last executing test programs: 7m46.979437466s ago: executing program 1 (id=429): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) r1 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_PREPARE(r1, 0x4140, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$igmp6(0xa, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = syz_io_uring_setup(0x24f6, 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x72, 0x4004, @fd=r2, 0x80000000, 0x0, 0x0, 0x5}) io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) 7m45.641069968s ago: executing program 1 (id=432): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000180)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, 0x0, 0x0, 0xffffffffffffffff) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x30, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFULA_CFG_MODE={0xa, 0x2, {0x5}}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 7m44.409244649s ago: executing program 1 (id=435): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0xd971e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f00000008c0)={0x84, @private=0xa010102, 0x4e22, 0x1, 'lblcr\x00', 0x0, 0x10000, 0x100000}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r5, 0x0, 0x483, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x200000001, 'sh\x00', 0x0, 0x821}, 0x2c) sendmsg$NFNL_MSG_COMPAT_GET(r4, &(0x7f0000002840)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000002780)=ANY=[@ANYBLOB="34000000000b410400000000000000000200000a080002400000000008000340000000400d0001ba2e7066696c74657200"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4040010) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r6, 0x0, 0x4000000) 7m42.899170834s ago: executing program 1 (id=438): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700e, 0x0) umount2(0x0, 0x2) 7m42.836893585s ago: executing program 1 (id=441): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r2, &(0x7f0000001f80)=""/4089, 0xff9) 7m42.374919623s ago: executing program 1 (id=444): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, 0x0, 0x0, 0x4814) recvmmsg(r1, &(0x7f0000003c80)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1}, 0xffffff0d}], 0x2, 0x2001, 0x0) 7m41.91904876s ago: executing program 32 (id=444): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, 0x0, 0x0, 0x4814) recvmmsg(r1, &(0x7f0000003c80)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1}, 0xffffff0d}], 0x2, 0x2001, 0x0) 7.78239435s ago: executing program 2 (id=1948): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001280)=@mangle={'mangle\x00', 0x8, 0x6, 0x5b8, 0x120, 0x0, 0x1f0, 0x1f0, 0x120, 0x510, 0x510, 0x510, 0x510, 0x510, 0x6, 0x0, {[{{@ipv6={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff000000, 0x0, 0xffffff00, 0xff000000], [0xff, 0xff, 0xff000000, 0xffffffff], 'ipvlan1\x00', 'ipvlan1\x00', {}, {}, 0x0, 0x9, 0x2, 0x2}, 0x0, 0xd0, 0xf8, 0x0, {0x7a00000000000000}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x5002}}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty, @ipv4=@private=0xa010100, 0x0, 0x32, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0xff}}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@hbh={{0x48}, {0x101, 0x0, 0x1, [0x8, 0xc, 0x8001, 0x8, 0x5, 0x2, 0x9, 0x4, 0xfff4, 0xf7fd, 0x6, 0xfff8, 0x6, 0x1, 0x2, 0x9], 0x10}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x618) 6.814088316s ago: executing program 2 (id=1949): socket(0x10, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup(r0, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) statx(r0, &(0x7f0000005b40)='./file0\x00', 0x4000, 0x7ff, 0x0) getdents64(r0, &(0x7f0000000380)=""/141, 0x8d) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000380)) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mbind(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, &(0x7f00000000c0)=0xc1b, 0xe0f8, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x19f2, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x8000000}, &(0x7f0000000140), &(0x7f0000000100)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_acct\x00') r4 = socket(0x18, 0x3, 0x0) connect$pppoe(r4, &(0x7f0000000100)={0x18, 0x0, {0x2, @broadcast, 'vlan0\x00'}}, 0x1e) sendfile(r4, r3, 0x0, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) 5.044926936s ago: executing program 2 (id=1958): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16], 0x44}}, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f00002e2000/0x4000)=nil, 0x4000, 0xd, 0x80010, 0xffffffffffffffff, 0x8000000) socket$caif_seqpacket(0x25, 0x5, 0x5) syz_io_uring_submit(r5, 0x0, 0x0) r6 = fsmount(r4, 0x0, 0x18) symlinkat(&(0x7f00000001c0)='./file0\x00', r6, 0x0) openat2(r6, &(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x8}, 0x18) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000040)={0x1, 0x0, 0x98, &(0x7f0000000140)={0x0, 0x1000, 0x1}}) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r7, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="200300000000000000"], 0x0}) syz_usb_control_io$hid(r7, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0}) syz_usb_control_io(r7, 0x0, 0x0) r8 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) readv(r8, &(0x7f00000002c0), 0x0) 3.336837844s ago: executing program 0 (id=1963): write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000100)="ea08c1e6693972d7b82283d726cd4e4354549cff9505ca40c5680921c355b2da860de83facf7401d6e547998a95d93cb1be205a01def1435da2dacf5de80657c3ed66d34d7a68321dda0eddb9e514090c9ed5e0b3900810f96b1c7076351b236a2b6b61677777e057f9f5460e80267b05f2f1e29bb5a6c75596bb3bfd2a045d673bcb86f606d36f94e8b132a436199c6892ac6c95fa0138d7b3c09862866f4349542b07598cd22a9c3a430e807ee21aa2bfea170c68c877287ad4c80048766a035f2c338ac8de474538a82d52c96545d12d5bd8d109bf5ecc4e1f354155d65da5b1c0f64", 0xe4}, {&(0x7f0000000280)="e61a7c618e6351f2186eb0536e6849ec234b5d4fe1", 0x15}, {&(0x7f00000002c0)="df40f5339b0a7b5b53dee468e577b99e5ee240010cc7b959bc88766954acad2b21eb4c44da460d888d73542d89325b8dcc22d7ebfda76835ffc646826521e40a85ab854b20f90fd2647ecb29c65470d4acf6ecffe3210cb87655f5992448b13fb169dd2d3ce0876b3363ba73a7d81649a430dd310aedccc2c0a08f5a125a79483af520bab1c652777aefe0d10dd98754080a932f49ec13e100fd4ea740179b41dfecf06df08c30af398e5dbf8e", 0xad}, {&(0x7f0000000380)="48b749f5beecbf3b3ecdd771dfec1c89f19c52064f1cb550d5100052fc224b4ebcc7d0768b19efec6e0943d2fc9c698779ea7ec9988f7e01d1996cec1306cd8f5f31fca6338a076a821a116658a4165b219074a82142cff90b8b094722788b5d2678e952c766265d60f3fbd47d1a51e64b53c0c166880690c6f0601c", 0x7c}, {&(0x7f0000000400)="4e18fd899d846a0ffbe699ad55ae99c90d54d485299e344a1fec153ebd006aa1845ee59387b3d1593ef18d3925963caddb876bc88d45ba94c970e6b563cf1e963c53dbac3fc70269b231fdc25b87345452522a5943253f830e7236385d7dbb1d1e7823fd0fdb5cf15119eab66c58806034a1880e1a96e92106a439aadb8bb56a26c3b41987c24d9e056c", 0x8a}], 0x5, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x200, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000001, 0x20010, r0, 0x14790000) r2 = syz_open_dev$sndctrl(&(0x7f0000000580), 0x401, 0xc002) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r2, 0xc008551b, &(0x7f00000005c0)={0x8, 0x4, [0x5]}) syz_open_dev$MSR(&(0x7f0000000a00), 0x7, 0x0) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000000a40)={0xffffffffffffffff, 0x1, 0x0, "472710a6a0b238bea843ee728a58967c3bf799da091880c453192e922e2cac1cd6f61f9c4fda0bbec86cd455ff135152e74f0a107d49b7289f208785d48bf725862a4b8ee2c221752a1656eb8e7482d4b9b89e7e61c6a3c9fd6e1d09ea2e56cfe4147dc0c9550d2a8e88f23ba3a1985b9ad2cf233cf51c"}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b00)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x64f, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)=@gettaction={0x24, 0x32, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x9}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20000) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000c80), 0x201, 0x0) ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f0000000cc0)={{r5}, "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"}) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101000, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001d40), r5) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r6, &(0x7f0000002000)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001d80)={0x9c, r7, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_PEER_MEASUREMENTS={0x80, 0x111, 0x0, 0x1, {0x7c, 0x5, 0x0, 0x1, [{0x68, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x10, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x362}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80000000}]}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}]}}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x40}]}, 0x9c}, 0x1, 0x0, 0x0, 0x41}, 0x4000) r8 = socket$key(0xf, 0x3, 0x2) ioctl$EXT4_IOC_GET_ES_CACHE(r8, 0xc020662a, &(0x7f0000002040)={0x8, 0x6, 0x0, 0x1, 0x2, 0x0, [{0x10, 0x80000001, 0xb, '\x00', 0x2000}, {0x4, 0x6, 0x517}]}) add_key(&(0x7f0000002340)='trusted\x00', &(0x7f0000002380)={'syz', 0x1}, &(0x7f00000023c0)="4898e83fefeccd4fa7ccd5f9ba55868f3735778f875def567881ba6c0c17a2b9cd4ec9c4d73ab96abc1db970f8536e8b3371cf0b", 0x34, 0xfffffffffffffff8) socket(0x10, 0x3, 0x7) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000002440)=[@in6={0xa, 0x4e23, 0x700000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2c8}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2f}}, @in={0x2, 0x4e21, @private=0xa010101}, @in6={0xa, 0x4e23, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x3ff}, @in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e21, @private=0xa010101}], 0x78) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f00000024c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000002500)={{{@in6=@mcast2, @in6=@remote}}, {{}, 0x0, @in=@empty}}, &(0x7f0000002600)=0xe8) r9 = mq_open(&(0x7f0000002640)=')\x00', 0x40, 0x100, &(0x7f0000002680)={0x3, 0x8, 0x6, 0x8000}) lseek(r9, 0x1, 0x4) 3.321133175s ago: executing program 4 (id=1964): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020000000000000000000000007010000f8ffffffb7020000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0xa, 0x3, 0x3a) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0xc) mount$9p_fd(0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f"], 0x10b8}, 0x20000000) sendmsg$kcm(r3, &(0x7f0000000100)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x23}}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75d51900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000009) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) memfd_create(&(0x7f00000001c0)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9kL\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb80x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff0802110000"], 0x6f4}}, 0x0) 3.134496178s ago: executing program 3 (id=1966): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3, "db8f2d2b3b7596160c6981acf8805944823a7f"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.03183156s ago: executing program 0 (id=1967): socket(0x10, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) openat$cgroup(r0, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) statx(r0, &(0x7f0000005b40)='./file0\x00', 0x4000, 0x7ff, 0x0) getdents64(r0, &(0x7f0000000380)=""/141, 0x8d) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000380)) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mbind(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, &(0x7f00000000c0)=0xc1b, 0xe0f8, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x19f2, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x8000000}, &(0x7f0000000140), &(0x7f0000000100)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rt_acct\x00') r4 = socket(0x18, 0x3, 0x0) connect$pppoe(r4, &(0x7f0000000100)={0x18, 0x0, {0x2, @broadcast, 'vlan0\x00'}}, 0x1e) sendfile(r4, r3, 0x0, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) 2.814384683s ago: executing program 3 (id=1968): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x97c4, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000020940)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) read$FUSE(r5, &(0x7f0000002fc0)={0x2020}, 0x2020) 2.358051921s ago: executing program 4 (id=1969): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c) sendto$inet6(r0, &(0x7f0000000480)="aa", 0x1, 0x20000000, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000004c0)={0x10, 0x39, 0x0, 0x70bd2d, 0x25dfdbff}, 0x10}], 0x1, 0x0, 0x0, 0xc080}, 0x4bf1ee75127f9ce6) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000340)=',', 0xffbc}], 0x1) 2.065396296s ago: executing program 0 (id=1970): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x1a8}, 0x18) socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@getchain={0x24, 0x66, 0x0, 0x70bd26, 0x2000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xa}, {}, {0x4, 0xfff8}}}, 0x24}}, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800450000b0000000000011907800000000e000000100004e20009c907802000000000000000000000082d18160f7d8dda36479a6b179161b4bbff2d0508977b3928ebd2dee05607d170194bd7a1b0303c5ba7f602606a285b330da2d58da817f8a5f77a23de36a21643b33cfa231a427159c7b9f0e"], 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) munlockall() r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$netlink(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000016c0)=ANY=[@ANYBLOB="14000000010501b4b56b65da420b84"], 0x14}, 0x1, 0x0, 0x0, 0x6}, 0x4004) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, 0x0, &(0x7f0000000180)) 968.737004ms ago: executing program 0 (id=1971): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x109140, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0xec, 0x9, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_EXPR={0x38, 0x11, 0x0, 0x1, @objref={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x12}]}}}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2d}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DESC={0x78, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_DESC_CONCAT={0x5c, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffefc5}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8}]}]}]}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_TYPE={0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x130}, 0x1, 0x0, 0x0, 0x20014840}, 0xc010) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 968.325934ms ago: executing program 4 (id=1972): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000200)={r3, 0x9}, 0x8) 882.590065ms ago: executing program 2 (id=1973): r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x800000000001c8, 0x12) 819.888127ms ago: executing program 3 (id=1974): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x109140, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0xf0, 0x9, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_EXPR={0x38, 0x11, 0x0, 0x1, @objref={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_OBJREF_IMM_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_OBJREF_IMM_TYPE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0x12}]}}}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2d}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DESC={0x7c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x24, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, @NFTA_SET_DESC_CONCAT={0x54, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffefc5}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}]}]}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_TYPE={0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x134}, 0x1, 0x0, 0x0, 0x20014840}, 0xc010) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff0802110000"], 0x6f4}}, 0x0) 819.380427ms ago: executing program 0 (id=1975): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) recvfrom$inet(r3, 0x0, 0x0, 0x40000002, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0xfea8, 0xa) 818.476807ms ago: executing program 4 (id=1976): write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000100)="ea08c1e6693972d7b82283d726cd4e4354549cff9505ca40c5680921c355b2da860de83facf7401d6e547998a95d93cb1be205a01def1435da2dacf5de80657c3ed66d34d7a68321dda0eddb9e514090c9ed5e0b3900810f96b1c7076351b236a2b6b61677777e057f9f5460e80267b05f2f1e29bb5a6c75596bb3bfd2a045d673bcb86f606d36f94e8b132a436199c6892ac6c95fa0138d7b3c09862866f4349542b07598cd22a9c3a430e807ee21aa2bfea170c68c877287ad4c80048766a035f2c338ac8de474538a82d52c96545d12d5bd8d109bf5ecc4e1f354155d65da5b1c0f64", 0xe4}, {&(0x7f0000000280)="e61a7c618e6351f2186eb0536e6849ec234b5d4fe1", 0x15}, {&(0x7f00000002c0)="df40f5339b0a7b5b53dee468e577b99e5ee240010cc7b959bc88766954acad2b21eb4c44da460d888d73542d89325b8dcc22d7ebfda76835ffc646826521e40a85ab854b20f90fd2647ecb29c65470d4acf6ecffe3210cb87655f5992448b13fb169dd2d3ce0876b3363ba73a7d81649a430dd310aedccc2c0a08f5a125a79483af520bab1c652777aefe0d10dd98754080a932f49ec13e100fd4ea740179b41dfecf06df08c30af398e5dbf8e", 0xad}, {&(0x7f0000000380)="48b749f5beecbf3b3ecdd771dfec1c89f19c52064f1cb550d5100052fc224b4ebcc7d0768b19efec6e0943d2fc9c698779ea7ec9988f7e01d1996cec1306cd8f5f31fca6338a076a821a116658a4165b219074a82142cff90b8b094722788b5d2678e952c766265d60f3fbd47d1a51e64b53c0c166880690c6f0601c", 0x7c}, {&(0x7f0000000400)="4e18fd899d846a0ffbe699ad55ae99c90d54d485299e344a1fec153ebd006aa1845ee59387b3d1593ef18d3925963caddb876bc88d45ba94c970e6b563cf1e963c53dbac3fc70269b231fdc25b87345452522a5943253f830e7236385d7dbb1d1e7823fd0fdb5cf15119eab66c58806034a1880e1a96e92106a439aadb8bb56a26c3b41987c24d9e056c", 0x8a}], 0x5, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x200, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000001, 0x20010, r0, 0x14790000) r2 = syz_open_dev$sndctrl(&(0x7f0000000580), 0x401, 0xc002) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r2, 0xc008551b, &(0x7f00000005c0)={0x8, 0x4, [0x5]}) syz_open_dev$MSR(&(0x7f0000000a00), 0x7, 0x0) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000000a40)={0xffffffffffffffff, 0x1, 