1: device descriptor read/64, error -71 [ 389.667953][ T6373] usb usb6-port1: attempt power cycle [ 390.007861][ T6373] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 390.028829][ T6373] usb 6-1: device descriptor read/8, error -71 [ 390.267723][ T6373] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 390.289584][ T6373] usb 6-1: device descriptor read/8, error -71 [ 390.403384][ T6373] usb usb6-port1: unable to enumerate USB device [ 391.498420][T11180] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.838615][T11188] syzkaller0: entered promiscuous mode [ 391.840602][T11188] syzkaller0: entered allmulticast mode [ 392.407739][ T6373] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 392.516788][T11204] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 392.571227][ T6373] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 392.583307][ T6373] usb 6-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 392.596507][ T6373] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 392.607702][ T6373] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 392.617722][ T6373] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 392.632108][ T6373] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 392.635869][ T6373] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 392.640610][ T6373] usb 6-1: Product: syz [ 392.646328][ T6373] usb 6-1: Manufacturer: syz [ 392.666503][ T6373] cdc_wdm 6-1:1.0: skipping garbage [ 392.670698][ T6373] cdc_wdm 6-1:1.0: skipping garbage [ 392.673655][ T6373] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 393.449928][T11213] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1234'. [ 393.500716][T11213] nbd: socks must be embedded in a SOCK_ITEM attr [ 393.515118][T11185] block nbd64: NBD_DISCONNECT [ 393.646981][T11185] udevd[11185]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 394.868045][ T1324] usb 6-1: USB disconnect, device number 46 [ 394.883418][T11232] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 395.500610][T11238] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 396.027168][T11244] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 397.653159][T11265] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 398.072256][T11272] syzkaller0: entered promiscuous mode [ 398.074102][T11272] syzkaller0: entered allmulticast mode [ 398.460215][T11275] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1255'. [ 398.542137][T11275] nbd: socks must be embedded in a SOCK_ITEM attr [ 398.629056][T11282] udevd[11282]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 398.658871][T11281] udevd[11281]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 400.435182][T11303] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1261'. [ 400.687832][ T1468] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 400.837731][ T1468] usb 7-1: Using ep0 maxpacket: 16 [ 400.842289][ T1468] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 400.846157][ T1468] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 400.850736][ T1468] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 400.857881][ T1468] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 400.862085][ T1468] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.865431][ T1468] usb 7-1: Product: syz [ 400.867271][ T1468] usb 7-1: Manufacturer: syz [ 400.869726][ T1468] usb 7-1: SerialNumber: syz [ 401.309836][ T1468] usb 7-1: 0:2 : does not exist [ 401.646818][T11318] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 402.022396][ T1468] usb 7-1: 1:0: cannot get min/max values for control 4 (id 1) [ 402.059044][ T1468] usb 7-1: USB disconnect, device number 38 [ 402.085664][T11323] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 402.087203][T11281] udevd[11281]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 402.312326][T11326] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1266'. [ 402.319322][T11326] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1266'. [ 402.322601][T11326] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1266'. [ 402.777453][T11338] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.842105][T11338] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.895485][T11338] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.955809][T11338] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.051527][ T210] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.058813][ T59] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.065880][ T59] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.073535][ T59] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.161536][T11346] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.313950][T11346] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.437151][T11346] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.531267][T11346] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.986278][T11362] input: syz0 as /devices/virtual/input/input28 [ 405.067744][ T1468] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 405.217708][ T1468] usb 6-1: device descriptor read/64, error -71 [ 405.260820][T11366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1279'. [ 405.264809][T11366] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1279'. [ 405.267995][T11366] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1279'. [ 405.467694][ T1468] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 405.597763][ T1468] usb 6-1: device descriptor read/64, error -71 [ 405.708107][ T1468] usb usb6-port1: attempt power cycle [ 406.067855][ T1468] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 406.102020][ T1468] usb 6-1: device descriptor read/8, error -71 [ 406.347706][ T1468] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 406.372352][ T1468] usb 6-1: device descriptor read/8, error -71 [ 406.482026][ T1468] usb usb6-port1: unable to enumerate USB device [ 407.372919][ T1142] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.380549][ T1142] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.390513][ T1142] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.397955][ T1142] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.642829][T11403] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.715087][T11403] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.822218][T11403] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.963120][T11403] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.943957][T11419] input: syz0 as /devices/virtual/input/input29 [ 410.073979][T11425] input: syz0 as /devices/virtual/input/input30 [ 411.388804][ T59] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.396864][ T59] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.411040][ T59] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.421196][ T59] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.737890][ T1468] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 