0x0, "472710a6a0b238bea843ee728a58967c3bf799da091880c453192e922e2cac1cd6f61f9c4fda0bbec86cd455ff135152e74f0a107d49b7289f208785d48bf725862a4b8ee2c221752a1656eb8e7482d4b9b89e7e61c6a3c9fd6e1d09ea2e56cfe4147dc0c9550d2a8e88f23ba3a1985b9ad2cf233cf51c"}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b00)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x64f, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)=@gettaction={0x24, 0x32, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x9}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20000) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000c80), 0x201, 0x0) ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f0000000cc0)={{r5}, "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"}) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101000, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001d40), r5) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r6, &(0x7f0000002000)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001d80)={0xa0, r7, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_PEER_MEASUREMENTS={0x84, 0x111, 0x0, 0x1, {0x80, 0x5, 0x0, 0x1, [{0x6c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x10, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4}, @NL80211_PMSR_PEER_ATTR_REQ={0x4}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x362}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x80000000}]}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}]}}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x40}]}, 0xa0}, 0x1, 0x0, 0x0, 0x41}, 0x4000) r8 = socket$key(0xf, 0x3, 0x2) ioctl$EXT4_IOC_GET_ES_CACHE(r8, 0xc020662a, &(0x7f0000002040)={0x8, 0x6, 0x0, 0x1, 0x2, 0x0, [{0x10, 0x80000001, 0xb, '\x00', 0x2000}, {0x4, 0x6, 0x517}]}) add_key(&(0x7f0000002340)='trusted\x00', &(0x7f0000002380)={'syz', 0x1}, &(0x7f00000023c0)="4898e83fefeccd4fa7ccd5f9ba55868f3735778f875def567881ba6c0c17a2b9cd4ec9c4d73ab96abc1db970f8536e8b3371cf0b", 0x34, 0xfffffffffffffff8) socket(0x10, 0x3, 0x7) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000002440)=[@in6={0xa, 0x4e23, 0x700000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2c8}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2f}}, @in={0x2, 0x4e21, @private=0xa010101}, @in6={0xa, 0x4e23, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x3ff}, @in={0x2, 0x4e24, @broadcast}, @in={0x2, 0x4e21, @private=0xa010101}], 0x78) ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f00000024c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000002500)={{{@in6=@mcast2, @in6=@remote}}, {{}, 0x0, @in=@empty}}, &(0x7f0000002600)=0xe8) r9 = mq_open(&(0x7f0000002640)=')\x00', 0x40, 0x100, &(0x7f0000002680)={0x3, 0x8, 0x6, 0x8000}) lseek(r9, 0x1, 0x4) 690.306579ms ago: executing program 2 (id=1977): connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r3, &(0x7f00000019c0)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @remote, 0xfffffffe}, 0x80, 0x0}, 0x20040010) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) ioctl$SIOCSIFHWADDR(r6, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) 690.092979ms ago: executing program 3 (id=1978): r0 = creat(&(0x7f0000000080)='./file0\x00', 0xc7) close(r0) socket$inet6(0xa, 0x1, 0x8010000000000084) r1 = socket$tipc(0x1e, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 686.890719ms ago: executing program 4 (id=1979): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001280)=@mangle={'mangle\x00', 0x8, 0x6, 0x5b8, 0x120, 0x0, 0x1f0, 0x1f0, 0x120, 0x510, 0x510, 0x510, 0x510, 0x510, 0x6, 0x0, {[{{@ipv6={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff000000, 0x0, 0xffffff00, 0xff000000], [0xff, 0xff, 0xff000000, 0xffffffff], 'ipvlan1\x00', 'ipvlan1\x00', {}, {}, 0x0, 0x9, 0x2, 0x2}, 0x0, 0xd0, 0xf8, 0x0, {0x7a00000000000000}, [@common=@unspec=@connlabel={{0x28}, {0x4, 0x1}}]}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x5002}}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty, @ipv4=@private=0xa010100, 0x0, 0x32, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0xff}}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@hbh={{0x48}, {0x101, 0x0, 0x1, [0x8, 0xc, 0x8001, 0x8, 0x5, 0x2, 0x9, 0x4, 0xfff4, 0xf7fd, 0x6, 0xfff8, 0x6, 0x1, 0x2, 0x9], 0x10}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x0, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x618) 643.723119ms ago: executing program 0 (id=1980): sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x40041) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) socket$inet6(0xa, 0x3, 0x8) 530.618801ms ago: executing program 4 (id=1981): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16], 0x44}}, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = mmap$IORING_OFF_CQ_RING(&(0x7f00002e2000/0x4000)=nil, 0x4000, 0xd, 0x80010, 0xffffffffffffffff, 0x8000000) socket$caif_seqpacket(0x25, 0x5, 0x5) syz_io_uring_submit(r5, 0x0, 0x0) r6 = fsmount(r4, 0x0, 0x18) symlinkat(&(0x7f00000001c0)='./file0\x00', r6, 0x0) openat2(r6, &(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x8}, 0x18) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000040)={0x1, 0x0, 0x98, &(0x7f0000000140)={0x0, 0x1000, 0x1}}) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r7, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="200300000000000000"], 0x0}) syz_usb_control_io$hid(r7, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="20010e"], 0x0}) syz_usb_control_io(r7, 0x0, 0x0) r8 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) readv(r8, &(0x7f00000002c0), 0x0) 47.368039ms ago: executing program 3 (id=1982): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x97c4, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000020940)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x200000000) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) read$FUSE(r5, &(0x7f0000002fc0)={0x2020}, 0x2020) 0s ago: executing program 2 (id=1983): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) unshare(0x8020000) semget$private(0x0, 0x4000, 0x0) semctl$SETALL(0x0, 0x0, 0x11, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000", 0xe) r2 = accept$alg(r1, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="05000000010000004000000040"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000), &(0x7f0000000040)='%pK \x00'}, 0x20) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(r2, 0x0, 0x0) recvmmsg(r2, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xc8}, {&(0x7f0000000140)}, {&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000400)=""/41, 0x29}, {0x0}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0x18}}], 0x2, 0xcb, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r4, &(0x7f0000000040)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)={0x1c, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x8, 0x11, 0x0, 0x1, [@typed={0x4, 0xc}]}]}, 0x1c}], 0x1}, 0x300) kernel console output (not intermixed with test programs): r the cluster is laggy [ 186.425267][ T966] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 187.046361][ T5857] libceph: connect (1)[c::]:6789 error -101 [ 187.053136][ T5857] libceph: mon0 (1)[c::]:6789 connect error [ 187.083833][ T966] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.113376][ T966] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.127830][ T966] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 187.137226][ T966] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.208708][ T966] usb 3-1: config 0 descriptor?? [ 187.777004][ T966] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 188.068317][ T966] cp2112 0003:10C4:EA90.0004: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 188.231692][ T966] cp2112 0003:10C4:EA90.0004: error requesting version [ 188.371032][ T966] cp2112: probe of 0003:10C4:EA90.0004 failed with error -32 [ 190.212065][ T7054] __nla_validate_parse: 99 callbacks suppressed [ 190.212080][ T7054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.398'. [ 190.227390][ T7054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.398'. [ 190.237031][ T7054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.398'. [ 190.245969][ T7054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.398'. [ 190.254882][ T7054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.398'. [ 190.263764][ T7054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.398'. [ 190.272656][ T7054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.398'. [ 190.281474][ T7054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.398'. [ 190.290356][ T7054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.398'. [ 190.299206][ T7054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.398'. [ 190.375460][ T5857] usb 3-1: USB disconnect, device number 3 [ 191.425028][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 191.425050][ T5764] Bluetooth: hci2: command 0x0406 tx timeout [ 191.431086][ T5776] Bluetooth: hci1: command 0x0406 tx timeout [ 191.505598][ T7062] syz_tun: entered promiscuous mode [ 191.511335][ T7062] macvtap1: entered promiscuous mode [ 191.534931][ T7062] macvtap1: entered allmulticast mode [ 191.601209][ T7062] syz_tun: entered allmulticast mode [ 193.502201][ T5838] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 194.016194][ T5838] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.050361][ T5838] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.416548][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.422954][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.548575][ T5838] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 194.584679][ T5838] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.660591][ T5838] usb 4-1: config 0 descriptor?? [ 195.622462][ T5838] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 195.810412][ T5838] cp2112 0003:10C4:EA90.0005: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 195.897611][ T5838] cp2112 0003:10C4:EA90.0005: error requesting version [ 196.049544][ T5838] cp2112: probe of 0003:10C4:EA90.0005 failed with error -32 [ 196.329276][ T7112] overlayfs: failed to resolve './file0': -2 [ 196.443308][ T7113] loop9: detected capacity change from 0 to 7 [ 196.459247][ C0] blk_print_req_error: 4 callbacks suppressed [ 196.459264][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 196.474615][ C0] buffer_io_error: 4 callbacks suppressed [ 196.474632][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 196.580480][ T7115] __nla_validate_parse: 99 callbacks suppressed [ 196.580496][ T7115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.417'. [ 196.657583][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 196.666848][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 196.684341][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 196.693638][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 196.705748][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 196.714995][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 196.724057][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 196.733351][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 196.742472][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 196.751685][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 196.761949][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 196.771098][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 196.779058][ T7113] ldm_validate_partition_table(): Disk read failed. [ 196.795140][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 196.804391][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 196.818169][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 196.827372][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 196.837130][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 196.846381][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 196.872180][ T7113] Dev loop9: unable to read RDB block 0 [ 196.882650][ T7113] loop9: unable to read partition table [ 196.890256][ T7113] loop9: partition table beyond EOD, truncated [ 196.896866][ T7113] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 196.896866][ T7113] ) failed (rc=-5) [ 197.398688][ T5838] usb 4-1: USB disconnect, device number 4 [ 197.543073][ T7115] syz_tun: entered promiscuous mode [ 197.580797][ T7115] macvtap1: entered promiscuous mode [ 197.590976][ T7115] macvtap1: entered allmulticast mode [ 197.618141][ T7115] syz_tun: entered allmulticast mode [ 198.030532][ T7125] netlink: 4 bytes leftover after parsing attributes in process `syz.1.420'. [ 198.039979][ T7125] netlink: 4 bytes leftover after parsing attributes in process `syz.1.420'. [ 198.049091][ T7125] netlink: 4 bytes leftover after parsing attributes in process `syz.1.420'. [ 198.058146][ T7125] netlink: 4 bytes leftover after parsing attributes in process `syz.1.420'. [ 198.067165][ T7125] netlink: 4 bytes leftover after parsing attributes in process `syz.1.420'. [ 198.076202][ T7125] netlink: 4 bytes leftover after parsing attributes in process `syz.1.420'. [ 198.085400][ T7125] netlink: 4 bytes leftover after parsing attributes in process `syz.1.420'. [ 198.094535][ T7125] netlink: 4 bytes leftover after parsing attributes in process `syz.1.420'. [ 198.103622][ T7125] netlink: 4 bytes leftover after parsing attributes in process `syz.1.420'. [ 199.928012][ T8] IPVS: starting estimator thread 0... [ 200.105710][ T7136] IPVS: using max 17 ests per chain, 40800 per kthread [ 201.316999][ T7149] overlayfs: failed to resolve './file0': -2 [ 201.396875][ T7150] loop9: detected capacity change from 0 to 7 [ 201.430761][ T7150] ldm_validate_partition_table(): Disk read failed. [ 201.464766][ C0] blk_print_req_error: 13 callbacks suppressed [ 201.464786][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 201.502855][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 201.512062][ C0] buffer_io_error: 14 callbacks suppressed [ 201.512070][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 201.525836][ T7150] Dev loop9: unable to read RDB block 0 [ 201.533552][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 201.542803][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 201.559276][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 201.568549][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 201.579673][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 201.588949][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 201.597182][ T7150] loop9: unable to read partition table [ 201.604308][ T7150] loop9: partition table beyond EOD, truncated [ 201.610947][ T7150] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 201.610947][ T7150] ) failed (rc=-5) [ 201.738923][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 201.748184][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 201.757335][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 201.766529][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 201.775839][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 201.785118][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 201.797148][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 201.806389][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 201.823656][ C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 201.832878][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 203.242307][ T5818] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 203.804104][ T5818] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.837231][ T5818] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.867835][ T5818] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 203.875637][ T7160] __nla_validate_parse: 46 callbacks suppressed [ 203.875650][ T7160] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.431'. [ 203.895547][ T5818] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.922904][ T5818] usb 3-1: config 0 descriptor?? [ 204.932472][ T5818] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0 [ 205.232622][ T5818] cp2112 0003:10C4:EA90.0006: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 205.331835][ T5818] cp2112 0003:10C4:EA90.0006: error requesting version [ 205.439072][ T5818] cp2112: probe of 0003:10C4:EA90.0006 failed with error -32 [ 205.770644][ T7167] netlink: 8 bytes leftover after parsing attributes in process `syz.0.434'. [ 206.650229][ T8] usb 3-1: USB disconnect, device number 4 [ 207.175758][ T42] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.320347][ T42] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.426402][ T42] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.576160][ T42] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.755591][ T7204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.448'. [ 208.882377][ T5768] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 208.891078][ T5768] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 208.899280][ T5768] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 208.913441][ T5768] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 208.921173][ T5768] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 208.928628][ T5768] Bluetooth: hci3: command 0x0406 tx timeout [ 208.934872][ T5768] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 210.174048][ T7232] kvm: pic: level sensitive irq not supported [ 211.002567][ T5776] Bluetooth: hci2: command tx timeout [ 211.015447][ T7211] chnl_net:caif_netlink_parms(): no params data found [ 211.911824][ T7269] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 211.919463][ T7269] IPv6: NLM_F_CREATE should be set when creating new route [ 211.926893][ T7269] IPv6: NLM_F_CREATE should be set when creating new route [ 211.934174][ T7269] IPv6: NLM_F_CREATE should be set when creating new route [ 212.023573][ T7211] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.052160][ T7211] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.060273][ T7211] bridge_slave_0: entered allmulticast mode [ 212.078892][ T7211] bridge_slave_0: entered promiscuous mode [ 212.176123][ T7211] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.197022][ T7211] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.219638][ T7211] bridge_slave_1: entered allmulticast mode [ 212.248732][ T7211] bridge_slave_1: entered promiscuous mode [ 212.652940][ T42] hsr_slave_0: left promiscuous mode [ 212.689847][ T42] hsr_slave_1: left promiscuous mode [ 212.731573][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.762748][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.784767][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.817064][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.862818][ T42] bridge_slave_1: left allmulticast mode [ 212.868506][ T42] bridge_slave_1: left promiscuous mode [ 212.875884][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.922828][ T42] bridge_slave_0: left allmulticast mode [ 212.958193][ T42] bridge_slave_0: left promiscuous mode [ 212.965579][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.032912][ T42] veth1_macvtap: left promiscuous mode [ 213.144646][ T5776] Bluetooth: hci2: command tx timeout [ 213.148315][ T7289] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 213.157863][ T42] veth0_macvtap: left promiscuous mode [ 213.163586][ T42] veth1_vlan: left promiscuous mode [ 213.170050][ T42] veth0_vlan: left promiscuous mode [ 214.576795][ T42] team0 (unregistering): Port device team_slave_1 removed [ 214.625554][ T42] team0 (unregistering): Port device team_slave_0 removed [ 214.683301][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.729905][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.157013][ T5776] Bluetooth: hci2: command tx timeout [ 216.069318][ T42] bond0 (unregistering): Released all slaves [ 216.155226][ T7211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.168949][ T7211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.297675][ T7309] netlink: 16 bytes leftover after parsing attributes in process `syz.2.469'. [ 216.499769][ T7211] team0: Port device team_slave_0 added [ 216.524696][ T7211] team0: Port device team_slave_1 added [ 216.634914][ T7211] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.672749][ T7211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.741529][ T7211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.829573][ T7211] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.860125][ T7211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.905082][ T7211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.014914][ T7211] hsr_slave_0: entered promiscuous mode [ 217.215639][ T7211] hsr_slave_1: entered promiscuous mode [ 217.248567][ T5776] Bluetooth: hci2: command tx timeout [ 217.356437][ T7211] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 217.488876][ T7211] Cannot create hsr debugfs directory [ 217.588132][ T7335] netlink: 4 bytes leftover after parsing attributes in process `syz.3.476'. [ 217.597642][ T7335] netlink: 4 bytes leftover after parsing attributes in process `syz.3.476'. [ 217.606926][ T7335] netlink: 4 bytes leftover after parsing attributes in process `syz.3.476'. [ 217.616164][ T7335] netlink: 4 bytes leftover after parsing attributes in process `syz.3.476'. [ 217.625378][ T7335] netlink: 4 bytes leftover after parsing attributes in process `syz.3.476'. [ 217.634642][ T7335] netlink: 4 bytes leftover after parsing attributes in process `syz.3.476'. [ 217.643964][ T7335] netlink: 4 bytes leftover after parsing attributes in process `syz.3.476'. [ 217.653267][ T7335] netlink: 4 bytes leftover after parsing attributes in process `syz.3.476'. [ 217.662561][ T7335] netlink: 4 bytes leftover after parsing attributes in process `syz.3.476'. [ 217.891118][ T42] IPVS: stop unused estimator thread 0... [ 218.399678][ T7211] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 218.923996][ T7211] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 218.937035][ T7211] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 218.988797][ T7211] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 219.316955][ T5776] Bluetooth: hci2: command tx timeout [ 219.337183][ T7211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.427691][ T7211] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.461185][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.468393][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.533283][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.540405][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.274546][ T7397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.736668][ T7211] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.342056][ T7415] Bluetooth: hci4: Frame reassembly failed (-84) [ 221.752275][ T42] Bluetooth: hci4: Frame reassembly failed (-84) [ 221.873614][ T7211] veth0_vlan: entered promiscuous mode [ 221.914512][ T7211] veth1_vlan: entered promiscuous mode [ 221.957295][ T7211] veth0_macvtap: entered promiscuous mode [ 221.977123][ T7211] veth1_macvtap: entered promiscuous mode [ 222.011052][ T7211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.040717][ T7211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.061347][ T7211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.087990][ T7211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.112474][ T7211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.133484][ T7211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.152313][ T5808] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 222.166819][ T7211] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.250651][ T7211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.281849][ T7211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.302765][ T7211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.314190][ T7211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.324313][ T7211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.335068][ T7211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.347020][ T5808] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 222.358154][ T7211] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.371095][ T5808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.384751][ T7211] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.395911][ T7211] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.408730][ T5808] usb 3-1: config 0 descriptor?? [ 222.416345][ T7211] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.429528][ T5808] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 222.438994][ T7211] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.572868][ T1112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.597113][ T1112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.771494][ T1112] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.861465][ T1112] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.392110][ T5776] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 223.684003][ T7441] __nla_validate_parse: 47 callbacks suppressed [ 223.684051][ T7441] netlink: 16 bytes leftover after parsing attributes in process `syz.0.496'. [ 225.404458][ T5808] gp8psk: usb in 128 operation failed. [ 225.537435][ T5818] IPVS: starting estimator thread 0... [ 225.547374][ T5808] gp8psk: usb in 137 operation failed. [ 225.575065][ T5808] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 225.713972][ T5808] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 225.756077][ T7449] IPVS: using max 20 ests per chain, 48000 per kthread [ 226.137337][ T5818] usb 3-1: USB disconnect, device number 5 [ 226.344801][ T7458] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.384971][ T7458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.498'. [ 230.006923][ T7531] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.522'. [ 231.931886][ C0] sched: RT throttling activated [ 235.779409][ T964] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 236.747462][ T964] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 236.747514][ T964] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.763236][ T964] usb 3-1: config 0 descriptor?? [ 236.831793][ T964] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 238.503028][ T964] gp8psk: usb in 128 operation failed. [ 238.514834][ T964] gp8psk: usb in 137 operation failed. [ 238.527836][ T964] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 238.555534][ T964] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 238.594476][ T964] usb 3-1: USB disconnect, device number 6 [ 239.775894][ T7655] ieee802154 phy0 wpan0: encryption failed: -22 [ 241.390364][ T5818] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 241.848214][ T5818] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.015143][ T5818] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.043129][ T5818] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 242.077520][ T5818] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.254260][ T5818] usb 3-1: config 0 descriptor?? [ 242.675035][ T5818] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 242.697961][ T5818] cp2112 0003:10C4:EA90.0007: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 242.873199][ T5818] cp2112 0003:10C4:EA90.0007: error requesting version [ 242.892460][ T5818] cp2112: probe of 0003:10C4:EA90.0007 failed with error -32 [ 244.046610][ T7729] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 244.747495][ T5857] usb 3-1: USB disconnect, device number 7 [ 247.253163][ T964] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 247.490773][ T964] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.502074][ T964] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.512846][ T964] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 247.522192][ T964] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.555542][ T964] usb 3-1: config 0 descriptor?? [ 248.120394][ T964] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 248.235132][ T964] cp2112 0003:10C4:EA90.0008: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 248.318021][ T964] cp2112 0003:10C4:EA90.0008: error requesting version [ 248.410830][ T964] cp2112: probe of 0003:10C4:EA90.0008 failed with error -32 [ 248.730900][ T7779] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 249.652101][ T5838] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 249.777242][ T7807] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 249.843017][ T5838] usb 4-1: Using ep0 maxpacket: 32 [ 249.851632][ T5838] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 249.864839][ T5838] usb 4-1: config 0 has no interface number 0 [ 249.871459][ T5838] usb 4-1: config 0 interface 2 has no altsetting 0 [ 249.884369][ T5838] usb 4-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 249.898228][ T5838] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.906557][ T5838] usb 4-1: Product: syz [ 249.911238][ T5838] usb 4-1: Manufacturer: syz [ 249.922419][ T5838] usb 4-1: SerialNumber: syz [ 249.932061][ T5838] usb 4-1: config 0 descriptor?? [ 250.153249][ T1195] usb 3-1: USB disconnect, device number 8 [ 250.188664][ T7798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.225641][ T7798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.313040][ T5838] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 251.030710][ T5838] usb 4-1: USB disconnect, device number 5 [ 252.772870][ T964] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 252.988747][ T964] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.002426][ T964] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.019066][ T964] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 253.030276][ T964] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.084655][ T964] usb 4-1: config 0 descriptor?? [ 254.562545][ T964] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0 [ 254.586187][ T964] cp2112 0003:10C4:EA90.0009: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 254.774228][ T964] cp2112 0003:10C4:EA90.0009: error requesting version [ 254.795382][ T964] cp2112: probe of 0003:10C4:EA90.0009 failed with error -32 [ 255.323882][ T7886] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 255.349074][ T7886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.614'. [ 255.807683][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.820695][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.833399][ T5838] usb 4-1: USB disconnect, device number 6 [ 255.973375][ T7898] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 259.122140][ T5838] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 260.234380][ T5838] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.329753][ T5838] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.404973][ T5838] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 260.531268][ T5838] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.567688][ T5838] usb 3-1: config 0 descriptor?? [ 260.575651][ T7945] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 260.865571][ T7945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.628'. [ 261.065613][ T5838] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 261.088980][ T5838] cp2112 0003:10C4:EA90.000A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 261.263421][ T5838] cp2112 0003:10C4:EA90.000A: error requesting version [ 261.279941][ T5838] cp2112: probe of 0003:10C4:EA90.000A failed with error -32 [ 263.101101][ T8] usb 3-1: USB disconnect, device number 9 [ 263.723090][ T8015] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 264.136990][ T8012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 264.268974][ T8012] netlink: 8 bytes leftover after parsing attributes in process `syz.2.641'. [ 266.522016][ T5856] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 266.764111][ T5856] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.821750][ T5856] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 266.832824][ T5856] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 266.842312][ T5856] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.872344][ T5856] usb 3-1: config 0 descriptor?? [ 267.254040][ T8086] program syz.4.654 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 267.304607][ T5856] cp2112 0003:10C4:EA90.000B: unknown main item tag 0x0 [ 267.318630][ T5856] cp2112 0003:10C4:EA90.000B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 267.499219][ T5856] cp2112 0003:10C4:EA90.000B: error requesting version [ 267.523409][ T5856] cp2112: probe of 0003:10C4:EA90.000B failed with error -32 [ 267.792775][ T8096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 267.930191][ T8096] netlink: 8 bytes leftover after parsing attributes in process `syz.3.656'. [ 268.384871][ T8103] netlink: 16 bytes leftover after parsing attributes in process `syz.4.658'. [ 270.157188][ T964] usb 3-1: USB disconnect, device number 10 [ 270.640546][ T8114] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 272.232614][ T964] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 272.776082][ T8141] netlink: 16 bytes leftover after parsing attributes in process `syz.4.668'. [ 273.248766][ T964] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.089358][ T964] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.100324][ T964] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 274.111286][ T964] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.124863][ T964] usb 4-1: config 0 descriptor?? [ 274.527684][ T1195] libceph: connect (1)[c::]:6789 error -101 [ 274.539184][ T964] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 274.547393][ T1195] libceph: mon0 (1)[c::]:6789 connect error [ 274.563968][ T964] cp2112 0003:10C4:EA90.000C: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 274.738602][ T964] cp2112 0003:10C4:EA90.000C: error requesting version [ 274.766931][ T964] cp2112: probe of 0003:10C4:EA90.000C failed with error -32 [ 274.822584][ T964] libceph: connect (1)[c::]:6789 error -101 [ 274.829898][ T964] libceph: mon0 (1)[c::]:6789 connect error [ 275.342201][ T964] libceph: connect (1)[c::]:6789 error -101 [ 275.348264][ T964] libceph: mon0 (1)[c::]:6789 connect error [ 276.936704][ T28] usb 4-1: USB disconnect, device number 7 [ 276.952496][ T8149] ceph: No mds server is up or the cluster is laggy [ 279.816761][ T1195] libceph: connect (1)[c::]:6789 error -101 [ 279.832166][ T1195] libceph: mon0 (1)[c::]:6789 connect error [ 279.952206][ T28] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 279.986542][ T8192] ceph: No mds server is up or the cluster is laggy [ 280.301674][ T8204] netlink: 'syz.3.686': attribute type 6 has an invalid length. [ 280.355924][ T28] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.409992][ T28] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.446676][ T28] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 280.462677][ T28] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.521190][ T28] usb 3-1: config 0 descriptor?? [ 281.020649][ T28] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0 [ 281.174903][ T28] cp2112 0003:10C4:EA90.000D: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 281.493975][ T28] cp2112 0003:10C4:EA90.000D: error requesting version [ 281.664284][ T28] cp2112: probe of 0003:10C4:EA90.000D failed with error -32 [ 283.272198][ T9] usb 3-1: USB disconnect, device number 11 [ 284.724699][ T8236] netlink: 96 bytes leftover after parsing attributes in process `syz.0.694'. [ 285.377994][ T28] libceph: connect (1)[c::]:6789 error -101 [ 285.423329][ T28] libceph: mon0 (1)[c::]:6789 connect error [ 285.691332][ T8241] ceph: No mds server is up or the cluster is laggy [ 287.642105][ T5856] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 287.848378][ T5856] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.877584][ T5856] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.952378][ T5856] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 287.962317][ T5856] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.991476][ T5856] usb 5-1: config 0 descriptor?? [ 289.103337][ T5856] cp2112 0003:10C4:EA90.000E: unknown main item tag 0x0 [ 289.170859][ T5856] cp2112 0003:10C4:EA90.000E: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 289.322816][ T5856] cp2112 0003:10C4:EA90.000E: error requesting version [ 289.338339][ T5856] cp2112: probe of 0003:10C4:EA90.000E failed with error -32 [ 293.637848][ T5838] usb 5-1: USB disconnect, device number 2 [ 293.724041][ T8289] veth0_to_team: entered promiscuous mode [ 293.729860][ T8289] veth0_to_team: entered allmulticast mode [ 296.972110][ T28] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 297.198654][ T28] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.267392][ T28] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.278622][ T28] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 297.298224][ T28] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.317817][ T28] usb 3-1: config 0 descriptor?? [ 297.842381][ T28] cp2112 0003:10C4:EA90.000F: unknown main item tag 0x0 [ 298.083080][ T28] cp2112 0003:10C4:EA90.000F: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 298.407435][ T28] cp2112 0003:10C4:EA90.000F: error requesting version [ 298.605161][ T28] cp2112: probe of 0003:10C4:EA90.000F failed with error -32 [ 300.384004][ T1195] usb 3-1: USB disconnect, device number 12 [ 300.820495][ T8350] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 300.902447][ T8350] netlink: 8 bytes leftover after parsing attributes in process `syz.4.726'. [ 305.271668][ T8395] netlink: 4 bytes leftover after parsing attributes in process `syz.3.742'. [ 305.280851][ T8395] netlink: 4 bytes leftover after parsing attributes in process `syz.3.742'. [ 305.289958][ T8395] netlink: 4 bytes leftover after parsing attributes in process `syz.3.742'. [ 305.299013][ T8395] netlink: 4 bytes leftover after parsing attributes in process `syz.3.742'. [ 305.308031][ T8395] netlink: 4 bytes leftover after parsing attributes in process `syz.3.742'. [ 305.317029][ T8395] netlink: 4 bytes leftover after parsing attributes in process `syz.3.742'. [ 305.326192][ T8395] netlink: 4 bytes leftover after parsing attributes in process `syz.3.742'. [ 305.336419][ T8395] netlink: 4 bytes leftover after parsing attributes in process `syz.3.742'. [ 305.345503][ T8395] netlink: 4 bytes leftover after parsing attributes in process `syz.3.742'. [ 306.243107][ T8401] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.442008][ T8401] __nla_validate_parse: 44 callbacks suppressed [ 306.442023][ T8401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.743'. [ 307.608774][ T8416] syz.3.748 uses obsolete (PF_INET,SOCK_PACKET) [ 308.222142][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 308.474585][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.542295][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.587219][ T9] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 308.678768][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.998848][ T9] usb 3-1: config 0 descriptor?? [ 309.589296][ T9] cp2112 0003:10C4:EA90.0010: unknown main item tag 0x0 [ 309.867938][ T9] cp2112 0003:10C4:EA90.0010: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 310.113950][ T9] cp2112 0003:10C4:EA90.0010: error requesting version [ 310.281818][ T9] cp2112: probe of 0003:10C4:EA90.0010 failed with error -32 [ 310.694113][ T8436] vcan0: tx drop: invalid sa for name 0xbffffffffffffffd [ 311.825440][ T5857] usb 3-1: USB disconnect, device number 13 [ 312.555767][ T8454] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 312.567486][ T8454] netlink: 8 bytes leftover after parsing attributes in process `syz.3.762'. [ 312.860645][ T8465] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 313.746270][ T8469] kAFS: No cell specified [ 316.142400][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 316.650420][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.931006][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.021410][ T9] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 317.142261][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.161749][ T9] usb 5-1: config 0 descriptor?? [ 317.257292][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.270155][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.672236][ T9] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 317.880327][ T9] cp2112 0003:10C4:EA90.0011: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 317.982960][ T8499] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 318.322081][ T9] cp2112 0003:10C4:EA90.0011: error requesting version [ 318.353032][ T9] cp2112: probe of 0003:10C4:EA90.0011 failed with error -32 [ 318.426405][ T8504] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 318.438733][ T8504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.777'. [ 319.544584][ T8524] kAFS: No cell specified [ 321.362921][ T28] usb 5-1: USB disconnect, device number 3 [ 322.658528][ T8534] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 326.141959][ T964] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 326.312430][ T8567] kAFS: No cell specified [ 326.446084][ T964] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.321951][ T964] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 329.331966][ T964] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 329.341147][ T964] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.351540][ T964] usb 4-1: config 0 descriptor?? [ 330.390038][ T8578] netlink: 64 bytes leftover after parsing attributes in process `syz.0.797'. [ 331.090033][ T964] usb 4-1: can't set config #0, error -71 [ 331.103450][ T964] usb 4-1: USB disconnect, device number 8 [ 331.360621][ T8598] netlink: 4 bytes leftover after parsing attributes in process `syz.4.804'. [ 331.369802][ T8598] netlink: 4 bytes leftover after parsing attributes in process `syz.4.804'. [ 331.378866][ T8598] netlink: 4 bytes leftover after parsing attributes in process `syz.4.804'. [ 331.387920][ T8598] netlink: 4 bytes leftover after parsing attributes in process `syz.4.804'. [ 331.396983][ T8598] netlink: 4 bytes leftover after parsing attributes in process `syz.4.804'. [ 331.406047][ T8598] netlink: 4 bytes leftover after parsing attributes in process `syz.4.804'. [ 331.415230][ T8598] netlink: 4 bytes leftover after parsing attributes in process `syz.4.804'. [ 331.424427][ T8598] netlink: 4 bytes leftover after parsing attributes in process `syz.4.804'. [ 331.433546][ T8598] netlink: 4 bytes leftover after parsing attributes in process `syz.4.804'. [ 334.751961][ T5776] Bluetooth: hci2: command 0x0406 tx timeout [ 341.112325][ T8718] __nla_validate_parse: 43 callbacks suppressed [ 341.112341][ T8718] netlink: 24 bytes leftover after parsing attributes in process `syz.2.841'. [ 343.404922][ T5856] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 343.592262][ T8755] netlink: 16 bytes leftover after parsing attributes in process `syz.0.851'. [ 343.649807][ T5856] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.409329][ T5856] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.419197][ T5856] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 344.428288][ T5856] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.447530][ T5856] usb 3-1: config 0 descriptor?? [ 344.985195][ T8761] netlink: 24 bytes leftover after parsing attributes in process `syz.0.853'. [ 345.831716][ T5856] usb 3-1: can't set config #0, error -71 [ 345.852229][ T5856] usb 3-1: USB disconnect, device number 14 [ 347.603061][ T8794] netlink: 24 bytes leftover after parsing attributes in process `syz.0.865'. [ 348.809582][ T8815] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 350.415368][ T964] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 350.623788][ T964] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.645866][ T964] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.662391][ T964] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 350.671584][ T964] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.683852][ T964] usb 5-1: config 0 descriptor?? [ 351.513477][ T964] cp2112 0003:10C4:EA90.0012: unknown main item tag 0x0 [ 352.578499][ T964] cp2112 0003:10C4:EA90.0012: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 352.866883][ T964] cp2112 0003:10C4:EA90.0012: error requesting version [ 353.023278][ T964] cp2112: probe of 0003:10C4:EA90.0012 failed with error -32 [ 353.605386][ T8857] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 354.217949][ T1195] usb 5-1: USB disconnect, device number 4 [ 355.614542][ T8887] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 356.890496][ T8895] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 356.997918][ T8895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.899'. [ 358.012644][ T8909] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 358.076423][ T8909] netlink: 8 bytes leftover after parsing attributes in process `syz.0.902'. [ 358.242508][ T964] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 358.654987][ T964] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.672266][ T964] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.685819][ T964] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 358.696050][ T964] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.092370][ T964] usb 5-1: config 0 descriptor?? [ 360.053585][ T964] cp2112 0003:10C4:EA90.0013: unknown main item tag 0x0 [ 360.392397][ T964] cp2112 0003:10C4:EA90.0013: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 360.492744][ T964] cp2112 0003:10C4:EA90.0013: error requesting version [ 360.514829][ T964] cp2112: probe of 0003:10C4:EA90.0013 failed with error -32 [ 360.977139][ T8944] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 361.152247][ T8944] netlink: 8 bytes leftover after parsing attributes in process `syz.3.913'. [ 361.989616][ T5838] usb 5-1: USB disconnect, device number 5 [ 362.451364][ T8962] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 362.547321][ T8962] netlink: 8 bytes leftover after parsing attributes in process `syz.4.917'. [ 367.662235][ T964] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 367.977216][ T964] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 367.989864][ T964] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.011639][ T964] usb 4-1: config 0 descriptor?? [ 368.029869][ T964] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 368.252429][ T9007] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 368.272465][ T9007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.934'. [ 368.987236][ T9012] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.935'. [ 369.309566][ T964] gp8psk: usb in 128 operation failed. [ 369.322326][ T964] gp8psk: usb in 137 operation failed. [ 369.338834][ T964] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 369.349675][ T964] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 369.370308][ T964] usb 4-1: USB disconnect, device number 9 [ 370.488839][ T9034] netlink: 16 bytes leftover after parsing attributes in process `syz.4.943'. [ 372.802938][ T9039] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 372.804392][ T9038] netlink: 8 bytes leftover after parsing attributes in process `syz.3.944'. [ 374.280547][ T9051] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 374.482210][ T9051] netlink: 8 bytes leftover after parsing attributes in process `syz.2.948'. [ 375.426944][ T9069] netlink: 16 bytes leftover after parsing attributes in process `syz.2.955'. [ 375.483676][ T9] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 375.773400][ T9] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 375.867899][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.033787][ T9] usb 4-1: config 0 descriptor?? [ 376.200747][ T9] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 377.191118][ T9072] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 377.226779][ T9072] netlink: 8 bytes leftover after parsing attributes in process `syz.2.957'. [ 377.319691][ T9] gp8psk: usb in 128 operation failed. [ 377.353165][ T9] gp8psk: usb in 137 operation failed. [ 377.359309][ T9] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 377.370218][ T9] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 377.390751][ T9] usb 4-1: USB disconnect, device number 10 [ 377.986581][ T9085] netlink: 'syz.0.959': attribute type 24 has an invalid length. [ 378.686610][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.694508][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.972082][ T28] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 378.996476][ T9096] netlink: 16 bytes leftover after parsing attributes in process `syz.0.965'. [ 380.600964][ T28] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.705429][ T9098] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 380.731966][ T9098] netlink: 8 bytes leftover after parsing attributes in process `syz.2.964'. [ 380.737271][ T28] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.772404][ T28] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 380.781535][ T28] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.819541][ T28] usb 5-1: config 0 descriptor?? [ 381.871805][ T9114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 381.894523][ T9114] netlink: 8 bytes leftover after parsing attributes in process `syz.0.969'. [ 383.922118][ T28] usb 5-1: can't set config #0, error -71 [ 383.950302][ T28] usb 5-1: USB disconnect, device number 6 [ 384.302334][ T5838] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 384.475958][ T9129] netlink: 16 bytes leftover after parsing attributes in process `syz.0.974'. [ 384.518750][ T5838] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 384.595158][ T5838] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.697314][ T5838] usb 3-1: config 0 descriptor?? [ 385.294393][ T5838] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 387.957972][ T9146] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 388.083050][ T9146] netlink: 8 bytes leftover after parsing attributes in process `syz.4.980'. [ 389.636207][ T5838] gp8psk: usb in 128 operation failed. [ 389.642540][ T5838] gp8psk: usb in 137 operation failed. [ 389.662780][ T5838] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 389.755155][ T5838] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 390.045397][ T964] usb 3-1: USB disconnect, device number 15 [ 390.671907][ T9172] netlink: 16 bytes leftover after parsing attributes in process `syz.2.986'. [ 392.531926][ T9186] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 393.333472][ T9188] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 393.694284][ T9184] netlink: 8 bytes leftover after parsing attributes in process `syz.3.991'. [ 393.972297][ T5838] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 394.203145][ T9205] netlink: 16 bytes leftover after parsing attributes in process `syz.0.997'. [ 394.241133][ T5838] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 394.272190][ T5838] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.043850][ T5838] usb 3-1: config 0 descriptor?? [ 395.206944][ T5838] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 396.354977][ T5838] gp8psk: usb in 128 operation failed. [ 396.403763][ T5838] gp8psk: usb in 137 operation failed. [ 396.496082][ T5838] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 396.677230][ T5838] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 396.854589][ T5838] usb 3-1: USB disconnect, device number 16 [ 399.632387][ T964] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 399.691384][ T9239] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 400.045151][ T964] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 400.070466][ T9234] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1007'. [ 400.083250][ T9237] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 400.094246][ T9237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1008'. [ 400.112041][ T964] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 400.153240][ T964] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 400.166987][ T964] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.214123][ T964] usb 4-1: config 0 descriptor?? [ 400.672620][ T964] cp2112 0003:10C4:EA90.0014: unknown main item tag 0x0 [ 400.697698][ T964] cp2112 0003:10C4:EA90.0014: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 400.829425][ T964] cp2112 0003:10C4:EA90.0014: error requesting version [ 400.840606][ T964] cp2112: probe of 0003:10C4:EA90.0014 failed with error -32 [ 402.582690][ T28] usb 4-1: USB disconnect, device number 11 [ 402.669058][ T9280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 403.162858][ T9279] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1021'. [ 403.641530][ T9289] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 403.657552][ T9289] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1024'. [ 404.987535][ T5818] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 405.343501][ T5818] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 405.362041][ T5818] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 405.374965][ T5818] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 405.393025][ T5818] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.412233][ T5818] usb 5-1: config 0 descriptor?? [ 405.751993][ T5857] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 405.824233][ T5818] cp2112 0003:10C4:EA90.0015: unknown main item tag 0x0 [ 405.844832][ T5818] cp2112 0003:10C4:EA90.0015: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 405.954133][ T5857] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 405.972151][ T5857] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.993037][ T5857] usb 3-1: config 0 descriptor?? [ 406.002560][ T5857] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 406.023776][ T5818] cp2112 0003:10C4:EA90.0015: error requesting version [ 406.049918][ T5818] cp2112: probe of 0003:10C4:EA90.0015 failed with error -32 [ 407.165733][ T5857] gp8psk: usb in 128 operation failed. [ 407.174833][ T5857] gp8psk: usb in 137 operation