411.897794][ T1468] usb 8-1: Using ep0 maxpacket: 16 [ 411.902020][ T1468] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 411.905480][ T1468] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 411.913536][ T1468] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 411.920556][ T1468] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 411.924031][ T1468] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.927025][ T1468] usb 8-1: Product: syz [ 411.929856][ T1468] usb 8-1: Manufacturer: syz [ 411.931751][ T1468] usb 8-1: SerialNumber: syz [ 412.164507][ T1468] usb 8-1: 0:2 : does not exist [ 412.171285][ T1468] usb 8-1: 1:0: cannot get min/max values for control 4 (id 1) [ 412.193007][ T1468] usb 8-1: USB disconnect, device number 34 [ 412.206561][T11453] udevd[11453]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 412.811115][T11457] syzkaller0: entered promiscuous mode [ 412.813296][T11457] syzkaller0: entered allmulticast mode [ 413.128628][T11467] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1308'. [ 413.427783][ T50] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 413.577916][ T50] usb 6-1: Using ep0 maxpacket: 16 [ 413.582101][ T50] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 413.586135][ T50] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 413.595143][ T50] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 413.601348][ T50] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 413.605332][ T50] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.610014][ T50] usb 6-1: Product: syz [ 413.611775][ T50] usb 6-1: Manufacturer: syz [ 413.613853][ T50] usb 6-1: SerialNumber: syz [ 414.029800][ T50] usb 6-1: 0:2 : does not exist [ 414.438991][ T50] usb 6-1: 1:0: cannot get min/max values for control 4 (id 1) [ 414.483821][ T50] usb 6-1: USB disconnect, device number 51 [ 414.536347][T11453] udevd[11453]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 414.597748][ T6024] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 414.781547][T11488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1312'. [ 414.789869][ T6024] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 414.793754][ T6024] usb 8-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 414.799220][ T6024] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 414.803590][ T6024] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 414.811345][ T6024] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 414.815257][ T6024] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 414.819079][ T6024] usb 8-1: Product: syz [ 414.821011][ T6024] usb 8-1: Manufacturer: syz [ 414.828740][ T6024] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 414.850171][T11488] nbd: socks must be embedded in a SOCK_ITEM attr [ 414.864754][T11442] block nbd64: NBD_DISCONNECT [ 414.967378][T11453] udevd[11453]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 415.907675][ T1324] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 416.067925][ T1324] usb 7-1: Using ep0 maxpacket: 16 [ 416.071748][ T1324] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 416.075218][ T1324] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 416.089401][ T1324] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 416.102758][ T1324] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 416.114757][ T1324] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.124810][ T1324] usb 7-1: Product: syz [ 416.126270][ T1324] usb 7-1: Manufacturer: syz [ 416.128440][ T1324] usb 7-1: SerialNumber: syz [ 416.342167][ T1324] usb 7-1: 0:2 : does not exist [ 416.349796][ T1324] usb 7-1: 1:0: cannot get min/max values for control 4 (id 1) [ 416.380379][ T1324] usb 7-1: USB disconnect, device number 39 [ 416.394768][T11453] udevd[11453]: setting mode of /dev/snd/controlC3 to 020660 failed: No such file or directory [ 416.399246][T11453] udevd[11453]: setting owner of /dev/snd/controlC3 to uid=0, gid=29 failed: No such file or directory [ 417.294391][ T1324] usb 8-1: USB disconnect, device number 35 [ 418.723644][T11534] syzkaller0: entered promiscuous mode [ 418.725497][T11534] syzkaller0: entered allmulticast mode [ 418.957888][T11538] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1325'. [ 419.810469][T11543] input: syz0 as /devices/virtual/input/input31 [ 421.650083][T11573] syzkaller0: entered promiscuous mode [ 421.651934][T11573] syzkaller0: entered allmulticast mode [ 422.369964][T11586] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1337'. [ 422.670013][ T10] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 422.857889][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 422.868073][ T10] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 422.871754][ T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 422.875219][ T10] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 422.882279][ T10] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 422.885485][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.888308][ T10] usb 7-1: Product: syz [ 422.890086][ T10] usb 7-1: Manufacturer: syz [ 422.891681][ T10] usb 7-1: SerialNumber: syz [ 423.148852][T11592] input: syz0 as /devices/virtual/input/input32 [ 423.322880][ T10] usb 7-1: 0:2 : does not exist [ 423.331825][ T10] usb 7-1: 1:0: cannot get min/max values for control 4 (id 1) [ 423.375734][ T10] usb 7-1: USB disconnect, device number 40 [ 423.390220][T11453] udevd[11453]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 423.668786][T11603] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1343'. [ 423.918239][ T10] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 424.073682][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 424.076683][ T10] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 424.079853][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 424.083176][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 424.088099][ T10] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 424.091140][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.093750][ T10] usb 6-1: Product: syz [ 424.095115][ T10] usb 6-1: Manufacturer: syz [ 424.096885][ T10] usb 6-1: SerialNumber: syz [ 424.135601][T11613] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1353'. [ 424.139905][T11613] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1353'. [ 424.142920][T11613] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1353'. [ 424.515070][ T10] usb 6-1: 0:2 : does not exist [ 424.657733][ T6024] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 424.819623][ T6024] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 424.822507][ T6024] usb 5-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 424.826348][ T6024] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 424.830785][ T6024] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 424.839010][ T6024] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 424.842831][ T6024] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 424.846084][ T6024] usb 5-1: Product: syz [ 424.848210][ T6024] usb 5-1: Manufacturer: syz [ 424.862208][ T6024] cdc_wdm 5-1:1.0: skipping garbage [ 424.865194][ T6024] cdc_wdm 5-1:1.0: skipping garbage [ 424.867528][ T6024] cdc_wdm 5-1:1.0: skipping garbage [ 424.870302][ T6024] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 425.050873][T11623] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1347'. [ 426.073844][T11631] syzkaller0: entered promiscuous mode [ 426.075680][T11631] syzkaller0: entered allmulticast mode [ 426.277497][ T10] usb 6-1: 1:0: failed to get current value for ch 0 (-22) [ 426.300438][ T10] usb 6-1: USB disconnect, device number 52 [ 426.321660][T11453] udevd[11453]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 426.346569][T11636] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1352'. [ 426.607340][T11648] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1356'. [ 426.612957][T11648] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1356'. [ 426.616152][T11648] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1356'. [ 426.677734][ T10] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 426.827814][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 426.830865][ T10] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 426.833701][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 426.837049][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 426.841921][ T10] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 426.845456][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.848995][ T10] usb 6-1: Product: syz [ 426.850723][ T10] usb 6-1: Manufacturer: syz [ 426.852554][ T10] usb 6-1: SerialNumber: syz [ 426.991322][ T1324] usb 5-1: USB disconnect, device number 50 [ 427.281078][ T10] usb 6-1: 0:2 : does not exist [ 429.224168][ T10] usb 6-1: 1:0: failed to get current value for ch 0 (-22) [ 429.249279][T11670] syzkaller0: entered promiscuous mode [ 429.258567][T11670] syzkaller0: entered allmulticast mode [ 429.309306][ T10] usb 6-1: USB disconnect, device number 53 [ 429.712791][T11690] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1367'. [ 429.783693][T11690] nbd: socks must be embedded in a SOCK_ITEM attr [ 429.792495][T11453] block nbd64: NBD_DISCONNECT [ 430.443043][T11704] input: syz0 as /devices/virtual/input/input33 [ 431.737721][ T5947] Bluetooth: hci1: command 0x0406 tx timeout [ 433.067972][T11734] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1379'. [ 433.092619][T11735] syzkaller0: entered promiscuous mode [ 433.094844][T11735] syzkaller0: entered allmulticast mode [ 433.310842][T11746] input: syz0 as /devices/virtual/input/input34 [ 433.677683][ T1324] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 433.827713][ T5947] Bluetooth: hci1: command 0x0406 tx timeout [ 433.837809][ T1324] usb 8-1: Using ep0 maxpacket: 16 [ 433.843667][ T1324] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 433.847850][ T1324] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 433.852378][ T1324] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 433.857217][ T1324] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 433.860590][ T1324] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.863739][ T1324] usb 8-1: Product: syz [ 433.865673][ T1324] usb 8-1: Manufacturer: syz [ 433.867461][ T1324] usb 8-1: SerialNumber: syz [ 434.327286][ T1324] usb 8-1: 0:2 : does not exist [ 434.412772][T11761] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1386'. [ 434.416890][T11761] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1386'. [ 434.419943][T11761] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1386'. [ 436.055363][ T1324] usb 8-1: 1:0: failed to get current value for ch 0 (-22) [ 436.104649][ T1324] usb 8-1: USB disconnect, device number 36 [ 436.150953][T11453] udevd[11453]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 436.283752][T11779] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1391'. [ 437.060492][T11796] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 437.830618][T11807] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 439.167755][T11832] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 439.745254][T11840] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1409'. [ 439.995248][T11844] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 441.607695][T11873] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1418'. [ 441.919497][T11886] syzkaller0: entered promiscuous mode [ 441.921680][T11886] syzkaller0: entered allmulticast mode [ 443.047884][ T50] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 443.209231][ T50] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 443.212781][ T50] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 443.227921][ T50] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 443.237663][ T50] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.248449][ T50] usb 8-1: config 0 descriptor?? [ 443.253829][ T50] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 443.444930][T11900] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1428'. [ 443.684253][T11910] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 443.686982][T11910] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 444.630945][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 444.633984][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.279910][T11933] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1437'. [ 445.821678][ T6028] usb 8-1: USB disconnect, device number 37 [ 446.110664][T11947] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1441'. [ 446.233490][T11947] nbd: socks must be embedded in a SOCK_ITEM attr [ 447.923673][T11975] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1447'. [ 448.227884][ T5940] Bluetooth: hci0: command 0x0406 tx timeout [ 448.450940][T11986] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1450'. [ 448.459202][T11986] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1450'. [ 448.463162][T11986] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1450'. [ 449.137208][ T5947] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 449.141532][ T5947] CPU: 3 UID: 0 PID: 5947 Comm: kworker/u33:3 Not tainted syzkaller #0 PREEMPT(full) [ 449.141559][ T5947] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 449.141572][ T5947] Workqueue: hci1 hci_rx_work [ 449.141615][ T5947] Call Trace: [ 449.141622][ T5947] [ 449.141630][ T5947] dump_stack_lvl+0x100/0x190 [ 449.141662][ T5947] sysfs_warn_dup.cold+0x1c/0x28 [ 449.141690][ T5947] sysfs_create_dir_ns+0x24b/0x2b0 [ 449.141718][ T5947] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 449.141746][ T5947] ? find_held_lock+0x2b/0x80 [ 449.141766][ T5947] ? kobject_add_internal+0x25f/0x930 [ 449.141796][ T5947] ? kobject_add_internal+0x25f/0x930 [ 449.141827][ T5947] ? do_raw_spin_unlock+0x145/0x1e0 [ 449.141859][ T5947] kobject_add_internal+0x2c8/0x930 [ 449.141894][ T5947] kobject_add+0x16a/0x1e0 [ 449.141913][ T5947] ? __pfx_kobject_add+0x10/0x10 [ 449.141930][ T5947] ? class_to_subsys+0x10f/0x150 [ 449.141965][ T5947] ? kobject_put+0xb9/0x640 [ 449.141992][ T5947] ? _raw_spin_unlock+0x28/0x50 [ 449.142022][ T5947] device_add+0x294/0x1950 [ 449.142044][ T5947] ? __pfx_dev_set_name+0x10/0x10 [ 449.142070][ T5947] ? __pfx_device_add+0x10/0x10 [ 449.142091][ T5947] ? mgmt_send_event_skb+0x2fb/0x460 [ 449.142122][ T5947] hci_conn_add_sysfs+0x1a3/0x260 [ 449.142147][ T5947] le_conn_complete_evt+0x11cb/0x1f40 [ 449.142176][ T5947] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 449.142205][ T5947] hci_le_conn_complete_evt+0x23c/0x3a0 [ 449.142228][ T5947] ? skb_pull_data+0x15f/0x1e0 [ 449.142251][ T5947] hci_le_meta_evt+0x34a/0x5f0 [ 449.142275][ T5947] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 449.142302][ T5947] hci_event_packet+0x682/0x11c0 [ 449.142325][ T5947] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 449.142351][ T5947] ? __pfx_hci_event_packet+0x10/0x10 [ 449.142376][ T5947] ? kcov_remote_start+0x374/0x660 [ 449.142394][ T5947] ? lockdep_hardirqs_on+0x78/0x100 [ 449.142426][ T5947] hci_rx_work+0x451/0xfc0 [ 449.142454][ T5947] process_one_work+0xa23/0x19a0 [ 449.142492][ T5947] ? __pfx_process_one_work+0x10/0x10 [ 449.142534][ T5947] ? __pfx_hci_rx_work+0x10/0x10 [ 449.142557][ T5947] worker_thread+0x5ef/0xe50 [ 449.142602][ T5947] ? kthread+0x13a/0x450 [ 449.142624][ T5947] ? __pfx_worker_thread+0x10/0x10 [ 449.142649][ T5947] kthread+0x370/0x450 [ 449.142672][ T5947] ? __pfx_kthread+0x10/0x10 [ 449.142697][ T5947] ret_from_fork+0x754/0xd80 [ 449.142727][ T5947] ? __pfx_ret_from_fork+0x10/0x10 [ 449.142757][ T5947] ? __switch_to+0x7b4/0x1120 [ 449.142778][ T5947] ? __pfx_kthread+0x10/0x10 [ 449.142806][ T5947] ret_from_fork_asm+0x1a/0x30 [ 449.142839][ T5947] [ 449.142864][ T5947] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 449.208379][T11991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1460'. [ 449.209407][ T5947] Bluetooth: hci1: failed to register connection device [ 449.231942][T11991] nbd: socks must be embedded in a SOCK_ITEM attr [ 449.413401][T11453] udevd[11453]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 449.422827][T11453] udevd[11453]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 449.595371][T12017] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 449.632480][T12021] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 449.635763][T12021] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 450.297750][ T5947] Bluetooth: hci0: command 0x0406 tx timeout [ 451.267783][ T5947] Bluetooth: hci1: command 0x0406 tx timeout [ 452.067710][ T6373] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 452.224990][ T6373] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 452.236246][ T6373] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 452.242108][ T6373] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 452.246689][ T6373] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.257287][ T6373] usb 6-1: config 0 descriptor?? [ 452.266013][ T6373] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 452.694391][T12069] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 453.337822][ T5947] Bluetooth: hci1: command 0x0406 tx timeout [ 453.514693][ T5947] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 453.519275][ T5947] CPU: 3 UID: 0 PID: 5947 Comm: kworker/u33:3 Not tainted syzkaller #0 PREEMPT(full) [ 453.519303][ T5947] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 453.519316][ T5947] Workqueue: hci1 hci_rx_work [ 453.519345][ T5947] Call Trace: [ 453.519352][ T5947] [ 453.519367][ T5947] dump_stack_lvl+0x100/0x190 [ 453.519399][ T5947] sysfs_warn_dup.cold+0x1c/0x28 [ 453.519426][ T5947] sysfs_create_dir_ns+0x24b/0x2b0 [ 453.519453][ T5947] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 453.519477][ T5947] ? find_held_lock+0x2b/0x80 [ 453.519508][ T5947] ? kobject_add_internal+0x25f/0x930 [ 453.519539][ T5947] ? kobject_add_internal+0x25f/0x930 [ 453.519573][ T5947] ? do_raw_spin_unlock+0x145/0x1e0 [ 453.519606][ T5947] kobject_add_internal+0x2c8/0x930 [ 453.519645][ T5947] kobject_add+0x16a/0x1e0 [ 453.519668][ T5947] ? __pfx_kobject_add+0x10/0x10 [ 453.519684][ T5947] ? class_to_subsys+0x10f/0x150 [ 453.519712][ T5947] ? kobject_put+0xb9/0x640 [ 453.519739][ T5947] ? _raw_spin_unlock+0x28/0x50 [ 453.519768][ T5947] device_add+0x294/0x1950 [ 453.519790][ T5947] ? __pfx_dev_set_name+0x10/0x10 [ 453.519816][ T5947] ? __pfx_device_add+0x10/0x10 [ 453.519837][ T5947] ? mgmt_send_event_skb+0x2fb/0x460 [ 453.519866][ T5947] hci_conn_add_sysfs+0x1a3/0x260 [ 453.519898][ T5947] le_conn_complete_evt+0x11cb/0x1f40 [ 453.519931][ T5947] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 453.519968][ T5947] hci_le_conn_complete_evt+0x23c/0x3a0 [ 453.519992][ T5947] ? skb_pull_data+0x15f/0x1e0 [ 453.520023][ T5947] hci_le_meta_evt+0x34a/0x5f0 [ 453.520054][ T5947] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 453.520083][ T5947] hci_event_packet+0x682/0x11c0 [ 453.520106][ T5947] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 453.520137][ T5947] ? __pfx_hci_event_packet+0x10/0x10 [ 453.520163][ T5947] ? kcov_remote_start+0x374/0x660 [ 453.520185][ T5947] ? lockdep_hardirqs_on+0x78/0x100 [ 453.520216][ T5947] hci_rx_work+0x451/0xfc0 [ 453.520268][ T5947] process_one_work+0xa23/0x19a0 [ 453.520307][ T5947] ? __pfx_process_one_work+0x10/0x10 [ 453.520343][ T5947] ? __pfx_hci_rx_work+0x10/0x10 [ 453.520376][ T5947] worker_thread+0x5ef/0xe50 [ 453.520417][ T5947] ? kthread+0x13a/0x450 [ 453.520442][ T5947] ? __pfx_worker_thread+0x10/0x10 [ 453.520472][ T5947] kthread+0x370/0x450 [ 453.520498][ T5947] ? __pfx_kthread+0x10/0x10 [ 453.520534][ T5947] ret_from_fork+0x754/0xd80 [ 453.520565][ T5947] ? __pfx_ret_from_fork+0x10/0x10 [ 453.520596][ T5947] ? __switch_to+0x7b4/0x1120 [ 453.520618][ T5947] ? __pfx_kthread+0x10/0x10 [ 453.520644][ T5947] ret_from_fork_asm+0x1a/0x30 [ 453.520687][ T5947] [ 453.520763][ T5947] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 453.645601][ T5947] Bluetooth: hci1: failed to register connection device [ 453.653573][T12086] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1480'. [ 453.696283][T12086] nbd: socks must be embedded in a SOCK_ITEM attr [ 453.709870][T11281] block nbd64: NBD_DISCONNECT [ 453.896593][T11453] udevd[11453]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 454.871521][ T39] usb 6-1: USB disconnect, device number 54 [ 455.667752][ T5947] Bluetooth: hci1: command 0x0406 tx timeout [ 456.107041][T12124] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 457.027689][ T6373] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 457.177761][ T6373] usb 6-1: Using ep0 maxpacket: 16 [ 457.180775][ T6373] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 457.187681][ T6373] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 457.190938][ T6373] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 457.195686][ T6373] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 457.199785][ T6373] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.202416][ T6373] usb 6-1: Product: syz [ 457.203797][ T6373] usb 6-1: Manufacturer: syz [ 457.215404][ T6373] usb 6-1: SerialNumber: syz [ 457.324800][T12139] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1494'. [ 457.328991][T12139] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1494'. [ 457.332210][T12139] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1494'. [ 457.433090][ T6373] usb 6-1: 0:2 : does not exist [ 457.439224][ T6373] usb 6-1: 1:0: cannot get min/max values for control 4 (id 1) [ 457.466312][ T6373] usb 6-1: USB disconnect, device number 55 [ 457.737803][ T5940] Bluetooth: hci1: command 0x0406 tx timeout [ 457.819917][T12152] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1505'. [ 457.823593][T12152] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1505'. [ 457.826539][T12152] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1505'. [ 457.973656][T12156] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1499'. [ 458.147982][ T5940] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 458.152040][ T5940] CPU: 2 UID: 0 PID: 5940 Comm: kworker/u33:2 Not tainted syzkaller #0 PREEMPT(full) [ 458.152067][ T5940] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 458.152079][ T5940] Workqueue: hci3 hci_rx_work [ 458.152106][ T5940] Call Trace: [ 458.152113][ T5940] [ 458.152121][ T5940] dump_stack_lvl+0x100/0x190 [ 458.152149][ T5940] sysfs_warn_dup.cold+0x1c/0x28 [ 458.152177][ T5940] sysfs_create_dir_ns+0x24b/0x2b0 [ 458.152201][ T5940] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 458.152223][ T5940] ? find_held_lock+0x2b/0x80 [ 458.152239][ T5940] ? kobject_add_internal+0x25f/0x930 [ 458.152268][ T5940] ? kobject_add_internal+0x25f/0x930 [ 458.152302][ T5940] ? do_raw_spin_unlock+0x145/0x1e0 [ 458.152333][ T5940] kobject_add_internal+0x2c8/0x930 [ 458.152365][ T5940] kobject_add+0x16a/0x1e0 [ 458.152382][ T5940] ? __pfx_kobject_add+0x10/0x10 [ 458.152395][ T5940] ? class_to_subsys+0x10f/0x150 [ 458.152423][ T5940] ? kobject_put+0xb9/0x640 [ 458.152447][ T5940] ? _raw_spin_unlock+0x28/0x50 [ 458.152475][ T5940] device_add+0x294/0x1950 [ 458.152496][ T5940] ? __pfx_dev_set_name+0x10/0x10 [ 458.152518][ T5940] ? __pfx_device_add+0x10/0x10 [ 458.152538][ T5940] ? mgmt_send_event_skb+0x2fb/0x460 [ 458.152566][ T5940] hci_conn_add_sysfs+0x1a3/0x260 [ 458.152591][ T5940] le_conn_complete_evt+0x11cb/0x1f40 [ 458.152634][ T5940] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 458.152661][ T5940] hci_le_conn_complete_evt+0x23c/0x3a0 [ 458.152685][ T5940] ? skb_pull_data+0x15f/0x1e0 [ 458.152707][ T5940] hci_le_meta_evt+0x34a/0x5f0 [ 458.152733][ T5940] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 458.152758][ T5940] hci_event_packet+0x682/0x11c0 [ 458.152780][ T5940] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 458.152804][ T5940] ? __pfx_hci_event_packet+0x10/0x10 [ 458.152826][ T5940] ? kcov_remote_start+0x374/0x660 [ 458.152843][ T5940] ? lockdep_hardirqs_on+0x78/0x100 [ 458.152872][ T5940] hci_rx_work+0x451/0xfc0 [ 458.152896][ T5940] process_one_work+0xa23/0x19a0 [ 458.152932][ T5940] ? __pfx_process_one_work+0x10/0x10 [ 458.152964][ T5940] ? __pfx_hci_rx_work+0x10/0x10 [ 458.152985][ T5940] worker_thread+0x5ef/0xe50 [ 458.153018][ T5940] ? kthread+0x13a/0x450 [ 458.153039][ T5940] ? __pfx_worker_thread+0x10/0x10 [ 458.153061][ T5940] kthread+0x370/0x450 [ 458.153081][ T5940] ? __pfx_kthread+0x10/0x10 [ 458.153105][ T5940] ret_from_fork+0x754/0xd80 [ 458.153132][ T5940] ? __pfx_ret_from_fork+0x10/0x10 [ 458.153159][ T5940] ? __switch_to+0x7b4/0x1120 [ 458.153178][ T5940] ? __pfx_kthread+0x10/0x10 [ 458.153200][ T5940] ret_from_fork_asm+0x1a/0x30 [ 458.153232][ T5940] [ 458.153292][ T5940] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 458.199929][T12166] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1500'. [ 458.230502][T12166] nbd: socks must be embedded in a SOCK_ITEM attr [ 458.233307][ T5940] Bluetooth: hci3: failed to register connection device [ 458.255384][T11453] block nbd64: NBD_DISCONNECT [ 458.450637][T11453] udevd[11453]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 458.606000][T12178] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1503'. [ 459.399267][T12192] __nla_validate_parse: 1 callbacks suppressed [ 459.399279][T12192] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1509'. [ 459.700507][T12199] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1511'. [ 459.704850][T12199] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1511'. [ 459.709086][T12199] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1511'. [ 460.297980][ T5940] Bluetooth: hci3: command 0x0406 tx timeout [ 461.381188][T12211] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 461.383908][T12211] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 462.377899][ T5940] Bluetooth: hci3: command 0x0406 tx timeout [ 462.777258][T12244] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1522'. [ 463.027966][ T39] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 463.190668][ T39] usb 5-1: Using ep0 maxpacket: 16 [ 463.491198][ T39] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 463.494760][ T39] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 463.499024][ T39] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 463.518754][ T39] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 463.535647][ T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.538372][ T39] usb 5-1: Product: syz [ 463.540571][ T39] usb 5-1: Manufacturer: syz [ 463.542099][ T39] usb 5-1: SerialNumber: syz [ 464.040421][ T39] usb 5-1: 0:2 : does not exist [ 465.742283][T12284] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1531'. [ 465.748425][T12284] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1531'. [ 465.751517][T12284] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1531'. [ 466.033443][ T39] usb 5-1: 1:0: failed to get current value for ch 0 (-22) [ 466.062221][ T39] usb 5-1: USB disconnect, device number 51 [ 466.095646][T11453] udevd[11453]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 466.614288][T12296] binder: BINDER_SET_CONTEXT_MGR already set [ 466.619752][T12296] binder: 12295:12296 ioctl 4018620d 80000040 returned -16 [ 467.879313][T12327] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1544'. [ 467.888749][T12327] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1544'. [ 467.892313][T12327] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1544'. [ 470.082090][T12357] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 471.897673][ T29] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 472.059360][ T29] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 472.063353][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 472.066751][ T29] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 472.071198][ T29] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 472.074234][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.079662][ T29] usb 6-1: config 0 descriptor?? [ 472.084403][ T29] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 472.136583][T12387] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 473.256001][ T5940] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 473.320242][T12401] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1566'. [ 473.375124][T12401] nbd: socks must be embedded in a SOCK_ITEM attr [ 473.387769][T11281] block nbd64: NBD_DISCONNECT [ 474.664245][ T50] usb 6-1: USB disconnect, device number 56 [ 475.035467][T12433] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 475.910726][T12442] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 476.457699][ T24] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 476.630040][ T24] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 476.648964][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 476.653091][ T24] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 476.658268][ T24] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 476.661545][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.666502][ T24] usb 8-1: config 0 descriptor?? [ 476.674153][ T24] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 478.574884][T12484] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1587'. [ 478.618235][T12484] nbd: socks must be embedded in a SOCK_ITEM attr [ 478.625041][T11453] block nbd64: NBD_DISCONNECT [ 478.801243][T11453] udevd[11453]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 479.192031][ T24] usb 8-1: USB disconnect, device number 38 [ 480.799487][T12521] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1594'. [ 480.803301][T12521] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1594'. [ 480.806272][T12521] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1594'. [ 481.654197][T12538] syzkaller0: entered promiscuous mode [ 481.656567][T12538] syzkaller0: entered allmulticast mode [ 481.837765][ T24] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 482.008025][ T24] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 482.018387][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 482.022360][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 482.028089][ T24] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 482.031028][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.039758][ T24] usb 5-1: config 0 descriptor?? [ 482.049237][ T24] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 484.029145][T12576] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1608'. [ 484.032728][T12576] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1608'. [ 484.035642][T12576] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1608'. [ 484.589384][ T24] usb 5-1: USB disconnect, device number 52 [ 484.890024][T12585] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 484.892555][T12585] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 486.994589][T12630] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1622'. [ 486.999521][T12630] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1622'. [ 487.003067][T12630] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1622'. [ 487.631980][T12641] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 487.743642][T12646] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 488.679903][ T5947] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 488.737781][T12668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1637'. [ 488.802055][T12668] nbd: socks must be embedded in a SOCK_ITEM attr [ 488.934433][T12679] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 488.937728][T12679] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 489.048247][T11453] udevd[11453]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 490.153430][T12704] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 491.021532][T12716] syzkaller0: entered promiscuous mode [ 491.023645][T12716] syzkaller0: entered allmulticast mode [ 492.275034][T12732] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 492.278539][T12732] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 492.668497][T12746] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1659'. [ 492.673573][T12746] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1659'. [ 492.677048][T12746] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1659'. [ 494.718389][T12782] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 495.418511][T12789] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1670'. [ 495.422177][T12789] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1670'. [ 495.425064][T12789] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1670'. [ 495.921516][T12800] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 497.975053][T12834] syzkaller0: entered promiscuous mode [ 497.977026][T12834] syzkaller0: entered allmulticast mode [ 498.556111][T12844] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1684'. [ 498.564823][T12844] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1684'. [ 498.569071][T12844] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1684'. [ 500.260334][T12877] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1693'. [ 500.497773][ T24] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 500.647734][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 500.652601][ T24] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 500.656191][ T24] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 500.660636][ T24] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 500.666701][ T24] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 500.670731][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.674019][ T24] usb 7-1: Product: syz [ 500.675753][ T24] usb 7-1: Manufacturer: syz [ 500.678019][ T24] usb 7-1: SerialNumber: syz [ 500.972802][T12892] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 501.078682][T12896] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1696'. [ 501.085232][T12896] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1696'. [ 501.088963][T12896] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1696'. [ 501.096305][ T24] usb 7-1: 0:2 : does not exist [ 503.032923][ T24] usb 7-1: 1:0: failed to get current value for ch 0 (-22) [ 503.079283][ T24] usb 7-1: USB disconnect, device number 41 [ 503.780098][T12932] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 504.188847][T12938] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1708'. [ 504.242054][T12938] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1708'. [ 