failed. [ 407.180340][ T5857] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 407.197252][ T5857] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 407.222117][ T5857] usb 3-1: USB disconnect, device number 17 [ 407.846380][ T5857] usb 5-1: USB disconnect, device number 7 [ 409.679542][ T9389] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1062'. [ 413.072025][ T28] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 413.281978][ T28] usb 3-1: Using ep0 maxpacket: 8 [ 413.293911][ T28] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 413.337465][ T28] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 413.406368][ T9419] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1073'. [ 413.419997][ T28] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 413.535604][ T28] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 413.613096][ T28] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.688717][ T28] usb 3-1: Product: syz [ 413.728685][ T28] usb 3-1: Manufacturer: syz [ 413.768599][ T28] usb 3-1: SerialNumber: syz [ 417.072729][ T28] cdc_ncm 3-1:1.0: bind() failure [ 417.094230][ T28] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 417.112886][ T28] cdc_ncm 3-1:1.1: bind() failure [ 417.133299][ T28] usb 3-1: USB disconnect, device number 18 [ 417.452340][ T5808] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 417.646043][ T5808] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 417.672762][ T5808] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 417.708000][ T5808] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 417.732226][ T5808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.783597][ T5808] usb 4-1: config 0 descriptor?? [ 418.816500][ T5808] cp2112 0003:10C4:EA90.0016: unknown main item tag 0x0 [ 418.842229][ T5808] cp2112 0003:10C4:EA90.0016: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 418.932691][ T5808] cp2112 0003:10C4:EA90.0016: error requesting version [ 418.963201][ T5808] cp2112: probe of 0003:10C4:EA90.0016 failed with error -32 [ 419.239582][ T9458] syz.2.1083: attempt to access beyond end of device [ 419.239582][ T9458] nbd2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 419.252945][ T9458] vxfs: unable to read disk superblock at 1 [ 419.260384][ T9458] syz.2.1083: attempt to access beyond end of device [ 419.260384][ T9458] nbd2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 419.273348][ T9458] vxfs: unable to read disk superblock at 8 [ 419.279368][ T9458] vxfs: can't find superblock. [ 419.791693][ T9463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 419.806477][ T9463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1086'. [ 420.088938][ T9469] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1088'. [ 420.697323][ T5808] usb 4-1: USB disconnect, device number 12 [ 423.093992][ T9497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 423.293960][ T9497] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1098'. [ 423.468583][ T9506] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1101'. [ 424.541021][ T9518] input: syz1 as /devices/virtual/input/input9 [ 425.062384][ T5808] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 425.271999][ T5808] usb 4-1: Using ep0 maxpacket: 8 [ 425.284144][ T5808] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 425.315064][ T5808] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 425.335344][ T5808] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 425.358082][ T9531] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1111'. [ 425.382586][ T5808] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 425.401703][ T5808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.433771][ T5808] usb 4-1: Product: syz [ 425.440845][ T5808] usb 4-1: Manufacturer: syz [ 425.457628][ T5808] usb 4-1: SerialNumber: syz [ 426.531953][ T9550] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 426.578118][ T9550] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1116'. [ 427.596157][ T5808] cdc_ncm 4-1:1.0: bind() failure [ 427.633518][ T5808] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 427.640391][ T5808] cdc_ncm 4-1:1.1: bind() failure [ 427.673769][ T5808] usb 4-1: USB disconnect, device number 13 [ 427.796509][ T9562] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1120'. [ 427.894755][ T9564] kvm: pic: single mode not supported [ 427.895928][ T9564] kvm: pic: level sensitive irq not supported [ 429.092181][ T966] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 429.286619][ T966] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 429.322126][ T966] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 429.339208][ T966] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 429.349770][ T966] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.383630][ T966] usb 5-1: config 0 descriptor?? [ 429.771236][ T9593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 429.858596][ T9593] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1129'. [ 430.033032][ T966] cp2112 0003:10C4:EA90.0017: unknown main item tag 0x0 [ 430.132171][ T966] cp2112 0003:10C4:EA90.0017: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 430.232969][ T966] cp2112 0003:10C4:EA90.0017: error requesting version [ 430.247625][ T9596] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1130'. [ 430.289213][ T966] cp2112: probe of 0003:10C4:EA90.0017 failed with error -32 [ 433.475688][ T9308] usb 5-1: USB disconnect, device number 8 [ 434.174975][ T9618] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1139'. [ 434.335124][ T9627] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 434.572867][ T9627] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1141'. [ 434.861960][ T9308] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 435.074389][ T9308] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 435.188331][ T9308] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 435.343264][ T9308] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 435.360311][ T5856] libceph: connect (1)[c::]:6789 error -101 [ 435.368522][ T5856] libceph: mon0 (1)[c::]:6789 connect error [ 435.382901][ T9308] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.408264][ T9308] usb 3-1: config 0 descriptor?? [ 435.652396][ T5856] libceph: connect (1)[c::]:6789 error -101 [ 435.662132][ T5856] libceph: mon0 (1)[c::]:6789 connect error [ 435.833785][ T9635] ceph: No mds server is up or the cluster is laggy [ 436.033160][ T9308] cp2112 0003:10C4:EA90.0018: unknown main item tag 0x0 [ 436.072744][ T9308] cp2112 0003:10C4:EA90.0018: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 436.219404][ T9308] cp2112 0003:10C4:EA90.0018: error requesting version [ 436.247934][ T9308] cp2112: probe of 0003:10C4:EA90.0018 failed with error -32 [ 436.415069][ T9655] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1148'. [ 437.387707][ T9664] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 437.399307][ T9664] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1152'. [ 437.983506][ T966] usb 3-1: USB disconnect, device number 19 [ 440.118437][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.125247][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.155805][ T9683] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 440.218209][ T9683] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1158'. [ 440.480186][ T9684] ceph: No mds server is up or the cluster is laggy [ 441.506280][ T9696] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 441.517533][ T9696] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1161'. [ 442.172084][ T964] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 442.353434][ T964] usb 3-1: Using ep0 maxpacket: 16 [ 442.373116][ T964] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 442.389165][ T964] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 442.399318][ T964] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 442.410742][ T964] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.498355][ T964] usb 3-1: config 0 descriptor?? [ 442.952523][ T9308] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 443.054572][ T964] hid-multitouch 0003:1FD2:6007.0019: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.2-1/input0 [ 443.170384][ T9308] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 443.292742][ T9308] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 443.376753][ T9308] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 443.401944][ T9308] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.421200][ T9308] usb 5-1: config 0 descriptor?? [ 443.649086][ T9728] veth0_to_team: entered promiscuous mode [ 443.655079][ T9728] veth0_to_team: entered allmulticast mode [ 443.864871][ T9308] cp2112 0003:10C4:EA90.001A: unknown main item tag 0x0 [ 443.879779][ T9308] cp2112 0003:10C4:EA90.001A: hidraw1: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 443.965088][ T966] libceph: connect (1)[c::]:6789 error -101 [ 443.971186][ T966] libceph: mon0 (1)[c::]:6789 connect error [ 444.063111][ T9308] cp2112 0003:10C4:EA90.001A: error requesting version [ 444.071388][ T9308] cp2112: probe of 0003:10C4:EA90.001A failed with error -32 [ 444.243473][ T9308] libceph: connect (1)[c::]:6789 error -101 [ 444.249554][ T9308] libceph: mon0 (1)[c::]:6789 connect error [ 444.556243][ T9732] ceph: No mds server is up or the cluster is laggy [ 444.923218][ T9748] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1176'. [ 444.941216][ T966] usb 3-1: USB disconnect, device number 20 [ 445.672905][ T5808] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 445.993828][ T5808] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 446.013902][ T966] usb 5-1: USB disconnect, device number 9 [ 446.021995][ T5808] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 446.041407][ T5808] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 446.067727][ T5808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.089785][ T5808] usb 4-1: config 0 descriptor?? [ 446.486314][ T9769] ======================================================= [ 446.486314][ T9769] WARNING: The mand mount option has been deprecated and [ 446.486314][ T9769] and is ignored by this kernel. Remove the mand [ 446.486314][ T9769] option from the mount to silence this warning. [ 446.486314][ T9769] ======================================================= [ 446.530662][ T5808] cp2112 0003:10C4:EA90.001B: unknown main item tag 0x0 [ 446.542299][ T9769] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 446.602836][ T5808] cp2112 0003:10C4:EA90.001B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 446.764159][ T5808] cp2112 0003:10C4:EA90.001B: error requesting version [ 446.819693][ T5808] cp2112: probe of 0003:10C4:EA90.001B failed with error -32 [ 447.343068][ T9774] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1186'. [ 448.518609][ T966] usb 4-1: USB disconnect, device number 14 [ 449.959598][ T9802] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 449.994382][ T9802] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1195'. [ 450.167179][ T9807] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1196'. [ 452.313634][ T9817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1200'. [ 452.323771][ T9817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1200'. [ 452.335248][ T9817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1200'. [ 452.345378][ T9817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1200'. [ 452.355891][ T9817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1200'. [ 452.368138][ T9817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1200'. [ 452.379076][ T9817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1200'. [ 452.390995][ T9817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1200'. [ 452.402134][ T9817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1200'. [ 452.413390][ T9817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1200'. [ 452.424816][ T9817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1200'. [ 452.434987][ T9817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1200'. [ 452.446424][ T9817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1200'. [ 452.457888][ T9817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1200'. [ 454.514954][ T9841] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 455.362264][ T9308] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 455.574691][ T9308] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 455.622073][ T9308] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 455.652551][ T9308] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 455.673740][ T9308] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.687428][ T9308] usb 5-1: config 0 descriptor?? [ 456.477037][ T9308] cp2112 0003:10C4:EA90.001C: unknown main item tag 0x0 [ 456.514823][ T9308] cp2112 0003:10C4:EA90.001C: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 456.622904][ T9308] cp2112 0003:10C4:EA90.001C: error requesting version [ 456.651043][ T9308] cp2112: probe of 0003:10C4:EA90.001C failed with error -32 [ 456.809836][ T9860] IPVS: length: 91 != 1368 [ 458.941677][ T9880] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 459.001948][ T9880] __nla_validate_parse: 40 callbacks suppressed [ 459.001960][ T9880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1221'. [ 459.267940][ T5856] usb 5-1: USB disconnect, device number 10 [ 459.611991][ T9892] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 460.182029][ T5856] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 460.552153][ T5856] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 460.581822][ T5856] usb 5-1: config 0 interface 0 has no altsetting 0 [ 460.614271][ T5856] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 460.631399][ T5856] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.660990][ T5856] usb 5-1: Product: syz [ 460.713395][ T5856] usb 5-1: Manufacturer: syz [ 460.735460][ T5856] usb 5-1: SerialNumber: syz [ 460.883191][ T5856] usb 5-1: config 0 descriptor?? [ 460.959065][ T5856] usb 5-1: selecting invalid altsetting 0 [ 462.554509][ T8] usb 5-1: USB disconnect, device number 11 [ 462.775867][ T9925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 462.790203][ T9925] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1235'. [ 463.082335][ T9930] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 466.180071][ T9957] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 466.183526][ T9956] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 466.589987][ T9958] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1245'. [ 467.220293][ T9951] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1242'. [ 470.794351][ T9985] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 471.154415][ T9989] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1254'. [ 471.998980][T10005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 472.258664][T10005] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1259'. [ 472.371992][ T5856] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 474.647024][ T5856] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 474.690003][ T5856] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 474.701373][ T5856] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 474.711142][ T5856] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.722255][ T5856] usb 3-1: config 0 descriptor?? [ 476.989625][T10025] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1265'. [ 477.984516][ T5856] usb 3-1: can't set config #0, error -71 [ 478.008531][ T5856] usb 3-1: USB disconnect, device number 21 [ 478.062400][T10041] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 478.916714][ T5856] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 479.432088][ T5856] usb 5-1: Using ep0 maxpacket: 8 [ 479.447201][ T5856] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 479.499003][ T5856] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 479.573658][ T5856] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 479.669835][ T5856] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 479.733673][ T5856] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.787961][ T5856] usb 5-1: Product: syz [ 479.834776][ T5856] usb 5-1: Manufacturer: syz [ 479.915539][ T5856] usb 5-1: SerialNumber: syz [ 482.287026][ T5856] cdc_ncm 5-1:1.0: bind() failure [ 482.318288][ T5856] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 482.372983][ T5856] cdc_ncm 5-1:1.1: bind() failure [ 482.435507][ T5856] usb 5-1: USB disconnect, device number 12 [ 482.714794][T10069] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1275'. [ 482.885042][ T5857] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 483.071973][ T5857] usb 3-1: Using ep0 maxpacket: 16 [ 483.078729][ T5857] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 483.090236][ T5857] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 483.101072][ T5857] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 483.110388][ T5857] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.121028][ T5857] usb 3-1: config 0 descriptor?? [ 483.161981][ T964] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 483.344064][ T964] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 483.355492][ T964] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 483.366267][ T964] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 483.375542][ T964] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.386043][ T964] usb 5-1: config 0 descriptor?? [ 483.539692][ T5857] hid-multitouch 0003:1FD2:6007.001D: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.2-1/input0 [ 483.799943][ T964] cp2112 0003:10C4:EA90.001E: unknown main item tag 0x0 [ 483.822301][ T964] cp2112 0003:10C4:EA90.001E: hidraw1: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 484.594476][ T964] cp2112 0003:10C4:EA90.001E: error requesting version [ 484.607356][ T964] cp2112: probe of 0003:10C4:EA90.001E failed with error -32 [ 485.140725][T10099] netlink: 'syz.3.1284': attribute type 11 has an invalid length. [ 485.514903][ T5856] usb 3-1: USB disconnect, device number 22 [ 485.797748][T10109] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 485.969392][ T964] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 486.115581][ T5808] usb 5-1: USB disconnect, device number 13 [ 486.207717][ T964] usb 4-1: Using ep0 maxpacket: 8 [ 486.476948][ T964] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 486.623681][ T964] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 486.654714][ T964] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 486.674624][ T964] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 486.691072][ T964] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.722217][ T964] usb 4-1: Product: syz [ 486.729203][ T964] usb 4-1: Manufacturer: syz [ 486.770425][ T964] usb 4-1: SerialNumber: syz [ 489.250160][ T964] cdc_ncm 4-1:1.0: bind() failure [ 489.267294][ T964] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 489.320842][ T964] cdc_ncm 4-1:1.1: bind() failure [ 489.361800][ T964] usb 4-1: USB disconnect, device number 15 [ 489.802760][ T5808] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 490.012543][ T5808] usb 5-1: Using ep0 maxpacket: 16 [ 490.063196][ T964] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 490.110622][ T5808] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 490.300219][ T5808] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 490.329279][ T5808] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 490.340006][ T5808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.359776][ T5808] usb 5-1: config 0 descriptor?? [ 490.394612][ T964] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 490.430164][ T964] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 490.453090][ T964] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 490.464099][ T964] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.504254][ T964] usb 4-1: config 0 descriptor?? [ 490.808589][ T5808] hid-multitouch 0003:1FD2:6007.001F: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.4-1/input0 [ 490.950332][ T964] cp2112 0003:10C4:EA90.0020: unknown main item tag 0x0 [ 490.970955][ T964] cp2112 0003:10C4:EA90.0020: hidraw1: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 491.133847][ T964] cp2112 0003:10C4:EA90.0020: error requesting version [ 491.150820][ T964] cp2112: probe of 0003:10C4:EA90.0020 failed with error -32 [ 492.423889][ T966] usb 5-1: USB disconnect, device number 14 [ 492.877097][ T5857] usb 4-1: USB disconnect, device number 16 [ 492.972494][ T964] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 493.181975][ T964] usb 3-1: Using ep0 maxpacket: 8 [ 493.290050][ T964] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 493.302134][ T964] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 493.312245][ T964] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 493.336860][ T964] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 493.716953][ T964] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.725307][ T964] usb 3-1: Product: syz [ 493.729529][ T964] usb 3-1: Manufacturer: syz [ 493.734217][ T964] usb 3-1: SerialNumber: syz [ 494.012285][ T5857] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 494.214022][ T5857] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 494.225080][ T5857] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 494.235040][ T5857] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 494.245377][ T5857] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.272836][ T5857] usb 4-1: config 0 descriptor?? [ 494.806326][ T5857] cp2112 0003:10C4:EA90.0021: unknown main item tag 0x0 [ 494.827703][ T5857] cp2112 0003:10C4:EA90.0021: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 494.923191][ T5857] cp2112 0003:10C4:EA90.0021: error requesting version [ 494.938474][ T5857] cp2112: probe of 0003:10C4:EA90.0021 failed with error -32 [ 495.696739][ T964] cdc_ncm 3-1:1.0: bind() failure [ 495.719712][ T964] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 495.740958][ T964] cdc_ncm 3-1:1.1: bind() failure [ 495.768520][ T964] usb 3-1: USB disconnect, device number 23 [ 496.422627][ T966] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 496.614742][ T966] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 496.627048][ T966] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 496.648223][ T966] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 496.668595][ T966] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.683136][ T966] usb 5-1: config 0 descriptor?? [ 496.736705][ T9308] usb 4-1: USB disconnect, device number 17 [ 497.289498][ T966] cp2112 0003:10C4:EA90.0022: unknown main item tag 0x0 [ 497.426398][ T966] cp2112 0003:10C4:EA90.0022: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 497.523001][ T966] cp2112 0003:10C4:EA90.0022: error requesting version [ 497.680690][ T966] cp2112: probe of 0003:10C4:EA90.0022 failed with error -32 [ 498.501877][ C0] hrtimer: interrupt took 48182 ns [ 499.150229][T10247] trusted_key: syz.3.1325 sent an empty control message without MSG_MORE. [ 499.260617][ T8] usb 5-1: USB disconnect, device number 15 [ 499.462089][T10187] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 499.672124][T10187] usb 3-1: Using ep0 maxpacket: 8 [ 499.701286][T10187] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 499.745509][T10187] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 499.795268][T10187] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 499.848250][T10187] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 499.896635][T10187] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.947364][T10187] usb 3-1: Product: syz [ 499.974519][T10187] usb 3-1: Manufacturer: syz [ 500.005628][T10187] usb 3-1: SerialNumber: syz [ 500.196643][T10252] 9pnet_fd: Insufficient options for proto=fd [ 500.391805][T10258] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1329'. [ 501.574672][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.585616][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.063510][T10187] cdc_ncm 3-1:1.0: bind() failure [ 503.112151][T10187] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 503.119011][T10187] cdc_ncm 3-1:1.1: bind() failure [ 503.142176][T10187] usb 3-1: USB disconnect, device number 24 [ 503.208542][T10264] veth0_to_team: entered promiscuous mode [ 503.229444][T10264] veth0_to_team: entered allmulticast mode [ 504.322128][T10187] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 504.366263][T10281] 9pnet_fd: Insufficient options for proto=fd [ 504.522065][T10187] usb 3-1: Using ep0 maxpacket: 16 [ 504.548166][T10187] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 504.559879][T10187] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 504.570803][T10187] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 504.580451][T10187] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.602321][ T5857] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 504.620902][T10187] usb 3-1: config 0 descriptor?? [ 504.641428][T10284] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 504.658627][T10284] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1338'. [ 504.814690][ T5857] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 504.825681][ T5857] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 504.845336][ T5857] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 504.854712][ T5857] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.897316][ T5857] usb 5-1: config 0 descriptor?? [ 505.054964][T10187] hid-multitouch 0003:1FD2:6007.0023: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.2-1/input0 [ 505.325381][ T5857] cp2112 0003:10C4:EA90.0024: unknown main item tag 0x0 [ 505.347757][ T5857] cp2112 0003:10C4:EA90.0024: hidraw1: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 505.447038][T10290] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1339'. [ 506.183308][ T5857] cp2112 0003:10C4:EA90.0024: error requesting version [ 506.217765][ T5857] cp2112: probe of 0003:10C4:EA90.0024 failed with error -32 [ 506.429643][T10187] usb 3-1: USB disconnect, device number 25 [ 507.635782][T10187] usb 5-1: USB disconnect, device number 16 [ 508.037487][T10315] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1348'. [ 508.676125][ T964] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 508.852117][ T964] usb 5-1: Using ep0 maxpacket: 16 [ 508.867999][ T964] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 508.881518][ T964] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 508.895622][ T964] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 508.905887][ T964] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.948305][ T964] usb 5-1: config 0 descriptor?? [ 510.021225][ T964] hid-multitouch 0003:1FD2:6007.0025: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.4-1/input0 [ 510.542052][ T8] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 510.750612][T10356] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1360'. [ 511.522410][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 511.535343][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 511.545185][ T8] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 511.556415][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.573109][ T8] usb 3-1: config 0 descriptor?? [ 511.574476][T10187] usb 5-1: USB disconnect, device number 17 [ 512.679766][ T8] cp2112 0003:10C4:EA90.0026: unknown main item tag 0x0 [ 512.702376][ T8] cp2112 0003:10C4:EA90.0026: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 512.818453][ T8] cp2112 0003:10C4:EA90.0026: error requesting version [ 512.848637][ T8] cp2112: probe of 0003:10C4:EA90.0026 failed with error -32 [ 513.419007][T10380] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 513.437862][T10380] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 513.448962][T10380] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 513.460174][T10380] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 513.484332][T10380] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 513.497006][T10380] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 513.511810][T10380] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 513.526419][T10380] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 513.547353][T10380] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 513.559684][T10380] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 513.859834][T10385] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1369'. [ 514.551540][ T966] usb 3-1: USB disconnect, device number 26 [ 515.221505][T10380] syz.3.1368 (10380) used greatest stack depth: 20392 bytes left [ 516.791983][ T966] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 517.122001][ T966] usb 3-1: Using ep0 maxpacket: 16 [ 517.139286][ T966] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 517.164293][ T966] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 517.188513][ T966] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 517.199290][ T966] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.210293][ T966] usb 3-1: config 0 descriptor?? [ 517.642611][ T966] hid-multitouch 0003:1FD2:6007.0027: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.2-1/input0 [ 519.187344][ T5856] usb 3-1: USB disconnect, device number 27 [ 519.792716][T10187] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 520.033093][T10187] usb 3-1: Using ep0 maxpacket: 8 [ 520.099129][T10187] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 520.139934][T10187] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 520.150276][T10187] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 520.167859][T10187] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 520.177284][T10187] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.185705][T10187] usb 3-1: Product: syz [ 520.190354][T10187] usb 3-1: Manufacturer: syz [ 520.195277][T10187] usb 3-1: SerialNumber: syz [ 522.375881][T10187] cdc_ncm 3-1:1.0: bind() failure [ 522.409139][T10187] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 522.483374][T10187] cdc_ncm 3-1:1.1: bind() failure [ 522.537712][T10187] usb 3-1: USB disconnect, device number 28 [ 526.905776][T10497] process 'syz.4.1401' launched './file1' with NULL argv: empty string added [ 528.575773][T10511] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 528.634595][T10513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 528.889754][T10513] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1406'. [ 530.572488][T10537] snd_dummy snd_dummy.0: control 2:16:0:syz0:-3 is already present [ 531.287780][T10545] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 532.962112][ T1195] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 533.172134][ T1195] usb 5-1: Using ep0 maxpacket: 8 [ 533.180015][T10566] kvm: pic: single mode not supported [ 533.180035][T10566] kvm: pic: level sensitive irq not supported [ 533.196063][ T1195] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 533.236807][ T1195] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 533.261986][ T1195] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 533.429740][ T1195] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 533.482612][ T1195] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.490658][ T1195] usb 5-1: Product: syz [ 533.538986][ T1195] usb 5-1: Manufacturer: syz [ 533.553984][ T1195] usb 5-1: SerialNumber: syz [ 533.697223][T10578] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 533.736932][T10578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1426'. [ 535.307359][ T1195] cdc_ncm 5-1:1.0: bind() failure [ 535.497661][ T1195] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 535.507512][ T1195] cdc_ncm 5-1:1.1: bind() failure [ 535.522162][ T1195] usb 5-1: USB disconnect, device number 18 [ 536.338614][T10612] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.1439'. [ 536.340791][T10614] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.1441'. [ 536.429875][T10616] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.1442'. [ 537.012086][T10623] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 537.434489][T10623] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1444'. [ 537.811975][ T966] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 537.985334][T10627] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 538.002814][ T966] usb 4-1: Using ep0 maxpacket: 8 [ 538.043888][ T966] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 538.100863][ T966] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 538.152772][ T966] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 538.244739][ T966] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 538.292102][ T966] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.303369][ T966] usb 4-1: Product: syz [ 538.307130][T10626] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1445'. [ 538.318170][ T966] usb 4-1: Manufacturer: syz [ 538.324458][ T966] usb 4-1: SerialNumber: syz [ 538.751604][T10630] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1446'. [ 539.389651][T10643] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.1451'. [ 539.451436][T10646] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.1452'. [ 540.922233][ T966] cdc_ncm 4-1:1.0: bind() failure [ 540.938633][ T966] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 540.956185][ T966] cdc_ncm 4-1:1.1: bind() failure [ 540.975927][ T966] usb 4-1: USB disconnect, device number 18 [ 541.529904][T10662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 541.597261][T10663] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1457'. [ 541.607084][T10660] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1458'. [ 542.530890][T10673] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.1462'. [ 543.799177][T10682] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.1465'. [ 544.136666][T10689] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1468'. [ 544.292405][ T5856] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 544.489476][T10697] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 544.491741][T10700] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1470'. [ 544.734864][ T5856] usb 4-1: Using ep0 maxpacket: 8 [ 544.802758][ T5856] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 544.826484][ T5856] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 544.869606][ T5856] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 544.888294][ T5856] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 544.899143][ T5856] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.911090][ T5856] usb 4-1: Product: syz [ 544.918108][ T5856] usb 4-1: Manufacturer: syz [ 544.927153][ T5856] usb 4-1: SerialNumber: syz [ 544.952362][T10702] kvm: pic: single mode not supported [ 544.952412][T10702] kvm: pic: level sensitive irq not supported [ 545.388159][T10685] x_tables: duplicate underflow at hook 1 [ 545.750694][T10713] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.1477'. [ 545.952386][T10718] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1479'. [ 546.002107][ T5808] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 546.254474][ T5808] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 546.270570][ T5808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.392978][ T5808] usb 3-1: config 0 descriptor?? [ 546.410195][ T5808] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 546.419931][ T5856] cdc_ncm 4-1:1.0: bind() failure [ 546.488495][ T5856] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 546.543701][ T5856] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 546.575167][T10735] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 546.739263][T10735] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1485'. [ 546.839436][ T5856] usbtest: probe of 4-1:1.1 failed with error -71 [ 547.083401][ T5856] usb 4-1: USB disconnect, device number 19 [ 