504.250334][T12938] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1708'. [ 506.108266][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.110381][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 509.227717][ T24] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 509.319073][T13027] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1734'. [ 509.377757][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 509.381357][ T24] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 509.386959][ T24] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 509.390900][ T24] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 509.394125][ T24] usb 7-1: Product: syz [ 509.395792][ T24] usb 7-1: Manufacturer: syz [ 509.398064][ T24] usb 7-1: SerialNumber: syz [ 509.401835][ T24] usb 7-1: config 0 descriptor?? [ 509.404494][T13025] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 509.577843][ T24] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 509.727692][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 509.730763][ T24] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 509.733792][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 509.737161][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 509.741834][ T24] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 509.744847][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.751074][ T24] usb 5-1: Product: syz [ 509.752511][ T24] usb 5-1: Manufacturer: syz [ 509.754180][ T24] usb 5-1: SerialNumber: syz [ 510.168897][ T24] usb 5-1: 0:2 : does not exist [ 510.440462][ T10] usb 7-1: USB disconnect, device number 42 [ 512.027692][ T1468] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 512.159230][ T24] usb 5-1: 1:0: failed to get current value for ch 0 (-22) [ 512.191168][ T1468] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 512.192849][ T24] usb 5-1: USB disconnect, device number 53 [ 512.194729][ T1468] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 512.277265][ T1468] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 512.284146][ T1468] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 512.288714][ T1468] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.299568][T11453] udevd[11453]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 512.311820][ T1468] usb 8-1: config 0 descriptor?? [ 512.620968][T13063] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1743'. [ 512.625130][T13063] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1743'. [ 512.628280][T13063] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1743'. [ 513.038343][ T1468] usbhid 8-1:0.0: can't add hid device: -71 [ 513.040362][ T1468] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 513.057836][ T1468] usb 8-1: USB disconnect, device number 39 [ 513.731298][T13077] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 513.937690][ T10] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 514.087654][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 514.095628][ T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 514.106235][ T10] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 514.112274][ T10] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 514.116341][ T10] usb 6-1: Product: syz [ 514.118670][ T10] usb 6-1: Manufacturer: syz [ 514.120429][ T10] usb 6-1: SerialNumber: syz [ 514.127728][ T10] usb 6-1: config 0 descriptor?? [ 514.134641][T13079] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 515.145682][T13093] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 516.477765][ T1324] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 516.639208][ T1324] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 516.643581][ T1324] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 516.657669][ T1324] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 516.663378][ T1324] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 516.667416][ T1324] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.673795][ T1324] usb 5-1: config 0 descriptor?? [ 516.709668][ T1468] usb 6-1: USB disconnect, device number 57 [ 517.291493][ T1324] usbhid 5-1:0.0: can't add hid device: -71 [ 517.293678][ T1324] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 517.297700][ T1324] usb 5-1: USB disconnect, device number 54 [ 519.482136][T13147] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 519.811465][T13152] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 520.117844][ T1468] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 520.279656][ T1468] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 520.284262][ T1468] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 520.288844][ T1468] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 520.294410][ T1468] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 520.298417][ T1468] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.309798][ T1468] usb 5-1: config 0 descriptor?? [ 520.971396][ T1468] usbhid 5-1:0.0: can't add hid device: -71 [ 520.974086][ T1468] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 520.979990][ T1468] usb 5-1: USB disconnect, device number 55 [ 521.607056][T13175] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 522.847949][ T24] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 523.007761][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 523.013114][ T24] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 523.019469][ T24] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 523.023382][ T24] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 523.027002][ T24] usb 7-1: Product: syz [ 523.029871][ T24] usb 7-1: Manufacturer: syz [ 523.031705][ T24] usb 7-1: SerialNumber: syz [ 523.040662][ T24] usb 7-1: config 0 descriptor?? [ 523.043591][T13181] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 523.070948][T13190] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 523.376996][ T24] usb 7-1: USB disconnect, device number 43 [ 524.218331][ T24] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 524.329187][T13204] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 524.389417][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 524.393043][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 524.396336][ T24] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 524.401104][ T24] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 524.404383][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.420163][ T24] usb 7-1: config 0 descriptor?? [ 524.991645][T13209] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1787'. [ 524.996667][T13209] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1787'. [ 525.000249][T13209] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1787'. [ 525.040556][ T24] usbhid 7-1:0.0: can't add hid device: -71 [ 525.047149][ T24] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 525.055011][ T24] usb 7-1: USB disconnect, device number 44 [ 526.627542][ T5947] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 526.814513][T13238] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 530.006888][T13274] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1801'. [ 530.012472][T13274] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1801'. [ 530.016411][T13274] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1801'. [ 532.507758][ T1468] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 532.679059][ T1468] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 532.683111][ T1468] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 532.686294][ T1468] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 532.691456][ T1468] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 532.694907][ T1468] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.698847][ T1468] usb 7-1: config 0 descriptor?? [ 533.328490][ T1468] usbhid 7-1:0.0: can't add hid device: -71 [ 533.330720][ T1468] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 533.347710][ T1468] usb 7-1: USB disconnect, device number 45 [ 536.417766][ T50] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 536.504622][T13353] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1830'. [ 536.509665][T13353] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1830'. [ 536.513534][T13353] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1830'. [ 536.580552][ T50] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 536.585224][ T50] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 536.590158][ T50] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 536.595747][ T50] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 536.604297][ T50] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.618255][ T50] usb 6-1: config 0 descriptor?? [ 537.028409][ T50] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 537.032777][ T50] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 537.035194][ T50] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 537.043577][ T50] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 537.046001][ T50] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 537.051388][ T50] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 537.056511][ T50] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 537.059683][ T50] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 537.062265][ T50] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 537.065118][ T50] plantronics 0003:047F:FFFF.0023: unknown main item tag 0x0 [ 537.073089][ T50] plantronics 0003:047F:FFFF.0023: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 537.292571][ T1468] usb 6-1: USB disconnect, device number 58 [ 540.017116][T13386] Oops: general protection fault, probably for non-canonical address 0xdffffc000000013c: 0000 [#1] SMP KASAN NOPTI [ 540.021211][T13386] KASAN: null-ptr-deref in range [0x00000000000009e0-0x00000000000009e7] [ 540.024111][T13386] CPU: 0 UID: 0 PID: 13386 Comm: syz.1.1840 Not tainted syzkaller #0 PREEMPT(full) [ 540.027014][T13386] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 540.030665][T13386] RIP: 0010:task_work_cancel_match+0x86/0x250 [ 540.033201][T13386] Code: 40 04 00 f3 f3 f3 65 48 8b 05 7e a9 3c 12 48 89 44 24 70 31 c0 e8 8a 60 37 00 4c 89 f8 48 c7 44 24 38 00 00 00 00 48 c1 e8 03 <42> 80 3c 30 00 0f 85 7e 01 00 00 4c 8b b3 e0 09 00 00 4d 85 f6 75 [ 540.039502][T13386] RSP: 0000:ffffc90030b5fba8 EFLAGS: 00010206 [ 540.041512][T13386] RAX: 000000000000013c RBX: 0000000000000000 RCX: ffffc9000d406000 [ 540.044000][T13386] RDX: 0000000000080000 RSI: ffffffff81d0b696 RDI: 0000000000000000 [ 540.046541][T13386] RBP: 1ffff9200616bf78 R08: 0000000000000007 R09: 0000000000000000 [ 540.049182][T13386] R10: 0000000000000002 R11: 0000000000000000 R12: ffffffff81d0b230 [ 540.051664][T13386] R13: ffff888026caa440 R14: dffffc0000000000 R15: 00000000000009e0 [ 540.054145][T13386] FS: 0000000000000000(0000) GS:ffff88809714a000(0063) knlGS:00000000f5455b40 [ 540.056926][T13386] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 540.059093][T13386] CR2: 00000000301fcff8 CR3: 000000005a38f000 CR4: 0000000000352ef0 [ 540.061649][T13386] Call Trace: [ 540.062749][T13386] [ 540.063714][T13386] ? __pfx_task_work_cancel_match+0x10/0x10 [ 540.065615][T13386] ? __rcu_read_unlock+0x26a/0x5e0 [ 540.067233][T13386] ? rcu_is_watching+0x12/0xc0 [ 540.068847][T13386] task_work_cancel+0x23/0x30 [ 540.070363][T13386] landlock_restrict_sibling_threads+0xafe/0x1280 [ 540.072367][T13386] ? __pfx_landlock_restrict_sibling_threads+0x10/0x10 [ 540.074503][T13386] ? __pfx___might_resched+0x10/0x10 [ 540.076177][T13386] ? landlock_merge_ruleset+0x213/0x830 [ 540.077936][T13386] __do_sys_landlock_restrict_self+0x5c9/0x9e0 [ 540.079966][T13386] do_int80_emulation+0x141/0x6b0 [ 540.081532][T13386] asm_int80_emulation+0x1a/0x20 [ 540.083073][T13386] RIP: 0023:0xf7fb2f6c [ 540.084373][T13386] Code: d2 74 05 c1 e8 0c 89 02 8b 5d fc 31 c0 c9 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 2e 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 58 b8 [ 540.090432][T13386] RSP: 002b:00000000f545550c EFLAGS: 00000292 ORIG_RAX: 00000000000001be [ 540.093066][T13386] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000008 [ 540.095544][T13386] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 540.098041][T13386] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 540.100677][T13386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 540.103188][T13386] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 540.105700][T13386] [ 540.106724][T13386] Modules linked in: [ 540.109385][T13386] ---[ end trace 0000000000000000 ]--- [ 540.117308][T13386] RIP: 0010:task_work_cancel_match+0x86/0x250 [ 540.119648][T13386] Code: 40 04 00 f3 f3 f3 65 48 8b 05 7e a9 3c 12 48 89 44 24 70 31 c0 e8 8a 60 37 00 4c 89 f8 48 c7 44 24 38 00 00 00 00 48 c1 e8 03 <42> 80 3c 30 00 0f 85 7e 01 00 00 4c 8b b3 e0 09 00 00 4d 85 f6 75 [ 540.125688][T13386] RSP: 0000:ffffc90030b5fba8 EFLAGS: 00010206 [ 540.127846][T13386] RAX: 000000000000013c RBX: 0000000000000000 RCX: ffffc9000d406000 [ 540.137709][T13386] RDX: 0000000000080000 RSI: ffffffff81d0b696 RDI: 0000000000000000 [ 540.141059][T13386] RBP: 1ffff9200616bf78 R08: 0000000000000007 R09: 0000000000000000 [ 540.144517][T13386] R10: 0000000000000002 R11: 0000000000000000 R12: ffffffff81d0b230 [ 540.147958][T13386] R13: ffff888026caa440 R14: dffffc0000000000 R15: 00000000000009e0 [ 540.151070][T13386] FS: 0000000000000000(0000) GS:ffff88809724a000(0063) knlGS:00000000f5455b40 [ 540.154894][T13386] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 540.157525][T13386] CR2: 00000000f74032f0 CR3: 000000005a38f000 CR4: 0000000000352ef0 [ 540.161028][T13386] Kernel panic - not syncing: Fatal exception [ 540.163895][T13386] Kernel Offset: disabled [ 540.165308][T13386] Rebooting in 86400 seconds..