548.246931][T10744] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.1487'. [ 548.371270][ T5808] gp8psk: usb in 128 operation failed. [ 548.393598][ T5808] gp8psk: usb in 137 operation failed. [ 548.400771][ T5808] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 548.403301][T10747] kvm: pic: single mode not supported [ 548.411161][T10747] kvm: pic: level sensitive irq not supported [ 548.416826][ T5808] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 548.448178][ T5808] usb 3-1: USB disconnect, device number 29 [ 548.658108][T10754] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1492'. [ 549.069633][T10762] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 550.612306][T10776] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 551.669155][T10789] overlayfs: missing 'lowerdir' [ 552.414445][T10799] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 553.370865][T10818] overlayfs: missing 'workdir' [ 553.932276][ T5808] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 554.122025][ T5808] usb 4-1: Using ep0 maxpacket: 8 [ 554.132572][ T5808] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 554.144983][ T5808] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 554.162599][ T5808] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 554.175263][ T5808] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 554.201570][ T5808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.225196][ T5808] usb 4-1: Product: syz [ 554.229576][ T5808] usb 4-1: Manufacturer: syz [ 554.239371][ T5808] usb 4-1: SerialNumber: syz [ 556.612931][ T5808] cdc_ncm 4-1:1.0: bind() failure [ 556.627789][ T5808] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 556.641232][ T5808] cdc_ncm 4-1:1.1: bind() failure [ 556.662508][ T5808] usb 4-1: USB disconnect, device number 20 [ 558.462080][ T9308] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 558.757570][ T9308] usb 4-1: Using ep0 maxpacket: 8 [ 558.812924][ T9308] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 559.064167][ T9308] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 559.082086][ T9308] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 559.108680][ T9308] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 559.126655][ T9308] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.162255][ T9308] usb 4-1: Product: syz [ 559.166468][ T9308] usb 4-1: Manufacturer: syz [ 559.182694][ T9308] usb 4-1: SerialNumber: syz [ 561.329710][ T9308] cdc_ncm 4-1:1.0: bind() failure [ 561.336865][ T9308] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 561.343774][ T9308] cdc_ncm 4-1:1.1: bind() failure [ 561.371413][ T9308] usb 4-1: USB disconnect, device number 21 [ 561.614939][T10942] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 561.699493][T10942] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1560'. [ 562.566041][T10956] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.1565'. [ 563.008335][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.014758][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.933657][ T966] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 564.142641][ T966] usb 5-1: Using ep0 maxpacket: 8 [ 564.155130][ T966] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 564.181225][ T966] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 564.212462][ T966] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 564.242538][ T966] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 564.265038][ T966] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.280708][ T966] usb 5-1: Product: syz [ 564.290914][ T966] usb 5-1: Manufacturer: syz [ 564.301017][ T966] usb 5-1: SerialNumber: syz [ 565.915174][ T966] cdc_ncm 5-1:1.0: bind() failure [ 565.977860][ T966] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 565.999908][ T966] cdc_ncm 5-1:1.1: bind() failure [ 566.015701][ T966] usb 5-1: USB disconnect, device number 19 [ 567.192297][ T5768] Bluetooth: hci2: command 0x0406 tx timeout [ 569.008568][T11039] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1592'. [ 570.122295][ T5768] Bluetooth: hci2: command 0x0406 tx timeout [ 571.392079][ T1195] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 571.585791][ T1195] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 572.422031][ T1195] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 572.442495][ T1195] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 572.451684][ T1195] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 572.477695][ T1195] usb 4-1: config 0 descriptor?? [ 572.549194][T11077] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1604'. [ 573.311975][ T5768] Bluetooth: hci2: command 0x0406 tx timeout [ 573.625054][ T1195] cp2112 0003:10C4:EA90.0028: unknown main item tag 0x0 [ 573.664606][ T1195] cp2112 0003:10C4:EA90.0028: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 573.807313][ T1195] cp2112 0003:10C4:EA90.0028: error requesting version [ 573.844082][ T1195] cp2112: probe of 0003:10C4:EA90.0028 failed with error -32 [ 573.961174][ T1195] libceph: connect (1)[c::]:6789 error -101 [ 573.991991][ T1195] libceph: mon0 (1)[c::]:6789 connect error [ 574.124252][ T966] usb 4-1: USB disconnect, device number 22 [ 574.254463][ T1195] libceph: connect (1)[c::]:6789 error -101 [ 574.261256][ T1195] libceph: mon0 (1)[c::]:6789 connect error [ 574.727494][T11094] ceph: No mds server is up or the cluster is laggy [ 576.832142][ T5768] Bluetooth: hci2: command 0x0406 tx timeout [ 580.460380][T11140] ceph: No mds server is up or the cluster is laggy [ 580.603603][ T5768] Bluetooth: hci3: unexpected event for opcode 0x2006 [ 582.043664][ T964] libceph: connect (1)[c::]:6789 error -101 [ 582.057185][ T964] libceph: mon0 (1)[c::]:6789 connect error [ 582.322968][ T964] libceph: connect (1)[c::]:6789 error -101 [ 582.339187][ T964] libceph: mon0 (1)[c::]:6789 connect error [ 582.348908][T11190] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 582.360918][T11190] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 582.711309][T11194] netlink: 'syz.4.1638': attribute type 72 has an invalid length. [ 582.851454][T11173] ceph: No mds server is up or the cluster is laggy [ 582.862971][ T964] libceph: connect (1)[c::]:6789 error -101 [ 582.890144][ T964] libceph: mon0 (1)[c::]:6789 connect error [ 583.072149][T10991] Bluetooth: hci2: command 0x0406 tx timeout [ 585.340512][T11218] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 585.367229][T11218] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 585.374238][T11220] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.1647'. [ 585.586712][T11226] kvm: pic: non byte write [ 585.593765][T11226] kvm: pic: non byte write [ 585.606743][ T9308] libceph: connect (1)[c::]:6789 error -101 [ 585.614366][ T9308] libceph: mon0 (1)[c::]:6789 connect error [ 585.622657][ T9308] libceph: connect (1)[c::]:6789 error -101 [ 585.640122][ T9308] libceph: mon0 (1)[c::]:6789 connect error [ 585.641124][T11226] kvm: pic: non byte write [ 585.660111][T11226] kvm: pic: non byte write [ 585.670360][T11226] kvm: pic: non byte write [ 585.680152][T11226] kvm: pic: single mode not supported [ 585.680171][T11226] kvm: pic: level sensitive irq not supported [ 585.902772][ T9308] libceph: connect (1)[c::]:6789 error -101 [ 585.916882][ T9308] libceph: mon0 (1)[c::]:6789 connect error [ 586.795473][ T966] libceph: connect (1)[c::]:6789 error -101 [ 586.801550][ T966] libceph: mon0 (1)[c::]:6789 connect error [ 587.108289][T11228] ceph: No mds server is up or the cluster is laggy [ 587.375960][T11250] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1658'. [ 587.734962][T11252] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.1656'. [ 587.752121][T10991] Bluetooth: hci2: command 0x0406 tx timeout [ 588.562338][ T9308] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 588.918037][ T9308] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 588.930564][ T9308] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 588.945333][ T9308] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 588.963391][ T9308] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.980638][ T9308] usb 5-1: config 0 descriptor?? [ 589.438288][ T9308] cp2112 0003:10C4:EA90.0029: unknown main item tag 0x0 [ 589.528156][ T9308] cp2112 0003:10C4:EA90.0029: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 589.663476][ T9308] cp2112 0003:10C4:EA90.0029: error requesting version [ 589.729438][ T9308] cp2112: probe of 0003:10C4:EA90.0029 failed with error -32 [ 590.510292][T11278] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.1667'. [ 590.902022][ T9308] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 591.050398][ T8] libceph: connect (1)[c::]:6789 error -101 [ 591.063323][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 591.092058][ T9308] usb 3-1: Using ep0 maxpacket: 16 [ 591.662771][ T8] libceph: connect (1)[c::]:6789 error -101 [ 591.939160][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 591.983560][ T964] usb 5-1: USB disconnect, device number 20 [ 591.988966][ T9308] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 592.082453][ T9308] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 592.120209][ T9308] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 592.141259][ T5768] Bluetooth: hci2: command 0x0406 tx timeout [ 592.152672][ T9308] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 592.172515][ T9308] usb 3-1: config 0 descriptor?? [ 592.257489][T11289] ceph: No mds server is up or the cluster is laggy [ 592.629177][ T9308] hid-multitouch 0003:1FD2:6007.002A: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.2-1/input0 [ 592.656299][T11310] 9pnet_fd: Insufficient options for proto=fd [ 592.791558][ T964] usb 3-1: USB disconnect, device number 30 [ 594.682205][ T1195] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 594.865491][ T1195] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 594.921951][T10991] Bluetooth: hci2: command 0x0406 tx timeout [ 594.942933][ T1195] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 594.971366][ T1195] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 594.991414][ T1195] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.047311][ T1195] usb 5-1: config 0 descriptor?? [ 595.476784][ T1195] cp2112 0003:10C4:EA90.002B: unknown main item tag 0x0 [ 595.503229][ T1195] cp2112 0003:10C4:EA90.002B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 595.675921][ T1195] cp2112 0003:10C4:EA90.002B: error requesting version [ 595.696294][ T1195] cp2112: probe of 0003:10C4:EA90.002B failed with error -32 [ 596.292105][T11340] ceph: No mds server is up or the cluster is laggy [ 597.552125][ T5768] Bluetooth: hci2: command 0x0406 tx timeout [ 597.801737][ T8] usb 5-1: USB disconnect, device number 21 [ 598.824322][T11372] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.1699'. [ 600.992633][T10991] Bluetooth: hci2: command 0x0406 tx timeout [ 601.208183][T11400] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.1710'. [ 602.674718][T11412] 9pnet_fd: Insufficient options for proto=fd [ 603.783930][T11432] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1720'. [ 603.807452][T11428] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.1721'. [ 603.828590][T11430] kvm: pic: non byte write [ 603.834767][T11430] kvm: pic: level sensitive irq not supported [ 603.834846][T11430] kvm: pic: non byte write [ 603.865731][T11430] kvm: pic: non byte write [ 603.870720][T11430] kvm: pic: level sensitive irq not supported [ 603.871512][T11430] kvm: pic: non byte write [ 603.902272][T11430] kvm: pic: level sensitive irq not supported [ 603.902343][T11430] kvm: pic: non byte write [ 603.923423][T11430] kvm: pic: single mode not supported [ 603.923445][T11430] kvm: pic: level sensitive irq not supported [ 603.942775][T11437] netlink: 'syz.4.1723': attribute type 11 has an invalid length. [ 603.943833][T11436] mmap: syz.0.1720 (11436) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 603.949142][T11430] kvm: pic: single mode not supported [ 603.969845][T11430] kvm: pic: level sensitive irq not supported [ 603.993337][T11430] kvm: pic: non byte write [ 603.995399][T11432] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1720'. [ 604.009915][T11430] kvm: pic: level sensitive irq not supported [ 604.752333][ T5768] Bluetooth: hci2: command 0x0406 tx timeout [ 605.586495][T11459] netlink: 'syz.2.1732': attribute type 11 has an invalid length. [ 606.967736][T11475] kvm: pic: non byte write [ 606.989831][T11475] kvm: pic: level sensitive irq not supported [ 606.989914][T11475] kvm: pic: non byte write [ 607.083106][T11475] kvm: pic: non byte write [ 607.191251][T11475] kvm: pic: level sensitive irq not supported [ 607.192152][T11475] kvm: pic: non byte write [ 607.213389][T11475] kvm: pic: level sensitive irq not supported [ 607.213831][T11475] kvm: pic: single mode not supported [ 607.219980][T11475] kvm: pic: level sensitive irq not supported [ 607.472205][ T5768] Bluetooth: hci2: command 0x0406 tx timeout [ 607.543113][T11475] kvm: pic: single mode not supported [ 607.822580][T11493] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1744'. [ 613.711961][T10991] Bluetooth: hci2: command 0x0406 tx timeout [ 616.273056][T10991] Bluetooth: hci2: command 0x0406 tx timeout [ 616.611607][T11624] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1789'. [ 616.822136][ T966] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 617.031969][ T966] usb 5-1: Using ep0 maxpacket: 16 [ 617.047045][ T966] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 617.058303][ T966] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 617.068564][ T966] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 617.082359][ T966] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.109018][ T966] usb 5-1: config 0 descriptor?? [ 617.713097][ T966] hid-multitouch 0003:1FD2:6007.002C: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.4-1/input0 [ 618.099992][ T966] usb 5-1: USB disconnect, device number 22 [ 618.518623][ T5768] Bluetooth: hci2: command 0x0406 tx timeout [ 618.540102][T11636] fido_id[11636]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 619.594975][T11660] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1798'. [ 620.902028][T10187] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 620.982229][ T966] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 621.092175][T10187] usb 5-1: Using ep0 maxpacket: 16 [ 621.127887][T10187] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 621.172266][T10187] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 621.187280][T10187] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 621.199052][T10187] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.224734][T10187] usb 5-1: config 0 descriptor?? [ 621.300896][ T966] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 621.355801][ T966] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.511830][ T966] usb 4-1: config 0 descriptor?? [ 621.604294][ T966] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 621.668463][T10991] Bluetooth: hci2: command 0x0406 tx timeout [ 621.765286][T10187] hid-multitouch 0003:1FD2:6007.002D: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.4-1/input0 [ 622.332394][T10187] usb 5-1: USB disconnect, device number 23 [ 622.406124][T11688] fido_id[11688]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 622.447403][T11694] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1810'. [ 623.522498][ T966] gp8psk: usb in 128 operation failed. [ 623.553878][ T966] gp8psk: usb in 137 operation failed. [ 623.569547][ T966] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 623.605712][ T966] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 624.559347][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.565785][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.576430][ T966] usb 4-1: USB disconnect, device number 23 [ 624.761010][T11715] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 624.803892][T11715] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1817'. [ 624.846745][ T5856] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 625.157751][ T5856] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 625.256161][ T5856] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 625.287385][ T5856] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 625.301079][ T5856] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.337318][ T5856] usb 3-1: config 0 descriptor?? [ 625.774432][ T5856] cp2112 0003:10C4:EA90.002E: unknown main item tag 0x0 [ 625.791671][T11722] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1820'. [ 625.805949][ T5856] cp2112 0003:10C4:EA90.002E: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 625.978713][ T5856] cp2112 0003:10C4:EA90.002E: error requesting version [ 625.997846][ T5856] cp2112: probe of 0003:10C4:EA90.002E failed with error -32 [ 626.672108][T10991] Bluetooth: hci2: command 0x0406 tx timeout [ 627.721392][ T964] usb 3-1: USB disconnect, device number 31 [ 628.752160][T10991] Bluetooth: hci2: command 0x0406 tx timeout [ 629.692895][T11752] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 630.070872][T11751] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1831'. [ 630.285199][T11761] kvm: pic: single mode not supported [ 630.287306][T11761] picdev_write: 2 callbacks suppressed [ 630.287318][T11761] kvm: pic: non byte write [ 630.311213][T11761] kvm: pic: non byte write [ 631.072650][ T966] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 631.271930][ T966] usb 5-1: Using ep0 maxpacket: 16 [ 631.285731][ T966] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 631.297675][ T966] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 631.309691][ T966] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 631.319800][ T966] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.340524][ T966] usb 5-1: config 0 descriptor?? [ 631.792471][ T966] hid-multitouch 0003:1FD2:6007.002F: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.4-1/input0 [ 632.739075][ T964] usb 5-1: USB disconnect, device number 24 [ 632.752104][ T5768] Bluetooth: hci2: command 0x0406 tx timeout [ 634.198367][T11814] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 635.873171][ T5768] Bluetooth: hci2: command 0x0406 tx timeout [ 637.560579][T11849] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 638.795666][ T5856] libceph: connect (1)[c::]:6789 error -101 [ 638.822983][ T5856] libceph: mon0 (1)[c::]:6789 connect error [ 639.322320][ T5856] libceph: connect (1)[c::]:6789 error -101 [ 639.328393][ T5856] libceph: mon0 (1)[c::]:6789 connect error [ 639.401556][T10991] Bluetooth: hci2: command 0x0406 tx timeout [ 639.446153][T11864] ceph: No mds server is up or the cluster is laggy [ 640.968257][T11886] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 642.772305][ T5768] Bluetooth: hci2: command 0x0406 tx timeout [ 643.500462][T11918] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 645.092295][ T964] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 645.413740][ T964] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 645.459050][ T964] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 645.472087][ T964] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 645.472370][T10991] Bluetooth: hci2: command 0x0406 tx timeout [ 645.481208][ T964] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.483490][ T964] usb 4-1: config 0 descriptor?? [ 645.962434][ T964] cp2112 0003:10C4:EA90.0030: unknown main item tag 0x0 [ 646.016840][ T964] cp2112 0003:10C4:EA90.0030: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 646.150696][ T964] cp2112 0003:10C4:EA90.0030: error requesting version [ 646.174251][ T964] cp2112: probe of 0003:10C4:EA90.0030 failed with error -32 [ 647.893561][ T966] usb 4-1: USB disconnect, device number 24 [ 648.482072][ T966] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 648.695392][ T966] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 648.712035][ T966] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.730817][ T966] usb 4-1: config 0 descriptor?? [ 648.749387][ T966] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 648.758409][ T5768] Bluetooth: hci2: command 0x0406 tx timeout [ 649.820829][ T966] gp8psk: usb in 128 operation failed. [ 649.828837][ T966] gp8psk: usb in 137 operation failed. [ 649.849012][ T966] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 649.861668][ T966] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 649.882355][ T966] usb 4-1: USB disconnect, device number 25 [ 650.472143][ T966] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 650.712048][ T966] usb 5-1: Using ep0 maxpacket: 16 [ 650.726804][ T966] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 650.821972][ T966] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 650.851489][ T5838] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 650.891178][ T966] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 651.025309][ T966] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.065770][ T966] usb 5-1: Product: syz [ 651.070018][ T966] usb 5-1: Manufacturer: syz [ 651.089218][ T966] usb 5-1: SerialNumber: syz [ 651.116424][ T5838] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 651.127950][ T5838] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 651.145261][ T5838] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 651.171205][ T5838] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.200798][ T5838] usb 3-1: config 0 descriptor?? [ 651.340182][ T966] usb 5-1: 0:2 : does not exist [ 651.377987][ T966] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 651.485043][ T966] usb 5-1: USB disconnect, device number 25 [ 651.622391][ T5838] cp2112 0003:10C4:EA90.0031: unknown main item tag 0x0 [ 651.640717][ T5838] cp2112 0003:10C4:EA90.0031: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 651.729659][T10991] Bluetooth: hci2: command 0x0406 tx timeout [ 651.826625][ T5838] cp2112 0003:10C4:EA90.0031: error requesting version [ 652.472550][ T5838] cp2112: probe of 0003:10C4:EA90.0031 failed with error -32 [ 654.708974][ T964] usb 3-1: USB disconnect, device number 32 [ 655.201297][ T5838] libceph: connect (1)[c::]:6789 error -101 [ 655.233055][ T5838] libceph: mon0 (1)[c::]:6789 connect error [ 655.257604][ T5838] libceph: connect (1)[c::]:6789 error -101 [ 655.312178][ T5838] libceph: mon0 (1)[c::]:6789 connect error [ 655.354560][T12025] ceph: No mds server is up or the cluster is laggy [ 657.315243][ T5768] Bluetooth: hci2: command 0x0406 tx timeout [ 658.663799][T12060] ceph: No mds server is up or the cluster is laggy [ 659.232153][ T964] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 659.437905][ T964] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 659.552200][ T964] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 659.568439][ T964] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 659.578682][ T964] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.027908][ T964] usb 5-1: config 0 descriptor?? [ 660.387713][T12089] macsec2: entered promiscuous mode [ 660.396956][T12089] macvlan1: entered promiscuous mode [ 660.414714][T12089] macvlan1: left promiscuous mode [ 660.445553][ T964] cp2112 0003:10C4:EA90.0032: unknown main item tag 0x0 [ 660.452070][T12090] loop8: detected capacity change from 0 to 1 [ 660.496346][ T964] cp2112 0003:10C4:EA90.0032: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 660.524043][T12090] Dev loop8: unable to read RDB block 1 [ 660.559595][T12090] loop8: unable to read partition table [ 660.572287][T12090] loop8: partition table beyond EOD, truncated [ 660.579405][T12090] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 660.641754][ T964] cp2112 0003:10C4:EA90.0032: error requesting version [ 660.691608][ T964] cp2112: probe of 0003:10C4:EA90.0032 failed with error -32 [ 662.472110][ T964] usb 5-1: USB disconnect, device number 26 [ 663.527145][T12114] ceph: No mds server is up or the cluster is laggy [ 664.952316][ T5808] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 665.199374][ T5808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 665.937747][ T5808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 665.948103][ T5808] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 665.958576][ T5808] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.973062][ T5808] usb 3-1: config 0 descriptor?? [ 666.397460][ T5808] cp2112 0003:10C4:EA90.0033: unknown main item tag 0x0 [ 666.410858][ T5808] cp2112 0003:10C4:EA90.0033: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 666.592202][ T5808] cp2112 0003:10C4:EA90.0033: error requesting version [ 666.716869][ T5808] cp2112: probe of 0003:10C4:EA90.0033 failed with error -32 [ 666.832426][ T8] libceph: connect (1)[c::]:6789 error -101 [ 666.849278][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 667.222022][T12166] ceph: No mds server is up or the cluster is laggy [ 668.360049][ T5856] usb 3-1: USB disconnect, device number 33 [ 669.832121][ T5808] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 670.145000][ T5808] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 670.190472][ T5808] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 670.204987][ T5808] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 670.214454][ T5808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.231616][ T5808] usb 5-1: config 0 descriptor?? [ 670.243104][T12217] ================================================================== [ 670.251180][T12217] BUG: KASAN: slab-use-after-free in rose_get_neigh+0x391/0x990 [ 670.258815][T12217] Read of size 1 at addr ffff888025a5d030 by task syz.2.1983/12217 [ 670.266688][T12217] [ 670.269003][T12217] CPU: 1 PID: 12217 Comm: syz.2.1983 Not tainted 6.6.95-syzkaller #0 [ 670.277047][T12217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 670.287093][T12217] Call Trace: [ 670.290358][T12217] [ 670.293277][T12217] dump_stack_lvl+0x16c/0x230 [ 670.297944][T12217] ? __lock_acquire+0x7c80/0x7c80 [ 670.302957][T12217] ? show_regs_print_info+0x20/0x20 [ 670.308136][T12217] ? load_image+0x3b0/0x3b0 [ 670.312654][T12217] ? __virt_addr_valid+0x469/0x540 [ 670.317775][T12217] print_report+0xac/0x230 [ 670.322184][T12217] ? rose_get_neigh+0x391/0x990 [ 670.327048][T12217] kasan_report+0x117/0x150 [ 670.331548][T12217] ? rose_get_neigh+0x391/0x990 [ 670.336395][T12217] rose_get_neigh+0x391/0x990 [ 670.341060][T12217] rose_connect+0x417/0x10a0 [ 670.345639][T12217] ? aa_sk_perm+0x7fc/0x930 [ 670.350125][T12217] ? rose_bind+0x7c0/0x7c0 [ 670.354530][T12217] ? aa_af_perm+0x200/0x2b0 [ 670.359039][T12217] ? tomoyo_socket_connect_permission+0x164/0x290 [ 670.365495][T12217] ? __might_fault+0xaa/0x120 [ 670.370170][T12217] ? bpf_lsm_socket_connect+0x9/0x10 [ 670.375438][T12217] ? security_socket_connect+0x80/0xa0 [ 670.380882][T12217] ? rose_bind+0x7c0/0x7c0 [ 670.385290][T12217] __sys_connect+0x397/0x420 [ 670.389862][T12217] ? __sys_connect_file+0x180/0x180 [ 670.395046][T12217] __x64_sys_connect+0x7a/0x90 [ 670.399790][T12217] do_syscall_64+0x55/0xb0 [ 670.404192][T12217] ? clear_bhb_loop+0x40/0x90 [ 670.408851][T12217] ? clear_bhb_loop+0x40/0x90 [ 670.413508][T12217] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 670.419419][T12217] RIP: 0033:0x7fc14bb8e929 [ 670.423842][T12217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 670.443430][T12217] RSP: 002b:00007fc14c93e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 670.451825][T12217] RAX: ffffffffffffffda RBX: 00007fc14bdb6080 RCX: 00007fc14bb8e929 [ 670.459779][T12217] RDX: 0000000000000040 RSI: 0000200000000040 RDI: 0000000000000008 [ 670.467728][T12217] RBP: 00007fc14bc10b39 R08: 0000000000000000 R09: 0000000000000000 [ 670.475680][T12217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 670.483631][T12217] R13: 0000000000000000 R14: 00007fc14bdb6080 R15: 00007fff0b634278 [ 670.491589][T12217] [ 670.494591][T12217] [ 670.496903][T12217] Allocated by task 12185: [ 670.501300][T12217] kasan_set_track+0x4e/0x70 [ 670.505885][T12217] __kasan_kmalloc+0x8f/0xa0 [ 670.510459][T12217] sctp_endpoint_new+0x86/0xa10 [ 670.515293][T12217] sctp_init_sock+0x961/0x11f0 [ 670.520041][T12217] inet_create+0xccb/0xff0 [ 670.524440][T12217] __sock_create+0x4a6/0x940 [ 670.529015][T12217] __sys_socket+0xd7/0x1a0 [ 670.533411][T12217] __x64_sys_socket+0x7a/0x90 [ 670.538068][T12217] do_syscall_64+0x55/0xb0 [ 670.542464][T12217] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 670.548338][T12217] [ 670.550641][T12217] Freed by task 7211: [ 670.554597][T12217] kasan_set_track+0x4e/0x70 [ 670.559176][T12217] kasan_save_free_info+0x2e/0x50 [ 670.564181][T12217] ____kasan_slab_free+0x126/0x1e0 [ 670.569272][T12217] slab_free_freelist_hook+0x130/0x1b0 [ 670.574709][T12217] __kmem_cache_free+0xba/0x1f0 [ 670.579544][T12217] rcu_core+0xcc4/0x1720 [ 670.583766][T12217] handle_softirqs+0x280/0x820 [ 670.588513][T12217] __irq_exit_rcu+0xc7/0x190 [ 670.593094][T12217] irq_exit_rcu+0x9/0x20 [ 670.597316][T12217] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 670.602933][T12217] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 670.608889][T12217] [ 670.611211][T12217] Last potentially related work creation: [ 670.616904][T12217] kasan_save_stack+0x3e/0x60 [ 670.621564][T12217] __kasan_record_aux_stack+0xaf/0xc0 [ 670.626919][T12217] call_rcu+0x14f/0x920 [ 670.631053][T12217] sctp_destroy_sock+0x1ec/0x370 [ 670.635970][T12217] sk_common_release+0x6f/0x310 [ 670.640799][T12217] sctp_close+0x783/0x900 [ 670.645102][T12217] inet_release+0x180/0x200 [ 670.649595][T12217] sock_close+0xbd/0x230 [ 670.653844][T12217] __fput+0x234/0x970 [ 670.657802][T12217] task_work_run+0x1ce/0x250 [ 670.662370][T12217] exit_to_user_mode_loop+0xe6/0x110 [ 670.667634][T12217] exit_to_user_mode_prepare+0xb1/0x140 [ 670.673167][T12217] syscall_exit_to_user_mode+0x1a/0x50 [ 670.678601][T12217] do_syscall_64+0x61/0xb0 [ 670.683002][T12217] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 670.688877][T12217] [ 670.691190][T12217] Second to last potentially related work creation: [ 670.697762][T12217] kasan_save_stack+0x3e/0x60 [ 670.702425][T12217] __kasan_record_aux_stack+0xaf/0xc0 [ 670.707778][T12217] insert_work+0x3d/0x310 [ 670.712084][T12217] __queue_work+0xd2c/0x1020 [ 670.716654][T12217] call_timer_fn+0x16e/0x530 [ 670.721220][T12217] __run_timers+0x558/0x7d0 [ 670.725698][T12217] run_timer_softirq+0x67/0xf0 [ 670.730437][T12217] handle_softirqs+0x280/0x820 [ 670.735196][T12217] __irq_exit_rcu+0xc7/0x190 [ 670.739761][T12217] irq_exit_rcu+0x9/0x20 [ 670.743978][T12217] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 670.749591][T12217] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 670.755555][T12217] [ 670.757860][T12217] The buggy address belongs to the object at ffff888025a5d000 [ 670.757860][T12217] which belongs to the cache kmalloc-512 of size 512 [ 670.771903][T12217] The buggy address is located 48 bytes inside of [ 670.771903][T12217] freed 512-byte region [ffff888025a5d000, ffff888025a5d200) [ 670.785587][T12217] [ 670.787893][T12217] The buggy address belongs to the physical page: [ 670.794290][T12217] page:ffffea0000969700 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x25a5c [ 670.804419][T12217] head:ffffea0000969700 order:2 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 670.813328][T12217] ksm flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 670.821636][T12217] page_type: 0xffffffff() [ 670.825946][T12217] raw: 00fff00000000840 ffff888017841c80 ffffea00009ad400 dead000000000003 [ 670.834508][T12217] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 670.843072][T12217] page dumped because: kasan: bad access detected [ 670.849465][T12217] page_owner tracks the page as allocated [ 670.855155][T12217] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1821, tgid 1821 (kworker/u4:3), ts 8165197883, free_ts 0 [ 670.875553][T12217] post_alloc_hook+0x1cd/0x210 [ 670.880325][T12217] get_page_from_freelist+0x195c/0x19f0 [ 670.885877][T12217] __alloc_pages+0x1e3/0x460 [ 670.890445][T12217] alloc_slab_page+0x5d/0x170 [ 670.895108][T12217] new_slab+0x87/0x2e0 [ 670.899162][T12217] ___slab_alloc+0xc6d/0x12f0 [ 670.903821][T12217] __kmem_cache_alloc_node+0x1a2/0x260 [ 670.909266][T12217] kmalloc_trace+0x2a/0xe0 [ 670.913662][T12217] alloc_bprm+0x56/0x9c0 [ 670.917890][T12217] kernel_execve+0x98/0x9c0 [ 670.922382][T12217] call_usermodehelper_exec_async+0x20b/0x350 [ 670.928447][T12217] ret_from_fork+0x48/0x80 [ 670.932852][T12217] ret_from_fork_asm+0x11/0x20 [ 670.937603][T12217] page_owner free stack trace missing [ 670.942949][T12217] [ 670.945252][T12217] Memory state around the buggy address: [ 670.950859][T12217] ffff888025a5cf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 670.958908][T12217] ffff888025a5cf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 670.966949][T12217] >ffff888025a5d000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 670.974987][T12217] ^ [ 670.980598][T12217] ffff888025a5d080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 670.988635][T12217] ffff888025a5d100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 670.996670][T12217] ================================================================== [ 671.004857][T12217] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 671.012039][T12217] CPU: 1 PID: 12217 Comm: syz.2.1983 Not tainted 6.6.95-syzkaller #0 [ 671.020091][T12217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 671.030141][T12217] Call Trace: [ 671.033407][T12217] [ 671.036321][T12217] dump_stack_lvl+0x16c/0x230 [ 671.040984][T12217] ? show_regs_print_info+0x20/0x20 [ 671.046168][T12217] ? load_image+0x3b0/0x3b0 [ 671.050656][T12217] panic+0x2c0/0x710 [ 671.054543][T12217] ? bpf_jit_dump+0xd0/0xd0 [ 671.059035][T12217] ? _raw_spin_unlock_irqrestore+0xa9/0x110 [ 671.064911][T12217] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 671.070798][T12217] ? _raw_spin_unlock+0x40/0x40 [ 671.075627][T12217] ? print_memory_metadata+0x314/0x400 [ 671.081066][T12217] ? rose_get_neigh+0x391/0x990 [ 671.085901][T12217] check_panic_on_warn+0x84/0xa0 [ 671.090816][T12217] ? rose_get_neigh+0x391/0x990 [ 671.095648][T12217] end_report+0x6f/0x140 [ 671.099870][T12217] kasan_report+0x128/0x150 [ 671.104357][T12217] ? rose_get_neigh+0x391/0x990 [ 671.109193][T12217] rose_get_neigh+0x391/0x990 [ 671.113856][T12217] rose_connect+0x417/0x10a0 [ 671.118430][T12217] ? aa_sk_perm+0x7fc/0x930 [ 671.122909][T12217] ? rose_bind+0x7c0/0x7c0 [ 671.127303][T12217] ? aa_af_perm+0x200/0x2b0 [ 671.131778][T12217] ? tomoyo_socket_connect_permission+0x164/0x290 [ 671.138168][T12217] ? __might_fault+0xaa/0x120 [ 671.142831][T12217] ? bpf_lsm_socket_connect+0x9/0x10 [ 671.148108][T12217] ? security_socket_connect+0x80/0xa0 [ 671.153551][T12217] ? rose_bind+0x7c0/0x7c0 [ 671.157953][T12217] __sys_connect+0x397/0x420 [ 671.162524][T12217] ? __sys_connect_file+0x180/0x180 [ 671.167716][T12217] __x64_sys_connect+0x7a/0x90 [ 671.172456][T12217] do_syscall_64+0x55/0xb0 [ 671.176853][T12217] ? clear_bhb_loop+0x40/0x90 [ 671.181505][T12217] ? clear_bhb_loop+0x40/0x90 [ 671.186167][T12217] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 671.192041][T12217] RIP: 0033:0x7fc14bb8e929 [ 671.196434][T12217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 671.216022][T12217] RSP: 002b:00007fc14c93e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 671.224412][T12217] RAX: ffffffffffffffda RBX: 00007fc14bdb6080 RCX: 00007fc14bb8e929 [ 671.232360][T12217] RDX: 0000000000000040 RSI: 0000200000000040 RDI: 0000000000000008 [ 671.240314][T12217] RBP: 00007fc14bc10b39 R08: 0000000000000000 R09: 0000000000000000 [ 671.248262][T12217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 671.256214][T12217] R13: 0000000000000000 R14: 00007fc14bdb6080 R15: 00007fff0b634278 [ 671.264166][T12217] [ 671.267390][T12217] Kernel Offset: disabled [ 671.271701][T12217] Rebooting in 86400 seconds..